DNS & email auth

warnLast checked
Findings5 findings
  • 5 MX records found.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector google has a healthy RSA key.

    google (google._domainkey.rootedrock.com)

  • DKIM selector k2 has a healthy RSA key.

    k2 (k2._domainkey.rootedrock.com)

  • DMARC policy is enforced with p=quarantine.

Raw evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • alt3.aspmx.l.google.compriority 10
  • alt4.aspmx.l.google.compriority 10

Root TXT

2 records
  • google-site-verification=2621_hdFwhHovcFZ8QBpaz3dt2HF1dlS8yyKBEXLun4
  • v=spf1 include:_spf.google.com include:servers.mcsv.net ~all

DKIM selectors

2 records
  • selector1selector1._domainkey.rootedrock.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.rootedrock.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.rootedrock.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhjXCHIv2wMaIOpp63Qk3qFFsoUCacenxL/h4AZWGu0it4lS8+YWSn2pdMo16PfTS8L3IhGbrjCXUqpcdtvj6a75Cl03R00BIiFLs4NNPvgNPhTQH482rPy+YOyTzN3QGU2uE+rD7E/+MvaUa1Hg8tW/mpu7AsGdoYCmHTGAguaeCXiZZxVQhRsH5KRtU0NZjNXX3TwzVr3LyCjNOExS4CUD1qZ/jVWF/0EPpvGCuiZfs6WVzTupp5C+10E9e3gGez9xbymtwEVgQmhiUx/3EGDYg9GYwBJtS4dhoXj89w6m7VvGeorVqn0T7/w3CSR19A5Sf2yzvX8q0KEHN019CwIDAQAB
  • 2023060120230601._domainkey.rootedrock.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.rootedrock.com

    No TXT records returned for this selector.

  • k1k1._domainkey.rootedrock.com
    CNAME dkim1.mcsv.net

    No TXT records returned for this selector.

  • k2k2._domainkey.rootedrock.com
    CNAME dkim2.mcsv.net
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA0b90ObWaLDc+i9MtTNmGeWO009hr20fIxhGg6XBT2kjZ1DTThopSe1nAndsupmcBwlQ5Q6LJ+ZAxLcujnPIxM0ZBLmgpkv8u6RfY4eFP8OLvdAW3oSuB0DyLDigQX4Sj8wBO4YIdQH6AAmBeOsidsKAFNFUCpc3vCxtBDR12U+cBg724l3sBkMQ8evnz6idnqxq9QAVYh8k4kJ+RP+6cqTdy7LjIm8xY/bQNpQIpGUAuDo2DjLcCDun9DAI4Q/3z+Q0o9QuQIDAQAB;
  • s1s1._domainkey.rootedrock.com

    No TXT records returned for this selector.

  • s2s2._domainkey.rootedrock.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.rootedrock.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.rootedrock.com

    No TXT records returned for this selector.

  • mailmail._domainkey.rootedrock.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=quarantine; adkim=r; aspf=r; rua=mailto:dmarc_rua@onsecureserver.net;