bloombergquint.com

Checked 22 October 2026, 08:02 UTC · via 8.8.8.8
✗Problems found
8 passed 4 warnings 1 failed 2 info

SPF

fail

No SPF record found

Checks

  • ✗
    No SPF record
    No SPF record was found for this domain. SPF is important for preventing email spoofing. Add an SPF record to specify which servers are authorized to send email for your domain.
    #6

DMARC

warn

p=reject (_dmarc.bloombergquint.com)

Found

Record
v=DMARC1; p=reject; adkim=r; aspf=r; ruf=mailto:dmarc-ruf@dmarc-bloomberg.com; fo=1; rua=mailto:dmarc-rua@dmarc-bloomberg.com
Found at
_dmarc.bloombergquint.com
External report address
mailto:dmarc-rua@dmarc-bloomberg.com (not authorized)
External report address
mailto:dmarc-ruf@dmarc-bloomberg.com (not authorized)
TagValueMeaning
vDMARC1Version
prejectPolicy
ruamailto:dmarc-rua@dmarc-bloomberg.comAggregate report addresses
rufmailto:dmarc-ruf@dmarc-bloomberg.comFailure report addresses
adkimrDKIM alignment (r = relaxed, s = strict)
aspfrSPF alignment (r = relaxed, s = strict)
fo1Failure reporting options

Checks

  • ✓ Policy: reject #4
    DMARC policy is set to 'reject', which provides the strongest protection against email spoofing.
  • ✓ Record published #5
    DMARC record exists for this domain.
  • ✓ Valid syntax #17
    DMARC record syntax is valid.
  • ✓ Applies to 100% of mail #18
    DMARC policy applies to all failing mail.
  • ✓ Aggregate reports enabled #19
    Aggregate reports are sent to: mailto:dmarc-rua@dmarc-bloomberg.com
  • ✓ Subdomain policy: reject #20
    Subdomains are covered by policy 'reject'.
  • !
    Report address not authorized
    These report addresses are in another domain that has not agreed to receive your reports, so receivers will not send them: mailto:dmarc-rua@dmarc-bloomberg.com (needs bloombergquint.com._report._dmarc.dmarc-bloomberg.com); mailto:dmarc-ruf@dmarc-bloomberg.com (needs bloombergquint.com._report._dmarc.dmarc-bloomberg.com). Ask the report provider to publish the record, or check the address.
    #29

DKIM

warn

Selectors: s1, s2

Found

Selectors
s1, s2
_domainkey
NOERROR
SelectorKeyFlags
s1RSA 2048 bits
s2RSA 1024 bits

Checks

  • ✓ Keys found: s1, s2 #7
    DKIM keys found for this domain with selectors: s1, s2
  • !
    1024-bit DKIM key
    1024-bit RSA keys are the minimum and are considered weak today: s2 (1024 bits). Rotate to a 2048-bit key.
    #23
  • ✓ No problematic flags #24
    No keys in test mode, revoked, or limited to SHA-1.

DNSSEC

warn

Not signed

Found

DNSKEY records
No (0)
DS at parent
No

Checks

  • !
    Not enabled
    DNSSEC is not enabled for this domain. Consider enabling DNSSEC to protect against DNS spoofing attacks.
    #8

MX

warn

No MX records found

Checks

  • !
    No MX records
    No MX records found. If this domain is used for email, add MX records to specify mail servers. If it never receives mail, publish a null MX ("MX 0 .").
    #9
  • i
    Not protected against spoofing
    The domain has no MX records. If it does not send mail, publish SPF "v=spf1 -all" so nobody can send mail as this domain.
    #28

BIMI

info

No BIMI record

Checks

  • i
    Not configured
    BIMI shows your logo next to your mail in supporting mail clients. It requires DMARC enforcement.
    #38