Print reportMonitor this domain

DNS & email auth

failLast checked
Findings6 findings

Fix now (1)

  • The record requires 11 DNS lookups, over the limit of 10. Receivers treat this as a permanent error.

    SPF

    How to fix

    Remove unused includes or flatten nested ones. include, a, mx, ptr, exists, and redirect each cost one lookup.

Recommended (1)

  • DKIM selector s2 uses a 1024-bit RSA key.

    DKIM

    s2 (s2._domainkey.disruptiveadvertising.com)

    How to fix

    Rotate to an RSA key of at least 2048 bits.

Healthy (4)

  • 7 MX records found.

    MX

  • DKIM selector google has a healthy RSA key.

    DKIM

    google (google._domainkey.disruptiveadvertising.com)

  • DKIM selector s1 has a healthy RSA key.

    DKIM

    s1 (s1._domainkey.disruptiveadvertising.com)

  • DMARC policy is enforced with p=quarantine.

    DMARC

Evidence

MX

7 records
  • aspmx.l.google.compriority 10
  • alt1.aspmx.l.google.compriority 20
  • alt2.aspmx.l.google.compriority 20
  • aspmx2.googlemail.compriority 30
  • aspmx3.googlemail.compriority 30
  • aspmx4.googlemail.compriority 30
  • aspmx5.googlemail.compriority 30

SPF

11 of 10 lookups
DNS lookups11 / 10
disruptiveadvertising.com
v=spf1 mx include:_spf.google.com include:mailgun.org include:u2993885.wl136.sendgrid.net ip4:23.21.109.197 ip4:23.21.109.212 ip4:147.160.167.0/26 ip4:192.254.125.211 ip4:165.22.9.172 include:7676851.spf10.hubspotemail.net -all
include:_spf.google.com
v=spf1 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ~all
include:mailgun.org
v=spf1 include:_spf.mailgun.org include:_spf.eu.mailgun.org -all
include:_spf.mailgun.org
v=spf1 include:_spf1.mailgun.org include:_spf2.mailgun.org ~all
include:_spf1.mailgun.org
v=spf1 ip4:159.135.224.0/20 ip4:69.72.32.0/20 ip4:204.220.90.0/23 ip4:204.220.92.0/22 ~all
include:_spf2.mailgun.org
v=spf1 ip4:161.38.192.0/20 ip4:143.55.224.0/21 ip4:143.55.232.0/22 ip4:159.112.240.0/20 ip4:198.244.48.0/20 ip4:204.220.168.0/21 ip4:204.220.176.0/20 ~all
include:_spf.eu.mailgun.org
v=spf1 ip4:141.193.32.0/23 ip4:159.135.140.80/29 ip4:159.135.132.128/25 ip4:161.38.204.0/22 ip4:87.253.232.0/21 ip4:185.189.236.0/22 ip4:185.211.120.0/22 ip4:185.250.236.0/22 ip4:143.55.236.0/22 ip4:198.244.60.0/22 ip4:204.220.160.0/20 ~all
include:u2993885.wl136.sendgrid.net
v=spf1 include:sendgrid.net ~all
include:sendgrid.net
v=spf1 ip4:167.89.0.0/17 ip4:208.117.48.0/20 ip4:50.31.32.0/19 ip4:198.37.144.0/20 ip4:198.21.0.0/21 ip4:192.254.112.0/20 ip4:168.245.0.0/17 ip4:149.72.0.0/16 ip4:159.183.0.0/16 ip4:134.128.64.0/19 ip4:134.128.96.0/19 include:ab.sendgrid.net ~all
include:ab.sendgrid.net
v=spf1 ip4:223.165.113.0/24 ip4:223.165.115.0/24 ip4:223.165.118.0/23 ip4:223.165.120.0/23 ~all
include:7676851.spf10.hubspotemail.net
v=spf1 ip4:3.93.157.0/24 ip4:3.210.190.0/24 ip4:18.208.124.128/25 ip4:54.174.52.0/24 ip4:54.174.57.0/24 ip4:54.174.59.0/24 ip4:54.174.60.0/23 ip4:54.174.63.0/24 ip4:108.179.144.0/20 ip4:139.180.17.0/24 ip4:141.193.184.32/27 ip4:141.193.184.64/26 ip4:141.193.184.128/25 ip4:141.193.185.32/27 ip4:141.193.185.64/26 ip4:141.193.185.128/25 ip4:143.244.80.0/20 ip4:158.247.16.0/20 ip4:216.139.64.0/19 -all

