Print reportMonitor this domain

DNS & email auth

failLast checked
Findings7 findings

Fix now (2)

  • DKIM selector default has invalid public key data.

    DKIM

    default (default._domainkey.juceboxlocalmarketingpartners.com)

    How to fix

    Re-copy the public key from your email provider — the published data doesn't decode.

  • DKIM records were found, but none contained a healthy key.

    DKIM

Recommended (2)

  • DKIM selector google uses a 1024-bit RSA key.

    DKIM

    google (google._domainkey.juceboxlocalmarketingpartners.com)

    How to fix

    Rotate to an RSA key of at least 2048 bits.

  • Subdomains use the weaker sp=quarantine while the domain enforces p=reject.

    DMARC

    Spoofers can target any subdomain, e.g. invoices.yourdomain.com.

    How to fix

    Remove sp= or match it to p=.

Healthy (3)

  • 5 MX records found.

    MX

  • SPF record is valid, using 5 of 10 DNS lookups.

    SPF

  • DMARC policy is enforced with p=reject.

    DMARC

Evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • aspmx2.googlemail.compriority 10
  • aspmx3.googlemail.compriority 10

SPF

5 of 10 lookups
DNS lookups5 / 10
juceboxlocalmarketingpartners.com
v=spf1 a mx a:out.webaccountserver.com ip4:192.138.189.30 ip4:66.198.240.9 include:_spf.google.com include:relay.mailchannels.net -all
include:_spf.google.com
v=spf1 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ~all
include:relay.mailchannels.net
v=spf1 ip4:23.83.208.0/20 ip4:35.85.190.185/32 ~all

Root TXT

3 records
  • facebook-domain-verification=lgscnao4efysc5b8azalme51j902e7
  • google-site-verification=XlA7Xk24aBiGVE4cZLm3D4tiI3b242AWDZ1WMfWSD0g
  • v=spf1 a mx a:out.webaccountserver.com ip4:192.138.189.30 ip4:66.198.240.9 include:_spf.google.com include:relay.mailchannels.net -all

DKIM selectors

2 records
  • googlegoogle._domainkey.juceboxlocalmarketingpartners.com
    • v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCdjggmJKys4MyR7k1Eb6Mrh6xToHqE/F5VDPGdhuYB7vhAzdxbPgENiW80mNag7slZWOX5CeX3WUCHNaFkmqRyCWEUakDQSWQbEiJHt6QMjfd5jROI3ckCURAfH/hBWnfCFpUSMZtRbMi+YxXzLAkOBK0ZAZOEplhu8Snmcs4FOwIDAQAB
  • defaultdefault._domainkey.juceboxlocalmarketingpartners.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4T66EeR1P0PoSCd6kPe4Qh8+6/kwlM4Ho4aAJ8HVHdxhJtKEhkWqC8XPoP7f62Sf4W52oc05u/oaqO8lfBnnJpXhnVze3Q+4ws1YlPW6RHq0yNXK40KzF9IrwkQyuwzFyeDHa4YUa29AUNRcoHybO5njrLTAtFcNECgqc2pPZih8h1TXJlHxSPh+iSIVjBSD ________________________________________ UnRZZTBy5b1kdxFhBOqZc1ShDln+skUXOYCQ/xqxwEU5hn3w9pE+DH5q6f9bPccYTSRjEfuwXM4IsBVQHrDJhoybjspRZnQwKWtKVOLIHKGMqo3bffoqlc+3IV1QqkdIVXSQmyzVMd4ZrLabtFzZwIDAQAB;

Probed with no records: selector1, selector2, 20230601, 20210112, k1, k2, s1, s2, dkim, mail

