← Interactive report

disruptiveadvertising.com

failScanned ·
Summary

disruptiveadvertising.com has critical problems

1To fix now
1Recommended
6Healthy

DNS & email auth

failLast checked
Findings6 findings

Fix now (1)

  • The record requires 11 DNS lookups, over the limit of 10. Receivers treat this as a permanent error.

    SPF

    How to fix

    Remove unused includes or flatten nested ones. include, a, mx, ptr, exists, and redirect each cost one lookup.

Recommended (1)

  • DKIM selector s2 uses a 1024-bit RSA key.

    DKIM

    s2 (s2._domainkey.disruptiveadvertising.com)

    How to fix

    Rotate to an RSA key of at least 2048 bits.

Healthy (4)

  • 7 MX records found.

    MX
  • DKIM selector google has a healthy RSA key.

    DKIM

    google (google._domainkey.disruptiveadvertising.com)

  • DKIM selector s1 has a healthy RSA key.

    DKIM

    s1 (s1._domainkey.disruptiveadvertising.com)

  • DMARC policy is enforced with p=quarantine.

    DMARC

Evidence

MX

7 records
  • aspmx.l.google.compriority 10
  • alt1.aspmx.l.google.compriority 20
  • alt2.aspmx.l.google.compriority 20
  • aspmx2.googlemail.compriority 30
  • aspmx3.googlemail.compriority 30
  • aspmx4.googlemail.compriority 30
  • aspmx5.googlemail.compriority 30

SPF

11 of 10 lookups
DNS lookups11 / 10
disruptiveadvertising.com
include:_spf.google.com
include:mailgun.org
include:_spf.mailgun.org
include:_spf1.mailgun.org
include:_spf2.mailgun.org
include:_spf.eu.mailgun.org
include:u2993885.wl136.sendgrid.net
include:sendgrid.net
include:ab.sendgrid.net
include:7676851.spf10.hubspotemail.net

Root TXT

13 records
  • work-accounts-domain-verification=qdBLXjmvubLGIOz56oIw00IonaiyEq
  • MS=C089DB0F4146573C0074F12FB18AC8C840D0442D
  • MS=ms72430670
  • anthropic-domain-verification-z9b0b2=GsPhMT6nai7LXBZVHHD6T7UmO
  • apple-domain-verification=ewrqxQZwuYD3n97e
  • asv=5b818c080648e54f6388ccb93952cffb
  • atlassian-domain-verification=CS/WSBFK38S0XTz99HBrJK1joidfbvWsLHw4wx2Nc1pXscdMkb63fBiuP8RHFJVT
  • google-site-verification=0_-ZHo5JgkexflJ65y28XLReF3Xa8zNNclWl0Tfnhh4
  • google-site-verification=mJ6YNBgHZXXewHxm1C4SbGfNcLfu7pUz2-IUGGON0AI
  • logmein-verification-code=36a8d23b-a2fc-4808-b415-1ea8f748f01c
  • slack-domain-verification=qDHj2ZrXSX4UcthDyMqj7Msp4V1Sf1YgOlq6wQ74
  • stripe-verification=aff58ebdc7cbed34a4820320bea87a073ec12e917e29e24b5f95b06fdca0f0e4
  • v=spf1 mx include:_spf.google.com include:mailgun.org include:u2993885.wl136.sendgrid.net ip4:23.21.109.197 ip4:23.21.109.212 ip4:147.160.167.0/26 ip4:192.254.125.211 ip4:165.22.9.172 include:7676851.spf10.hubspotemail.net -all

