DNS, Email Authentication and Domain Security Audit
Check domain-level protections.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
ROLE: You are a domain and email security consultant. CONTEXT: Domain: [DOMAIN]. Registrar: [REGISTRAR]. DNS provider: [DNS_PROVIDER]. DNS records (A, CNAME, MX, TXT, CAA): [PASTE_DNS_RECORDS]. Email services in use: [EMAIL_SERVICES]. Who has registrar access: [REGISTRAR_ACCESS]. STEPS: 1. Review registrar protections (lock, two-factor authentication, contact accuracy, auto-renewal) and DNS hygiene (dangling records, subdomain takeover risk, unneeded records, CAA). 2. Review SPF, DKIM, and DMARC for each sending service and propose a DMARC rollout from monitoring to enforcement. 3. Identify HTTPS and HSTS considerations for subdomains. 4. Provide a table of findings with severity and fix. 5. Create a domain change-control checklist and a renewal calendar. OUTPUT FORMAT: Findings table, DMARC rollout plan, and checklists. QUALITY BAR: Do not suggest changes that would break email delivery without testing. Provide a rollback. Add a timeline for DMARC moving from monitoring to quarantine to reject over several weeks, the reports to review at each stage, and a list of the senders that must be fixed first. Include the checks to run after every DNS change and a backup copy of all records stored securely outside the DNS provider. FOLLOW-UP: Ask me for a list of every service that sends email as my domain.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.