← Interactive report

juceboxlocalmarketingpartners.com

failScanned ·
Summary

juceboxlocalmarketingpartners.com has critical problems

2To fix now
2Recommended
5Healthy

DNS & email auth

failLast checked
Findings7 findings

Fix now (2)

  • DKIM selector default has invalid public key data.

    DKIM

    default (default._domainkey.juceboxlocalmarketingpartners.com)

    How to fix

    Re-copy the public key from your email provider — the published data doesn't decode.

  • DKIM records were found, but none contained a healthy key.

    DKIM

Recommended (2)

  • DKIM selector google uses a 1024-bit RSA key.

    DKIM

    google (google._domainkey.juceboxlocalmarketingpartners.com)

    How to fix

    Rotate to an RSA key of at least 2048 bits.

  • Subdomains use the weaker sp=quarantine while the domain enforces p=reject.

    DMARC

    Spoofers can target any subdomain, e.g. invoices.yourdomain.com.

    How to fix

    Remove sp= or match it to p=.

Healthy (3)

  • 5 MX records found.

    MX

  • SPF record is valid, using 5 of 10 DNS lookups.

    SPF

  • DMARC policy is enforced with p=reject.

    DMARC

Evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • aspmx2.googlemail.compriority 10
  • aspmx3.googlemail.compriority 10

SPF

5 of 10 lookups
DNS lookups5 / 10
juceboxlocalmarketingpartners.com
v=spf1 a mx a:out.webaccountserver.com ip4:192.138.189.30 ip4:66.198.240.9 include:_spf.google.com include:relay.mailchannels.net -all
include:_spf.google.com
v=spf1 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ~all
include:relay.mailchannels.net
v=spf1 ip4:23.83.208.0/20 ip4:35.85.190.185/32 ~all

Root TXT

3 records
  • facebook-domain-verification=lgscnao4efysc5b8azalme51j902e7
  • google-site-verification=XlA7Xk24aBiGVE4cZLm3D4tiI3b242AWDZ1WMfWSD0g
  • v=spf1 a mx a:out.webaccountserver.com ip4:192.138.189.30 ip4:66.198.240.9 include:_spf.google.com include:relay.mailchannels.net -all

DKIM selectors

2 records
  • googlegoogle._domainkey.juceboxlocalmarketingpartners.com
    • v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCdjggmJKys4MyR7k1Eb6Mrh6xToHqE/F5VDPGdhuYB7vhAzdxbPgENiW80mNag7slZWOX5CeX3WUCHNaFkmqRyCWEUakDQSWQbEiJHt6QMjfd5jROI3ckCURAfH/hBWnfCFpUSMZtRbMi+YxXzLAkOBK0ZAZOEplhu8Snmcs4FOwIDAQAB
  • defaultdefault._domainkey.juceboxlocalmarketingpartners.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4T66EeR1P0PoSCd6kPe4Qh8+6/kwlM4Ho4aAJ8HVHdxhJtKEhkWqC8XPoP7f62Sf4W52oc05u/oaqO8lfBnnJpXhnVze3Q+4ws1YlPW6RHq0yNXK40KzF9IrwkQyuwzFyeDHa4YUa29AUNRcoHybO5njrLTAtFcNECgqc2pPZih8h1TXJlHxSPh+iSIVjBSD ________________________________________ UnRZZTBy5b1kdxFhBOqZc1ShDln+skUXOYCQ/xqxwEU5hn3w9pE+DH5q6f9bPccYTSRjEfuwXM4IsBVQHrDJhoybjspRZnQwKWtKVOLIHKGMqo3bffoqlc+3IV1QqkdIVXSQmyzVMd4ZrLabtFzZwIDAQAB;

Probed with no records: selector1, selector2, 20230601, 20210112, k1, k2, s1, s2, dkim, mail

