Scanning
Scanning your domain…
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Scanned Oct 30, 2026 18:56 UTC · 7 checks · public report
Solid base — three policy steps remain.
ni.com publishes an enforcing DMARC policy, so mail that forges its domain is quarantined or rejected at the recipient.
Your SPF setup is working, but it ends with a softfail policy, which means other mail systems may treat unauthorized senders less strictly. This matters because it can make it a bit easier for spoofed email to slip through or be handled inconsistently. If you want to tighten it, you can change the policy to a hard fail after confirming every legitimate sender is already included.
v=spf1 include:%{ir}.%{v}.%{d}. This means your email signature key is smaller than recommended, so it is easier to break than a modern one. If an attacker can forge that signature, your messages may be more likely to be spoofed or tampered with. The fix is to replace this DKIM selector with a stronger, modern key size and then update the DNS entry for that selector.
Publish your DKIM record at Cloudflare — step-by-step guide.
What DNS shows against each provider's published rules. Not a compliance verdict.
All 4 met
We email you a link to the full report, with every finding and fix. Opening it signs you in to a free account and starts a 14‑day Monitor trial. No card, and you can unsubscribe in one click.
Check SPF, DMARC, DKIM, MX, DNS health, blacklists and domain & SSL expiry in one free scan, with the exact record to paste for each problem it finds.
Domain owner? Re-scan any time, or email hello@dnsdoctor.dev to have this page removed.
Edit your SPF record at Cloudflare — step-by-step guide.
Your site’s TLS certificate is due to expire in 15 days. This matters because browsers may start warning visitors or blocking secure connections once it expires, which can hurt trust and break logins or forms. The fix is to renew or replace the certificate before that date and make sure your server is using the updated one.
domain registration expires 2027-09-29; TLS certificate expires 2026-11-14All 4 met
All 3 met
All 3 met
Send one real email and see how Gmail, Yahoo, Outlook and Apple are likely to treat it.DNS can't show these 4. One real message can.
Send a test emailSpam complaint rate stays under 0.3%Only each provider's own sender tools show this. All senders at Gmail, Yahoo.
How we read these: sender rules in our methodology. Each provider's rules: Gmail · Yahoo · Outlook · Apple