Public DNS · scanned 2026-11-06 21:09 UTC
artificia.cc
PARTIALLY ENFORCED
No DKIM key is discoverable on any of 18 standard selectors, so the domain cannot prove a message was authorised at all.
| Check | What the record says | |
|---|---|---|
| ! | SPF record | Present but ends in ~ — unauthorised senders are soft-failed, not refused. |
| ✓ | SPF under the lookup limit | 1 of 10 permitted lookups. |
| × | DKIM keys discoverable | None of the 18 standard selectors answer. Custom selectors cannot be found from DNS — that is what the paid job exists for. |
| ✓ | DMARC record | Present. |
| ✓ | Policy is enforced | p=reject; pct=100. |
| × | Aggregate reports collected | No rua=. Nobody receives the reports that would show which senders would fail enforcement. |
| ! | Transport security published | No TLS-RPT. No MTA-STS. Inbound TLS failures are invisible to the sender. |
| ! | BIMI logo | No BIMI record, though the policy is strict enough to be eligible. |
The records, as published
- SPF
v=spf1 include:spf.efwd.registrar-servers.com ~all- DMARC
v=DMARC1; p=reject;- DKIM
- none of 18 standard selectors answer
- MX
eforward1.registrar-servers.comeforward2.registrar-servers.comeforward3.registrar-servers.comeforward4.registrar-servers.comeforward5.registrar-servers.com- Transport
- no TLS-RPT; no MTA-STS
- BIMI
- absent
- Lookups
- 1 of 10 permitted
What this scan cannot see
Alignment is not verifiable from DNS alone: whether a message is aligned depends on the From header at send time. Custom DKIM selectors cannot be enumerated either — only the 18 standard ones. That gap is why a report taken from aggregate reports, not DNS, is what an enforcement change should be based on.
Sender inventory and enforcement fix — CAD 1,250
Six files, delivered in two business days: the sender inventory, the verdict sheet, the copy-paste DNS change set for your provider, a dated enforcement plan, the fourteen-day aggregate-report read, and a day-30 attestation you can hand to a security questionnaire.
CAD 450 if you would rather apply the records yourself. There is no call — the report is the conversation. Full refund if the change set is not delivered in two business days.