Scanning
Scanning your domain…
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Scanned Oct 25, 2026 10:26 UTC · 7 checks · public report
Solid base — two policy steps remain.
ekm.fi publishes DMARC with p=none — spoofed mail is monitored but not blocked.
DMARC is set up, but it is only monitoring and not actually protecting your domain from spoofed email. That matters because attackers can still send mail that appears to come from your domain, which can hurt trust and deliverability. To fix it, change DMARC from monitoring mode to an enforcement mode so failing messages are handled instead of just reported.
v=DMARC1; p=none; rua=mailto:reports@reports-sg-eu.inkydmarc.com;This means your email signature key is smaller than recommended, so it is easier to break than a modern one. If an attacker can forge that signature, your messages may be more likely to be spoofed or tampered with. The fix is to replace this DKIM selector with a stronger, modern key size and then update the DNS entry for that selector.
We email you a link to the full report, with every finding and fix. Opening it signs you in to a free account and starts a 14‑day Monitor trial. No card, and you can unsubscribe in one click.
Check SPF, DMARC, DKIM, MX, DNS health, blacklists and domain & SSL expiry in one free scan, with the exact record to paste for each problem it finds.
Domain owner? Re-scan any time — or email hello@dnsdoctor.dev to have this page removed.
_dmarc · Record type: TXT · TTL: 3600v=DMARC1; p=quarantine; rua=mailto:reports@reports-sg-eu.inkydmarc.com; np=reject