Mail domain report: qlik.com

SPF

pass

SPF record published

Found

Record: v=spf1 mx ip4:204.93.64.116 ip4:206.196.17.39 ip4:206.196.17.36 ip4:206.196.17.60 ip4:209.235.207.195 ip4:188.65.156.39 ip4:195.140.184.0/22 ip4:91.192.40.0/22 ip4:91.222.96.0/22 ip4:52.38.191.241 ip4:168.245.52.237 ip4:159.182.219.30 ip4:159.182.219.31 ip4:159.182.63.31 ip4:159.182.1.200 ip4:159.182.1.201 ip4:159.182.79.30 ip4:159.182.127.30 ip4:114.251.200.21 ip4:159.182.81.40 ip4:72.35.5.158 ip4:159.182.107.23 ip4:159.182.67.30 ip4:159.182.241.23 ip4:159.182.241.24 ip4:5.10.237.238 ip4:185.40.25.168 ip4:54.240.114.188 ip4:54.240.114.189 ip4:208.74.204.0/22 ip4:46.19.168.0/23 ip4:104.46.112.255 ip4:192.174.90.242 ip4:208.74.204.5 ip4:52.23.49.7 ip4:70.38.100.90/31 ip4:70.38.100.92/30 ip4:70.38.100.96/30 ip4:107.21.4.59 ip4:204.14.232.0/22 ip4:4.7.16.128/26 ip4:38.108.186.0/24 ip4:216.35.11.64/26 ip4:65.74.175.0/27 ip4:216.55.46.192/26 ip4:54.240.14.168 ip4:54.240.14.169 ip4:54.240.14.170 ip4:35.190.247.0/24 ip4:35.191.0.0/16 ip4:46.226.48.0/21 ip4:64.233.160.0/19 ip4:66.102.0.0/20 ip4:66.249.80.0/20 ip4:67.216.183.10 ip4:67.219.240.0/20 ip4:72.14.192.0/18 ip4:74.125.0.0/16 ip4:85.158.136.0/21 ip4:95.131.104.0/21 ip4:103.9.96.0/22 ip4:108.177.8.0/21 ip4:108.177.96.0/19 ip4:117.120.16.0/21 ip4:130.211.0.0/22 ip4:172.217.0.0/19 ip4:172.217.32.0/20 ip4:172.217.128.0/19 ip4:172.217.160.0/20 ip4:172.217.192.0/19 ip4:172.253.56.0/21 ip4:172.253.112.0/20 ip4:173.194.0.0/16 ip4:193.109.254.0/23 ip4:194.106.220.0/23 ip4:195.245.230.0/23 ip4:199.71.239.178 ip4:209.85.128.0/17 ip4:216.46.96.237 ip4:216.46.96.238/31 ip4:216.58.192.0/19 ip4:216.82.240.0/20 ip4:216.239.32.0/19 ip4:87.253.232.0/21 ip4:185.189.236.0/22 ip4:185.211.120.0/22 ip4:185.250.236.0/22 ip4:45.14.148.0/22 ip4:148.139.124.21 ip4:149.96.6.7 ip4:149.96.5.2 ip4:199.91.140.28 ip4:148.139.124.24 ip4:149.96.5.209 ip4:148.139.125.23 ip4:148.139.125.21 ip4:199.91.136.28 ip4:149.96.5.7 ip4:148.139.124.22 ip4:149.96.6.2 ip4:148.139.125.24 ip4:148.139.125.22 ip4:149.96.5.3 ip4:149.96.6.3 ip4:149.96.6.6 ip4:149.96.6.209 ip4:148.139.124.23 ip4:149.96.5.6 ip4:148.139.0.31 ip4:148.139.3.2 ip4:199.91.139.24 ip4:148.139.2.2 ip4:199.91.141.145 ip4:148.139.1.2 ip4:199.91.136.26 ip4:149.96.13.2 ip4:148.139.143.19 ip4:37.98.234.2 ip4:199.91.140.26 ip4:148.139.0.2 ip4:199.91.137.2 ip4:148.139.142.19 ip4:199.91.139.23 ip4:199.91.139.145 ip4:149.96.14.2 ip4:199.91.137.26 ip4:148.139.143.20 ip4:37.98.235.2 ip4:199.91.136.28 ip4:199.91.139.22 ip4:199.91.140.28 ip4:199.91.141.23 ip4:199.91.141.24 ip4:148.139.143.18 ip4:37.98.232.12 ip4:148.139.142.20 ip4:37.98.232.26 ip4:148.139.142.17 ip4:148.139.143.17 ip4:199.91.141.22 ip4:148.139.142.18 ip4:148.139.1.31 ip4:37.98.232.2 ip4:199.91.136.28 ip4:149.96.132.2 ip4:148.139.105.16 ip4:103.23.65.2 ip4:149.96.2.26 ip4:149.96.195.2 ip4:103.23.67.26 ip4:148.139.104.17 ip4:103.23.66.26 ip4:149.96.133.2 ip4:199.91.140.28 ip4:148.139.104.16 ip4:103.23.64.2 ip4:149.96.194.2 ip4:149.96.220.2 ip4:148.139.105.17 ip4:149.96.1.26 ip4:149.96.221.2 ip4:199.47.187.110 ip4:199.47.187.111 ip4:103.248.10.126 ip4:103.248.10.127 ip4:208.117.60.29 ip4:216.221.170.75 ip4:216.221.170.76 ip4:216.221.170.77 ip4:216.221.170.78 ip4:216.221.170.250 ip4:216.221.170.251 ip4:216.221.171.11 ip4:216.221.171.12 ip4:216.221.171.14 ip4:216.221.171.13 ip4:85.233.216.135 ip4:208.117.49.186 ip6:2001:4860:4000::/36 ip6:2404:6800:4000::/36 ip6:2607:f8b0:4000::/36 ip6:2800:3f0:4000::/36 ip6:2a00:1450:4000::/36 ip6:2c0f:fb50:4000::/36 a:zgateway.zuora.com include:_spf.salesforce.com include:mktomail.com include:spf.protection.outlook.com include:us.khoros-mail.com include:amazonses.com include:_spf.qemailserver.com include:spf-0021b601.pphosted.com ~all
DNS lookups: 10 of 10
Void lookups: 0 of 2

