AstraVerify Domain Trust Check

Check whether anyone can send email as this domain, and whether its own mail reaches the inbox. Use when the person asks about email security, spoofing or phishing risk, SPF, DKIM or DMARC setup, or why their mail goes to spam. Input: a bare domain like example.com - no scheme, no path. Given a URL or an email address, extract the domain and say what you extracted. Subdomains score in their own right: mail from the apex is not evidence about mail.example.com. Returns an Email Security score for0-100 abroken domaininto withMX (25), SPF (25), DKIM (20) and DMARC (30), the DNSstatus recordsof foundeach published record, the mail provider identified from MX, and the exact recordsDNS record to publish for eachevery fix.finding. DNS-only, so it answers in about a second; cached 15 minutes, and refresh is for when DNS has just changed. One caveat to pass on rather than hide: DKIM selectors cannot be enumerated from DNS. They are found by probing the selectors known for the mail provider plus a list of a few hundred common names. A provider that issues random selectors - Amazon SES and Postmark among them - can only be confirmed from a live email, so report DKIM as not found by probing, never as proof the domain does not sign.

WhatShow Googlebotexactly what one named crawler receives from the domain's root page. Use when the person asks "what does Google see?" or "can ChatGPT read my site?", Bingbotand whenever check_discoverability reports a crawl-access problem - this is the tool that explains such a result instead of restating it. robots.txt can read perfectly while a CDN or firewall returns 403 to one crawler and 200 to another, OAI-SearchBotand only a real fetch shows that. Inputs: domain (bare, PerplexityBotlike example.com) and agent, ClaudeBotexactly orone GPTBotof receivegooglebot, frombingbot, oai-searchbot, perplexitybot, claudebot, gptbot. Call it once per crawler to compare them. Returns the site:HTTP status, redirectsthe full redirect chain, response headers, content type, the text that crawler would index, and extractedflags text.for Showsan CDNoutright block or firewalla blocksbot-challenge thatpage robots.txt- cannot.which is how cloaking becomes visible. One live fetch of the root page, nothing else, and it changes nothing.

Both AstraVerify scores for a domain, theplus opena fixesshareable rankedreport bylink. severityReach for this first on any broad question - "is my domain set up right?", "check my domain", "what should I fix first?" - and use the single-subject tools only once the person has narrowed it to email or to the website. Input: a savedbare reportdomain linklike (report_url)example.com. thatReturns opensthe Email Security score, the sameDiscoverability score, every open fix ranked critical then important then informational, and report_url. Work down that order. Some findings withoutare marked as needing no action - a rescan;weak sharekey itthe as-is.provider Usegenerates thisand firstthe owner cannot replace, for "isinstance my- domainso setdo upnot right?"present questions.those Savesas work. Unlike the other tools here, this one creates something: report_url is a snapshot of thethese findings saved to a new, unlisted page at astraverify.comastraverify.com/r/..., and returnsthat itspage address,is sowhat the linkperson keepscan workingsend to whoever administers the domain. It opens later without rescanning, after the scan itself has aged out. Running the tool again on an unchanged scan returns the same page rather than a second one. Nothing is written anywhere the person owns.

Re-runsRe-check onlya single discoverability component after the checksperson behindhas onefixed it. Use only once check_discoverability has reported that component failing and the person says the fix is done - never speculatively. Without a previous scan to compare against it returns NOT_READY. Inputs: domain (bare, like example.com) and component, one of crawl, plumbing, metadata, structured, answer) and- returnsthe identifier from the earlier scan's findings. Returns that component re-measured and the updated score.Discoverability score, so you can tell the person plainly whether the change worked. Always a live re-fetch, never served from cache, which is exactly why it beats a second check_discoverability straight after an edit. It draws on the discoverability fresh-scan budget for that domain (30 an hour, counted across all callers), so use a full check_discoverability instead when several areas changed. It only re-reads public pages; it changes nothing on the site.

