📧 Free · no signup · no app install · read-only
Does mail from this domain reach the inbox, or get filtered on the way in?
Since February 2024 Gmail and Yahoo have required bulk senders to publish SPF, DKIM and DMARC — Google draws the bulk line at 5,000 messages a day to Gmail addresses. We read your public DNS — the exact same records a receiving mail server pulls — and show you what they see, verbatim.
Based on publicly available data only. Informational, not legal advice.
What this checks
- MX records — where this domain receives mail, and which provider runs it
- SPF — whether it exists, whether there is exactly one, whether it names any permitted sender, and how it ends (-all / ~all / ?all)
- The SPF 10-lookup limit, which voids a record once it is exceeded, silently
- DKIM keys on eight well-known selectors (Shopify, Google Workspace, Microsoft 365, SendGrid, Mailchimp…)
- DMARC — the record itself, the p= policy, and whether reports go anywhere
- BIMI, the record that puts your logo beside your mail in Gmail — once DMARC is enforced, which is what Gmail requires first
- Whether the DNS half of the Gmail and Yahoo bulk-sender rules is in place — the other half lives in the message and we say so rather than guess
FAQ
Why does DKIM often come back as “could not tell”?
Because DNS has no way to list selectors. You cannot ask a domain “show me every DKIM key you publish” — you can only guess names and see which ones answer. We probe eight of the most common ones. If none answers, that means we did not find a key, not that you have none, and we report it that way.
If everything passes, will my email land in the inbox?
No. Authentication is the entry ticket, not the seat. Placement also depends on your content, list hygiene, sending history and complaint rate. Three of Gmail's own requirements — the one-click unsubscribe header, TLS on delivery, and keeping spam complaints under 0.3% — live in the message and in Postmaster Tools, not in DNS. We can read DNS. We cannot read those, and we do not pretend to.
Which domain should I enter?
The domain in your From: address — usually your custom domain. We strip a leading www. for you, because mail authentication is published on the bare domain. If you enter a yourstore.myshopify.com address, the DNS belongs to Shopify rather than to you and the result will not describe your own sending setup.
Want SPF, DKIM and DMARC set up once and properly — then the domain warmed up before the first campaign?
We are a Shopify studio. The audit is free; the fix is yours to make — or ours to ship.