Skip to content
whois.me.uk
Menu
Sign in

google.co.uk

domain Spoofing protected DMARC p=reject

Mail by Google Workspace · Mail handled by smtp.google.com

Re-run JSON PDF Snapshot Watch this
100 / 100 · Good 5 pass 0 caution 0 fail 3 note Checked 3 seconds ago · 2734 ms

Findings

  • Note Only one MX host MX-SINGLE

    A second MX gives senders a fallback during maintenance.

    Read the fix guide →

  • Note No DKIM key found under common selectors DKIM-NOT-DISCOVERED

    Selectors are chosen by the sender, so a key may exist under a name we did not try. Check a real message header for the s= tag.

    Read the fix guide →

  • Note No MTA-STS policy MTASTS-NONE

    Optional; protects inbound mail against TLS downgrade.

  • Pass smtp.google.com supports STARTTLS (TLSv1.3) SMTP-STARTTLS-OK

    TLS_AES_256_GCM_SHA384

  • Pass SPF uses 0 of 10 permitted DNS lookups SPF-LOOKUPS-OK
  • Pass SPF ends with -all SPF-HARDFAIL-ALL
  • Pass DMARC policy is p=reject DMARC-REJECT

    Spoofed mail that fails authentication is rejected.

  • Pass Spoofing protection: enforced SPOOF-PROTECTED

    SPF and DMARC together reject or quarantine forged mail.

Mail servers (MX)

PrefHostAddressReverse DNSSMTP (port 25)
0 smtp.google.com 172.217.76.26, 192.178.223.27, 192.178.223.26, 2a00:1450:4009:c0f:0:0:0:1b, 2a00:1450:4009:c0f:0:0:0:1a yulhrp-in-f26.1e100.net ✓
yulhrs-in-f27.1e100.net ✓
 220 banner in 18 ms
STARTTLS TLSv1.3 TLS_AES_256_GCM_SHA384
cert: mx.google.com valid · until Dec 21 18:40:12 2026 GMT

SPF

v=spf1 -all

DNS lookups: 0 / 10 · terminates with -all

DMARC

v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com
Policy
reject
Subdomains
same as policy
Alignment
DKIM relaxed, SPF relaxed
Reports to
mailauth-reports@google.com

DKIM

No key found under 54 common selectors.

Selectors are chosen by the sending service, so a key can exist under a name not tried here. The s= tag in a real message header names it.

Transport security

MTA-STS
not published
TLS-RPT
not published
BIMI
not published

Open relay test owners only

Checks whether each mail server accepts mail for recipients at other domains, which spammers exploit. Because the test sends SMTP commands to your server, it is only offered to verified owners.

Create an account and verify the domain to run this test.