Email Domain Health
Inspect the public configuration used for email authentication, receiving, and transport policy—with evidence, limitations, and staged recommendations.
What does the checker verify?
The workspace inspects published MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and optional BIMI records. SPF includes bounded recursive evaluation of DNS-querying mechanisms. DKIM requires the selector used by your sending service.
Why does DKIM need a selector?
DKIM keys live at selector-specific DNS names such as google._domainkey.example.com. MemonaIQ does not guess or brute-force selectors, so leaving it blank produces an explicit “not checked” result.
What can a DNS scan not prove?
Published records cannot prove that a real message passes SPF, carries a valid DKIM signature, aligns for DMARC, uses TLS, satisfies unsubscribe requirements, or reaches an inbox. Results are timestamped configuration observations—not Google or Yahoo certification and not a deliverability guarantee.
New to DNS records? Read the Knowledge Center introduction to DNS before changing production mail policies.
Explore More Tools
Discover other utilities in the MemonaIQ ecosystem designed to help you analyze and optimize your digital infrastructure.
DNS Lookup
Check A, MX, TXT, NS, CNAME and other DNS records. Evaluate email security (SPF, DMARC) and overall domain configuration health.
Website Trust Inspector
Inspect observable HTTPS, redirect, HTTP security, domain, URL-structure, and configured threat-intelligence signals without making claims about an organization.