← Lightening Auditor

Is your email actually authenticated?

Four DNS records decide whether your email reaches an inbox or a spam folder. This checks them on your domain, right now, and shows you the records themselves.

Mail that quietly lands in spam looks exactly like nobody replying, which is why this is the one check worth running before anything else.

Just the domain — no https://, no path.

What this is not. It is four DNS lookups, not an audit. It says nothing about your speed, your SEO, your accessibility or the security of the site itself — those need the pages fetched and rendered, which is the full audit.

Nothing is stored. The domain you type is not saved, not logged by us and not sent anywhere except the DNS lookup itself. That lookup goes through this site rather than from your browser, so your browser never talks to a third party — the same rule the rest of the site follows.

A lookup that fails is not a record that is missing. If a resolver cannot be reached, this says so rather than reporting your domain as unprotected. That distinction is the reason this engine exists, and it is not theoretical: this project's own DNS checks were quietly reporting "no record found" for every domain until the cause turned out to be a network intercepting port 53.