Full report

bengen.com email and security report

All 20 checks for bengen.com on one page, last run October 15, 2026; DNS, website and WHOIS checks repeat every 14 days.

By using these tools you accept the Terms and the Privacy page.

Full report · Domain

bengen.com

1 of 20 checks failed, 4 need attention. 3 passed with things to tighten.

Checked Oct 15, 2026; next free refresh due Oct 29, 2026.

Up to 5 re-checks a day per network.

  • 1 failed
  • 4 need attention
  • 11 passed
  • 4 for information

Spamhaus intelligencebengen.com

Reputation +4.5 Positive: Spamhaus’s own score rates this domain as reputable.

Tags
None
Registered
Dec 9, 1996 at Cloudflare, Inc.
Expires
Dec 8, 2026
Last seen
Aug 4, 2026
Infrastructure score
+3.5
SMTP score
+1

Scores: positive is good, negative is bad, 0 is neutral. The overall score combines the dimensions (human, identity, infrastructure, malware, SMTP).

From the Spamhaus Intelligence API on Oct 15, 2026. It is asked again only when someone presses Re-check.

AI intelligencebengen.comOpen full profile

Safe The verdict is safe because Google Safe Browsing, VirusTotal vendors and domain blocklists show no problems, Spamhaus reputation is positive, and the domain has existed for 29 years.

Business · Says it is run by Benevolent Generation LLC

bengen.com is the corporate website of Benevolent Generation LLC, a group that supports and develops marketing and consumer-engagement technology companies. It targets brands and marketers, citing an audience of over 300 million consumers and more than 1,100 brands. The domain was registered in 1996 and is served through Cloudflare.

Worth knowing: The site says its companies reach over 300 million consumers and more than 1,100 brands, with over 4 million matches and billions of interactions made annually.

Why this verdict

  • Pass: Google Safe Browsing doesn’t list it.

  • Pass: None of the 92 security vendors on VirusTotal flag it.

  • Pass: It isn’t on any of the 9 domain blocklists that answered.

  • Pass: Spamhaus’s reputation score for it is positive (+4.5).

  • Pass: It was registered 29 years ago.

Written by Claude Sonnet 5.5 (high confidence) from this site’s checks Oct 14, 2026, 1:54 PM UTC. The verdict comes from fixed rules over the checks, not from the model. AI text can be wrong; the checks it used are listed on the AI intelligence page.

Fix first: 2 problems and 10 warnings

  • Problem: Content-Security-PolicySecurity headers

    Not set.

  • Problem: Clickjacking protectionSecurity headers

    Neither X-Frame-Options nor CSP frame-ancestors is set, so any site can frame this page.

  • Warning: Sender rules: alignmentSender requirements checker

    No DKIM key was found at the common selectors, so alignment may rest on SPF alone, which aligns only when the Return-Path (envelope sender) is bengen.com or on…

  • Warning: No DKIM key under the common selectorsDKIM checker

    Keys under custom selector names can’t be found from DNS alone, so check your own selector on the DKIM page.

  • Warning: Report size limit (!5k)DMARC checker

    RFC 9989 dropped the !size suffix, and receivers following it ignore it.

  • Warning: 1 lookup couldn’t be checkedBlacklist check

    They count as unknown, not clean.

  • Warning: Some suites lack forward secrecyTLS checker

    AES128-GCM-SHA256, AES256-GCM-SHA384, AES128-SHA, AES256-SHA and 2 more.

  • Warning: CBC suites offered over TLS 1.2TLS checker

    8 forward-secret CBC suites (ECDHE-ECDSA-AES128-SHA, ECDHE-ECDSA-AES256-SHA, ECDHE-ECDSA-AES128-SHA256 and 5 more).

  • Warning: Referrer-PolicySecurity headers

    Not set.

  • Warning: Permissions-PolicySecurity headers

    Not set.

  • Warning: Version disclosureSecurity headers

    x-powered-by: WP Engine.

  • Warning: Missing anchor: #contentBroken link checker

    A link (“Skip to content”) jumps to #content, but no element on this page has that id or name, so it goes nowhere.

Setup at a glance

Mail provider
Google Workspace
Mail servers (MX)
aspmx.l.google.com, alt1.aspmx.l.google.com +3 more
SPF
-all
DKIM
None at the common selectors
DMARC
p=reject
DMARC reports
Own address (zerobounce.net!5k)
MTA-STS
None
TLS-RPT
None
BIMI
Published with a VMC
DNSSEC
Off
DNS hosting
Cloudflare DNS
CDN
Cloudflare (proxied)
Registrar
Cloudflare, Inc
Registered
1996-12-09
Expires
2026-12-08
Website network
AS13335 Cloudflare, Inc. (US)
TLS certificate
Let's Encrypt, expires 2026-12-31
Technologies
Cloudflare, Cloudflare Bot Management, Contact Form 7, Elementor, Font Awesome +8 more
Blocklists
Not listed
VirusTotal
Clean
Google Safe Browsing
Not listed
Spamhaus reputation
+4.5
AI verdict
Safe · business

Email authentication3 need attention, 1 to tighten

B

The essentials work, but there are gaps to close.

Scored 82 of 100 across 16 checks: 11 passed, 1 need attention, 4 notes.

  • Mail: Google Workspace
  • SPF 3/10 lookups
  • DMARC p=reject
  • Gmail/Yahoo DNS rules: partly
  • Warning: DKIM
Partly meets

Partly meets the Gmail, Yahoo and Microsoft sender rules that DNS can show.

To look at: DKIM, alignment. Rules that depend on the message itself need a test message.

