# coldemaildomainaudit report: getdemo.example

> Demo report on a fictional sample site.

**Score:** 59/100 · Scanned 2026-10-26T22:31:31.134Z

5 of 11 checks need attention (1 high priority).

- [x] **Exactly one SPF record** (high): 1 SPF record(s).
- [x] **SPF under the 10 DNS-lookup limit (recursive)** (high): 4 lookups counting nested includes.
- [x] **SPF ends with ~all or -all** (medium): Ends with ~all
- [x] **DKIM published for your sender** (high): google
- [ ] **DMARC record** (high): Missing.
- [ ] **DMARC enforcing (quarantine or reject)** (medium): No policy.
- [ ] **MX records (replies and bounces have a home)** (medium): No MX.
- [x] **Mail server IPs not on SpamCop or PSBL** (medium): 0 IPs clean.
- [ ] **Website redirects to your main brand** (medium): Serves its own page (HTTP 200).
- [ ] **Domain older than 30 days** (medium): Registered 2026-10-16 (11 days).
- [x] **Sending provider authorized in SPF** (high): Google Workspace

---
Read-only DNS lookups, one web request and one public RDAP lookup; nothing is sent. Authentication does not make unwanted email welcome: follow CAN-SPAM, GDPR/PECR and CASL, honor opt-outs and only email people with a reasonable business reason. We do not help evade spam filters.