OTTRORA – Clarity across your IT
Login
Free diagnostic tool

How well is your domain
configured for email?

Inspect MX, SPF, DMARC and DKIM. Understand DNS responses, identify problems and find your next steps.

01 · Enter a domain02 · Start analysis03 · Follow the live diagnosis

A domain starts DNS checks only. For an email address, we check its domain and send a test email if you consent.

Advanced settings · DKIM

Up to three selectors. Find them at your mail provider or as s= in the DKIM-Signature header of a sent message. Without a selector, DKIM remains unchecked.

Queries use the selected provider. The domain and selectors are sent to this resolver; additional resolver hostnames are resolved via Cloudflare.

Mail test: While this page is visible, we check for your reply every 20 seconds. After leaving or switching tabs, you can resume within five minutes in the same browser tab/session. After that, you must start a new test.

DNS queries take up to approximately 15 seconds.

What is checked?

MX targets, A/AAAA and PTR, basic SPF syntax and nested references, DMARC policy, DKIM keys, and MTA-STS and TLS-RPT DNS records. NS, SOA and CAA records are also displayed.

Each finding identifies errors, recommendations or limitations. A record alone does not confirm successful delivery.

What else belongs to mailflow testing?

SMTP on port 25, STARTTLS and certificates, DANE/TLSA with DNSSEC validation, forward/reverse DNS of the actual sending server, IP reputation, and independent SPF/DKIM/DMARC verification of a test message are not included. The reply test checks this specific round trip.

Can I export the DNS zone?

You receive a BIND-style snapshot of discovered records within the domain. Unknown names cannot be enumerated completely. Obtain a complete, importable zone export from your DNS provider; zone transfers (AXFR) are usually blocked.

References: SPF (RFC 7208) · DMARC (RFC 9989) · DKIM keys (RFC 8301)