Configuration change intelligence

Email DNS Drift Analyzer

Compare before-and-after DNS snapshots and isolate changes to MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT and BIMI.

dns diff toolemail dns change checkerspf dmarc diffdns migration audit
Compare two email-DNS statesPaste zone exports, change records or mail-related DNS snapshots. Comparison is based only on the supplied text.

What this analysis does

Paste two zone or change snapshots. Mailybox normalizes the mail-control records, identifies additions and removals, and prioritizes dangerous regressions such as lost MX or DMARC policy, allow-all SPF posture and selector removal. The result is a change review rather than a generic text diff.

How to use the result

Use real evidence

Paste the exact domain, header, message or configuration. The result is only as useful as the evidence supplied.

Review the findings

Mailybox separates observations from inferred causes so you can see what is known and what still needs verification.

Retest after changes

Email authentication and routing are stateful. Re-run the analysis after publishing a fix.

Interpretation matters

Email systems combine DNS, message-level evidence, provider policy and intermediate infrastructure. A single passing check is not proof that every message will deliver, and a single warning is not proof that a domain is misconfigured. Mailybox is designed to expose the evidence and the relationship between signals so the next action is clear.