DNS Domain Analysis

The DNS Domain Analysis tool analyses the DMARC, SPF, DKIM, TLS-RPT, MTA-STS and BIMI setup of any domain, so you can see what is configured and what needs attention. Use the tool menu at the top of the page to switch between DNS Domain Analysis, DNS Lookup, SPF Policy Test, CIDR Calculator and DKIM Generator.

Running an analysis

Enter a Domain name (for example example.com) and click Analyse. If the domain is one of your own, the actions next to the field open its DMARC settings, and a domain panel is shown beside the results.

If no record can be found, the page shows Record not found. If the analysis could not complete, it shows The analysis failed. Please try again.

Results

Results are grouped into three sections. Each record is shown as a card with status labels, and expands to explain every part of the record.

Section	Records
Impersonation	DMARC, SPF and DKIM.
Privacy	TLS-RPT and MTA-STS.
Branding	BIMI.

Status labels on each card include Record not Found, Multiple records, Record contains errors and Record contains warnings. Each part of a record shows one of the following outcomes:

Outcome	Meaning
No Errors Found	The value is correct.
Not Required	The value is optional.
Not Required, Default Value Applied	The value is not set, so the default is used.
Action is Recommended	A change is recommended.
Action is Required	The record has an error that must be fixed.
Information	Additional information about the value.

Domain details

At the bottom of the results, a card shows the Authority Domain, whether it is a Mail-Sending Domain, the DNS Provider with its name servers (Type, TTL, Name Server, NS), the Email Provider with its mail servers (Pref, TTL, Hostname) and the DNS Admin Email.

Related Topics

• DNS Lookup — Look up DNS, DMARC, MTA-STS and TLS-RPT records for any domain.
• SPF Policy Test — Check whether a sender IP address is authorized by a domain's SPF record.
• DKIM Generator — Generate a DKIM key pair and the DNS record to publish.