EMAIL SECURITY TESTING · DNS HOST RECORD FORENSICS
DISSECT ANY
DOMAIN'S MAIL STACK
Live reconnaissance against a domain's entire email delivery chain — MX topology, SPF policy trees, DKIM signatures, DMARC posture, reverse-DNS hygiene and real-time blacklist / spam-domain lookups across 10 RBL zones. Every observed record is captured into a full raw inventory. All reconnaissance now executes server-side in a hardened Python (dnspython) engine — the scan logic never ships to the browser, targets are strictly validated and every request is rate-limited.
MXCNAMESPF
DKIMDMARCPTR
RBL ×10MTA-STSTLS-RPT
BIMIWHOISNS CONTROLFULL RECORD DUMP
TARGET ACQUISITIONPRESS ⏎ TO ENGAGE
SAMPLES ›
RECENT ›
- 01 ENUM
- 02 MX
- 03 SPF
- 04 DKIM
- 05 DMARC
- 06 RBL
- 07 CONTROL
- 08 REPORT
ANALYSIS REPORT —
MX INFRASTRUCTURE
SPF POLICY · INCLUDE TREE
DKIM SIGNING KEYS
DMARC POSTURE
RELAY / ECHO-SPOOF EXPOSURE
DOMAIN REPUTATION · SPAM LISTS
IP BLACKLIST MATRIX
ZONE FILE & PROTOCOLS
DOMAIN CONTROL — WHOIS / NS
REMEDIATION DIRECTIVES
FULL RECORD INVENTORY — RAW CAPTURE
MESSAGE FORENSICS · DELIVERABILITY TROUBLESHOOTING
WHY DID THIS EMAIL GO TO SPAM?
Paste the raw headers of a delivered message (or the whole source). MX-RECON parses the authentication results, DKIM signatures, Received chain and gateway/spam headers, then cross-checks them against live DNS — the selector that was actually used, the SPF record evaluated against the sending IP, DMARC alignment, reverse DNS and blacklists — and reports the root causes with concrete fixes.
RBL RESOLVER SELF-TEST
ROOT CAUSES
CHECKS PASSED
AUTHENTICATION RESULTS — EVERY HOP
DKIM SIGNATURES · DNS CROSS-CHECK
SPF EVALUATION
RECEIVED CHAIN
GATEWAY & SPAM HEADERS
DNS CROSS-CHECK LOG
SCAN LOG — STDOUT