Running diagnostic
Running your DNS diagnostic…
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Scanned Oct 5, 2026 13:50 UTC · 7 checks · public report
Solid base — one policy step remains.
alecu.eu publishes an enforcing DMARC policy, so mail that forges its domain is quarantined or rejected at the recipient.
Your DKIM setup is using a weaker 1024-bit signing key, which is easier to attack than a stronger modern key. This matters because it can reduce trust in your outgoing email and make it more likely to be tampered with or rejected by stricter mail providers. The fix is to update your email service’s DKIM settings to use a stronger key, usually 2048-bit, and then publish the new DNS change they provide.
One send: the full report — every finding and fix — lands in your inbox, with a free account waiting. Opening it signs you in and starts a 14-day Monitor trial. No card, and you can unsubscribe in one click.
Domain owner? Re-scan any time — or email hello@dnsdoctor.dev to have this page removed.