B
83
reuters.com
8 passed
2 warnings
0 failed
Score Breakdown
| Check | Description | Status | Summary |
|---|---|---|---|
| MX Records | Mail server routing | Pass | 2 MX record(s) found. |
| SPF | Sender Policy Framework | Pass | SPF uses -all (hard fail). Strict and recommended. |
| DKIM | DomainKeys Identified Mail | Warn | DKIM records found but contain tag errors — see breakdown below. |
| DMARC | Domain-based Message Authentication | Pass | DMARC policy is reject. Excellent. |
| DMARC Reporting | Aggregate & forensic report addresses | Pass | DMARC reporting configured. Aggregate (rua): mailto:dmarc_rua@emaildefense.proofpoint.com; Forensic (ruf): mailto:dmarc_ruf@emaildefense.proofpoint.com. |
| MTA-STS | Strict transport security policy | Warn | No MTA-STS DNS record found. MTA-STS forces TLS for inbound mail. |
| TLSRPT | TLS failure reporting | Info | No TLS Reporting (TLSRPT) record. Optional but recommended alongside MTA-STS. |
| BIMI | Brand logo in email clients | Pass | BIMI is configured. |
| PTR Records | Reverse DNS / FCrDNS for MX hosts | Pass | All MX server IPs have valid PTR records with forward-confirmed reverse DNS (FCrDNS). |
| Blacklist Check | DNSBL zone spot-check | Pass | 1 IP checked against 10 DNSBL zones — all clean. |
Mail Routing
Pass
MX Records
Mail server routing
2 MX record(s) found.
| Priority | Mail Exchange |
|---|---|
| 10 | mxb-00160c04.gslb.pphosted.com |
| 10 | mxa-00160c04.gslb.pphosted.com |
Authentication
Pass
SPF
Sender Policy Framework
Hard Fail (-all)
SPF uses -all (hard fail). Strict and recommended.
v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all
Warn
DKIM
DomainKeys Identified Mail
DKIM records found but contain tag errors — see breakdown below.
✓
selector1._domainkey
Microsoft 365
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCwjnBe+Q6zdxEJmN3yzNPD+/2YrnV8vodhqIeHr1basHFnBBwMBV9S4uGz3oH12CGQzuz92AOhdMJ+RtPO+aDJEKpOtn3N7Thkq/iNy37/8bl7i4u1zHiih3mAltrMnJ4Z1YHl6+4Gja2Vs1YZYpdCAcAC0iqQg59wf0qnT7HcKwIDAQAB; n=1024,1450207371,1466018571
✗
k1._domainkey
Klaviyo
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUoNyIR4Bn84LVcfZE20rmDeXQblIupNWBqLXM1Q+VieI/eZu/7k9/vOkLSaQQdml4Cv8lb3PcnluMVIhQIDAQAB;
⚠ v= Required tag v= is absent. Record must include v=DKIM1
✓
k2._domainkey
Klaviyo
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA0b90ObWaLDc+i9MtTNmGeWO009hr20fIxhGg6XBT2kjZ1DTThopSe1nAndsupmcBwlQ5Q6LJ+ZAxLcujnPIxM0ZBLmgpkv8u6RfY4eFP8OLvdAW3oSuB0DyLDigQX4Sj8wBO4YIdQH6AAmBeOsidsKAFNFUCpc3vCxtBDR12U+cBg724l3sBkMQ8evnz6idnqxq9QAVYh8k4kJ+RP+6cqTdy7LjIm8xY/bQNpQIpGUAuDo2DjLcCDun9DAI4Q/3z+Q0o9QuQIDAQAB;
✓
k3._domainkey
Klaviyo
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYGiMSn7fsUqSvfSX40x9R1OlRtbNiCY80lHRIlcKx3XDIR7257aUx+q9CSIARdfTL6KCuLGNFx5g9TgVr6png4ajcieSQGtOehBgxnkDN8aAA5TX0FmFrcefJU0JoxLOF09EKgXxhSSHCk/ekVb0PXSboHXoZ9+EI404F1qhcwXXIgHXTaUthHTut2P6BBZhIXIgvDe/w49GchR7MRJqjNb7neEBbYHbgWuBTvvHCg7Gy6m6n9krYK+ROWq3dVvXy9plAGK3ygM+HtjIiMt7arRGMOF0WgDTz7YdN9BGpt6BvXxLnjiQcgS5T9n+cIyPZgiWzDMXNlaEEdKTEKxrwIDAQAB;
Pass
DMARC
Domain-based Message Authentication
p=reject
DMARC policy is reject. Excellent.
v=DMARC1; p=reject; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
Pass
DMARC Reporting
Aggregate & forensic report addresses
DMARC reporting configured. Aggregate (rua): mailto:dmarc_rua@emaildefense.proofpoint.com; Forensic (ruf): mailto:dmarc_ruf@emaildefense.proofpoint.com.
rua: mailto:dmarc_rua@emaildefense.proofpoint.com ruf: mailto:dmarc_ruf@emaildefense.proofpoint.com
Transport Security
Warn
MTA-STS
Strict transport security policy
No MTA-STS DNS record found. MTA-STS forces TLS for inbound mail.
Info
TLSRPT
TLS failure reporting
No TLS Reporting (TLSRPT) record. Optional but recommended alongside MTA-STS.
Brand & Reputation
Pass
BIMI
Brand logo in email clients
BIMI is configured.
v=BIMI1; l=https://www.reuters.com/static/email/bimi_logo.svg
Pass
PTR Records
Reverse DNS / FCrDNS for MX hosts
All MX server IPs have valid PTR records with forward-confirmed reverse DNS (FCrDNS).
| MX Host | IP | Ver | PTR Record | FCrDNS |
|---|---|---|---|---|
| mxb-00160c04.gslb.pphosted.com | 205.220.179.180 | IPv4 | mx0b-00160c04.pphosted.com | ✓ |
| mxa-00160c04.gslb.pphosted.com | 205.220.179.180 | IPv4 | mx0b-00160c04.pphosted.com | ✓ |
Pass
Blacklist Check
DNSBL zone spot-check
1 IP checked against 10 DNSBL zones — all clean.
205.220.179.180 (10 zone checks)
Clean — not listed on any checked zone