Check SPF, DMARC, BIMI, MTA-STS and TLS-RPT records for any domain. Embed email authentication checkers with a shortcode.

DuoCircle LLC

<p>DMARCREPORT Domain Auth Checker lets you embed interactive email authentication record checkers on any WordPress page or post using a simple shortcode. All DNS lookups run locally through PHP’s native <code>dns_get_record()</code> function. The MTA-STS checker also fetches the domain’s MTA-STS policy file over HTTPS (see External Services below).</p>
<h4>SPF Checker</h4>
<ul>
<li>Analyze SPF records for any domain</li>
<li>Monitor DNS lookup count (RFC 7208 limit of 10)</li>
<li>View SPF record structure in an interactive tree</li>
<li>Per-mechanism lookup count breakdown</li>
<li>Health status indicator (Good / At Limit / Critical)</li>
</ul>
<h4>DMARC Checker</h4>
<ul>
<li>Analyze DMARC policies and configuration</li>
<li>Interactive DMARC record builder</li>
<li>Tag parsing with descriptions</li>
<li>DKIM and SPF alignment checks</li>
<li>Reporting configuration (rua/ruf) verification</li>
</ul>
<h4>TLS-RPT Checker</h4>
<ul>
<li>Check SMTP TLS Reporting configuration</li>
<li>Validate mailto: and https: reporting endpoints</li>
<li>Health scoring for TLS-RPT setup</li>
</ul>
<h4>BIMI Checker</h4>
<ul>
<li>Verify Brand Indicators for Message Identification setup</li>
<li>Visual logo preview</li>
<li>VMC (Verified Mark Certificate) detection</li>
<li>Custom selector support</li>
</ul>
<h4>MTA-STS Checker</h4>
<ul>
<li>Verify MTA-STS DNS TXT record</li>
<li>Fetch and parse the MTA-STS policy file</li>
<li>Mode detection (enforce/testing/none)</li>
<li>MX host listing from policy</li>
<li>Max age analysis</li>
</ul>
<h4>Common Features</h4>
<ul>
<li>Copy to clipboard for domains and record values</li>
<li>Fully responsive design (desktop and mobile)</li>
<li>URL deep linking — share results via <code>?domain=example.com</code></li>
<li>Visual health indicators for all checkers</li>
<li>Powered by dmarcreport.com watermark</li>
</ul>
<h3>Usage</h3>
<p>Use the <code>[dmarcreport_domain_auth_checker]</code> shortcode with the <code>type</code> attribute:</p>
<ul>
<li><strong>SPF</strong> (default): <code>[dmarcreport_domain_auth_checker]</code> or <code>[dmarcreport_domain_auth_checker type="spf"]</code></li>
<li><strong>DMARC</strong>: <code>[dmarcreport_domain_auth_checker type="dmarc"]</code></li>
<li><strong>TLS-RPT</strong>: <code>[dmarcreport_domain_auth_checker type="tlsrpt"]</code></li>
<li><strong>BIMI</strong>: <code>[dmarcreport_domain_auth_checker type="bimi"]</code></li>
<li><strong>MTA-STS</strong>: <code>[dmarcreport_domain_auth_checker type="mta-sts"]</code></li>
</ul>
<p>All checkers support the <code>?domain=example.com</code> URL parameter for deep linking and auto-analysis.</p>
<h3>External services</h3>
<p>This plugin performs DNS lookups and, for the MTA-STS checker, an HTTPS request to the domain being analyzed. No data is sent to any third-party API or service operated by the plugin author.</p>
<h4>DNS lookups</h4>
<p>When a user submits a domain for analysis, the plugin uses PHP’s built-in <code>dns_get_record()</code> function to query DNS records directly from your WordPress server. The domain name entered by the user is sent as a standard DNS query. This happens each time a user clicks the analyze button for any checker (SPF, DMARC, TLS-RPT, BIMI, or MTA-STS).</p>
<p>DNS lookups are handled by your server’s configured DNS resolver and are not routed through any external API.</p>
<h4>MTA-STS policy file fetch</h4>
<p>The MTA-STS checker fetches the domain’s MTA-STS policy file by making an HTTPS GET request to:<br />
    https://mta-sts.{domain}/.well-known/mta-sts.txt</p>
<p>This request is sent to the web server of the domain being analyzed (not to a third-party service). It is made each time a user analyzes a domain using the MTA-STS checker. Only the HTTP request itself is sent — no additional user data, cookies, or tracking information is included.</p>
<p>Since this request goes directly to the analyzed domain’s own web server, there is no third-party service provider with separate terms of use or privacy policy. The connection uses HTTPS with SSL verification enabled.</p>
<h4>Outbound links</h4>
<p>The plugin includes links to <a href="https://dmarcreport.com" rel="nofollow ugc">dmarcreport.com</a> and <a href="https://autospf.com" rel="nofollow ugc">autospf.com</a> (services by the plugin author, DuoCircle). These appear as “Powered by” watermarks and pricing call-to-action buttons within the checker interface. They are standard hyperlinks that open in a new browser tab when clicked by the user — no data is sent to these sites automatically by the plugin.</p>
<ul>
<li><a href="https://dmarcreport.com/terms-and-conditions/" rel="nofollow ugc">dmarcreport.com Terms and Conditions</a></li>
<li><a href="https://dmarcreport.com/privacy-policy/" rel="nofollow ugc">dmarcreport.com Privacy Policy</a></li>
<li><a href="https://autospf.com/terms-and-conditions/" rel="nofollow ugc">autospf.com Terms and Conditions</a></li>
<li><a href="https://autospf.com/privacy-policy/" rel="nofollow ugc">autospf.com Privacy Policy</a></li>
</ul>


Alternatives to DMARCREPORT Domain Auth Checker

Top alternatives