DMARCREPORT Domain Auth Checker lets you embed interactive email authentication record checkers on any WordPress page or post using a simple shortcode. All DNS lookups run locally through PHP’s native dns_get_record() function. The MTA-STS checker also fetches the domain’s MTA-STS policy file over HTTPS (see External Services below).

SPF Checker

Analyze SPF records for any domain
Monitor DNS lookup count (RFC 7208 limit of 10)
View SPF record structure in an interactive tree
Per-mechanism lookup count breakdown
Health status indicator (Good / At Limit / Critical)

DMARC Checker

Analyze DMARC policies and configuration
Interactive DMARC record builder
Tag parsing with descriptions
DKIM and SPF alignment checks
Reporting configuration (rua/ruf) verification

TLS-RPT Checker

Check SMTP TLS Reporting configuration
Validate mailto: and https: reporting endpoints
Health scoring for TLS-RPT setup

BIMI Checker

Verify Brand Indicators for Message Identification setup
Visual logo preview
VMC (Verified Mark Certificate) detection
Custom selector support

MTA-STS Checker

Verify MTA-STS DNS TXT record
Fetch and parse the MTA-STS policy file
Mode detection (enforce/testing/none)
MX host listing from policy
Max age analysis

Common Features

Copy to clipboard for domains and record values
Fully responsive design (desktop and mobile)
URL deep linking — share results via ?domain=example.com
Visual health indicators for all checkers
Powered by dmarcreport.com watermark

Usage

Use the [dmarcreport_domain_auth_checker] shortcode with the type attribute:

SPF (default): [dmarcreport_domain_auth_checker] or [dmarcreport_domain_auth_checker type="spf"]
DMARC: [dmarcreport_domain_auth_checker type="dmarc"]
TLS-RPT: [dmarcreport_domain_auth_checker type="tlsrpt"]
BIMI: [dmarcreport_domain_auth_checker type="bimi"]
MTA-STS: [dmarcreport_domain_auth_checker type="mta-sts"]

All checkers support the ?domain=example.com URL parameter for deep linking and auto-analysis.

External services

This plugin performs DNS lookups and, for the MTA-STS checker, an HTTPS request to the domain being analyzed. No data is sent to any third-party API or service operated by the plugin author.

DNS lookups

When a user submits a domain for analysis, the plugin uses PHP’s built-in dns_get_record() function to query DNS records directly from your WordPress server. The domain name entered by the user is sent as a standard DNS query. This happens each time a user clicks the analyze button for any checker (SPF, DMARC, TLS-RPT, BIMI, or MTA-STS).

DNS lookups are handled by your server’s configured DNS resolver and are not routed through any external API.

MTA-STS policy file fetch

The MTA-STS checker fetches the domain’s MTA-STS policy file by making an HTTPS GET request to:
https://mta-sts.{domain}/.well-known/mta-sts.txt

This request is sent to the web server of the domain being analyzed (not to a third-party service). It is made each time a user analyzes a domain using the MTA-STS checker. Only the HTTP request itself is sent — no additional user data, cookies, or tracking information is included.

Since this request goes directly to the analyzed domain’s own web server, there is no third-party service provider with separate terms of use or privacy policy. The connection uses HTTPS with SSL verification enabled.

Outbound links

The plugin includes links to dmarcreport.com and autospf.com (services by the plugin author, DuoCircle). These appear as “Powered by” watermarks and pricing call-to-action buttons within the checker interface. They are standard hyperlinks that open in a new browser tab when clicked by the user — no data is sent to these sites automatically by the plugin.