lowDMARC has no reporting address
Without it you are blind: you cannot see forgeries in circulation or unknown legitimate senders, so you can never safely tighten the policy.
Public security report
unipecasia.com security rating
A
95/100
A means lowest risk and F means highest, like a school report card. How the score is calculated →
Scanned 2026-11-04 · 3 issue(s) found · 9 checks passed
What this scan found
CyberTrust assessed unipecasia.com passively — using only information that is publicly visible on the internet: DNS records, certificates, response headers and reachable services. The result is 95/100, grade A, where A means lowest risk and F means highest, like a school report card.
Email spoofing is only partly blocked: DMARC is published with p=quarantine at 100% coverage, so forged mail can still reach inboxes that do not enforce the policy.
Strongest area: TLS encryption and certificates (100/100). Weakest area: email spoofing defences (SPF/DKIM/DMARC) (84/100).
Not every check could run for TLS encryption and certificates, HTTP security headers: the site answers automated requests with an error or challenge page, so only part of that area was examined. Read its score as a partial result, not a clean bill of health.
3 issue(s) need attention (3 low), while 9 checks passed.
Infrastructure observed: DNS is served by aliyun.
4 subdomain(s) of unipecasia.com resolve publicly.
Score by category
| Area | Score | Grade | Issues |
|---|---|---|---|
| DNS hygiene | 92 | A | 1 |
| email spoofing defences (SPF/DKIM/DMARC) | 84 | B | 2 |
| external attack surface | 100 | A | 0 |
| IP threat intelligence | — | — | 0 |
| reputation and credential exposure | 100 | A | 0 |
| TLS encryption and certificatespartly checked | 100 | A | 0 |
| HTTP security headerspartly checked | 100 | A | 0 |
Issues found (3)
lowNo MTA-STS policy
Without it an attacker on the network path can force a downgrade to plaintext and read or modify mail such as contracts and payment details.
lowDNSSEC not enabled
Without it, attackers can poison caches or forge answers and send visitors to a lookalike server that harvests credentials.
Checks passed
- Mail exchangers configured
- SPF record is valid
- DKIM signing keys found
- BIMI brand logo published
- Name servers are redundant
- CAA restricts which CAs may issue certificates
- No risky services found exposed
- No shadow-AI services exposed
- No mail-server IP on spam blocklists
What we detected
- dns provider
- aliyun
- subdomain count
- 4
What could not be fully checked
These areas were only partly assessed: TLS encryption and certificates, HTTP security headers. The site answers automated requests with an error or challenge page, so some checks could not run. The scores above are real, but treat those areas as partially verified rather than clean.
- DMARC quarantines spoofed mail
p=quarantine sends failing mail to spam. p=reject blocks it outright and is the strongest protection. - No TLS-RPT record
TLS-RPT sends you reports when other servers fail to deliver mail to you securely. Recommended alongside MTA-STS. - Website not reachable
The site could not be fetched, so its response headers and page content were not checked. - HTTPS not available on port 443
The TLS checks could not run on this host, so its TLS configuration was not verified.
Frequently asked questions about unipecasia.com security
- Does unipecasia.com have DMARC protection against email spoofing?
- Partly. unipecasia.com publishes DMARC with p=quarantine at 100% coverage — better than nothing, but forged messages can still reach inboxes that do not enforce the policy.
- How is unipecasia.com's A security grade calculated?
- CyberTrust scores unipecasia.com passively across 6 area(s) — TLS encryption and certificates 100/100; HTTP security headers 100/100; external attack surface 100/100; reputation and credential exposure 100/100; DNS hygiene 92/100; email spoofing defences (SPF/DKIM/DMARC) 84/100 — and combines them by weight into the overall score of 95/100, which maps to grade A.
- Was every check actually run on unipecasia.com?
- No. For TLS encryption and certificates, HTTP security headers the site answers automated requests with an error or challenge page, so only part of that area could be examined. The number is still shown, but it is a partial result rather than a full pass.
- What is the most serious issue found on unipecasia.com?
- DMARC has no reporting address (severity low). Without it you are blind: you cannot see forgeries in circulation or unknown legitimate senders, so you can never safely tighten the policy. Fixing it is worth about +2 points.
- How many subdomains does unipecasia.com expose?
- This scan observed 4 publicly resolvable subdomain(s) for unipecasia.com. Verified owners get the full list, with each host's open ports and running services.
What a verified owner of unipecasia.com sees
Everything above is what anyone can observe from the internet. Domain owners who verify ownership additionally get the full asset inventory — every subdomain with its open ports and running services — look-alike and typosquatting domains registered against the brand, credential-exposure monitoring, and copy-paste fixes for each finding.
Verify ownership of unipecasia.com (free) → Open the live interactive report →