F
secured.community
45/100
1
Strengthen email authentication configuration
2–4 hours

Email authentication is partially configured for secured.community but has gaps. Actions needed: upgrade DMARC policy from 'none' to 'quarantine' or 'reject'. Until DMARC enforcement is active, spoofed emails may still reach recipients.

NIST CSFPR.AC-7
Email authentication is a required access control
How to fix this
1Upgrade DMARC policy to p=quarantine (then p=reject after monitoring)
2Verify with: nslookup -type=txt _dmarc.secured.community
TLS Version
Issues detected
Could not complete TLS handshake with secured.community:443 — [Errno -5] No address associated with hostname
DMARC Policy
Not configured
Strengths: SPF record present with soft-fail (~all); DKIM configured (selectors: google). Issues: No DMARC record found — email spoofing is not prevented.
SPF Record
Present
v=spf1 include:_spf.google.com ~all
Security Headers
0/0 present
All headers configured.
HSTS
Not enabled
Could not fetch https://secured.community — connection failed or timed out.
SSL Certificate
Issues
Issues: Could not retrieve certificate details.
DNSSEC
Not enabled
Strengths: 4 nameservers configured (ns-cloud-e1.googledomains.com., ns-cloud-e4.googledomains.com., ns-cloud-e3.googledomains.com., ns-cloud-e2.googledomains.com.); 5 MX records present; Zone transfers properly restricted. Issues: DNSSEC not configured — DNS responses can be spoofed.