Skip to content
Free planPink Post has a Free plan, free for good. No card needed.See plans: Free $0, Solo $19, Pro $39, Agency $129
Pink Post

Email & deliverability

SPF, DKIM & DMARC checker

Enter a domain to test all three email authentication records plus MX in one go. You get a score out of 100, each record parsed in plain English, and the fix for anything missing. It runs live DNS lookups in your browser; nothing is stored.

Free, no signup. Results appear here.

On this page
  1. What this test checks
  2. How to read your result
  3. Fixing the common problems
  4. Why this matters for link building outreach
  5. FAQ

What this test checks

Mailbox providers ask three questions before they trust an email: is this server allowed to send for the domain (SPF), was the message signed by the domain and left unchanged (DKIM), and what does the domain owner want done when those checks fail (DMARC)? MX records answer a fourth question that matters for outreach: can this domain receive the reply?

Since February 2024 Google and Yahoo require bulk senders to have SPF, DKIM and a DMARC record, and expect every sender to authenticate with at least SPF or DKIM. A cold pitch from an unauthenticated domain is far more likely to land in spam, whatever the copy says.

How to read your result

  • SPF: we parse the record, follow every include:, and count DNS lookups. More than 10 is a permanent error and SPF fails for every message.
  • DKIM: keys live at selector._domainkey.domain. Leave the selector blank and we try about 40 common ones (Google Workspace uses google, Microsoft 365 uses selector1 and selector2). Not finding a key does not prove it is missing; it may use a selector we did not guess.
  • DMARC: we read the policy (p=none, quarantine or reject), reporting addresses and alignment.
  • MX: we list mail servers and name the provider when we recognise it.

The score weights SPF and DMARC at 30 points each, DKIM at 25 and MX at 15. It is a checklist, not a prediction of inbox placement.

Fixing the common problems

ProblemFix
No SPF recordAdd one TXT record at the root of the domain listing every service that sends for you, ending in ~all. For Google Workspace: v=spf1 include:_spf.google.com ~all.
Too many SPF lookupsRemove services you no longer use, replace a and mx with ip4: ranges, or keep one include per provider.
No DKIM keyTurn on DKIM signing in your email provider's admin console and publish the TXT or CNAME record it gives you.
No DMARC recordPublish v=DMARC1; p=none; rua=mailto:you@yourdomain at _dmarc, read the reports for a few weeks, then move to p=quarantine.

Why this matters for link building outreach

Outreach is one-to-one email from a real mailbox, often on a fresh domain or a teammate's address. Editors get dozens of pitches a day and their providers filter hard. Before your first campaign, run this check on every sending domain, then warm the mailbox up slowly. In Pink Post each connected mailbox has daily and hourly caps, warm-up that starts at 5 emails a day, and automatic pausing when bounces pass 5%.

FAQ

Questions, answered

Do I need SPF, DKIM and DMARC?

For reliable delivery, yes. Google and Yahoo require all three for bulk senders, and DMARC only passes when SPF or DKIM passes and aligns with your From domain.

Is the check accurate?

It reads live public DNS through Cloudflare's DNS-over-HTTPS resolver, the same records receiving servers see. Changes you just made can take up to the record's TTL to appear.

Why can't you find my DKIM key?

DKIM keys sit under a selector chosen by your provider. Open an email you sent, view the original, and find s= in the DKIM-Signature header. Enter that as the selector.

Does it store my domain?

No. Lookups run from your browser straight to the DNS resolver. Pink Post does not log them.

What score is good?

100 means all four parts were found with no errors. Anything under 75 has at least one fix worth making before you send cold email.

Put these checks to work in Pink Post.

Free plan, no card. Connect your mailbox, import prospects and send link-building outreach with caps, warm-up, reply handling and live link checks built in.