Print reportMonitor this domain

DNS & email auth

warnLast checked
Findings7 findings

Recommended (3)

  • The record uses softfail (~all), which is weaker than fail (-all).

    SPF

    How to fix

    Move to -all once you're confident every legitimate sender is listed.

  • DKIM selector selector1 uses a 1024-bit RSA key.

    DKIM

    selector1 (selector1._domainkey.digitalinkco.com)

    How to fix

    Rotate to an RSA key of at least 2048 bits.

  • DKIM selector default uses a 1024-bit RSA key.

    DKIM

    default (default._domainkey.digitalinkco.com)

    How to fix

    Rotate to an RSA key of at least 2048 bits.

Healthy (4)

  • 1 MX record found.

    MX

  • DKIM selector selector2 has a healthy RSA key.

    DKIM

    selector2 (selector2._domainkey.digitalinkco.com)

  • DKIM selector k2 has a healthy RSA key.

    DKIM

    k2 (k2._domainkey.digitalinkco.com)

  • DMARC policy is enforced with p=quarantine.

    DMARC

Evidence

MX

1 record
  • digitalinkco-com.mail.protection.outlook.compriority 0

SPF

6 of 10 lookups
DNS lookups6 / 10
digitalinkco.com
v=spf1 +mx +ip4:35.215.98.163 include:spf.protection.outlook.com include:relay.mailchannels.net include:spf.mandrillapp.com include:digitalinkco.com.spf.auto.dnssmarthost.net ~all
include:spf.protection.outlook.com
v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all
include:relay.mailchannels.net
v=spf1 ip4:23.83.208.0/20 ip4:35.85.190.185/32 ~all
include:spf.mandrillapp.com
v=spf1 ip4:198.2.128.0/24 ip4:198.2.132.0/22 ip4:198.2.136.0/23 ip4:198.2.145.0/24 ip4:198.2.186.0/23 ip4:205.201.131.0/24 ip4:205.201.134.128/25 ip4:205.201.136.0/23 ip4:205.201.139.0/24 ip4:198.2.177.0/24 ip4:198.2.178.0/23 ip4:198.2.180.0/24 ~all
include:digitalinkco.com.spf.auto.dnssmarthost.net
v=spf1 include:_spf.mailspamprotection.com ~all
include:_spf.mailspamprotection.com
v=spf1 ip4:185.56.84.0/24 ip4:185.56.85.0/24 ip4:185.56.86.0/24 ip4:185.56.87.0/24 ~all

Root TXT

4 records
  • linkedin-site-verification=9351e0cd-f557-4f07-a349-9164f68ceb1e
  • v=verifydomain MS=4913868
  • v=spf1 +mx +ip4:35.215.98.163 include:spf.protection.outlook.com include:relay.mailchannels.net include:spf.mandrillapp.com include:digitalinkco.com.spf.auto.dnssmarthost.net ~all
  • google-site-verification=Aa6lb1fAKZHrWdJSqXlpyJqDr4pM-c8k8_0JPHPDcKQ

DKIM selectors

4 records
  • selector1selector1._domainkey.digitalinkco.com
    CNAME selector1-digitalinkco-com._domainkey.digitalinkcompany.onmicrosoft.com
    • v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQmzZcOX1zrGEctMX5/DxbXepFyLRnkp7BnmO0dGBtSIxzpPwb/lj5TSO0l8GO3Yguuu7IgZSEGLxZi6Zmup4CSrJORnxYALcjo3/XQc0Oy3vrPAeWozWxiAwEVL1upb8K8hP3Zf3T8ue2qgU1HjmZ2xQid59kM6DF00uK4F9gTwIDAQAB;
  • selector2selector2._domainkey.digitalinkco.com
    CNAME selector2-digitalinkco-com._domainkey.digitalinkcompany.onmicrosoft.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVLTKF9YJuWT0HWTXlSC1l/wj3MYdvNx4JRa0/9/hRxBCw57TOVOhV7hPAsmaL42gVftjJACnApVr9MRS4XosPIg/P0UdWPe16bHXallLQ5HN1TypuZrGjRyMT/GB92hoHOJRedGzvekPhJNn1SwS/vmsIfYF3jh9WK9xBxPj2h/ja0q/ctuh93yOAfHdgzmVC88cBXGpS6EkV3UIczccJn9vnwN1vS8snvv9Ze9rBCiLhDtFeU0UDXDJWZ0mHrZV3v35aKWUemU8tDvTO0vgIQChqJmrx+7GM3pZ05NPAjeAXWpSYdxunZqWpukX/LEMxq577HnIyJcxngtKBH2jQIDAQAB;
  • googlegoogle._domainkey.digitalinkco.com

    No TXT records returned for this selector.

  • 2023060120230601._domainkey.digitalinkco.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.digitalinkco.com

    No TXT records returned for this selector.

