DNS & email auth

warnLast checked
Findings7 findings
  • 2 MX records found.

  • The record uses 10 of 10 allowed DNS lookups.

    Adding another sender could push it over the limit and break SPF entirely.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector k1 uses a 1024-bit RSA key.

    k1 (k1._domainkey.logicalposition.com); use at least 2048 bits.

  • DKIM selector s2 uses a 1024-bit RSA key.

    s2 (s2._domainkey.logicalposition.com); use at least 2048 bits.

  • DKIM selector s1 has a healthy RSA key.

    s1 (s1._domainkey.logicalposition.com)

  • DMARC policy is enforced with p=quarantine.

Raw evidence

MX

2 records
  • us-smtp-inbound-1.mimecast.compriority 10
  • us-smtp-inbound-2.mimecast.compriority 10

Root TXT

10 records
  • ln808dmkvfodgp2tpgqjhccqh8
  • v=spf1 include:us._netblocks.mimecast.com include:spf.protection.outlook.com ip4:52.186.121.110 include:2686234.spf06.hubspotemail.net include:servers.mcsv.net include:mailgun.org include:amazonses.com ~all
  • MS=ms94286276
  • ZOOM_verify_xkm5auGdjWsOJgOC0edF4f
  • apple-domain-verification=fWPt6O0GUNI5oAwW
  • atlassian-domain-verification=s10QI1NhAC13wsFIoBSyygQblqLquE9IetqaduMwxtWbv5uR1KIPBSgsRawjI+gk
  • facebook-domain-verification=jq6osxbkag2j7gc5wp5evu8c4x1p5k
  • google-site-verification=3Z3T23lgeXxI8BvD6TYGeasaXIPgMNt3UTM2QWCFsvk
  • google-site-verification=w49XYapu8yyq_24rJ-_tW7l2LD0qYW5Q3f-us8hzJLQ
  • klaviyo-site-verification=NXD9pp

DKIM selectors

3 records
  • selector1selector1._domainkey.logicalposition.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.logicalposition.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.logicalposition.com

    No TXT records returned for this selector.

  • 2023060120230601._domainkey.logicalposition.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.logicalposition.com

    No TXT records returned for this selector.

  • k1k1._domainkey.logicalposition.com
    CNAME dkim.mcsv.net
    • k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUoNyIR4Bn84LVcfZE20rmDeXQblIupNWBqLXM1Q+VieI/eZu/7k9/vOkLSaQQdml4Cv8lb3PcnluMVIhQIDAQAB;
  • k2k2._domainkey.logicalposition.com

    No TXT records returned for this selector.

  • s1s1._domainkey.logicalposition.com
    CNAME s1.domainkey.u246655.wl156.sendgrid.net
    • k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CPjIwVH/jfTIoGFFFpyMoeeXZqrM4hma7/Kt5OjTjWA02AcFZO+rsSKUQnzASg3slpEavnfJFet6ZeJJOu0ShJSbv/SuarjHP+qfKT8Ga3JoxvRkP0WGsWg+gG9TiQgMkrYG4YNepfi6xPiaN33YxbWBF2KaL9yKUqKU84XmilWX+IEZsAZLCyWVHDK39km2ZTCHv10+sdHe5upRXf8GSEUfVMOKnxBaXPRONW4gTnrPVucLokSuq52Zt3vl9neC5nrtjXV/kQRN1uk24eGKM13q23rVeSnCnZ3QXIltuogPI+/j+5p8Xt4qnS2ELEymcyEygrLJDbaPDeN4TwtFwIDAQAB
  • s2s2._domainkey.logicalposition.com
    CNAME s2.domainkey.u246655.wl156.sendgrid.net
    • k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDpDCE+FicPuc28f0mppTrjpIHMXo2RQw3wFWU/R5xn657Frh4zF3XSCVkin4R9ZgxUAS/TDQwC5wLf3Y7EmuQZtZVwlrRZEkpMaGUsE8Rn9nuAlNWvSZuxYXz+BoB2cs/iHHEfK4zgb5C/Z+GQk9YhOZuaGUbOEqxJ9xt6BlcigwIDAQAB
  • defaultdefault._domainkey.logicalposition.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.logicalposition.com

    No TXT records returned for this selector.

  • mailmail._domainkey.logicalposition.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=quarantine; fo=1; rua=mailto:rua+logicalposition.com@dmarc.barracudanetworks.com; ruf=mailto:ruf+logicalposition.com@dmarc.barracudanetworks.com