// domain scanner
Is your domain ready to send email?
Enter a domain: we check SPF, DKIM, DMARC, mail servers, blacklists, BIMI and encryption in a few seconds, and tell you what to fix in plain English.
Frequently asked questions
What does the domain scanner check?
Everything receivers look at before trusting an email from your domain: SPF (which servers may send for you), DKIM (the signature of your emails), DMARC (what to do with fakes), your mail servers (MX), domain blacklists, and the optional BIMI, MTA-STS and TLS-RPT records.
How is the score calculated?
SPF, DKIM and DMARC count the most, then blacklists and mail servers. BIMI, MTA-STS and TLS-RPT are optional bonuses: a domain without them can still score well.
Why is my DKIM key not found?
DNS cannot list the DKIM keys of a domain, so we try the most common selectors. If yours has a custom name, enter it in the selector field: it is the "s=" value of the DKIM-Signature header in an email you sent.
What is the difference with the email test?
The scanner checks the setup of a domain. The email test on the home page checks a real email: the server that sent it, its signature, its content and its spam score. Use both.