SurfaceMap › x › xfinity.com

xfinity.com

Checked 2026-10-22 11:34 UTC · first added 2026-10-21
!Passed with warnings Score 79 of 100

Domain & DNS

warn

28 passed 1 warn 0 failed

Areas

iRegistration iDelegation iNameservers ✓SOA !DNSSEC iRecords

Problems

  • !
    Signatures expire soon
    DNSSEC · The earliest signature expires at 2026-10-27 09:00 UTC (in 117h0m0s). Check that automatic re-signing works.
    #30

Recent checks

!

Full report

Domain & DNS report for xfinity.com ›

Mail

warn

28 passed 6 warn 0 failed

Areas

✓SPF ✓DMARC !DKIM !DNSSEC !MX !TLS ✓BIMI

Problems

  • !
    No key under common selectors
    DKIM · The _domainkey name exists but no DKIM key was found under the common selectors. Selectors are provider-specific; check yours with -selector.
    #7
  • !
    Hosts without IPv6
    MX · The following MX hosts could not be resolved to IPv6 addresses: mx1a1.comcast.net, mx1c1.comcast.net, mx1h1.comcast.net, mx2a1.comcast.net, mx2c1.comcast.net, mx2h1.comcast.net
    #11
  • !
    More than 5 MX records
    MX · Found 6 MX records, which is more than the recommended maximum of 5. Too many MX records may indicate a misconfiguration.
    #13
  • !
    Signatures expire in 117h0m0s
    DNSSEC · DNSKEY signatures expire at 2026-10-27T09:00:21Z (in 117h0m0s). Check that re-signing works.
    #21
  • !
    Addresses without reverse DNS
    MX · These MX addresses have no PTR record, which many receivers treat as a spam signal: 96.103.145.163 (mx1a1.comcast.net), 96.102.18.147 (mx1c1.comcast.net), 96.102.157.181 (mx1h1.comcast.net), 96.103.145.162 (mx2a1.comcast.net), 96.102.18.146 (mx2c1.comcast.net), 96.102.157.180 (mx2h1.comcast.net). Ask your hosting provider to set one.
    #30
  • !
    Not configured
    TLS · MTA-STS or DANE is used without TLS-RPT, so you get no reports when senders fail to deliver because of TLS problems. Publish _smtp._tls TXT "v=TLSRPTv1; rua=mailto:...".
    #35

Recent checks

!

Full report

Mail report for xfinity.com ›