Domain Trust Report

What is a domain trust report? This runs a full scan of a domain's security posture in one go — email authentication (SPF/DKIM/DMARC), DNS setup, SSL certificate, blacklist status, mail server ports, and HTTP security headers — combined into a single 0-100 score.

Explain & fix

What to change, most important first — with the exact records and settings to copy.

Share this report as a PDF

Score, what to fix with the exact records, and every check — ready to forward to a manager, client or IT provider.

A short summary for non-technical readers, written by AI.

How the score is calculated

Check	Points
DMARC	20 for p=reject, 16 for quarantine, 8 for none
Blacklists	20
SPF	15
SSL certificate	15 (10 if it expires within 15 days)
HTTP security headers	15
DKIM	10
MTA-STS	5
BIMI	+3 bonus, never subtracted

Email authentication carries the most weight because it decides whether others can send convincing fake mail in your name.

Explain & fix

Below every report, Explain & fix lists what to change in order of importance, with the exact DNS records and header values to copy — for example the DMARC record to publish, or the SPF include your mail provider needs. Explain in plain words adds a short summary you can forward to a manager or client.

Limits of a DNS scan

DKIM keys sit under a selector name that can’t be listed from DNS, so the scan tries 20 common selectors. A custom selector may exist without being found.
Security headers are read from the website. If the site blocks automated requests or doesn’t answer in time, they show as not checked and aren’t counted against the score.

Explain & fix

How the score is calculated

Explain & fix

Limits of a DNS scan