revolut.com

Live email deliverability and anti-spoofing audit. Every value below was read from public DNS at the moment this page was generated.

Findings

• spf

  SPF ends in ~all (softfail); unauthorised mail is marked rather than rejected.

  v=spf1 include:_spf.google.com include:mail.zendesk.com include:_spf.atlassian.net include:_spf.salesforce.com include:_spf.sparkpostmail.com ~all

  Fix: Move to -all once you have confirmed all senders are listed.

• mta sts

  No MTA-STS policy, so inbound mail can be downgraded to an unencrypted connection.

  Fix: Publish _mta-sts.revolut.com and host a policy at https://mta-sts.revolut.com/.well-known/mta-sts.txt.

• mx

  Mail is handled by Google Workspace.

  1 aspmx.l.google.com, 5 alt2.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com

• dmarc

  DMARC is enforcing with p=quarantine.

  v=DMARC1; p=quarantine; pct=100; sp=quarantine; rua=mailto:revolut@rua.netcraft.com,mailto:dmarc@revolut.com; ruf=mailto:revolut@ruf.netcraft.com,mailto:dmarc@revolut.com;

• dkim

  DKIM keys found for 5 selectors.

  google._domainkey, s1._domainkey, s2._domainkey, mandrill._domainkey, hs1._domainkey

• bimi

  BIMI is published; supporting clients can show your logo.

  v=BIMI1;l=https://vmc.digicert.com/d769f6ee-8fe8-480e-8186-627e2dd908d9.svg;a=https://vmc.digicert.com/d769f6ee-8fe8-480e-8186-627e2dd908d9.pem

Records

curl "https://mailgrade.dev/v1/domain?domain=revolut.com"

Check another domain