Public DNS Preflight - Sample Prospect

Generated: 2026-05-28 20:45 UTC

This preflight uses only public DNS records. It is a sales/research brief, not a replacement for a full OutboundScope audit with mailbox, campaign, warmup, bounce, and webhook data.

Risk Summary

• Domains checked: 2
• Findings: 0 high, 2 medium, 4 low

Findings

Medium: Missing DMARC record

Domain: `outboundscope.com`

No _dmarc TXT record starting with v=DMARC1 was found.

Medium: No common DKIM selector found

Domain: `outboundscope.com`

Checked google, selector1, selector2, default, k1, s1, s2. This does not prove DKIM is absent, but it is worth verifying.

Low: No MTA-STS policy marker

Domain: `outboundscope.com`

This is optional for many senders, but useful for mature mail setups.

Low: No SMTP TLS reporting record

Domain: `outboundscope.com`

TLS reporting is optional, but it helps catch transport-security failures.

Low: No MTA-STS policy marker

Domain: `findable.no`

This is optional for many senders, but useful for mature mail setups.

Low: No SMTP TLS reporting record

Domain: `findable.no`

TLS reporting is optional, but it helps catch transport-security failures.

Domain Evidence

outboundscope.com

• MX: 10 eforward1.registrar-servers.com, 15 eforward4.registrar-servers.com, 10 eforward2.registrar-servers.com, 20 eforward5.registrar-servers.com, 10 eforward3.registrar-servers.com
• SPF: v=spf1 include:spf.efwd.registrar-servers.com ~all
• DMARC: not found
• Common DKIM selectors found: none
• MTA-STS marker: not found
• TLS reporting marker: not found

findable.no

• MX: 10 ALT4.ASPMX.L.GOOGLE.COM, 5 ALT2.ASPMX.L.GOOGLE.COM, 5 ALT1.ASPMX.L.GOOGLE.COM, 10 ALT3.ASPMX.L.GOOGLE.COM, 1 ASPMX.L.GOOGLE.COM
• SPF: v=spf1 include:_spf.google.com include:amazonses.com ~all
• DMARC: v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@findable.no
• Common DKIM selectors found: google
• MTA-STS marker: not found
• TLS reporting marker: not found

Suggested Next Step

Use this brief to decide whether the prospect is worth a full setup audit. The full audit should still request read-only outbound-platform exports/API access, sender-domain inventory, warmup status, campaign analytics, bounce/reply history, and alerting/webhook configuration.