Skip to content
AdminKit

Best free DNS and email deliverability checkers

MxToolbox leads this roundup of eight free DNS and email-deliverability checkers by checking a domain or IP against 105+ DNS-based blacklists (mxtoolbox.com/blacklists.aspx, read 2026-10-26); DNSChecker, AdminKit, EasyDMARC, dmarcian, mail-tester, Google Admin Toolbox and intoDNS round out the ranking against five published criteria, with AdminKit landing third because its blacklist check and DNS leak test are still coming with the AdminKit API, not live today.

Ranked at a glance

  1. MxToolbox

    Best for: Bulk blacklist monitoring and the widest sourced DNSBL coverage (105+ lists)

  2. DNSChecker

    Best for: A single free check that already covers SPF, DKIM, DMARC and blacklist status, plus global DNS propagation

  3. AdminKit

    Best for: One combined free report across SPF, DKIM, DMARC, MX, DNS and WHOIS, without a blacklist check yet

  4. EasyDMARC

    Best for: Teams starting a DMARC rollout who want SPF/DKIM/DMARC/BIMI tools plus an XML aggregate-report analyzer

  5. dmarcian

    Best for: Ongoing DMARC enforcement with a dedicated management platform, from the co-creator of the DMARC standard

  6. mail-tester

    Best for: Testing how an actual outgoing email scores against spam filters, not just reading DNS records

  7. Google Admin Toolbox

    Best for: Google Workspace admins who want a quick Dig or Check MX lookup without leaving Google's own tools

  8. intoDNS

    Best for: A general DNS delegation and mail-server health audit — not a dedicated SPF/DMARC checker

AdminKit is built by Netbase JSC. AdminKit is listed below; the other tools are independent.

Criteria and how we weighted them

This roundup ranks eight tools against five published criteria, in priority order:

  1. Free access, no account for at least one SPF, DKIM or DMARC check — a tool that fails this outright is still listed if it’s well known, but ranks behind every tool that passes.
  2. Breadth of checks covered in one toolset: SPF, DKIM, DMARC, MX/general DNS, and blacklist, not just one of them.
  3. DNS-based blacklist (DNSBL) coverage specifically, since it’s the single feature most requested alongside SPF/DKIM/DMARC checking.
  4. Reporting or monitoring over time, for teams past a one-off check (aggregate-report analysis, scheduled rechecks).
  5. API or automation access, for teams wiring a check into their own pipeline.

Ranking from those criteria, not from preference, is why AdminKit is third rather than first: AdminKit fails criterion 3 outright today (no blacklist check live) and is weak on criterion 5 (no public API live), while MxToolbox and DNSChecker both have a live blacklist check and MxToolbox additionally has a paid monitoring product and a public API. The table below shows the same facts by feature; the list underneath explains each tool’s placement.

The ranked list, explained

1. MxToolbox — the broadest single option on these criteria. Per MxToolbox’s own blacklist page, read 2026-10-26, it checks a domain or IP against “100+” (105, by its own count) DNS-based blacklists, built up since the company’s 2004 founding (footer copyright: ”© Copyright 2004-2026, MXToolBox, Inc.”). Its SPF, DMARC and DKIM tools are free with no stated account requirement, and its homepage links to both an API product and a “Delivery Center” monitoring product. MxToolbox leads on four of the five criteria; it does not offer one combined multi-signal report page the way AdminKit or DNSChecker’s Email Verifier do.

2. DNSChecker — close behind, and arguably the most feature-dense free option here. Based on dnschecker.org’s own indexed pages, read 2026-10-26 (see the transparency note below), it has dedicated free SPF, DKIM and DMARC checkers, a live IP/domain/email blacklist checker, an Email Verifier that checks six signals (SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI) in one pass, and DNS propagation checking across a stated 100+ global server locations — all with no login required. What its own pages don’t state is a specific DNSBL list count (unlike MxToolbox’s “105+”) or any paid monitoring/API product, which is why it sits behind MxToolbox rather than ahead of it.

3. AdminKit — free, no account, and the only tool here besides DNSChecker’s Email Verifier with a combined report: AdminKit’s SPF check, DMARC check and DKIM check run alongside AdminKit’s DNS, MX, WHOIS and reverse-DNS tools on one site. AdminKit is behind MxToolbox and DNSChecker specifically because its blacklist check and its DNS resolver/leak test are both coming with the AdminKit Check API, not live today, and AdminKit has no public API or paid monitoring product yet either — two of the five criteria this page uses.

4. EasyDMARC — per easydmarc.com, read 2026-10-26, a broad free toolset: DMARC Record Checker and Generator, a DMARC XML Report Analyzer with GeoMaps, SPF and DKIM checkers and generators, BIMI tools, a Domain Scanner and a general DNS Record Checker, with no account stated as required for a single check (its 14-day free trial is for the paid platform). No blacklist check was found on its own pages, which, along with no general MX-lookup tool specifically named, keeps it behind the top three.

