trystencil.org
Email security grade C · 60/100
How grades work
The score is out of 100 and covers DMARC policy strength, alignment, reporting, SPF and DKIM coverage, MTA-STS and TLS-RPT. A+ is the strongest. A, A+ and B mean spoofing is largely blocked; C and D mean partial protection; E and F mean the domain is easy to spoof.
- A+95+
- A85+
- B70+
- C55+
- D40+
- E25+
- Funder 25
Automated, point-in-time assessment of publicly visible DNS and HTTPS records only. It can lag record changes by up to 6 hours and is not a statement about the organization's overall security. Re-checked on request. Own this domain?
Score breakdown
-
Policy strictness
30/30 Passp=reject (full enforcement)
Learn more about policy strictness -
Alignment mode
10/15 Needs a fixrelaxed alignment (default; safer for forwarders)
Learn more about alignment mode -
Reporting
0/15 Fixno rua= configured; you receive no reports from receivers
Learn more about reporting -
Percent at fail position
10/10 Passno pct tag in play; your policy applies to all failing mail
Learn more about percent at fail position -
Authentication coverage
10/20 Needs a fixSPF only; both should be present for DMARC to align reliably
Learn more about authentication coverage -
MTA-STS
0/5 Fixno MTA-STS policy published
Learn more about MTA-STS -
TLS-RPT
0/5 Fixno TLS-RPT record (you won't see TLS failure reports)
Learn more about TLS-RPT
Monitor trystencil.org
Get alerted when this grade changes or a new DMARC failure shows up.
The other half: lookalike domains
A strong DMARC grade stops attackers spoofing trystencil.org directly. It does nothing about typosquat domains such as trystencil-login.com. Scan trystencil.org for lookalikes.
Own this domain? Dispute or request removal
If the grade looks wrong, use Re-scan now above first: it re-reads your live records. If it is still wrong, or you would rather this page were not published, tell us below and a person will review it.
About this grade: Automated, point-in-time assessment of publicly visible DNS and HTTPS records only. It can lag record changes by up to 6 hours and is not a statement about the organization's overall security. Re-checked on request. Data is read from public DNS and HTTPS endpoints at scan time; nothing is probed beyond those records. Dispute or request removal.