Sora Mail › Free domain check
Is your email going to spam? Check your domain free.
Type your domain or your email address. In a few seconds we check what Gmail and Outlook check on every message you send, and tell you in plain English what's working and what to fix.
Free, no sign-up. We only read public DNS records and don't keep the domains people check.
What we check, and why it matters
Every mail server that receives a message from you asks a few questions about your domain before it decides between the inbox, the spam folder and the bin. These are the answers it finds.
Gmail and Outlook got strict in 2024 and 2025
The big mailbox providers now expect every sender to prove who they are. Domains that can't are filtered to spam or turned away, and many businesses never find out.
Everyone sending to Gmail needs SPF or DKIM. Anyone sending more than 5,000 messages a day needs all three:
- SPF and DKIM
- DMARC (p=none is enough to start)
- a From address that matches the domain that signed
- one-click unsubscribe on marketing mail
Microsoft brought in the same rules for its consumer mailboxes: domains sending more than 5,000 messages a day need SPF, DKIM and DMARC, or their mail is rejected.
From late 2025 Gmail also began rejecting more mail that doesn't comply, instead of only sending it to spam.
Sending far fewer than 5,000 a day? The same records still decide whether your mail reaches the inbox: they're how a receiver tells your real mail from a fake.
About the check
Usually because your domain is missing one of the three records Gmail and Outlook check on every message: SPF, DKIM and DMARC. Without them a receiver can't tell your real mail from a fake, so it plays safe and sends it to spam. Other common causes are a domain or mail server on a blocklist, and an SPF record that has grown past its limit of 10 lookups.
Yes, it's free and there's no sign-up. We only read your domain's public DNS records, the same ones every mail server reads. We don't store the domains people check or log who checked them; a result is kept in memory for ten minutes so a second look is instant.
It means monitor only: receivers send you reports but still deliver mail that fails the checks, so it doesn't stop anyone faking your address. It's the right first step. Once the reports show all your real mail passing, move to p=quarantine and then to p=reject.
A DKIM key lives under a name called a selector, chosen by whoever sends your mail, and there's no way to list them. We try the common ones (Google, Microsoft, iCloud, Fastmail and others). If yours uses a different name we can't see it, which doesn't mean it's missing. To be sure, send a message to a Gmail address and choose Show original: it should say DKIM: PASS.
They're extra protection, not requirements. MTA-STS makes sure mail sent to you always travels encrypted, and TLS reports tell you when that goes wrong. Most small businesses don't have them yet.
Spamhaus's free service is for non-commercial use only, so a free tool run by a company can't use it. We check URIBL, plus Barracuda and SpamCop for your own mail server, and link to Spamhaus's own lookup so you can check there yourself.
Yes. It works for any public domain: .com.au, .net.au, .org.au, .au and every other ending, including domain names in other languages.
Never think about this again
Sora Mail sets up SPF, DKIM and DMARC for you on day one (MTA-STS too, when you want it), then watches them and the blocklists every day. Try it free for 14 days, no card needed.
Start free Moving from Google Workspace, Microsoft 365, iCloud+ or Fastmail? Read the guide.