DNS & email auth

warnLast checked
Findings6 findings
  • 1 MX record found.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector s2 uses a 1024-bit RSA key.

    s2 (s2._domainkey.leadtoconversion.com); use at least 2048 bits.

  • DKIM selector s1 has a healthy RSA key.

    s1 (s1._domainkey.leadtoconversion.com)

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    Add rua=mailto:you@example.com to receive daily aggregate reports from receivers.

  • DMARC policy is enforced with p=reject.

Raw evidence

MX

1 record
  • smtp.google.compriority 1

Root TXT

6 records
  • brevo-code:24f5c59377d9bc4a35d537de76c21770
  • facebook-domain-verification=3sawri0nel19yjfbhgyyv0los09z3t
  • google-site-verification=6RCw2kWqggtH-BTZL9zvyjOT2lrvd64KhuSONF8VVig
  • google-site-verification=Ybya-EdutINwXKFSuPbNUfMxRAMErYJrx74AchktWMY
  • v=spf1 include:_spf.google.com include:relay.mailchannels.net include:21644571.spf10.hubspotemail.net ~all
  • 1password-site-verification=ISRBKYIEJJBANEDGXKC56NTFX4

DKIM selectors

2 records
  • selector1selector1._domainkey.leadtoconversion.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.leadtoconversion.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.leadtoconversion.com

    No TXT records returned for this selector.

  • 2023060120230601._domainkey.leadtoconversion.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.leadtoconversion.com

    No TXT records returned for this selector.

  • k1k1._domainkey.leadtoconversion.com

    No TXT records returned for this selector.

  • k2k2._domainkey.leadtoconversion.com

    No TXT records returned for this selector.

  • s1s1._domainkey.leadtoconversion.com
    CNAME s1.domainkey.u2758135.wl136.sendgrid.net
    • k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MadGUA/kpBbAKtv7FEvNcPB5o/Ub0Dfu7iKUuKNVtdPMuuxr3iEWifAa+cGSdJyq3IkZvuR06tt92T1ZLqDpW5TtP1kVR5Ujw+KzP37MESzQv4FvO5Df3KPsNqc7TVzjKm3fz7ohwUPdjpepsdozXS3DUXP4JrHjkCDKR6ZaEr8tN3qRGMuFJmttr6IhkcsZ76QYzoQZdfpjKPfidqUh2V1C8yO8JiQEfftDDsXDWbWvmCCrGI8lDw7iu+ZuBB/TcWjSCOAgif+5i6OzAiYUnehXffc1kbo2Q3UtygmBfc9pU7ZbNxeQbmssHnQ5iA+sn/vCTJY3ezKOuavO5xBhQIDAQAB
  • s2s2._domainkey.leadtoconversion.com
    CNAME s2.domainkey.u2758135.wl136.sendgrid.net
    • k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC94lVsoH+FSl28MKwfyiiLnJH+iXYlf9TYmygDVi1vuQ7mZQfQCHTvWhR9tq6GGyxPCEhgYf8cWKBCEgG1/DitHWW9e2bOzXHKUhK5p/WleKusrBizGN7C4XYeigJGAFi6bmaeQ4xBcKIBY92XZG8WYkw1Mhz7K8C06OsGC3y7PQIDAQAB
  • defaultdefault._domainkey.leadtoconversion.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.leadtoconversion.com

    No TXT records returned for this selector.

  • mailmail._domainkey.leadtoconversion.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1;p=reject;pct=100