Print reportMonitor this domain

DNS & email auth

warnLast checked
Findings7 findings

Recommended (4)

  • The record uses neutral (?all), which gives receivers no enforcement signal.

    SPF

    How to fix

    Move to -all once you're confident every legitimate sender is listed.

  • DKIM selector k1 uses a 1024-bit RSA key.

    DKIM

    k1 (k1._domainkey.launchpadagency.com)

    How to fix

    Rotate to an RSA key of at least 2048 bits.

  • DMARC policy is p=none, so it monitors but does not enforce.

    DMARC

    How to fix

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    DMARC

    How to fix

    Add rua=mailto:you@example.com to the record to receive daily aggregate reports from receivers.

Healthy (3)

  • 5 MX records found.

    MX

  • DKIM selector k2 has a healthy RSA key.

    DKIM

    k2 (k2._domainkey.launchpadagency.com)

  • DKIM selector default has a healthy RSA key.

    DKIM

    default (default._domainkey.launchpadagency.com)

Evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • aspmx2.googlemail.compriority 10
  • aspmx3.googlemail.compriority 10

SPF

3 of 10 lookups
DNS lookups3 / 10
launchpadagency.com
v=spf1 include:servers.mcsv.net include:launchpadagency.com.spf.auto.dnssmarthost.net ?all
include:servers.mcsv.net
v=spf1 ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.0.0/16 -all
include:launchpadagency.com.spf.auto.dnssmarthost.net
v=spf1 include:_spf.mailspamprotection.com ~all
include:_spf.mailspamprotection.com
v=spf1 ip4:185.56.84.0/24 ip4:185.56.85.0/24 ip4:185.56.86.0/24 ip4:185.56.87.0/24 ~all

Root TXT

5 records
  • facebook-domain-verification=gsbfr52iti9t4gf2xb781qcefbi5kt
  • google-site-verification=b0xuORzxTQQcFFcDURf83TI80p_hqYtOy-99OjG_EZE
  • google-site-verification=67-SzFyM7Q05wyiB_zd6qaebCvmZRPSsUsnnP4VRy_E
  • v=spf1 include:servers.mcsv.net include:launchpadagency.com.spf.auto.dnssmarthost.net ?all
  • google-site-verification=1j4ObriL9sOrTfrMilWUEX0VKeDxkW-962VrwgMhtL8

DKIM selectors

3 records
  • k1k1._domainkey.launchpadagency.com
    CNAME dkim.mcsv.net
    • k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUoNyIR4Bn84LVcfZE20rmDeXQblIupNWBqLXM1Q+VieI/eZu/7k9/vOkLSaQQdml4Cv8lb3PcnluMVIhQIDAQAB;
  • k2k2._domainkey.launchpadagency.com
    CNAME dkim2.mcsv.net
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA0b90ObWaLDc+i9MtTNmGeWO009hr20fIxhGg6XBT2kjZ1DTThopSe1nAndsupmcBwlQ5Q6LJ+ZAxLcujnPIxM0ZBLmgpkv8u6RfY4eFP8OLvdAW3oSuB0DyLDigQX4Sj8wBO4YIdQH6AAmBeOsidsKAFNFUCpc3vCxtBDR12U+cBg724l3sBkMQ8evnz6idnqxq9QAVYh8k4kJ+RP+6cqTdy7LjIm8xY/bQNpQIpGUAuDo2DjLcCDun9DAI4Q/3z+Q0o9QuQIDAQAB;
  • defaultdefault._domainkey.launchpadagency.com
    CNAME launchpadagency.com.default.dkim.auto.dnssmarthost.net
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GhzlavQJZTV5YiesO93ifqJZ+OOqp8gzgvYz79pwcdGnWdlE7KZCCOD6p2nItRr5zVly/wLiyqmTjL+2LbTiY9FcPgLicoipwNakQRELpxmhvrKCGuDor1ATyoD4eKhBpRNpjaf1ZQ1U90NiHOBTH9t36xUNfe0OlUcBarHnaiqoUTkeAC9E5jfFzOAxBBB1PhcpHeu5VCqbIKUGlcH9NlZJbbEaZy/KQWUtYBo3zdFHgLqkg4MhQUemnDrF73hG0M2KO6MNkTneXnHlpapKZl6mDsFEBnJimkh4bCx+dN1HZ9d2piV67BILQoNLBQaemHOMtMwWrAKwVlNcVy+ywIDAQAB;

Probed with no records: selector1, selector2, google, 20230601, 20210112, s1, s2, dkim, mail

