Running the check…
← Back to KOLLENGood
Looks good from the outside.
A
lumrait.se
100 out of 100 points. Nothing urgent, a good level from the outside.
Checked just now, live against public data.
Raw data and evidence. Does not change the grade.
SPFhard -all
DKIM2048 bits
DMARCp=reject 100 %
Protectionaddress protected
- The following services may send mail in your name: Microsoft 365, Brevo.
Email security
A · 100/100This looks good (5)
OK
DMARC
DMARC rejects spoofed mail (p=reject), the strongest level.
Raw data
_dmarc.lumrait.seTXTv=DMARC1; p=reject; pct=100; rua=mailto:rua@dmarc.brevo.com; adkim=r; aspf=r
OK
SPF
SPF is present and hard-fails everything outside the list (-all).
Raw data
lumrait.seTXTv=spf1 include:spf.protection.outlook.com include:spf.brevo.com -all
OK
DKIM
DKIM found (selector "selector1", 2048-bit key). Outgoing mail can be signed and verified.
Raw data
selector1._domainkey.lumrait.seTXTv=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ml9DOv+IpH5Rcg8DhyctiryyupgWfgb/eOyV0oAJ3iYWX7aUNrjEn9z2vMM8DdRGQREN9LEVuulYYCALwH0+86UPLs+BZ7gCV/LRnLlyo4Ru8jn/jNc+nFaIxcugi2foFUXsYLTc+sdmnAY3ekZk4Ynwlv7qWZ25gZ58iblVjovUySLqgHh8Qwsdy9AxXgMy2xddT2Urp0JdaJXd/mL6B1346+zc48Ox+tZoa+ewZ5X96OlQG0UtUi3H0jcJwEUFubOVSr70F8J8p0fwjulpg5e0xrdJgTJuJbC2x4XYkviF/LKRraX9iVyki1NMQk6mO4qdPOFHtuiUrkZT9KykQIDAQAB;
DNS and domain
A · 100/100This looks good (6)
OK
Name servers (NS)
2 name servers, which gives redundancy if one stops responding.
Raw data
lumrait.seNSathena.ns.cloudflare.comlumrait.seNSalbert.ns.cloudflare.com
OK
SOA (zone base data)
The zone is managed by albert.ns.cloudflare.com, contact dns.cloudflare.com.
Raw data
lumrait.seSOAalbert.ns.cloudflare.com dns.cloudflare.com 2415304954 10000 2400 604800 1800
OK
Address (A/AAAA)
The domain points to a server (2 IPv4, 2 IPv6).
Raw data
lumrait.se300
Web and certificate
A · 100/100This looks good (3)
OK
TLS certificate
Valid certificate, expires in 87 days.
Raw data
lumrait.seCERT subjectlumrait.selumrait.seCERT issuerLet's Encrypt (YE1)lumrait.seCERT notBeforeSep 18 00:50:58 2026 GMTlumrait.seCERT notAfterDec 17 00:50:57 2026 GMTlumrait.seTLS protocolTLSv1.3
OK
Security headers
The website sets all important security headers (HSTS, CSP and more).
Raw data
HSTSHTTP headermax-age=31536000; includeSubDomains; preloadContent-Security-PolicyHTTP headerdefault-src 'self'; script-src 'self' 'sha256-M0Vf4LnMGNUeekx4XarRq4tVNyzY0EqrjP6rEskOQok=' 'sha256-o07hqXq07RU7eAhydHxQ53Sr1gJtQz62u/+Q0Yfej7k=' 'sha256-zKZ0eYFCAe7X/q6jvHGpXt5RHGHFIavFwbZYSGEW2sM='; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests
Since 30 August 2026 the grade is calculated in one combined way. Previously shared links may show a different number.
Show it off
Put the badge on your site or in your email signature. It links back here so anyone who clicks sees the full result.
<a href="https://kollen.lumrait.se/en/resultat?domain=lumrait.se" rel="noopener"><img src="https://kollen.lumrait.se/api/badge?domain=lumrait.se" alt="Checked by KOLLEN, grade A" width="204" height="28"></a>The badge updates daily. If the grade drops it only shows "Checked by KOLLEN" until it is fixed.
The domain runs Microsoft 365
This is everything that is visible from the outside. What decides whether a click becomes a breach, multi-factor, conditional access, sharing and apps, is only visible from the inside. That is what PIANOLA measures.