How DomainPulse tests a domain
The service analyzes publicly reachable DNS, SMTP and TLS signals. It does not change configuration or send messages during a normal public scan.
Health score
The DomainPulse Health Score is a product metric, not an industry standard. Critical and warning findings reduce it; network limits are shown as unknown rather than fabricated failures.
Spoofing protection assessment
The assessment weighs valid DMARC policy and coverage most heavily: missing or invalid is high exposure, p=none is weak, quarantine is partial, and reject at pct=100 is strong. SPF is supporting evidence. An unknown DKIM selector is never treated as missing DKIM.
Limitations
Results are point-in-time and depend on public network visibility. Resolvers and receivers can see and apply configuration differently. DomainPulse does not guarantee delivery, absence of phishing, or absolute spoofing prevention.