DomainPulse – DNS, SPF, DMARC & DKIM Inspector wót Arabinda Moharana

DomainPulse

DomainPulse is a DNS and email security inspector for developers, sysadmins, pentesters, and IT professionals.

Check every critical DNS record for any domain in seconds — directly from your Firefox toolbar, with no external website, no account, and no data collection.

What you can check

• SPF — Sender Policy Framework: detect misconfigured or missing SPF records, dangerous +all policies, and DNS lookup overflows
• DMARC — Domain-based Message Authentication: inspect policy strength (none / quarantine / reject), aggregate report targets, and alignment settings
• DKIM — DomainKeys Identified Mail: auto-probe 20 common selectors or enter a custom one; view key type and public key
• MX — Mail Exchange: list all mail servers sorted by priority with automatic provider detection (Google Workspace, Microsoft 365, Proton Mail, and more)
• TXT — All TXT records with auto-tagging (SPF, DMARC, Google, Microsoft, Atlassian, Stripe, and more)
• NS — Name Server records with DNS provider detection (Cloudflare, AWS Route 53, Azure, GoDaddy, and more)
• SOA — Start of Authority: primary nameserver, admin contact, serial, refresh, retry, expire, and TTL
• AXFR — Zone transfer exposure check with guidance on manual testing

Key features

• Uses Cloudflare DoH (1.1.1.1) and Google DoH (8.8.8.8) — choose your preferred resolver or run both and compare results side by side
• Auto-fills the domain from whichever tab you are currently on
• Cross-resolver diff — instantly see if Cloudflare and Google return different records for a domain
• Colour-coded status badges (Pass / Warning / Not Found) with plain-English explanations
• One-click copy for any raw DNS record
• Zero data collection — all queries go directly from your browser to Cloudflare/Google. Nothing is sent to any third-party server.

Who is it for?

• Developers setting up or debugging email delivery and authentication
• Sysadmins auditing DNS configurations
• Security researchers and pentesters checking domain exposure
• IT teams verifying SPF, DMARC, and DKIM during email migrations

All DNS lookups are performed using DNS-over-HTTPS (DoH) — encrypted, privacy-respecting queries with no ISP interception.

No browsing history is stored.
No telemetry.
Fully open source.