Monitor this domain

DNS & email auth

warnLast checked
Findings9 findings

  • 5 MX records found.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector s2 uses a 1024-bit RSA key.

    s2 (s2._domainkey.kopfconsulting.org); use at least 2048 bits.

  • DKIM selector default uses a 1024-bit RSA key.

    default (default._domainkey.kopfconsulting.org); use at least 2048 bits.

  • DKIM selector google has a healthy RSA key.

    google (google._domainkey.kopfconsulting.org)

  • DKIM selector k2 has a healthy RSA key.

    k2 (k2._domainkey.kopfconsulting.org)

  • DKIM selector s1 has a healthy RSA key.

    s1 (s1._domainkey.kopfconsulting.org)

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    Add rua=mailto:you@example.com to receive daily aggregate reports from receivers.

Raw evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • alt3.aspmx.l.google.compriority 10
  • alt4.aspmx.l.google.compriority 10

Root TXT

4 records
  • google-site-verification=twzqdQ_VJWLwyN27FLSy7fptDJWfhnz52RU44p65QcA
  • alt2.aspmx.l.google.com with priority 5
  • v=spf1 +a +mx include:kopfconsulting.org.spf.auto.dnssmarthost.net include:_spf.wishpond.net ~all
  • wp-site-verification=QECm8l4Zd7kzxgi5wDi2

DKIM selectors

5 records
  • selector1selector1._domainkey.kopfconsulting.org

    No TXT records returned for this selector.

  • selector2selector2._domainkey.kopfconsulting.org

    No TXT records returned for this selector.

  • googlegoogle._domainkey.kopfconsulting.org
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxUWbov4z6agvDbNCQSJIc6AIODE04hISsbks7DwAGW7bEIkKqn/mhQzq5BD74wmIl6LgDfUyTEgqSzyi+ruU1xboTh4x93TA/+pwiynWNAM9edHB0IWYckxs3iuZvufBhgcXdy1q/TPXpfn6xmMkpdIFrYj3ntJnR1cGBcYS/UMsXmx6DWDcpVJpgfxeIsXBoulGcomhzAdQ5W/mF4BXkBnHO6j9SyyylkdvdEindMLQ6S5SOYCbsr9V1t+9SO8ZDeq5+tMKuvXC7zWofNGt4poK3SD6DGG2KUen1Wy4RrI/SCiQRP9lLgmZp0LIi19xE6atge6lZ+uIm9c+0OhYQIDAQAB
  • 2023060120230601._domainkey.kopfconsulting.org

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.kopfconsulting.org

    No TXT records returned for this selector.

  • k1k1._domainkey.kopfconsulting.org

    No TXT records returned for this selector.

  • k2k2._domainkey.kopfconsulting.org
    CNAME dkim2.mcsv.net
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA0b90ObWaLDc+i9MtTNmGeWO009hr20fIxhGg6XBT2kjZ1DTThopSe1nAndsupmcBwlQ5Q6LJ+ZAxLcujnPIxM0ZBLmgpkv8u6RfY4eFP8OLvdAW3oSuB0DyLDigQX4Sj8wBO4YIdQH6AAmBeOsidsKAFNFUCpc3vCxtBDR12U+cBg724l3sBkMQ8evnz6idnqxq9QAVYh8k4kJ+RP+6cqTdy7LjIm8xY/bQNpQIpGUAuDo2DjLcCDun9DAI4Q/3z+Q0o9QuQIDAQAB;
  • s1s1._domainkey.kopfconsulting.org
    CNAME s1.domainkey.u8018252.wl003.sendgrid.net
    • k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGdLGKCuhqVoetYWyFcRlnEnhSGVUsfiwwQoXvqPe9lFhc7U0UpCQjXWjkRwUyugs5///XuK87O0UMfvTdTW/rjlgLweazdNFTWn7JT4VDFxwcBOH76RzC1qUH8/TFI/h5sNH2I79FFZvObf5IHSeQiRiJG6fCo3T5Xum0P5Pbg66b0O2m4Qz+NRhGFFhBYLlzSUENoGjAEXi8DCHkhtJsidKKjQP4Z3qtmJ4gEZS24O8VegwmfoBWbgIFHgOiZIn+pjO92TwZnEpcSNkPdBS+3pTVqd7PkfvzMF3d3bXuj2vcJiDAEw2LZ+hcJENiQVkdbdAUJ0m1eorTvKf7QqFQIDAQAB
  • s2s2._domainkey.kopfconsulting.org
    CNAME s2.domainkey.u8018252.wl003.sendgrid.net
    • k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC1/xJTd7CaGz7KMC+k6JOkaXC0ccMoNNdg77nWHdSI70fw3pxLfJosjN3TRn3wS18nlDNMZ/S+McuMcPK8GlABu+L2abjEiYlVnJcsFrN9YmcUVeZ9lI5XfueOHbZi/CPAVdRowZVB2axW44d6e6nnlTbRJyVpJgsdK1Uoy0zmmwIDAQAB
  • defaultdefault._domainkey.kopfconsulting.org
    CNAME kopfconsulting.org.default.dkim.auto.dnssmarthost.net
    • v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxVNdAorB4T480i2/7kdWZlfSKTfczWv1iDKF8I6HM1BJxKVUyn6mMo2nEKXLbzFiyXAOS3bMoqQQamipT3qPEF1yDFH7F4Ik6nz6OZQdHHy0jFJA8dmmd5EJKbJ1PRWuqaV1gYXFi3sigcaxfn8rzZK5JAx6LcbfiuTlGCzzDywIDAQAB;
  • dkimdkim._domainkey.kopfconsulting.org

    No TXT records returned for this selector.

  • mailmail._domainkey.kopfconsulting.org

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=none; aspf=r; adkim=r;