Skip to content

Cookie preferences

Optional tracking is off until you choose it. Change these settings at any time.

EssentialSecurity, theme, and saved preferences.Always on

We do not send your name or email to affiliates.
OutboundQA
Back to OutboundQA

Composite example · Sample

From blocker to verified recovery.

This composite example uses reserved names and representative evidence. It shows the decision trail a Launch Report is built to preserve.

Recovery verified

  1. 1. Baseline

    Assets captured before launch

    Sending domain, inboxes, tracking domain, and SMTP egress added to one workspace.

  2. 2. Blocker discovered

    DMARC and DKIM were missing

    The first verdict stopped launch and recorded the exact DNS and provider actions required.

  3. 3. Fix applied

    Authentication records published

    The operator enabled DKIM, published its selector, and added the recommended DMARC record.

  4. 4. Fresh verification

    Recovery confirmed by a new run

    A fresh full check observed both records and preserved the final Ready verdict with timestamps.

Sample · Composite example

Harbor Health

Checked August 21, 2026 at 14:32 UTC · harbor-mail.com

Initial: Do Not Launch Verified: Ready

Assets checked

harbor-mail.com · alex@harbor-mail.com · links.harbor-mail.com · 203.0.113.10

Evidence sources

Authoritative DNS answers, HTTPS and TLS endpoints, RDAP registration, public blocklist lookups, and configured sender evidence. Each row keeps its own observed-at time.

18

checks

11

passed

4

warnings

2

blockers

1

unknown

Fix before launch

  • DMARC record. Add a DMARC TXT record at _dmarc.harbor-mail.com. Start at p=none, then move to quarantine once reports look clean.
  • DKIM selector. Turn on DKIM in your sending tool and publish the key it generates, then re-run to confirm the signature passes.

Mail and DNS

MX record google.com · observed 14:32 UTC Pass
Mail provider Google Workspace · observed 14:32 UTC Pass
DNS host Cloudflare · observed 14:32 UTC Pass

Authentication

SPF record 1 record · observed 14:32 UTC Pass
Single SPF record 1 found · observed 14:32 UTC Pass
SPF DNS lookups 5 of 10 · observed 14:32 UTC Pass
SPF enforcement -all hardfail · observed 14:32 UTC Pass
DMARC record not found · observed 14:32 UTC Fail

Add a DMARC TXT record at _dmarc.harbor-mail.com. Start at p=none, then move to quarantine once reports look clean.

DMARC policy no record to enforce · observed 14:32 UTC Warning

Once the DMARC record exists, raise the policy from p=none to p=quarantine so unauthenticated mail is filtered, not just reported.

DKIM selector none at common selectors · observed 14:32 UTC Fail

Turn on DKIM in your sending tool and publish the key it generates, then re-run to confirm the signature passes.

MTA-STS enforce mode · observed 14:32 UTC Pass

Website

Root domain resolves A record ok · observed 14:32 UTC Pass
Root domain HTTPS no valid cert · observed 14:32 UTC Warning

Serve the root domain over valid HTTPS so it looks legitimate to recipients and filters.

HTTP to HTTPS redirect no redirect · observed 14:32 UTC Warning

Redirect all HTTP traffic to HTTPS so every visit lands on the secure page.

Risk and sender

Domain age 192 days · observed 14:32 UTC Pass
Blacklist status clean on Spamhaus, SpamCop, Barracuda · observed 14:32 UTC Pass
Google and Yahoo checklist 2 gaps: DMARC, DKIM · observed 14:32 UTC Warning

Close the gaps: a valid DMARC record and a confirmed DKIM signature both satisfy the Google and Yahoo bulk-sender requirements.

Historical abuse evidence provider unavailable · observed 14:32 UTC Unknown

Rerun the history check when the evidence provider recovers. Unknown is not treated as a pass.

This report checks technical infrastructure readiness. It does not guarantee inbox placement.

Decision history

  1. Aug 21 14:32Do Not Launch. DMARC and DKIM blockers observed. One history check remained unknown.
  2. Aug 22 09:18Fix recorded. DMARC and DKIM changes submitted for verification.
  3. Aug 22 09:26Ready. A fresh full rerun observed the new records. Monitoring started for the 14-day report window.

Monitoring timeline

  1. Day 0Ready baseline saved
  2. Days 1 to 13Daily checks unchanged
  3. Day 14Window complete. Ready retained.

Shareable record

A purchased report has a private share URL and a print layout that preserves the verdict, evidence times, fixes, and rerun history.

Launch Report · $49 once

Want this decision trail for your next launch?

Get the first verdict, exact remediation steps, one recovery rerun, a shareable report, 14 days of daily monitoring, and a 20-minute findings debrief.

Create a Launch Report