  • Gmail: partly
  • Yahoo: partly
  • Microsoft: partly
  • Warning: Sender rules: DKIM
  • Warning: Sender rules: alignment

SPF checker

bengen.com

A+

The SPF record is valid and within every limit.

3 of 10 lookups, -all, 339,456 IPv4 addresses and 6 IPv6 ranges listed.

  • 3/10 lookups
  • -all
  • 339,456 IPv4 addresses

DKIM checker

bengen.com

Warning

No DKIM key found under the common selectors.

Tried 60 selectors.

  • Warning: No DKIM key under the common selectors

DMARC checker

bengen.com

A

Spoofed mail is rejected: DMARC is fully enforced.

Published at _dmarc.bengen.com. p=reject, aggregate reports to 1 address.

  • p=reject
  • Reports to 1 address
  • Warning: Report size limit (!5k)

BIMI checker

bengen.com

A+

BIMI is ready, with a Verified Mark Certificate.

Every check passed. Gmail and Apple Mail require a VMC or CMC, and this domain publishes one. Each provider still decides per message, based on DMARC and sender reputation.

  • VMC certificate

DANE checker

bengen.com

Optional

DANE isn’t set up for this domain.

Mail to bengen.com uses opportunistic TLS: encrypted when possible, but a network attacker can strip it. The mail servers’ own DNS isn’t DNSSEC-signed, so DANE can’t be added for them; if they belong to your mail provider, only the provider can enable it. Missing DANE doesn’t break mail.

  • 5 mail servers
  • MX not DNSSEC-signed
  • 0 with DANE

Reputation1 to tighten

Blacklist check

bengen.com

Not listed

No listings found for bengen.com.

The domain and its 10 mail and web addresses were checked against 38 blocklists. 1 lookup couldn’t be checked and count as unknown, not clean. Allow-listed on SPFBL whitelist.

  • Domain + 10 addresses
  • 38 lists
  • 1 unknown
  • Warning: 1 lookup couldn’t be checked
Clean

No security vendor flags bengen.com.

56 of 92 rate it harmless and the rest have no opinion. A clean result isn’t a guarantee: new phishing sites can be missed for hours. Last analysed Oct 10, 2026.

  • 0 malicious
  • 0 suspicious
  • 92 vendors
Not listed

Google’s Safe Browsing lists don’t include bengen.com.

Checked the site’s home address against Google’s malware, phishing and unwanted-software lists. Google’s site status, which also counts single pages, found no unsafe content on bengen.com. New threats can take hours to be listed.

  • Home address
  • Site status: No unsafe content found
  • Google Web Risk
Not disposable

bengen.com isn’t on the disposable lists.

That doesn’t prove the address is real: new throwaway services appear every day.

  • 97,385 listed domains
  • Accepts mail (5 MXs)

Website1 failed, 1 needs attention, 1 to tighten

Redirect trace

http://bengen.com/

Clean

The link goes to bengen.com after 1 redirect.

The page is titled “bengen”. No domain in the chain is on Cloudflare’s malware and phishing blocklist.

  • 1 redirect
  • Ends at HTTP 200

TLS checker

bengen.com

A

Solid TLS, with 2 things to tighten.

TLS 1.3 and TLS 1.2 enabled, 23 cipher suites accepted, the certificate runs for 77 more days.

  • TLS 1.3, 1.2
  • Certificate: 77 days left
  • Warning: Some suites lack forward secrecy
  • Warning: CBC suites offered over TLS 1.2

Security headers

https://bengen.com/

D

2 important protections are missing.

Scored 49 of 100: 4 passed, 2 failed, 3 need attention.

  • HSTS preload
  • No CSP
  • HTTP 200
  • Problem: Content-Security-Policy
  • Problem: Clickjacking protection
  • Warning: Referrer-Policy
  • +2 more in the full results
No field data

Google has no real-user data for bengen.com.

The Chrome UX Report only includes sites and pages that search engines can find and that have enough Chrome visitors who share usage statistics, so smaller, newer or private sites aren’t in it. That says nothing about speed: a lab test such as Google PageSpeed Insights can still measure the page.

  • Chrome UX Report

Tech stack detector

https://bengen.com/

20 technologies

bengen.com runs on WordPress and Cloudflare.

20 technologies across 12 categories.

  • WordPress
  • jQuery 4.0.0
  • jQuery Migrate 3.6.0
  • Swiper

Domain and networkNothing to fix

Domain analyzer

bengen.com

11 services

bengen.com uses 11 services across 7 categories.

Mail by Google Workspace, DNS at Cloudflare DNS, web through Cloudflare (proxied). Registered with Cloudflare, Inc. until Dec 8, 2026.

  • Mail: Google Workspace
  • DNS: Cloudflare DNS
  • CDN: Cloudflare (proxied)

WHOIS lookup

bengen.com

Registered

bengen.com is registered with Cloudflare, Inc.

Created Dec 9, 1996 (29.8 years ago). Expires Dec 8, 2026, 53 days left.

  • Cloudflare, Inc
  • Since 1996
  • Expires Dec 8, 2026

ASN lookup

104.18.2.95

AS13335

AS13335 · Cloudflare, Inc.

104.18.2.95 is in 104.18.0.0/20 announced by AS13335 (United States, registered with ARIN on Jul 14, 2010). The route is RPKI valid.

  • 104.18.0.0/20
  • United States
  • RPKI valid

Change historysince October 15, 2026

    • First checkedMail: Google Workspace · SPF -all · DMARC p=reject · DKIM: none found · Registrar: Cloudflare, Inc