DNS Tool

Engineer's DNS Intelligence Report

Generated 2026-03-13 01:54:17 UTC
Duration 0.8s
Version v26.36.11
Integrity a08ca1cfa090031d43a3b0e36384a7058be04188b697c0da8d688bd531b6128e39d59e4cd92512bc294ceb44860df9dc13fc708f561c986441cf07182890d20f

TLP:AMBER

Limited disclosure — recipients may share within their organization only

Subject Domain

gmg-mantel.de

Engineer's DNS Intelligence Report

gmg-mantel.de

2026-03-13 01:54:17 UTC · 0.8s ·v26.36.11 · SHA-3-512: a08c✱✱✱✱ Verify

Executive Methodology

Recon Mode Snapshot Re-analyze New Domain

Footprint N/A

Non-existent / Undelegated Domain

Domain is not delegated or has no DNS records. This may be an unused subdomain or unregistered domain.

What This Means

No authoritative DNS data is available for this domain
Security posture cannot be evaluated without DNS records
The domain may never have been registered, or has expired
If this is your domain, check your registrar to confirm it's active

Try Another Domain

Intelligence Sources

This analysis used 4 DNS resolvers (consensus), reverse DNS (PTR), Team Cymru (ASN attribution), IANA RDAP (registrar), crt.sh (CT logs), and SMTP probing (transport). All using open-standard protocols.

Full List

Verify Report Integrity SHA-3-512 Has this report been altered since generation? Verify below

This cryptographic hash seals the analysis data, domain, timestamp, and tool version into a tamper-evident fingerprint. Any modification to the report data will produce a different hash. This is distinct from the posture hash (used for drift detection) — the integrity hash uniquely identifies this specific report instance.

a08ca1cfa090031d43a3b0e36384a7058be04188b697c0da8d688bd531b6128e39d59e4cd92512bc294ceb44860df9dc13fc708f561c986441cf07182890d20f

Evaluations reference 12 RFCs. Methods are reproducible using the verification commands provided. Results reflect DNS state at 2026-03-13 01:54:17 UTC.

Every finding in this report is backed by DNS queries you can run yourself. These vetted one-liners reproduce the exact checks used to build this report for gmg-mantel.de. Our analysis adds multi-resolver consensus, RFC-based evaluation, and cross-referencing — but the underlying data is always independently verifiable. We are intelligence analysts, not gatekeepers.

DNS Records

Query A records (IPv4) RFC 1035

dig +noall +answer gmg-mantel.de A

Query AAAA records (IPv6) RFC 1035

dig +noall +answer gmg-mantel.de AAAA

Query MX records (mail servers) RFC 1035

dig +noall +answer gmg-mantel.de MX

Query NS records (nameservers) RFC 1035

dig +noall +answer gmg-mantel.de NS

Query TXT records RFC 1035

dig +noall +answer gmg-mantel.de TXT

Email Authentication

Check SPF record RFC 7208

dig +short gmg-mantel.de TXT | grep -i spf

Check DMARC policy RFC 7489

dig +short _dmarc.gmg-mantel.de TXT

Check DKIM key for selector 'default' RFC 6376

dig +short default._domainkey.gmg-mantel.de TXT

Check DKIM key for selector 'google' RFC 6376

dig +short google._domainkey.gmg-mantel.de TXT

Check DKIM key for selector 'selector1' RFC 6376

dig +short selector1._domainkey.gmg-mantel.de TXT

Check DKIM key for selector 'selector2' RFC 6376

dig +short selector2._domainkey.gmg-mantel.de TXT

Domain Security

Check DNSSEC DNSKEY records RFC 4035

dig +dnssec +noall +answer gmg-mantel.de DNSKEY

Check DNSSEC DS records RFC 4035

dig +noall +answer gmg-mantel.de DS

Validate DNSSEC chain (requires DNSSEC-validating resolver) RFC 4035

dig +dnssec +cd gmg-mantel.de A @1.1.1.1

Transport Security

Check TLSA record (replace MX_HOST with actual MX) RFC 7672

dig +noall +answer _25._tcp.MX_HOST TLSA

Check MTA-STS DNS record RFC 8461

dig +short _mta-sts.gmg-mantel.de TXT

Fetch MTA-STS policy file RFC 8461

curl -sL https://mta-sts.gmg-mantel.de/.well-known/mta-sts.txt

Check TLS-RPT record RFC 8460

dig +short _smtp._tls.gmg-mantel.de TXT

Brand & Trust

Check BIMI record BIMI Draft

dig +short default._bimi.gmg-mantel.de TXT

Check CAA records (certificate authority authorization) RFC 8659

dig +noall +answer gmg-mantel.de CAA

DNS Records

Check HTTPS/SVCB records RFC 9460

dig +noall +answer gmg-mantel.de HTTPS

Domain Security

Check CDS/CDNSKEY automation records RFC 7344

dig +noall +answer gmg-mantel.de CDS

Infrastructure Intelligence

RDAP domain registration lookup RFC 9083

curl -sL 'https://rdap.org/domain/gmg-mantel.de' | python3 -m json.tool | head -50

Search Certificate Transparency logs RFC 6962

curl -s 'https://crt.sh/?q=%25.gmg-mantel.de&output=json' | python3 -c "import json,sys; [print(e['name_value']) for e in json.load(sys.stdin)]" | sort -u | head -20

Check security.txt RFC 9116

curl -sL https://gmg-mantel.de/.well-known/security.txt | head -20

AI Surface

Check for llms.txt

curl -sI https://gmg-mantel.de/llms.txt | head -5

Check robots.txt for AI crawler rules

curl -s https://gmg-mantel.de/robots.txt | grep -i -E 'GPTBot|ChatGPT|Claude|Anthropic|Google-Extended|CCBot|PerplexityBot'

Commands use dig, openssl, and curl — standard tools available on macOS, Linux, and WSL. Results may vary slightly due to DNS propagation timing and resolver caching.

