Lab report — email & DNSscan/cannavacciuologroup.it

cannavacciuologroup.it

Scanned Sep 4, 2026 14:30 UTC · 7 checks · public report

Health grade

Solid base — one policy step remains.

BGrade B

1 warning5 passing1 not checkedNot-checked is by design — details inline below.

In one line

Can cannavacciuologroup.it be spoofed?

cannavacciuologroup.it publishes DMARC with p=none — spoofed mail is monitored but not blocked.

WarningDMARC

Finding 01

DMARC is recorded but p=none (monitoring only — no protection)

p=none only monitors — it does not block spoofing
no np= tag: non-existent subdomains fall back to sp/p — RFC 9989 §4.7's np=reject can protect them now
a scan can justify p=quarantine at most; p=reject is unlocked only by aggregate-report evidence over a full reporting window, never by a scan

Current DMARC

v=DMARC1; p=none; rua=mailto:[email protected]; ruf=mailto:[email protected]; sp=none; fo=0;

Prescription

Paste to: _dmarc · Record type: TXT · TTL: 3600

v=DMARC1; p=quarantine; rua=mailto:[email protected]; ruf=mailto:[email protected]; sp=none; fo=0; np=reject

All findings — worst first

InfoDNSNo optional DNS hardening (DNSSEC/MTA-STS/TLS-RPT/BIMI) detected
- DNSSEC: not detected
- MTA-STS: not detected
- TLS-RPT: not detected
- BIMI: not detected
More on DNS
DNS record checker →
All guides →
PassSPFSPF record is valid
Keep SPF healthy →

Email me this report

One send: the full report — every finding and fix — lands in your inbox, with a free account waiting. Opening it signs you in and starts a 14-day Monitor trial. No card, and you can unsubscribe in one click.

Domain owner? Re-scan any time — or email [email protected] to have this page removed.

Running your DNS diagnostic…

Can cannavacciuologroup.it be spoofed?

DMARC is recorded but p=none (monitoring only — no protection)

All findings — worst first