Free domain scan
How well is your domain's email protected?
Check any domain's SPF, DKIM, DMARC, MTA-STS, TLS-RPT, DNSSEC and blocklist standing in seconds. The report is scored by the same engine MailThreatZero runs on every protected domain, and every problem comes with the exact DNS record that fixes it.
Free, no sign-up. Paste a domain, an email address or a web address. Up to 10 scans an hour from one address.
Keep this domain under watch
This scan is one moment. On a protected domain MailThreatZero re-runs it about every six hours, adds what receivers report in DMARC aggregate reports and the domain's registration expiry, and emails you once when something changes, with the fix attached.
- Inbound filtering, quarantine and per-message verdicts that explain themselves
- DMARC report collection and alerting for every domain
- One console for every customer domain, from $39 per protected domain per month
What the scan reads
- Authentication. SPF (with its lookup count), DMARC policy and reporting, and DKIM keys for the selectors your mail platform uses.
- Mail-security DNS. MX, MTA-STS and its policy file, TLS-RPT, DNSSEC and BIMI.
- Blocklists. Your own sending servers against SpamCop, Barracuda and PSBL. Shared servers at Microsoft 365, Google and similar providers carry thousands of senders, so they are never scored against you.
- Unknown is never a pass. A source that does not answer is shown as Unknown and adds or removes nothing.
Nothing is stored: not the domain you scan and not the result. Your address is counted for the hourly limit and nothing else. See the full report a protected domain gets.