DNS & email auth

warnLast checked
Findings5 findings

Recommended (4)

  • The record uses softfail (~all), which is weaker than fail (-all).

    SPF
  • No DKIM key was found for the common selectors checked.

    DKIM

    Custom selectors may still exist outside the common probe list.

  • DMARC policy is p=none, so it monitors but does not enforce.

    DMARC

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    DMARC

    Add rua=mailto:you@example.com to receive daily aggregate reports from receivers.

Healthy (1)

  • 5 MX records found.

    MX

Evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • aspmx2.googlemail.compriority 10
  • aspmx3.googlemail.compriority 10

Root TXT

3 records
  • v=spf1 include:_spf.google.com ~all
  • facebook-domain-verification=kdelejcswpdovtcglx8txrubv0ldxo
  • pinterest-site-verification=975fcf645db01dd78e95129dc7baf6e4

DKIM selectors

0 records
  • selector1selector1._domainkey.ecomqueens.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.ecomqueens.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.ecomqueens.com

    No TXT records returned for this selector.

  • 2023060120230601._domainkey.ecomqueens.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.ecomqueens.com

    No TXT records returned for this selector.

  • k1k1._domainkey.ecomqueens.com

    No TXT records returned for this selector.

  • k2k2._domainkey.ecomqueens.com

    No TXT records returned for this selector.

  • s1s1._domainkey.ecomqueens.com

    No TXT records returned for this selector.

  • s2s2._domainkey.ecomqueens.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.ecomqueens.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.ecomqueens.com

    No TXT records returned for this selector.

  • mailmail._domainkey.ecomqueens.com

    No TXT records returned for this selector.

DMARC

1 record
v=DMARC1; p=none
v=DMARC1
Identifies this TXT record as a DMARC policy. Must be the first tag.
p=none
Monitoring only: receivers deliver failing mail normally and just send reports.
sp=nonedefault
No sp= tag is published, so subdomains inherit the domain's p= policy.
pct=100default
No pct= tag is published, so the policy applies to all failing mail.
adkim=rdefault
No adkim= tag is published, so DKIM alignment is relaxed: any subdomain of the From domain may sign.
aspf=rdefault
No aspf= tag is published, so SPF alignment is relaxed: the envelope sender may be any subdomain of the From domain.
Raw JSON