← Check another domain

mxtoolbox.com

88/100

A

Scanned 2026-05-12

Cached result — add ?fresh=1 to force a new scan

Subcheck breakdown

Check	Status	Score
DMARC policy	reject	25/25
SPF record	ok	10/10
DKIM selector	found	10/10
TLS certificate	ok	20/20
WHOIS integrity	ok	10/10
Subdomain takeover	ct logs busy	10/15
MTA-STS / TLSRPT	testing	3/5
DNSSEC	unsigned	0/5

Recommendations

Upgrade _mta-sts.mxtoolbox.com from mode=testing to mode=enforce once inbound email flow is verified
Enable DNSSEC on mxtoolbox.com — DS records must be published to the com zone by your registrar

Details

Area	Detail
DMARC	v=DMARC1; p=reject; rua=mailto:634990a7@mxtoolbox.dmarc-report.com,mailto:634990a7@mxtoolbox.dmarc-report.net; ruf=mailto:634990a7@forensics.dmarc-report.com,mailto:634990a7@forensics.dmarc-report.net
SPF	v=spf1 redirect=mxtoolbox.com.hosted.spf-report.com
DKIM selectors	google, selector1, selector2, smtpapi, mailo
TLS certificate	Ok (170 days remaining) — CN=Amazon RSA 2048 M04,O=Amazon,C=US
WHOIS registrar	Network Solutions, LLC
WHOIS expires	2026-09-28T19:28:21Z
Subdomains	CT logs temporarily unavailable — retry shortly
DNSSEC	Unsigned