Lab report — email & DNSscan/devcraft.io

devcraft.io

Scanned Aug 25, 2026 20:20 UTC · 7 checks · public report

Health grade

Solid base — two policy steps remain.

BGrade B

2 warnings4 passing1 not checkedNot-checked is by design — details inline below.

In one line

Can devcraft.io be spoofed?

devcraft.io publishes DMARC with p=none — spoofed mail is monitored but not blocked.

WarningSPF

Finding 01

SPF ends in '~all' (softfail) rather than '-all' — switch to '-all' once every legitimate sender is in the record

Current SPF

v=spf1 include:_spf.google.com ip4:103.3.61.137/32 ip6:2400:8901::f03c:91ff:fe59:6f11/64 ~all

All findings — worst first

WarningDMARCDMARC is recorded but p=none (monitoring only — no protection)
Start monitoring devcraft.io →
- p=none only monitors — it does not block spoofing
- no np= tag: non-existent subdomains fall back to sp/p — DMARCbis (RFC 9989) np=reject can protect them now
- aggregate reports sent to wbowling.info may be silently discarded — wbowling.info has not published the RFC 7489 §7.1 authorization record (devcraft.io._report._dmarc.wbowling.info)
Current DMARC
v=DMARC1; p=none; rua=mailto:[email protected]
Prescription
Paste to: · Record type: · TTL:

Email me this report

One send: the full report — every finding and fix — lands in your inbox, with a free account waiting. Opening it signs you in and starts a 14-day Monitor trial. No card, and you can unsubscribe in one click.

Domain owner? Re-scan any time — or email [email protected] to have this page removed.

Running your DNS diagnostic…

Can devcraft.io be spoofed?

SPF ends in '~all' (softfail) rather than '-all' — switch to '-all' once every legitimate sender is in the record

All findings — worst first