Scanning
Scanning your domain…
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Checking SPF, DMARC, DKIM, MX, DNS, blacklists and domain & SSL expiry. A domain we haven't scanned before takes a few seconds — hang tight.
Scanned Nov 1, 2026 05:05 UTC · 7 checks · public report
Solid base — one policy step remains.
zibcg.com publishes an enforcing DMARC policy, so mail that forges its domain is quarantined or rejected at the recipient.
This means your email signing key for the DKIM selector named **selector2** is only 1024 bits, which is considered weak by modern standards. It matters because weaker keys are easier to attack and can reduce trust in your outgoing mail. The fix is to replace that DKIM key with a stronger one, usually 2048 bits, and then update your mail service to use the new key.
Publish your DKIM record at GoDaddy — step-by-step guide.
What DNS shows against each provider's published rules. Not a compliance verdict.
All 4 met
We email you a link to the full report, with every finding and fix. Opening it signs you in to a free account and starts a 14‑day Monitor trial. No card, and you can unsubscribe in one click.
Check SPF, DMARC, DKIM, MX, DNS health, blacklists and domain & SSL expiry in one free scan, with the exact record to paste for each problem it finds.
Domain owner? Re-scan any time, or email hello@dnsdoctor.dev to have this page removed.
All 4 met
All 3 met
All 3 met
Send one real email and see how Gmail, Yahoo, Outlook and Apple are likely to treat it.DNS can't show these 4. One real message can.
Send a test emailSpam complaint rate stays under 0.3%Only each provider's own sender tools show this. All senders at Gmail, Yahoo.
How we read these: sender rules in our methodology. Each provider's rules: Gmail · Yahoo · Outlook · Apple