Monitor this domain

DNS & email auth

warnLast checked
Findings5 findings

  • 5 MX records found.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector default uses a 1024-bit RSA key.

    default (default._domainkey.hiddentempo.com); use at least 2048 bits.

  • DKIM selector google has a healthy RSA key.

    google (google._domainkey.hiddentempo.com)

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

Raw evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • alt3.aspmx.l.google.compriority 10
  • alt4.aspmx.l.google.compriority 10

Root TXT

2 records
  • v=spf1 +ip4:35.215.107.18 +a include:_spf.google.com +mx include:hiddentempo.com.spf.auto.dnssmarthost.net ~all
  • MS=ms16110905

DKIM selectors

2 records
  • selector1selector1._domainkey.hiddentempo.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.hiddentempo.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.hiddentempo.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7hICf3MB/EKTPMicKDuzeaeRfWTRQatsCTMmE8HFXmpZeS7pF2tQjrGSuJUzQSY3WKkCKVDvIZhpdm/jNXWlAtdojjYL0BHmoqLA9pc4B3Mu9kxpXpmbRLFmMyYuEOVotjRhSBLl4Wd5jzunWSbHfVQ8OIU6FeNmCl09Xwf53wADNbD7L0uTJMneDWalmh0RmTm4Cxm24K1gddaSZAknWdBHcyAdGsqYWP98DSUYYCb9IrYQXZDQQKobR5AomWyQ19OT4MYgRY0+M3W8oYVLvEVpigjRpnL8nwimzG8oGBDRSiwjRFZO5SCl028r0GA46CviARxdn4qboo/SY+M2QIDAQAB
  • 2023060120230601._domainkey.hiddentempo.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.hiddentempo.com

    No TXT records returned for this selector.

  • k1k1._domainkey.hiddentempo.com

    No TXT records returned for this selector.

  • k2k2._domainkey.hiddentempo.com

    No TXT records returned for this selector.

  • s1s1._domainkey.hiddentempo.com

    No TXT records returned for this selector.

  • s2s2._domainkey.hiddentempo.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.hiddentempo.com
    CNAME hiddentempo.com.default.dkim.auto.dnssmarthost.net
    • v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC781Hi4sT5Xy/RSWPEdnEtbiiHsYRtasxOw95A8VJWXAy/WvfBePcVqiBnhxeV/zaTrh6s5wZT4dA2dQ3k5BHY28WFIyH10U2+xzLAwYLeTEf+dLZ6KCt7POXmS9X/6IsGfSKEieEeacsoT5aFZpCV8eL5cH5/mPh9+jA0lnJV3wIDAQAB;
  • dkimdkim._domainkey.hiddentempo.com

    No TXT records returned for this selector.

  • mailmail._domainkey.hiddentempo.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=none; rua=mailto:hello@hiddentempo.com;