cloudflare.com

Last scanned 2h ago · Mar 30, 2026, 10:53 PM

Scan AgainExport PDF
B80/100

Your domain is well protected. SPF, DKIM, and DMARC are configured and enforcing. unauthorized emails are rejected.

DMARC Policy: reject1 scan total

Protocol Status

DMARC
32/35
Enforced
SPF
23/25
Hard Fail (-all)
DKIM
20/20
5 keys found
MTA-STS
0/10
Not Configured
TLS-RPT
0/5
Not Configured
BIMI
5/5
Configured with VMC

Score History

B80/100

First scan · Mar 30, 2026, 10:53 PM

Latest Scan Details

DMARCEnforced
32/35RFC RFC 7489

Detected Record

v=DMARC1; p=reject; pct=100; rua=mailto:rua@cloudflare.com,mailto:cloudflare@dmarc.area1reports.com; ruf=mailto:cloudflare@dmarc.area1reports.com

Policy

reject

Percentage

100%

Aggregate Reporting

mailto:rua@cloudflare.com,mailto:cloudflare@dmarc.area1reports.com

Forensic Reporting

mailto:cloudflare@dmarc.area1reports.com

DKIM Alignment

relaxed

SPF Alignment

relaxed

SPFHard Fail (-all)
23/25RFC RFC 7208

Detected Record

v=spf1 ip4:199.15.212.0/22 ip4:173.245.48.0/20 include:_spf.google.com include:spf1.mcsv.net include:spf.mandrillapp.com include:mail.zendesk.com include:stspg-customer.com include:_spf.salesforce.com -all

All Mechanism

-all (hard fail)

DNS Lookups

7/10

Record Length

205 bytes

DKIM5 keys found
20/20RFC RFC 6376

Detected Record

k1._domainkey:
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUoNyIR4Bn84LVcfZE20rmDeXQblIupNWBqLXM1Q+VieI/eZu/7k9/vOkLSaQQd...

s1._domainkey:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m74n5R+xcz+ICbNBWRIlQeHI65Hjp67+P59XSe71jItafrcJ4/5y/UvU+uNg7KNeOcEsotGo7QvLN87hqZSZqfzVyyGnQuEUXoKPdKokD6Pa5KmJSqbA5Y/f977HpikU9Xtd7Orc7ctRL...

m1._domainkey:
v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfI4XmZUuFjcKhAIW2f5dqqlYg4/7xSM953hHWXR5U2VPrfram3ZCqXIOxgvgINFxNAm4m0rxaQ2xtwknSWubFcl+yepZ5mwgBqWh/7bO1LNdOqj10lgfspWukRdI34djbEYDkFg/2A7...

mandrill._domainkey:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y...

zendesk1._domainkey:
v=DKIM1;t=s;n=core;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9IqdLrO3Zr2/56MHt8oQVCQorP0Bl2Fz9sM2tFBnJCdB/HogQmuudEg2xAovCN2PYpw44UijIvPuBoT9vxiv6ZCBJTLJXa82r6ke5rE4tbe9NKFIrVIb9S306cJDrnKFM...

Selectors

k1, s1, m1, mandrill, zendesk1

Key Length

2048+ bit

Algorithm

rsa-sha256

MTA-STSNot Configured
0/10RFC RFC 8461

Publish an MTA-STS TXT record and host a policy file at https://mta-sts.yourdomain/.well-known/mta-sts.txt.

TLS-RPTNot Configured
0/5RFC RFC 8460

Publish a TLS-RPT record to receive reports when sending servers fail to establish encrypted connections.

BIMIConfigured with VMC
5/5RFC RFC 9495

Detected Record

v=BIMI1; l=https://www.cloudflare.com/cloudflare_1171114652.svg; a=https://www.cloudflare.com/cloudflare_1171114652.pem

Logo URL

https://www.cloudflare.com/cloudflare_1171114652.svg

SVG Status

accessible

VMC Certificate

https://www.cloudflare.com/cloudflare_1171114652.pem

DMARC Prerequisite

met