5. dmarcian — the DMARC standard’s co-creator, and per dmarcian.com and its SPF Surveyor page, read 2026-10-26, it offers free SPF Surveyor, DMARC Inspector, DMARC Record Wizard, DKIM Inspector and Validator, and BIMI tools, plus a paid DMARC Management Platform with a 30-day trial and professional deployment services. It’s narrower than EasyDMARC on general DNS/MX tooling and has no blacklist check, which is why it ranks just behind EasyDMARC on breadth despite a comparable, well-regarded DMARC-specific toolset.

6. mail-tester — per its own SPF & DKIM Checker and DMARC Checker pages, read 2026-10-26, both are free, read records directly from a domain without requiring a test email to be sent, and the site links to its own API documentation. But mail-tester’s headline product is a spam-score report generated by sending an actual email to a disposable test address — a different job (testing one real message) from the other seven tools’ job (reading DNS records for any domain on demand), which is why it ranks here rather than with the dedicated record-checkers above it.

7. Google Admin Toolbox — per toolbox.googleapps.com, read 2026-10-26, Google’s own free, unauthenticated admin utility belt includes Dig (a web equivalent of the Unix dig command) and Check MX, which per its own page validates “MX and SPF Records” — useful, but with no dedicated DKIM or DMARC checker found on Google’s own pages, no blacklist check, and no monitoring or API product (it’s a diagnostic utility, not a vendor product). That narrower scope places it behind every dedicated SPF/DKIM/DMARC checker in this roundup.

8. intoDNS — per intodns.com, read 2026-10-26, it “checks the health and configuration and provides DNS report and mail servers report,” covering DNS delegation, nameserver health, SOA, MX and A records. Its own report output does not check SPF or DMARC records at all, which is the single biggest reason it’s included here for completeness (it’s a well-known free DNS/mail-health tool) rather than ranked alongside the SPF/DKIM/DMARC-focused tools above it.

A transparency note on DNSChecker

Every automated fetch of dnschecker.org’s own pages for this comparison returned an HTTP 403 (blocked) at verification time (2026-10-26). Rather than drop a well-known, relevant tool from the roundup or guess at its feature set, the facts cited above come from that domain’s own publicly indexed page titles, descriptions and specific tool-page URLs — each one linked directly above so it can be checked by visiting dnschecker.org itself. This is the same honest-when-blocked approach AdminKit’s comparison with ipinfo.io and whatismyipaddress.com uses when a direct fetch fails.

Best for your specific need

  • A quick one-off SPF/DKIM/DMARC check, no account: AdminKit or DNSChecker — both run all three checks free, with no sign-up.
  • Bulk blacklist monitoring across many DNSBLs: MxToolbox, for its sourced “105+” list count and years of accumulated DNSBL relationships.
  • An ongoing DMARC rollout with aggregate-report analysis: dmarcian or EasyDMARC, both of which sell a dedicated platform for exactly this, beyond the free one-off checkers.
  • Wiring a check into your own pipeline: MxToolbox or mail-tester, the two tools here with a documented API product.
  • Testing how a real outgoing email will be treated by spam filters: mail-tester — the only tool in this roundup built around sending an actual test message.
  • A quick lookup from inside Google Workspace admin tooling: Google Admin Toolbox’s Dig or Check MX.
  • A general DNS delegation and mail-server health audit, not SPF/DMARC specifically: intoDNS.

Where AdminKit is honestly behind

AdminKit does not match MxToolbox’s or DNSChecker’s blacklist coverage today — the blacklist check is coming with the AdminKit Check API, not live — and AdminKit has no public API or paid monitoring product to compare against MxToolbox’s Delivery Center, EasyDMARC’s or dmarcian’s rollout platforms. What AdminKit does offer today is a free, no-account combined report across SPF, DKIM, DMARC, MX, DNS and WHOIS on one page, which is why it ranks third rather than last — ahead of tools that are narrower (Google Admin Toolbox), differently scoped (mail-tester, intoDNS), or that gate ongoing use behind a paid platform (EasyDMARC, dmarcian) sooner than AdminKit’s checks do.


Trademarks belong to their respective owners; AdminKit is not affiliated with MxToolbox, Inc., DNSChecker, EasyDMARC, dmarcian, Google, intoDNS or mail-tester.

AdminKit vs MxToolbox

DNS-based blacklist (DNSBL) / IP blacklist check

AdminKit Coming with the API
MxToolbox 105+ lists (own page)

Combined multi-signal report in one pass

AdminKit SPF+DKIM+DMARC+DNS+IP in one page
MxToolbox —

Paid monitoring/reporting platform or public API

AdminKit Coming with the API
MxToolbox Delivery Center + API (own page)

AdminKit vs DNSChecker

DNS-based blacklist (DNSBL) / IP blacklist check

AdminKit Coming with the API
DNSChecker ✓

Combined multi-signal report in one pass

AdminKit SPF+DKIM+DMARC+DNS+IP in one page
DNSChecker Email Verifier: SPF+DKIM+DMARC+MTA-STS+TLS-RPT+BIMI (own page)

Paid monitoring/reporting platform or public API

AdminKit Coming with the API
DNSChecker Not publicly listed

AdminKit vs EasyDMARC

DNS-based blacklist (DNSBL) / IP blacklist check

AdminKit Coming with the API
EasyDMARC —

Combined multi-signal report in one pass

AdminKit SPF+DKIM+DMARC+DNS+IP in one page
EasyDMARC —

Paid monitoring/reporting platform or public API

AdminKit Coming with the API
EasyDMARC Paid platform, 14-day trial (own page)

