Check another domain

See the latest report for mailvakt.com →

mailvakt.com

Excellent: no problems found

mailvakt.com scored 100/100 (grade A). No problems were found in the checks that ran. Detected senders: Cloudflare Email Service.

Checked 2026-10-02 18:34 UTC

5 passed0 failing3 for informationDetected senders: Cloudflare Email Service

All checks

MXCan servers find your inbox?No issues foundPass

Nothing to report.

SPFWho may send as you?SPF ends in softfail (~all)Info
  • Info: SPF ends in softfail (~all)

    "~all" is common and works well with DMARC. "-all" is stricter; switch when you are sure every sender is listed.

DKIMAre your emails signed?DKIM key publishedPass
  • Pass: DKIM key published

    mailvakt.com publishes a DKIM key under cf2024-1, cf-bounce.

DMARCWhat happens to fakes?No issues foundPass

Nothing to report.

AlignmentDoes it match your From?No issues foundPass

Nothing to report.

BIMICan inboxes show your logo?No BIMI recordInfo
  • Info: No BIMI record

    No BIMI record at default._bimi.mailvakt.com. BIMI is optional: it shows your logo next to your mail in supporting inboxes once DMARC is enforced.

    How to fix this
MTA-STSIs mail to you encrypted?MTA-STS is in testing modeInfo
  • Info: MTA-STS is in testing mode

    Senders report TLS failures (with TLS-RPT) but still deliver. Switch to mode: enforce once the reports are clean.

TLS-RPTWill you hear about failures?TLS-RPT is configuredPass
  • Pass: TLS-RPT is configured

    TLS reports will be sent to mailto:tlsrpt@mailvakt.com.

How to fix it

Prepare BIMIinstruction

BIMI shows your logo next to messages in supporting inboxes, but only for mail that passes DMARC under an enforced policy.

Applies to: default._bimi.mailvakt.com

  1. Enforce DMARC first: p=quarantine or p=reject at 100% (no pct below 100). 2. Convert your logo to an SVG Tiny PS file and host it over HTTPS, for example https://mailvakt.com/bimi/logo.svg. 3. For Gmail and Apple Mail, obtain a VMC or CMC certificate for the logo. 4. Publish a TXT record at default._bimi.mailvakt.com with v=BIMI1, l= set to the logo URL and a= set to the certificate URL.

Changed something?

DNS may have changed since this report. A fresh check skips caches.