coinbase.com email security: SPF, DKIM & DMARC

Is coinbase.com spoofable? See coinbase.com's SPF, DKIM, DMARC and MTA-STS records and find out if this domain is protected against email spoofing.

Last updated: June 3, 2026

90A
This domain is protected against spoofing

SPF

OK
v=spf1 include:amazonses.com include:_spf.google.com -all

DKIM

OK
Selectors: google, mandrill, smtp, zendesk1, zendesk2

DMARC

OK
v=DMARC1; p=reject; adkim=s; aspf=s; fo=1; rua=mailto:jpohmdhp@ag.dmarcian.com; ruf=mailto:jpohmdhp@fr.dmarcian.com;

MX

OK
aspmx.l.google.com, alt2.aspmx.l.google.com, alt1.aspmx.l.google.com, alt4.aspmx.l.google.com, alt3.aspmx.l.google.com

MTA-STS

Missing

No record found

Read the guide

Recommendations

  1. 1Add MTA-STS to enforce TLS encryption for incoming emails

    Without MTA-STS, an attacker performing a man-in-the-middle attack can downgrade the connection between mail servers to plaintext, intercepting emails in transit. MTA-STS tells sending servers to only deliver via TLS with a valid certificate, preventing downgrade attacks.

Run a live analysis

The results above are updated daily. For an instant check of coinbase.com, run a live analysis.

Analyze coinbase.com live

Frequently asked questions about coinbase.com

Is coinbase.com spoofable?

No. coinbase.com is protected against email spoofing with a robust configuration. Email security score: 90/100 (grade A).

Does coinbase.com have an SPF record?

Yes, coinbase.com publishes an SPF record (-all qualifier).

What is coinbase.com's DMARC record?

coinbase.com publishes a DMARC record (_dmarc.coinbase.com) with a p=reject policy.

Does coinbase.com use DKIM?

Yes, DKIM signatures were detected for coinbase.com.

Want to test another domain? Run a free email spoofing test.

Guides to understand these results

Check other domains