Email security report card · 2026-11-07
wise.com
wise.com scores 68/100 (grade C). Legitimate mail can’t fully prove where it comes from, so some of it is likely to land in spam. Forged mail “from” wise.com is refused by the big inboxes. 29 lookalike domains can receive email; none registered recently. The most valuable next step: correct your SPF record.
C68/100
| Area | Check | Status | Points |
|---|---|---|---|
| Authentication | SPF and DKIMPartly. One of the two proofs is missing or weak. SPF: The SPF record doesn’t include Google Workspace, which handles your email. DKIM: Your mail carries a signature inboxes can verify (2048-bit, 1024-bit, 2048-bit, 1024-bit, 2048-bit, 1024-bit, 1024-bit). | Partly | 12/25 |
| Anti-spoofing | DMARC enforcementMail that fails your checks is refused. | Pass | 30/30 |
| Delivery | Google, Yahoo and Microsoft sender rulesAlmost. Correct your SPF record and you meet them. | Partly | 8/15 |
| Encryption | MTA-STSEnforced: senders must use verified TLS to aspmx.l.google.com, alt2.aspmx.l.google.com, alt1.aspmx.l.google.com, aspmx2.googlemail.com, aspmx3.googlemail.com. | Pass | 8/8 |
| Encryption | TLS-RPTReports are requested. | Pass | 4/4 |
| DNS hardening | DNSSECNot signed. Turn on DNSSEC at Cloudflare; if the domain is registered elsewhere, add the DS record it gives you at your registrar. | Missing | 0/8 |
| DNS hardening | CAAAny certificate authority may issue certificates for your domain. A CAA record such as 0 issue "letsencrypt.org" limits it to the ones you use. | Missing | 0/4 |
| Brand | BIMI logoLogo and VMC published (issued by DigiCert, Inc., valid until 2027-07-30). Gmail, Apple Mail and Yahoo can show it. | Pass | 6/6 |
What if you fixed…
Today C 68/100
Fix next
- Correct your SPF record
- Turn on DNSSEC
- Turn on CAA
Exact records and where to click: full check for wise.com.
Lookalike exposure
52 registered lookalikes, 29 able to receive email. Not graded: you can’t control who registers them.