Intelligence Confidence Audit Engine Verified · 9/9 Evaluated

How confident are these results? Each protocol is independently verified against RFC standards. No self-awarded badges.

SPF

Verified 5280 runs

DKIM

Verified 5095 runs

DMARC

Verified 5264 runs

DANE/TLSA

Verified 5081 runs

DNSSEC

Verified 5262 runs

BIMI

Verified 5094 runs

MTA-STS

Verified 5094 runs

TLS-RPT

Verified 5102 runs

CAA

Verified 5095 runs

Maturity: Development → Verified → Consistent → Gold → Gold Master

Appendix: Verification Commands

The core DNS queries behind this report can be independently verified using these standard terminal commands (dig, openssl, curl). DNS Tool adds multi-resolver consensus, RFC-based evaluation, and cross-referencing on top of the raw data shown here.

DNS Records

Query A records (IPv4) (RFC 1035)

dig +noall +answer gmg-mantel.de A

Query AAAA records (IPv6) (RFC 1035)

dig +noall +answer gmg-mantel.de AAAA

Query MX records (mail servers) (RFC 1035)

dig +noall +answer gmg-mantel.de MX

Query NS records (nameservers) (RFC 1035)

dig +noall +answer gmg-mantel.de NS

Query TXT records (RFC 1035)

dig +noall +answer gmg-mantel.de TXT

Email Authentication

Check SPF record (RFC 7208)

dig +short gmg-mantel.de TXT | grep -i spf

Check DMARC policy (RFC 7489)

dig +short _dmarc.gmg-mantel.de TXT

Check DKIM key for selector 'default' (RFC 6376)

dig +short default._domainkey.gmg-mantel.de TXT

Check DKIM key for selector 'google' (RFC 6376)

dig +short google._domainkey.gmg-mantel.de TXT

Check DKIM key for selector 'selector1' (RFC 6376)

dig +short selector1._domainkey.gmg-mantel.de TXT

Check DKIM key for selector 'selector2' (RFC 6376)

dig +short selector2._domainkey.gmg-mantel.de TXT

Domain Security

Check DNSSEC DNSKEY records (RFC 4035)

dig +dnssec +noall +answer gmg-mantel.de DNSKEY

Check DNSSEC DS records (RFC 4035)

dig +noall +answer gmg-mantel.de DS

Validate DNSSEC chain (requires DNSSEC-validating resolver) (RFC 4035)

dig +dnssec +cd gmg-mantel.de A @1.1.1.1

Transport Security

Check TLSA record (replace MX_HOST with actual MX) (RFC 7672)

dig +noall +answer _25._tcp.MX_HOST TLSA

Check MTA-STS DNS record (RFC 8461)

dig +short _mta-sts.gmg-mantel.de TXT

Fetch MTA-STS policy file (RFC 8461)

curl -sL https://mta-sts.gmg-mantel.de/.well-known/mta-sts.txt

Check TLS-RPT record (RFC 8460)

dig +short _smtp._tls.gmg-mantel.de TXT

Brand & Trust

Check BIMI record (BIMI Draft)

dig +short default._bimi.gmg-mantel.de TXT

Check CAA records (certificate authority authorization) (RFC 8659)

dig +noall +answer gmg-mantel.de CAA

DNS Records

Check HTTPS/SVCB records (RFC 9460)

dig +noall +answer gmg-mantel.de HTTPS

Domain Security

Check CDS/CDNSKEY automation records (RFC 7344)

dig +noall +answer gmg-mantel.de CDS

Infrastructure Intelligence

RDAP domain registration lookup (RFC 9083)

curl -sL 'https://rdap.org/domain/gmg-mantel.de' | python3 -m json.tool | head -50

Search Certificate Transparency logs (RFC 6962)

curl -s 'https://crt.sh/?q=%25.gmg-mantel.de&output=json' | python3 -c "import json,sys; [print(e['name_value']) for e in json.load(sys.stdin)]" | sort -u | head -20

Check security.txt (RFC 9116)

curl -sL https://gmg-mantel.de/.well-known/security.txt | head -20

AI Surface

Check for llms.txt

curl -sI https://gmg-mantel.de/llms.txt | head -5

Check robots.txt for AI crawler rules

curl -s https://gmg-mantel.de/robots.txt | grep -i -E 'GPTBot|ChatGPT|Claude|Anthropic|Google-Extended|CCBot|PerplexityBot'

Rules of Engagement

What You May Do

What You May Not Do

Engineer's DNS Intelligence Report

Intelligence Dissemination

Non-existent / Undelegated Domain

Intelligence Sources

Verify Report Integrity SHA-3-512 Has this report been altered since generation? Verify below

Reproduce the Evidence Transparency Source-Verifiable

Appendix: Verification Commands

RFC Reference