Lab report — email & DNSscan/istrafresh.hr

istrafresh.hr

Scanned Aug 25, 2026 18:24 UTC · 7 checks · public report

Health grade

Solid base — one policy step remains.

BGrade B

1 warning4 passing2 not checkedNot-checked is by design — details inline below.

In one line

Can istrafresh.hr be spoofed?

istrafresh.hr publishes DMARC with p=none — spoofed mail is monitored but not blocked.

WarningDMARC

Finding 01

DMARC is recorded but p=none (monitoring only — no protection)

p=none only monitors — it does not block spoofing
pct=50 applies the policy to only 50% of mail; pct is deprecated in DMARCbis
no rua= tag: you receive no aggregate reports to measure alignment
no np= tag: non-existent subdomains fall back to sp/p — DMARCbis (RFC 9989) np=reject can protect them now

Current DMARC

v=DMARC1;p=none;sp=none;pct=50;adkim=r;aspf=r;

Prescription

Paste to: _dmarc · Record type: TXT · TTL: 3600

v=DMARC1;p=quarantine;sp=none;adkim=r;aspf=r; np=reject

All findings — worst first

InfoDKIMDKIM: checked common selectors — none found (DKIM may use a custom selector)
We probe the common selectors — yours may be custom.
Monitor DKIM →
Check a custom selector →
More on DKIM
DKIM checker →
What is DKIM? Signatures, selectors, and keys →
Google Workspace: set up SPF, DKIM and DMARC →
Microsoft 365: set up SPF, DKIM and DMARC →

Email me this report

One send: the full report — every finding and fix — lands in your inbox, with a free account waiting. Opening it signs you in and starts a 14-day Monitor trial. No card, and you can unsubscribe in one click.

Domain owner? Re-scan any time — or email [email protected] to have this page removed.

Running your DNS diagnostic…

Can istrafresh.hr be spoofed?

DMARC is recorded but p=none (monitoring only — no protection)

All findings — worst first