← Check another domain

example.com

85/100

A

Scanned 2026-05-12

Cached result — add ?fresh=1 to force a new scan

Subcheck breakdown

Check	Status	Score
DMARC policy	reject	25/25
SPF record	ok	10/10
DKIM selector	found	10/10
TLS certificate	ok	20/20
WHOIS integrity	whois rate limited	5/10
Subdomain takeover	ct logs busy	10/15
MTA-STS / TLSRPT	missing	0/5
DNSSEC	signed	5/5

Recommendations

Publish MTA-STS: add _mta-sts.example.com TXT and host a policy at https://mta-sts.example.com/.well-known/mta-sts.txt

Details

Area	Detail
DMARC	v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s
SPF	v=spf1 -all
DKIM selectors	default, google, selector1, selector2, mail, dkim, s1, s2, k1, k2, mta, dkim1, dkim2, 20240106, 20240108, 20221208, 20230601, 20230607, selector1-Office365, selector2-Office365, s1024, s2048, smtpapi, mailo, krs, k1024
TLS certificate	Ok (50 days remaining) — CN=Cloudflare TLS Issuing ECC CA 1,O=CLOUDFLARE\, INC.,C=US
WHOIS registrar	—
WHOIS expires	—
Subdomains	CT logs temporarily unavailable — retry shortly
DNSSEC	Signed