Email Spam Checker
Send one real email and get your spam score: a free email deliverability test of SPF, DKIM, DMARC, sending-IP reputation, and content signals, with fixes ranked by impact.
One email. Three layers checked.
We create a private test address. Send it the same email your customers receive, and your report appears here automatically.
Authentication
SPF, DKIM, DMARC & alignment
Reputation
Sending IP & major blocklists
Content
Filter signals & prioritized fixes
Free · No signup · Results in about 30 seconds
SPF, DKIM, and DMARC tester for a real email
This email deliverability tester captures a real email from your real sending infrastructure, checks SPF, DKIM, and DMARC alignment, inspects the sending IP across major blocklists, and reviews message-level filter signals. Every issue comes with a concrete next step, starting with the authentication layer you fully control.
How to run a representative spam test
- 1. Choose the production path. Test the actual mailbox, campaign platform, transactional service, or help-desk route that recipients use. Different paths can sign with different domains and leave through different IPs.
- 2. Generate the private test address. Send the real message to the temporary address shown above without forwarding it through another mailbox.
- 3. Preserve the evidence. Keep the From domain, return path, DKIM signing domain and selector, outbound IP, message type, and send time with the result.
- 4. Change one cause and retest. After DNS TTL or provider propagation has completed, send a new message through the same path. Do not reuse the old result as proof of the repair.
How to read your result
| Result | What it means | What to do |
|---|---|---|
| SPF, DKIM, or DMARC fails | The tested production message did not produce the expected authentication or alignment result. | Use the exact evaluated domains, selector, and failure reason in the report to repair that sending path, then send a new test. |
| IP or PTR finding | The outbound IP is listed, lacks useful reverse DNS, or does not match the infrastructure you expected. | Confirm ownership with the provider, fix the sending cause before requesting delisting, and retest the same outbound path. |
| Content warning | The message contains a structural or content signal associated with filtering, such as missing list headers or suspicious formatting. | Change only the flagged element, resend the real message, and compare it with the authentication and reputation evidence. |
| Clean test | This message passed the checks the tool can observe from its receiving server. | If recipients still report spam placement, investigate receiver-specific reputation, engagement, and seed-list placement separately. |
What this spam test can and cannot prove
The test proves how one real message arrived at Palisade: which SPF, DKIM, and DMARC results were recorded, which IP sent it, and which observable content and reputation signals were present. It cannot guarantee inbox placement at Gmail, Outlook, or every private receiver. For that separate question, use an inbox placement test and compare receiver-specific outcomes.
Related deliverability checks
Email deliverability knowledge base
What is an email spam checker?
An email spam checker tests a message against the signals spam filters use, authentication, sender reputation, and content, and reports a spam score with the reason for each flag. Palisade's email spam checker, also called a spam tester or email spam test, receives a real email you send and reports what the receiving server saw: SPF, DKIM, and DMARC authentication and alignment, the reputation of the sending IP, and the content of the message. Palisade's spam checker returns a 0 to 100 spam score, a letter grade, and the fix for each flag. Higher is better: 100 means nothing we checked would push the message toward the spam folder.
What is an email deliverability test, and is this one?
An email deliverability test, or email deliverability checker, evaluates whether your email setup lets your messages reach recipients' inboxes instead of spam folders. The factors that decide this are sender authentication (SPF, DKIM, DMARC), the reputation of your sending IP and domain, and the content of the message itself. This spam checker is exactly that: send one real email to test email deliverability and it checks all three at once.
What is a good spam score?
Scores run from 0 to 100 and higher is better. 90 to 100 is an A: strong inbox signals. 80 to 89 is a B. 65 to 79 is a C: something needs attention. 50 to 64 is a D: a real risk of filtering. Below 50 is an F. This is not a SpamAssassin score, where lower is better. Here, 100 means nothing we checked would push the message toward spam.
How does this spam test work?
You send any email from the account you want to test (your regular mailbox or your marketing platform) to the unique address we generate. Our receiving server evaluates it exactly the way mailbox providers do on arrival: it records the SPF, DKIM, and DMARC results and alignment, identifies the sending IP and checks its reverse DNS and status on seven major blocklists, and scans the content for common filter triggers. You get a graded report in about thirty seconds.
Does this test show inbox placement at Gmail or Outlook?
No, and that is a deliberate choice. Seed-list placement tests show where one message landed at a handful of test mailboxes, a snapshot that changes day to day. This test shows why mail gets filtered: the authentication, reputation, and content signals every receiver evaluates. Those are the causes you can actually fix, and failing authentication is the most common controllable reason this test finds for legitimate email landing in spam.
What email should I send to the test address?
A real one. If you are diagnosing a newsletter or campaign, send the actual campaign from your email platform so the test sees the same infrastructure, headers, and content your subscribers get. If you are testing your everyday mail, send a normal message from your mailbox. Any subject and any content work: the closer the message is to what you really send, the truer the verdict.
Why is my spam score low?
