SMTP TLS Posture Check for this-domain-should-not-exist-983746273.com
No MX records — cannot probe TLS.
If your domain is not configured to receive mail, this tool has no probe target.
Probing TLS endpoints...
Probing TLS endpoints...
STARTTLS extends SMTP with opportunistic encryption. A mail server advertises STARTTLS during the EHLO handshake, and sending systems can negotiate TLS for the message body. Modern operators expect TLS 1.2 minimum; TLS 1.0 / 1.1 are deprecated.
No MX records — cannot probe TLS.
If your domain is not configured to receive mail, this tool has no probe target.
The result above probes the domains primary MX hosts on ports 25 + 587 (or whichever the domain uses) and reports the TLS version negotiated, certificate validity, SAN match status, and whether MTA-STS / TLS-RPT policies are published.
Configure TLS 1.2 minimum; aim for TLS 1.3 where possible. Ensure the certificate SAN includes the MX hostname (not just the apex domain). Publish MTA-STS to enforce TLS for inbound traffic and TLS-RPT to receive failure reports — both are zero-cost upgrades that meaningfully harden mail-in-transit security.