Email diagnostic tools
Live checks of a domain's email configuration: authentication (SPF, DKIM, DMARC, DANE, BIMI), transport security (MTA-STS, TLS-RPT, certificates), MX and DNS, blocklists and the connection to mail servers and mail clients, individually or bundled in the Domain Check. Records and endpoints are resolved, rated and checked for common mistakes. No sign-up, no test mails; only publicly reachable DNS records and services are evaluated.
Overview
DNS
Email authentication
SPF Check
Find the SPF record, check its syntax, count DNS lookups against the limit of 10.
DMARC Analyzer
Read the DMARC record and assess policy, alignment and reporting addresses.
DKIM Lookup
Query the DKIM public key, check the real key length and the record status.
MTA-STS and TLS-RPT Check
Check the MTA-STS record and HTTPS policy, MX comparison, certificate, TLS-RPT.
DANE Check
Check the TLSA records of the MX hosts: DNSSEC, Usage/Selector/Matching, coverage.
BIMI Check
Check a domain's BIMI record: logo URL, SVG profile, VMC and the DMARC precondition.
TLS & certificates
Client configuration
Autodiscover Check
Check Exchange Autodiscover: DNS entries, certificate and an anonymous endpoint test on port 443.
Autoconfig Check
Check Thunderbird auto-configuration: SRV records, autoconfig XML and the Mozilla ISPDB.
IMAP/POP3/SMTP TLS Test
Check a mail server host on the client ports 143/993/110/995/587/465: TLS, certificate, capabilities.