Print reportMonitor this domain

DNS & email auth

warnLast checked
Findings6 findings

Recommended (3)

  • DKIM selector selector1 uses a 1024-bit RSA key.

    DKIM

    selector1 (selector1._domainkey.golevo.com)

    How to fix

    Rotate to an RSA key of at least 2048 bits.

  • DMARC policy is p=none, so it monitors but does not enforce.

    DMARC

    How to fix

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    DMARC

    How to fix

    Add rua=mailto:you@example.com to the record to receive daily aggregate reports from receivers.

Healthy (3)

  • 1 MX record found.

    MX

  • SPF record is valid, using 5 of 10 DNS lookups.

    SPF

  • DKIM selector k2 has a healthy RSA key.

    DKIM

    k2 (k2._domainkey.golevo.com)

Evidence

MX

1 record
  • golevo-com.mail.protection.outlook.compriority 0

SPF

5 of 10 lookups
DNS lookups5 / 10
golevo.com
v=spf1 include:spf.protection.outlook.com include:_spf-include.iamemonline.com -all
include:spf.protection.outlook.com
v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all
include:_spf-include.iamemonline.com
v=spf1 a:iamemonline.com mx:iamemonline.com ip4:167.235.69.28/32 ip4:65.108.158.226/32 ip4:103.15.83.0/24 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 ip4:103.117.159.0/24 ip4:169.148.135.0/24 ip4:199.67.76.0/24 ip4:103.89.74.17/32 ip4:103.89.74.18/32 ip4:169.148.146.8/32 ip4:169.148.146.9/32 ip4:103.117.158.128 ip4:23.83.208.0/20 ip4:35.85.190.185/32 ip4:199.231.189.152/29 ip4:64.20.38.24/29 ip4:174.138.190.32/29 ip4:64.20.36.192/29 ip4:199.231.189.96/29 include:_spf1.iamemonline_com._d.easydmarc.pro ~all
include:_spf1.iamemonline_com._d.easydmarc.pro
v=spf1 ip4:206.72.200.40/29 ip4:66.45.229.224/28 ip4:174.138.180.168/29 ip4:174.138.180.160/29 ip4:174.138.180.152/29 ip4:68.168.211.160/28 ip4:66.45.233.16/29 ip4:67.217.53.0/24 ip4:205.209.127.0/24 ip4:68.168.210.0/24 ip4:205.209.124.0/24 ip4:173.214.160.53 ip4:162.220.160.196 ip4:67.217.63.248/29 ip4:208.73.205.248/29 ip4:209.159.153.232/29 ~all

Root TXT

5 records
  • 9NLIAL4V6IL6IUUPGP2H226QUA
  • google-site-verification=304sY9z5egwM3s1eCt77gLOJq2s5UPgCu-dx2b5eIqM
  • mscid=CdXqC9L7V6saKmxLIGroFywgmpimqU28o6WAsXJqipaQNCHHXajTXQ+DU8lhv/il4aliWArXI5n2HRz/37px9Q==
  • sem9bh9fvp1jukq3o6hcbia4q4
  • v=spf1 include:spf.protection.outlook.com include:_spf-include.iamemonline.com -all

DKIM selectors

2 records
  • selector1selector1._domainkey.golevo.com
    CNAME selector1-golevo-com._domainkey.golevo.onmicrosoft.com
    • v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNQTbGOwSmzwi25EouixX5JxPCsquFQxBdq4udqkDqH9t0R1E67iVIzAXPEWHksIgGYYUAj6/Zs6TTM/Q/NEJAIk/8vZKor5QrFWbgQzapUGMynVsIsxc/yoOqWmIaxmdWW4br+Vy4nj7GxnpPeIG/S2GGfof4KAqlXhY963UxowIDAQAB; n=1024,1456524787,1472249587
  • selector2selector2._domainkey.golevo.com
    CNAME selector2-golevo-com._domainkey.golevo.onmicrosoft.com

    No TXT records returned for this selector.

  • k2k2._domainkey.golevo.com
    CNAME dkim2.mcsv.net
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA0b90ObWaLDc+i9MtTNmGeWO009hr20fIxhGg6XBT2kjZ1DTThopSe1nAndsupmcBwlQ5Q6LJ+ZAxLcujnPIxM0ZBLmgpkv8u6RfY4eFP8OLvdAW3oSuB0DyLDigQX4Sj8wBO4YIdQH6AAmBeOsidsKAFNFUCpc3vCxtBDR12U+cBg724l3sBkMQ8evnz6idnqxq9QAVYh8k4kJ+RP+6cqTdy7LjIm8xY/bQNpQIpGUAuDo2DjLcCDun9DAI4Q/3z+Q0o9QuQIDAQAB;

Probed with no records: google, 20230601, 20210112, k1, s1, s2, default, dkim, mail

