bnz.co.nz
Live email deliverability and anti-spoofing audit. Every value below was read from public DNS at the moment this page was generated.
96/100 — This domain is configured correctly for both sending and receiving. Accepts mail · Protected against spoofing
Findings
-
mta sts
No MTA-STS policy, so inbound mail can be downgraded to an unencrypted connection.
Fix: Publish _mta-sts.bnz.co.nz and host a policy at https://mta-sts.bnz.co.nz/.well-known/mta-sts.txt.
-
mx
2 mail exchangers published.
10 wn-bnz.mail.sec.one.nz, 20 ak-bnz.mail.sec.one.nz
-
spf
SPF is published and enforcing.
v=spf1 include:_spf1.bnz.co.nz include:_spf2.bnz.co.nz include:_spf3.bnz.co.nz include:_spf4.bnz.co.nz include:_spf5.bnz.co.nz ip4:164.53.221.176 ip4:164.53.235.175 ip4:164.53.235.176 exists:%{i}.spf.hc232-33.ap.iphmx.com -all -
dmarc
DMARC is enforcing with p=reject.
v=DMARC1; p=reject; rua=mailto:8e6bab3d5ea2177@rep.dmarcanalyzer.com; ruf=mailto:8e6bab3d5ea2177@for.dmarcanalyzer.com; pct=100; fo=1;
-
dkim
DKIM keys found for 3 selectors.
selector2._domainkey, s1._domainkey, s2._domainkey
Records
| MX | 10 wn-bnz.mail.sec.one.nz20 ak-bnz.mail.sec.one.nz |
|---|---|
| SPF | v=spf1 include:_spf1.bnz.co.nz include:_spf2.bnz.co.nz include:_spf3.bnz.co.nz include:_spf4.bnz.co.nz include:_spf5.bnz.co.nz ip4:164.53.221.176 ip4:164.53.235.175 ip4:164.53.235.176 exists:%{i}.spf.hc232-33.ap.iphmx.com -all |
| DMARC | v=DMARC1; p=reject; rua=mailto:8e6bab3d5ea2177@rep.dmarcanalyzer.com; ruf=mailto:8e6bab3d5ea2177@for.dmarcanalyzer.com; pct=100; fo=1; |
| DKIM selectors | selector2, s1, s2 |
| MTA-STS | not published |
| TLS-RPT | not published |
| BIMI | not published |
| DNSSEC | not validating |
Same data, as JSON, in one request. No SMTP probing, no stored recipient data, 250 free calls a month.
curl "https://mailgrade.dev/v1/domain?domain=bnz.co.nz"
Also available: /v1/verify?email=… for individual addresses, and
/v1/verify/batch for lists.