DNS & email auth

warnLast checked
Findings5 findings
  • 5 MX records found.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • No DKIM key was found for the common selectors checked.

    Custom selectors may still exist outside the common probe list.

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    Add rua=mailto:you@example.com to receive daily aggregate reports from receivers.

Raw evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • alt3.aspmx.l.google.compriority 10
  • alt4.aspmx.l.google.compriority 10

Root TXT

1 record
  • v=spf1 include:_spf.google.com include:_spf.wpcloud.com ~all

DKIM selectors

12 records
  • selector1selector1._domainkey.stanfordpr.com
    CNAME stanfordpr.com
    • v=spf1 include:_spf.google.com include:_spf.wpcloud.com ~all
  • selector2selector2._domainkey.stanfordpr.com
    CNAME stanfordpr.com
    • v=spf1 include:_spf.google.com include:_spf.wpcloud.com ~all
  • googlegoogle._domainkey.stanfordpr.com
    CNAME stanfordpr.com
    • v=spf1 include:_spf.google.com include:_spf.wpcloud.com ~all
  • 2023060120230601._domainkey.stanfordpr.com
    CNAME stanfordpr.com
    • v=spf1 include:_spf.google.com include:_spf.wpcloud.com ~all
  • 2021011220210112._domainkey.stanfordpr.com
    CNAME stanfordpr.com
    • v=spf1 include:_spf.google.com include:_spf.wpcloud.com ~all
  • k1k1._domainkey.stanfordpr.com
    CNAME stanfordpr.com
    • v=spf1 include:_spf.google.com include:_spf.wpcloud.com ~all
  • k2k2._domainkey.stanfordpr.com
    CNAME stanfordpr.com
    • v=spf1 include:_spf.google.com include:_spf.wpcloud.com ~all
  • s1s1._domainkey.stanfordpr.com
    CNAME stanfordpr.com
    • v=spf1 include:_spf.google.com include:_spf.wpcloud.com ~all
  • s2s2._domainkey.stanfordpr.com
    CNAME stanfordpr.com
    • v=spf1 include:_spf.google.com include:_spf.wpcloud.com ~all
  • defaultdefault._domainkey.stanfordpr.com
    CNAME stanfordpr.com
    • v=spf1 include:_spf.google.com include:_spf.wpcloud.com ~all
  • dkimdkim._domainkey.stanfordpr.com
    CNAME stanfordpr.com
    • v=spf1 include:_spf.google.com include:_spf.wpcloud.com ~all
  • mailmail._domainkey.stanfordpr.com
    CNAME stanfordpr.com
    • v=spf1 include:_spf.google.com include:_spf.wpcloud.com ~all

DMARC TXT

1 record
  • v=DMARC1;p=none;