OneWebDesk

Email

SPF/DKIM/DMARC, mail header and bounce code analysis.

The tools in the Email category help you diagnose and fix the reasons your messages land in spam or bounce outright. In one place you can look up and generate SPF, DKIM, and DMARC authentication records, analyze raw message headers, decode 4xx/5xx SMTP bounce codes, set up BIMI brand logos, and run an all-in-one deliverability check on a domain. They're built for marketers sending newsletters and transactional mail, developers and ops engineers running a mail server or SaaS sending, and domain admins searching for things like 'why is my email going to spam' or 'how to set up SPF and DMARC.'

A typical workflow starts by checking the domain's current state. Look up its SPF, DKIM, and DMARC records for missing entries or syntax errors, then confirm the sending IP isn't listed on a DNSBL blacklist. If a message bounced or got filtered, paste the received message's raw header into the header analyzer to see which authentication step failed (softfail, permerror, and so on) and trace the relay hops and delays, then run the bounce code through the decoder to learn the cause and the fix. Every check is based on public DNS and standard mail specs, so after editing a record you simply re-run the lookup to confirm the result now passes, repeating until everything is clean.

Frequently asked questions

What are SPF, DKIM, and DMARC, and do I need all three?
All three are email authentication standards that stop spammers from forging your domain. SPF lists which servers are allowed to send mail using your domain, DKIM adds a digital signature so receivers can verify the message wasn't tampered with, and DMARC tells receiving servers what to do when SPF or DKIM fails (pass, quarantine, or reject) and sends you reports. Major inboxes like Gmail and Yahoo now effectively require all three, so set up every one for reliable delivery.
My emails keep going to spam. Where do I start?
First confirm your SPF, DKIM, and DMARC records are set up correctly, then check whether your sending IP is on a DNSBL blacklist. Next, analyze the raw header of a message you actually received to see which authentication step failed (softfail or fail), which narrows the cause quickly. The all-in-one deliverability check inspects MX, SPF, DKIM, DMARC, and blacklists in a single pass.
How do I get the raw email header?
In your received message, open the 'Show original' or 'View message source' option to reveal text starting with Received and Authentication-Results lines. In Gmail it's the three-dot menu > 'Show original'; in Outlook open the message > '...' > 'View > Message source'. Paste that entire block into the header analyzer to decode the relay hops and authentication results.
Is the domain or email content I enter sent anywhere?
Lookup tools (SPF, DKIM, DMARC, blacklist, deliverability) are server operations that query public DNS, but they don't store personal data beyond the domain. Tools that work on text you paste, like the bounce code decoder and header analyzer, run in your browser and never transmit your input externally.