Read the evidence.

By Tyler Mayberry · Cirlet. Published October 22, 2026.

This example uses public DNS for Cirlet’s own domain. It is an actual tool observation, not a customer assessment or a fictional agency result. Records can change after this snapshot.

Domain: cirlet.com
Observed at: 2026-10-22T23:40:53.184Z

SPF: observed

SPF record observed. This does not validate every sender, include chain or lookup limit.

v=spf1 include:_spf.mx.cloudflare.net include:_spf.google.com ~all

DMARC: observed

DMARC record observed. A policy is not proof that legitimate senders align or that all attacks are blocked.

v=DMARC1; p=none;

What this means

The records were present at the checked names. Presence is not a full validation. In particular, a DMARC policy of none requests monitoring rather than enforcement; it does not prove that legitimate senders align or that a domain is protected from all impersonation.

What remains unknown

Public DNS snapshot only. No mailbox, DKIM selector, account access, alignment, inbox protection or full security assessment. Parent-domain DMARC fallback is not evaluated; use the primary email domain.

Ask the provider which legitimate senders are in use and what evidence supports the intended configuration. Do not change live email records based on this example alone.

Check your authorized primary email domain · Assign provider follow-ups