Scanning
Scanning your domain…
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Scanned Oct 27, 2026 17:23 UTC · 7 checks · public report
Solid base — one policy step remains.
normalmapai.com publishes an enforcing DMARC policy, so mail that forges its domain is quarantined or rejected at the recipient.
Your SPF check is using a soft-fail setting at the end, which means other servers are told to treat unexpected senders as suspicious but not always block them. This matters because it makes your domain a little easier to spoof, though it still works for DMARC. The fix, if you want to tighten security, is to switch to a hard-fail setting only after you’re sure every legitimate sender is included.
v=spf1 include:_spf.mx. Publish your DKIM record at Cloudflare — step-by-step guide.
What DNS shows against each provider's published rules. Not a compliance verdict.
3 met · 1 not checked
We email you a link to the full report, with every finding and fix. Opening it signs you in to a free account and starts a 14‑day Monitor trial. No card, and you can unsubscribe in one click.
Check SPF, DMARC, DKIM, MX, DNS health, blacklists and domain & SSL expiry in one free scan, with the exact record to paste for each problem it finds.
Domain owner? Re-scan any time, or email hello@dnsdoctor.dev to have this page removed.
Edit your SPF record at Cloudflare — step-by-step guide.
3 met · 1 not checked
2 met · 1 not checked
2 met · 1 not checked
DNS can't show these 4. One real message can.
Send a test emailSpam complaint rate stays under 0.3%Only each provider's own sender tools show this. All senders at Gmail, Yahoo.
How we read these: sender rules in our methodology. Each provider's rules: Gmail · Yahoo · Outlook · Apple