lrf1h.mssg.me
Email security grade D · 50/100
How grades work
The score is out of 100 and covers DMARC policy strength, alignment, reporting, SPF and DKIM coverage, MTA-STS and TLS-RPT. A+ is the strongest. A, A+ and B mean spoofing is largely blocked; C and D mean partial protection; E and F mean the domain is easy to spoof.
- A+95+
- A85+
- B70+
- C55+
- D40+
- E25+
- Funder 25
Automated, point-in-time assessment of publicly visible DNS and HTTPS records only. It can lag record changes by up to 6 hours and is not a statement about the organization's overall security. Re-checked on request. Own this domain?
Score breakdown
-
Policy strictness
30/30 Passp=reject (full enforcement)
Learn more about policy strictness -
Alignment mode
10/15 Needs a fixrelaxed alignment (default; safer for forwarders)
Learn more about alignment mode -
Reporting
0/15 Fixno rua= configured; you receive no reports from receivers
Learn more about reporting -
Percent at fail position
10/10 Passno pct tag in play; your policy applies to all failing mail
Learn more about percent at fail position -
Authentication coverage
0/20 Fixneither SPF nor DKIM published; DMARC has nothing to align against
Learn more about authentication coverage -
MTA-STS
0/5 Fixno MTA-STS policy published
Learn more about MTA-STS -
TLS-RPT
0/5 Fixno TLS-RPT record (you won't see TLS failure reports)
Learn more about TLS-RPT
Monitor lrf1h.mssg.me
Get alerted when this grade changes or a new DMARC failure shows up.
The other half: lookalike domains
A strong DMARC grade stops attackers spoofing lrf1h.mssg.me directly. It does nothing about typosquat domains such as lrf1h-login.com. Scan lrf1h.mssg.me for lookalikes.
Own this domain? Dispute or request removal
If the grade looks wrong, use Re-scan now above first: it re-reads your live records. If it is still wrong, or you would rather this page were not published, tell us below and a person will review it.
About this grade: Automated, point-in-time assessment of publicly visible DNS and HTTPS records only. It can lag record changes by up to 6 hours and is not a statement about the organization's overall security. Re-checked on request. Data is read from public DNS and HTTPS endpoints at scan time; nothing is probed beyond those records. Dispute or request removal.