Root TXT

13 records
  • work-accounts-domain-verification=qdBLXjmvubLGIOz56oIw00IonaiyEq
  • MS=C089DB0F4146573C0074F12FB18AC8C840D0442D
  • MS=ms72430670
  • anthropic-domain-verification-z9b0b2=GsPhMT6nai7LXBZVHHD6T7UmO
  • apple-domain-verification=ewrqxQZwuYD3n97e
  • asv=5b818c080648e54f6388ccb93952cffb
  • atlassian-domain-verification=CS/WSBFK38S0XTz99HBrJK1joidfbvWsLHw4wx2Nc1pXscdMkb63fBiuP8RHFJVT
  • google-site-verification=0_-ZHo5JgkexflJ65y28XLReF3Xa8zNNclWl0Tfnhh4
  • google-site-verification=mJ6YNBgHZXXewHxm1C4SbGfNcLfu7pUz2-IUGGON0AI
  • logmein-verification-code=36a8d23b-a2fc-4808-b415-1ea8f748f01c
  • slack-domain-verification=qDHj2ZrXSX4UcthDyMqj7Msp4V1Sf1YgOlq6wQ74
  • stripe-verification=aff58ebdc7cbed34a4820320bea87a073ec12e917e29e24b5f95b06fdca0f0e4
  • v=spf1 mx include:_spf.google.com include:mailgun.org include:u2993885.wl136.sendgrid.net ip4:23.21.109.197 ip4:23.21.109.212 ip4:147.160.167.0/26 ip4:192.254.125.211 ip4:165.22.9.172 include:7676851.spf10.hubspotemail.net -all

DKIM selectors

3 records
  • googlegoogle._domainkey.disruptiveadvertising.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUD6bxZiDQYnzBqhvRFi5laE1EGz7/88kBJ3BHeVzChEi3FsJOu3xGb7ceRmOTxATe9Qmzo3PNIU9Fd39FoeV6skmNgArv6Zus9JROpdZriogWi1g1c5qmEQeHBRYMaT6Xz//Kw1EjftTJiIEwmT/k3dtdC2WNXfwGarAXVO/d+aVR2Fw5Ioq8hmB42Ewyai8 TQ5DulPQXOHOdOlDSwsYqN041xGTrRF1QFBa7OWKNmKu136u/9n2S3/2zZm/P5qjB2JImILe04BgpBqnEvJSN5sqoMopP5uhFWYVe+B8e3TO4WLM1oKPCgyRRRcJsvmTaZsns0bMxQotxIRg9hkAQIDAQAB
  • s1s1._domainkey.disruptiveadvertising.com
    CNAME s1.domainkey.u2993885.wl136.sendgrid.net
    • k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBrcuDdsmcpq72Er+2dJgt93ZxJ7b+9LR3oPcXS7leRV+B8UvwInEOvnyjGLFYsEv21Hslug8vW0L8pNXYVv4F5I27qerYr4urB21afsdhRbfafulGewOZDVxueHWNC24iG/34HIGawpBBOeXAuKFuScWTAttxKjBxRJM/RkxQw7+Vbcdagd19YiuYGGfgJ82HoTZWuAzDFM1ZvCJkeZ6lxMoLzmX+fwhLObKJBdmj0lcRjbMFbX9LuvOVVRPMrEdMwVO8mBuGtVYY+kPpJcBXuldIRx5UMslXeXubl3uzdt5h8bTQT6eB6UFA1mnXlgLHHvTdJjPZuS6cNW7a5HDwIDAQAB
  • s2s2._domainkey.disruptiveadvertising.com
    CNAME s2.domainkey.u2993885.wl136.sendgrid.net
    • k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6gOSQDb1I94dWp3sihrfqNMzn0OOhEhlOye1cQcROCNBtmOfO6w0kNjCBh5irWxmW/Lnen0sJiCRRB3boptHR6OMUzNjG9j8qHKRZQoQk6th6QU2bJM8mSOI2EHlLSOhmjN8lPY2GtVsYPmJyfY9wvU0HzRKZkwbfkldrkTDfoQIDAQAB

Probed with no records: selector1, selector2, 20230601, 20210112, k1, k2, default, dkim, mail

