Running diagnostic
Running your DNS diagnostic…
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Scanned Aug 3, 2026 17:09 UTC · 7 checks · public report
Solid base — two policy steps remain.
mybusiness.com publishes DMARC with p=none — spoofed mail is monitored but not blocked.
Your SPF setup is currently in “soft fail” mode, which means mail servers are told to be cautious rather than clearly reject messages from unauthorized senders. That matters because it makes spoofed email harder to stop and can let fake messages appear more legitimate. The fix is to change the SPF policy to a stricter “hard fail” setting after you’ve confirmed every real sender is included.
v=spf1 +a +mx +ip4:77.235.50.40 ~allEdit your SPF record at Cloudflare — step-by-step guide.
Your domain has a DMARC setting, but it is only in monitoring mode, so it is not actually blocking fake or forged emails. This matters because attackers can still send messages that look like they came from your domain, which can hurt trust and increase phishing risk. To fix it, change the DMARC policy from monitoring only to an enforcing mode so email receivers are told to reject or quarantine suspicious mail.
One send: the full report — every finding and fix — lands in your inbox, with a free account waiting. Opening it signs you in and starts a 14-day Monitor trial. No card, and you can unsubscribe in one click.
Domain owner? Re-scan any time — or email [email protected] to have this page removed.
v=DMARC1; p=none;_dmarc · Record type: TXT · TTL: 3600v=DMARC1; p=quarantine; np=rejectApply this at Cloudflare — step-by-step guide.