Skip to content
Hookgap

This is a fictional practice. Paid plans show your logo, contact details and booking link in place of Hookgap.

Email and website security snapshot

harborview-dental.example

Checked October 18, 2026 by Northline IT

Book a 15-minute review
F47/100

Anyone can send email pretending to be @harborview-dental.example. That is the first thing to fix.

Email is handled by Microsoft 365. 11 gaps found, 3 of them important.

What to fix first

  1. Anyone can send email pretending to be @harborview-dental.example

    Urgent

    There is no DMARC record, so email providers have no instructions for handling fake messages that use this domain.

    Why it matters: Fake invoices and password-reset emails can look like they came from you, and your real email is more likely to land in spam.

    Effort to fix: low. Northline IT can handle this: Email authentication setup (DMARC).

  2. The sender list is too long to work

    Important

    SPF needs more than 10 DNS lookups (12+), which is over the limit, so checks fail.

    Why it matters: Legitimate email can fail authentication and go to spam. This often happens after adding tools like CRMs or newsletter apps.

    Effort to fix: medium. Northline IT can handle this: SPF flattening / email sender audit.

  3. The website certificate expires in 9 days

    Important

    The current HTTPS certificate is close to its expiry date.

    Why it matters: If it is not renewed, visitors will see a full-page security warning.

    Effort to fix: low. Northline IT can handle this: Certificate monitoring.

Smaller improvements

  • The website advertises its software versionWorth fixing
  • Incoming email encryption is not requiredQuick win
  • No reports on email encryption problemsQuick win
  • DNS answers are not signedQuick win
  • Any company can issue website certificatesQuick win
  • Missing browser protection: Content-Security-PolicyQuick win
  • Missing browser protection: X-Frame-OptionsQuick win
  • Missing browser protection: Referrer-PolicyQuick win

Already in good shape

  • Outgoing email is digitally signed (DKIM).
  • The website loads securely over HTTPS.
  • Visitors are automatically sent to the secure version of the site.
Technical details for your IT team
DMARC
No DMARC record at _dmarc.
SPF
v=spf1 include:spf.protection.outlook.com include:_spf.salesforce.com include:servers.mcsv.net include:sendgrid.net ~all (12 DNS lookups)
DKIM
Found selectors: selector1, selector2
Mail servers
harborview-dental-example.mail.protection.outlook.com
MTA-STS
Not configured.
TLS reporting
Not configured.
DNSSEC
Unsigned.
CAA
No CAA records.
Certificate
Expires in 9 days. 4 hostnames seen in certificate logs.
Domain registration
Registration expires in 211 days.
HTTPS
Final URL https://www.harborview-dental.example/ (HTTP 200)
Security headers
Missing: Content-Security-Policy, X-Frame-Options, Referrer-Policy
Software exposure
WordPress 6.4.2