Domain DNS and Email Check: SPF, DMARC, DKIM, MX and SSL
Pricing
from $2.70 / 1,000 domain processeds
Domain DNS and Email Check: SPF, DMARC, DKIM, MX and SSL
Checks the DNS records, email authentication (SPF, DMARC, DKIM, MX, MTA-STS, BIMI) and HTTPS certificate expiry of domains you name, and lists every problem found.
Pricing
from $2.70 / 1,000 domain processeds
Rating
0.0
(0)
Developer
Ed Rayyis
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
4 days ago
Last modified
Categories
Share
Give it a list of domains and it returns, for each one, the DNS records and email authentication setup, the HTTPS certificate, and a plain list of the problems found.
For each domain you get:
- A, AAAA, NS, MX and CAA records
- The SPF record, its
allpolicy, and how many DNS lookups it needs (the SPF standard allows 10) - The DMARC policy, subdomain policy, percentage, alignment modes, and the domains that receive aggregate and failure reports
- DKIM keys found under the selectors you list
- Whether MTA-STS, TLS reporting and BIMI records exist
- The certificate on port 443: issuer, expiry date, days left, host names covered, TLS version
The issues list flags, among others: no SPF, two SPF records, SPF ending in +all or ?all, more than 10 SPF lookups, no DMARC, DMARC policy none, no DMARC report address, no MX or a null MX, and a certificate that fails verification or expires within your warning window.
Input
- Domains (required). A full URL also works: the host name is taken from it and a leading
www.is dropped. - DKIM selectors (default: default, google, selector1, selector2, k1, k2, s1, s2, dkim, mail). DNS cannot list selectors, so only the ones named are checked.
- Check HTTPS certificate (default on)
- Certificate warning in days (default 21)
Output
Dataset: one item per domain with domain, ok, a, aaaa, ns, mx, caa, spf, dmarc, dkim, mtaSts, tlsRpt, bimi, certificate, issues, issueCount, and error when a domain could not be checked. Export as JSON, CSV or Excel, or read it over the API.
Pricing
Pay per event: one event per domain checked. A domain that fails the check (for example, one with no DNS records) is not charged. The run stops when it reaches the maximum charge you set.
Scope and conduct
It reads public DNS through the 1.1.1.1, 8.8.8.8 and 9.9.9.9 resolvers and opens one TLS connection to port 443 of each domain. It sends no mail and does not contact mail servers. Mail addresses in DMARC report tags are reduced to their domain, so no mailbox names are stored. There is no WHOIS lookup.
Support
Questions and problems: the Issues tab on this page. Replies are written by an AI assistant on behalf of the developer and reviewed by the developer.
