D
67
letsencrypt.info
3 passed
3 warnings
0 failed
Score Breakdown
| Check | Description | Status | Summary |
|---|---|---|---|
| MX Records | Mail server routing | Pass | 1 MX record(s) found. |
| SPF | Sender Policy Framework | Pass | SPF uses -all (hard fail). Strict and recommended. |
| DKIM | DomainKeys Identified Mail | Warn | No DKIM records found after checking 199 common selectors. DKIM signing may not be configured or uses a non-standard selector. |
| DMARC | Domain-based Message Authentication | Pass | DMARC policy is reject. Excellent. |
| DMARC Reporting | Aggregate & forensic report addresses | Warn | DMARC exists but has no rua= (aggregate) or ruf= (forensic) reporting address. You will not receive deliverability reports. |
| MTA-STS | Strict transport security policy | Warn | No MTA-STS DNS record found. MTA-STS forces TLS for inbound mail. |
| TLSRPT | TLS failure reporting | Info | No TLS Reporting (TLSRPT) record. Optional but recommended alongside MTA-STS. |
| BIMI | Brand logo in email clients | Info | No BIMI record. BIMI enables brand logo display in supporting email clients. |
| PTR Records | Reverse DNS / FCrDNS for MX hosts | Info | No MX hosts to check PTR for. |
| Blacklist Check | DNSBL zone spot-check | Info | Could not resolve MX host to any IP for blacklist check. |
Mail Routing
Pass
MX Records
Mail server routing
1 MX record(s) found.
| Priority | Mail Exchange |
|---|---|
| 0 |
Authentication
Pass
SPF
Sender Policy Framework
Hard Fail (-all)
SPF uses -all (hard fail). Strict and recommended.
v=spf1 -all
Warn
DKIM
DomainKeys Identified Mail
No DKIM records found after checking 199 common selectors. DKIM signing may not be configured or uses a non-standard selector.
Pass
DMARC
Domain-based Message Authentication
p=reject
DMARC policy is reject. Excellent.
v=DMARC1; p=reject
Warn
DMARC Reporting
Aggregate & forensic report addresses
DMARC exists but has no rua= (aggregate) or ruf= (forensic) reporting address. You will not receive deliverability reports.
Transport Security
Warn
MTA-STS
Strict transport security policy
No MTA-STS DNS record found. MTA-STS forces TLS for inbound mail.
Info
TLSRPT
TLS failure reporting
No TLS Reporting (TLSRPT) record. Optional but recommended alongside MTA-STS.
Brand & Reputation
Info
BIMI
Brand logo in email clients
No BIMI record. BIMI enables brand logo display in supporting email clients.
Info
PTR Records
Reverse DNS / FCrDNS for MX hosts
No MX hosts to check PTR for.
Info
Blacklist Check
DNSBL zone spot-check
Could not resolve MX host to any IP for blacklist check.