gmx.com
Live email deliverability and anti-spoofing audit. Every value below was read from public DNS at the moment this page was generated.
82/100 — Solid configuration with a few gaps worth closing. Accepts mail · Protected against spoofing
Findings
-
spf
SPF has no enforcing terminator, so unauthorised senders are neither marked nor rejected.
v=spf1 redirect=_spf.gmx.net
Fix: End the record with -all.
-
dkim
No DKIM key found at any common selector. Either DKIM is not configured, or it uses a custom selector we cannot discover from DNS alone.
Fix: Enable DKIM signing at your mail provider and publish the selector they give you.
-
mx
2 mail exchangers published.
10 mx00.gmx.net, 10 mx01.gmx.net
-
dmarc
DMARC is enforcing with p=quarantine.
v=DMARC1; p=quarantine; rua=mailto:dmarcreport@gmx.net
-
mta sts
MTA-STS is published, so senders will refuse to downgrade to plaintext SMTP.
v=STSv1;id=20190416142000Z;
-
tls rpt
TLS reporting is enabled.
v=TLSRPTv1;rua=mailto:smtp-tlsrpt@1und1.de
-
dnssec
DNSSEC is validating, so these records cannot be silently tampered with in transit.
AD flag set
Records
| MX | 10 mx00.gmx.net10 mx01.gmx.net |
|---|---|
| SPF | v=spf1 redirect=_spf.gmx.net |
| DMARC | v=DMARC1; p=quarantine; rua=mailto:dmarcreport@gmx.net |
| DKIM selectors | none discovered |
| MTA-STS | published |
| TLS-RPT | published |
| BIMI | not published |
| DNSSEC | validating |
Same data, as JSON, in one request. No SMTP probing, no stored recipient data, 250 free calls a month.
curl "https://mailgrade.dev/v1/domain?domain=gmx.com"
Also available: /v1/verify?email=… for individual addresses, and
/v1/verify/batch for lists.