Full report

zerobounce.net email and security report

All 20 checks for zerobounce.net on one page, last run October 15, 2026; DNS, website and WHOIS checks repeat every 14 days.

By using these tools you accept the Terms and the Privacy page.

Full report · Domain

zerobounce.net

3 of 20 checks need attention; none failed. 4 passed with things to tighten.

Checked Oct 15, 2026; next free refresh due Oct 29, 2026.

Up to 5 re-checks a day per network.

  • 3 need attention
  • 14 passed
  • 3 for information

Spamhaus intelligencezerobounce.net

Reputation +15.9 Positive: Spamhaus’s own score rates this domain as reputable.

Tags
corporate
Registered
Jan 24, 2017 at Cloudflare, Inc.
Expires
Sep 19, 2032
Last seen
Oct 14, 2026
Human score
+10
Identity score
+2
Infrastructure score
+2.87
SMTP score
+1

Tags are Spamhaus’s labels for the domain: what kind of domain it is, and kinds of abuse Spamhaus has seen involving it, including abuse by others (large providers’ domains are often misused in phishing and spam). They describe what was seen, not a verdict; the score is Spamhaus’s overall assessment.

Scores: positive is good, negative is bad, 0 is neutral. The overall score combines the dimensions (human, identity, infrastructure, malware, SMTP).

From the Spamhaus Intelligence API on Oct 15, 2026. It is asked again only when someone presses Re-check.

AI intelligencezerobounce.netOpen full profile

Safe The verdict is safe because Google Safe Browsing, VirusTotal's 92 vendors and all 9 responding domain blocklists show no problems, Spamhaus's reputation score is positive, and the domain has been registered for 9 years.

Software or service · Says it is run by ZeroBounce (Santa Barbara, California, US)

ZeroBounce is an email validation and deliverability platform offering list cleaning, email verification, an email finder, warmup, inbox placement testing, blacklist and DMARC monitoring. It serves marketers, agencies, developers and enterprises who want to reduce bounces and improve inbox placement.

Background: ZeroBounce is a U.S.-based email verification company that is widely used for email list cleaning and deliverability. (from the model’s own knowledge, not our checks)

Worth knowing: The domain publishes a strict DMARC policy (p=reject) along with SPF and DKIM, which fits a company that sells email deliverability tools.

Why this verdict

  • Pass: Google Safe Browsing doesn’t list it.

  • Pass: None of the 92 security vendors on VirusTotal flag it.

  • Pass: It isn’t on any of the 9 domain blocklists that answered.

  • Pass: Spamhaus’s reputation score for it is positive (+15.9).

  • Pass: It was registered 9 years ago.

Written by Claude Sonnet 5.5 (high confidence) from this site’s checks Oct 15, 2026, 1:15 PM UTC. The verdict comes from fixed rules over the checks, not from the model. AI text can be wrong; the checks it used are listed on the AI intelligence page.

Fix first: 9 warnings

  • Warning: k1, smtpapi, mandrill: 1024-bit RSA keyDKIM checker

    Accepted, but RFC 8301 says signers SHOULD use at least 2048 bits, and 1024-bit keys are within reach of well-funded attackers.

  • Warning: Report size limit (!5k)DMARC checker

    RFC 9989 dropped the !size suffix, and receivers following it ignore it.

  • Warning: 1 lookup couldn’t be checkedBlacklist check

    They count as unknown, not clean.

  • Warning: Some suites lack forward secrecyTLS checker

    AES128-GCM-SHA256, AES256-GCM-SHA384, AES128-SHA256, AES128-SHA and 2 more.

  • Warning: CBC suites offered over TLS 1.2TLS checker

    4 forward-secret CBC suites (ECDHE-RSA-AES128-SHA256, ECDHE-RSA-AES128-SHA, ECDHE-RSA-AES256-SHA384 and 1 more).

  • Warning: Content-Security-PolicySecurity headers

    Set, but weakened: 'unsafe-inline' scripts are allowed; 'unsafe-eval' allows eval(); data: URLs allowed as scripts; scripts allowed over plain HTTP; wildcard s…

  • Warning: Doesn’t pass on phonesCore Web Vitals check

    On phones alone: LCP 2.80 s and INP 206 ms.

