# emailauthpulse report: demo-clinic.example

> Demo report on a fictional sample site.

**Score:** 95/100 · Scanned 2026-10-26T19:46:20.728Z

1 of 10 checks need attention (0 high priority).

- [x] **Mail servers (MX) published** (high): mx.mailhost.example
- [x] **SPF record present** (high): v=spf1 include:_spf.mailhost.example ~all
- [x] **Exactly one SPF record** (medium): OK
- [x] **SPF ends with ~all or -all** (medium): Ends with: ~all
- [x] **SPF stays within 10 DNS lookups** (medium): 1 lookup mechanisms at the top level (includes add more).
- [x] **DMARC record present** (high): v=DMARC1; p=quarantine; rua=mailto:dmarc@demo-clinic.example
- [x] **DMARC policy enforces (quarantine or reject)** (medium): p=quarantine
- [x] **DMARC aggregate reports (rua) configured** (low): Reports are sent.
- [x] **DKIM key found on a common selector** (high): Selectors: selector1
- [ ] **BIMI logo record (optional)** (low): Not published (optional; needs DMARC enforcement).

---
Read-only public DNS lookups. DKIM is checked on common selectors only; a missing result can mean a custom selector.