A

example.com

Scores 91 / 100 on email authentication. 0 critical, 1 warning.

Measured just now. Live DNS, nothing cached from a third party.

Nobody is collecting reports for example.com. The DMARC record has no rua address, so the reports Google and Microsoft would happily send you are never sent. Start collecting them free - one domain, no card.

Findings

Ordered worst first. Every item says what to change.

warnNo rua address - you are flying blind

Without an rua tag no mailbox provider sends you aggregate reports, so you cannot see who is sending as you.

Fix: Add rua=mailto:<your reporting address> to the DMARC record.

infoSubdomain policy sp=reject

goodMX records found

0

goodSPF record found

v=spf1 -all

goodSPF uses 0 of 10 permitted DNS lookups

goodSPF ends in -all (hard fail)

goodDMARC record found

v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s

goodDMARC policy is p=reject

Spoofed mail is refused.

goodDKIM keys found (26 selector(s))

google, selector1, selector2, k1, k2, s1, s2, dkim, default, mail, smtp, mandrill, zoho, sm, sendgrid, fm1, fm2, fm3, protonmail, mailjet, everlytickey1, pm, pic, dkim1, ctct1, hs1

Records as published

LookupResult
MX 0
TXT (root) _k2n1y4vw3qtb4skdx9e7dxt97qrmmq9
v=spf1 -all
_dmarc TXT v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s
BIMI none published
MTA-STS none published
TLS-RPT none published
DKIM google._domainkey
selector1._domainkey
selector2._domainkey
k1._domainkey
k2._domainkey
s1._domainkey
s2._domainkey
dkim._domainkey
default._domainkey
mail._domainkey
smtp._domainkey
mandrill._domainkey
zoho._domainkey
sm._domainkey
sendgrid._domainkey
fm1._domainkey
fm2._domainkey
fm3._domainkey
protonmail._domainkey
mailjet._domainkey
everlytickey1._domainkey
pm._domainkey
pic._domainkey
dkim1._domainkey
ctct1._domainkey
hs1._domainkey

This page is a permanent link. Send it to whoever owns the DNS.

A grade is a snapshot. Reports are the film.

This page tells you what example.com has published. It cannot tell you who is actually sending mail as example.com today - only DMARC reports do that, and only if somebody is collecting them.

Monitor example.com free Pricing for a roster