[{"data":1,"prerenderedAt":140},["ShallowReactive",2],{"publication:en:P129":3},{"meta":4,"copy":18,"relatedArticles":132,"terms":133,"term":134,"resourceParent":135,"glossaryParent":137},{"id":5,"path":6,"kind":7,"keyword":8,"title":9,"seoTitle":10,"description":11,"incoming":12,"updated":16,"widget":17},"P129","\u002Ftools\u002Fdomain-check","tool","domain DNS and email record checker","Domain DNS and email record checker: public observations","Domain DNS and email record checker","Check public DNS indicators for web addresses, MX, SPF and DMARC. Understand resolver limits and next steps without treating the result as a security audit.",[13,14,15],"\u002Fhealth-check","\u002Fservices\u002Fdns-ssl","\u002Fservices\u002Fcorporate-email","2026-10-30","domain-check",{"intro":19,"sections":20,"checklist":89,"faq":97,"links":107,"sources":125,"cta":127},"This domain DNS and email record checker shows limited public observations about web addresses, mail routing and authentication-policy indicators. CyberFixCrew’s tool makes DNS queries; it does not enter accounts, send email or scan a website for vulnerabilities. Use the result to choose the next question, not as proof that a domain or business is secure.",[21,27,59,65,75,83],{"title":22,"paragraphs":23},"Enter a public domain and start with the business question",[24,25,26],"Use the domain whose website or email configuration you need to understand. The tool does not require account credentials or a mailbox login. Keep passwords, recovery codes, private messages and customer information out of the input; they have no role in a public DNS observation.","Decide what prompted the check: a website-address concern, a mail-routing change, a new sending service or uncertainty about domain authentication. That context matters when interpreting a missing or unexpected indicator. A domain that does not use email has different needs from a business relying on it for customer correspondence.","The existing checker above runs when you submit a domain in the browser. If scripting or the server endpoint is unavailable, the explanatory content remains readable, but that is not a completed DNS test. A deployment must support the checker’s PHP endpoint and resolver for live observations to work.",{"title":28,"paragraphs":29,"table":32},"Understand the five public observations",[30,31],"The checker returns a normalized domain, a summary category and the states of five defined checks. It does not return an account inventory or a comprehensive list of raw records. The table below explains the boundary of each observation so a narrow signal is not promoted into a wider security claim.","DNS answers can depend on the resolver, cache, current records and query outcome. Record when and for which domain the observation was made if you use it in a change discussion. A result from one check should not silently replace the provider’s authoritative configuration and delivery evidence.",{"caption":33,"headers":34,"rows":38},"Public DNS observation and next-question map",[35,36,37],"Observation","What it can help you notice","What it does not establish",[39,43,47,51,55],[40,41,42],"Web-address indicators","Public A\u002FAAAA address observations under the checker’s rules","HTTP availability, certificate health or internal website security",[44,45,46],"MX indicators","Public mail-routing information relevant to the domain","Mailbox access, successful delivery or inbox placement",[48,49,50],"SPF indicator","Presence and basic characteristics of an SPF record","Full recursive evaluation, sender authorization or alignment for a real message",[52,53,54],"DMARC indicator","Presence and basic published policy characteristics","Actual message authentication, safe rollout or absence of account compromise",[56,57,58],"Cloudflare DNS hints","Recognized DNS-provider or alias indicators","An enabled WAF, proxied coverage or verified protection rules",{"title":60,"paragraphs":61},"Treat unavailable, missing and unexpected as different states",[62,63,64],"A resolver failure or unsupported lookup does not prove that a record is absent. If the result is unavailable, retain that limitation and use an appropriate provider or administrator route to establish the necessary fact. Repeating a failed observation without understanding the cause does not create stronger evidence.","An observed absence or warning also needs business context. Some domains intentionally do not receive or send email. Another DNS provider is not a security failure simply because Cloudflare is not detected. A summary label groups the checker’s limited indicators; it does not certify the website, mailbox or organization.","Anti-abuse limits and input validation can prevent a request from running. Read the displayed error and use a valid public domain. Do not try to bypass limits or treat a rejected input as a technical diagnosis of the domain.",{"title":66,"paragraphs":67,"sources":71},"Use email-policy observations without making a blind DNS change",[68,69,70],"If email authentication is the concern, inventory the actual sending systems and their owners before changing records. An SPF or DMARC indicator alone cannot establish how a particular message authenticated or whether a change will disrupt a legitimate