DMARC

1 record
v=DMARC1; p=quarantine; pct=100; fo=1; ri=3600; rua=mailto:e23e0fc7@dmarc.mailgun.org,mailto:7ff9e6e1@inbox.ondmarc.com,mailto:da68028404a2416b99acadb2c88a6a9c@dmarc-reports.cloudflare.net,mailto:dmarcreports@disruptiveadvertising.com; ruf=mailto:e23e0fc7@dmarc.mailgun.org,mailto:7ff9e6e1@inbox.ondmarc.com;
v=DMARC1
Identifies this TXT record as a DMARC policy. Must be the first tag.
p=quarantine
Receivers treat failing mail with suspicion, typically sending it to spam.
pct=100
The policy applies to all failing mail.
fo=1
Controls when failure reports are generated, e.g. 1 asks for a report when any underlying check fails.
ri=3600
Requested interval between aggregate reports, in seconds. Most receivers report daily regardless.
rua=mailto:e23e0fc7@dmarc.mailgun.org,mailto:7ff9e6e1@inbox.ondmarc.com,mailto:da68028404a2416b99acadb2c88a6a9c@dmarc-reports.cloudflare.net,mailto:dmarcreports@disruptiveadvertising.com
Receivers send daily aggregate reports about passing and failing mail to e23e0fc7@dmarc.mailgun.org, 7ff9e6e1@inbox.ondmarc.com, da68028404a2416b99acadb2c88a6a9c@dmarc-reports.cloudflare.net, dmarcreports@disruptiveadvertising.com.
ruf=mailto:e23e0fc7@dmarc.mailgun.org,mailto:7ff9e6e1@inbox.ondmarc.com
Receivers may send per-message failure reports to e23e0fc7@dmarc.mailgun.org, 7ff9e6e1@inbox.ondmarc.com. Many receivers skip these for privacy reasons.
sp=quarantinedefault
No sp= tag is published, so subdomains inherit the domain's p= policy.
adkim=rdefault
No adkim= tag is published, so DKIM alignment is relaxed: any subdomain of the From domain may sign.
aspf=rdefault
No aspf= tag is published, so SPF alignment is relaxed: the envelope sender may be any subdomain of the From domain.
Raw JSON
{
  "mx": [
    {
      "type": "MX",
      "exchange": "aspmx.l.google.com",
      "priority": 10
    },
    {
      "type": "MX",
      "exchange": "alt1.aspmx.l.google.com",
      "priority": 20
    },
    {
      "type": "MX",
      "exchange": "alt2.aspmx.l.google.com",
      "priority": 20
    },
    {
      "type": "MX",
      "exchange": "aspmx2.googlemail.com",
      "priority": 30
    },
    {
      "type": "MX",
      "exchange": "aspmx3.googlemail.com",
      "priority": 30
    },
    {
      "type": "MX",
      "exchange": "aspmx4.googlemail.com",
      "priority": 30
    },
    {
      "type": "MX",
      "exchange": "aspmx5.googlemail.com",
      "priority": 30
    }
  ],
  "spf": {
    "tree": {
      "via": "root",
      "domain": "disruptiveadvertising.com",
      "issues": [],
      "records": [
        "v=spf1 mx include:_spf.google.com include:mailgun.org include:u2993885.wl136.sendgrid.net ip4:23.21.109.197 ip4:23.21.109.212 ip4:147.160.167.0/26 ip4:192.254.125.211 ip4:165.22.9.172 include:7676851.spf10.hubspotemail.net -all"
      ],
      "children": [
        {
          "via": "include",
          "domain": "_spf.google.com",
          "issues": [],
          "records": [
            "v=spf1 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ~all"
          ],
          "children": []
        },
        {
          "via": "include",
          "domain": "mailgun.org",
          "issues": [],
          "records": [
            "v=spf1 include:_spf.mailgun.org include:_spf.eu.mailgun.org -all"
          ],
          "children": [
            {
              "via": "include",
              "domain": "_spf.mailgun.org",
              "issues": [],
              "records": [
                "v=spf1 include:_spf1.mailgun.org include:_spf2.mailgun.org ~all"
              ],
              "children": [
