alloypersonaltraining.com: 99/100 (A)

alloypersonaltraining.com

Score 99/100 · 0 failing, 4 warnings

Mail provider: Google Workspace

Check another domain Re-scan

Scanned 14 days ago. Re-scan for a fresh result after a fix.

Issues to fix

warnSPF does not include Google Workspace's sending hosts (_spf.google.com), so Google Workspace mail may fail SPF.→
warnpct=100 is deprecated in DMARCbis, apply the policy to all mail.→
warnNo TLS-RPT reporting address. TLS delivery failures go unreported.→
warnBanner hostname does not match reverse DNS.→

Results

01Mail exchangers (MX)A

pass

1 MX record(s) found.

records

preference	exchange	ttl
1	smtp.google.com	300

info

Only one MX host, a secondary MX adds delivery resilience.

02Mail providerB

info

Mail provider: Google Workspace.

provider google

warn

SPF does not include Google Workspace's sending hosts (_spf.google.com), so Google Workspace mail may fail SPF.

expected _spf.google.com

03SPFA

pass

SPF record present.

record v=spf1 ip4:167.89.0.0/17 ip4:208.117.48.0/20 ip4:50.31.32.0/19 ip4:198.37.144.0/20 ip4:198.21.0.0/21 ip4:192.254.112.0/20 ip4:168.245.0.0/17 ip4:149.72.0.0/16 ip4:159.183.0.0/16 ip4:223.165.113.0/24 ip4:223.165.115.0/24 ip4:223.165.118.0/23 ip4:223.165.120.0/23 ip4:167.89.0.0/17 ip4:50.31.32.0/19 ip4:209.61.151.0/24 ip4:166.78.68.0/22 ip4:198.61.254.0/23 ip4:192.237.158.0/23 ip4:23.253.182.0/23 ip4:104.130.96.0/28 ip4:146.20.113.0/24 ip4:146.20.191.0/24 ip4:159.135.224.0/20 ip4:69.72.32.0/20 ip4:104.130.122.0/23 ip4:146.20.112.0/26 ip4:161.38.192.0/20 ip4:143.55.224.0/21 ip4:143.55.232.0/22 ip4:159.112.240.0/20 ip4:198.244.48.0/20 ip4:204.220.168.0/21 ip4:204.220.176.0/20 ip4:141.193.32.0/23 ip4:159.135.140.80/29 ip4:159.135.132.128/25 ip4:161.38.204.0/22 ip4:87.253.232.0/21 ip4:185.189.236.0/22 ip4:185.211.120.0/22 ip4:185.250.236.0/22 ip4:143.55.236.0/22 ip4:198.244.60.0/22 ip4:204.220.160.0/21 ip4:35.190.247.0/24 ip4:64.233.160.0/19 ip4:66.102.0.0/20 ip4:66.249.80.0/20 ip4:72.14.192.0/18 ip4:74.125.0.0/16 ip4:108.177.8.0/21 ip4:173.194.0.0/16 ip4:209.85.128.0/17 ip4:216.58.192.0/19 ip4:216.239.32.0/19 ip6:2001:4860:4000::/36 ip6:2404:6800:4000::/36 ip6:2607:f8b0:4000::/36 ip6:2800:3f0:4000::/36 ip6:2a00:1450:4000::/36 ip6:2c0f:fb50:4000::/36 ip4:172.217.0.0/19 ip4:172.217.32.0/20 ip4:172.217.128.0/19 ip4:172.217.160.0/20 ip4:172.217.192.0/19 ip4:172.253.56.0/21 ip4:172.253.112.0/20 ip4:108.177.96.0/19 ip4:35.191.0.0/16 ip4:130.211.0.0/22 ~all

pass

SPF uses 0 of the 10 permitted DNS lookups.

RFC 7208 §4.6.4

lookups 0

pass

~all default policy.

RFC 7208

04DKIMA

pass

Selector google key is ~2048-bit.

selector google

record v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w…IDAQAB

bits 2048

05DMARCA

pass

DMARC record present.

record v=DMARC1; p=quarantine; pct=100; rua=mailto:rua@dmarc.brevo.com,mailto:dmarc@alloypersonaltraining.com

pass

Enforcing policy p=quarantine.

warn

pct=100 is deprecated in DMARCbis, apply the policy to all mail.

RFC 9989

06DNS healthA

pass

2 nameservers published.

