paulobrien.dev

Tools DNS checker

DNS checker

Free for subscribers

See what's stopping your email reaching the inbox.

Inspect your domain's email and security settings in plain English: SPF, DKIM, DMARC, MX, MTA-STS, blocklists and when the domain expires. If something is missing, we give you the exact record to copy and paste where you manage your domain.

Built with Workers, DNS over HTTPS

Free for subscribers

Subscribe free to use the DNS checker, up to 20 a day. Subscribers can use every tool on paulobrien.dev and hear when there's something new.

Only the domain name is checked. Nothing about your email is read or kept, and reports are deleted after 7 days.

Example report

brightwell.co.uk

8/9
Nearly thereOne thing to fix: DMARC is only watching, not protecting.
✓SPF-all
✓DKIMgoogle._domainkey
!DMARCp=none
✓MXGoogle Workspace
✓MTA-STSenforce
✓Blocklistsclean on 10
✓Domain expiry14 Mar 2028

// what it checks

What you get.

Who can send as you

SPF, DKIM and DMARC, read the way a receiving mail server reads them, with the fix spelt out.

Where your mail goes

MX records, the provider behind them and whether MTA-STS keeps mail encrypted on the way in.

Trouble spots

Ten blocklists, the domain's expiry date and the registrar, so nothing lapses quietly.

Everything it looks at

  • SPF
  • DKIM
  • DMARC
  • MX records
  • Reverse DNS
  • MTA-STS
  • BIMI
  • DNSSEC
  • CAA
  • Nameservers
  • Blocklists
  • Parked domain protection
  • Registrar
  • Transfer lock
  • Domain expiry

// how it works

Three steps.

  1. Type your domain

    Just the domain, such as yourcompany.co.uk. You never sign in to your domain or your email.

  2. Get a score out of 10

    Every record is read the way a receiving mail server reads it, with a plain English verdict on each.

  3. Copy the fix

    Anything missing or wrong comes with the exact record to add where you manage your domain.

// questions

Good to know.

Do I need to give you access to my domain?

No. The DNS checker only reads the public records anyone can look up. You never sign in to your domain or your email.

Why does this matter?

Gmail, Yahoo and Microsoft now expect SPF, DKIM and DMARC to be set up properly. If they're missing or wrong, your email is more likely to land in junk or be turned away.

What does it cost?

Nothing. Subscribe free to paulobrien.dev and you can run up to 20 a day, and use every other tool on the site.

Stay in the loop

Subscribe for updates.

Leave your email and I'll tell you when there's a new version of one of my apps, or a new project to try. You can also use every tool on this site, free.

That didn't work. Please check your email address and try again.

One email to confirm. Unsubscribe with one click. Your address is only used for these updates.