Domain Overview

Click a domain on the Domains page to open it. The header shows the domain name, its verification status, its usage type and a Run Checks button. Below it are four tabs:

Tab	What's there
Overview	The score, the status of every check, reporting status and a summary of the configuration
Checks	Summary (the score breakdown) and one page per check: SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT, DNSSEC and BIMI
Reports	DMARC, TLS and DMARC Progression
Settings	Domain information and Reporting address, customer and tags, email configuration, billing and deletion

The checks depend on the usage type: DKIM and BIMI appear for domains that send mail, MTA-STS and TLS-RPT for domains that receive mail. DANE results are on the MX page.

The Overview Tab

Next Steps

When something needs fixing, the top of the Overview lists the next steps, such as Set up DMARC or Route DMARC reports to MailShield, with a link to each fix.

Score

• Grade (A to F) and score (out of 100). See Security Score.
• Last checked: when the domain was last checked.
• Reporting address: the address to put in your DMARC and TLS-RPT records.
• PDF report: download a PDF summary of the domain.
• How is this calculated? opens the score breakdown under Checks → Summary.

A domain that isn't verified shows Not verified instead of a score, and a banner with a Set up DNS records button.

The Score history chart shows how the score changed over time, so you can match changes to DNS edits.

Email Security

One row per check, with a short detail and a status:

Status	Meaning
Pass	Configured correctly
Attention	Works, but something should be improved, such as DMARC without MailShield reporting
Fail	Missing or invalid
N/A	Doesn't apply to this domain's usage type
Not checked	No result yet

Click a row to open that check's page, with the full record, the issues found and how to fix them.

Reports

Cards for DMARC Reports and TLS Reports show whether MailShield is receiving reports (Receiving reports) or reporting still needs to be set up (Setup required).

Overview Cards

Summaries of the domain's Outbound Email (SPF, DKIM, DMARC, BIMI), Inbound Email (STARTTLS, MTA-STS, DANE, TLS reporting), Domain settings (DNSSEC, monitoring) and MX Hosts.

When Checks Run

• Automatically: MailShield checks every domain every 2 hours.
• On demand: click Run Checks in the domain header to check right away, for example after you change DNS.

DNS changes can take time to propagate. If a check doesn't show your change yet, wait a few minutes and run the checks again.