Running diagnostic
Running your DNS diagnostic…
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Scanned Oct 14, 2026 17:45 UTC · 7 checks · public report
Solid base — two policy steps remain.
scalene-systems.com publishes DMARC with p=none — spoofed mail is monitored but not blocked.
Your SPF setup is working, but it uses a softer “fail” setting at the end, which means some emails sent from unlisted servers may still be treated leniently. This matters because it gives spoofed mail a better chance of slipping through and can weaken your sender protection. The fix is to change the SPF policy to a strict fail only after you’re sure every legitimate service that sends mail for your domain is already included.
v=spf1 include:_spf-eu.ionos.com include:spf.protection.outlook.com ~allEdit your SPF record at IONOS — step-by-step guide.
Your domain has DMARC set up, but it is only in monitoring mode, so it is not blocking fake or spoofed emails. That matters because attackers can more easily send messages that look like they came from your domain. To fix it, change the DMARC policy from monitoring only to a stricter enforcement mode so unauthenticated mail is rejected or quarantined.
One send: the full report — every finding and fix — lands in your inbox, with a free account waiting. Opening it signs you in and starts a 14-day Monitor trial. No card, and you can unsubscribe in one click.
Domain owner? Re-scan any time — or email hello@dnsdoctor.dev to have this page removed.
v=DMARC1; p=none; rua=mailto:security@scalene-systems.comEdit your DMARC record at IONOS — step-by-step guide.