DNS & email auth

warnLast checked
Findings6 findings
  • 5 MX records found.

  • The record uses 10 of 10 allowed DNS lookups.

    Adding another sender could push it over the limit and break SPF entirely.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector google has a healthy RSA key.

    google (google._domainkey.powerdigital.com)

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    Add rua=mailto:you@example.com to receive daily aggregate reports from receivers.

Raw evidence

MX

5 records
  • aspmx.l.google.compriority 10
  • alt1.aspmx.l.google.compriority 20
  • alt2.aspmx.l.google.compriority 30
  • aspmx2.googlemail.compriority 40
  • aspmx3.googlemail.compriority 50

Root TXT

6 records
  • v=spf1 +a +mx include:_spf.google.com include:sendgrid.net include:mailgun.org ~all
  • google-site-verification=FMf96uib5YrCmwsIQBnxDWmicdB2ZfbcoSuZ7P7Fubc
  • canva-site-verification=Xuy74h3f8K57o5TnM3xOLg
  • figma-domain-verification=07783a4df6ef9ce53bd7f2ee867d0938ad43876a9523e683a5a418e043a77fa1-1750099338
  • apple-domain-verification=J5SCSPNBd4nZgMvV
  • openai-domain-verification=dv-kjUQW3I2Am9IUkom8V94s4AI

DKIM selectors

1 record
  • selector1selector1._domainkey.powerdigital.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.powerdigital.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.powerdigital.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwffo92E9H4I05mtLvYEIPh0a7Ns0lcZsnKD8LzPmV1jGKCMrcTX2VqUjXZyxPz4rM+dJNmQ4mZfuG8JV6G4jSgZWMZ5W7kj5KYT2QXBkrwhIAy2G6Kw/zpH5tptR2sP1NKfI8XsshBXPKp0kXg+wDUBBG3aKDScWFI203O6es1hXoemMI21oAGn3ZJsSnuLBW8tO/zsSdWmyR2LU1/uvC2et8FISupSaxHMFntSnWQY6OvHnrb5Vg2omvtJwykKnYQyx+3y4V54O6RVIJYygsHptt6ukCHoU79RTLvn0Zbq71AH948m8OXXtSm9InvXbjGOyIQe990yGI1/OFNZU5wIDAQAB
  • 2023060120230601._domainkey.powerdigital.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.powerdigital.com

    No TXT records returned for this selector.

  • k1k1._domainkey.powerdigital.com

    No TXT records returned for this selector.

  • k2k2._domainkey.powerdigital.com

    No TXT records returned for this selector.

  • s1s1._domainkey.powerdigital.com

    No TXT records returned for this selector.

  • s2s2._domainkey.powerdigital.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.powerdigital.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.powerdigital.com

    No TXT records returned for this selector.

  • mailmail._domainkey.powerdigital.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=none