Full domain report
The full domain report runs a domain through every DNS and mail check, sums it up in an overview table and creates a PDF you can hand to customers.
The Domain-Komplettbericht (full domain report) is the fastest way to the big picture of a domain. It starts all DNS and mail checks at once, sums them up in an overview and can be passed on to customers as a PDF. It needs a license.
Creating a report
Type the domain into Domain and click Bericht erstellen (create report). The sub-checks run in parallel; depending on the domain the report takes a few seconds. The resolver picker applies to all DNS queries of the report.
What it checks
| Check | What’s behind it |
|---|---|
| IPv4 | the domain’s A records, as in DNS Lookup |
| IPv6 | the domain’s AAAA records |
| Nameserver | the full name server check with delegation, serials, recursion and TCP |
| DNSSEC | the chain of trust, as in the DNSSEC check |
| Registrierung (registration) | WHOIS/RDAP: registrar, term, status |
| MX | mail servers with addresses and reverse DNS |
| SPF | SPF record with includes and the lookup limit |
| DMARC | policy and report recipients |
| DKIM | keys under common selectors |
| BIMI | BIMI record, logo and certificate |
| MTA-STS | MTA-STS record and policy, TLS reporting |
| Blacklist | the addresses of the domain and its mail servers against known DNS blacklists |
DKIM is only searched under widely used selectors here. If your mail provider uses its own selector, the report may find no key even though there is one. In that case check directly with the DKIM-Check and the right selector.
The overview
In the Ergebnis (result) tab, all findings from all checks come first, sorted by severity and prefixed with the name of the check, for example DMARC: … or Nameserver: Lame Delegation …. Below them is the Übersicht (overview) table with one row per check:
| Column | Contents |
|---|---|
| Prüfung (check) | IPv4, Nameserver, DNSSEC … |
| Ergebnis (result) | in Ordnung, Hinweis, Warnung or Fehler, i.e. the worst level of that check |
| Wichtigster Befund (main finding) | the statement of the most severe finding |
This shows at once where things go wrong. Below the overview come all detail tables of the sub-checks. What the individual findings mean and what to do about them is explained in the articles on each check.
If a sub-check fails completely, for instance because a server doesn’t answer, the report doesn’t stop. That check gets the finding Prüfung fehlgeschlagen (check failed) with the error message; all others run as normal.
PDF for customers
From the share icon on the right of the header, choose Als PDF für Kunden … (as PDF for customers) and save the file. The PDF is meant for people who should understand the result without DNS knowledge.
Layout of the PDF:
- Header: “Domain-Bericht”, the domain and the time of the check (Stand: …, as of).
- Gesamtergebnis (overall result) with a coloured bar and the number of findings per level.
- Übersicht with the colour-coded result of every check.
- Befunde (findings): each finding with status dot and explanation, most severe first.
- Details: all tables of the sub-checks.
Every page has the inwendo logo, “inwendo GmbH · www.inwendo.de · erstellt mit der iw Toolbox” and the page number at the bottom. Raw data and dig commands aren’t part of the PDF. If you need them, also export as JSON.
PDF export is available for every check. For all others the header reads “Prüfbericht” (check report) and there’s no overview.
Tips
- With the bulk check you create the full report for a whole list of domains and save the results as CSV.
- With watching the report runs regularly and you get a notification as soon as something changes.
- In the browser some sub-checks are limited, such as the name server check. The app on a Mac, PC or mobile device delivers the complete report.