Inspect public email DNS records together. See the evidence, understand the gaps, and leave with a practical next step.
A domain audit fetches MX, SPF and DMARC records and probes common DKIM selectors. Results are a current DNS snapshot, with records, timestamps and clear limits.
MX records describe mail exchangers. A null MX explicitly declares no inbound mail. A domain without MX can still use its A or AAAA records as an implicit fallback.
SPF lists permitted sending infrastructure; DKIM publishes signing keys; DMARC expresses policy and alignment requirements. Presence alone is not a successful authentication test.
Use the individual lookup tools and generators to investigate findings. DNS failures are shown as unknown, not interpreted as a passing or failing configuration.
No. Inbox placement also depends on real messages, sending infrastructure, recipient filters and reputation. DNS alone cannot establish it.
DKIM keys are published under selectors. A few common selector probes cannot discover every possible key. Use the DKIM lookup with the selector from a real message.
The current tool reports the exact-domain policy only. It does not perform the organizational-domain discovery and policy selection described in RFC 9989.