DNS & email auth

warnLast checked
Findings4 findings

Recommended (2)

  • The record uses softfail (~all), which is weaker than fail (-all).

    SPF
  • DMARC policy is p=none, so it monitors but does not enforce.

    DMARC

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

Healthy (2)

  • 5 MX records found.

    MX
  • DKIM selector google has a healthy RSA key.

    DKIM

    google (google._domainkey.digitaljas.com)

Evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • aspmx2.googlemail.compriority 10
  • aspmx3.googlemail.compriority 10

Root TXT

3 records
  • google-site-verification=U2bXJCPCd57RO88tGISyZ6lPudB8qcDLwE-FLCsxJyQ
  • v=spf1 include:_spf.google.com ~all
  • google-site-verification=_frmGPVCTbCLYoB-8hpF9-qMQAO4MS31Uc7A6L4IQZs

DKIM selectors

1 record
  • selector1selector1._domainkey.digitaljas.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.digitaljas.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.digitaljas.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEGQ91k4si8zZkkKip4uQsJvBvktf3Lfsv6bwj71BmmQFhWBUTGyuKZnpO6q2I9KQfklf9fzZRZdGtvAySJ5/i2V6tGY3gZYYV6uKgel0G794b4xIUGTQ66B2stNyrcGbROscGoPYMeVmJe7cEN2yimK4lpoMp2hT4/XEEKJoynTQDXS3INrKYilXGwR1Vid2TWyGwag8EJCKuOfWpC1RMKjZwfcfeXQLHPEng8RlKVByuMKwByduU8yEDwILHAaSbYt9rltu1vkc/wSmWdHEcVgKkzcE88GdJNEE9NxH3bSn+gXp8mXaKhhB9aTX5YtW8tAQ5dVkfXuCV+HeVthmwIDAQAB
  • 2023060120230601._domainkey.digitaljas.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.digitaljas.com

    No TXT records returned for this selector.

  • k1k1._domainkey.digitaljas.com

    No TXT records returned for this selector.

  • k2k2._domainkey.digitaljas.com

    No TXT records returned for this selector.

  • s1s1._domainkey.digitaljas.com

    No TXT records returned for this selector.

  • s2s2._domainkey.digitaljas.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.digitaljas.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.digitaljas.com

    No TXT records returned for this selector.

  • mailmail._domainkey.digitaljas.com

    No TXT records returned for this selector.

DMARC

1 record
v=DMARC1; p=none; rua=mailto:4ecd16538f07.a@dmarcinput.com; ruf=mailto:4ecd16538f07.f@dmarcinput.com; fo=1
v=DMARC1
Identifies this TXT record as a DMARC policy. Must be the first tag.
p=none
Monitoring only: receivers deliver failing mail normally and just send reports.
rua=mailto:4ecd16538f07.a@dmarcinput.com
Receivers send daily aggregate reports about passing and failing mail to 4ecd16538f07.a@dmarcinput.com.
ruf=mailto:4ecd16538f07.f@dmarcinput.com
Receivers may send per-message failure reports to 4ecd16538f07.f@dmarcinput.com. Many receivers skip these for privacy reasons.
fo=1
Controls when failure reports are generated, e.g. 1 asks for a report when any underlying check fails.
sp=nonedefault
No sp= tag is published, so subdomains inherit the domain's p= policy.
pct=100default
No pct= tag is published, so the policy applies to all failing mail.
adkim=rdefault
No adkim= tag is published, so DKIM alignment is relaxed: any subdomain of the From domain may sign.
aspf=rdefault
No aspf= tag is published, so SPF alignment is relaxed: the envelope sender may be any subdomain of the From domain.
Raw JSON