RFC 2182

count 2

pass

SOA timers are sane.

RFC 1912

mname kira.ns.cloudflare.com.

rname dns.cloudflare.com.

refresh 10000

retry 2400

expire 604800

minimum 1800

info

Zone is not DNSSEC-signed.

RFC 9364

07BlacklistsA

info

IPv6 MX addresses are not checked against IP DNSBLs.

pass

142.250.115.26 is not listed on GBUdb Truncate.

target 142.250.115.26

list GBUdb Truncate

pass

142.250.115.26 is not listed on SpamCop.

target 142.250.115.26

list SpamCop

pass

192.178.220.27 is not listed on SpamCop.

target 192.178.220.27

list SpamCop

pass

173.194.208.26 is not listed on SpamCop.

target 173.194.208.26

list SpamCop

pass

142.250.115.27 is not listed on SpamCop.

target 142.250.115.27

list SpamCop

pass

192.178.220.26 is not listed on SpamCop.

target 192.178.220.26

list SpamCop

pass

173.194.208.26 is not listed on PSBL.

target 173.194.208.26

list PSBL

pass

142.250.115.26 is not listed on PSBL.

target 142.250.115.26

list PSBL

pass

alloypersonaltraining.com is not listed on Spamhaus ZRD.

target alloypersonaltraining.com

list Spamhaus ZRD

pass

alloypersonaltraining.com is not listed on Spamhaus DBL.

target alloypersonaltraining.com

list Spamhaus DBL

pass

173.194.208.26 is not listed on Spamhaus AuthBL.

target 173.194.208.26

list Spamhaus AuthBL

pass

142.250.115.27 is not listed on Spamhaus ZEN.

target 142.250.115.27

list Spamhaus ZEN

pass

192.178.220.27 is not listed on Spamhaus AuthBL.

target 192.178.220.27

list Spamhaus AuthBL

pass

192.178.220.26 is not listed on Spamhaus AuthBL.

target 192.178.220.26

list Spamhaus AuthBL

pass

142.250.115.27 is not listed on Spamhaus AuthBL.

target 142.250.115.27

list Spamhaus AuthBL

pass

192.178.220.26 is not listed on PSBL.

target 192.178.220.26

list PSBL

pass

173.194.208.26 is not listed on GBUdb Truncate.

target 173.194.208.26

list GBUdb Truncate

pass

142.250.115.27 is not listed on GBUdb Truncate.

target 142.250.115.27

list GBUdb Truncate

pass

192.178.220.26 is not listed on GBUdb Truncate.

target 192.178.220.26

list GBUdb Truncate

pass

192.178.220.27 is not listed on GBUdb Truncate.

target 192.178.220.27

list GBUdb Truncate

pass

142.250.115.27 is not listed on PSBL.

target 142.250.115.27

list PSBL

pass

173.194.208.26 is not listed on Spamhaus ZEN.

target 173.194.208.26

list Spamhaus ZEN

pass

142.250.115.26 is not listed on Spamhaus ZEN.

target 142.250.115.26

list Spamhaus ZEN

pass

192.178.220.27 is not listed on PSBL.

target 192.178.220.27

list PSBL

pass

192.178.220.26 is not listed on Spamhaus ZEN.

target 192.178.220.26

list Spamhaus ZEN

pass

192.178.220.27 is not listed on Spamhaus ZEN.

target 192.178.220.27

list Spamhaus ZEN

pass

142.250.115.26 is not listed on Spamhaus AuthBL.

target 142.250.115.26

list Spamhaus AuthBL

08Bulk sending readinessA

pass

SPF, DKIM and DMARC are all present: the domain meets the Gmail/Yahoo and Microsoft bulk-sender authentication requirements (5,000+ messages/day).

spf true

dkim true

dmarc true

threshold 5,000 messages/day

info

One-click List-Unsubscribe is a message-level header. Verify by sending a test message.

09TLSA

info

No DANE/TLSA records. DANE is not deployed for these mail servers.

RFC 7672

hosts smtp.google.com

pass

Negotiated TLSv1.3.

RFC 8996

tls_version TLSv1.3

host smtp.google.com

pass

Certificate valid for 64 more day(s).

not_after 2026-10-12T18:07:39+00:00

host smtp.google.com

pass

Certificate covers smtp.google.com.