  • Warning: Doesn’t pass on desktopsCore Web Vitals check

    On desktops alone: CLS 0.11.

  • Warning: 1 link with an empty hrefBroken link checker

    An empty href reloads the current page.

Setup at a glance

Mail provider
Google Workspace
Mail servers (MX)
aspmx.l.google.com, alt1.aspmx.l.google.com +3 more
SPF
-all
DKIM
cf2024-1 (2048-bit RSA), email (2048-bit RSA) +7 more
DMARC
p=reject
DMARC reports
Own address (zerobounce.net!5k)
MTA-STS
enforce mode
TLS-RPT
Published
BIMI
Published with a VMC
DNSSEC
On
DNS hosting
Cloudflare (likely, custom name servers)
CDN
Cloudflare (proxied)
Registrar
Cloudflare, Inc
Registered
2017-01-24
Expires
2032-09-19
Website network
AS13335 Cloudflare, Inc. (US)
TLS certificate
GlobalSign nv-sa, expires 2026-12-19
Technologies
Atlassian Statuspage, Cloudflare, Cloudflare Bot Management, Google Tag Manager, Google Workspace +9 more
Blocklists
Not listed
VirusTotal
Clean
Google Safe Browsing
Not listed
Spamhaus reputation
+15.9
AI verdict
Safe · software or service

Email authentication2 to tighten

Deliverability score

zerobounce.net

A+

Excellent: this domain’s email setup is hardened end to end.

Scored 98 of 100 across 16 checks: 15 passed, 1 note.

  • Mail: Google Workspace
  • SPF 8/10 lookups
  • DMARC p=reject
  • Gmail/Yahoo DNS rules: met
Meets

Meets the Gmail, Yahoo and Microsoft sender rules that DNS can show.

The rest depends on the mail you send: send a test message to check alignment, TLS, unsubscribe headers and the sending IP.

  • Gmail: meets
  • Yahoo: meets
  • Microsoft: meets

SPF checker

zerobounce.net

A+

The SPF record is valid and within every limit.

8 of 10 lookups, -all, 393,920 IPv4 addresses and 6 IPv6 ranges listed.

  • 8/10 lookups
  • -all
  • 393,920 IPv4 addresses

DKIM checker

zerobounce.net

A

9 DKIM keys found; 3 could be stronger.

Tried 60 selectors; found k1, smtpapi, mte1, mte2, mandrill, cf2024-1, zendesk1, zendesk2, email.

  • k1: RSA 1024 bits
  • smtpapi: RSA 1024 bits
  • mte1: RSA 2048 bits
  • +6 more
  • Warning: k1, smtpapi, mandrill: 1024-bit RSA key

DMARC checker

zerobounce.net

A

Spoofed mail is rejected: DMARC is fully enforced.

Published at _dmarc.zerobounce.net. p=reject, aggregate reports to 1 address.

  • p=reject
  • Reports to 1 address
  • Warning: Report size limit (!5k)

BIMI checker

zerobounce.net

A+

BIMI is ready, with a Verified Mark Certificate.

Every check passed. Gmail and Apple Mail require a VMC or CMC, and this domain publishes one. Each provider still decides per message, based on DMARC and sender reputation.

  • VMC certificate

DANE checker

zerobounce.net

Optional

DANE isn’t set up for this domain.

Mail to zerobounce.net uses opportunistic TLS: encrypted when possible, but a network attacker can strip it. The mail servers’ own DNS isn’t DNSSEC-signed, so DANE can’t be added for them; if they belong to your mail provider, only the provider can enable it. Missing DANE doesn’t break mail.

  • 5 mail servers
  • MX signed (DNSSEC)
  • 0 with DANE

Reputation1 to tighten

Blacklist check

zerobounce.net

Not listed

No listings found for zerobounce.net.

The domain and its 10 mail and web addresses were checked against 38 blocklists. 1 lookup couldn’t be checked and count as unknown, not clean. Allow-listed on SPFBL whitelist.

