Engineer's DNS Intelligence Report
TLP:AMBER
Limited disclosure — recipients may share within their organization only
Engineer's DNS Intelligence Report
google.com
DNS Security & Trust Posture
Risk Level:
Low Risk
Email Spoofing
Protected
Brand Impersonation
Not Setup
DNS Tampering
Unsigned
Certificate Control
Configured
Monitoring
DKIM signing inferred from provider — could not directly verify selector
Configured
SPF, DMARC (reject), DKIM (inferred via Google Workspace), MTA-STS, TLS-RPT, CAA
Not Configured
BIMI, DNSSEC
Unavailable on Provider
DANE
Priority Actions
Achievable posture: Secure
Medium
Enable DNSSEC
DNSSEC is not enabled for this domain. DNSSEC provides cryptographic authentication of DNS responses, preventing cache poisoning and DNS spoofing attacks.
Low
Add BIMI Record
Your domain has DMARC reject — you qualify for BIMI, which displays your brand logo in receiving email clients that support it (Gmail, Apple Mail, Yahoo).
BIMI displays your verified brand logo next to your emails in supporting mail clients.
| Field | Value |
|---|---|
| Type | TXT |
| Host | default._bimi.google.com (BIMI default record) |
| Value | v=BIMI1; l=https://google.com/brand/logo.svg |
Registrar (RDAP)
OBSERVED
LIVE
MarkMonitor Inc.
Where domain was purchased
Email Service Provider
INFERRED
Google Workspace
Strongly Protected
Web Hosting
Unknown
Where website is hosted
DNS Hosting
OBSERVED
Google Cloud DNS
Where DNS records are edited