Print reportMonitor this domain

DNS & email auth

warnLast checked
Findings5 findings

Recommended (4)

  • The record uses softfail (~all), which is weaker than fail (-all).

    SPF

  • DKIM selector google uses a 1024-bit RSA key.

    DKIM

    google (google._domainkey.threebeaconmarketing.com); use at least 2048 bits.

  • DMARC policy is p=none, so it monitors but does not enforce.

    DMARC

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    DMARC

    Add rua=mailto:you@example.com to receive daily aggregate reports from receivers.

Healthy (1)

  • 5 MX records found.

    MX

Evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • alt3.aspmx.l.google.compriority 10
  • alt4.aspmx.l.google.compriority 10

Root TXT

2 records
  • v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all
  • google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw

DKIM selectors

23 records
  • selector1selector1._domainkey.threebeaconmarketing.com
    CNAME threebeaconmarketing.com
    • google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw
    • v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all
  • selector2selector2._domainkey.threebeaconmarketing.com
    CNAME threebeaconmarketing.com
    • google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw
    • v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all
  • googlegoogle._domainkey.threebeaconmarketing.com
    • v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCeKYh23e2bwChRug0o51RVZYQxRoVA1TdYCSdY29mOCIGpIGlKKRoFzLXy39jqeQ6yMYqneTdsOsYIp+HnNFIxBzS6ElJ7mHGPmiZONamvcfwLS6po2UL0miXjv0S/Tyyh2waFRI3kjc/w4CcO+BShN5hLF4/TQ1fNY2F0IoGUjwIDAQAB
  • 2023060120230601._domainkey.threebeaconmarketing.com
    CNAME threebeaconmarketing.com
    • google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw
    • v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all
  • 2021011220210112._domainkey.threebeaconmarketing.com
    CNAME threebeaconmarketing.com
    • v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all
    • google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw
  • k1k1._domainkey.threebeaconmarketing.com
    CNAME threebeaconmarketing.com
    • google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw
    • v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all
  • k2k2._domainkey.threebeaconmarketing.com
    CNAME threebeaconmarketing.com
    • google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw
    • v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all
  • s1s1._domainkey.threebeaconmarketing.com
    CNAME threebeaconmarketing.com
    • google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw
    • v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all
  • s2s2._domainkey.threebeaconmarketing.com
    CNAME threebeaconmarketing.com
    • google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw
    • v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all
  • defaultdefault._domainkey.threebeaconmarketing.com
    CNAME threebeaconmarketing.com
    • google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw
    • v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all
  • dkimdkim._domainkey.threebeaconmarketing.com
    CNAME threebeaconmarketing.com
    • v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all
    • google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw
  • mailmail._domainkey.threebeaconmarketing.com
    CNAME threebeaconmarketing.com
    • v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all
    • google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw

DMARC

1 record
v=DMARC1; p=none
v=DMARC1
Identifies this TXT record as a DMARC policy. Must be the first tag.
p=none
Monitoring only: receivers deliver failing mail normally and just send reports.
sp=nonedefault
No sp= tag is published, so subdomains inherit the domain's p= policy.
pct=100default
No pct= tag is published, so the policy applies to all failing mail.
adkim=rdefault
No adkim= tag is published, so DKIM alignment is relaxed: any subdomain of the From domain may sign.
aspf=rdefault
No aspf= tag is published, so SPF alignment is relaxed: the envelope sender may be any subdomain of the From domain.
Raw JSON
{
  "mx": [
    {
      "type": "MX",
      "exchange": "aspmx.l.google.com",
      "priority": 1
    },
    {
      "type": "MX",
      "exchange": "alt1.aspmx.l.google.com",
      "priority": 5
    },
    {
      "type": "MX",
      "exchange": "alt2.aspmx.l.google.com",
      "priority": 5
    },
    {
      "type": "MX",
      "exchange": "alt3.aspmx.l.google.com",
      "priority": 10
    },
    {
      "type": "MX",
      "exchange": "alt4.aspmx.l.google.com",
      "priority": 10
    }
  ],
  "dkim": [
    {
      "cname": [
        "threebeaconmarketing.com"
      ],
      "records": [
        "google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw",
        "v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all"
      ],
      "selector": "selector1",
      "queryName": "selector1._domainkey.threebeaconmarketing.com"
    },
    {
      "cname": [
        "threebeaconmarketing.com"
      ],
      "records": [
        "google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw",
        "v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all"
      ],
      "selector": "selector2",
      "queryName": "selector2._domainkey.threebeaconmarketing.com"
    },
    {
      "cname": [],
      "records": [
        "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCeKYh23e2bwChRug0o51RVZYQxRoVA1TdYCSdY29mOCIGpIGlKKRoFzLXy39jqeQ6yMYqneTdsOsYIp+HnNFIxBzS6ElJ7mHGPmiZONamvcfwLS6po2UL0miXjv0S/Tyyh2waFRI3kjc/w4CcO+BShN5hLF4/TQ1fNY2F0IoGUjwIDAQAB"
      ],
      "selector": "google",
      "queryName": "google._domainkey.threebeaconmarketing.com"
    },
    {
      "cname": [
        "threebeaconmarketing.com"
      ],
      "records": [
        "google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw",
        "v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all"
      ],
      "selector": "20230601",
      "queryName": "20230601._domainkey.threebeaconmarketing.com"
    },
    {
      "cname": [
        "threebeaconmarketing.com"
      ],
      "records": [
        "v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all",
        "google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw"
      ],
      "selector": "20210112",
      "queryName": "20210112._domainkey.threebeaconmarketing.com"
    },
    {
      "cname": [
        "threebeaconmarketing.com"
      ],
      "records": [
        "google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw",
        "v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all"
      ],
      "selector": "k1",
      "queryName": "k1._domainkey.threebeaconmarketing.com"
    },
    {
      "cname": [
        "threebeaconmarketing.com"
      ],
      "records": [
        "google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw",
        "v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all"
      ],
      "selector": "k2",
      "queryName": "k2._domainkey.threebeaconmarketing.com"
    },
    {
      "cname": [
        "threebeaconmarketing.com"
      ],
      "records": [
        "google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw",
        "v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all"
      ],
      "selector": "s1",
      "queryName": "s1._domainkey.threebeaconmarketing.com"
    },
    {
      "cname": [
        "threebeaconmarketing.com"
      ],
      "records": [
        "google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw",
        "v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all"
      ],
      "selector": "s2",
      "queryName": "s2._domainkey.threebeaconmarketing.com"
    },
    {
      "cname": [
        "threebeaconmarketing.com"
      ],
      "records": [
        "google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw",
        "v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all"
      ],
      "selector": "default",
      "queryName": "default._domainkey.threebeaconmarketing.com"
    },
    {
      "cname": [
        "threebeaconmarketing.com"
      ],
      "records": [
        "v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all",
        "google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw"
      ],
      "selector": "dkim",
      "queryName": "dkim._domainkey.threebeaconmarketing.com"
    },
    {
      "cname": [
        "threebeaconmarketing.com"
      ],
      "records": [
        "v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all",
        "google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw"
      ],
      "selector": "mail",
      "queryName": "mail._domainkey.threebeaconmarketing.com"
    }
  ],
  "rootTxt": [
    "v=spf1 include:_spf.google.com include:spfa.mailendo.com include:_spf.wpcloud.com ~all",
    "google-site-verification=p6QuiNEpt6IHr-w0gy9V2wqlS0fqhJOYrRrIQ31MXsw"
  ],
  "dmarcTxt": [
    "v=DMARC1; p=none"
  ]
}