Email Security

SPF, DKIM, DMARC, BIMI and email authentication analysis
Score
70/100
SPF
Valid
DKIM
Missing
DMARC
REJECT
Findings
9

BIMI

No BIMI record configured
BIMI is optional and does not affect Email Health.

BIMI lets a domain declare a brand-logo location for supported inboxes, but this lookup only checks the DNS record and DMARC posture. It does not fetch the logo, verify evidence documents, or prove mailbox-provider display.

SMTP STARTTLS

Status: Not tested
MX Host
0 · michaelskytte-dk.mail.protection.outlook.com
MTA-STS
Not configured
TLS-RPT
Not configured

STARTTLS is negotiated during a live SMTP session after EHLO. This DNS-only lookup does not connect to MX hosts, complete a TLS handshake, or validate SMTP certificates. MTA-STS and TLS-RPT can improve transport policy and reporting, but they do not prove that a specific MX currently accepts STARTTLS.

MTA-STS

No MTA-STS record detected

MTA-STS publishes a HTTPS policy for mail delivery TLS expectations. This lookup checks the DNS record and policy file, but it does not perform a live SMTP delivery or prove that every MX currently negotiates TLS.

TLS-RPT

No TLS-RPT record detected

TLS-RPT publishes where mail systems can report TLS delivery problems. It is a reporting record, not a live SMTP TLS or certificate validation result.