SurfaceMap › m › mail.com

mail.com

Checked 2026-10-22 09:42 UTC · first added 2026-10-21
!Passed with warnings Score 82 of 100

Domain & DNS

warn

31 passed 2 warn 0 failed

Areas

iRegistration !Delegation iNameservers ✓SOA !DNSSEC ✓Records

Problems

  • !
    Glue differs from the zone
    Delegation · The addresses at the parent (glue) differ from the addresses in the zone: ns-gmx.ui-dns.com (glue 217.160.82.199, zone 185.132.34.199, 217.160.82.199, 2001:8d8:fe:53:0:d9a0:52c7:100, 2607:f1c0:fe:53:185:132:34:199). Update the glue at your registrar.
    #8
  • !
    NSEC3 with extra iterations or salt
    DNSSEC · NSEC3 uses 27 iterations and a 8-byte salt. RFC 9276 recommends 0 iterations and no salt: extra iterations cost resolvers CPU and add no real protection, and some validators treat high counts as insecure.
    #31

Recent checks

!

Full report

Domain & DNS report for mail.com ›

Mail

warn

27 passed 4 warn 0 failed

Areas

iSPF !DMARC !DKIM ✓DNSSEC !MX !TLS iBIMI

Problems

  • !
    Policy: quarantine
    DMARC · DMARC policy is set to 'quarantine'. Consider upgrading to 'reject' for stronger protection once you've verified legitimate emails are passing authentication.
    #4
  • !
    No key under common selectors
    DKIM · The _domainkey name exists but no DKIM key was found under the common selectors. Selectors are provider-specific; check yours with -selector.
    #7
  • !
    Hosts without IPv6
    MX · The following MX hosts could not be resolved to IPv6 addresses: mx00.mail.com, mx01.mail.com
    #11
  • !
    Policy in testing mode
    TLS · With mode: testing, senders only report TLS problems (via TLS-RPT) and still deliver without TLS. Switch to mode: enforce once reports are clean.
    #33

Recent checks

!

Full report

Mail report for mail.com ›