Email Security

SPF, DKIM, DMARC, BIMI and email authentication analysis
Score
70/100
SPF
Present
DKIM
Missing
DMARC
REJECT
Findings
6

BIMI

No BIMI record configured
BIMI is optional and does not affect Email Health.

BIMI lets a domain declare a brand-logo location for supported inboxes, but this lookup only checks the DNS record and DMARC posture. It does not fetch the logo, verify evidence documents, or prove mailbox-provider display.

SMTP STARTTLS

Status: Not tested
MX Host
10 · smtp.google.com
MTA-STS
Configured
TLS-RPT
Configured

STARTTLS is negotiated during a live SMTP session after EHLO. This DNS-only lookup does not connect to MX hosts, complete a TLS handshake, or validate SMTP certificates. MTA-STS and TLS-RPT can improve transport policy and reporting, but they do not prove that a specific MX currently accepts STARTTLS.

MTA-STS

Status: good
Policy ID
20210803T010101
Mode
enforce
Max Age
86400
MX Patterns
3
MX Host
smtp.google.com
MX Host
aspmx.l.google.com
MX Host
*.aspmx.l.google.com
Record
v=STSv1; id=20210803T010101;

MTA-STS publishes a HTTPS policy for mail delivery TLS expectations. This lookup checks the DNS record and policy file, but it does not perform a live SMTP delivery or prove that every MX currently negotiates TLS.

TLS-RPT

Status: good
Reporting Address
Record
v=TLSRPTv1;rua=mailto:[email protected]

TLS-RPT publishes where mail systems can report TLS delivery problems. It is a reporting record, not a live SMTP TLS or certificate validation result.