~/d/gmail.com

// gmail.com

Live audit across 8 checks. Cached 24h · generated less than a minute ago.

domain_grade
B
good
77
/ 100 · across 8 checks
// points lost on:
dmarc −10 spf −5 security headers −5 dnssec −3
[ save & monitor ]
SSL Certificate
[ OK ]
Valid for 61 more days.
Issued by WR2 · 61 days left · TLSv1.3
→ open SSL Certificate tool
DMARC Policy
[ WARN ]
DMARC record exists but policy is 'none' — monitoring only, not enforcing. Switch to 'quarantine' or 'reject' to block spoofing.
v=DMARC1; p=none; sp=quarantine; rua=mailto:[email protected]
→ open DMARC Policy tool
SPF Record
[ WARN ]
No 'all' mechanism. Behavior is implicit. Add -all or ~all explicitly.
1 lookups · all=
→ open SPF Record tool
MX Records
[ OK ]
MX configured (5 record(s)).
5 gmail-smtp-in.l.google.com · 10 alt1.gmail-smtp-in.l.google.com · 20 alt2.gmail-smtp-in.l.google.com
→ open MX Records tool
Name Servers
[ OK ]
4 authoritative nameservers
ns1.google.com · ns2.google.com · ns3.google.com
WHOIS
[ OK ]
Valid for 113 more days.
Registrar: MarkMonitor Inc. · expires 2026-08-12
→ open WHOIS tool
Security Headers
[ WARN ]
Decent but improvable (68/100) — missing: Referrer-Policy · weak: content-security-policy
Score 68/100
→ open Security Headers tool
DNSSEC
[ WARN ]
No DNSSEC — domain is not signed.
Not signed
→ open DNSSEC tool
[ embed_grade_badge ]
grade badge
Domain grade: B — good
markdown (github readme)
[![DomBrains grade](https://dombrains.com/badge/gmail.com/grade.svg)](https://dombrains.com/d/gmail.com)
html (any webpage)
<a href="https://dombrains.com/d/gmail.com"><img src="https://dombrains.com/badge/gmail.com/grade.svg" alt="DomBrains grade: B"></a>
// re-queries our scoring engine · cached 1h at the edge · backlinks to this profile page
[ per_check_badges ]
ssl badge <img src="https://dombrains.com/badge/gmail.com/ssl">
dmarc badge <img src="https://dombrains.com/badge/gmail.com/dmarc">
spf badge <img src="https://dombrains.com/badge/gmail.com/spf">
mx badge <img src="https://dombrains.com/badge/gmail.com/mx">
dnssec badge <img src="https://dombrains.com/badge/gmail.com/dnssec">
security_headers badge <img src="https://dombrains.com/badge/gmail.com/security_headers">
// Snapshot freshness: this page is cached 24h. To force a re-scan, run any tool above with the same domain — that always queries live.