Email Security
Score
70/100
SPF
Present
DKIM
Missing
DMARC
REJECT
Findings
6
Email Health
SPF
Present
DKIM
Missing
DMARC
REJECT
BIMI
Not configured
MTA-STS
Enabled
STARTTLS
Not tested
TLS-RPT
Enabled
Findings
6
Security Findings
SPF 2
include: invalid domain
validity / warning / RFC 7208 4.6
SPF uses soft fail (~all)
security_posture / warning / RFC 7208 5.1
DKIM 1
No DKIM selectors detected
warning
DMARC 2
No explicit subdomain policy defined (sp tag missing)
operational_recommendation / warning / RFC 9989 4
DMARC depends entirely on SPF alignment
security_posture / warning / RFC 9989 4
MTA-STS 0
No MTA-STS policy issues detected
TLS-RPT 0
No TLS-RPT policy issues detected
STARTTLS 1
SMTP STARTTLS requires a live SMTP session against each MX host and is not tested in this DNS-only lookup.
unsupported_test / info / RFC 3207 4
BIMI 0
BIMI is not configured (optional)
Improvement Opportunities
+5 points
Change SPF policy from ~all to -all
+25 points
Configure DKIM signing
Score Calculation
| Component | Score | Reason |
|---|---|---|
| SPF Record | 10 / 10 | SPF record detected |
| SPF Enforcement | 15 / 20 | Soft fail policy (~all) |
| SPF Lookup Health | 10 / 10 | 1 DNS lookups |
| SPF PTR Usage | 5 / 5 | No PTR mechanism detected |
| SPF Include Validation | 5 / 5 | All SPF includes resolved |
| DKIM | 0 / 25 | No valid DKIM selectors detected |
| DMARC Record | 10 / 10 | DMARC record detected |
| DMARC Enforcement | 20 / 20 | Policy set to reject |
| Total | 70 / 100 |