  • Domain + 10 addresses
  • 38 lists
  • 1 unknown
  • Warning: 1 lookup couldn’t be checked

VirusTotal check

zerobounce.net

Clean

No security vendor flags zerobounce.net.

57 of 92 rate it harmless and the rest have no opinion. A clean result isn’t a guarantee: new phishing sites can be missed for hours. Last analysed Oct 9, 2026.

  • 0 malicious
  • 0 suspicious
  • 92 vendors
Not listed

Google’s Safe Browsing lists don’t include zerobounce.net.

Checked the site’s home address against Google’s malware, phishing and unwanted-software lists. Google’s site status, which also counts single pages, found no unsafe content on zerobounce.net. New threats can take hours to be listed.

  • Home address
  • Site status: No unsafe content found
  • Google Web Risk
Not disposable

zerobounce.net isn’t on the disposable lists.

That doesn’t prove the address is real: new throwaway services appear every day.

  • 97,385 listed domains
  • Accepts mail (5 MXs)

Website3 need attention, 1 to tighten

Redirect trace

http://zerobounce.net/

Clean

The link goes to www.zerobounce.net after 2 redirects.

The page is titled “Email Validation Tools & Email List Cleaning | ZeroBounce”. No domain in the chain is on Cloudflare’s malware and phishing blocklist.

  • 2 redirects
  • Ends at HTTP 200
  • 2 domains

TLS checker

zerobounce.net

A

Solid TLS, with 2 things to tighten.

TLS 1.3 and TLS 1.2 enabled, 15 cipher suites accepted, the certificate runs for 65 more days.

  • TLS 1.3, 1.2
  • Certificate: 65 days left
  • Warning: Some suites lack forward secrecy
  • Warning: CBC suites offered over TLS 1.2

Security headers

https://zerobounce.net/

B

Solid headers, with one thing to tighten.

Scored 78 of 100: 8 passed, 1 need attention.

  • HSTS preload
  • CSP weak
  • HTTP 200
  • Warning: Content-Security-Policy

Core Web Vitals check

zerobounce.net

Needs improvement

www.zerobounce.net doesn’t pass Core Web Vitals on phones or desktops.

All devices combined are in Google’s good range over the 28 days to Oct 12, 2026, but Google Search Console reports phones and desktops separately: on phones, LCP needs improvement at 2.80 s and INP needs improvement at 206 ms; on desktops, CLS needs improvement at 0.11 (good is LCP 2.50 s, INP 200 ms and CLS 0.10 or less).

  • LCP 2.19 s
  • INP 95 ms
  • CLS 0.10
  • Whole site
  • Chrome UX Report
  • Warning: Doesn’t pass on phones
  • Warning: Doesn’t pass on desktops

Tech stack detector

https://zerobounce.net/

32 technologies

www.zerobounce.net runs on Next.js and Cloudflare.

32 technologies across 17 categories.

  • WordPress
  • Next.js
  • Cloudflare
  • Cloudflare Bot Management

Domain and networkNothing to fix

Domain analyzer

zerobounce.net

22 services

zerobounce.net uses 22 services across 10 categories.

Mail by Google Workspace, DNS at Cloudflare (likely, custom name servers), web through Cloudflare (proxied). Registered with Cloudflare, Inc. until Sep 19, 2032.

  • Mail: Google Workspace
  • DNS: Cloudflare (likely, custom name servers)
  • CDN: Cloudflare (proxied)

WHOIS lookup

zerobounce.net

Registered

zerobounce.net is registered with Cloudflare, Inc.

Created Jan 24, 2017 (9.7 years ago). Expires Sep 19, 2032, 2,165 days left.

  • Cloudflare, Inc
  • Since 2017
  • Expires Sep 19, 2032

ASN lookup

104.18.144.198

AS13335

AS13335 · Cloudflare, Inc.

104.18.144.198 is in 104.18.144.0/20 announced by AS13335 (United States, registered with ARIN on Jul 14, 2010). The route is RPKI valid.

  • 104.18.144.0/20
  • United States
  • RPKI valid

Change historysince October 15, 2026

    • First checkedMail: Google Workspace · SPF -all · DMARC p=reject · DKIM: cf2024-1, email, k1 +6 more · Registrar: Cloudflare, Inc