Neo Praxis
June 1, 2026
Prepared by Neo Praxis
Scanned Domain
example-demo.com
30
Score / 100
High Risk
Risk Level
4
Failed
2
Passed
This domain is severely lacking in email authentication and is at significant risk of spoofing and impersonation. A score of 30/100 was calculated across 9 checks. 4 checks failed and 1 produced warning.
| Check | Severity | Status | Finding |
|---|---|---|---|
| MX Records | info | pass | 2 MX record(s) found. This domain accepts email. Mail provider(s) detected: Google Workspace. |
| SPF Record | high | fail | No SPF record found. Without SPF, any server can send email claiming to be from this domain. |
| SPF Policy Strength | high | fail | SPF policy cannot be evaluated because no valid SPF record was found. |
| DMARC Record | high | fail | No DMARC record found. Without DMARC, spoofed emails claiming to be from this domain are not reported or rejected. |
| DMARC Policy | high | fail | DMARC policy cannot be evaluated — no DMARC record was found. |
| DMARC Aggregate Reporting | low | info | DMARC reporting cannot be checked — no DMARC record was found. |
| DKIM Record (Common Selectors) | medium | warning | No DKIM record found using common selectors (google, selector1, selector2, default, k1, mail). DKIM may still be configured with a custom selector. |
| CAA Records | info | pass | 1 CAA record(s) found. Certificate issuance is restricted to authorized CAs. |
| Nameservers | info | info | 2 nameserver(s) found. DNS provider: Cloudflare. |
SPF Record
Add a TXT record at the root domain: v=spf1 include:_spf.google.com -all
SPF Policy Strength
Add an SPF record ending with "-all" to enforce strict sender authorization.
DMARC Record
Add a TXT record at _dmarc.example-demo.com: v=DMARC1; p=quarantine; rua=mailto:[email protected]
DMARC Policy
Add a DMARC record with p=quarantine or p=reject.
| Check | Technical Detail |
|---|---|
| MX Records | 10 aspmx.l.google.com 20 alt1.aspmx.l.google.com |
| SPF Record | No TXT record starting with "v=spf1" was found. |
| SPF Policy Strength | No SPF record found. |
| DMARC Record | No TXT record containing "v=DMARC1" found at _dmarc.example-demo.com. |
| DMARC Policy | No DMARC record found. |
| DMARC Aggregate Reporting | No DMARC record found. |
| DKIM Record (Common Selectors) | Selectors checked: google._domainkey.example-demo.com, selector1._domainkey.example-demo.com, selector2._domainkey.example-demo.com, default._domainkey.example-demo.com, k1._domainkey.example-demo.com, mail._domainkey.example-demo.com. None returned a v=DKIM1 record. |
| CAA Records | 0 issue "letsencrypt.org" |
| Nameservers | ns1.cloudflare.com ns2.cloudflare.com |
Neo Praxis can help verify these findings, prioritize fixes, and implement email authentication improvements such as SPF, DKIM, and DMARC — including configuration, testing, and gradual policy enforcement.
Contact: [email protected]
Request Fix RoadmapRun the email checker against your domain to see your actual configuration.
This report is based on a non-intrusive public DNS configuration review of the target domain. It does not constitute a penetration test, compromise assessment, or security audit. The findings reflect publicly observable email authentication records at the time of the scan. DKIM verification may be incomplete as custom selectors vary by provider. Neo Praxis makes no guarantee that the domain is free from vulnerabilities not covered by this review. This tool does not send email, test mailboxes, or perform SMTP connections.