twitter.com

Last scanned 2h ago · Mar 30, 2026, 10:53 PM

Scan AgainExport PDF
B72/100

Your domain is well protected. SPF, DKIM, and DMARC are configured and enforcing. unauthorized emails are rejected.

DMARC Policy: reject1 scan total

Protocol Status

DMARC
32/35
Enforced
SPF
23/25
Hard Fail (-all)
DKIM
17/20
3 keys found
MTA-STS
0/10
Not Configured
TLS-RPT
0/5
Not Configured
BIMI
0/5
Not Found

Score History

B72/100

First scan · Mar 30, 2026, 10:53 PM

Latest Scan Details

DMARCEnforced
32/35RFC RFC 7489

Detected Record

v=DMARC1; p=reject; rua=mailto:d3omt-8484@rua.dmarc.emailanalyst.com; ruf=mailto:d3omt-8484@ruf.dmarc.emailanalyst.com; fo=1

Policy

reject

Aggregate Reporting

mailto:d3omt-8484@rua.dmarc.emailanalyst.com

Forensic Reporting

mailto:d3omt-8484@ruf.dmarc.emailanalyst.com

DKIM Alignment

relaxed

SPF Alignment

relaxed

SPFHard Fail (-all)
23/25RFC RFC 7208

Detected Record

v=spf1 ip4:199.16.156.0/22 ip4:199.59.148.0/22 ip4:8.25.194.0/23 ip4:8.25.196.0/23 ip4:204.92.114.203 ip4:204.92.114.204/31 include:_spf.google.com include:_thirdparty.twitter.com -all

All Mechanism

-all (hard fail)

DNS Lookups

3/10

Record Length

184 bytes

DKIM3 keys found
17/20RFC RFC 6376

Detected Record

google._domainkey:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCwueoBabHD4VkjdWcXjUSvf7cnFdugQOrXKP+LJJOs/RY+GoylnCpc8ZNFxwEiUvTiQnk0nzMk/lpCQIuzHCrwZ5Kdx6ncxfPtQ7tfX88Uj6AcXZ3EWPpAAajsCDuHPF1zpYbFJDhjYq4NYf...

dkim._domainkey:
v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrZ6zwKHLkoNpHNyPGwGd8wZoNZOk5buOf8wJwfkSZsNllZs4jTNFQLy6v4Ok9qd46NdeRZWnTAY+lmAAV1nfH6ulBjiRHsdymijqKy/VMZ9Njjdy/+FPnJSm3+tG9Id7zgLxacA1Yis/18V3TCfvJr...

mandrill._domainkey:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y...

Selectors

google, dkim, mandrill

Key Length

~1024 bit

Algorithm

rsa-sha256

Upgrade DKIM key to 2048-bit for stronger cryptographic security.

MTA-STSNot Configured
0/10RFC RFC 8461

Publish an MTA-STS TXT record and host a policy file at https://mta-sts.yourdomain/.well-known/mta-sts.txt.

TLS-RPTNot Configured
0/5RFC RFC 8460

Publish a TLS-RPT record to receive reports when sending servers fail to establish encrypted connections.

BIMINot Found
0/5RFC RFC 9495

Publish a BIMI record with your brand SVG logo. Requires DMARC at p=quarantine or p=reject with pct=100.