SPF
Verifies that the connecting IP is authorised to send for the envelope domain.
Free SMTP server diagnostics
Send a test email from the server you want to diagnose. We capture the SMTP session, verify SPF, DKIM, DMARC, ARC, and seven more checks — while you watch every command and reply stream in real time.
We create a temporary inbox just for you. Copy the address and host shown on screen — it stays active for 10 minutes.
Send a test email from the server or application you want to diagnose. The SMTP session streams live as your server connects.
SPF, DKIM, DMARC, PTR, blocklists, spam scores and more — all verified against the actual message your server delivered.
Every check runs against the message your server actually delivered — no guesswork, no assumptions.
Verifies that the connecting IP is authorised to send for the envelope domain.
Cryptographically re-verifies the signature against the public key in DNS — not just what the receiving server reported.
Checks alignment of SPF and DKIM results against the From domain and evaluates the published policy.
Validates the Authenticated Received Chain — essential for diagnosing DMARC failures through forwarders and mailing lists.
Confirms the connecting IP has a reverse DNS record and that it forward-confirms (FCrDNS), then checks consistency with the HELO domain.
Checks RFC 2369 compliance and one-click unsubscribe support per RFC 8058 — required by Gmail and Yahoo for bulk senders.
Checks the connecting IP against multiple DNS-based blocklists (DNSBL).
Checks the sender's From domain against domain reputation lists (RHSBL) — an angle most tools miss.
Looks up when the sender domain was registered. Newly-registered domains carry elevated spam risk.
Submits the full message to Rspamd — the dominant filter in self-hosted mail stacks — and maps the score to a verdict.
Runs the message through SpamAssassin alongside Rspamd, so you see both perspectives in one run.
Checks whether the sender's domain publishes a BIMI record and validates any attached Mark Certificate (VMC).
Verifies that the connecting IP is authorised to send for the envelope domain.
Cryptographically re-verifies the signature against the public key in DNS — not just what the receiving server reported.
Checks alignment of SPF and DKIM results against the From domain and evaluates the published policy.
Validates the Authenticated Received Chain — essential for diagnosing DMARC failures through forwarders and mailing lists.
Confirms the connecting IP has a reverse DNS record and that it forward-confirms (FCrDNS), then checks consistency with the HELO domain.
Checks RFC 2369 compliance and one-click unsubscribe support per RFC 8058 — required by Gmail and Yahoo for bulk senders.
Checks the connecting IP against multiple DNS-based blocklists (DNSBL).
Checks the sender's From domain against domain reputation lists (RHSBL) — an angle most tools miss.
Looks up when the sender domain was registered. Newly-registered domains carry elevated spam risk.
Submits the full message to Rspamd — the dominant filter in self-hosted mail stacks — and maps the score to a verdict.
Runs the message through SpamAssassin alongside Rspamd, so you see both perspectives in one run.
Checks whether the sender's domain publishes a BIMI record and validates any attached Mark Certificate (VMC).
Verifies that the connecting IP is authorised to send for the envelope domain.
Cryptographically re-verifies the signature against the public key in DNS — not just what the receiving server reported.
Checks alignment of SPF and DKIM results against the From domain and evaluates the published policy.
Validates the Authenticated Received Chain — essential for diagnosing DMARC failures through forwarders and mailing lists.
Confirms the connecting IP has a reverse DNS record and that it forward-confirms (FCrDNS), then checks consistency with the HELO domain.
Checks RFC 2369 compliance and one-click unsubscribe support per RFC 8058 — required by Gmail and Yahoo for bulk senders.
Checks the connecting IP against multiple DNS-based blocklists (DNSBL).
Checks the sender's From domain against domain reputation lists (RHSBL) — an angle most tools miss.
Looks up when the sender domain was registered. Newly-registered domains carry elevated spam risk.
Submits the full message to Rspamd — the dominant filter in self-hosted mail stacks — and maps the score to a verdict.
Runs the message through SpamAssassin alongside Rspamd, so you see both perspectives in one run.
Checks whether the sender's domain publishes a BIMI record and validates any attached Mark Certificate (VMC).
Verifies that the connecting IP is authorised to send for the envelope domain.
Cryptographically re-verifies the signature against the public key in DNS — not just what the receiving server reported.
Checks alignment of SPF and DKIM results against the From domain and evaluates the published policy.
Validates the Authenticated Received Chain — essential for diagnosing DMARC failures through forwarders and mailing lists.
Confirms the connecting IP has a reverse DNS record and that it forward-confirms (FCrDNS), then checks consistency with the HELO domain.
Checks RFC 2369 compliance and one-click unsubscribe support per RFC 8058 — required by Gmail and Yahoo for bulk senders.
Checks the connecting IP against multiple DNS-based blocklists (DNSBL).
Checks the sender's From domain against domain reputation lists (RHSBL) — an angle most tools miss.
Looks up when the sender domain was registered. Newly-registered domains carry elevated spam risk.
Submits the full message to Rspamd — the dominant filter in self-hosted mail stacks — and maps the score to a verdict.
Runs the message through SpamAssassin alongside Rspamd, so you see both perspectives in one run.
Checks whether the sender's domain publishes a BIMI record and validates any attached Mark Certificate (VMC).
A few things worth knowing about how the tool works.
Every command and reply streams to your browser as it happens, syntax-highlighted and linked to the relevant check. See exactly what happened at the protocol level.
Accept, reject, drop or tarpit the connection mid-session without touching your server config. Useful for testing how sending systems handle various server responses.
Rspamd and SpamAssassin both run against your delivered message, giving you two independent spam filter scores in a single test.
Every result gets a stable URL you can share or revisit later. Results are kept for 30 days.