  • k1k1._domainkey.digitalinkco.com

    No TXT records returned for this selector.

  • k2k2._domainkey.digitalinkco.com
    CNAME dkim2.mcsv.net
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA0b90ObWaLDc+i9MtTNmGeWO009hr20fIxhGg6XBT2kjZ1DTThopSe1nAndsupmcBwlQ5Q6LJ+ZAxLcujnPIxM0ZBLmgpkv8u6RfY4eFP8OLvdAW3oSuB0DyLDigQX4Sj8wBO4YIdQH6AAmBeOsidsKAFNFUCpc3vCxtBDR12U+cBg724l3sBkMQ8evnz6idnqxq9QAVYh8k4kJ+RP+6cqTdy7LjIm8xY/bQNpQIpGUAuDo2DjLcCDun9DAI4Q/3z+Q0o9QuQIDAQAB;
  • s1s1._domainkey.digitalinkco.com

    No TXT records returned for this selector.

  • s2s2._domainkey.digitalinkco.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.digitalinkco.com
    CNAME digitalinkco.com.default.dkim.auto.dnssmarthost.net
    • v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJWvX/IwP0APW4WvuzvdcuuV2of7/FVCAqkaRYh2SiGl/iv0aqclUCQXsU0KnCTmgkykZbpwCgNkrlTlhmJz6wNJjXGT14+RSO/61YxM+tVnLLYcdt63UKYoOvnv5G8HXp/xF+PNbp9OY1MF+1RmpeJaiRS7MVVjJEzy28qyiqcQIDAQAB;
  • dkimdkim._domainkey.digitalinkco.com

    No TXT records returned for this selector.

  • mailmail._domainkey.digitalinkco.com

    No TXT records returned for this selector.