RFC 6125

names mx.google.com, smtp.google.com, aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, gmail-smtp-in.l.google.com, alt1.gmail-smtp-in.l.google.com, alt2.gmail-smtp-in.l.google.com, alt3.gmail-smtp-in.l.google.com, alt4.gmail-smtp-in.l.google.com, gmr-smtp-in.l.google.com, alt1.gmr-smtp-in.l.google.com, alt2.gmr-smtp-in.l.google.com, alt3.gmr-smtp-in.l.google.com, alt4.gmr-smtp-in.l.google.com, mx1.smtp.goog, mx2.smtp.goog, mx3.smtp.goog, mx4.smtp.goog, aspmx2.googlemail.com, aspmx3.googlemail.com, aspmx4.googlemail.com, aspmx5.googlemail.com, gmr-mx.google.com

host smtp.google.com

pass

Server presented a 3-certificate chain.

chain_len 3

host smtp.google.com

10MTA-STSA

info

No MTA-STS policy. Inbound mail is delivered without enforced TLS.

RFC 8461

warn

No TLS-RPT reporting address. TLS delivery failures go unreported.

RFC 8460

11BIMIA

info

No BIMI record. No brand logo is published for inboxes with BIMI support.

BIMI draft

SMTP (live probe)

info

No DANE/TLSA records. DANE is not deployed for these mail servers.

RFC 7672

hosts smtp.google.com

pass

1 of 1 MX host(s) reachable on port 25.

RFC 5321

reachable smtp.google.com

unreachable (none)

pass

Greeting is 220 with a hostname (mx.google.com).

RFC 5321

banner 220 mx.google.com ESMTP 586e51a60fabf-459f19ee4f7si6154379fac.69 - gsmtp

warn

Banner hostname does not match reverse DNS.

banner_fqdn mx.google.com

ptr rq-in-f26.1e100.net

pass

EHLO accepted with 6 extension(s).

RFC 5321

extensions 8BITMIME, CHUNKING, ENHANCEDSTATUSCODES, PIPELINING, SIZE, SMTPUTF8

pass

Server advertises SMTPUTF8, so it accepts internationalized (EAI) email addresses.

RFC 6531

pass

STARTTLS is advertised in EHLO.

RFC 3207

pass

STARTTLS negotiated a working TLS session.

RFC 3207

tls_version TLSv1.3

pass

Negotiated TLSv1.3.

RFC 8996

tls_version TLSv1.3

host smtp.google.com

pass

Certificate valid for 64 more day(s).

not_after 2026-10-12T18:07:39+00:00

host smtp.google.com

pass

Certificate covers smtp.google.com.

RFC 6125

host smtp.google.com

pass

Server presented a 3-certificate chain.

chain_len 3

host smtp.google.com

pass

Server refused external relay, as expected.

RFC 5321

reply 550-5.1.1 The email account that you tried to reach does not exist. Please try

pass

Server accepts the null sender (MAIL FROM:<>), so bounces and DSNs can be delivered.

RFC 5321

reply 250 2.1.0 OK 586e51a60fabf-459f19ee4f7si6154379fac.69 - gsmtp

About this report

This report grades the email and DNS setup of alloypersonaltraining.com against the relevant RFCs. Each check links to the standard behind the rule. A high grade means the common causes of spoofing and poor deliverability are covered. A grade is not a guarantee that every message reaches the inbox.

Frequently asked questions

What does the grade mean?

The grade summarizes how completely the domain implements the core email authentication and DNS standards. A and B mean the main protections (SPF, DKIM, DMARC, valid MX) are in place. Lower grades flag gaps that make spoofing easier or hurt deliverability. A missing MX record caps the grade at F, a weak SPF all-qualifier caps at D, and no DMARC caps at C.

How fresh is this report?

A report is a snapshot from when it was last scanned, kept as a shareable link. If you are fixing your setup, use the Re-scan button to run every check live again.

Why is the SMTP section still loading?

The live SMTP probe connects to the mail servers from a dedicated prober, which takes a few seconds and runs separately from the DNS checks. The results stream in when ready. If SMTP was not requested for this report, that section stays empty.

I own this domain and want to stop scan.mx checking it.

Domain owners can block scanning by publishing a DNS TXT record; see the opt-out page.

More free tools

portscan.com

Open-port and service scanner for any host.

robotstxt.com

Test and validate a site’s robots.txt rules.

ip.app

Look up an IP address, ASN, and geolocation.

← Back to scan.mx