Use our PowerAnalyzer to check if your domain name is protected against phishing, spoofing, fraud, and impersonation. You get a full analysis of your domain email security authentication status (DMARC, SPF, DKIM, MTA-STS, TLS-RPT, BIMI) and the needed actions to be taken to improve your security posture.
| A record |
| NS record |
| exchange | priority |
| Valid DMARC record | |
| DMARC policy | |
| Aggregate Report (RUA) addresses | |
| Forensic Report (RUF) addresses |
No error found
The following tags have been configured in the published DMARC record
The following default values will be used for the tags that have not been explicitly configured in the published DMARC record:
| Valid DMARC record | No |
| Valid SPF record | |
| Failure mode |
|
| DNS lookups below 10 | |
| Void Lookups below 2 |
No error found
When an email server receives an email with in the Mail From address, it will check to see if the sender’s IP has been authorized in the published SPF record.
| Valid SPF record |
No record found
| Valid DKIM record | |
| Version | |
| Key Algorithm | |
| Public Key |
No error found
| Valid TLS-RPT record | |
| Aggregate Report (RUA) addresses |
No error found
| Valid TLS-RPT record |
No error found
| The v=DMARC1 property indicates that this DNS record contains a DMARC policy. This value must be the first item in the DMARC record. | |||
| Request the receiving server to send aggregate reports to{{ $ruaDemoEmail }}. | |||
| rua = | Aggregate reports will not be sent as no destination email address has been specified | ||
| Request the receiving server to send forensic reports to {{ $rufDemoEmail }}. | |||
| ruf = | Forensic reports will not be sent as no destination email address has been specified | ||
| adkim=R | Indicates that the domain owner is applying relaxed DKIM identifier Alignment | ||
| aspf=R | Indicates that the domain owner is applying relaxed SPF identifier Alignment | ||
| rf=Afrf | Request failure reporting (send to the ruf address, if set) in the AFRF (RFC6591) format. | ||
| ri=86400 | The interval requested between aggregate reports (send to the rua address, if set) in seconds. 86400 seconds equals 1 day. | ||
| pct=100 | This policy defined in p and/or sp should be applied to 100% of emails that fail authentication. | ||
| fo= | Generate DMARC Failure reports if DKIM and SPF don’t pass or align. | Generate DMARC Failure Reports if DKIM or SPF don’t pass or align. | Generate DMARC Failure Reports if DKIM doesn’t pass or align. |
| sp=Reject | The policy that will be applied to DMARC failing emails sent from a subdomain. |
Our powerful Domain Analyzer tool performs a deep DNS scan to uncover email authentication gaps. Get an instant security score and a customized remediation plan to protect your domain from fraud.
SPF Record Analysis:
Scans your SPF record for syntax errors, lookups, and void errors.
Email Service Provider Compliance:
Check if your domain meets Google, Yahoo, Microsoft, and Apple Mail’s latest email sender requirements.
Overall Domain Security Grade
An at-a-glance score from A+ to F.
Detailed Protocol Breakdown
A pass/fail status for each protocol (DMARC, SPF, DKIM) with clear explanations.
Vulnerability
Summary
A list of critical, high, and medium priority issues found in your DNS.
Actionable Recommendations
Step-by-step instructions tailored to your specific domain’s configuration to resolve each flaw.
