← Interactive report

launchpadagency.com

warnScanned ·
Summary

launchpadagency.com has warnings

0To fix now
4Recommended
5Healthy

DNS & email auth

warnLast checked
Findings7 findings

Recommended (4)

  • The record uses neutral (?all), which gives receivers no enforcement signal.

    SPF

    How to fix

    Move to -all once you're confident every legitimate sender is listed.

  • DKIM selector k1 uses a 1024-bit RSA key.

    DKIM

    k1 (k1._domainkey.launchpadagency.com)

    How to fix

    Rotate to an RSA key of at least 2048 bits.

  • DMARC policy is p=none, so it monitors but does not enforce.

    DMARC

    How to fix

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    DMARC

    How to fix

    Add rua=mailto:you@example.com to the record to receive daily aggregate reports from receivers.

Healthy (3)

  • 5 MX records found.

    MX
  • DKIM selector k2 has a healthy RSA key.

    DKIM

    k2 (k2._domainkey.launchpadagency.com)

  • DKIM selector default has a healthy RSA key.

    DKIM

    default (default._domainkey.launchpadagency.com)

Evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • aspmx2.googlemail.compriority 10
  • aspmx3.googlemail.compriority 10

SPF

3 of 10 lookups
DNS lookups3 / 10
launchpadagency.com
include:servers.mcsv.net
include:launchpadagency.com.spf.auto.dnssmarthost.net
include:_spf.mailspamprotection.com

Root TXT

5 records
  • facebook-domain-verification=gsbfr52iti9t4gf2xb781qcefbi5kt
  • google-site-verification=b0xuORzxTQQcFFcDURf83TI80p_hqYtOy-99OjG_EZE
  • google-site-verification=67-SzFyM7Q05wyiB_zd6qaebCvmZRPSsUsnnP4VRy_E
  • v=spf1 include:servers.mcsv.net include:launchpadagency.com.spf.auto.dnssmarthost.net ?all
  • google-site-verification=1j4ObriL9sOrTfrMilWUEX0VKeDxkW-962VrwgMhtL8

DKIM selectors

3 records
  • k1k1._domainkey.launchpadagency.com
    CNAME dkim.mcsv.net
    • k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUoNyIR4Bn84LVcfZE20rmDeXQblIupNWBqLXM1Q+VieI/eZu/7k9/vOkLSaQQdml4Cv8lb3PcnluMVIhQIDAQAB;
  • k2k2._domainkey.launchpadagency.com
    CNAME dkim2.mcsv.net
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA0b90ObWaLDc+i9MtTNmGeWO009hr20fIxhGg6XBT2kjZ1DTThopSe1nAndsupmcBwlQ5Q6LJ+ZAxLcujnPIxM0ZBLmgpkv8u6RfY4eFP8OLvdAW3oSuB0DyLDigQX4Sj8wBO4YIdQH6AAmBeOsidsKAFNFUCpc3vCxtBDR12U+cBg724l3sBkMQ8evnz6idnqxq9QAVYh8k4kJ+RP+6cqTdy7LjIm8xY/bQNpQIpGUAuDo2DjLcCDun9DAI4Q/3z+Q0o9QuQIDAQAB;
  • defaultdefault._domainkey.launchpadagency.com
    CNAME launchpadagency.com.default.dkim.auto.dnssmarthost.net
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GhzlavQJZTV5YiesO93ifqJZ+OOqp8gzgvYz79pwcdGnWdlE7KZCCOD6p2nItRr5zVly/wLiyqmTjL+2LbTiY9FcPgLicoipwNakQRELpxmhvrKCGuDor1ATyoD4eKhBpRNpjaf1ZQ1U90NiHOBTH9t36xUNfe0OlUcBarHnaiqoUTkeAC9E5jfFzOAxBBB1PhcpHeu5VCqbIKUGlcH9NlZJbbEaZy/KQWUtYBo3zdFHgLqkg4MhQUemnDrF73hG0M2KO6MNkTneXnHlpapKZl6mDsFEBnJimkh4bCx+dN1HZ9d2piV67BILQoNLBQaemHOMtMwWrAKwVlNcVy+ywIDAQAB;

Probed with no records: selector1, selector2, google, 20230601, 20210112, s1, s2, dkim, mail

DMARC

1 record
v=DMARC1; p=none; aspf=r; adkim=r;
v=DMARC1
Identifies this TXT record as a DMARC policy. Must be the first tag.
p=none
Monitoring only: receivers deliver failing mail normally and just send reports.
aspf=r
Relaxed SPF alignment: the envelope sender may be any subdomain of the From domain.
adkim=r
Relaxed DKIM alignment: the DKIM signature may come from any subdomain of the From domain.
sp=nonedefault
No sp= tag is published, so subdomains inherit the domain's p= policy.
pct=100default
No pct= tag is published, so the policy applies to all failing mail.
Raw JSON

SSL & domain expiry

passLast checked
Findings2 findings

Healthy (2)

  • The TLS certificate is valid until Oct 7, 2026.

    TLS certificate

    Issued by Let's Encrypt.

  • Registration expiry is not published for this domain.

    Domain expiry

    The registry does not expose expiry data over RDAP.

Evidence

TLS certificate

port 443
Issued to
*.launchpadagency.com
Issued by
Let's Encrypt
Valid from
Valid until
Days remaining
31 days
Verification
trusted

Registration

unpublished

The registry does not expose expiry data over RDAP.

Raw JSON

Generated by Internet Posture · internetposture.com