Mail domain report: plaatsengids.nl

SPF

pass

SPF record published

✓ No deprecated ptr mechanism #1

No ptr mechanism found in SPF record.
✓ 0 of 10 DNS lookups #2

SPF record needs 0 DNS lookups (limit is 10).
✓ Ends with -all #3

SPF record properly uses -all to restrict unauthorized senders.
✓ Record published #6

SPF record exists for this domain.
✓ Single record #16

Exactly one SPF record is published.
✓ Valid syntax #25

All SPF mechanisms and modifiers are valid.
✓ No void lookups #26

All include/redirect targets exist.
✓ No overly broad IP ranges #27

All ip4/ip6 ranges are narrow enough.

warn

p=reject (_dmarc.plaatsengids.nl)

Record: v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s; ruf=mailto:admin@mv.nl!10m;
Found at: _dmarc.plaatsengids.nl
External report address: mailto:admin@mv.nl!10m (not authorized)

Tag	Value	Meaning
v	DMARC1	Version
p	reject	Policy
sp	reject	Subdomain policy
ruf	mailto:admin@mv.nl!10m	Failure report addresses
adkim	s	DKIM alignment (r = relaxed, s = strict)
aspf	s	SPF alignment (r = relaxed, s = strict)

✓ Policy: reject #4

DMARC policy is set to 'reject', which provides the strongest protection against email spoofing.
✓ Record published #5

DMARC record exists for this domain.
✓ Valid syntax #17

DMARC record syntax is valid.
✓ Applies to 100% of mail #18

DMARC policy applies to all failing mail.
!

No aggregate reports (rua)

DMARC record has no rua tag, so you receive no aggregate reports about who sends mail as your domain. Add rua=mailto:...

#19
✓ Subdomain policy: reject #20

Subdomains are covered by policy 'reject'.
!

Report address not authorized

These report addresses are in another domain that has not agreed to receive your reports, so receivers will not send them: mailto:admin@mv.nl!10m (needs plaatsengids.nl._report._dmarc.mv.nl). Ask the report provider to publish the record, or check the address.

#29

warn

No keys found under the checked selectors

warn

Signed, but no DS at parent

!

Signed, but no DS at parent

The zone is signed (DNSKEY present) but the parent has no DS record, so the chain of trust is incomplete. Publish the DS record at your registrar.

#8
✓ Signatures valid until 2026-11-05 #21

DNSKEY signatures are valid until 2026-11-05T00:00:00Z.

info

Null MX: domain accepts no mail

i

Null MX: accepts no mail

Domain publishes a null MX (RFC 7505): it explicitly accepts no email.

#9
✓ Locked down against spoofing #28

The domain publishes a null MX and publishes SPF "v=spf1 -all" and DMARC p=reject, so nobody can send mail as this domain.

info

No BIMI record