Scanning
Scanning your domain…
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Scanned Oct 30, 2026 08:19 UTC · 7 checks · public report
One finding blocks deliverability.
sparash.org has no enforceable DMARC policy, so mail that forges its domain is not blocked at the recipient.
Your domain does not have a DMARC policy set up, which means receiving mail servers have no clear instructions for what to do with messages that claim to come from your domain. This matters because it makes your domain easier to impersonate in phishing and spoofing attacks, and it also reduces your control and visibility over email delivery. The fix is to publish a DMARC record in your DNS for the domain.
_dmarc · Record type: TXT · TTL: 3600v=DMARC1; Your SPF setting is currently in “soft fail” mode, which means mail from servers not listed there may still be treated as suspicious rather than blocked outright. This matters because it can leave some room for spoofed or unauthorized mail to be accepted by receiving systems. The fix is to change the ending from soft fail to hard fail, but only after you are sure every legitimate sender is already included.
What DNS shows against each provider's published rules. Not a compliance verdict.
3 of 4 met
We email you a link to the full report, with every finding and fix. Opening it signs you in to a free account and starts a 14‑day Monitor trial. No card, and you can unsubscribe in one click.
Check SPF, DMARC, DKIM, MX, DNS health, blacklists and domain & SSL expiry in one free scan, with the exact record to paste for each problem it finds.
Domain owner? Re-scan any time, or email hello@dnsdoctor.dev to have this page removed.
v=spf1 include:zohomail.in ~allThis means your email signing key is too small, which makes it easier for attackers to break the protection that helps prove your messages are really from you. If it stays weak, email can be more vulnerable to spoofing or tampering. The fix is to replace the current DKIM key with a stronger one, usually by creating a new DKIM key pair with a larger key size and updating the signing setup to use it.
3 of 4 met
2 of 3 met
2 of 3 met
Send one real email and see how Gmail, Yahoo, Outlook and Apple are likely to treat it.DNS can't show these 4. One real message can.
Send a test emailSpam complaint rate stays under 0.3%Only each provider's own sender tools show this. All senders at Gmail, Yahoo.
How we read these: sender rules in our methodology. Each provider's rules: Gmail · Yahoo · Outlook · Apple