DMARC

1 record
v=DMARC1; p=none; aspf=r; adkim=r;
v=DMARC1
Identifies this TXT record as a DMARC policy. Must be the first tag.
p=none
Monitoring only: receivers deliver failing mail normally and just send reports.
aspf=r
Relaxed SPF alignment: the envelope sender may be any subdomain of the From domain.
adkim=r
Relaxed DKIM alignment: the DKIM signature may come from any subdomain of the From domain.
sp=nonedefault
No sp= tag is published, so subdomains inherit the domain's p= policy.
pct=100default
No pct= tag is published, so the policy applies to all failing mail.
Raw JSON
{
  "mx": [
    {
      "type": "MX",
      "exchange": "aspmx.l.google.com",
      "priority": 1
    },
    {
      "type": "MX",
      "exchange": "alt1.aspmx.l.google.com",
      "priority": 5
    },
    {
      "type": "MX",
      "exchange": "alt2.aspmx.l.google.com",
      "priority": 5
    },
    {
      "type": "MX",
      "exchange": "aspmx2.googlemail.com",
      "priority": 10
    },
    {
      "type": "MX",
      "exchange": "aspmx3.googlemail.com",
      "priority": 10
    }
  ],
  "spf": {
    "tree": {
      "via": "root",
      "domain": "launchpadagency.com",
      "issues": [],
      "records": [
        "v=spf1 include:servers.mcsv.net include:launchpadagency.com.spf.auto.dnssmarthost.net ?all"
      ],
      "children": [
        {
          "via": "include",
          "domain": "servers.mcsv.net",
          "issues": [],
          "records": [
            "v=spf1 ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.0.0/16 -all"
          ],
          "children": []
        },
        {
          "via": "include",
          "domain": "launchpadagency.com.spf.auto.dnssmarthost.net",
          "issues": [],
          "records": [
            "v=spf1 include:_spf.mailspamprotection.com ~all"
          ],
          "children": [
            {
              "via": "include",
              "domain": "_spf.mailspamprotection.com",
              "issues": [],
              "records": [
                "v=spf1 ip4:185.56.84.0/24 ip4:185.56.85.0/24 ip4:185.56.86.0/24 ip4:185.56.87.0/24 ~all"
              ],
              "children": []
            }
          ]
        }
      ]
    },
    "truncated": false,
    "lookupCount": 3,
    "voidLookupCount": 0
  },
  "dkim": [
    {
      "cname": [],
      "records": [],
      "selector": "selector1",
      "queryName": "selector1._domainkey.launchpadagency.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "selector2",
      "queryName": "selector2._domainkey.launchpadagency.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "google",
      "queryName": "google._domainkey.launchpadagency.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20230601",
      "queryName": "20230601._domainkey.launchpadagency.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20210112",
      "queryName": "20210112._domainkey.launchpadagency.com"
    },
    {
      "cname": [
        "dkim.mcsv.net"
      ],
      "records": [
        "k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUoNyIR4Bn84LVcfZE20rmDeXQblIupNWBqLXM1Q+VieI/eZu/7k9/vOkLSaQQdml4Cv8lb3PcnluMVIhQIDAQAB;"
      ],
      "selector": "k1",
      "queryName": "k1._domainkey.launchpadagency.com"
    },
    {
      "cname": [
        "dkim2.mcsv.net"
      ],
      "records": [
        "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA0b90ObWaLDc+i9MtTNmGeWO009hr20fIxhGg6XBT2kjZ1DTThopSe1nAndsupmcBwlQ5Q6LJ+ZAxLcujnPIxM0ZBLmgpkv8u6RfY4eFP8OLvdAW3oSuB0DyLDigQX4Sj8wBO4YIdQH6AAmBeOsidsKAFNFUCpc3vCxtBDR12U+cBg724l3sBkMQ8evnz6idnqxq9QAVYh8k4kJ+RP+6cqTdy7LjIm8xY/bQNpQIpGUAuDo2DjLcCDun9DAI4Q/3z+Q0o9QuQIDAQAB;"
      ],
      "selector": "k2",
      "queryName": "k2._domainkey.launchpadagency.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s1",
      "queryName": "s1._domainkey.launchpadagency.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s2",
      "queryName": "s2._domainkey.launchpadagency.com"
    },
    {
      "cname": [
        "launchpadagency.com.default.dkim.auto.dnssmarthost.net"
      ],
      "records": [
        "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GhzlavQJZTV5YiesO93ifqJZ+OOqp8gzgvYz79pwcdGnWdlE7KZCCOD6p2nItRr5zVly/wLiyqmTjL+2LbTiY9FcPgLicoipwNakQRELpxmhvrKCGuDor1ATyoD4eKhBpRNpjaf1ZQ1U90NiHOBTH9t36xUNfe0OlUcBarHnaiqoUTkeAC9E5jfFzOAxBBB1PhcpHeu5VCqbIKUGlcH9NlZJbbEaZy/KQWUtYBo3zdFHgLqkg4MhQUemnDrF73hG0M2KO6MNkTneXnHlpapKZl6mDsFEBnJimkh4bCx+dN1HZ9d2piV67BILQoNLBQaemHOMtMwWrAKwVlNcVy+ywIDAQAB;"
      ],
      "selector": "default",
      "queryName": "default._domainkey.launchpadagency.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "dkim",
      "queryName": "dkim._domainkey.launchpadagency.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "mail",
      "queryName": "mail._domainkey.launchpadagency.com"
    }
  ],
  "rootTxt": [
    "facebook-domain-verification=gsbfr52iti9t4gf2xb781qcefbi5kt",
    "google-site-verification=b0xuORzxTQQcFFcDURf83TI80p_hqYtOy-99OjG_EZE",
    "google-site-verification=67-SzFyM7Q05wyiB_zd6qaebCvmZRPSsUsnnP4VRy_E",
    "v=spf1 include:servers.mcsv.net include:launchpadagency.com.spf.auto.dnssmarthost.net ?all",
    "google-site-verification=1j4ObriL9sOrTfrMilWUEX0VKeDxkW-962VrwgMhtL8"
  ],
  "dmarcTxt": [
    "v=DMARC1; p=none; aspf=r; adkim=r;"
  ]
}