Togethia MailCheck: SPF, DKIM, DMARC, ARC, unsubscribe, RBL, PTR and TLS checks

Email deliverability

Send one email. See exactly how it travelled.

We check authentication, ARC forwarding evidence, one-click unsubscribe, reputation and the TLS certificates visible along the delivery path.

No account required
Preparing test
Expires in --:--

Send your email to this address

Preparing a secure test address…

Leave this page open. The report will appear automatically when the message arrives.

1
Address issuedReady to receive
2
Awaiting emailListening now
3
Build reportUsually a few seconds

Creating your test address…

Help your client run the test

Send an email to a client explaining what to do

A branded, step-by-step email shows them how to create a probe address, send their test message and get the results. Includes a downloadable PDF guide.

EMAIL + PDF

Sign in or create a free account to send instructions.

Report coverage

Checks queued for this message

9 checks
SPF

Envelope authorization

Queued
Explore SPF evidence
DKIM

Signature and key validation

Queued
Explore DKIM evidence
ARC chain

Forwarding authentication continuity

Queued
Explore ARC chain evidence
DMARC

Alignment and policy

Queued
Explore DMARC evidence
One-click unsubscribe

RFC 8058 HTTPS and DKIM evidence

Queued
Explore unsubscribe evidence
Published vs observed

Configuration correlated with this message

Queued
Compare configuration and message evidence
Reputation & blocklists

IP, policy and sender-domain reputation

Queued
Explore blocklist evidence
Route TLS

Certificates seen on the path

Queued
Explore route and certificates
PTR

Reverse DNS and HELO

Queued
Explore PTR evidence

Standards guide

What “one-click unsubscribe” really means

RFC 8058 gives mailbox providers a safe, machine-readable way to unsubscribe someone from bulk or list email without making them find a link, sign in or complete another form.

RFC 8058 Proposed Standard · reviewed 27 August 2026
1
The email advertises it

A hidden List-Unsubscribe header supplies a secure HTTPS endpoint.

2
DKIM protects it

A valid signature must cover both unsubscribe headers so they cannot be substituted in transit.

3
The mailbox sends one POST

The recipient’s mail app can submit the unsubscribe request immediately—no webpage or login required.

Required message evidenceThe two headers MailCheck reads
List-Unsubscribe: <https://example.com/unsubscribe/opaque-token>
List-Unsubscribe-Post: List-Unsubscribe=One-Click
The address above is an illustrative example; genuine links normally contain an opaque recipient token.
What our report verifies

Claiming “one click” is not enough

  • HTTPS endpointList-Unsubscribe contains a structurally valid secure URL.
  • Exact POST signalList-Unsubscribe-Post declares List-Unsubscribe=One-Click.
  • DKIM coverageAt least one valid DKIM signature protects both headers.
PassManual onlyBroken claimOptional / absent
Standards lifecycle

RFCs are normally marked Updated by or Obsoleted by when their status changes. We monitor the official record so this explanation can be reviewed if RFC 8058 is replaced.

Official RFC Editor recordIETF Datatracker

Baxter explains

What MailCheck looks for

A friendly guide to SPF, DKIM, DMARC and the other signals in your report.