Checks

✓ No deprecated ptr mechanism #1

No ptr mechanism found in SPF record.
✓ 10 of 10 DNS lookups #2

SPF record needs 10 DNS lookups (limit is 10).
✓ Ends with ~all #3

SPF record properly uses ~all to restrict unauthorized senders.
✓ Record published #6

SPF record exists for this domain.
✓ Single record #16

Exactly one SPF record is published.
✓ Valid syntax #25

All SPF mechanisms and modifiers are valid.
✓ No void lookups #26

All include/redirect targets exist.
✓ No overly broad IP ranges #27

All ip4/ip6 ranges are narrow enough.

DMARC

warn

p=quarantine (_dmarc.qlik.com)

Found

Record: v=DMARC1; p=quarantine; sp=quarantine; rua=mailto:eicohuqf@ag.eu.dmarcadvisor.com,mailto:dmarc.advisor@qliktech.com,mailto:re+mw0kb9o9e3p@dmarc.postmarkapp.com,mailto:re+ogbbedjyqlk@dmarc.postmarkapp.com,mailto:dmarc_agg@vali.email; pct=100
Found at: _dmarc.qlik.com
External report address: mailto:eicohuqf@ag.eu.dmarcadvisor.com (authorized)
External report address: mailto:dmarc.advisor@qliktech.com (authorized)
External report address: mailto:re+mw0kb9o9e3p@dmarc.postmarkapp.com (authorized)
External report address: mailto:re+ogbbedjyqlk@dmarc.postmarkapp.com (authorized)
External report address: mailto:dmarc_agg@vali.email (authorized)

Tag	Value	Meaning
v	DMARC1	Version
p	quarantine	Policy
sp	quarantine	Subdomain policy
pct	100	Percentage of mail the policy applies to
rua	mailto:eicohuqf@ag.eu.dmarcadvisor.com,mailto:dmarc.advisor@qliktech.com,mailto:re+mw0kb9o9e3p@dmarc.postmarkapp.com,mailto:re+ogbbedjyqlk@dmarc.postmarkapp.com,mailto:dmarc_agg@vali.email	Aggregate report addresses

Checks

!

Policy: quarantine

DMARC policy is set to 'quarantine'. Consider upgrading to 'reject' for stronger protection once you've verified legitimate emails are passing authentication.

#4
✓ Record published #5

DMARC record exists for this domain.
✓ Valid syntax #17

DMARC record syntax is valid.
✓ Applies to 100% of mail #18

DMARC policy applies to all failing mail.
✓ Aggregate reports enabled #19

Aggregate reports are sent to: mailto:eicohuqf@ag.eu.dmarcadvisor.com, mailto:dmarc.advisor@qliktech.com, mailto:re+mw0kb9o9e3p@dmarc.postmarkapp.com, mailto:re+ogbbedjyqlk@dmarc.postmarkapp.com, mailto:dmarc_agg@vali.email
✓ Subdomain policy: quarantine #20

Subdomains are covered by policy 'quarantine'.
✓ External report addresses authorized #29

Report addresses in other domains have published their authorization.

