DNS & email auth

warnLast checked
Findings4 findings
  • 5 MX records found.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector google has a healthy RSA key.

    google (google._domainkey.forestcitydigital.com)

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

Raw evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • alt3.aspmx.l.google.compriority 10
  • alt4.aspmx.l.google.compriority 10

Root TXT

7 records
  • google-site-verification=EMw63_PMfo12lHtdcK5HjErk5YqHGDfU4WKt4hTED14
  • 1password-site-verification=P73PDYPDYZHSTMFHJ4KSYAIZUA
  • slack-domain-verification=Gc33DQE4Gx087aGRhmFBePySAzRQMscsaF5ukWPZ
  • v=spf1 include:_spf.google.com include:46743163.spf05.hubspotemail.net ~all
  • google-site-verification=daaJvAVoGbA9R2mStBJ1ptR4LFanBginx8d1tHYuVT0
  • openai-domain-verification=dv-Lkf9JaQdNgEivPcdbIGx30tW
  • miro-verification=f90d624499cf5aa95cfa253c0a08bb28668e92b0

DKIM selectors

1 record
  • selector1selector1._domainkey.forestcitydigital.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.forestcitydigital.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.forestcitydigital.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA171YDkAk9nG4rlWGzmjon8mn5IETiAjPP6O8yEiU5CNeFzEBF6eM3n0wEj7EtNkjvIYtZ402wXIeJbHp/BFC85E8QQReEHGDlVaeVQz2St6aKp6dG+LiVf+OYTajfr65FL4LPuXf3GMizZ510Sxw/3rEAfPiKrRVv8vls8i2sX/NzWoWSl1RyEjmMH05xrtxO+AJh0I/i1KZ2gHPTRy2hOk/c3pCl8CA5LgytFM2kd73+h9D7kv17d01AwWqT/vBwKPyjbBwfSAHayyQ1W/6ZAPnJaZuN8qY8zS/skGFx0B9s70xxWjgjDI9+QhEL62u/eG27o2DktNodWUGMmPKjQIDAQAB
  • 2023060120230601._domainkey.forestcitydigital.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.forestcitydigital.com

    No TXT records returned for this selector.

  • k1k1._domainkey.forestcitydigital.com

    No TXT records returned for this selector.

  • k2k2._domainkey.forestcitydigital.com

    No TXT records returned for this selector.

  • s1s1._domainkey.forestcitydigital.com

    No TXT records returned for this selector.

  • s2s2._domainkey.forestcitydigital.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.forestcitydigital.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.forestcitydigital.com

    No TXT records returned for this selector.

  • mailmail._domainkey.forestcitydigital.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1;p=none;sp=none;pct=100;rua=mailto:kenny@forestcitydigital.com;ruf=mailto:kenny@forestcitydigital.com;ri=86400;aspf=r;adkim=r;fo=0;