AdminKit vs dmarcian

DNS-based blacklist (DNSBL) / IP blacklist check

AdminKit Coming with the API
dmarcian —

General DNS lookup, MX records or WHOIS in the same toolset

AdminKit ✓
dmarcian —

Combined multi-signal report in one pass

AdminKit SPF+DKIM+DMARC+DNS+IP in one page
dmarcian —

Paid monitoring/reporting platform or public API

AdminKit Coming with the API
dmarcian Paid DMARC Management Platform, 30-day trial (own page)

AdminKit vs Google Admin Toolbox

Dedicated free SPF, DKIM and DMARC checkers, no account required

AdminKit ✓
Google Admin Toolbox SPF via Check MX only — no dedicated DKIM/DMARC checker (own pages)

DNS-based blacklist (DNSBL) / IP blacklist check

AdminKit Coming with the API
Google Admin Toolbox —

Combined multi-signal report in one pass

AdminKit SPF+DKIM+DMARC+DNS+IP in one page
Google Admin Toolbox —

Paid monitoring/reporting platform or public API

AdminKit Coming with the API
Google Admin Toolbox —

AdminKit vs intoDNS

Dedicated free SPF, DKIM and DMARC checkers, no account required

AdminKit ✓
intoDNS ✗

DNS-based blacklist (DNSBL) / IP blacklist check

AdminKit Coming with the API
intoDNS —

Combined multi-signal report in one pass

AdminKit SPF+DKIM+DMARC+DNS+IP in one page
intoDNS DNS + mail-server health combined (own page)

Paid monitoring/reporting platform or public API

AdminKit Coming with the API
intoDNS Not publicly listed

AdminKit vs mail-tester

DNS-based blacklist (DNSBL) / IP blacklist check

AdminKit Coming with the API
mail-tester —

General DNS lookup, MX records or WHOIS in the same toolset

AdminKit ✓
mail-tester —

Combined multi-signal report in one pass

AdminKit SPF+DKIM+DMARC+DNS+IP in one page
mail-tester Spam-score report combines signals when you send a test email (own page)

Paid monitoring/reporting platform or public API

AdminKit Coming with the API
mail-tester API + paid plans (own page)

Frequently asked questions

Is AdminKit ranked first because AdminKit wrote this page?

No — AdminKit ranks third. The criteria below are published before the ranking, and MxToolbox and DNSChecker both beat AdminKit on them: both already have a live DNS-based blacklist (DNSBL) check, and MxToolbox also has a paid monitoring product and a public API, none of which AdminKit has shipped yet. AdminKit's blacklist check and DNS leak test are both coming with the AdminKit API, not live, and this page says so directly rather than ranking around the gap.

Which of these tools are completely free with no account required for a single check?

Based on each tool's own pages, AdminKit, MxToolbox, DNSChecker, EasyDMARC, dmarcian and mail-tester all offer at least one free check (SPF, DKIM or DMARC record lookup) with no account requirement stated on the tool page itself. Google Admin Toolbox's Check MX and Dig tools are also free and unauthenticated. Where a tool's own page didn't state a sign-up requirement either way, this page treats the point as unverified rather than asserting "no account needed."

Which tool has the widest DNS-based blacklist (DNSBL) coverage?

MxToolbox, per its own blacklist page, checks against "100+" (105, by the same page's count) DNS-based blacklists, built up since the company's 2004 founding — the widest DNSBL coverage of the eight tools in this roundup with a specific number attached. DNSChecker also has a live IP/domain/email blacklist checker, but its own pages don't state how many lists it searches. AdminKit's blacklist check is not live yet.

Which tool is best for an ongoing DMARC rollout rather than a one-off check?

dmarcian and EasyDMARC are built for that job: both offer a free one-off SPF/DKIM/DMARC check, but their real product is a paid platform for staged DMARC enforcement, aggregate-report analysis over time, and (per dmarcian's own homepage) professional deployment services. None of the other six tools in this roundup, including AdminKit, currently offer a comparable ongoing-rollout platform.

Does this page use any competitor's logo or brand assets?

No. Every tool name on this page is used only to identify and compare a publicly available service (nominative use). AdminKit is not affiliated with or endorsed by MxToolbox, Inc., DNSChecker, EasyDMARC, dmarcian, Google, the operators of intoDNS, or mail-tester.

Why does this page describe some DNSChecker facts as based on indexed page content rather than a direct read?

Every automated fetch of dnschecker.org's own pages for this comparison returned an HTTP 403 (blocked) at verification time. Rather than guess or drop DNSChecker from the roundup, the facts below about its tool catalog are drawn from that domain's own publicly indexed page titles, descriptions and tool pages (via search engine indexing of dnschecker.org itself), with a link to the specific dnschecker.org page for each claim so it can be checked directly.

Want AdminKit to watch this for you?

Free checks tell you the state today. Protective DNS and monitoring tell you when it changes.