DKIM

pass

Selectors: selector1, selector2, s1, s2

Found

Selectors: selector1, selector2, s1, s2
_domainkey: NOERROR

Selector	Key	Flags
selector1	RSA 2048 bits
selector2	RSA 2048 bits
s1	RSA 2048 bits
s2	RSA 2048 bits

Checks

✓ Keys found: selector1, selector2, s1, s2 #7

DKIM keys found for this domain with selectors: selector1, selector2, s1, s2
✓ Strong keys #23

DKIM keys are strong enough: selector1: RSA 2048 bits; selector2: RSA 2048 bits; s1: RSA 2048 bits; s2: RSA 2048 bits.
✓ No problematic flags #24

No keys in test mode, revoked, or limited to SHA-1.

DNSSEC

pass

Signed, DS published at parent

Found

DNSKEY records: Yes (3)
DS at parent: Yes
Algorithms: ECDSAP256SHA256 (13)
Key tags: 30933, 31230, 62693
Signatures valid until: 21 December 2026, 03:30 UTC

Checks

✓ Signed, DS published at parent #8

DNSSEC is enabled for this domain (DNSKEY and DS present), providing additional security for DNS lookups.
✓ Signatures valid until 2026-12-21 #21

DNSKEY signatures are valid until 2026-12-21T03:30:54Z.

MX

warn

2 mail servers

Found

Priority	Host	Records	Reverse DNS
10	mxa-0021b601.gslb.pphosted.com	A 205.220.168.18	mx0a-0021b601.pphosted.com ✓
10	mxb-0021b601.gslb.pphosted.com	A 205.220.168.18	mx0a-0021b601.pphosted.com ✓

Checks

✓ 2 MX records #9

Found 2 MX records for this domain.
✓ All hosts resolve #10

All MX records resolve to valid IP addresses.
!

Hosts without IPv6

The following MX hosts could not be resolved to IPv6 addresses: mxa-0021b601.gslb.pphosted.com, mxb-0021b601.gslb.pphosted.com

#11
✓ Redundant MX hosts #12

Found 2 MX records, which provides redundancy for email delivery.
✓ At most 5 MX records #13

Found 2 MX records, which is within the recommended range (1-5).
✓ No localhost targets #14

No MX records pointing to localhost found.
✓ No private IP addresses #15

No MX records resolving to private IP addresses found.
✓ No CNAME targets #22

No MX records point to a CNAME.
✓ Reverse DNS confirmed #30

All 2 MX addresss have a PTR record that resolves back to them.

TLS

warn

no MTA-STS · no TLS-RPT · DANE on 0 of 2 MX hosts

Found

DANE (TLSA records)

MX host	TLSA	DNSSEC
mxa-0021b601.gslb.pphosted.com	none	-
mxb-0021b601.gslb.pphosted.com	none	-

Checks

!

Not configured

MTA-STS is not configured, so other mail servers fall back to unencrypted delivery when TLS fails or is stripped by an attacker. Publish a _mta-sts TXT record and a policy at https://mta-sts.<domain>/.well-known/mta-sts.txt.

#32
i

Not configured

TLS-RPT lets senders report TLS delivery problems to you. It is most useful together with MTA-STS or DANE.

#35
i

Not used

No MX host publishes TLSA records. DANE lets senders verify your mail server's certificate through DNSSEC; it requires DNSSEC on the MX host's zone.

#36

BIMI

pass

https://vmc.digicert.com/42039a5e-6574-45c1-9414-fa35c946e52d.svg

Found

Record: v=BIMI1; l=https://vmc.digicert.com/42039a5e-6574-45c1-9414-fa35c946e52d.svg; a=https://vmc.digicert.com/42039a5e-6574-45c1-9414-fa35c946e52d.pem
Found at: default._bimi.qlik.com
Logo: https://vmc.digicert.com/42039a5e-6574-45c1-9414-fa35c946e52d.svg
Certificate: https://vmc.digicert.com/42039a5e-6574-45c1-9414-fa35c946e52d.pem

Checks

✓ Logo and certificate published #38

BIMI logo: https://vmc.digicert.com/42039a5e-6574-45c1-9414-fa35c946e52d.svg; certificate: https://vmc.digicert.com/42039a5e-6574-45c1-9414-fa35c946e52d.pem
✓ DMARC meets BIMI requirements #39

DMARC is enforced on all mail, as BIMI requires.