Skip to content
whois.me.uk
Menu
Sign in

gmail.uk

domain Spoofing protected

Registrar Markmonitor Inc. · expires 10 Jun 2027 · DNS by Google Domains ·

Re-run JSON PDF Watch this
75 / 100 · Fair 10 pass 2 caution 1 fail 9 note Checked 5 seconds ago · 4673 ms

Findings

  • Fail The host does not resolve to a public address WEB-UNRESOLVABLE

    gmail.uk does not resolve to any address

    Read the fix guide →

  • Caution SOA expire is shorter than a week DNS-SOA-EXPIRE

    expire=259200s

    How to fix: Secondaries stop answering if the primary is unreachable for this long. 1–4 weeks is typical.

    Read the fix guide →

  • Caution No MX records MX-MISSING

    Senders will fall back to the A record of the domain. If the domain is not meant to receive mail, publish a null MX.

    How to fix: Add MX records for your mail provider, or "MX 0 ." if the domain never receives mail.

    Read the fix guide →

  • Note UK domain: transfers use the IPS tag DOMAIN-UK-TAG

    Current tag: MARKMONITOR. .uk domains move between registrars by changing the tag, not by EPP code.

  • Note Registrant details are withheld DOMAIN-REGISTRANT-REDACTED

    Details withheld under the registry privacy policy

  • Note No A record at the apex DNS-NO-APEX-A

    The bare domain does not point at a web server.

    Read the fix guide →

  • Note No IPv6 (AAAA) address for the apex DNS-NO-AAAA
    Read the fix guide →
  • Note www does not resolve DNS-NO-WWW

    Visitors typing www. in front of the domain will not reach a site.

    Read the fix guide →

  • Note No MX records DNS-NO-MX

    Mail for this domain falls back to the A record, or the domain does not receive mail.

    Read the fix guide →

  • Note DNSSEC is not enabled DNSSEC-OFF
    Read the fix guide →
  • Note No DKIM key found under common selectors DKIM-NOT-DISCOVERED

    Selectors are chosen by the sender, so a key may exist under a name we did not try. Check a real message header for the s= tag.

    Read the fix guide →

  • Note No MTA-STS policy MTASTS-NONE

    Optional; protects inbound mail against TLS downgrade.

  • Pass Registration valid for another 225 days DOMAIN-EXPIRY-OK

    2027-06-10T20:16:28Z

  • Pass Zone transfers are refused to outsiders DNS-AXFR-CLOSED

    4 server(s) tested

  • Pass All nameservers answer authoritatively DNS-AUTHORITATIVE-OK

    ns1.googledomains.com, ns2.googledomains.com, ns3.googledomains.com, ns4.googledomains.com

  • Pass Nameservers agree on the zone serial DNS-SERIAL-OK

    1

  • Pass CAA restricts which authorities may issue certificates DNS-CAA-OK

    pki.goog

  • Pass SPF uses 0 of 10 permitted DNS lookups SPF-LOOKUPS-OK
  • Pass SPF ends with -all SPF-HARDFAIL-ALL
  • Pass DMARC policy is p=reject DMARC-REJECT

    Spoofed mail that fails authentication is rejected.

  • Pass Spoofing protection: enforced SPOOF-PROTECTED

    SPF and DMARC together reject or quarantine forged mail.

  • Pass Not listed on 5 blocklists checked BLOCKLIST-CLEAN

By facet

Registry

100

0 fail · 0 caution · 1 pass

DNS

95

0 fail · 1 caution · 4 pass

Mail

95

0 fail · 1 caution · 4 pass

Web & TLS

85

1 fail · 0 caution · 0 pass

Reputation

100

0 fail · 0 caution · 1 pass

The score starts at 100 and loses 15 per fail and 5 per caution. Notes are informational. Findings above are grouped from every facet; open a facet for its records and raw data.