My Email Communications Security Assessment (MECSA)

CONFIDENTIAL DELIVERY

(3.5/5)

Your e-mail provider protects your messages (sent/received) from eavesdroppers, using encryption. It applies the latest technologies available, assuring the identity of the parties with which interacts.

PHISHING AND IDENTITY THEFT

(3.5/5)

Your e-mail provider prevents the reception of messages from not legitimate servers. It also takes measures to avoid unauthorized servers to send emails from accounts of your domain. With these actions it is drastically reducing the probability of receiving (or generating) impersonation and/or Phishing attacks.

INTEGRITY OF MESSAGES

(3.0/5)

Your email provider provides a minimum support to integrity of messages. This score can also reflect a deployment-in-progress of the required technologies to provide integrity.

Domain Name

fastmail.com

StartTLS

100

X509

100

SPF

100

DKIM

100

DMARC

100

DANE

DNSSEC

MTA-STS

Report Date

13/02/2025

SPF record

v=spf1 include:spf.messagingengine.com ~all

DMARC record

v=DMARC1; p=none; sp=none; rua=mailto:rua@fastmaildmarc.com

DNSSEC

getDSrecord NoAnswer: fastmail.com.

MX record

103.168.172.217

in1-smtp.messagingengine.com

StartTLS

Using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256 bits)

x509 Certificate

FQDN

Date

Revoked

Banner

220 b'phl-mx-02.messagingengine.com ESMTP mx. No UCE permitted.'

ESMTP Features

{'pipelining': '', 'size': '73000000', 'starttls': '', 'enhancedstatuscodes': '', '8bitmime': ''}

MX record

103.168.172.216

in1-smtp.messagingengine.com

StartTLS

Using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256 bits)

x509 Certificate

FQDN

Date

Revoked

Banner

220 b'phl-mx-01.messagingengine.com ESMTP mx. No UCE permitted.'

ESMTP Features

{'pipelining': '', 'size': '73000000', 'starttls': '', 'enhancedstatuscodes': '', '8bitmime': ''}

MX record

103.168.172.218

in1-smtp.messagingengine.com

StartTLS

Using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256 bits)

x509 Certificate

FQDN

Date

Revoked

Banner

220 b'phl-mx-03.messagingengine.com ESMTP mx. No UCE permitted.'

ESMTP Features

{'pipelining': '', 'size': '73000000', 'starttls': '', 'enhancedstatuscodes': '', '8bitmime': ''}

MX record

103.168.172.221

in1-smtp.messagingengine.com

StartTLS

Using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256 bits)

x509 Certificate

FQDN

Date

Revoked

Banner

220 b'phl-mx-06.messagingengine.com ESMTP mx. No UCE permitted.'

ESMTP Features

{'pipelining': '', 'size': '73000000', 'starttls': '', 'enhancedstatuscodes': '', '8bitmime': ''}

MX record

103.168.172.220

in1-smtp.messagingengine.com

StartTLS

Using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256 bits)

x509 Certificate

FQDN

Date

Revoked

Banner

220 b'phl-mx-05.messagingengine.com ESMTP mx. No UCE permitted.'

ESMTP Features

{'pipelining': '', 'size': '73000000', 'starttls': '', 'enhancedstatuscodes': '', '8bitmime': ''}

MX record

103.168.172.223

in1-smtp.messagingengine.com

StartTLS

Using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256 bits)

x509 Certificate

FQDN

Date

Revoked

Banner

220 b'phl-mx-08.messagingengine.com ESMTP mx. No UCE permitted.'

ESMTP Features

{'pipelining': '', 'size': '73000000', 'starttls': '', 'enhancedstatuscodes': '', '8bitmime': ''}

MX record

103.168.172.222

in1-smtp.messagingengine.com

StartTLS

Using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256 bits)

x509 Certificate

FQDN

Date

Revoked

Banner

220 b'phl-mx-07.messagingengine.com ESMTP mx. No UCE permitted.'

ESMTP Features

{'pipelining': '', 'size': '73000000', 'starttls': '', 'enhancedstatuscodes': '', '8bitmime': ''}

MX record

103.168.172.219

in1-smtp.messagingengine.com

StartTLS

Using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256 bits)

x509 Certificate

FQDN

Date

Revoked

Banner

220 b'phl-mx-04.messagingengine.com ESMTP mx. No UCE permitted.'

ESMTP Features

{'pipelining': '', 'size': '73000000', 'starttls': '', 'enhancedstatuscodes': '', '8bitmime': ''}

MX record

202.12.124.216

in2-smtp.messagingengine.com

StartTLS

Using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256 bits)

x509 Certificate

FQDN

Date

Revoked

Banner

220 b'stl-mx-01.messagingengine.com ESMTP mx. No UCE permitted.'

ESMTP Features

{'pipelining': '', 'size': '73000000', 'starttls': '', 'enhancedstatuscodes': '', '8bitmime': ''}

MX record

202.12.124.217

in2-smtp.messagingengine.com

StartTLS

Using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256 bits)

x509 Certificate

FQDN

Date

Revoked

Banner

220 b'stl-mx-02.messagingengine.com ESMTP mx. No UCE permitted.'

ESMTP Features

{'pipelining': '', 'size': '73000000', 'starttls': '', 'enhancedstatuscodes': '', '8bitmime': ''}

Hostname

202.12.124.138

flow-b3-smtp.messagingengine.com

Created on

Thu, 13 Feb 2025 11:06:04 +0000

StartTLS

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

SPF

250, pass : sender SPF authorized

DKIM

Report id a5b1911c1bc2e5311198da68d49d8b27 for domain fastmail.com (13/02/2025)

CONFIDENTIAL DELIVERY

(3.5/5)

PHISHING AND IDENTITY THEFT

(3.5/5)

INTEGRITY OF MESSAGES

(3.0/5)