gmail.co.uk
domain Spoofing protected DMARC p=rejectNo MX records.
Findings
-
Caution No MX records MX-MISSING
Senders will fall back to the A record of the domain. If the domain is not meant to receive mail, publish a null MX.
How to fix: Add MX records for your mail provider, or "MX 0 ." if the domain never receives mail.
-
Note No DKIM key found under common selectors DKIM-NOT-DISCOVERED
Selectors are chosen by the sender, so a key may exist under a name we did not try. Check a real message header for the s= tag.
-
Note No MTA-STS policy MTASTS-NONE
Optional; protects inbound mail against TLS downgrade.
-
Pass SPF uses 0 of 10 permitted DNS lookups SPF-LOOKUPS-OK
-
Pass SPF ends with -all SPF-HARDFAIL-ALL
-
Pass DMARC policy is p=reject DMARC-REJECT
Spoofed mail that fails authentication is rejected.
-
Pass Spoofing protection: enforced SPOOF-PROTECTED
SPF and DMARC together reject or quarantine forged mail.
Mail servers (MX)
No MX records.
SPF
v=spf1 -all
DNS lookups: 0 / 10 · terminates with -all
DMARC
v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com
- Policy
- reject
- Subdomains
- same as policy
- Alignment
- DKIM relaxed, SPF relaxed
- Reports to
- mailauth-reports@google.com
DKIM
No key found under 54 common selectors.
Selectors are chosen by the sending service, so a key can exist under a name not tried here. The s= tag in a real message header names it.
Transport security
- MTA-STS
- not published
- TLS-RPT
- not published
- BIMI
- not published
Open relay test owners only
Checks whether each mail server accepts mail for recipients at other domains, which spammers exploit. Because the test sends SMTP commands to your server, it is only offered to verified owners.
Create an account and verify the domain to run this test.