DKIM selectors

3 records
  • googlegoogle._domainkey.disruptiveadvertising.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUD6bxZiDQYnzBqhvRFi5laE1EGz7/88kBJ3BHeVzChEi3FsJOu3xGb7ceRmOTxATe9Qmzo3PNIU9Fd39FoeV6skmNgArv6Zus9JROpdZriogWi1g1c5qmEQeHBRYMaT6Xz//Kw1EjftTJiIEwmT/k3dtdC2WNXfwGarAXVO/d+aVR2Fw5Ioq8hmB42Ewyai8 TQ5DulPQXOHOdOlDSwsYqN041xGTrRF1QFBa7OWKNmKu136u/9n2S3/2zZm/P5qjB2JImILe04BgpBqnEvJSN5sqoMopP5uhFWYVe+B8e3TO4WLM1oKPCgyRRRcJsvmTaZsns0bMxQotxIRg9hkAQIDAQAB
  • s1s1._domainkey.disruptiveadvertising.com
    CNAME s1.domainkey.u2993885.wl136.sendgrid.net
    • k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBrcuDdsmcpq72Er+2dJgt93ZxJ7b+9LR3oPcXS7leRV+B8UvwInEOvnyjGLFYsEv21Hslug8vW0L8pNXYVv4F5I27qerYr4urB21afsdhRbfafulGewOZDVxueHWNC24iG/34HIGawpBBOeXAuKFuScWTAttxKjBxRJM/RkxQw7+Vbcdagd19YiuYGGfgJ82HoTZWuAzDFM1ZvCJkeZ6lxMoLzmX+fwhLObKJBdmj0lcRjbMFbX9LuvOVVRPMrEdMwVO8mBuGtVYY+kPpJcBXuldIRx5UMslXeXubl3uzdt5h8bTQT6eB6UFA1mnXlgLHHvTdJjPZuS6cNW7a5HDwIDAQAB
  • s2s2._domainkey.disruptiveadvertising.com
    CNAME s2.domainkey.u2993885.wl136.sendgrid.net
    • k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6gOSQDb1I94dWp3sihrfqNMzn0OOhEhlOye1cQcROCNBtmOfO6w0kNjCBh5irWxmW/Lnen0sJiCRRB3boptHR6OMUzNjG9j8qHKRZQoQk6th6QU2bJM8mSOI2EHlLSOhmjN8lPY2GtVsYPmJyfY9wvU0HzRKZkwbfkldrkTDfoQIDAQAB

Probed with no records: selector1, selector2, 20230601, 20210112, k1, k2, default, dkim, mail

DMARC

1 record
v=DMARC1; p=quarantine; pct=100; fo=1; ri=3600; rua=mailto:e23e0fc7@dmarc.mailgun.org,mailto:7ff9e6e1@inbox.ondmarc.com,mailto:da68028404a2416b99acadb2c88a6a9c@dmarc-reports.cloudflare.net,mailto:dmarcreports@disruptiveadvertising.com; ruf=mailto:e23e0fc7@dmarc.mailgun.org,mailto:7ff9e6e1@inbox.ondmarc.com;
v=DMARC1
Identifies this TXT record as a DMARC policy. Must be the first tag.
p=quarantine
Receivers treat failing mail with suspicion, typically sending it to spam.
pct=100
The policy applies to all failing mail.
fo=1
Controls when failure reports are generated, e.g. 1 asks for a report when any underlying check fails.
ri=3600
Requested interval between aggregate reports, in seconds. Most receivers report daily regardless.
rua=mailto:e23e0fc7@dmarc.mailgun.org,mailto:7ff9e6e1@inbox.ondmarc.com,mailto:da68028404a2416b99acadb2c88a6a9c@dmarc-reports.cloudflare.net,mailto:dmarcreports@disruptiveadvertising.com
Receivers send daily aggregate reports about passing and failing mail to e23e0fc7@dmarc.mailgun.org, 7ff9e6e1@inbox.ondmarc.com, da68028404a2416b99acadb2c88a6a9c@dmarc-reports.cloudflare.net, dmarcreports@disruptiveadvertising.com.
ruf=mailto:e23e0fc7@dmarc.mailgun.org,mailto:7ff9e6e1@inbox.ondmarc.com
Receivers may send per-message failure reports to e23e0fc7@dmarc.mailgun.org, 7ff9e6e1@inbox.ondmarc.com. Many receivers skip these for privacy reasons.
sp=quarantinedefault
No sp= tag is published, so subdomains inherit the domain's p= policy.
adkim=rdefault
No adkim= tag is published, so DKIM alignment is relaxed: any subdomain of the From domain may sign.
aspf=rdefault
No aspf= tag is published, so SPF alignment is relaxed: the envelope sender may be any subdomain of the From domain.
Raw JSON

SSL & domain expiry

passLast checked
Findings2 findings

Healthy (2)

  • The TLS certificate is valid until Oct 19, 2026.

    TLS certificate

    Issued by Google Trust Services.

  • Registration expiry is not published for this domain.

    Domain expiry

    The registry does not expose expiry data over RDAP.

Evidence

TLS certificate

port 443
Issued to
disruptiveadvertising.com
Issued by
Google Trust Services
Valid from
Valid until
Days remaining
43 days
Verification
trusted

Registration

unpublished

The registry does not expose expiry data over RDAP.

Raw JSON

Generated by Internet Posture · internetposture.com