DNS / MX / SPF / DMARC Inspector
Resolve DNS, mail-routing and email-authentication posture for a domain, including deep SPF/DMARC analysis.
- visibility
- Public
- risk
- Low risk
What this tool does.
Performs live DNS lookups for A, AAAA, MX, NS, TXT and CAA records, then analyzes SPF authorization dependencies and current DMARC policy semantics.
The SPF graph is diagnostic and bounded; DMARC parsing follows RFC 9989 for the queried _dmarc record and does not claim to simulate a receiver's complete message-evaluation path.
Run this tool.
Enter a target to view results from this tool. Review its scope and access requirements before running a search.
Your input is processed by OSINT.dev and, where needed, sent to the provider used by this tool.
Documentation · 2 documents.
Related articles.
SPF, DKIM and DMARC: What They Reveal and What They Don't
A practical guide to reading SPF, DKIM and DMARC as public evidence: what each mechanism authenticates, how alignment works, what DNS records reveal, and what they cannot prove.
Getting Started with Public Surface Analysis
A practical, passive-first workflow for reading DNS, HTTP, robots, metadata, technology and historical signals without overclaiming.
A Responsible Method for Reconnaissance on Public Web Surfaces
A practical framework for deciding what to collect, when public research becomes active testing, how to define authorization and scope, and when to stop.
How to Turn Weak Signals into Better Questions
A practical OSINT reasoning framework for turning ambiguous observations into testable hypotheses, seeking disconfirming evidence and expressing conclusions with calibrated confidence.