govt.nz
Live email deliverability and anti-spoofing audit. Every value below was read from public DNS at the moment this page was generated.
10/100 — This domain is either unable to receive mail or trivially spoofable, or both. Does not accept mail · Spoofable: anyone can forge this sender
Findings
-
mx
No MX records. Mail sent to this domain has no defined destination.
Fix: Publish MX records pointing at your mail host.
-
spf
No SPF record. Receivers cannot tell which servers may send as this domain.
Fix: Publish a TXT record at the domain root, e.g. "v=spf1 include:_spf.yourprovider.com -all".
-
dmarc
No DMARC record. Anyone can send mail that appears to come from this domain, and bulk receivers now require DMARC.
Fix: Publish a TXT record at _dmarc.govt.nz starting with "v=DMARC1; p=none; rua=mailto:you@govt.nz" and tighten to p=reject once reports look clean.
-
dkim
No DKIM key found at any common selector. Either DKIM is not configured, or it uses a custom selector we cannot discover from DNS alone.
Fix: Enable DKIM signing at your mail provider and publish the selector they give you.
-
dnssec
DNSSEC is validating, so these records cannot be silently tampered with in transit.
AD flag set
Records
| MX | none |
|---|---|
| SPF | none |
| DMARC | none |
| DKIM selectors | none discovered |
| MTA-STS | not published |
| TLS-RPT | not published |
| BIMI | not published |
| DNSSEC | validating |
Same data, as JSON, in one request. No SMTP probing, no stored recipient data, 250 free calls a month.
curl "https://mailgrade.dev/v1/domain?domain=govt.nz"
Also available: /v1/verify?email=… for individual addresses, and
/v1/verify/batch for lists.