 ⟨92 unchanged words⟩ ,"ms":{"type":"integer"},"request_id":{"description":"req_... for this call. Quote it when reporting a problem with the result.","type":"string"},"status":{"description":"HTTP status the crawler ⟨13 unchanged words⟩ 

 ⟨349 unchanged words⟩  on astraverify.com","type":"string"},"request_id":{"description":"req_... for this call. Quote it when reporting a problem with the result.","type":"string"},"score":{"description":"Out of 100,  ⟨457 unchanged words⟩  that opens without a rescan; safe to share","type":"string"},"request_id":{"description":"req_... for this call. Quote it when reporting a problem with the result.","type":"string"}},"required": ⟨4 unchanged words⟩ 

 ⟨347 unchanged words⟩  on astraverify.com","type":"string"},"request_id":{"description":"req_... for this call. Quote it when reporting a problem with the result.","type":"string"},"score":{"description":"Out of 100,  ⟨45 unchanged words⟩ 

 ⟨62 unchanged words⟩  to F","type":"string"},"held_back":{"description":"Points the cap holds back while a fix is open (89 cap) or a critical one is (69). Not taken from any component: sum(components.points) - held_back = score","type":"integer"},"null_mx":{"description":"The domain declares that ⟨17 unchanged words⟩ ":{"description":"Mail provider detected from MXMX; null when not recognised","type":["string","null"]},"raw":{"description":"Before the cap rules that holdWhat the headlinecomponents backadd whileup ato, fixbefore isthe opencap","type":"integer"},"recommendations":{ ⟨161 unchanged words⟩ 

 ⟨80 unchanged words⟩ "type":["string","null"]},"held_back":{"description":"Points the cap holds back while a fix is open (89 cap) or a critical one is (69). Not taken from any component: sum(components.points) - held_back = score","type":"integer"},"inconclusive":{"description":"The site could not ⟨78 unchanged words⟩ :"integer"},"raw":{"description":"Before the cap rules that holdWhat the headlinecomponents backadd whileup ato, fixbefore isthe opencap","type":"integer"},"reason":{ ⟨261 unchanged words⟩  to F","type":"string"},"held_back":{"description":"Points the cap holds back while a fix is open (89 cap) or a critical one is (69). Not taken from any component: sum(components.points) - held_back = score","type":"integer"},"open_fixes":{"description":"Findings above info level","type":"integer"},"raw":{"description":"Before the cap rules that holdWhat the headlinecomponents backadd whileup ato, fixbefore isthe opencap","type":"integer"},"recommendations":{ ⟨293 unchanged words⟩ 

 ⟨78 unchanged words⟩ "type":["string","null"]},"held_back":{"description":"Points the cap holds back while a fix is open (89 cap) or a critical one is (69). Not taken from any component: sum(components.points) - held_back = score","type":"integer"},"inconclusive":{"description":"The site could not ⟨78 unchanged words⟩ :"integer"},"raw":{"description":"Before the cap rules that holdWhat the headlinecomponents backadd whileup ato, fixbefore isthe opencap","type":"integer"},"reason":{ ⟨187 unchanged words⟩ 

 ⟨137 unchanged words⟩ or tag (kind, label, value, where). Null when there is nothing to publish, for example \"turn on DKIM in your provider\".","properties":{"kind":{"type":["string","null"]},"label":{"type":["string","null"]},"name":{"type":["string","null"]},"note":{"type":["string","null"]},"type":{"type":["string","null"]},"value":{"type":["string","null"]},"where":{"type":["string","null"]}},"type":["object","null"]},"id":{"type":"string"}, ⟨81 unchanged words⟩ 

 ⟨43 unchanged words⟩ ":"boolean"},"content_type":{"type":["string","null"]},"domain":{"type":"string"}, ⟨5 unchanged words⟩ {"description":"The text this crawler would indexindex; null when the fetch failed","type":["string","null"]},"final_url":{"type":["string","null"]},"headers":{"additionalProperties":{"type": ⟨26 unchanged words⟩ ,"null"]},"title":{"type":["string","null"]}},"required":["domain","agent"] ⟨2 unchanged words⟩ 

