Free tool · No sign-up
Is your domain ready
to land?
Gmail and Outlook check these four DNS records before they read a single word you wrote. See your setup the way receivers see it — in plain language.
Free, no sign-up needed. The checks run right in your browser against public DNS — the domain you type never touches our servers.
Why these four records decide everything
SPF — who may send
Lists the servers allowed to send email for your domain. Without it, anyone can impersonate you — so receivers assume the worst about everyone.
DKIM — proof it wasn't altered
A cryptographic signature on every email. It's how Gmail knows the message that arrived is the message you sent, from the domain you claim.
DMARC — your enforcement policy
Tells receivers what to do when SPF or DKIM fail. Required by Gmail and Microsoft for bulk senders since 2024 — cold email without it starts penalized.
MX — where replies land
Cold email exists to get replies. No MX records means every reply bounces — and a domain that only sends but never receives looks like a spam cannon.
Questions, answered honestly
What does this tool check?
Four things receivers actually look at: SPF (who may send for your domain), DKIM (whether your mail is cryptographically signed — we test 14 common selectors), DMARC (your anti-spoofing policy, required by Gmail and Microsoft for bulk senders since 2024), and MX (whether replies to your domain have anywhere to land).
Is it really free? What's the catch?
Really free, no sign-up, no email gate. The checks run in your browser against public DNS resolvers — the domain you type never even reaches our servers. The honest catch: if the check finds problems, we'll suggest Norbelys — our cold email platform that monitors this continuously — as one way to fix them. You can take the advice and fix everything yourself instead.
The DKIM check says no key found, but I set one up. Why?
DKIM keys live under a selector name you choose (like google._domainkey or s1._domainkey). We test 14 selectors that big providers use by default, but if yours is custom we can't guess it — check the DKIM settings of your email provider for the exact selector name.
My domain passed everything. Am I safe to send cold email?
You're safe to start — authentication is the entry ticket, not the whole game. Reputation is earned send by send: clean lists, low bounces, real engagement, honored unsubscribes. That ongoing part is exactly what Norbelys automates.
How is this different from MXToolbox or dmarcian?
Those are excellent general-purpose DNS suites. This check is opinionated for cold email senders: it tests the four records that decide whether outreach lands, explains each result in plain language, and tells you what to do next — no tabs, no jargon.