Email & DNS report

robertfriswell.co.uk

Scanned Nov 9, 2026 11:42 UTC · 7 checks · public report

Health grade

Solid base — two policy steps remain.

BGrade B

2 warnings4 passing1 not checkedNot checked: details inline below.

In one line

Can robertfriswell.co.uk be spoofed?

robertfriswell.co.uk publishes DMARC with p=none — spoofed mail is monitored but not blocked.

WarningSPF

Start here

SPF ends in '?all' (neutral — failing mail is treated no differently) rather than '-all' — acceptable for DMARC (non-pass either way); hardening to '-all' is optional and only safe once every legitimate sender is in the record

1 of 10 DNS lookups used

AI explanation

Your SPF setting currently ends with a neutral policy, which means mail servers are not told to strongly reject messages that do not match your approved senders. This matters because it gives less protection against spoofed email, even though it is still acceptable for DMARC. The fix is to change the ending to a stricter reject policy, but only after you are sure every legitimate email sender is already included.

Current SPF

v=spf1 include:spf.

All findings — worst first

WarningDMARCDMARC is published but p=none (monitoring only, no protection)
Start monitoring robertfriswell.co.uk →
no enforcement record is recommended yet — a scan alone could not confirm that your mail aligns (valid SPF and a DKIM signature), and moving off p=none without that evidence risks silently blocking legitimate mail. Gather aggregate-report evidence first, then step up: evidence before enforcement
p=none only monitors — it does not block spoofing
no rua= tag: you receive no aggregate reports to measure alignment
no np= tag: non-existent subdomains fall back to sp/p — RFC 9989 §4.7's np=reject can protect them now
publish a rua= reporting address so receivers send you aggregate reports — the reports are the only evidence that can unlock a stricter policy
AI explanation
DMARC is set up, but it is only monitoring messages and not blocking anything. That means spoofed or fake emails using your domain can still get through more easily. To fix it, change DMARC from monitoring-only to an enforcement mode so mail that fails checks is rejected or sent to spam.

Gmail, Yahoo, Outlook and Apple sender rules

What DNS shows against each provider's published rules. Not a compliance verdict.

Gmail

All 4 met

Yahoo

Email me this report

We email you a link to the full report, with every finding and fix. Opening it signs you in to a free account and starts a 14‑day Monitor trial. No card, and you can unsubscribe in one click.

Scan your domain

Check SPF, DMARC, DKIM, MX, DNS health, blacklists and domain & SSL expiry in one free scan, with the exact record to paste for each problem it finds.

Domain owner? Re-scan any time, or email hello@dnsdoctor.dev to have this page removed.

Scanning your domain…

Can robertfriswell.co.uk be spoofed?

SPF ends in '?all' (neutral — failing mail is treated no differently) rather than '-all' — acceptable for DMARC (non-pass either way); hardening to '-all' is optional and only safe once every legitimate sender is in the record

All findings — worst first

Gmail, Yahoo, Outlook and Apple sender rules

Scan your domain