                {
                  "via": "include",
                  "domain": "_spf1.mailgun.org",
                  "issues": [],
                  "records": [
                    "v=spf1 ip4:159.135.224.0/20 ip4:69.72.32.0/20 ip4:204.220.90.0/23 ip4:204.220.92.0/22 ~all"
                  ],
                  "children": []
                },
                {
                  "via": "include",
                  "domain": "_spf2.mailgun.org",
                  "issues": [],
                  "records": [
                    "v=spf1 ip4:161.38.192.0/20 ip4:143.55.224.0/21 ip4:143.55.232.0/22 ip4:159.112.240.0/20 ip4:198.244.48.0/20 ip4:204.220.168.0/21 ip4:204.220.176.0/20 ~all"
                  ],
                  "children": []
                }
              ]
            },
            {
              "via": "include",
              "domain": "_spf.eu.mailgun.org",
              "issues": [],
              "records": [
                "v=spf1 ip4:141.193.32.0/23 ip4:159.135.140.80/29 ip4:159.135.132.128/25 ip4:161.38.204.0/22 ip4:87.253.232.0/21 ip4:185.189.236.0/22 ip4:185.211.120.0/22 ip4:185.250.236.0/22 ip4:143.55.236.0/22 ip4:198.244.60.0/22 ip4:204.220.160.0/20 ~all"
              ],
              "children": []
            }
          ]
        },
        {
          "via": "include",
          "domain": "u2993885.wl136.sendgrid.net",
          "issues": [],
          "records": [
            "v=spf1 include:sendgrid.net ~all"
          ],
          "children": [
            {
              "via": "include",
              "domain": "sendgrid.net",
              "issues": [],
              "records": [
                "v=spf1 ip4:167.89.0.0/17 ip4:208.117.48.0/20 ip4:50.31.32.0/19 ip4:198.37.144.0/20 ip4:198.21.0.0/21 ip4:192.254.112.0/20 ip4:168.245.0.0/17 ip4:149.72.0.0/16 ip4:159.183.0.0/16 ip4:134.128.64.0/19 ip4:134.128.96.0/19 include:ab.sendgrid.net ~all"
              ],
              "children": [
                {
                  "via": "include",
                  "domain": "ab.sendgrid.net",
                  "issues": [],
                  "records": [
                    "v=spf1 ip4:223.165.113.0/24 ip4:223.165.115.0/24 ip4:223.165.118.0/23 ip4:223.165.120.0/23 ~all"
                  ],
                  "children": []
                }
              ]
            }
          ]
        },
        {
          "via": "include",
          "domain": "7676851.spf10.hubspotemail.net",
          "issues": [],
          "records": [
            "v=spf1 ip4:3.93.157.0/24 ip4:3.210.190.0/24 ip4:18.208.124.128/25 ip4:54.174.52.0/24 ip4:54.174.57.0/24 ip4:54.174.59.0/24 ip4:54.174.60.0/23 ip4:54.174.63.0/24 ip4:108.179.144.0/20 ip4:139.180.17.0/24 ip4:141.193.184.32/27 ip4:141.193.184.64/26 ip4:141.193.184.128/25 ip4:141.193.185.32/27 ip4:141.193.185.64/26 ip4:141.193.185.128/25 ip4:143.244.80.0/20 ip4:158.247.16.0/20 ip4:216.139.64.0/19 -all"
          ],
          "children": []
        }
      ]
    },
    "truncated": false,
    "lookupCount": 11,
    "voidLookupCount": 0
  },
  "dkim": [
    {
      "cname": [],
      "records": [],
      "selector": "selector1",
      "queryName": "selector1._domainkey.disruptiveadvertising.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "selector2",
      "queryName": "selector2._domainkey.disruptiveadvertising.com"
    },
    {
      "cname": [],
      "records": [
        "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUD6bxZiDQYnzBqhvRFi5laE1EGz7/88kBJ3BHeVzChEi3FsJOu3xGb7ceRmOTxATe9Qmzo3PNIU9Fd39FoeV6skmNgArv6Zus9JROpdZriogWi1g1c5qmEQeHBRYMaT6Xz//Kw1EjftTJiIEwmT/k3dtdC2WNXfwGarAXVO/d+aVR2Fw5Ioq8hmB42Ewyai8 TQ5DulPQXOHOdOlDSwsYqN041xGTrRF1QFBa7OWKNmKu136u/9n2S3/2zZm/P5qjB2JImILe04BgpBqnEvJSN5sqoMopP5uhFWYVe+B8e3TO4WLM1oKPCgyRRRcJsvmTaZsns0bMxQotxIRg9hkAQIDAQAB"
