Domain Report
/report/yourdomain.comEight DNS checks, the tools behind the domain, the sender rules you meet, and the records to publish next. Every report gets its own address and a PDF.
Read live from public DNS in your browser. Nothing is stored; the share link carries the result itself.
You are viewing a shared snapshot read on . It may differ from what DNS says now.
136 well-known domains, already reported.
Read from public DNS on September 27, 2026. Open any of them, or re-run it live.
SaaS 24
- adobe.com3/3
- apollo.io3/3
- atlassian.com3/3
- auth0.com3/3
- autodesk.com3/3
- clari.com3/3
- docusign.com3/3
- freshworks.com3/3
- front.com3/3
- gong.io3/3
- helpscout.com2/3
- intercom.com3/3
- okta.com3/3
- oracle.com3/3
- outreach.io3/3
- salesforce.com3/3
- salesloft.com3/3
- slack.com2/3
- squarespace.com3/3
- webflow.com3/3
- wix.com3/3
- zendesk.com3/3
- zoom.us3/3
- zoominfo.com3/3
Developer tools 24
- anthropic.com3/3
- cursor.com3/3
- datadoghq.com3/3
- elastic.co3/3
- fly.io3/3
- github.com3/3
- gitlab.com3/3
- heroku.com3/3
- huggingface.co2/3
- mongodb.com3/3
- netlify.com3/3
- openai.com3/3
- planetscale.com3/3
- postmarkapp.com3/3
- railway.app3/3
- redis.io3/3
- render.com3/3
- replit.com3/3
- resend.com3/3
- sendgrid.com3/3
- sentry.io3/3
- supabase.com3/3
- twilio.com3/3
- vercel.com3/3
Productivity 17
Fintech 17
Marketing 14
Consumer 12
E-commerce 11
Media 9
What is in a Domain Report
- Eight checks, scored to 100: SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT, BIMI and DNSSEC, each with the record we read and a plain-English reason.
- Tools visible in DNS: mailbox provider, marketing, transactional and support senders, each with the exact record that revealed it.
- Sender-rules scorecard: the Google, Yahoo and Microsoft requirements, split into what DNS can verify and what needs a real message.
- Fix list, in order: the exact records to publish, at the exact names.
- Raw appendix: every DNS answer, so anyone can check the work with
dig.
Common questions
Is the share link a real record of the scan?
Yes. The link carries the full result in its address, compressed. Nothing is stored on our side, so the link is the record. Anyone who opens it can also re-run the scan live and compare.
Why is a requirement marked "not checkable here"?
Some rules, like From-address alignment or one-click unsubscribe, live in the message, not in DNS. We mark those clearly instead of guessing.
How is the score weighted?
SPF 20, DKIM 15, DMARC 30, MX 10, MTA-STS 10, TLS-RPT 5, BIMI 5, DNSSEC 5. DMARC carries the most weight because it is the only check that tells inboxes what to do.