Apex, subdomain, or URL. We figure it out.
Results for
vodafone.com
Email authentication
Email authentication is well configured.
- 4Pass
- 0Warning
- 0Fail
- 2Not set
SPF
PassAuthorizes which servers may send mail for the domain
SPF is published and within limits.
- Policy
- ~all
- DNS lookups
- 4 / 10
- Ends in ~all (softfail): unauthorized senders are marked, not rejected.
- Uses 4 of 10 allowed DNS lookups.
v=spf1 ip4:195.232.248.108/30 include:spf2.vodafone.com ip4:65.254.253.0/24 ip4:195.232.248.240/28 ip4:195.232.245.160/28 include:spf1.vodafone.com ~allDKIM
PassCryptographically signs outgoing mail (best-effort selector probe)
DKIM key published for 4 known selectors.
- Selectors
- selector1, selector2, s1, s2
- Found a DKIM key at selector1._domainkey.vodafone.com
- Found a DKIM key at selector2._domainkey.vodafone.com
- Found a DKIM key at s1._domainkey.vodafone.com
- Found a DKIM key at s2._domainkey.vodafone.com
DMARC
PassTells receivers what to do with mail that fails SPF and DKIM
DMARC is enforced.
- Policy
- p=reject
- Subdomains
- sp=none
- Coverage
- 100%
- Policy p=reject: failing mail is rejected outright.
- Aggregate reports (rua) are configured.
v=DMARC1; p=reject; rua=mailto:[email protected],mailto:888197d5-5e23-4990-b9d3-7b8eceaef0e5@rep.uk.mimecastdmarcanalyzer.com; ruf=mailto:[email protected]; pct=100; sp=none; fo=0MTA-STS
Not setEnforces TLS for inbound mail and prevents downgrade attacks
No MTA-STS policy. Inbound mail can be delivered without TLS.
TLS-RPT
PassReceives reports about TLS delivery failures
TLS reporting is configured.
- Reports to
- mailto:888197d5-5e23-4990-b9d3-7b8eceaef0e5@tlsrpt.uk.mimecastdmarcanalyzer.com
- TLS delivery failure reports are being collected.
v=TLSRPTv1; rua=mailto:888197d5-5e23-4990-b9d3-7b8eceaef0e5@tlsrpt.uk.mimecastdmarcanalyzer.com;BIMI
Not setDisplays your verified brand logo in supporting inboxes
No BIMI record. No brand logo is published for inboxes.
Checks query live DNS over Cloudflare and the public MTA-STS policy endpoint. DKIM selectors cannot be listed from DNS, so DKIM detection probes common provider selectors only.