Scanning
Scanning your domain…
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Scanned Nov 12, 2026 10:30 UTC · 7 checks · public report
Solid base — one policy step remains.
ricis.com publishes an enforcing DMARC policy, so mail that forges its domain is quarantined or rejected at the recipient.
Your SPF record is set to softfail at the end, which means mail from servers not listed is treated more leniently instead of being fully rejected. This matters because it gives a little less protection against spoofed email, but it is still acceptable for DMARC. The fix, if you want stricter protection, is to switch to a hard fail only after you’ve confirmed every legitimate sender is included.
v=spf1 include:amazonses.com Publish your DKIM record at Cloudflare — step-by-step guide.
What DNS shows against each provider's published rules. Not a compliance verdict.
3 met · 1 not checked
We email you a link to the full report, with every finding and fix. Opening it signs you in to a free account and starts a 14‑day Monitor trial. No card, and you can unsubscribe in one click.
Check SPF, DMARC, DKIM, MX, DNS health, blacklists and domain & SSL expiry in one free scan, with the exact record to paste for each problem it finds.
Domain owner? Re-scan any time, or email hello@dnsdoctor.dev to have this page removed.
Edit your SPF record at Cloudflare — step-by-step guide.
3 met · 1 not checked
2 met · 1 not checked
2 met · 1 not checked
Send one real email and see how Gmail, Yahoo, Outlook and Apple are likely to treat it.DNS can't show these 4. One real message can.
Send a test emailSpam complaint rate stays under 0.3%Only each provider's own sender tools show this. All senders at Gmail, Yahoo.
How we read these: sender rules in our methodology. Each provider's rules: Gmail · Yahoo · Outlook · Apple