sender. The tool does not discover or verify DKIM selectors.","Google Workspace’s DMARC guidance places domain policy in the context of SPF, DKIM and sending systems. Apply the documentation for the providers you actually use. The checker does not test alignment from a message, recursively validate every SPF mechanism or establish an appropriate enforcement policy for the business.","For a proposed change, define the authorizing owner, current configuration, legitimate routes and acceptance evidence. Preserve the information needed to reverse an unintended disruption. A DNS result is a starting observation; safe implementation needs a specifically scoped process.",[72],{"label":73,"url":74},"Google Workspace: DMARC setup and domain-authentication context","https:\u002F\u002Fknowledge.workspace.google.com\u002Fadmin\u002Fsecurity\u002Fset-up-dmarc",{"title":76,"paragraphs":77,"example":80},"Connect the observation to an owned follow-up",[78,79],"A useful follow-up describes the domain, observed state, time and unresolved question. Compare that with the business workflow and the responsible provider’s evidence. Do not attach credentials or customer mail simply to explain that the checker reported an unexpected indicator.","Use a synthetic example to understand the distinction before acting on production configuration. The checker itself does not perform remediation, change a DNS zone or submit an enquiry. Its contact link opens a discussion with domain context; sending the enquiry remains a separate action.",{"title":81,"text":82},"Illustrative example: a record cannot be observed","A fictional check returns an unavailable DMARC observation because the required DNS query did not complete. The owner records the uncertainty and asks the DNS administrator to confirm the actual published configuration. They do not create another policy record on the assumption that none exists. This is a hypothetical interpretation example, not a live DNS result.",{"title":84,"paragraphs":85},"Keep the tool’s result in its proper scope",[86,87,88],"For a website issue, check the relevant application, hosting and business path rather than inferring them from public addresses. For a mail issue, distinguish routing, authentication, rejection and inbox placement. These can involve different evidence even when the same domain appears throughout.","CyberFixCrew is an Israeli cybersecurity company serving businesses worldwide. Our practical Israeli website, email and infrastructure knowledge helps connect a public observation to a defined technical review. Describe the domain and concern first; an initial discussion does not require passwords, secret keys or access to private records.","Keep the observation date and limitations when sharing a result. Records and configurations can change, and a single query is not ongoing monitoring. This page supplies a functional public checker and interpretation guide, not a vulnerability report, deliverability promise or security certificate.",[90,91,92,93,94,95,96],"Enter only the relevant public domain, without secrets.","Identify the website or email question behind the check.","Distinguish an observed indicator from missing or unavailable evidence.","Read each result within its DNS-only boundary.","Review actual senders and owners before an email-policy change.","Keep the domain, time, result and unresolved question together.","Use an authorized provider-specific process for any correction.",[98,101,104],{"question":99,"answer":100},"Does this tool scan my website or log into my email?","No, it makes public DNS observations using the deployed server’s resolver. It does not fetch website content, send a message or access accounts.",{"question":102,"answer":103},"Does a positive summary prove that SPF, DKIM and DMARC work for my email?","No, the checker has basic SPF and DMARC indicators, does not test DKIM selectors and does not authenticate a real message or verify alignment and inbox placement.",{"question":105,"answer":106},"Does Cloudflare not being detected mean the domain is unsafe?","No, a different provider is not a failure. Conversely, a Cloudflare DNS hint does not establish active WAF configuration or protection coverage.",[108,111,114,117,119,122],{"path":109,"label":110},"\u002Fglossary\u002Fdns","Understand DNS records and their scope",{"path":112,"label":113},"\u002Fglossary\u002Fspf","Understand SPF and its limits",{"path":115,"label":116},"\u002Fglossary\u002Fdmarc","Understand DMARC policy and alignment",{"path":14,"label":118},"Discuss domain and DNS configuration",{"path":120,"label":121},"\u002Fservices\u002Fdmarc-spf-dkim","Review actual email-authentication setup",{"path":123,"label":124},"\u002Fresources","Choose another practical security resource",[126],{"label":73,"url":74},{"title":128,"description":129,"button":130,"type":131},"Turn a DNS observation into a clear next step","Describe the domain, result and business concern. CyberFixCrew can clarify the appropriate DNS, email or website review without receiving account secrets.","Discuss the domain result","check",[],[],null,{"path":123,"label":136},"Website security resources and templates",{"path":138,"label":139},"\u002Fglossary","Cybersecurity glossary for small businesses",1794134057351]