Email Intelligence
The complete email authentication and deliverability workbench - SPF, DKIM, DMARC, mail routing, blacklists, and record validators, on top of a full health check.
- Secure
- Fast
- Anonymous
- No signup required
What this scan checks
Real-time verificationMX
Mail routing and provider.
SPF
Sender policy and DNS lookups.
DKIM
Signing keys and strength.
DMARC
Policy and enforcement.
Blacklist
Reputation and DNSBL listings.
Why use SignNexa?
Secure by design
Every check is read-only and runs from our servers. We don't store your scan or domain data.
Instant results
Domain, DNS, SSL, and email are checked together and scored in a few seconds.
Actionable fixes
Each issue comes with a plain-language explanation and a copy-ready fix.
About Email Intelligence
What this checks
Email Intelligence inspects the DNS records that decide whether your email reaches the inbox: SPF (which servers may send as your domain), DKIM (a cryptographic signature proving a message was not tampered with), DMARC (what a receiver should do when SPF or DKIM fail), plus MX (mail routing), blacklist status, and the advanced records - BIMI (your brand logo in the inbox), MTA-STS and TLS-RPT (enforced, monitored encryption). Together these are what Gmail, Outlook, and Apple Mail read before deciding to trust, spam-folder, or reject your mail.
How to read the result
SPF should exist and end in a strict qualifier; DKIM should be present with a modern key length; DMARC should exist and, ideally, enforce (a policy of quarantine or reject rather than none). A domain with all three passing is trusted; missing DMARC is the most common gap and the one most likely to let someone spoof you. The grade explains which record is weak and why.
What to do next
Open any check that needs attention and select "How to Fix" - it gives you the exact record to add, already filled in for your domain and detected mail provider, with copy-paste values and step-by-step guidance (our /help/email-deliverability guide covers the background). Changes take a few minutes in your DNS but can take up to a day to propagate, so re-check afterwards. Because these records get edited and occasionally broken over time, deliverability is worth monitoring on a schedule.