mongodb.com email security: SPF, DKIM & DMARC

Is mongodb.com spoofable? See mongodb.com's SPF, DKIM, DMARC and MTA-STS records and find out if this domain is protected against email spoofing.

Last updated: June 3, 2026

90A
This domain is protected against spoofing

SPF

OK
v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email -all

DKIM

OK
Selectors: google, k1, mandrill, smtp, zendesk1, zendesk2

DMARC

OK
v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email,mailto:dmarc_reports@mongodb.com; ruf=mailto:1eed4417@forensics.dmarc-report.com,mailto:dmarc_reports@mongodb.com

MX

OK
aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, aspmx2.googlemail.com, aspmx3.googlemail.com

MTA-STS

Missing

No record found

Read the guide

Recommendations

  1. 1Add MTA-STS to enforce TLS encryption for incoming emails

    Without MTA-STS, an attacker performing a man-in-the-middle attack can downgrade the connection between mail servers to plaintext, intercepting emails in transit. MTA-STS tells sending servers to only deliver via TLS with a valid certificate, preventing downgrade attacks.

Run a live analysis

The results above are updated daily. For an instant check of mongodb.com, run a live analysis.

Analyze mongodb.com live

Frequently asked questions about mongodb.com

Is mongodb.com spoofable?

No. mongodb.com is protected against email spoofing with a robust configuration. Email security score: 90/100 (grade A).

Does mongodb.com have an SPF record?

Yes, mongodb.com publishes an SPF record (-all qualifier).

What is mongodb.com's DMARC record?

mongodb.com publishes a DMARC record (_dmarc.mongodb.com) with a p=reject policy.

Does mongodb.com use DKIM?

Yes, DKIM signatures were detected for mongodb.com.

Want to test another domain? Run a free email spoofing test.

Guides to understand these results

Check other domains