DNS & email auth

failLast checked
Findings7 findings
  • 1 MX record found.

  • The record requires 11 DNS lookups, over the limit of 10. Receivers treat this as a permanent error.

    Remove unused includes or flatten nested ones. include, a, mx, ptr, exists, and redirect each cost one lookup.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector google has a healthy RSA key.

    google (google._domainkey.titanmarketingagency.com)

  • DKIM selector default has a healthy RSA key.

    default (default._domainkey.titanmarketingagency.com)

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    Add rua=mailto:you@example.com to receive daily aggregate reports from receivers.

Raw evidence

MX

1 record
  • smtp.google.compriority 1

Root TXT

2 records
  • google-site-verification=KrQbomL1lzgoaD_m5mGZH0TcFzNdRmm7-9ddGjjhiAU
  • v=spf1 a mx include:websitewelcome.com include:_spf.google.com ~all

DKIM selectors

2 records
  • selector1selector1._domainkey.titanmarketingagency.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.titanmarketingagency.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.titanmarketingagency.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkScokuveKStkQClSxDzdCK0u4tq85h9cnGRLVtlQcAMyw3g1le8Zr+nTqGORodPY4VQ9JE11pDhXb47oGJqpuAffSEfc5aOkIoeQPYMZ21A506ushMXWckC57GgRHJtrIP0OiZBqkwyHdVwhNTuRVJ7TtfdJ3fMG/Bh5SzS0gOHR3ZLr1Vae/eAdjQLhYLKt1SIaeugyElL+SA8OObGSTNL2qZrxO+6h2ILoAaWi6nb9iXqY2/Q/A5pXB5jmXZeUDkbm+y8DO+9NKlwhqemJtKJQXAXDN/XOckT8aDHU08Sgtbn6AZmLmXUwVcwhljSwKTzZPPqwWth+iGNFaF6XCwIDAQAB
  • 2023060120230601._domainkey.titanmarketingagency.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.titanmarketingagency.com

    No TXT records returned for this selector.

  • k1k1._domainkey.titanmarketingagency.com

    No TXT records returned for this selector.

  • k2k2._domainkey.titanmarketingagency.com

    No TXT records returned for this selector.

  • s1s1._domainkey.titanmarketingagency.com

    No TXT records returned for this selector.

  • s2s2._domainkey.titanmarketingagency.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.titanmarketingagency.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn5tlWvex7M0BE/6YctVRRJ4PXhIGOk7SuHvCZEzNNWwoEEPXnNsCt3DMYWe/ziqu9a0xk+GzcsGe2tm3TNkKFAWmbYBDppz/QtbBt2yqPcqROfUPIowBnymvPTBEe9kWyyP857K3ByjnA149uD225XKbZb0kV3zz7+uDh8GvQ5Deq0u7ndv15RmfGfaFjVw8b6eNreXwnZRfyaCPLFysux3H8+7W2ikymEG7fpPztuQpdCoPo+Yf61fw8q9aF/UFhf3laX7r9/5rbqN4uga9qNVyzhffaHaLovCC7qRNK+VRxWkoa88W+yMYeESwuvYrFT2EDEoqu/n6BmfXRTFhQIDAQAB;
  • dkimdkim._domainkey.titanmarketingagency.com

    No TXT records returned for this selector.

  • mailmail._domainkey.titanmarketingagency.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=none;