Check your domain (free, passive)

What we look at: only public DNS records: MX, SPF, DMARC, and the DKIM selectors google, selector1, selector2, default, k1. To count how many DNS lookups your SPF record needs (the limit is 10), the check also reads the SPF records of the services your record names, for example _spf.google.com. DNSSEC is read from the resolver's "validated" flag. The MTA-STS and TLS reporting records (_mta-sts, _smtp._tls) are read too; the MTA-STS policy file on your own web server is not. What we do not do: scan ports, try logins, test for vulnerabilities, or look up breach databases.

The check runs in your own browser. The domain you type is sent from your browser to Cloudflare's public DNS-over-HTTPS resolver (cloudflare-dns.com) for the lookup. It is not sent to WispBinder and nothing is stored. See Privacy.

Prefer to check by hand? Run these commands (Windows PowerShell or Mac/Linux terminal):

nslookup -type=txt yourdomain.com          (look for v=spf1)
nslookup -type=txt _dmarc.yourdomain.com   (look for v=DMARC1; p=...)
nslookup -type=txt google._domainkey.yourdomain.com
nslookup -type=mx yourdomain.com

What the results mean and how to improve them: DMARC/SPF/DKIM guide for tax offices.

Deeper tests need a server (blacklists, encrypted connections to your mail server, the MTA-STS policy file), so this page does not do them. If you want them, free third-party tests include internet.nl email test and MxToolbox Domain Health (one free check per 24 hours). They are not run by WispBinder: the domain you type there is sent to them, and their own privacy terms apply.