Blog
Contact
Sign in
Scan complete
C
71/100
cinfin.com
No changes since last scan
1 critical issue needs immediate attention.
6/6
checks
20
passed
finished
Scan timestamps
Created
Jun 25, 2026, 7:23 AM
Started
Jun 25, 2026, 7:23 AM
Finished
Jun 25, 2026, 7:23 AM
Updated
Jun 25, 2026, 7:23 AM
Export PDF
Re-scan
Findings by severity
25 results
1
Critical
2
High
0
Medium
2
Low
20
Pass
Report coverage
100%
Full coverage - every planned check was evaluated.
8 skipped
All
33
Critical
1
High
2
Low
2
Pass
20
Skipped
8
Email
100%
Domain Alignment (DMARC)
Learn how it works
Info
6/7 pass
Domain Alignment (DMARC)
DMARC alignment is relaxed
The DMARC record allows relaxed identifier alignment for DKIM or SPF.
Low
Certificate Binding (DANE)
Learn how it works
Info
2/5 pass
Certificate Binding (DANE)
No usable TLSA records found for MX hosts
Either no MX hosts have TLSA records, or all published records use certificate usage types (PKIX-TA/PKIX-EE) that are not usable for SMTP DANE per RFC 7672. DANE does not protect inbound mail delivery.
Critical
Transport Policy (MTA-STS)
Learn how it works
Info
0/5 pass
Transport Policy (MTA-STS)
MTA-STS DNS record is missing
The domain does not publish an MTA-STS TXT record, so sending servers cannot discover or enforce an MTA-STS policy.
High
TLS Reporting (TLS-RPT)
Learn how it works
Info
0/3 pass
TLS Reporting (TLS-RPT)
No TLS-RPT record found
The domain does not publish a TLS-RPT record. Sending servers cannot report TLS errors to this domain.
High
DNS
100%
DNS Integrity (DNSSEC)
Learn how it works
Info
5/6 pass
DNS Integrity (DNSSEC)
Some DS records do not match DNSKEY records
DNSSEC has at least one valid DS/DNSKEY path, but some DS records appear to be stale.
Low
Feedback
