Email Security
Score
50/100
SPF
Missing
DKIM
Key present
DMARC
REJECT
Findings
9
Security Findings
SPF 1
No SPF record detected
warning
DKIM 1
DKIM key is 1024-bit (allowed but deprecated)
security_posture / warning / RFC 6376 3.6.1
DMARC 4
No explicit subdomain policy defined (sp tag missing)
operational_recommendation / warning / RFC 9989 4
DMARC depends entirely on DKIM alignment
security_posture / warning / RFC 9989 4
External DMARC reporting to robot.simply.com is not authorized
operational_recommendation / warning / RFC 9989 7
External DMARC failure reporting to robot.simply.com is not authorized
operational_recommendation / warning / RFC 9989 7
MTA-STS 0
No MTA-STS policy issues detected
TLS-RPT 0
No TLS-RPT policy issues detected
STARTTLS 3
SMTP STARTTLS requires a live SMTP session against each MX host and is not tested in this DNS-only lookup.
unsupported_test / info / RFC 3207 4
MTA-STS is not configured; STARTTLS remains opportunistic unless enforced by another mechanism such as DANE.
operational_recommendation / info / RFC 3207 6
TLS-RPT is not configured, so delivery TLS failures may not be reported back to the domain owner.
operational_recommendation / info / RFC 8460 1
BIMI 0
BIMI is not configured (optional)
Improvement Opportunities
+40 points
Publish an SPF record
+5 points
Upgrade 1 DKIM key(s) to 2048-bit
Score Calculation
| Component | Score | Reason |
|---|---|---|
| SPF Record | 0 / 10 | No SPF record detected |
| SPF Enforcement | 0 / 20 | No SPF record available |
| SPF Lookup Health | 0 / 10 | No SPF record available |
| SPF PTR Usage | 0 / 5 | No SPF record available |
| SPF Include Validation | 0 / 5 | No SPF record available |
| DKIM | 20 / 25 | 2 valid selector(s) |
| DMARC Record | 10 / 10 | DMARC record detected |
| DMARC Enforcement | 20 / 20 | Policy set to reject |
| Total | 50 / 100 |