Apex, subdomain, or URL. We figure it out.
Results for
baloise.com
Email authentication
The basics are in place but can be hardened.
- 3Pass
- 1Warning
- 0Fail
- 2Not set
SPF
WarningAuthorizes which servers may send mail for the domain
SPF is published but could be tightened.
- Policy
- -all
- DNS lookups
- 9 / 10
- Ends in -all (hardfail): unauthorized senders are rejected.
- Uses 9 of 10 allowed DNS lookups. Close to the limit.
v=spf1 a:hyperredaktion.milchundzucker.de ip4:52.49.181.203 ip4:54.154.194.70 include:spf.sendinblue.com include:mailing.eqs.com include:spf.protection.outlook.com include:_spf01.eyevip.ch include:spf.mailjet.com include:_spf.general.transactional-mail-a.com include:_spf.eu.mailgun.org -allDKIM
PassCryptographically signs outgoing mail (best-effort selector probe)
DKIM key published for 4 known selectors.
- Selectors
- selector1, s1, mail, mailjet
- Found a DKIM key at selector1._domainkey.baloise.com
- Found a DKIM key at s1._domainkey.baloise.com
- Found a DKIM key at mail._domainkey.baloise.com
- Found a DKIM key at mailjet._domainkey.baloise.com
DMARC
PassTells receivers what to do with mail that fails SPF and DKIM
DMARC is enforced.
- Policy
- p=quarantine
- Coverage
- 100%
- Policy p=quarantine: failing mail is sent to spam.
- Aggregate reports (rua) are configured.
v=DMARC1; p=quarantine; rua=mailto:[email protected]MTA-STS
Not setEnforces TLS for inbound mail and prevents downgrade attacks
No MTA-STS policy. Inbound mail can be delivered without TLS.
TLS-RPT
PassReceives reports about TLS delivery failures
TLS reporting is configured.
- Reports to
- mailto:[email protected]
- TLS delivery failure reports are being collected.
v=TLSRPTv1; rua=mailto:[email protected]BIMI
Not setDisplays your verified brand logo in supporting inboxes
No BIMI record. No brand logo is published for inboxes.
Checks query live DNS over Cloudflare and the public MTA-STS policy endpoint. DKIM selectors cannot be listed from DNS, so DKIM detection probes common provider selectors only.