DOMAIN FORENSIC SCAN

Check the DNS configuration behind your business email

Run an email domain health check for SPF, DKIM, DMARC, mail servers, and nameservers. Review the published records, configuration findings, and suggested next steps in one report.

Run a Domain Scan Explore the report

DOMAIN FORENSIC SCANIllustrative example

DOMAINexample.com

DKIM SELECTORgoogle

SCAN SUMMARY

Domain configuration overview

5 checks

SPF

Record foundSending policy is published for example.com.

DKIM

Record found for selected selectorSelected selector: google.

DMARC

Review reporting configurationPolicy is published; reporting destination needs review.

Mail servers foundReceiving mail-server records are published.

Nameservers

Records foundAuthoritative nameserver records are published.

Finding to review

Check whether your DMARC reporting destination is configured.

Fictional example data for illustration. Results depend on the domain and selector checked.

WHEN TO USE IT

Useful when your email setup changes

Adding a sending service

Review your authentication records when connecting a marketing platform, CRM, or transactional email service.

Changing email or DNS providers

Inspect published mail-server and nameserver records after configuration changes.

Reviewing client domains

Bring authentication and email DNS findings together before planning your next investigation.

INSIDE THE REPORT

Five checks. One domain report.

See the records behind your email setup and the findings that deserve attention.

TXT RECORD · EXAMPLE

v=spf1 include:_spf.google.com include:send.example.net ~all

Sending servicesFinal qualifier

01 / SENDING POLICY

Review your published sending policy

Inspect your SPF record, included sending services, policy qualifier, and the lookup information shown in the report. Review findings alongside the services your business uses to send email.

Understand what your SPF configuration authorizes.

DOMAINexample.comSELECTORgoogle

Record foundSelector: google

02 / SELECTOR LOOKUP

Check the key at the selector you use

Choose a standard DKIM selector or enter a custom one. Review whether a record is found at that selector, its published value, and the available record findings.

Investigate the specific DKIM configuration used by your sending service.

DMARC RECORD · EXAMPLE

v=DMARC1; p=quarantine; aspf=r; adkim=r; sp=none

PolicyAlignmentSubdomain policyAggregate reporting: not configured in this example

03 / POLICY & REPORTING

Understand your domain’s policy and reporting settings

Review your published DMARC policy, reporting destinations, SPF and DKIM alignment settings, and subdomain-policy configuration.

See the configuration to review before making policy changes.

Priority	Mail server
10	mx1.example.net
20	mx2.example.net

04 / RECEIVING MAIL

See which servers receive your domain’s email

Review your mail-server hostnames and their MX priorities in one table. Inspect the receiving configuration and the provider information identified by the report.

Make your incoming-mail configuration easier to understand.

NSns1.example.netFound

NSns2.example.netFound

05 / DNS HOSTING

Review the DNS servers behind your domain

See the published nameservers and the provider information identified by the scan. Use the findings to review your domain’s DNS hosting configuration.

Keep DNS infrastructure visible alongside your email records.

DMARC record detailsReview

v=DMARC1; p=quarantine; aspf=r; adkim=r; sp=none

Finding: Check whether your DMARC reporting destination is configured.

06 / READ THE FINDINGS

Move from records to findings

Review status labels, explanatory findings, and suggested actions within each record section. Copy the available authentication record values when sharing details with your administrator or provider.

Give your next investigation a clear starting point.

Illustrative previews show the structure of a domain scan report.

A CLEAR THREE-STEP REVIEW

Run a domain scan in three steps

Enter your domain

Provide the domain whose email DNS configuration you want to inspect.

DOMAIN TO REVIEWexample.com

Choose your DKIM selector

Select a standard option or enter the selector supplied by your email service.

DKIM SELECTORgoogle selected

Review the findings

Explore the record sections, status labels, and recommendations. Run another scan after updating your configuration to review the newly published records.

Records foundRecommendations available

The scan reads published DNS information. DNS changes are made through your provider.

ONE ACCOUNT, MORE CONTEXT

Unlimited domain scans with Pro Deliverability

Review domain configuration alongside your campaign-testing tools in one account.

Unlimited Domain Forensic Scans.
10 Inbox Placement Test credits per month.
10 Spam Tests per month.
3 IP/Domain Blacklist Checks per month.
Unlimited SMTP Tests.

Pro DeliverabilityMonthly plan

US$29.99/month

Get Pro Deliverability View all pricing

ANSWERS BEFORE YOU SCAN

Domain scan questions

What is a Domain Forensic Scan?

It is a diagnostic review of your domain’s published email and DNS configuration. InboxPlacement.io brings SPF, DKIM, DMARC, MX, and nameserver findings into one report.

What does an email domain health check show?

It shows the supported records found during the scan, their values, status labels, and configuration findings. You can use the report to investigate your setup and plan changes with your administrator or provider.

What is a DKIM selector?

A selector identifies the DKIM record used by a sending service. Choose the selector supplied by your provider, or find the s= value in a message’s DKIM-Signature header.

Does “no DKIM record found” mean my domain has no DKIM?

The result applies to the selector checked in that scan. Your domain may publish DKIM records under other selectors. Confirm your sending service’s selector and scan again.

How is this different from DMARC Monitoring?

Domain Forensic Scan examines published configuration at the time of the scan. DMARC Monitoring analyzes reports received over time, including sending sources and authentication results.

Does the scan measure inbox placement?

It reviews domain configuration. Use Inbox Placement Test to observe placement across the available seed inboxes.

Does the tool change my DNS records?

The scan displays records and findings. Apply configuration changes through your DNS or email provider.