InfrastructureLive6 checks
DNS & Email Security Scanner
Verify DNS configuration, SPF, DKIM, DMARC records, and domain security.
What we check
- SPF record present and doesn't end in an overly permissive +all
- DMARC record present, policy (p=) not none without a stated reason
- DKIM selector presence — checks common selectors: default, google, selector1/2
- MX records present and resolve
- CAA record present, restricting which CAs may issue certs for the domain
- Zone transfer (AXFR) refused on authoritative nameservers
