DNS & email auth

warnLast checked
Findings6 findings
  • 5 MX records found.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector k1 uses a 1024-bit RSA key.

    k1 (k1._domainkey.happycog.com); use at least 2048 bits.

  • DKIM selector google has a healthy RSA key.

    google (google._domainkey.happycog.com)

  • DKIM selector k2 has a healthy RSA key.

    k2 (k2._domainkey.happycog.com)

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

Raw evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • alt3.aspmx.l.google.compriority 10
  • alt4.aspmx.l.google.compriority 10

Root TXT

17 records
  • apple-domain-verification=XNe1SNwOMg3v3mkD5xCzgaTTySVMyWBG_wQ8vW2AYbE
  • apple-domain-verification=w6YihX5TeSrOHfbV
  • atlassian-domain-verification=P8GL1Xb/kAJiDfQ0oUhSjnWC0Ru3IKtbEZxYJbK42c0xBHLp4yOPOlkuZnALwbZ1
  • cloudflare_dashboard_sso=035587c22a3e69ec6c38e26b5d568177
  • cursor-domain-verification-871xjg=meVesLqSzEHw6wHyp3pIZ0Mz6
  • google-site-verification=6CWXaYYD7EU-44GUnfSFO6sy5dWc5s6OtOC4eK7RGLM
  • jamf-site-verification=n4A6zUPEWlukBQoDHWgrRQ
  • jetbrains-domain-verification=2m926ax0i6x5oc2wyxl3jp7kf
  • openai-domain-verification=dv-KFw7n8VjdShttqgDN8suNJnK
  • slack-domain-verification=C2OVq7zI90hafvXW714f30wNUGRcHmaDd7yemoJ0
  • stripe-verification=86B18AD8DB3F0461EAC1D3AEACACE4EB3CD534AD800C4EF65F832B19379DB0BA
  • stripe-verification=86f541fb272d12daa1567472260c2a61fd212f9d856e99e913082cb599456e6e
  • twilio-domain-verification=1889195ddd7db41d640dd9833b7116bc
  • v=spf1 include:servers.mcsv.net include:amazonses.com include:_spf.google.com ~all
  • zapier-domain-verification-challenge=9d4939d1-bea6-49a0-8799-a49e172ec7d6
  • ZOOM_verify_4MdpbCCOQMaLIdvUMwAodw
  • anthropic-domain-verification-sb66rp=8eg7nCkR7M35MrUMk2Zpsophn

DKIM selectors

3 records
  • selector1selector1._domainkey.happycog.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.happycog.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.happycog.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVeb92pzE1GxuOdV/aVErV6mARlRJ7cNihHQRLmPnQdZW0buHuyPfbAOrOyCYMv4ylZsxjBTNj7VGwm+AhCMxBY9UzzY6jIJksyTWjG1Ngj/pPF1MEt8l2kVncOhj8NM8b+dO/gqS6mJkdtEgWvhP3F8zTsJVZ8OptvDkFNg19XOrG/4dus08nl0AVE2hwbcMmxlREwsjlwdLFa8sNVT+UuHyQfWVkxMSNB3a3zx5kL4RW71ounNOcu1MUEqH/cMGfbGTinOdNEeQBjdm5ZjhniiM6TiuaWNgI2asflfAWDErQAzIQmo/T5E+cTLzh24SjSOWNHP6hd29nWr3aZK5wIDAQAB
  • 2023060120230601._domainkey.happycog.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.happycog.com

    No TXT records returned for this selector.

  • k1k1._domainkey.happycog.com
    CNAME dkim.mcsv.net
    • k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUoNyIR4Bn84LVcfZE20rmDeXQblIupNWBqLXM1Q+VieI/eZu/7k9/vOkLSaQQdml4Cv8lb3PcnluMVIhQIDAQAB;
  • k2k2._domainkey.happycog.com
    CNAME dkim2.mcsv.net
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA0b90ObWaLDc+i9MtTNmGeWO009hr20fIxhGg6XBT2kjZ1DTThopSe1nAndsupmcBwlQ5Q6LJ+ZAxLcujnPIxM0ZBLmgpkv8u6RfY4eFP8OLvdAW3oSuB0DyLDigQX4Sj8wBO4YIdQH6AAmBeOsidsKAFNFUCpc3vCxtBDR12U+cBg724l3sBkMQ8evnz6idnqxq9QAVYh8k4kJ+RP+6cqTdy7LjIm8xY/bQNpQIpGUAuDo2DjLcCDun9DAI4Q/3z+Q0o9QuQIDAQAB;
  • s1s1._domainkey.happycog.com

    No TXT records returned for this selector.

  • s2s2._domainkey.happycog.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.happycog.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.happycog.com

    No TXT records returned for this selector.

  • mailmail._domainkey.happycog.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=none; rua=mailto:e5477a3e67db4edfb9c6e8cd84d75191@dmarc-reports.cloudflare.net