DNS Audit Tool
Check SPF, DKIM, DMARC, MX, and BIMI records for any domain.
4 of 6 checks passing for acmesales.com
SPF (Sender Policy Framework)
Pass
v=spf1 include:_spf.google.com include:sendgrid.net ~allSPF record found and valid. 4 DNS lookups used (under 10 limit).
DKIM (DomainKeys Identified Mail)
Pass
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9...DKIM record found with 2048-bit RSA key. Signing is active.
DMARC (Domain Message Authentication)
Warning
v=DMARC1; p=none; rua=mailto:[email protected]Fix: Upgrade DMARC policy from "none" to "quarantine" or "reject" for better protection. Add ruf for forensic reports.
DMARC record exists but policy is set to "none" which does not enforce authentication failures.
MX (Mail Exchange)
Pass
10 aspmx.l.google.com, 20 alt1.aspmx.l.google.comMX records properly configured with Google Workspace.
BIMI (Brand Indicators)
Not Found
Fix: Add a BIMI record to display your brand logo in supporting email clients. Requires a VMC certificate.
No BIMI record found at default._bimi.acmesales.com.
Reverse DNS (PTR)
Pass
mail-yw1-f176.google.comReverse DNS properly configured for sending IP.