DNS & email auth

warnLast checked
Findings5 findings
  • 3 MX records found.

  • The record uses 9 of 10 allowed DNS lookups.

    Adding another sender could push it over the limit and break SPF entirely.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • No DKIM key was found for the common selectors checked.

    Custom selectors may still exist outside the common probe list.

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

Raw evidence

MX

3 records
  • mx.zoho.compriority 10
  • mx2.zoho.compriority 20
  • mx3.zoho.compriority 50

Root TXT

2 records
  • v=spf1 include:zoho.com include:spfuser.webnode.com ~all
  • zoho-verification=zb05966219.zmverify.zoho.com

DKIM selectors

0 records
  • selector1selector1._domainkey.tatiagraphics.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.tatiagraphics.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.tatiagraphics.com

    No TXT records returned for this selector.

  • 2023060120230601._domainkey.tatiagraphics.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.tatiagraphics.com

    No TXT records returned for this selector.

  • k1k1._domainkey.tatiagraphics.com

    No TXT records returned for this selector.

  • k2k2._domainkey.tatiagraphics.com

    No TXT records returned for this selector.

  • s1s1._domainkey.tatiagraphics.com

    No TXT records returned for this selector.

  • s2s2._domainkey.tatiagraphics.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.tatiagraphics.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.tatiagraphics.com

    No TXT records returned for this selector.

  • mailmail._domainkey.tatiagraphics.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=none; rua=mailto:info@tatiagraphics.com