Scanning
Scanning your domain…
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Scanned Nov 4, 2026 17:26 UTC · 7 checks · public report
Solid base — two policy steps remain.
blockposter.net publishes DMARC with p=none — spoofed mail is monitored but not blocked.
Your SPF check is using a soft-fail setting at the end, which means other servers are told to treat unexpected senders as suspicious but not always block them. This matters because it makes your domain a little easier to spoof, though it still works for DMARC. The fix, if you want to tighten security, is to switch to a hard-fail setting only after you’re sure every legitimate sender is included.
v=spf1 include:_spf.mx. DMARC is set up, but it is only in monitoring mode, so it is not actively blocking forged or suspicious emails. This matters because attackers can still impersonate your domain more easily, which can hurt trust and increase the chance of phishing. The fix is to change DMARC from monitoring-only to an enforcement policy so mail that fails checks is handled more strictly.
What DNS shows against each provider's published rules. Not a compliance verdict.
3 met · 1 not checked
We email you a link to the full report, with every finding and fix. Opening it signs you in to a free account and starts a 14‑day Monitor trial. No card, and you can unsubscribe in one click.
Check SPF, DMARC, DKIM, MX, DNS health, blacklists and domain & SSL expiry in one free scan, with the exact record to paste for each problem it finds.
Domain owner? Re-scan any time, or email hello@dnsdoctor.dev to have this page removed.
Edit your SPF record at Cloudflare — step-by-step guide.
v=DMARC1; p=none; rua=mailto:da097a0049bb46df934abcceb9dfc0f0@dmarc-reports.cloudflare.netEdit your DMARC record at Cloudflare — step-by-step guide.
Publish your DKIM record at Cloudflare — step-by-step guide.
3 met · 1 not checked
2 met · 1 not checked
2 met · 1 not checked
Send one real email and see how Gmail, Yahoo, Outlook and Apple are likely to treat it.DNS can't show these 4. One real message can.
Send a test emailSpam complaint rate stays under 0.3%Only each provider's own sender tools show this. All senders at Gmail, Yahoo.
How we read these: sender rules in our methodology. Each provider's rules: Gmail · Yahoo · Outlook · Apple