| ✓ | MX | 4 mail servers, all resolve |
| ✓ | SPF | 7 of 10 DNS lookups |
| ! | DKIM | k1: 1024-bit RSA key; 2048-bit is recommended |
| ✓ | DMARC | p=reject: failing mail is refused |
| ✗ | MTA-STS | Policy file returned HTTP 530 (must be 200, no redirects) |
| ✓ | TLS-RPT | Reports enabled |
| ✓ | BIMI | Logo and certificate (VMC) published |
| ✓ | DNSSEC | Signed and validated |
MX
| 5 | mxa-canary.global.inbound.cf-emailsecurity.net | 172.65.169.99 |
| 5 | mxb-canary.global.inbound.cf-emailsecurity.net | 172.65.65.66 |
| 10 | mxa.global.inbound.cf-emailsecurity.net | 172.65.64.137 |
| 10 | mxb.global.inbound.cf-emailsecurity.net | |
- ✓ 4 mail servers, all resolve
SPF
v=spf1 ip4:199.15.212.0/22 ip4:173.245.48.0/20 include:_spf.google.com include:spf1.mcsv.net include:spf.mandrillapp.com include:mail.zendesk.com include:stspg-customer.com include:_spf.salesforce.com -all
Include tree (7 lookups)
- include:_spf.google.com
- include:spf1.mcsv.net
- include:spf.mandrillapp.com
- include:mail.zendesk.com
- include:stspg-customer.com
- include:_spf.salesforce.com
- ✓ 7 of 10 DNS lookups
- ✓ “-all” fails unlisted senders
DKIM
| k1 | RSA 1024-bit |
| s1 | RSA 2048-bit |
- ! k1: 1024-bit RSA key; 2048-bit is recommended
- ✓ s1: RSA 2048-bit key
Checked common selectors: default, google, selector1, selector2, k1, s1, s2, dkim, mail, resend, fm1, protonmail.
DMARC
v=DMARC1; p=reject; sp=reject; adkim=r; aspf=r; pct=100; rua=mailto:a1c47f179bc04efd8ee4dcd4d85dfc65@dmarc-reports.cloudflare.net,mailto:rua@cloudflare.com
- p
- reject
- sp
- reject
- adkim
- r
- aspf
- r
- pct
- 100
- rua
- mailto:a1c47f179bc04efd8ee4dcd4d85dfc65@dmarc-reports.cloudflare.net,mailto:rua@cloudflare.com
- ✓ p=reject: failing mail is refused
- ✓ Aggregate reports go to a1c47f179bc04efd8ee4dcd4d85dfc65@dmarc-reports.cloudflare.net, rua@cloudflare.com
MTA-STS
v=STSv1;id=1769609691387;
- ✗ Policy file returned HTTP 530 (must be 200, no redirects)
TLS-RPT
v=TLSRPTv1; rua=mailto:rua@cloudflare.com;
BIMI
v=BIMI1; l=https://www.cloudflare.com/cloudflare_1171114652.svg; a=https://www.cloudflare.com/cloudflare_1171114652.pem
- ✓ Logo and certificate (VMC) published