Findings Knowledge Base
TLS & Encryption
tls.cert.expired— Certificate Expiredtls.cert.expiring_soon— Certificate Expiring Soontls.cert.hostname_mismatch— Certificate Hostname Mismatchtls.cert.hostname_shared_frontend— Certificate for Shared Mail Front-Endtls.cert.invalid_chain— Certificate Chain Invalidtls.cert.not_revoked— Certificate Not Revokedtls.cert.ocsp_not_applicable— OCSP Stapling Not Applicabletls.cert.ocsp_not_stapled— No OCSP Staplingtls.cert.ocsp_stapled— OCSP Stapling Enabledtls.cert.revocation_not_published— No Revocation Endpoint Publishedtls.cert.revocation_unavailable— Revocation Status Unavailabletls.cert.revocation_unknown— Revocation Status Unknowntls.cert.revoked— Certificate Revokedtls.cert.sct_missing— No Certificate Transparency (SCT Missing)tls.cert.sct_present— Certificate Transparency (SCT Present)tls.cert.self_signed— Self-Signed Certificatetls.cert.weak_sig_alg— Weak Signature Algorithm (SHA-1/MD5)tls.cipher.no_pfs— No Perfect Forward Secrecytls.cipher.weak— Weak Cipher Suites Supportedtls.dane.lookup_error— DANE/TLSA Lookup Failedtls.dane.mismatch— DANE/TLSA Mismatchtls.dane.missing— No DANE/TLSA Recordstls.dane.unsigned— DANE/TLSA Records Lack Resolver-Attested DNSSECtls.dane.unverified— DANE/TLSA Not Verifiedtls.dane.valid— DANE/TLSA Validatedtls.legacy_key_exchange— Legacy TLS Key Exchange Onlytls.mtasts.lookup_error— MTA-STS DNS Lookup Failedtls.mtasts.missing— MTA-STS Not Configuredtls.mtasts.mode_none— MTA-STS Disabled (mode=none)tls.mtasts.mx_mismatch— MTA-STS MX Patterns Incompletetls.mtasts.policy_error— MTA-STS Policy Unreadabletls.mtasts.policy_unavailable— MTA-STS Policy Temporarily Unavailabletls.mtasts.testing— MTA-STS in Testing Modetls.not_applicable— TLS Not Applicable (Null MX)tls.not_tested— TLS Not Tested (No SMTP Session)tls.tlsrpt.lookup_error— TLS-RPT DNS Lookup Failedtls.tlsrpt.missing— TLS-RPT Not Configuredtls.tlsrpt.present— TLS-RPT Configuredtls.untestable— TLS Not Testabletls.version.no_tls12— TLS 1.2 Not Supportedtls.version.tls10— TLS 1.0 Supportedtls.version.tls11— TLS 1.1 Supportedtls.version.tls13— TLS 1.3 Supported
Email Authentication
auth.dkim.lookup_error— DKIM DNS Lookup Failedauth.dkim.missing— No DKIM Keys Foundauth.dkim.revoked— DKIM Key Revokedauth.dkim.testing_mode— DKIM Testing Mode Enabledauth.dkim.unparseable_key— DKIM Key Could Not Be Readauth.dkim.weak_hash_algorithm— DKIM Allows SHA-1 Signaturesauth.dkim.weak_key— DKIM RSA Key Too Smallauth.dmarc.alignment_mode— DMARC Alignment Modeauth.dmarc.deprecated_tag— Deprecated DMARC Tagsauth.dmarc.external_unauthorized— External DMARC Report Destination Not Authorizedauth.dmarc.lookup_error— DMARC DNS Lookup Failedauth.dmarc.missing— DMARC Record Missingauth.dmarc.multiple_records— Multiple DMARC Recordsauth.dmarc.no_rua— DMARC Missing Aggregate Report URIauth.dmarc.none— DMARC Policy Is 'none'auth.dmarc.pct_partial— DMARC Policy Not Fully Enforcedauth.spf.duplicate_include— Duplicate SPF Includeauth.spf.lookup_error— SPF DNS Lookup Failedauth.spf.lookup_limit— SPF DNS Lookup Limit Exceededauth.spf.missing— SPF Record Missingauth.spf.multiple_records— Multiple SPF Recordsauth.spf.permerror— SPF Record Invalidauth.spf.plus_all— SPF +all (Open SPF)auth.spf.ptr_mechanism— Deprecated PTR Mechanismauth.spf.record_too_long— SPF Record Too Longauth.spf.sender_id_deprecated— Deprecated Sender ID Recordauth.spf.void_lookups_exceeded— SPF Void Lookup Limit Exceeded
SMTP Session
smtp.banner.hostname_mismatch— Banner Hostname Does Not Match MX Hostnamesmtp.banner.invalid_fqdn— Invalid Hostname in SMTP Bannersmtp.banner.version_leak— MTA Software Leaked in Bannersmtp.ehlo.no_8bitmime— 8BITMIME Not Advertisedsmtp.ehlo.no_pipelining— PIPELINING Not Advertisedsmtp.ehlo.no_size— SIZE Limit Not Advertisedsmtp.expn.enabled— EXPN Command Enabledsmtp.open_relay— Open Relay Detectedsmtp.rfc2142.abuse— abuse@ Not Accepting Mailsmtp.rfc2142.postmaster— postmaster@ Not Accepting Mailsmtp.session.unavailable— SMTP Session Not Establishedsmtp.starttls.failed— STARTTLS Negotiation Failedsmtp.starttls.intermittent— Intermittent STARTTLS Advertisementsmtp.starttls.missing— STARTTLS Not Advertisedsmtp.starttls.not_required— STARTTLS Not Required (Opportunistic TLS)smtp.vrfy.enabled— VRFY Command Enabled
MX & DNS
mx.all_targets_ip_literal— All MX Targets Are IP Literalsmx.implicit— No MX Record (Implicit MX)mx.ip_literal— MX Record Points to IP Addressmx.lookup_error— MX DNS Lookup Failedmx.missing— No MX Recordsmx.no_redundancy— Single MX Target (No Redundancy)mx.no_usable_targets— No Usable MX Targetmx.null_mx— Null MX (Domain Does Not Accept Email)mx.null_mx_invalid— Null MX Coexists With Other MX Recordsmx.ptr.hostname_differs— PTR Hostname Differs From MX Hostnamemx.ptr.missing— FCrDNS Mismatch on MX Hostmx.ptr.multiple_records— Multiple PTR Records on MX IPmx.target_unresolvable— MX Target Hostname Does Not Resolvemx.target.invalid_hostname— MX Target Is Not a Valid Hostname
Bonus
bonus.bimi.dmarc_not_enforced— BIMI Published Without DMARC Enforcementbonus.bimi.logo_not_svg— BIMI Logo Not Valid SVGbonus.bimi.logo_unreachable— BIMI Logo Not Reachablebonus.bimi.lookup_error— BIMI DNS Lookup Failedbonus.bimi.missing— BIMI Not Configuredbonus.bimi.no_logo— BIMI Record Missing Logo URLbonus.bimi.present— BIMI Configuredbonus.dane— DANE/TLSA Validatedbonus.mtasts.enforce— MTA-STS Enforcedbonus.tls13— TLS 1.3 Supported