Free tool · No signup

Email domain checker: is your domain ready for cold email?

We check MX, SPF, DKIM, DMARC, 9 blacklists and domain age, then tell you exactly what to fix. Takes about 2 seconds.

One record at a time: MX lookup · SPF checker · DMARC checker · DKIM checker · Blacklist check

01

MX records

Can the domain receive replies, and which provider hosts it.

02

SPF

One record, a strict ending, and under the 10 DNS lookup limit.

03

DKIM

Signing keys on 23 common selectors, plus your own.

04

DMARC

The policy Gmail and Yahoo require, and whether anyone reads the reports.

05

Blacklists

Spamhaus, SURBL, URIBL for the domain. ZEN, Barracuda, SpamCop and more for your mail servers.

06

Domain age

Domains younger than 30 days need a warm-up before any cold email.

Example report

What you get back for a domain.

This is a sample for acme.com, not a live result. Every row says what we found and, when something is wrong, the exact record to change.

Deliverability check

acme.com

Ready for cold email.

Google WorkspaceAll checks pass
  1. MX records

    Receives mail through Google Workspace.

    Show records
    • 1 aspmx.l.google.com
    15/15
  2. SPF

    Valid, ends with ~all.

    Show records
    • v=spf1 include:_spf.google.com ~all
    • 4 of 10 DNS lookups used
    20/20
  3. DKIM

    Key found for selector google.

    20/20
  4. DMARC

    Policy is p=quarantine.

    Show records
    • v=DMARC1; p=quarantine; rua=mailto:d@acme.com
    20/20
  5. Blacklists

    Not listed on 5 checks.

    20/20
  6. Domain age

    11 years old.

    Show records
    • Registered 2015-01-01
    5/5
MTA-STS Not published. Optional, does not affect the score.BIMI Not published. Optional, does not affect the score.
Checked 1.4 s

The grade

How the 0 to 100 score reads.

Each check adds points for what is right and takes them away for what could cost you mail. The score turns into a letter so you can tell at a glance whether to send.

GradeScoreWhat it means
A90 to 100Ready. Nothing in the way of sending.
B75 to 89Close. Fix the warnings before you ramp up.
C60 to 74Risky. Something will cost you inbox placement.
D40 to 59Fix before you send a cold email.
F0 to 39Not ready. Expect filtering or rejection until the failing rows are fixed.

Optional records like MTA-STS and BIMI are shown but never change the score. Want one record in depth? Use the MX lookup, SPF checker, DMARC checker, DKIM checker or Blacklist check.

About the domain checker

What does an email domain checker look at?

The DNS records and reputation signals that decide whether your mail is accepted: MX (can the domain receive replies), SPF (which servers may send for it), DKIM (the signature on each email), DMARC (what receivers do when those fail), blacklists for the domain and its mail servers, and how old the domain is.

Is the checker free?

Yes. It needs no signup and no card. Type a domain and the full report opens in about two seconds. Ballast runs the same check every day on the domains you send from.

Why do I need SPF, DKIM and DMARC for cold email?

Gmail and Yahoo require all three from bulk senders. Without them your emails are more likely to land in spam or be rejected, and anyone can send mail that looks like it comes from your domain.

DMARC checker

Which DKIM selector do you check?

23 common selectors, which covers Google Workspace, Microsoft 365 and most email services. If yours is custom, type it in the form and the checker looks it up.

DKIM checker

My domain is new. Can I send cold email today?

Not safely. A domain younger than 30 days needs a warm-up first, and the report says so. Set up the records, connect the mailbox and let warmup run before the first campaign.

How warmup works

What if my domain is on a blacklist?

The report names the list and what it means. Some listings are about the domain, some about the mail server's IP, and the fix differs. Stop sending from the domain until you know which one it is.

Blacklist check

Is a result stored or public?

Results are cached for ten minutes so a repeat check is fast. A result page isn't indexed by search engines, and the checker only reads public DNS records and public blacklists.

Ballast runs this check every day, for every domain you send from.

Cold email with guardrails built in, every feature on every plan, from $19 a month.