Monitor this domain

DNS & email auth

warnLast checked
Findings6 findings

  • 5 MX records found.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector google has a healthy RSA key.

    google (google._domainkey.diacreative.com)

  • DKIM selector default has a healthy RSA key.

    default (default._domainkey.diacreative.com)

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    Add rua=mailto:you@example.com to receive daily aggregate reports from receivers.

Raw evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • alt3.aspmx.l.google.compriority 10
  • alt4.aspmx.l.google.compriority 10

Root TXT

4 records
  • canva-site-verification=BTR5C8jlz7N9aZyRBq2Kxg
  • v=DMARC1; p=quarantine; pct=50; rua=mailto:dmarc-rua@diacreative.com
  • clickfunnels-domain-verification=jdAMkD
  • v=spf1 +a +mx +ip4:35.215.90.182 include:diacreative.com.spf.auto.dnssmarthost.net include:mailer.myclickfunnels.com ~all

DKIM selectors

2 records
  • selector1selector1._domainkey.diacreative.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.diacreative.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.diacreative.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+ZOW1fm0KMnEtH9bX32CKp+3P1e4DMr9GImXxfRVYSbs4o6ZTEc7HqmiXGFOxMLKx75Oh9m+NbKpxCBT8K8ye1lsUajwmEm67IXWwd0Yq2SOnwKCQr9k4x/Vsi+x9AqB7WGTXiXj0hx7uy/R4246xbT3ESh6mrILPpQFmzTnSF1bwKxjICkSRGLH3ePqptYacBIHRdmKFYAnBzs5TUmAtuBGQqgGdpC2uRIFNI4r0sSsRIcIbjN3fBD3+QI2H7gqkIkHoy+70n4uNuxVsLZdGxluBiArHviz6V3FtoIpl5zTmk25NZHbe7tbcjzqOOQS3GXtoDwZ3dGYlqQnP42FwIDAQAB
  • 2023060120230601._domainkey.diacreative.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.diacreative.com

    No TXT records returned for this selector.

  • k1k1._domainkey.diacreative.com

    No TXT records returned for this selector.

  • k2k2._domainkey.diacreative.com

    No TXT records returned for this selector.

  • s1s1._domainkey.diacreative.com

    No TXT records returned for this selector.

  • s2s2._domainkey.diacreative.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.diacreative.com
    CNAME diacreative.com.default.dkim.auto.dnssmarthost.net
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOVFcEzlihB6odT4kZQWIweZi62QIuYDj0v7xpli+IAL/a+xJt0611uw6J0F9rHKZ+5hp2MlNRaN8IjzOitylVJQHQXvJRgkWhInbAGHTCwj0HB15CctZlrj6nFetLydntxxdG0cBVaCXdjnfq7MKU+hyBKy4vJQiSpnPNEN7CWcHfVigUaZM5C8rI4PX8dGF5mZT72uyhWW95XRigRrU8HMtAZGLdHP80hTfP4RgqUcVDPGEYA6q+8DV6ty836Kxt/s6ALto4HLPLG6KX3fImHh+37bjkdpUASRtlbYo/wRHPsqWJP/Ta4LB16wEyHR1JARKxHCpHIf9LH6MYzQywIDAQAB;
  • dkimdkim._domainkey.diacreative.com

    No TXT records returned for this selector.

  • mailmail._domainkey.diacreative.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=none; aspf=r; adkim=r;