DMARC

1 record
v=DMARC1;p=reject;sp=quarantine;adkim=r;aspf=r;pct=100;fo=0;rf=afrf;ri=86400;rua=mailto:info@juceboxlocalmarketingpartners.com;ruf=mailto:info@juceboxlocalmarketingpartners.com
v=DMARC1
Identifies this TXT record as a DMARC policy. Must be the first tag.
p=reject
Receivers refuse mail that fails DMARC outright.
sp=quarantine
Policy for subdomains, overriding p=. Receivers treat failing mail with suspicion, typically sending it to spam.
adkim=r
Relaxed DKIM alignment: the DKIM signature may come from any subdomain of the From domain.
aspf=r
Relaxed SPF alignment: the envelope sender may be any subdomain of the From domain.
pct=100
The policy applies to all failing mail.
fo=0
Controls when failure reports are generated, e.g. 1 asks for a report when any underlying check fails.
rf=afrf
Not a standard DMARC tag. Receivers ignore it.
ri=86400
Requested interval between aggregate reports, in seconds. Most receivers report daily regardless.
rua=mailto:info@juceboxlocalmarketingpartners.com
Receivers send daily aggregate reports about passing and failing mail to info@juceboxlocalmarketingpartners.com.
ruf=mailto:info@juceboxlocalmarketingpartners.com
Receivers may send per-message failure reports to info@juceboxlocalmarketingpartners.com. Many receivers skip these for privacy reasons.
Raw JSON
{
  "mx": [
    {
      "type": "MX",
      "exchange": "aspmx.l.google.com",
      "priority": 1
    },
    {
      "type": "MX",
      "exchange": "alt1.aspmx.l.google.com",
      "priority": 5
    },
    {
      "type": "MX",
      "exchange": "alt2.aspmx.l.google.com",
      "priority": 5
    },
    {
      "type": "MX",
      "exchange": "aspmx2.googlemail.com",
      "priority": 10
    },
    {
      "type": "MX",
      "exchange": "aspmx3.googlemail.com",
      "priority": 10
    }
  ],
  "spf": {
    "tree": {
      "via": "root",
      "domain": "juceboxlocalmarketingpartners.com",
      "issues": [],
      "records": [
        "v=spf1 a mx a:out.webaccountserver.com ip4:192.138.189.30 ip4:66.198.240.9 include:_spf.google.com include:relay.mailchannels.net -all"
      ],
      "children": [
        {
          "via": "include",
          "domain": "_spf.google.com",
          "issues": [],
          "records": [
            "v=spf1 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ~all"
          ],
          "children": []
        },
        {
          "via": "include",
          "domain": "relay.mailchannels.net",
          "issues": [],
          "records": [
            "v=spf1 ip4:23.83.208.0/20 ip4:35.85.190.185/32 ~all"
          ],
          "children": []
        }
      ]
    },
    "truncated": false,
    "lookupCount": 5,
    "voidLookupCount": 0
  },
  "dkim": [
    {
      "cname": [],
      "records": [],
      "selector": "selector1",
      "queryName": "selector1._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "selector2",
      "queryName": "selector2._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [
        "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCdjggmJKys4MyR7k1Eb6Mrh6xToHqE/F5VDPGdhuYB7vhAzdxbPgENiW80mNag7slZWOX5CeX3WUCHNaFkmqRyCWEUakDQSWQbEiJHt6QMjfd5jROI3ckCURAfH/hBWnfCFpUSMZtRbMi+YxXzLAkOBK0ZAZOEplhu8Snmcs4FOwIDAQAB"
      ],
      "selector": "google",
      "queryName": "google._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20230601",
      "queryName": "20230601._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20210112",
      "queryName": "20210112._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k1",
      "queryName": "k1._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k2",
      "queryName": "k2._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s1",
      "queryName": "s1._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s2",
      "queryName": "s2._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [
        "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4T66EeR1P0PoSCd6kPe4Qh8+6/kwlM4Ho4aAJ8HVHdxhJtKEhkWqC8XPoP7f62Sf4W52oc05u/oaqO8lfBnnJpXhnVze3Q+4ws1YlPW6RHq0yNXK40KzF9IrwkQyuwzFyeDHa4YUa29AUNRcoHybO5njrLTAtFcNECgqc2pPZih8h1TXJlHxSPh+iSIVjBSD ________________________________________ UnRZZTBy5b1kdxFhBOqZc1ShDln+skUXOYCQ/xqxwEU5hn3w9pE+DH5q6f9bPccYTSRjEfuwXM4IsBVQHrDJhoybjspRZnQwKWtKVOLIHKGMqo3bffoqlc+3IV1QqkdIVXSQmyzVMd4ZrLabtFzZwIDAQAB;"
      ],
      "selector": "default",
      "queryName": "default._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "dkim",
      "queryName": "dkim._domainkey.juceboxlocalmarketingpartners.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "mail",
      "queryName": "mail._domainkey.juceboxlocalmarketingpartners.com"
    }
  ],
  "rootTxt": [
    "facebook-domain-verification=lgscnao4efysc5b8azalme51j902e7",
    "google-site-verification=XlA7Xk24aBiGVE4cZLm3D4tiI3b242AWDZ1WMfWSD0g",
    "v=spf1 a mx a:out.webaccountserver.com ip4:192.138.189.30 ip4:66.198.240.9 include:_spf.google.com include:relay.mailchannels.net -all"
  ],
  "dmarcTxt": [
    "v=DMARC1;p=reject;sp=quarantine;adkim=r;aspf=r;pct=100;fo=0;rf=afrf;ri=86400;rua=mailto:info@juceboxlocalmarketingpartners.com;ruf=mailto:info@juceboxlocalmarketingpartners.com"
  ]
}

SSL & domain expiry

passLast checked
Findings2 findings

Healthy (2)

  • The TLS certificate is valid until Oct 26, 2026.

    TLS certificate

    Issued by Let's Encrypt.

  • Registration expiry is not published for this domain.

    Domain expiry

    The registry does not expose expiry data over RDAP.

Evidence

TLS certificate

port 443
Issued to
www.juceboxlocalmarketingpartners.com
Issued by
Let's Encrypt
Valid from
Valid until
Days remaining
41 days
Verification
trusted

Registration

unpublished

The registry does not expose expiry data over RDAP.

Raw JSON
{
  "tls": {
    "ok": true,
    "issuer": "Let's Encrypt",
    "subject": "www.juceboxlocalmarketingpartners.com",
    "validTo": "2026-10-26T16:54:50.000Z",
    "validFrom": "2026-07-28T16:54:51.000Z",
    "authorized": true,
    "authorizationError": null
  },
  "domainExpiry": {
    "known": false
  },
  "registration": null
}

Generated by Internet Posture · internetposture.com