Monitor this domain

DNS & email auth

warnLast checked
Findings7 findings

  • 5 MX records found.

  • The record uses 10 of 10 allowed DNS lookups.

    Adding another sender could push it over the limit and break SPF entirely.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • The record at dc-77d78235e8._spfm.gb.agency (via include) uses the deprecated ptr mechanism.

    Replace ptr with ip4/ip6 networks or an include.

  • DKIM selector k2 has a healthy RSA key.

    k2 (k2._domainkey.gb.agency)

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    Add rua=mailto:you@example.com to receive daily aggregate reports from receivers.

Raw evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • aspmx2.googlemail.compriority 10
  • aspmx3.googlemail.compriority 10

Root TXT

5 records
  • google-site-verification=MObikgExvOrcrjuPNHQkMmybf8oQsfAA88o4421MOJw
  • mailerlite-domain-verification=540ed5466cb74a9238f78572db767af528a9c1d7
  • v=spf1 include:dc-77d78235e8._spfm.gb.agency ~all
  • google-site-verification=icI-bFIXGaOsWA3glse2TD8RH0-vrraak5pyb4co43c
  • google-site-verification=72s8L91xtBUMQku2wsuJsieNzKhAgO8cWTWe1JHJhQE

DKIM selectors

1 record
  • selector1selector1._domainkey.gb.agency

    No TXT records returned for this selector.

  • selector2selector2._domainkey.gb.agency

    No TXT records returned for this selector.

  • googlegoogle._domainkey.gb.agency

    No TXT records returned for this selector.

  • 2023060120230601._domainkey.gb.agency

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.gb.agency

    No TXT records returned for this selector.

  • k1k1._domainkey.gb.agency

    No TXT records returned for this selector.

  • k2k2._domainkey.gb.agency
    CNAME dkim2.mcsv.net
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA0b90ObWaLDc+i9MtTNmGeWO009hr20fIxhGg6XBT2kjZ1DTThopSe1nAndsupmcBwlQ5Q6LJ+ZAxLcujnPIxM0ZBLmgpkv8u6RfY4eFP8OLvdAW3oSuB0DyLDigQX4Sj8wBO4YIdQH6AAmBeOsidsKAFNFUCpc3vCxtBDR12U+cBg724l3sBkMQ8evnz6idnqxq9QAVYh8k4kJ+RP+6cqTdy7LjIm8xY/bQNpQIpGUAuDo2DjLcCDun9DAI4Q/3z+Q0o9QuQIDAQAB;
  • s1s1._domainkey.gb.agency

    No TXT records returned for this selector.

  • s2s2._domainkey.gb.agency

    No TXT records returned for this selector.

  • defaultdefault._domainkey.gb.agency

    No TXT records returned for this selector.

  • dkimdkim._domainkey.gb.agency

    No TXT records returned for this selector.

  • mailmail._domainkey.gb.agency

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=none;