🔍 DNS & Email Security Scanner
Perform DNS lookups and analyze SPF, DKIM, DMARC, BIMI, MTA-STS, TLS-RPT & DANE records for email security assessment.
⌨️ Keyboard Shortcuts
Tip
DNS Records
Email Security
No DNS records yet
Enter a domain above and click Scan Domain to query DNS records.
🌐 DNS Records
No email security data yet
Scan a domain to analyze SPF, DKIM, DMARC, BIMI, MTA-STS, TLS-RPT & DANE records.
📧 Email Security
DMARC Maturity Path
SPF Include Chain
🔑 Custom DKIM Selector Probe
If the domain uses a non-standard DKIM selector, enter it below to check.
🛠️ Suggested DNS Records
Auto-generated fix suggestions based on detected mail provider and missing records.
SPF (Sender Policy Framework)
Specifies which mail servers can send email for the domain.
+all = Pass all (dangerous)~all = Soft fail-all = Hard fail (strict)?all = NeutralDKIM (DomainKeys Identified Mail)
Cryptographically signs emails to verify sender authenticity.
DMARC (Domain-based Message Authentication)
Tells receivers what to do when SPF/DKIM checks fail.
p=none = Monitor onlyp=quarantine = Spam folderp=reject = Block (best)BIMI (Brand Indicators for Message Identification)
Allows brands to display their logo in supported email clients.
MTA-STS & TLS-RPT
MTA-STS enforces TLS for inbound mail. TLS-RPT enables TLS failure reporting.
📜 Scan History
No scan history yet. Completed scans will appear here.
| Domain | Grade | SPF | DKIM | DMARC | MTA-STS | Scanned | Trend |
|---|
⚖️ Domain Comparison
Select 2-3 domains from Scan History to compare their email security posture.