exim.ro

Email DNS check

Enter a domain to see its mail servers and the records that decide whether its e-mail is trusted: SPF, DKIM, DMARC, MTA-STS, TLS-RPT and BIMI.

DKIM selector optional

Selectors cannot be listed from DNS, so we try common ones. If you know yours (it is the s= value in a message's DKIM-Signature header), enter it here.

DKIM-Signaturein a message's headers
v=1; a=rsa-sha256; d=example.com; s=s2024; c=relaxed/relaxed; …

What is checked

MX
Which servers receive mail for the domain, in what order, and whether each one resolves to a reachable address.
SPF
Which servers may send mail as the domain. The whole include tree is followed and its DNS lookups counted against the limit of 10.
DKIM
Public keys for signature checks, at the selector you give and at common selectors, with key type and size.
DMARC
What receivers should do with mail that fails SPF and DKIM, and where reports are sent. Every tag is explained.
MTA-STS
Whether sending servers must use TLS when delivering to the domain. The HTTPS policy is fetched and compared with the MX records.
TLS-RPT
Where sending servers report TLS delivery failures.
BIMI
The brand logo some mailboxes show, and whether the DMARC policy is strict enough for it.

Lookups go through our own recursive resolver. The domain you enter is not stored.

Background: Email DNS records: MX, SPF, DKIM and DMARC explained