Domain Overview
The Domain Overview page provides a comprehensive view of your domain's email security status.
Security Score Card
At the top of the page, you'll see your domain's overall security score:
- Letter Grade (A-F): Quick visual indicator
- Numeric Score (0-100): Precise measurement
- Score Trend: Change since last check
DNS Check Summary
The overview shows the status of each email security protocol:
Authentication Protocols
| Check | What It Monitors |
|---|---|
| MX Records | Mail server configuration and TLS support |
| SPF | Sender Policy Framework record |
| DKIM | DomainKeys Identified Mail selectors |
| DMARC | Domain-based Message Authentication policy |
Security Policies
| Check | What It Monitors |
|---|---|
| MTA-STS | Mail Transfer Agent Strict Transport Security |
| TLS-RPT | TLS Reporting configuration |
| BIMI | Brand Indicators for Message Identification |
| DNSSEC | DNS Security Extensions |
Status Indicators
Each check displays one of these statuses:
- ✅ Valid: Correctly configured and following best practices
- ⚠️ Warning: Functional but has room for improvement
- ❌ Error: Missing, invalid, or misconfigured
- ⏳ Checking: Currently being verified
Navigating to Details
Click on any check card to see detailed information:
- Full record content: See exactly what's in your DNS
- Validation results: Specific issues identified
- Recommendations: How to fix problems
- Best practices: Tips for improvement
Recent Reports
If DMARC reporting is configured, you'll see:
- Latest reports received: Most recent DMARC aggregate reports
- Authentication summary: Pass/fail statistics
- Source breakdown: Which mail servers are sending as your domain
Quick Actions
From the overview page, you can:
- Run Check: Manually trigger a fresh DNS check
- View Reports: Jump to the reports section
- Settings: Access domain-specific settings
Score Breakdown
Click on your security score to see a detailed breakdown:
| Category | Max Points | Description |
|---|---|---|
| MX Records | 10 | Valid mail servers with TLS |
| SPF | 15 | Properly configured SPF record |
| DKIM | 10 | Valid DKIM selectors |
| DMARC | 25 | DMARC policy and reporting |
| MTA-STS | 10 | MTA-STS policy configured |
| TLS-RPT | 10 | TLS reporting enabled |
| BIMI | 5 | Brand logo configured |
| DNSSEC | 10 | DNS security enabled |
| DANE | 5 | DANE/TLSA records (bonus) |
The breakdown shows:
- Points earned in each category
- Specific improvements to gain more points
- Priority recommendations
Refresh Interval
MailShield automatically checks your domain:
- Every 2 hours: Routine DNS checks
- On-demand: When you click "Run Check"
- After changes: Within minutes of DNS propagation