Demo mode
Northstar Commerce

Domain Health

Scans DNS records, email authentication (SPF, DKIM, DMARC), SSL certificate, and domain expiry

67
/100Needs attention

Domain Health Score

embercheckout.com

cloudflare connected

Last scanned 20 minutes ago

cloudflare connected · Verified provider data available

Next best action

DMARC is not enforcing protection

Spoofed mail from your domain can still reach inboxes.

DNS Health

All core records resolving

Email Auth

Issues detected

DMARC

Monitoring only (p=none)

SPF

Record found

DKIM

Detected

Verified

SSL

Expires in 12 days (TLSv1.3)

Domain Expiry

Expires in 286 days

Verified

Top 2 actions

  1. 1DMARC is not enforcing protectionCritical
  2. 2Your SSL certificate expires in 12 daysCritical

2 issues requiring action

2 critical

DMARC is not enforcing protection

Risk:Spoofed mail from your domain can still reach inboxes.

  • Policy: p=none
  • Aggregate reports (rua): configured

Why it matters

A DMARC record in monitor-only mode, or one without reporting, leaves your users exposed to phishing. Moving to quarantine or reject and turning on aggregate reports closes the gap.

Recommended fix

v=DMARC1; p=quarantine; rua=mailto:dmarc@embercheckout.com; pct=100

Where to fix

cloudflare → DNS → TXT records → _dmarc.embercheckout.com

Fix this yourself

Your SSL certificate expires in 12 days

Why it matters

The Let's Encrypt certificate serving embercheckout.com expires in 12 days (TLSv1.3). When it lapses, browsers will block the site and checkout will fail for every customer.

Recommended fix

Renew the SSL certificate before it expires to avoid browser warnings. If Cloudflare Universal SSL or an ACME client handles renewal, confirm it is enabled and that your CAA records permit the issuer.

Domain Health alerts

Choose which channels receive expiry, DNS-change and health-score alerts on the Alerts page.

Configure alerts

Key services

DNSCloudflare
EmailGoogle Workspace

Domain Health alerts

Set up expiry, DNS-change, security and health-score alerts — and pick which domains each channel watches — on the Alerts page.

Configure alerts