Email security
SPF rejects unlisted senders
SPF, DMARC, DKIM, MTA-STS: protection against spoofed mail in your name.
Why it matters
+all explicitly authorizes the whole internet to send as your domain - worse than no SPF.
How to fix it
Quick fix · under 1 hour- Change +all to -all after listing your real senders.
DNS TXT
example.com. TXT "v=spf1 include:_spf.google.com -all"
Test this now, free: SPF, DMARC & DKIM checker - no sign-up.
How we test it
The check runs from the public internet as part of every scan, read-only and without touching your data. If it fails, your report shows the evidence that proves it - the record, header, file or banner we observed - together with the fix above, tailored to the issue we found.
Does your domain pass this check?
Run all 97 checks in about a minute. Your first scan is free, with the complete fix for your most urgent finding.
Scan your domain free