Skip to content
whois.me.uk
Menu
Sign in

example.com

domain Spoofing protected DMARC p=reject

This domain declares it does not receive mail.

Re-run JSON PDF Snapshot Watch this
80 / 100 · Fair 4 pass 4 caution 0 fail 3 note Checked 9 seconds ago (cached) · 307 ms

Findings

  • Caution DKIM selector google is revoked (empty key) DKIM-REVOKED
    Read the fix guide →
  • Caution DKIM selector 20230601 is revoked (empty key) DKIM-REVOKED
    Read the fix guide →
  • Caution DKIM selector 20221208 is revoked (empty key) DKIM-REVOKED
    Read the fix guide →
  • Caution DKIM selector 20210112 is revoked (empty key) DKIM-REVOKED
    Read the fix guide →
  • Note Null MX: this domain declares that it does not receive mail MX-NULL

    RFC 7505 null MX (". 0").

    Read the fix guide →

  • Note No aggregate report address (rua) DMARC-NO-RUA

    You receive no visibility of who sends as your domain.

    Read the fix guide →

  • Note No MTA-STS policy MTASTS-NONE

    Optional; protects inbound mail against TLS downgrade.

  • Pass SPF uses 0 of 10 permitted DNS lookups SPF-LOOKUPS-OK
  • Pass SPF ends with -all SPF-HARDFAIL-ALL
  • Pass DMARC policy is p=reject DMARC-REJECT

    Spoofed mail that fails authentication is rejected.

  • Pass Spoofing protection: enforced SPOOF-PROTECTED

    SPF and DMARC together reject or quarantine forged mail.

Mail servers (MX)

No MX records.

SPF

v=spf1 -all

DNS lookups: 0 / 10 · terminates with -all

DMARC

v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s
Policy
reject
Subdomains
reject
Alignment
DKIM strict, SPF strict
Reports to
nobody

DKIM

google._domainkey · RSA revoked

20230601._domainkey · RSA revoked

20221208._domainkey · RSA revoked

20210112._domainkey · RSA revoked

Selectors are chosen by the sending service, so a key can exist under a name not tried here. The s= tag in a real message header names it.

Transport security

MTA-STS
not published
TLS-RPT
not published
BIMI
not published

Open relay test owners only

Checks whether each mail server accepts mail for recipients at other domains, which spammers exploit. Because the test sends SMTP commands to your server, it is only offered to verified owners.

Create an account and verify the domain to run this test.