Free tool

SPF and DMARC checker

Enter the domain you send from. We read its DNS and grade the four records that decide inbox or spam.

How it works

Public DNS only. We never touch your mail.

  1. 1

    MX and SPF

    We look up the mail servers, then the SPF record. We follow every include and count the DNS lookups, because more than 10 breaks SPF silently.

  2. 2

    DMARC

    We read the record at _dmarc on your domain and grade its policy. None watches, quarantine sends to spam, reject blocks.

  3. 3

    DKIM

    DKIM keys hide behind selectors and DNS has no index of them. We try the common ones (Google, Microsoft, the big senders). Not finding one proves nothing.

The four records

MX
The servers that receive mail for the domain. Without them, replies to you go nowhere.
SPF
A TXT record listing the servers allowed to send as your domain. It should end in -all (reject the rest) or ~all (mark the rest).
DMARC
Tells receivers what to do when a message fails SPF and DKIM, and where to send reports. Gmail and Yahoo require one from bulk senders.
DKIM
A signature on every message, checked against a public key in DNS. Proves the mail is yours and untouched.
Pass, warning, fail
Pass is set up right. Warning works but is weak, like p=none or ~all. Fail is missing or broken, and costs you the inbox.

Questions

Why does this matter for cold outreach?
Gmail, Yahoo and Microsoft check SPF, DKIM and DMARC on every message. Missing or broken records send your mail to spam or get it rejected, no matter how good the list is.
DKIM says not found, but I set it up.
Probably fine. DKIM keys live under a selector only your provider knows, and DNS cannot list them. We try the common selectors. Send yourself a message and check the DKIM-Signature header for the real one.
What is the 10 lookup limit?
SPF allows at most 10 DNS lookups while a receiver evaluates it, includes and their includes counted. Go over and SPF fails for every message. Flatten includes or drop services you no longer use.
Should DMARC be p=reject?
Eventually. Start at p=none with a report address, check that all your real mail passes, then move to quarantine and reject. p=none forever protects nobody.
Does nvoke send email?
No. nvoke finds companies and checks addresses. It never sends a message. Use this checker before you send from your own tools.

One check is a toy. A list is a pipeline.

Paste your site. nvoke finds the companies that buy from you, reads their websites, checks every address and drafts an opener for each. 50 verified emails a month, free.

Start free

In your browser. No card.