yahoo.com

Authentication

DNSSEC

DNSSEC provides a way to ensure that the DNS answers a client is receiving from a DNS resolver are correct and have not been tampered with. DNSSEC must be configured at the domain's registrar and nameservers.

Learn more about DNSSEC.

DNSSEC is not enabled on this domain.

SPF

Sender Policy Framework (SPF) authenticates email by checking the sending email server IP address against a list of domains provided by the SPF record of the envelope from domain. The SPF record can include other records, with up to 10 DNS lookups.

Learn more about SPF.

This domain has a valid SPF record.

yahoo.com: The ptr mechanism should not be used - (RFC 7208 § 5.5)

yahoo.net: The ptr mechanism should not be used - (RFC 7208 § 5.5)

Record: v=spf1 redirect=_spf.mail.yahoo.com
all: neutral

DNS Lookups

DNS lookups used: 3/10
Void lookups: 0/2

SPF mechanisms that require DNS lookups
Mechanism	Lookups
redirect:_spf.mail.yahoo.com	1
ptr:yahoo.com	1
ptr:yahoo.net	1

DMARC

Domain-based Message Authentication, Reporting, and Conformance (DMARC) ensures that the SPF and DKIM authentication mechanisms actually authenticate against the same base domain that the end user sees.

Learn more about DMARC.

This domain has a reject DMARC policy.

Record: v=DMARC1; p=reject; pct=100; rua=mailto:[email protected]; ruf=mailto:[email protected];
Location: yahoo.com

DMARC record tag values
Tag	Value
p	reject
pct	100
rua	[email protected]
ruf	[email protected]

BIMI

Brand Indicators for Message Identification (BIMI) is an emerging email specification that allows brand images such as logos to appear in the inbox and/or next to the from address in supporting mailbox providers.

Learn more about BIMI.

A BIMI record does not exist at the default selector.

Email Infrastructure

Mail servers

Preference	1
Hostname	mta5.am0.yahoodns.net
Addresses	67.195.204.73 67.195.204.74 67.195.228.109 67.195.228.111 98.136.96.74 98.136.96.75 98.136.96.76 98.136.96.91
DNSSEC	False
TLSA	False

Preference	1
Hostname	mta6.am0.yahoodns.net
Addresses	67.195.204.72 67.195.204.73 67.195.204.79 67.195.228.106 67.195.228.110 67.195.228.94 98.136.96.74 98.136.96.91
DNSSEC	False
TLSA	False

Preference	1
Hostname	mta7.am0.yahoodns.net
Addresses	67.195.204.77 67.195.228.106 67.195.228.109 67.195.228.110 67.195.228.111 98.136.96.74 98.136.96.75 98.136.96.77
DNSSEC	False
TLSA	False

MTA-STS

SMTP MTA Strict Transport Security (MTA-STS) provides a way for domain owners to tell email services that they should only send email to the domain over a verified TLS connection to specific email servers. This prevents man-in-the-middle attacks when the sending email server supports it.

Learn more about MTA-STS.

This domain has a testing MTA-STS policy.

MTA-STS configuration
id	20161109010200Z
mode	testing
max age	86400
mx	.am0.yahoodns.net .mail.gm0.yahoodns.net *.mail.am0.yahoodns.net

TLSRPT

SMTP TLS Reporting (TLSRPT) is a mechanism for sending email servers to provide statistics to domain owners about failures to establish TLS connections for SMTP. This allows domain owners to proactively identify TLS misconfigurations and man-in-the-middle attacks.

Learn more about TLSRPT.

This domain has a valid TLSRPT record.

SMTP TLS reporting tags
Tag	Value
rua	mailto:[email protected]

DNS Infrastructure

SOA

Record: ns1.yahoo.com. hostmaster.yahoo-inc.com. 2025103106 3600 300 1814400 600

SOA record values
Primary nameserver	ns1.yahoo.com
Rname email address	[email protected]
Serial	2025103106
Refresh	3600
Retry	300
Expire	1814400
Minimum	600

Nameservers

ns5.yahoo.com
ns2.yahoo.com
ns3.yahoo.com
ns4.yahoo.com
ns1.yahoo.com