About the Mail Deliverability
This tool runs a complete mail-deliverability check on a domain and gives it a single score out of 100 with an A–F grade. In one request it looks up the MX records, parses the SPF policy (counting DNS lookups and checking the all qualifier), reads the DMARC policy, probes common DKIM selectors, and for the primary mail server it checks reverse DNS (forward-confirmed, FCrDNS) and whether the IP is on any well-known blacklist. Each dimension is scored and you get a prioritised list of what to fix.
It is the fast way to answer "is this domain set up to send and receive mail reliably, and will its messages land in the inbox?" — without running six separate tools. The checks are read-only DNS lookups from our server, so nothing is sent and no email is required. DKIM is probed at a list of common selectors; because the selector is chosen by the sender, the only way to confirm DKIM definitively is to inspect a real signed message — an inbox tester for that is on the roadmap.
How to use it
- Enter the domain you send mail from (e.g. example.com).
- Submit to run MX, SPF, DMARC, DKIM, PTR and blacklist checks in one shot.
- Read the A–F grade and score, then the per-check pass/fail breakdown.
- Work through the recommendations, highest-impact first.
Examples
- Audit a domain's email setup before going live.
- Diagnose why a domain's mail lands in spam.
- Confirm SPF, DKIM and DMARC are all present and aligned.
- Check whether your mail server's IP is blacklisted.
Frequently asked questions
How is the score calculated?
Each dimension carries a weight: MX 25, SPF 20, DMARC 20, DKIM 15, reverse DNS (FCrDNS) 10 and blacklist status 10. A dimension that passes adds its full weight; the total is your score out of 100, mapped to an A–F grade. The breakdown shows exactly which checks passed or failed and why.
Why does DKIM sometimes show as not found?
DKIM keys are published under a selector that the sender chooses, so there is no way to discover it from DNS alone. This tool probes a list of common selectors (google, default, selector1/2, k1, and others). If your provider uses a custom selector it may not be in the list — that does not necessarily mean DKIM is broken. The definitive check is to inspect a real signed message.
Does this send a test email?
No. Every check is a read-only DNS lookup performed from our server, plus a reverse-DNS and blacklist check on your mail server's IP. No email is sent and nothing is delivered. To analyse an actual message you send (spam score and the real DKIM signature), an inbox-based tester is planned.
What is FCrDNS and why does it matter?
Forward-confirmed reverse DNS means the mail server's IP has a PTR record whose hostname resolves back to that same IP. Many receivers, including large mailbox providers, check this and penalise or reject senders whose reverse DNS does not forward-confirm. It is a basic signal of a legitimately operated mail server.
My domain only receives mail — do I still need SPF, DKIM and DMARC?
If a domain never sends mail, a strict SPF record and a DMARC reject policy actually help by telling the world that nobody should be sending as that domain, which blocks spoofing. For domains that do send, all three plus good reverse DNS are what get your mail into the inbox.
Is a perfect score a guarantee of inbox placement?
No. A high score means your authentication and infrastructure are configured correctly, which is necessary but not sufficient. Inbox placement also depends on sending reputation, content, list hygiene and engagement. This tool covers the technical foundation that you fully control.