Blog
Contact
Sign in
Scan complete
scan_id: 48213476…
F
35/100
verdict.simplify.com.pl
6 high-risk issues to fix.
6/6
checks
2
passed
finished
Scan timestamps
Created
Jul 6, 2026, 10:00 AM
Started
Jul 6, 2026, 10:00 AM
Finished
Jul 6, 2026, 10:00 AM
Updated
Jul 6, 2026, 10:00 AM
Export PDF
Re-scan
Findings by severity
11 results
0
Critical
6
High
2
Medium
1
Low
2
Pass
Report coverage
100%
Full coverage - every planned check was evaluated.
22 skipped
All
33
High
6
Medium
2
Low
1
Pass
2
Skipped
22
Email Security
100%
5/5
SPF Record
Learn how it works
Info
0/7 pass
SPF Record
No SPF record found
The domain does not publish an SPF policy.
High
SPF Record
SPF syntax was not evaluated
Syntax evaluation was skipped because the domain does not have exactly one SPF record.
No impact on score or coverage
Skipped
SPF Record
SPF policy terminator was not evaluated
Policy terminator evaluation was skipped because the domain does not have a valid SPF record.
No impact on score or coverage
Skipped
SPF Record
SPF DNS lookup limit was not evaluated
Lookup limit evaluation was skipped because the domain does not have a valid SPF record.
No impact on score or coverage
Skipped
SPF Record
SPF delegated policy validity was not evaluated
Delegated policy evaluation was skipped because the domain does not have a valid SPF record.
No impact on score or coverage
Skipped
SPF Record
SPF deprecated mechanisms were not evaluated
Deprecated mechanisms check was skipped because the domain does not have a valid SPF record.
No impact on score or coverage
Skipped
SPF Record
SPF authorization scope was not evaluated
Authorization scope evaluation was skipped because the domain does not have a valid SPF record.
No impact on score or coverage
Skipped
DMARC Policy
Learn how it works
Info
2/7 pass
DMARC Policy
DMARC record is published
The domain publishes exactly one DMARC TXT record.
Pass
DMARC Policy
DMARC syntax is valid
The DMARC record is syntactically valid.
Pass
DMARC Policy
DMARC policy is monitoring only
The DMARC policy uses p=none and does not ask receivers to block or quarantine failing mail.
High
DMARC Policy
DMARC subdomain policy is weak
Subdomains are not protected by an enforcement policy.
High
DMARC Policy
DMARC pct was not evaluated
Percentage enforcement was skipped because there is no active enforcement policy to sample.
No impact on score or coverage
Skipped
DMARC Policy
DMARC aggregate reporting is not configured
The DMARC record does not request aggregate reports, which reduces visibility into authentication failures.
Medium
DMARC Policy
DMARC alignment is relaxed
The DMARC record allows relaxed identifier alignment for DKIM or SPF.
Low
MTA-STS Policy
Learn how it works
Info
0/5 pass
MTA-STS Policy
MTA-STS DNS record is missing
The domain does not publish an MTA-STS TXT record, so sending servers cannot discover or enforce an MTA-STS policy.
High
MTA-STS Policy
MTA-STS policy fetch was not evaluated
Policy fetch was skipped because the domain does not have a valid MTA-STS DNS record.
No impact on score or coverage
Skipped
MTA-STS Policy
MTA-STS policy syntax was not evaluated
Policy syntax evaluation was skipped because the policy file could not be fetched.
No impact on score or coverage
Skipped
MTA-STS Policy
MTA-STS mode was not evaluated
Mode evaluation was skipped because the policy file is not available or has invalid syntax.
No impact on score or coverage
Skipped
MTA-STS Policy
MTA-STS MX coverage was not evaluated
MX coverage evaluation was skipped because the policy file is not available, has invalid syntax, or the domain does not accept mail.
No impact on score or coverage
Skipped
TLS-RPT Record
Learn how it works
Info
0/3 pass
TLS-RPT Record
No TLS-RPT record found
The domain does not publish a TLS-RPT record. Sending servers cannot report TLS errors to this domain.
High
TLS-RPT Record
TLS-RPT syntax was not evaluated
Syntax evaluation was skipped because the domain does not have exactly one TLS-RPT record.
No impact on score or coverage
Skipped
TLS-RPT Record
TLS-RPT rua quality was not evaluated
Reporting URI evaluation was skipped because the domain does not have a syntactically valid TLS-RPT record.
No impact on score or coverage
Skipped
DANE SMTP
Learn how it works
Info
0/5 pass
DANE SMTP
No MX records found
The domain does not publish MX records, so DANE cannot protect incoming mail delivery.
High
DANE SMTP
DNSSEC coverage was not evaluated
DNSSEC coverage evaluation was skipped because no MX hosts were discovered.
No impact on score or coverage
Skipped
DANE SMTP
TLSA coverage was not evaluated
TLSA coverage evaluation was skipped because no MX hosts were discovered or DNSSEC is not available.
No impact on score or coverage
Skipped
DANE SMTP
TLSA parameter quality was not evaluated
TLSA parameter evaluation was skipped because no usable TLSA records were found.
No impact on score or coverage
Skipped
DANE SMTP
Certificate match was not evaluated
Certificate verification was skipped because no usable TLSA records are published for the MX hosts.
No impact on score or coverage
Skipped
DNS Security
100%
1/1
DNSSEC
Learn how it works
Info
0/6 pass
DNSSEC
DNSSEC is not enabled
The parent zone does not publish a DS record for this domain.
Medium
DNSSEC
DNSKEY publication was not evaluated
DNSKEY evaluation was skipped because the parent zone does not publish a DS record.
No impact on score or coverage
Skipped
DNSSEC
DS and DNSKEY matching was not evaluated
DS/DNSKEY matching was skipped because required DNSSEC records are missing.
No impact on score or coverage
Skipped
DNSSEC
DNSKEY RRset signature was not evaluated
DNSKEY signature validation was skipped because DS/DNSKEY matching did not produce a valid trust path.
No impact on score or coverage
Skipped
DNSSEC
Zone RRset signature was not evaluated
Zone RRset validation was skipped because earlier DNSSEC validation steps failed.
No impact on score or coverage
Skipped
DNSSEC
DNSSEC algorithm policy was not evaluated
Algorithm policy evaluation was skipped because DNSSEC validation prerequisites were not met.
No impact on score or coverage
Skipped
Feedback
