example-business.test
Fixed demonstration data · DNS check
Core sender controls are present, but DMARC is not yet enforcing and transport reporting is missing.
-
Priority 1
Move DMARC beyond monitoring
- Why it matters
- A monitoring-only policy does not ask receiving systems to quarantine or reject failed mail.
- Observed evidence
v=DMARC1; p=none; rua=mailto:dmarc@example.test- Fix next
- Validate legitimate senders, then stage pct and policy changes toward quarantine or reject.
-
Priority 2
Add TLS failure reporting
- Why it matters
- Without TLS-RPT, delivery teams have less evidence when encrypted transport fails.
- Observed evidence
No TXT record observed at _smtp._tls- Fix next
- Publish a valid TLS-RPT record with an actively monitored report destination.
-
Observed
SPF is present
- Why it matters
- The domain publishes a sender-authorisation policy with a terminal mechanism.
- Observed evidence
v=spf1 include:_spf.example.test -all- Fix next
- Retest after changing authorised senders and keep DNS lookup count within SPF limits.