gmail.net

Findings

• Fail No NS records returned for the domain DNS-NO-NS

  Recursive resolvers could not obtain a nameserver set for the apex.

  How to fix: Check the delegation at the registrar and the zone on the authoritative servers.

  Read the fix guide →

• Fail No SPF record SPF-MISSING

  Receivers cannot tell which servers may send mail for this domain, and DMARC cannot pass on SPF.

  How to fix: Publish a TXT record such as "v=spf1 include:<your provider> -all".

  Read the fix guide →

• Fail No DMARC record DMARC-MISSING

  Without DMARC, SPF and DKIM results are advisory and spoofed mail is not rejected. Google and Yahoo require DMARC from bulk senders.

  How to fix: Publish _dmarc.gmail.net TXT "v=DMARC1; p=none; rua=mailto:dmarc@gmail.net" and move to p=quarantine, then p=reject.

  Read the fix guide →

• Fail Spoofing protection: none SPOOF-EXPOSED

  Anyone can send mail that appears to come from this domain and most receivers will accept it.

  How to fix: Publish SPF with -all, sign with DKIM, then publish DMARC and enforce it.

  Read the fix guide →

• Fail The host does not resolve to a public address WEB-UNRESOLVABLE

  gmail.net does not resolve to any address

  Read the fix guide →

• Caution No MX records MX-MISSING

  Senders will fall back to the A record of the domain. If the domain is not meant to receive mail, publish a null MX.

  How to fix: Add MX records for your mail provider, or "MX 0 ." if the domain never receives mail.

  Read the fix guide →

• Note Registrant details are withheld DOMAIN-REGISTRANT-REDACTED

  The registry does not publish registrant details

• Note No A record at the apex DNS-NO-APEX-A

  The bare domain does not point at a web server.

  Read the fix guide →

• Note No IPv6 (AAAA) address for the apex DNS-NO-AAAA

  Read the fix guide →
• Note www does not resolve DNS-NO-WWW

  Visitors typing www. in front of the domain will not reach a site.

  Read the fix guide →

• Note No MX records DNS-NO-MX

  Mail for this domain falls back to the A record, or the domain does not receive mail.

  Read the fix guide →

• Note No CAA record DNS-NO-CAA

  Any certificate authority may issue certificates for this domain.

  Read the fix guide →

• Note DNSSEC is not enabled DNSSEC-OFF

  Read the fix guide →
• Note No DKIM key found under common selectors DKIM-NOT-DISCOVERED

  Selectors are chosen by the sender, so a key may exist under a name we did not try. Check a real message header for the s= tag.

  Read the fix guide →

• Note No MTA-STS policy MTASTS-NONE

  Optional; protects inbound mail against TLS downgrade.

• Pass Registration valid for another 1293 days DOMAIN-EXPIRY-OK

  2030-05-15T18:11:48Z

• Pass Transfer lock is on DOMAIN-TRANSFER-LOCK

  Protects against unauthorised transfers.

• Pass Not listed on 5 blocklists checked BLOCKLIST-CLEAN

By facet

The score starts at 100 and loses 15 per fail and 5 per caution. Notes are informational. Findings above are grouped from every facet; open a facet for its records and raw data.