Monitor this domain

DNS & email auth

warnLast checked
Findings7 findings

  • 5 MX records found.

  • The record uses 10 of 10 allowed DNS lookups.

    Adding another sender could push it over the limit and break SPF entirely.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector k1 uses a 1024-bit RSA key.

    k1 (k1._domainkey.luccaam.com); use at least 2048 bits.

  • DKIM selector google has a healthy RSA key.

    google (google._domainkey.luccaam.com)

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    Add rua=mailto:you@example.com to receive daily aggregate reports from receivers.

Raw evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • alt3.aspmx.l.google.compriority 10
  • alt4.aspmx.l.google.compriority 10

Root TXT

8 records
  • stripe-verification=30b9b1aae8877b449c54cbd680c20385449b3af7079c3ae6d12278bc25223b48
  • v=BIMI1; l=https://www.luccaam.com/accelo/lam_bird.svg; a=;
  • v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y78dHZj1YeRXXVvWob2OaKynO8/lQIDAQAB;
  • v=spf1 include:spf.protection.outlook.com include:_spf.accelo.com include:mailgun.org include:_spf.google.com ~all
  • facebook-domain-verification=etk9wsg6elgzngyqybtxwpiqc36gbc
  • google-site-verification=elF5wZgIDB7kXYBw5E3LvDTshflxC1z-NMWoPC9G6FQ
  • google-site-verification=wx85ISxKRk_O8HArySk6tR-EvdYW9rJ5hVOF6Dww-Wk
  • slack-domain-verification=94jQsW57rKmOtSEypYcZlChtJjayW4WEBv5SWBuQ

DKIM selectors

2 records
  • selector1selector1._domainkey.luccaam.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.luccaam.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.luccaam.com
    • v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+hVVuBOdvsaN1i3flAzAa0mc7CkK7aWwIU+/rg2H0rfHCEo1/0+4fqSrJi+v/RVJDgjA6BLdXn35UxjONKPglTh2MaOSjvBwNzDDWyh7JpVgf+LUcMSYlLU+RRPCEWdsOYTn7XoZDXpwr+RtcX9BF/wEV1BlAuz5NtSENEyWvT91511rbyo5OboCL4hZIV5C/f4BvO3y2yQiS07uUbpYUgBQ9USiNsV9qFj0S5kprcK52s0tdHg7wL+ou23B/2qr9f2enUmmuAJIY1XVeWpS4A7pBjgStkwZxZDX1u0FdbvfqDKTgpbqoeIXpB76WNslhvp7M7a5wtNAuacsFBp6EQIDAQAB
  • 2023060120230601._domainkey.luccaam.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.luccaam.com

    No TXT records returned for this selector.

  • k1k1._domainkey.luccaam.com
    • k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOYyTVmQ7Oe3dknZZk6CCJUVnDKJyW9gJ7O6sBS6ouCdgk3P6Ympwrg/XKFQ5BzyiJWf8hAKGVQy4LPilt6t+CnaG5tI8SksrsyGetUus9YWFhmRMjnyEQbfvhaurGDMY4vweVcNHU/CkLn6f740IH+6ogD3SBhLZQQAmbnN8u6QIDAQAB
  • k2k2._domainkey.luccaam.com

    No TXT records returned for this selector.

  • s1s1._domainkey.luccaam.com

    No TXT records returned for this selector.

  • s2s2._domainkey.luccaam.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.luccaam.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.luccaam.com

    No TXT records returned for this selector.

  • mailmail._domainkey.luccaam.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=none;