DNS & email auth

warnLast checked
Findings5 findings
  • 7 MX records found.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector k1 uses a 1024-bit RSA key.

    k1 (k1._domainkey.digitalpeaks.net); use at least 2048 bits.

  • DKIM selector google has a healthy RSA key.

    google (google._domainkey.digitalpeaks.net)

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

Raw evidence

MX

7 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • alt3.aspmx.l.google.compriority 10
  • alt4.aspmx.l.google.compriority 10
  • mxa.mailgun.orgpriority 10
  • mxb.mailgun.orgpriority 10

Root TXT

5 records
  • facebook-domain-verification=wdp4hpxkwwh6txwg2ssm5feuk1o4p6
  • google-site-verification=bgfQ_0dYX7zG0FrBccLkVGFuP9hCW0no4EPtOkJUb58
  • google-site-verification=eXjc-KRTTAgn-OeVz0NaaxDnxI47V7sq45lb54ntEJU
  • stripe-verification=a1b5e670f46364d790f32cde9d1a7806d7bc64c2a38eb582d50c6890fbe389d6
  • v=spf1 include:_spf.google.com ~all

DKIM selectors

2 records
  • selector1selector1._domainkey.digitalpeaks.net
    CNAME flash.funnels.msgsndr.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.digitalpeaks.net
    CNAME flash.funnels.msgsndr.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.digitalpeaks.net
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoluaZ1GJ6HenKzHHZ9Qean7tsPeqtim8vaWHZ3Iu9GcnaiRpI5WaI5do8WpooSnu/zEWPS9K1VA5oF/vHPzKPPRn82O6sapOmWUoKJ+bTjVw7eT9DjE/VHWyb2ooTDQc4QD1hCA8WU7Ehai/tK61XwTx0lkJFT5m0DXVA6BZsxRHSKLH+pNpEeT+AM0KPU+P2FH4ZK7YTclkfU+XH90136okd/KNtoBR6QrulPZDBYmUZzF2bnDSf4Z60OM+Ly2HEzUNQE64t3iFFcK0K66a91Nm7eFk9HmltIEJqADZsHqQcXjTzSPbl0Fng0G9k7A5zSWV04w1vWa695YI0AM5cQIDAQAB
  • 2023060120230601._domainkey.digitalpeaks.net
    CNAME flash.funnels.msgsndr.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.digitalpeaks.net
    CNAME flash.funnels.msgsndr.com

    No TXT records returned for this selector.

  • k1k1._domainkey.digitalpeaks.net
    • k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEIdjqBwPCjomSkkbgtjBKoS7JnM28t7AAyKMDJNOKwl3alCiLdYmh/fHW04tzGCgWfgppR/wLPFoUW7sqcMv0UprMMfYqQGj1u+iKftWJGQc8O8ScvC+i3cOApL0DuMjFNf0RLXcsdi+yqJnq6pGmBaHYZUfFJcD0ejMNHqgvTQIDAQAB
  • k2k2._domainkey.digitalpeaks.net
    CNAME flash.funnels.msgsndr.com

    No TXT records returned for this selector.

  • s1s1._domainkey.digitalpeaks.net
    CNAME flash.funnels.msgsndr.com

    No TXT records returned for this selector.

  • s2s2._domainkey.digitalpeaks.net
    CNAME flash.funnels.msgsndr.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.digitalpeaks.net
    CNAME flash.funnels.msgsndr.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.digitalpeaks.net
    CNAME flash.funnels.msgsndr.com

    No TXT records returned for this selector.

  • mailmail._domainkey.digitalpeaks.net
    CNAME flash.funnels.msgsndr.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=none; rua=mailto:c25dbdb6d7c5422fbdb15594ff123fac@dmarc-reports.cloudflare.net