Live domain scan
This free DMARC checker scans your DMARC, SPF, DKIM, MX and blacklists live, then tells you exactly what to fix. No jargon, no sign-up.
Example report
yourcompany.com
FAIL: Some of your email is going to spam
2 things to fix, about 10 minutes
Gmail and Outlook can't confirm your email is from you, so more of it lands in spam.
Get SPF down to 10 lookups. Remove services you no longer send from, or replace includes with the ip4: ranges they cover.
Your SPF record needs 12 DNS lookups. Inboxes stop at 10, so the whole record fails.
12 DNS lookups. The limit is 10, so SPF fails at many inboxes.
v=spf1 a mx include:_spf.google.com include:spf.protection.outlook.com include:sendgrid.net include:servers.mcsv.net include:mail.zendesk.com include:spf.mandrillapp.com include:_spf.salesforce.com include:mktomail.com ~allGmail, Yahoo and Outlook expect a DMARC record. Without one, more of your email goes to spam.
Add a DMARC record. Use p=quarantine so email pretending to be you goes to spam, and add rua=mailto: with an address you read to get daily reports.
Sponsored
EasyDMARC
Want your DMARC reports read for you? EasyDMARC watches them and flags problems.
There's no DMARC record. If you send more than 5,000 emails a day, Gmail, Yahoo and Outlook reject email without one.
No DMARC record. Gmail, Yahoo and Outlook will junk or reject bulk email from this domain.
Replies reach you at Google Workspace.
Mail for this domain goes to Google Workspace.
Not on any blacklist that counts.
Not listed on any of the 15 public blacklists we check, including SpamCop and Barracuda.
Worth tidying. This doesn't change where your email lands.
Works today. A stronger 2048-bit key is the new standard.
The google key is 1024-bit. Inboxes accept it, but new keys are 2048-bit.
Signing key found for the google selector. The key is 1024-bit; 2048-bit is now the standard.
This is an example, not a live check. Look up DMARC on its own
Google, Yahoo and Microsoft now junk or reject bulk email that fails these checks. This DMARC checker tests every one.
| Requirement | Gmail | Yahoo | Outlook |
|---|---|---|---|
| In force since | Feb 2024 | Feb 2024 | May 2025 |
| SPF passes | Required | Required | Required |
| DKIM passes | Required | Required | Required |
| DMARC record, at least p=none | Required | Required | Required |
| From address lines up with SPF or DKIM | Required | Required | Required |
| One-click unsubscribe | Required | Required | Advised |
| Spam complaints under 0.3% | Required | Required | Advised |
Applies to bulk senders. Google and Microsoft set the line at 5,000 emails a day.
Each tool digs into one record and gives you a fix you can copy and paste.
Reads your DMARC policy in plain English and tells you if it meets the bulk sender rules.
Build a correct record with a safe starting policy.
Counts DNS lookups against the limit of 10 and spots errors.
Tick the services you send from and get a valid record.
Finds your signing key for Google, Microsoft and the main sending tools.
Checks your mail servers, or any IP, against 15 email blacklists.
How many domains, inboxes and warm-up days you need.
Step-by-step fixes for each failure, for Google Workspace, Microsoft 365 and more.
Cold email calculator
Enter how many cold emails you want to send a day. LeadLamp works out the domains and inboxes you need, what they cost and how long to warm them up.
Emails per day
500
17 inboxes
at 30 emails each a day
6 domains
3 inboxes per domain
About $60/mo
inboxes at $3.50 each
2–3 weeks
warm-up before full volume
Example using common safe limits. Change any of them in the calculator.
Records change when someone switches provider, adds a sending tool or edits the wrong line. LeadLamp checks your domain every day and emails you the moment something changes. No change, no email.
How LeadLamp handles your details: privacy policy.
It reads the DMARC record in your domain’s DNS and tells you your policy, whether it is set up correctly, and whether you meet the Gmail, Yahoo and Outlook rules. LeadLamp checks SPF, DKIM, MX and blacklists at the same time.
Usually a missing or broken SPF, DKIM or DMARC record, a blacklist listing, or too much email from a new domain. The scan above shows which one it is, and our guide covers all nine reasons.
DMARC tells inboxes what to do with email that fails SPF and DKIM. Gmail, Yahoo and Outlook require it for bulk senders, and it stops other people sending as you.
Yes. DNS records are public, so you can check your own domain, a client’s or a competitor’s.
Yes. Every scan is free with no sign-up. Some tool recommendations are partner links, which pay us a commission at no extra cost to you.
No. Reports are never saved as public pages. We keep a private log of which domains were checked and which checks failed, so we can write better fixes. Your IP address isn’t stored.