SurfaceMap › m › mimecast.com

mimecast.com

Checked 2026-10-22 09:51 UTC · first added 2026-10-21
!Passed with warnings Score 79 of 100

Domain & DNS

warn

25 passed 3 warn 0 failed

Areas

iRegistration !Delegation ✓Nameservers !SOA !DNSSEC ✓Records

Problems

  • !
    No IPv6
    Delegation · None of the nameservers has an IPv6 address, so IPv6-only resolvers can't reach them.
    #13
  • !
    Unusual SOA timers
    SOA · refresh 5m is outside 20m–1d; retry 5m should be shorter than refresh 5m. Current values: refresh 5m, retry 5m, expire 7d, negative TTL 1d.
    #23
  • !
    Not signed
    DNSSEC · The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Recent checks

!

Full report

Domain & DNS report for mimecast.com ›

Mail

warn

25 passed 4 warn 0 failed

Areas

iSPF ✓DMARC !DKIM !DNSSEC !MX !TLS iBIMI

Problems

  • !
    No key under common selectors
    DKIM · The _domainkey name exists but no DKIM key was found under the common selectors. Selectors are provider-specific; check yours with -selector.
    #7
  • !
    Not enabled
    DNSSEC · DNSSEC is not enabled for this domain. Consider enabling DNSSEC to protect against DNS spoofing attacks.
    #8
  • !
    Hosts without IPv6
    MX · The following MX hosts could not be resolved to IPv6 addresses: service-alpha-inbound-a.mimecast.com, service-alpha-inbound-b.mimecast.com
    #11
  • !
    Policy in testing mode
    TLS · With mode: testing, senders only report TLS problems (via TLS-RPT) and still deliver without TLS. Switch to mode: enforce once reports are clean.
    #33

Recent checks

!

Full report

Mail report for mimecast.com ›