Valid SPF record found
DMARC policy is set to "reject" - excellent protection
Found DKIM records for 1 selector(s)
MTA-STS record found
TLS-RPT configured - receiving TLS delivery reports
BIMI configured - brand logo available (VMC recommended for Gmail)
CAA configured - only Let's Encrypt, Amazon can issue certificates
DNSSEC fully configured - DNS responses are cryptographically signed and verified
4 nameserver(s) configured