domainsecuritycheck

← Record Studio

Null MX

Parked and web-only domains are popular spoofing targets because nobody watches their mail flow. Three records shut this down completely: a Null MX (RFC 7505), an SPF record that fails every sender, and a DMARC reject policy.

RFC 7505 requires that the Null MX is the only MX record – remove all other MX records for the domain. The p=reject DMARC record is industry best practice (M3AAWG recommendation), not part of RFC 7505 itself. Web, A and AAAA records are unaffected – the domain's website keeps working.

Runs entirely in your browser. Record Studio · Verify the result with the domain security check