SPF
Valid- Record present
- Yes
- First all qualifier
- fail
v=spf1 -allRecord details
- Direct includes
- None
- Redirect
- Unknown
Email checks and Domain Intelligence share one credit balance. See how credits work
Domain Intelligence
Domain Intelligence shows where a domain routes incoming mail, the networks behind its mail servers and website, and its published SPF and DMARC records. Extended adds registration details when available.
Run a lookup in your account using the same credits as email verification. Confirming a new account gives you free starting credits.
Standard: mail configuration and networks · Extended: adds registration details
Use the profile to add a mail provider to a CRM record, compare the networks used by a domain’s mail servers and website, or check when a new customer’s domain was registered. Choose Standard for mail configuration and networks. Extended includes everything in Standard and adds registration details.
The lookup opens no SMTP session and sends no email. It cannot confirm that a particular mailbox exists, that its owner wants your email or that a message will reach the inbox.
Mail routing shows whether the domain has somewhere to receive mail. MX records name the receiving mail servers and their priorities; a lower number means a server is preferred. A domain without MX records may still route mail through its own IP addresses. The profile can also show that the domain does not exist, declares that it accepts no mail, or has a configuration problem.
When the preferred MX servers all match the same known operator, the profile names that provider. Different operators produce a mixed match; an unrecognised server leaves the match unknown. The identified operator may be a filtering gateway that passes mail to another provider, so it may not be the company hosting the mailboxes.
Reference data identifies known disposable-mail providers, which offer temporary addresses, and public providers, which offer consumer mailboxes. A domain absent from these lists has not been established as safe or corporate.
A catch-all mail server accepts recipients broadly enough that acceptance cannot confirm a particular mailbox exists. The profile reports any catch-all state Emvero already holds for the domain. This lookup does not test a new recipient, so the state may remain unknown.
SPF describes which servers are authorised to send using a domain. DMARC publishes a policy for handling messages that fail authentication checks against the domain in the visible From address. These records concern outgoing mail; they do not establish whether the domain can receive it.
Domain Intelligence reads the records, checks their syntax and reports the supported settings. It does not authenticate a message or follow the policies referenced by SPF includes to test a sender. The guide to SPF and DMARC explains these checks and how they differ from MX routing.
Both modes show public IP addresses for the mail servers and the domain you entered. The profile also lists any DNS aliases followed to resolve that domain, called the CNAME chain. Each address can have an autonomous system number (ASN), identifying the network that announces its route on the internet. Available network details include a name, registration country and type, such as hosting or an internet provider.
These details let you compare the infrastructure behind mail and the website. If a recognised content delivery network (CDN) or proxy is visible, the profile names it; its addresses may conceal the origin server. The network’s registration country does not establish the server’s location, and resolving an IP address does not test whether the website responds.
Extended reads registration details from the domain registry through RDAP, a protocol for accessing registry records. When available, the profile includes the registration date, age in days, expiry date, registrar and registry statuses. For a subdomain, these details describe the registered parent domain.
The date tells you how old the registration is. It does not establish the age of the company or website, or when the current owner acquired the domain. Some registries do not support RDAP or omit the date; the profile explains why it is unavailable. Registration age and network details alone do not establish that a domain is trustworthy.
Each part of the profile shows its source, status and available observation dates. Unknown means the evidence could not settle that field. Stale data describes an earlier observation whose refresh failed. Check these details for the fields you need before relying on them.
A complete profile means the required observations for the selected mode were processed without errors or stale data. The provider or catch-all state can still be unknown, and the routing result can show that the domain accepts no mail. Network data has its own status and does not determine the profile’s completeness or price.
An Extended profile is partial when the registration date is missing. Incomplete Standard observations also make the profile partial. If the source needed to establish routing fails, the service returns an error; that does not mean the domain has no mail route.
Domain Intelligence · Extended
The required observations for this mode completed. Network data may still be unavailable. The profile does not test a mailbox or authenticate a message.
Registry data for the registrable domain. The age refers to this registration, not to the website, company or owner.
v=spf1 -allv=DMARC1; p=rejectmx.example.com
Priority: 10
example.com
Addresses come from DNS; they do not establish that a website is reachable. A CDN or proxy can hide the origin server. The AS country is its registration country, not the IP location.
Available
Oct 2, 2026, 10:00 AM UTC
Observation valid until: Oct 2, 2026, 10:05 AM UTC
Source: dns
Available
Oct 2, 2026, 10:00 AM UTC
Observation valid until: Oct 2, 2026, 10:05 AM UTC
Source: dns · catalog:17
Available
Source: dataset · bundle:example-v1
Unknown
Reason: not_observed
Available
Oct 2, 2026, 10:00 AM UTC
Observation valid until: Oct 2, 2026, 10:05 AM UTC
Source: dns · spf-syntax:1
Available
Oct 2, 2026, 10:00 AM UTC
Observation valid until: Oct 2, 2026, 10:05 AM UTC
Source: dns · dmarc-rfc9989:1
Available
Oct 2, 2026, 10:00 AM UTC
Observation valid until: Nov 1, 2026, 10:00 AM UTC
Source: registry · rdap.example.com
Available
Oct 2, 2026, 12:35 AM UTC
Source: dataset · example-routing-dataset
Available
Oct 2, 2026, 10:00 AM UTC
Observation valid until: Oct 2, 2026, 10:05 AM UTC
Source: dns
Synthetic example for example.com. This is the same result display used in your account. Viewing it runs no lookup and spends no credits.
In this example, incoming mail has an MX route, but no single mail provider has been identified. Mail and website addresses share network AS64500; one mail server address belongs to AS64511. The registration is 2,191 days old when the profile is generated. SPF publishes -all and DMARC publishes reject: neither is a result from testing a message. The catch-all state remains unknown even though the profile is complete.
For a fuller walkthrough, see how to read a domain intelligence profile.
Create an account or sign in, then open Domain Intelligence. Enter a domain on its own, such as example.com, with no email address, URL or wildcard, and choose Standard or Extended. A subdomain is checked as entered; its mail route may differ from the parent domain’s.
| Result of a new lookup | Standard | Extended |
|---|---|---|
| Complete profile | 1 credit | 2 credits |
| Standard observations complete, registration date unavailable | — | 1 credit |
| Standard observations incomplete | 0 credits | 0 credits |
| Saved answer returned on retry, or confirmed refusal | 0 credits | 0 credits |
Both modes use the shared account balance. Returning a saved answer on retry adds no charge; the original lookup’s cost still applies. If a charge cannot be confirmed, credits may already have been deducted. Use the retry option in your account to check the same operation.
To look up domains from your own server, use the Domain Intelligence API. It returns the same profile and documents safe retries and billing fields.
Inspect a domain
Enter a domain and choose Standard for mail configuration and networks, or Extended to include registration details. The profile shows what each observation established and where data is missing.