Email security for bit.nl

SPF

Pass

Authorizes which servers may send mail for the domain

SPF is published and within limits.

Policy: -all
DNS lookups: 1 / 10

Ends in -all (hardfail): unauthorized senders are rejected.
Uses 1 of 10 allowed DNS lookups.

v=spf1 include:spf-breaks-email.bit.nl ip4:37.153.222.234/29 ip6:2a02:22a0:0b17::2/48 ip4:85.17.15.88/32 ip6:2001:1af8:4700:a119:16:0:8517:1588/128 ip4:193.27.86.20/32 ip6:2a01:4d60:3:1:71::1/128 ip4:193.27.86.70/32 ip6:2a01:4d60:3:1:74::1/128 -all

DKIM

Not set

Cryptographically signs outgoing mail (best-effort selector probe)

No DKIM key found for common selectors.

Selectors probed: 32

DKIM selectors cannot be enumerated from DNS, so this only probes well-known selectors. A negative result is not proof that DKIM is missing.

DMARC

Pass

Tells receivers what to do with mail that fails SPF and DKIM

DMARC is enforced.

Policy: p=reject
Subdomains: sp=quarantine
Coverage: 100%

Policy p=reject: failing mail is rejected outright.
Aggregate reports (rua) are configured.

v=DMARC1; p=reject; sp=quarantine; adkim=r; aspf=r; pct=100; fo=1; rf=afrf; ri=86400; rua=mailto:[email protected]; ruf=mailto:[email protected]

MTA-STS

Not set

Enforces TLS for inbound mail and prevents downgrade attacks

No MTA-STS policy. Inbound mail can be delivered without TLS.

TLS-RPT

Not set

Receives reports about TLS delivery failures

No TLS-RPT record. You get no reports about failed TLS delivery.

BIMI

Pass

Displays your verified brand logo in supporting inboxes

BIMI is published.

Logo: https://www.bit.nl/app/uploads/2026/01/BIT-Logo-SVG-BIMI_tiny_ps.svg

A logo (l=) is published.

v=BIMI1; l=https://www.bit.nl/app/uploads/2026/01/BIT-Logo-SVG-BIMI_tiny_ps.svg; a=;