Sample report: the free DNS check, run on our own three domains.
Here is the same check run on ourselves, written the way you'd get it: each finding, why it matters, the fix and who makes it. Checked from public DNS on 5 November 2026. Anyone can repeat these lookups.
Summary: all three domains pass. Two small tidy-ups are listed, because a real report lists everything.
autonomicsai.in
Company site and this services site. Receives mail through Cloudflare Email Routing.
| Check | What we found | Status | The fix, and who makes it |
|---|---|---|---|
| SPF | One record: v=spf1 include:_spf.mx.cloudflare.net include:_spf.google.com ~all. 2 DNS lookups, well under the limit of 10. | Fine | Nothing to do. |
| DKIM | Two 2048-bit keys: Cloudflare's at cf2024-1._domainkey (forwarding and notices) and our sending provider's at resend._domainkey (customer emails and our own mail). Test messages show DKIM pass, signed as autonomicsai.in. | Fine | Nothing to do. |
| Tidy-up | SPF still includes _spf.google.com, but nothing sends through Google for this domain any more. | Tidy | Remove the Google include from SPF. Harmless, but every unused include is one more lookup and one more thing to trust. Who: us. |
| DMARC | v=DMARC1; p=quarantine; rua=mailto:sean@autonomicsai.in; adkim=r; aspf=r. Moved from p=none on 5 Nov after confirming every sender is signed: receivers now put mail that fails into spam. | Fine | Nothing to do. Later: p=reject once a few months of reports are clean. |
autonomicsstudio.com
Sends our sales email (Google Workspace).
| Check | What we found | Status | The fix, and who makes it |
|---|---|---|---|
| SPF | One record: v=spf1 include:_spf.google.com ~all. 1 DNS lookup. | Fine | Nothing to do. |
| DKIM | A 2048-bit Google key at google._domainkey. | Fine | Nothing to do. |
| DMARC | p=quarantine, relaxed alignment, reports to an address on autonomicsai.in. That domain publishes the record that authorises it to receive them (autonomicsstudio.com._report._dmarc.autonomicsai.in). | Fine | Nothing to do. Later: move to p=reject once a few months of reports are clean. |
| Tidy-up | Two google-site-verification TXT records that differ by one character. | Tidy | Delete the one Google doesn't recognise. Harmless, but stray records make the next person's check slower. Who: us. |
autonomicslabs.com
Reserved for a second sending setup. No mailboxes yet.
| Check | What we found | Status | The fix, and who makes it |
|---|---|---|---|
| SPF | v=spf1 -all: no server may send as this domain. | Fine | Right for a domain that doesn't send. When the mailboxes exist, replace it with the provider's include before the first email. |
| MX | No MX records, so the domain can't receive mail. | Fine | Add the provider's MX records when the mailboxes are set up. |
| DMARC | p=quarantine with reports to autonomicsai.in (authorised the same way). | Fine | Nothing to do. |
What the paid audit adds
This free check reads public DNS only. The $750 audit adds the main public blocklists, your sending numbers per mailbox, warm-up and volume, list hygiene and up to 3 of your templates, and ends with a written fix list, most urgent first, within 5 business days of getting access.
Delivery guarantee: if the report is late, you get the whole $750 back. We never promise inbox placement: Gmail, Outlook and the rest decide that.
Who checked it
Sean Solano Paul, founder. You deal with him directly: he runs the free check, writes the report and answers your email. AutonomicsAI LLP, Bangalore.
About the studio · Sean on LinkedIn