DMARC

1 record
v=DMARC1; p=none;
v=DMARC1
Identifies this TXT record as a DMARC policy. Must be the first tag.
p=none
Monitoring only: receivers deliver failing mail normally and just send reports.
sp=nonedefault
No sp= tag is published, so subdomains inherit the domain's p= policy.
pct=100default
No pct= tag is published, so the policy applies to all failing mail.
adkim=rdefault
No adkim= tag is published, so DKIM alignment is relaxed: any subdomain of the From domain may sign.
aspf=rdefault
No aspf= tag is published, so SPF alignment is relaxed: the envelope sender may be any subdomain of the From domain.
Raw JSON
{
  "mx": [
    {
      "type": "MX",
      "exchange": "golevo-com.mail.protection.outlook.com",
      "priority": 0
    }
  ],
  "spf": {
    "tree": {
      "via": "root",
      "domain": "golevo.com",
      "issues": [],
      "records": [
        "v=spf1 include:spf.protection.outlook.com include:_spf-include.iamemonline.com -all"
      ],
      "children": [
        {
          "via": "include",
          "domain": "spf.protection.outlook.com",
          "issues": [],
          "records": [
            "v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all"
          ],
          "children": []
        },
        {
          "via": "include",
          "domain": "_spf-include.iamemonline.com",
          "issues": [],
          "records": [
            "v=spf1 a:iamemonline.com mx:iamemonline.com ip4:167.235.69.28/32 ip4:65.108.158.226/32 ip4:103.15.83.0/24 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 ip4:103.117.159.0/24 ip4:169.148.135.0/24 ip4:199.67.76.0/24 ip4:103.89.74.17/32 ip4:103.89.74.18/32 ip4:169.148.146.8/32 ip4:169.148.146.9/32 ip4:103.117.158.128 ip4:23.83.208.0/20 ip4:35.85.190.185/32 ip4:199.231.189.152/29 ip4:64.20.38.24/29 ip4:174.138.190.32/29 ip4:64.20.36.192/29 ip4:199.231.189.96/29 include:_spf1.iamemonline_com._d.easydmarc.pro ~all"
          ],
          "children": [
            {
              "via": "include",
              "domain": "_spf1.iamemonline_com._d.easydmarc.pro",
              "issues": [],
              "records": [
                "v=spf1 ip4:206.72.200.40/29 ip4:66.45.229.224/28 ip4:174.138.180.168/29 ip4:174.138.180.160/29 ip4:174.138.180.152/29 ip4:68.168.211.160/28 ip4:66.45.233.16/29 ip4:67.217.53.0/24 ip4:205.209.127.0/24 ip4:68.168.210.0/24 ip4:205.209.124.0/24 ip4:173.214.160.53 ip4:162.220.160.196 ip4:67.217.63.248/29 ip4:208.73.205.248/29 ip4:209.159.153.232/29 ~all"
              ],
              "children": []
            }
          ]
        }
      ]
    },
    "truncated": false,
    "lookupCount": 5,
    "voidLookupCount": 0
  },
  "dkim": [
    {
      "cname": [
        "selector1-golevo-com._domainkey.golevo.onmicrosoft.com"
      ],
      "records": [
        "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNQTbGOwSmzwi25EouixX5JxPCsquFQxBdq4udqkDqH9t0R1E67iVIzAXPEWHksIgGYYUAj6/Zs6TTM/Q/NEJAIk/8vZKor5QrFWbgQzapUGMynVsIsxc/yoOqWmIaxmdWW4br+Vy4nj7GxnpPeIG/S2GGfof4KAqlXhY963UxowIDAQAB; n=1024,1456524787,1472249587"
      ],
      "selector": "selector1",
      "queryName": "selector1._domainkey.golevo.com"
    },
    {
      "cname": [
        "selector2-golevo-com._domainkey.golevo.onmicrosoft.com"
      ],
      "records": [],
      "selector": "selector2",
      "queryName": "selector2._domainkey.golevo.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "google",
      "queryName": "google._domainkey.golevo.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20230601",
      "queryName": "20230601._domainkey.golevo.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20210112",
      "queryName": "20210112._domainkey.golevo.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k1",
      "queryName": "k1._domainkey.golevo.com"
    },
    {
      "cname": [
        "dkim2.mcsv.net"
      ],
      "records": [
        "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA0b90ObWaLDc+i9MtTNmGeWO009hr20fIxhGg6XBT2kjZ1DTThopSe1nAndsupmcBwlQ5Q6LJ+ZAxLcujnPIxM0ZBLmgpkv8u6RfY4eFP8OLvdAW3oSuB0DyLDigQX4Sj8wBO4YIdQH6AAmBeOsidsKAFNFUCpc3vCxtBDR12U+cBg724l3sBkMQ8evnz6idnqxq9QAVYh8k4kJ+RP+6cqTdy7LjIm8xY/bQNpQIpGUAuDo2DjLcCDun9DAI4Q/3z+Q0o9QuQIDAQAB;"
      ],
      "selector": "k2",
      "queryName": "k2._domainkey.golevo.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s1",
      "queryName": "s1._domainkey.golevo.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s2",
      "queryName": "s2._domainkey.golevo.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "default",
      "queryName": "default._domainkey.golevo.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "dkim",
      "queryName": "dkim._domainkey.golevo.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "mail",
      "queryName": "mail._domainkey.golevo.com"
    }
  ],
  "rootTxt": [
    "9NLIAL4V6IL6IUUPGP2H226QUA",
    "google-site-verification=304sY9z5egwM3s1eCt77gLOJq2s5UPgCu-dx2b5eIqM",
    "mscid=CdXqC9L7V6saKmxLIGroFywgmpimqU28o6WAsXJqipaQNCHHXajTXQ+DU8lhv/il4aliWArXI5n2HRz/37px9Q==",
    "sem9bh9fvp1jukq3o6hcbia4q4",
    "v=spf1 include:spf.protection.outlook.com include:_spf-include.iamemonline.com -all"
  ],
  "dmarcTxt": [
    "v=DMARC1; p=none;"
  ]
}