SurfaceMap › s › sparktoro.com

sparktoro.com

Checked 2026-10-22 10:46 UTC · first added 2026-10-21

!Passed with warnings Score 76 of 100

Domain & DNS

warn

29 passed 1 warn 0 failed

Areas

iRegistration iDelegation !Nameservers ✓SOA iDNSSEC ✓Records

Problems

!

Software version disclosed

Nameservers · These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: demi.ns.cloudflare.com: "2026.10.2"; guy.ns.cloudflare.com: "2026.10.2". Hide or replace the version string.

#17

Recent checks

!

Full report

Domain & DNS report for sparktoro.com ›

Mail

warn

27 passed 7 warn 0 failed

Areas

✓SPF !DMARC !DKIM ✓DNSSEC !MX !TLS !BIMI

Problems

!

Hosts without IP addresses

MX · The following MX hosts could not be resolved to IP addresses: qz6mbhn7onypmvtu7bcoikvtavlsdff7vraowv2gkicbf6vlyarq.mx-verification.google.com

#10
!

Hosts without IPv6

MX · The following MX hosts could not be resolved to IPv6 addresses: qz6mbhn7onypmvtu7bcoikvtavlsdff7vraowv2gkicbf6vlyarq.mx-verification.google.com

#11
!

More than 5 MX records

MX · Found 6 MX records, which is more than the recommended maximum of 5. Too many MX records may indicate a misconfiguration.

#13
!

No aggregate reports (rua)

DMARC · DMARC record has no rua tag, so you receive no aggregate reports about who sends mail as your domain. Add rua=mailto:...

#19
!

1024-bit DKIM key

DKIM · 1024-bit RSA keys are the minimum and are considered weak today: k1 (1024 bits). Rotate to a 2048-bit key.

#23
!

Policy in testing mode

TLS · With mode: testing, senders only report TLS problems (via TLS-RPT) and still deliver without TLS. Switch to mode: enforce once reports are clean.

#33
!

No certificate (a=)

BIMI · The logo is published without a Verified Mark Certificate. Gmail and Apple Mail only show BIMI logos with a VMC or CMC; Yahoo shows it without one.

#38

Recent checks

!

Full report

Mail report for sparktoro.com ›