Public signal checker

DNS and Email Signal Checker

This checker summarizes the DNS records that SiteTraceKit can read from public resolvers and highlights email-authentication signals.

The check uses public live signals and does not make a security, malware, fraud or legal verdict.

Run a public signal check

  • HTTP
  • DNS
  • TLS
  • RDAP
  • Archive

Paths, query strings and fragments are removed before analysis. Only public http and https hosts are accepted.

What this checker analyzes

  • A and AAAA records for public website resolution.
  • NS, MX, TXT and CAA records where available.
  • SPF and DMARC records that help email receivers evaluate domain mail.

Why it matters

  • DNS issues can break websites, email delivery and certificate issuance.
  • SPF and DMARC can reduce spoofing confusion when a domain sends email.

What the results mean

  • Found records are displayed as live public DNS answers.
  • Missing SPF or DMARC is a review signal, especially when the domain sends email.
  • Unavailable means the resolver or record type did not return usable data.

Limits of this check

  • DNS is live and can change quickly.
  • The checker does not decide whether an email policy is optimal for every sending setup.
  • Private DNS and split-horizon DNS are outside the scope.
What should also be reviewed manually?

Review notable values in the context of the actual website, its subpages and connected services. A homepage check cannot prove the complete configuration, legal position or security posture.

FAQ

Does every domain need MX records?

Not always. A domain that never receives email may not need MX records, but the decision should be intentional.