DNS & email auth

warnLast checked
Findings4 findings
  • 5 MX records found.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector google has a healthy RSA key.

    google (google._domainkey.alexvainer.com)

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

Raw evidence

MX

5 records
  • ASPMX.L.GOOGLE.compriority 1
  • ALT1.ASPMX.L.GOOGLE.compriority 5
  • ALT2.ASPMX.L.GOOGLE.compriority 5
  • ALT3.ASPMX.L.GOOGLE.compriority 10
  • ALT4.ASPMX.L.GOOGLE.compriority 10

Root TXT

2 records
  • v=spf1 include:_spf.google.com ~all
  • google-site-verification=p0MDjlPlosDElGBppZrFpAYLV_QITRyXEYPIXSrMbuY

DKIM selectors

1 record
  • selector1selector1._domainkey.alexvainer.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.alexvainer.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.alexvainer.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaPPkdrFWPwRYk5S0/vVPvy9vj8xHB9pQhwVdyP0+dBBzgKDy9exWJPVRD///MSyHKJabeS4SmkDwIeZIjdLtPUqtlmM2gxSJQmEWI3kO49U5h16tfoT1WGSJ7eEYCFxm+d55lkJgz0PnuB+CrSGy5q+DSiPc1WFUoAX9SjQyPNjWMXG23hXqg5D14Qg5jcJG3Mxc1VaotilImvBULZ9btYzbCjNVcv5fb3DSiBqkWNVuYuce3Bvg73MGXKFTrgoDmHGlQBDg0O08IOJ/UTxtQZU7R5QRSPMQJcPWKVAekaDSZa1MptqJEP+Ohj/9z4VCvucVZ1dJO0JQDU22rsRVQIDAQAB
  • 2023060120230601._domainkey.alexvainer.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.alexvainer.com

    No TXT records returned for this selector.

  • k1k1._domainkey.alexvainer.com

    No TXT records returned for this selector.

  • k2k2._domainkey.alexvainer.com

    No TXT records returned for this selector.

  • s1s1._domainkey.alexvainer.com

    No TXT records returned for this selector.

  • s2s2._domainkey.alexvainer.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.alexvainer.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.alexvainer.com

    No TXT records returned for this selector.

  • mailmail._domainkey.alexvainer.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=none; rua=mailto:ipm47w2@ar.glockapps.com,mailto:re+f400cc55c3e6@inbound.dmarcdigests.com; ruf=mailto:ipm47w2@fr.glockapps.com; adkim=r; aspf=r; fo=1