Public DNS checks and change planning
DNS Evidence.
Before you change a record,
know what it says.
Capture public email-DNS evidence, examine a proposed change and preserve the starting point.
Run a public scan ↗Public scan · 8 October 2026
cloudflare.com
Public records.
Traceable findings.
No provider login.
- Healthy
- 19
- Scope notes
- 4
- Action required
- 0
This is one verified scan, not a guarantee for every domain.
Know what the public records say
DNS Evidence reads public records without asking for a provider login or writing to DNS. It checks SPF, DMARC, bounded DKIM evidence and mail routing, alongside MTA-STS, TLS reporting and DNSSEC. Results separate findings from the limits of what public evidence can establish.
Check before changing
The workbench offers a free preflight for a complete proposed SPF, DMARC or MX state. It compares that plan with the public starting point so an operator can review the change and retain rollback information. It does not apply the change to a DNS provider.
Evidence from the actual scanner
The public website and its scanner were checked on 8 October 2026 using the built-in cloudflare.com example. The scan completed all 23 controls: 19 healthy results, four scope notes and no action-required findings. This verifies that scan, not every domain or product workflow. Paid checkout was not tested in this check.
Try the public scanner
Public records cannot establish inbox placement, full tenant configuration or compliance. DNS Evidence shows those boundaries alongside its results.