$ dns-record-analyzer

Inspect DNS record sets, email authentication policies, and hierarchy hints from live lookups or raw responses.

Inputs

Queries common RRsets plus _dmarc and DKIM selectors.

Comma-separated selectors to query under _domainkey.

Record sets

No records yet. Run an analysis to populate results.

Email auth summary

SPF records
0
DMARC policies
0
DKIM keys
0

Use the sections below for parser output and warnings.

TXT classifier

No TXT records yet.

SPF parser & validator

No SPF records detected.

DMARC breakdown

No DMARC records detected.

DKIM decoder

No DKIM records detected.

DNS hierarchy snapshot

Nodes

No edges found.

Edges

No delegation or alias edges detected.

Workflow tips

Email readiness

  • • Ensure SPF, DKIM, and DMARC are all present and aligned.
  • • Keep SPF lookup count under 10 for deliverability.
  • • Use DMARC pct to ramp to enforcement.

TXT hygiene

  • • Remove stale verification tokens after migrations.
  • • Keep DKIM keys rotated and revoke unused selectors.
  • • Audit CAA/HTTPS records for TLS issuance intent.