DomainPulse DomainPulse is a DNS and email security inspector for developers, sysadmins, pentesters, and IT professionals. Check every critical DNS record for any domain in seconds — directly from your Firefox toolbar, with no external website, no account, and no data collection. What you can check

SPF — Sender Policy Framework: detect misconfigured or missing SPF records, dangerous +all policies, and DNS lookup overflows
DMARC — Domain-based Message Authentication: inspect policy strength (none / quarantine / reject), aggregate report targets, and alignment settings
DKIM — DomainKeys Identified Mail: auto-probe 20 common selectors or enter a custom one; view key type and public key
MX — Mail Exchange: list all mail servers sorted by priority with automatic provider detection (Google Workspace, Microsoft 365, Proton Mail, and more)
TXT — All TXT records with auto-tagging (SPF, DMARC, Google, Microsoft, Atlassian, Stripe, and more)
NS — Name Server records with DNS provider detection (Cloudflare, AWS Route 53, Azure, GoDaddy, and more)
SOA — Start of Authority: primary nameserver, admin contact, serial, refresh, retry, expire, and TTL
AXFR — Zone transfer exposure check with guidance on manual testing

Key features

Uses Cloudflare DoH (1.1.1.1) and Google DoH (8.8.8.8) — choose your preferred resolver or run both and compare results side by side
Auto-fills the domain from whichever tab you are currently on
Cross-resolver diff — instantly see if Cloudflare and Google return different records for a domain
Colour-coded status badges (Pass / Warning / Not Found) with plain-English explanations
One-click copy for any raw DNS record
Zero data collection — all queries go directly from your browser to Cloudflare/Google. Nothing is sent to any third-party server.

Who is it for?

Developers setting up or debugging email delivery and authentication
Sysadmins auditing DNS configurations
Security researchers and pentesters checking domain exposure
IT teams verifying SPF, DMARC, and DKIM during email migrations

All DNS lookups are performed using DNS-over-HTTPS (DoH) — encrypted, privacy-respecting queries with no ISP interception. No browsing history is stored. No telemetry. Fully open source.