Running diagnostic
Running your DNS diagnostic…
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Scanned Oct 13, 2026 05:14 UTC · 7 checks · public report
Solid base — two policy steps remain.
hamiltonisland.com.au publishes an enforcing DMARC policy, so mail that forges its domain is quarantined or rejected at the recipient.
Your SPF check is using a soft-fail setting, which means mail that is not listed is treated as suspicious but not strictly blocked. This matters because it is a little less strict than a hard-fail setup, so spoofed mail may have a bit more room to slip through. The fix, if you want stricter protection, is to switch to a hard-fail setting only after you are sure every legitimate sender is already included.
v=spf1 include:_s00003635.autospf.email ~allEdit your SPF record at Amazon Route 53 — step-by-step guide.
This means your email signature key is smaller than recommended, so it is easier to break than a modern one. If an attacker can forge that signature, your messages may be more likely to be spoofed or tampered with. The fix is to replace this DKIM selector with a stronger, modern key size and then update the DNS entry for that selector.
Publish your DKIM record at Amazon Route 53 — step-by-step guide.
One send: the full report — every finding and fix — lands in your inbox, with a free account waiting. Opening it signs you in and starts a 14-day Monitor trial. No card, and you can unsubscribe in one click.
Domain owner? Re-scan any time — or email hello@dnsdoctor.dev to have this page removed.