 ⟨14 unchanged words⟩  just now","type":"integer"},"canonical_host":{"type":["string","null"]},"capped":{"type":"boolean"},"cdn":{"type":["string","null"]},"components":{"items":{"description":"One  ⟨36 unchanged words⟩ ,"grade":{"description":"A+ to F, or null alongside a null score","type":["string","null"]},"inconclusive":{"description":"The site could not be fetched, so the scan could not be completed. A failure to measure, not a finding about the site.","type":"boolean"},"not_applicable":{"description":"The domain publishes no web address, so there is no website to assess. Not a low score: score and grade are null and there are no recommendations. verdict names the domain to scan instead.","type":"boolean"},"not_checked":{"description":"Parts skipped in this scan","items":{"type":"string"},"type":"array"},"open_fixes":{"description":"Findings above info level ⟨16 unchanged words⟩  is open","type":"integer"},"reason":{"description":"Why score is null, when it is","type":["string","null"]},"recommendations":{"items":{"properties":{"component ⟨18 unchanged words⟩ or tag (kind, label, value, where). Null when there is nothing to publish, for example \"turn on DKIM in your provider\".","properties":{"kind":{"type":["string","null"]},"label":{"type":["string","null"]},"name":{"type":["string","null"]},"note":{"type":["string","null"]},"type":{"type":["string","null"]},"value":{"type":["string","null"]},"where":{"type":["string","null"]}},"type":["object","null"]},"id":{"type":"string"}, ⟨47 unchanged words⟩ "Out of 100, exactly as astraverify.com shows itit. Null when not_applicable or inconclusive is set.","type":["integer","null"]},"verdict":{"description":"One sentence on what engines can do with the site","type":"string"},"verified_component":{"description":"Set by verify_fix: the component re-checked","type":"string"}},"type":["object","null"]}, ⟨129 unchanged words⟩ or tag (kind, label, value, where). Null when there is nothing to publish, for example \"turn on DKIM in your provider\".","properties":{"kind":{"type":["string","null"]},"label":{"type":["string","null"]},"name":{"type":["string","null"]},"note":{"type":["string","null"]},"type":{"type":["string","null"]},"value":{"type":["string","null"]},"where":{"type":["string","null"]}},"type":["object","null"]},"id":{"type":"string"}, ⟨101 unchanged words⟩ or tag (kind, label, value, where). Null when there is nothing to publish, for example \"turn on DKIM in your provider\".","properties":{"kind":{"type":["string","null"]},"label":{"type":["string","null"]},"name":{"type":["string","null"]},"note":{"type":["string","null"]},"type":{"type":["string","null"]},"value":{"type":["string","null"]},"where":{"type":["string","null"]}},"type":["object","null"]},"id":{"type":"string"}, ⟨53 unchanged words⟩ 

 ⟨15 unchanged words⟩ ":"integer"},"canonical_host":{"type":["string","null"]},"capped":{"type":"boolean"},"cdn":{"type":["string","null"]},"components":{"items":{"description": ⟨37 unchanged words⟩ ,"grade":{"description":"A+ to F, or null alongside a null score","type":["string","null"]},"inconclusive":{"description":"The site could not be fetched, so the scan could not be completed. A failure to measure, not a finding about the site.","type":"boolean"},"not_applicable":{"description":"The domain publishes no web address, so there is no website to assess. Not a low score: score and grade are null and there are no recommendations. verdict names the domain to scan instead.","type":"boolean"},"not_checked":{"description":"Parts skipped in this ⟨28 unchanged words⟩  is open","type":"integer"},"reason":{"description":"Why score is null, when it is","type":["string","null"]},"recommendations":{"items":{"properties":{"component ⟨18 unchanged words⟩ or tag (kind, label, value, where). Null when there is nothing to publish, for example \"turn on DKIM in your provider\".","properties":{"kind":{"type":["string","null"]},"label":{"type":["string","null"]},"name":{"type":["string","null"]},"note":{"type":["string","null"]},"type":{"type":["string","null"]},"value":{"type":["string","null"]},"where":{"type":["string","null"]}},"type":["object","null"]},"id":{"type":"string"}, ⟨47 unchanged words⟩ "Out of 100, exactly as astraverify.com shows itit. Null when not_applicable or inconclusive is set.","type":["integer","null"]},"verdict":{"description":"One sentence  ⟨26 unchanged words⟩