Last scanned 2h ago · Mar 30, 2026, 10:53 PM
Only SPF is configured. Your domain needs SPF, DKIM, and DMARC working together to prevent spoofing.
First scan · Mar 30, 2026, 10:53 PM
Detected Record
v=DMARC1; p=none; rua=mailto:mailauth-reports@google.com
Policy
none
Aggregate Reporting
mailto:mailauth-reports@google.com
DKIM Alignment
relaxed
SPF Alignment
relaxed
Progress to p=quarantine and then p=reject once you have identified all legitimate senders via RUA reports.
Detected Record
v=spf1 ?all
All Mechanism
?all (neutral)
DNS Lookups
1/10
Record Length
11 bytes
Change ?all to ~all or -all for meaningful sender authorization.
Ensure your email provider has published DKIM keys. If using a custom selector, DKIM may still be active.
Publish an MTA-STS TXT record and host a policy file at https://mta-sts.yourdomain/.well-known/mta-sts.txt.
Publish a TLS-RPT record to receive reports when sending servers fail to establish encrypted connections.
Publish a BIMI record with your brand SVG logo. Requires DMARC at p=quarantine or p=reject with pct=100.