BetaSPFWise is in beta, and every feature is free until it ends. More information after you sign up.
SPFWise
How it worksWhat we checkPricingFAQGuides

Email Authentication Report for ikea.com

A live look at how ikea.com configures SPF, DKIM, DMARC, and transport security, with the grade explained.

A+

ikea.com

100 out of 100

Scanned: Jul 6, 2026, 1:18 PM

Why this score

The score starts at 100. Every issue below subtracts points based on how much it hurts your deliverability or lets someone spoof you.

Nothing is lowering your score. Every live check passed cleanly.

  • SPF

    Pass

    • Ends with -all (hardfail).

      A hardfail tells receivers to reject any sender that is not listed. This is the strongest and recommended setting.

    • SPF is present and correctly configured.

      A single SPF record was found, it stays within the DNS lookup limit, and it ends with a strong all qualifier.

    DNS lookups2 / 10
    v=spf1 include:_spf.ikea.com include:spf.protection.outlook.com -all
    allQualifier
    -

  • DKIM

    Pass

    • DKIM is set up (2 valid selector(s) found).

      At least one valid signing key was found, so your outgoing mail can be signed and verified by receivers.

    selectors
    selector1, selector2
    keyType
    rsa
    keyBits
    2048

  • DMARC

    Pass

    • Policy is p=reject (strongest).

      Reject tells receivers to refuse any mail that fails authentication, the strongest protection against spoofing.

    • Aggregate reporting is enabled.

      A rua address is set, so you receive daily reports showing every source that sends as your domain.

    • DMARC is present and enforced.

      A valid DMARC record was found with an enforcing policy, so receivers act on mail that fails authentication.

    v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@ikea.com; ruf=mailto:dmarc_ruf@ikea.com
    policy
    reject
    subdomainPolicy
    reject
    pct
    100
    rua
    mailto:dmarc_rua@ikea.com
    adkim
    r
    aspf
    r

  • MX

    Pass

    • MX is configured (1 mail server(s)).

      Your domain has MX records and every listed mail server resolves to an IP address, so it can receive mail.

    mxHosts
    ikea-com.i-v1.mx.microsoft (0)
    mxCount
    1

  • Blacklist

    Pass

    • Not on any checked blocklist.

      Your mail server IPs were not found on the public blocklists we checked. Reputation can change, so it is worth monitoring over time.

    ipsChecked
    52.101.73.30, 52.101.73.2, 52.101.73.16
    blocklists
    bl.spamcop.net, dnsbl.sorbs.net

Optional enhancements

Advanced, nice-to-have features. Setting these up (or not) does not change your grade.

  • DNSSEC

    Pass

    • DNSSEC is enabled.

      Your zone is signed and the parent publishes a DS record, so resolvers can verify your DNS answers were not tampered with on the way to them.

    algorithm
    ECDSAP256SHA256
    signatureExpiry
    2026-07-17T21:54:59Z

  • MTA-STS

    Optional

    • MTA-STS is in testing mode.

      Your MTA-STS policy is in testing mode, so TLS failures are only reported, not enforced. Your inbound mail is not yet protected from downgrade attacks.

      How to fix: Once your TLS-RPT reports look clean, change the policy mode from testing to enforce.

    mode
    testing
    maxAge
    86401
    Read the MTA-STS guide

  • TLS-RPT

    Pass

    • TLS reporting is enabled.

      Your TLS-RPT record is valid, so receivers can report TLS delivery failures to you.

    v=TLSRPTv1; rua=mailto:MTA-STS.RUA@ikea.com;
    rua
    mailto:MTA-STS.RUA@ikea.com

  • BIMI

    Pass

    • BIMI is set up.

      Your BIMI record is valid, DMARC is enforced, and a Verified Mark Certificate is present, so supporting inboxes can show your logo.

    v=BIMI1; l=https://www.ikea.com/ext/bimi/logo.svg; a=https://www.ikea.com/ext/bimi/cert.pem;
    logo
    https://www.ikea.com/ext/bimi/logo.svg
    vmc
    https://www.ikea.com/ext/bimi/cert.pem

Below is a live view of the email authentication records for ikea.com. Retail and consumer domains are frequently imitated in scam campaigns, which makes their SPF, DKIM, and DMARC setup worth a close look.

How to read the grade

Everything above is computed live from the records ikea.com publishes right now. A strong result means SPF authorizes the correct senders, DKIM signs outgoing mail with a valid key, and DMARC sets a policy that instructs receivers on how to handle failures. Where a check is weak, the report shows the exact record involved so the gap is easy to understand.

About this report

This report is generated from publicly available DNS records for ikea.com and is provided for informational and educational purposes only. SPFWise is not affiliated with, endorsed by, or connected to the owner of ikea.com. The records shown are the same ones any mail server can query, and the grade updates automatically as they change.

Want the same breakdown for your own domain? Run a free scan to get an identical grade along with the exact records to fix anything that is weak.

Check your own domain

Run a free scan and get your grade with the exact records to fix.

Scan a domain

Guides to fix common issues

Email Compliance: CAN-SPAM, GDPR and CASL Basics

A plain-English guide to the three laws that govern commercial email: CAN-SPAM in the US, GDPR in the EU, and CASL in Canada, covering consent, identification, unsubscribe, penalties, and how compliance overlaps with deliverability.

Dedicated vs Shared IP for Sending Email

A practical guide to choosing between a dedicated and a shared sending IP, weighing volume, reputation control, warmup burden, and cost, with a clear decision path.

Phishing vs Spoofing: What Is the Difference?

Spoofing is the technique of forging a sender identity; phishing is the fraud it enables. This guide explains the difference, how they overlap, and which defenses stop each.