The report lists the exact reasons, ordered by impact. The most common are: DMARC failing or missing, SPF or DKIM passing but not aligned with your From domain, a DMARC policy of p=none (which monitors but blocks nothing), your sending IP appearing on a blocklist, missing reverse DNS, and content flags like a missing List-Unsubscribe header. Each issue in your report maps to a specific fix.
How do I fix SPF, DKIM, or DMARC failures?
SPF and DKIM failures usually mean a sending service was never added to your DNS records, or the records drifted out of date. Alignment failures mean the domain in those records does not match your From domain. The durable fix is a correct record set plus DMARC reporting so you can see every sender using your domain. Palisade's agent does exactly this: it reads your DMARC reports, finds every sender failing SPF or DKIM, drafts the record fixes, and proposes each policy step toward enforcement. You approve before anything ships.
Is this email spam checker free?
Yes: free, no signup, no limits that matter for normal use. We also email a copy of the report to the address you sent from, with a link back to your full results, so you can forward it to whoever manages your DNS.
The terms behind email deliverability: authentication headers, delivery paths, and blocklists.
Email headers
- Received
- The delivery trail. Every mail server that handles the message prepends its own Received line, so reading them bottom-up traces the path from the origin server to your inbox: including hostnames, IPs, and timestamps for each hop.
- Authentication-Results
- Added by the receiving mail server to record its SPF, DKIM, and DMARC verdicts (RFC 8601). This is the header an analyzer reads to tell you whether the message passed authentication and for which domains.
- From
- The visible sender shown in your mail client. It’s trivial to forge, which is exactly why DMARC exists: DMARC checks that the domains SPF and DKIM validated align with this From domain.
- Return-Path
- The envelope sender (RFC5321.MailFrom) where bounces are sent, stamped by the receiving server. SPF is evaluated against this domain: if it doesn’t align with the From domain, an SPF pass won’t help the message pass DMARC.
- Reply-To
- Where replies go when it differs from the From address. Legitimate for shared inboxes and newsletters, but a Reply-To pointing at an unrelated domain is a classic phishing tell.
- Message-ID
- A globally unique identifier assigned when the message is created, usually ending in the sending domain. Missing, duplicate, or mismatched Message-IDs are a spam and spoofing signal.
- DKIM-Signature
- The cryptographic signature the sending domain attaches to the message. It names the signing domain (d=) and selector (s=) used to fetch the public key from DNS, letting receivers verify the message wasn’t altered in transit.
- Received-SPF
- An older per-hop record of the SPF check result, including the client IP that was evaluated. Useful as a fallback when there’s no Authentication-Results header.
- ARC-Seal
- Part of ARC (Authenticated Received Chain). Forwarders and mailing lists use ARC headers to preserve the original authentication results, so a receiver can still trust a message whose SPF/DKIM broke in forwarding.
- X-Mailer
- The software that composed the message (e.g. Outlook, a CRM, a bulk sender). Optional and easily faked, but handy for spotting mail that claims to be personal yet was sent by automation.
- List-Unsubscribe
- The machine-readable unsubscribe method (mailto, and/or URL) that powers the one-click unsubscribe button. Gmail and Yahoo require it for bulk senders.
Blocklists
- DNSBLDNS blocklist
- A blocklist published over DNS. A receiving mail server checks a sending IP by querying the reversed IP under the list's zone; an answer means the IP is listed. Also called an RBL (Realtime Blackhole List) or blacklist.
- SBLSpamhaus Block List
- Spamhaus's list of IPs from which they do not recommend accepting email, based on evidence of spam operations. Part of the combined ZEN zone.
- XBLExploits Block List
- Spamhaus's list of hijacked machines, proxies, and malware-infected hosts. Being on the XBL usually means a device on your network is compromised, not that you sent spam deliberately.
- PBLPolicy Block List
- Spamhaus's list of IP ranges that should not be sending mail directly to the internet (e.g. residential/dynamic IPs). Sending from a PBL-listed IP means you should relay through your provider's mail server instead.
- listing
- The state of an IP or domain appearing on a blocklist. A listing returned by a lookup is typically an address in the 127.0.0.0/8 range, where the last octet encodes why it was listed.
- delisting
- Removing an IP or domain from a blocklist. Most operators offer a self-service removal form, but delisting only sticks if the underlying problem (spam, a compromised host, poor authentication) is fixed first.
- spamtrap
- An email address that never opts in and exists only to catch spam. Mail sent to a spamtrap is strong evidence of a bad list or scraped addresses and is a common cause of a listing.
- snowshoe
- Spreading spam thinly across many IPs and domains to stay under per-source volume limits. Blocklists specifically hunt for snowshoe patterns.
- PTRReverse DNS
- The PTR record maps a sending IP back to a hostname. A missing or generic PTR record makes an IP look untrustworthy and contributes to listings and filtering.
- 127.0.0.xReturn code
- The A-record value a DNSBL returns for a listed IP. Different last octets mean different sub-lists or reasons. A 127.255.255.x value is not a real listing. It signals the query was refused (often because it came from a large shared resolver).