      ],
      "selector": "google",
      "queryName": "google._domainkey.disruptiveadvertising.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20230601",
      "queryName": "20230601._domainkey.disruptiveadvertising.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20210112",
      "queryName": "20210112._domainkey.disruptiveadvertising.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k1",
      "queryName": "k1._domainkey.disruptiveadvertising.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k2",
      "queryName": "k2._domainkey.disruptiveadvertising.com"
    },
    {
      "cname": [
        "s1.domainkey.u2993885.wl136.sendgrid.net"
      ],
      "records": [
        "k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBrcuDdsmcpq72Er+2dJgt93ZxJ7b+9LR3oPcXS7leRV+B8UvwInEOvnyjGLFYsEv21Hslug8vW0L8pNXYVv4F5I27qerYr4urB21afsdhRbfafulGewOZDVxueHWNC24iG/34HIGawpBBOeXAuKFuScWTAttxKjBxRJM/RkxQw7+Vbcdagd19YiuYGGfgJ82HoTZWuAzDFM1ZvCJkeZ6lxMoLzmX+fwhLObKJBdmj0lcRjbMFbX9LuvOVVRPMrEdMwVO8mBuGtVYY+kPpJcBXuldIRx5UMslXeXubl3uzdt5h8bTQT6eB6UFA1mnXlgLHHvTdJjPZuS6cNW7a5HDwIDAQAB"
      ],
      "selector": "s1",
      "queryName": "s1._domainkey.disruptiveadvertising.com"
    },
    {
      "cname": [
        "s2.domainkey.u2993885.wl136.sendgrid.net"
      ],
      "records": [
        "k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6gOSQDb1I94dWp3sihrfqNMzn0OOhEhlOye1cQcROCNBtmOfO6w0kNjCBh5irWxmW/Lnen0sJiCRRB3boptHR6OMUzNjG9j8qHKRZQoQk6th6QU2bJM8mSOI2EHlLSOhmjN8lPY2GtVsYPmJyfY9wvU0HzRKZkwbfkldrkTDfoQIDAQAB"
      ],
      "selector": "s2",
      "queryName": "s2._domainkey.disruptiveadvertising.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "default",
      "queryName": "default._domainkey.disruptiveadvertising.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "dkim",
      "queryName": "dkim._domainkey.disruptiveadvertising.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "mail",
      "queryName": "mail._domainkey.disruptiveadvertising.com"
    }
  ],
  "rootTxt": [
    "work-accounts-domain-verification=qdBLXjmvubLGIOz56oIw00IonaiyEq",
    "MS=C089DB0F4146573C0074F12FB18AC8C840D0442D",
    "MS=ms72430670",
    "anthropic-domain-verification-z9b0b2=GsPhMT6nai7LXBZVHHD6T7UmO",
    "apple-domain-verification=ewrqxQZwuYD3n97e",
    "asv=5b818c080648e54f6388ccb93952cffb",
    "atlassian-domain-verification=CS/WSBFK38S0XTz99HBrJK1joidfbvWsLHw4wx2Nc1pXscdMkb63fBiuP8RHFJVT",
    "google-site-verification=0_-ZHo5JgkexflJ65y28XLReF3Xa8zNNclWl0Tfnhh4",
    "google-site-verification=mJ6YNBgHZXXewHxm1C4SbGfNcLfu7pUz2-IUGGON0AI",
    "logmein-verification-code=36a8d23b-a2fc-4808-b415-1ea8f748f01c",
    "slack-domain-verification=qDHj2ZrXSX4UcthDyMqj7Msp4V1Sf1YgOlq6wQ74",
    "stripe-verification=aff58ebdc7cbed34a4820320bea87a073ec12e917e29e24b5f95b06fdca0f0e4",
    "v=spf1 mx include:_spf.google.com include:mailgun.org include:u2993885.wl136.sendgrid.net ip4:23.21.109.197 ip4:23.21.109.212 ip4:147.160.167.0/26 ip4:192.254.125.211 ip4:165.22.9.172 include:7676851.spf10.hubspotemail.net -all"
  ],
  "dmarcTxt": [
    "v=DMARC1; p=quarantine; pct=100; fo=1; ri=3600; rua=mailto:e23e0fc7@dmarc.mailgun.org,mailto:7ff9e6e1@inbox.ondmarc.com,mailto:da68028404a2416b99acadb2c88a6a9c@dmarc-reports.cloudflare.net,mailto:dmarcreports@disruptiveadvertising.com; ruf=mailto:e23e0fc7@dmarc.mailgun.org,mailto:7ff9e6e1@inbox.ondmarc.com;"
  ]
}