DMARC

1 record
v=DMARC1; p=quarantine; rua=mailto:dmarc@dmarc.digitalinkco.com; sp=reject;
v=DMARC1
Identifies this TXT record as a DMARC policy. Must be the first tag.
p=quarantine
Receivers treat failing mail with suspicion, typically sending it to spam.
rua=mailto:dmarc@dmarc.digitalinkco.com
Receivers send daily aggregate reports about passing and failing mail to dmarc@dmarc.digitalinkco.com.
sp=reject
Policy for subdomains, overriding p=. Receivers refuse mail that fails DMARC outright.
pct=100default
No pct= tag is published, so the policy applies to all failing mail.
adkim=rdefault
No adkim= tag is published, so DKIM alignment is relaxed: any subdomain of the From domain may sign.
aspf=rdefault
No aspf= tag is published, so SPF alignment is relaxed: the envelope sender may be any subdomain of the From domain.
Raw JSON
{
  "mx": [
    {
      "type": "MX",
      "exchange": "digitalinkco-com.mail.protection.outlook.com",
      "priority": 0
    }
  ],
  "spf": {
    "tree": {
      "via": "root",
      "domain": "digitalinkco.com",
      "issues": [],
      "records": [
        "v=spf1 +mx +ip4:35.215.98.163 include:spf.protection.outlook.com include:relay.mailchannels.net include:spf.mandrillapp.com include:digitalinkco.com.spf.auto.dnssmarthost.net ~all"
      ],
      "children": [
        {
          "via": "include",
          "domain": "spf.protection.outlook.com",
          "issues": [],
          "records": [
            "v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all"
          ],
          "children": []
        },
        {
          "via": "include",
          "domain": "relay.mailchannels.net",
          "issues": [],
          "records": [
            "v=spf1 ip4:23.83.208.0/20 ip4:35.85.190.185/32 ~all"
          ],
          "children": []
        },
        {
          "via": "include",
          "domain": "spf.mandrillapp.com",
          "issues": [],
          "records": [
            "v=spf1 ip4:198.2.128.0/24 ip4:198.2.132.0/22 ip4:198.2.136.0/23 ip4:198.2.145.0/24 ip4:198.2.186.0/23 ip4:205.201.131.0/24 ip4:205.201.134.128/25 ip4:205.201.136.0/23 ip4:205.201.139.0/24 ip4:198.2.177.0/24 ip4:198.2.178.0/23 ip4:198.2.180.0/24 ~all"
          ],
          "children": []
        },
        {
          "via": "include",
          "domain": "digitalinkco.com.spf.auto.dnssmarthost.net",
          "issues": [],
          "records": [
            "v=spf1 include:_spf.mailspamprotection.com ~all"
          ],
          "children": [
            {
              "via": "include",
              "domain": "_spf.mailspamprotection.com",
              "issues": [],
              "records": [
                "v=spf1 ip4:185.56.84.0/24 ip4:185.56.85.0/24 ip4:185.56.86.0/24 ip4:185.56.87.0/24 ~all"
              ],
              "children": []
            }
          ]
        }
      ]
    },
    "truncated": false,
    "lookupCount": 6,
    "voidLookupCount": 0
  },
  "dkim": [
    {
      "cname": [
        "selector1-digitalinkco-com._domainkey.digitalinkcompany.onmicrosoft.com"
      ],
      "records": [
        "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQmzZcOX1zrGEctMX5/DxbXepFyLRnkp7BnmO0dGBtSIxzpPwb/lj5TSO0l8GO3Yguuu7IgZSEGLxZi6Zmup4CSrJORnxYALcjo3/XQc0Oy3vrPAeWozWxiAwEVL1upb8K8hP3Zf3T8ue2qgU1HjmZ2xQid59kM6DF00uK4F9gTwIDAQAB;"
      ],
      "selector": "selector1",
      "queryName": "selector1._domainkey.digitalinkco.com"
    },
    {
      "cname": [
        "selector2-digitalinkco-com._domainkey.digitalinkcompany.onmicrosoft.com"
      ],
      "records": [
        "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVLTKF9YJuWT0HWTXlSC1l/wj3MYdvNx4JRa0/9/hRxBCw57TOVOhV7hPAsmaL42gVftjJACnApVr9MRS4XosPIg/P0UdWPe16bHXallLQ5HN1TypuZrGjRyMT/GB92hoHOJRedGzvekPhJNn1SwS/vmsIfYF3jh9WK9xBxPj2h/ja0q/ctuh93yOAfHdgzmVC88cBXGpS6EkV3UIczccJn9vnwN1vS8snvv9Ze9rBCiLhDtFeU0UDXDJWZ0mHrZV3v35aKWUemU8tDvTO0vgIQChqJmrx+7GM3pZ05NPAjeAXWpSYdxunZqWpukX/LEMxq577HnIyJcxngtKBH2jQIDAQAB;"
      ],
      "selector": "selector2",
      "queryName": "selector2._domainkey.digitalinkco.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "google",
      "queryName": "google._domainkey.digitalinkco.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20230601",
      "queryName": "20230601._domainkey.digitalinkco.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20210112",
      "queryName": "20210112._domainkey.digitalinkco.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k1",
      "queryName": "k1._domainkey.digitalinkco.com"
    },
    {
      "cname": [
        "dkim2.mcsv.net"
      ],
      "records": [
        "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA0b90ObWaLDc+i9MtTNmGeWO009hr20fIxhGg6XBT2kjZ1DTThopSe1nAndsupmcBwlQ5Q6LJ+ZAxLcujnPIxM0ZBLmgpkv8u6RfY4eFP8OLvdAW3oSuB0DyLDigQX4Sj8wBO4YIdQH6AAmBeOsidsKAFNFUCpc3vCxtBDR12U+cBg724l3sBkMQ8evnz6idnqxq9QAVYh8k4kJ+RP+6cqTdy7LjIm8xY/bQNpQIpGUAuDo2DjLcCDun9DAI4Q/3z+Q0o9QuQIDAQAB;"
      ],
      "selector": "k2",
      "queryName": "k2._domainkey.digitalinkco.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s1",
      "queryName": "s1._domainkey.digitalinkco.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s2",
      "queryName": "s2._domainkey.digitalinkco.com"
    },
    {
      "cname": [
        "digitalinkco.com.default.dkim.auto.dnssmarthost.net"
      ],
      "records": [
        "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDJWvX/IwP0APW4WvuzvdcuuV2of7/FVCAqkaRYh2SiGl/iv0aqclUCQXsU0KnCTmgkykZbpwCgNkrlTlhmJz6wNJjXGT14+RSO/61YxM+tVnLLYcdt63UKYoOvnv5G8HXp/xF+PNbp9OY1MF+1RmpeJaiRS7MVVjJEzy28qyiqcQIDAQAB;"
      ],
      "selector": "default",
      "queryName": "default._domainkey.digitalinkco.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "dkim",
      "queryName": "dkim._domainkey.digitalinkco.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "mail",
      "queryName": "mail._domainkey.digitalinkco.com"
    }
  ],
  "rootTxt": [
    "linkedin-site-verification=9351e0cd-f557-4f07-a349-9164f68ceb1e",
    "v=verifydomain MS=4913868",
    "v=spf1 +mx +ip4:35.215.98.163 include:spf.protection.outlook.com include:relay.mailchannels.net include:spf.mandrillapp.com include:digitalinkco.com.spf.auto.dnssmarthost.net ~all",
    "google-site-verification=Aa6lb1fAKZHrWdJSqXlpyJqDr4pM-c8k8_0JPHPDcKQ"
  ],
  "dmarcTxt": [
    "v=DMARC1; p=quarantine; rua=mailto:dmarc@dmarc.digitalinkco.com; sp=reject;"
  ]
}