DNS & email auth

warnLast checked
Findings7 findings
  • 1 MX record found.

  • SPF record is valid, using 1 of 10 DNS lookups.

  • DKIM selector s2 uses a 1024-bit RSA key.

    s2 (s2._domainkey.theusim.com); use at least 2048 bits.

  • DKIM selector mail uses a 1024-bit RSA key.

    mail (mail._domainkey.theusim.com); use at least 2048 bits.

  • DKIM selector selector1 has a healthy RSA key.

    selector1 (selector1._domainkey.theusim.com)

  • DKIM selector s1 has a healthy RSA key.

    s1 (s1._domainkey.theusim.com)

  • DMARC policy is enforced with p=quarantine.

Raw evidence

MX

1 record
  • theusim-com.mail.protection.outlook.compriority 0

Root TXT

5 records
  • activeprospect-domain-verification=2VTLqGu/XGOgFoVZWi9qXg==
  • v=spf1 ip4:12.206.148.163 ip4:12.111.5.116 include:spf.protection.outlook.com -all
  • MS=ms29028879
  • L2dG/Peahef++PdJOzdqDg31fF2taXQtQAixGwx9sL/XL+mjXKnbOGNRV2SnMyWgxk+t0qDmlj4/AY7S9yuMpw==
  • tc9e1ve9qs50blrtigbkivmndm

DKIM selectors

4 records
  • selector1selector1._domainkey.theusim.com
    CNAME selector1-theusim-com._domainkey.dfhmg.onmicrosoft.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMe5Z32AkpebfOh8cel3UNuLPO9XJjxHrNvXzlN2ssZRwL2vdOipxKyVB9C9fu2zCGtKHZ1RfbF9KioH1D0b+BYmLMIOrAFBBY+QCcgCdXcRfpY/B9OPRXot17xok2FwOjocHYBR41yHss6Sbd843aIkq7Zl7Mupsvb1yNZF7qKoigxlrzuVu+wnceIEinJnuc2qM7ncCyso1f/ewpE0TpnbQDg0wqEY6dzetFMG6Xh6kQWOjqtJ4TJSQV1PiGPCPBj4c+FIVDXoIQ4bmEScLO9j9gcKz+cImjeM6F4Ggb4bKR/FufyPSuxJSwdzlBrkivngvxqW+JB7O1MGdwYJ1QIDAQAB;
  • selector2selector2._domainkey.theusim.com
    CNAME selector2-theusim-com._domainkey.dfhmg.onmicrosoft.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.theusim.com

    No TXT records returned for this selector.

  • 2023060120230601._domainkey.theusim.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.theusim.com

    No TXT records returned for this selector.

  • k1k1._domainkey.theusim.com

    No TXT records returned for this selector.

  • k2k2._domainkey.theusim.com

    No TXT records returned for this selector.

  • s1s1._domainkey.theusim.com
    CNAME s1.domainkey.u3292153.wl154.sendgrid.net
    • k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hUOuuXHrs774+O4ZkWGR27+yQ0B0ofCkXtoQPJ9vSg6AcbiaYy1PcDnec1XHPvtEqc77aV5uu+W/jJ5/eDBuPUxb2C1kIVTdIV5vFlZ/HVcmM0G0W76GpoQXP3jwT1JSYtqlDf8iPtG3Mwgs36eh3cEWDCYgG1ZKLzfoFyw7wYT0YVyLX7G0UpVtIDzQgV06hYbsxMxTJYP9dCAJCPvFMe9XCyoWQLtFVXgDT9O3QJ0lggjrpGs/yQiEFnguu2HfB9VpEEdrSFRoYeMxpPKinigVgozjqBfhPvbNnBr5kK/iqEYQHWG6iui6t80bFJMJ1bHTW1UZM7LFD+jxYj4oQIDAQAB
  • s2s2._domainkey.theusim.com
    CNAME s2.domainkey.u3292153.wl154.sendgrid.net
    • k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8XD+2u8vdryF8BLOSB60WdkYTGYTZCSyzLge5GlU8mbASPm7pYYCZkgjKIJC26p0LXgQg0P1HSRMgI6oRDGcIpMZTVox/teK2Rdq4ZUDOfSskCWLaE7+cxfvI9XpOMAX6E+105YyD3BWs4EufjrKAIo6pSN3ykILWAD74pwNl8QIDAQAB
  • defaultdefault._domainkey.theusim.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.theusim.com

    No TXT records returned for this selector.

  • mailmail._domainkey.theusim.com
    • k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z+FApQ6ra2VsXfbJP3HE6wAO0YTVEJt1TmeczhEd2Jiz/fcabIISgXEdSpTYJhb0ct0VJRxcg4c8c7wIDAQAB

DMARC TXT

1 record
  • v=DMARC1; p=quarantine; rua=mailto:mailmaster@dfhmg.com; ruf=mailto:mailmaster@dfhmg.com; pct=100; fo=1; rf=afrf; ri=86400;