DMARC

1 record
v=DMARC1;p=reject;sp=quarantine;adkim=r;aspf=r;pct=100;fo=0;rf=afrf;ri=86400;rua=mailto:info@juceboxlocalmarketingpartners.com;ruf=mailto:info@juceboxlocalmarketingpartners.com
v=DMARC1
Identifies this TXT record as a DMARC policy. Must be the first tag.
p=reject
Receivers refuse mail that fails DMARC outright.
sp=quarantine
Policy for subdomains, overriding p=. Receivers treat failing mail with suspicion, typically sending it to spam.
adkim=r
Relaxed DKIM alignment: the DKIM signature may come from any subdomain of the From domain.
aspf=r
Relaxed SPF alignment: the envelope sender may be any subdomain of the From domain.
pct=100
The policy applies to all failing mail.
fo=0
Controls when failure reports are generated, e.g. 1 asks for a report when any underlying check fails.
rf=afrf
Not a standard DMARC tag. Receivers ignore it.
ri=86400
Requested interval between aggregate reports, in seconds. Most receivers report daily regardless.
rua=mailto:info@juceboxlocalmarketingpartners.com
Receivers send daily aggregate reports about passing and failing mail to info@juceboxlocalmarketingpartners.com.
ruf=mailto:info@juceboxlocalmarketingpartners.com
Receivers may send per-message failure reports to info@juceboxlocalmarketingpartners.com. Many receivers skip these for privacy reasons.
Raw JSON
{
  "mx": [
    {
      "type": "MX",
      "exchange": "aspmx.l.google.com",
      "priority": 1
    },
    {
      "type": "MX",
      "exchange": "alt1.aspmx.l.google.com",
      "priority": 5
    },
    {
      "type": "MX",
      "exchange": "alt2.aspmx.l.google.com",
      "priority": 5
    },
    {
      "type": "MX",
      "exchange": "aspmx2.googlemail.com",
      "priority": 10
    },
    {
      "type": "MX",
      "exchange": "aspmx3.googlemail.com",
      "priority": 10
    }
  ],
  "spf": {
    "tree": {
      "via": "root",
      "domain": "juceboxlocalmarketingpartners.com",
      "issues": [],
      "records": [
        "v=spf1 a mx a:out.webaccountserver.com ip4:192.138.189.30 ip4:66.198.240.9 include:_spf.google.com include:relay.mailchannels.net -all"
      ],
      "children": [
        {
          "via": "include",
          "domain": "_spf.google.com",
          "issues": [],
          "records": [
            "v=spf1 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ~all"
          ],
          "children": []
        },
        {
          "via": "include",
          "domain": "relay.mailchannels.net",
          "issues": [],
          "records": [
            "v=spf1 ip4:23.83.208.0/20 ip4:35.85.190.185/32 ~all"
          ],
          "children": []
        }
      ]
    },
    "truncated": false,
    "lookupCount": 5,
    "voidLookupCount": 0
  },
  "dkim": [
    {
      "cname": [],
      "records": [],
      "selector": "selector1",
      "queryName": "selector1._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "selector2",
      "queryName": "selector2._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [
        "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCdjggmJKys4MyR7k1Eb6Mrh6xToHqE/F5VDPGdhuYB7vhAzdxbPgENiW80mNag7slZWOX5CeX3WUCHNaFkmqRyCWEUakDQSWQbEiJHt6QMjfd5jROI3ckCURAfH/hBWnfCFpUSMZtRbMi+YxXzLAkOBK0ZAZOEplhu8Snmcs4FOwIDAQAB"
      ],
      "selector": "google",
      "queryName": "google._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20230601",
      "queryName": "20230601._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20210112",
      "queryName": "20210112._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k1",
      "queryName": "k1._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k2",
      "queryName": "k2._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s1",
      "queryName": "s1._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s2",
      "queryName": "s2._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [
        "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4T66EeR1P0PoSCd6kPe4Qh8+6/kwlM4Ho4aAJ8HVHdxhJtKEhkWqC8XPoP7f62Sf4W52oc05u/oaqO8lfBnnJpXhnVze3Q+4ws1YlPW6RHq0yNXK40KzF9IrwkQyuwzFyeDHa4YUa29AUNRcoHybO5njrLTAtFcNECgqc2pPZih8h1TXJlHxSPh+iSIVjBSD ________________________________________ UnRZZTBy5b1kdxFhBOqZc1ShDln+skUXOYCQ/xqxwEU5hn3w9pE+DH5q6f9bPccYTSRjEfuwXM4IsBVQHrDJhoybjspRZnQwKWtKVOLIHKGMqo3bffoqlc+3IV1QqkdIVXSQmyzVMd4ZrLabtFzZwIDAQAB;"
      ],
      "selector": "default",
      "queryName": "default._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "dkim",
      "queryName": "dkim._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "mail",
      "queryName": "mail._domainkey.juceboxlocalmarketingpartners.com"
    }
  ],
  "rootTxt": [
    "facebook-domain-verification=lgscnao4efysc5b8azalme51j902e7",
    "google-site-verification=XlA7Xk24aBiGVE4cZLm3D4tiI3b242AWDZ1WMfWSD0g",
    "v=spf1 a mx a:out.webaccountserver.com ip4:192.138.189.30 ip4:66.198.240.9 include:_spf.google.com include:relay.mailchannels.net -all"
  ],
  "dmarcTxt": [
    "v=DMARC1;p=reject;sp=quarantine;adkim=r;aspf=r;pct=100;fo=0;rf=afrf;ri=86400;rua=mailto:info@juceboxlocalmarketingpartners.com;ruf=mailto:info@juceboxlocalmarketingpartners.com"
  ]
}