Scanning
Scanning your domain…
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Scanned Nov 6, 2026 13:32 UTC · 7 checks · public report
One finding blocks deliverability.
gatewaymediation.co.uk has no enforceable DMARC policy, so mail that forges its domain is not blocked at the recipient.
Your domain does not have a DMARC policy set up, which means receiving mail servers have no clear instructions for what to do with messages that claim to come from your domain. This matters because it makes your domain easier to impersonate in phishing and spoofing attacks, and it also reduces your control and visibility over email delivery. The fix is to publish a DMARC record in your DNS for the domain.
_dmarc · Record type: TXT · TTL: 3600v=DMARC1; Your SPF setting is using a soft fail at the end, which means mail from servers not on the approved list is treated as suspicious rather than strictly blocked. This is usually okay for DMARC, but it is a bit less strict. If you want to harden it, change the ending to a strict fail only after you are sure every legitimate sender is included in the SPF list.
What DNS shows against each provider's published rules. Not a compliance verdict.
3 of 4 met
We email you a link to the full report, with every finding and fix. Opening it signs you in to a free account and starts a 14‑day Monitor trial. No card, and you can unsubscribe in one click.
Check SPF, DMARC, DKIM, MX, DNS health, blacklists and domain & SSL expiry in one free scan, with the exact record to paste for each problem it finds.
Domain owner? Re-scan any time, or email hello@dnsdoctor.dev to have this page removed.
v=spf1 include:spf.protection.outlook.com ip4:87.106.100.195 ~allThis means your email signature key is smaller than recommended, so it is easier to break than a modern one. If an attacker can forge that signature, your messages may be more likely to be spoofed or tampered with. The fix is to replace this DKIM selector with a stronger, modern key size and then update the DNS entry for that selector.
Your website’s TLS certificate is due to expire soon, in 17 days. This matters because browsers may start showing security warnings or block some visitors if it is not renewed in time. The fix is to renew or replace the certificate before the expiration date and make sure the updated certificate is installed on the site.
domain registration expires 2027-10-25; TLS certificate expires 2026-11-243 of 4 met
2 of 3 met
2 of 3 met
Send one real email and see how Gmail, Yahoo, Outlook and Apple are likely to treat it.DNS can't show these 4. One real message can.
Send a test emailSpam complaint rate stays under 0.3%Only each provider's own sender tools show this. All senders at Gmail, Yahoo.
How we read these: sender rules in our methodology. Each provider's rules: Gmail · Yahoo · Outlook · Apple