88 /100
SPF PASS
Present, hard-fail, one include (Postmark).
DKIM PASS
Selector found and valid.
DMARC PASS
p=quarantine with rua reporting.
MTA-STS WARN
No policy published.
Fix Publish an mta-sts.txt at testing mode, then enforce.
TLS-RPT WARN
No reporting address.
Fix Add a _smtp._tls TXT record with a rua mailto.
BIMI FAIL
No BIMI record.
Fix Publish a _bimi TXT with a verified mark once DMARC is at enforcement.
DNSSEC PASS
Zone is signed.
Track posture across your market.
Subscribe to posture_weak and dmarc_hardened — the moment domains you watch fail or fix their setup.