DNS & email auth

warnLast checked
Findings7 findings

Recommended (2)

  • The record uses softfail (~all), which is weaker than fail (-all).

    SPF
  • DKIM selector k1 uses a 1024-bit RSA key.

    DKIM

    k1 (k1._domainkey.croud.com); use at least 2048 bits.

Healthy (5)

  • 5 MX records found.

    MX
  • DKIM selector google has a healthy RSA key.

    DKIM

    google (google._domainkey.croud.com)

  • DKIM selector s1 has a healthy RSA key.

    DKIM

    s1 (s1._domainkey.croud.com)

  • DKIM selector s2 has a healthy RSA key.

    DKIM

    s2 (s2._domainkey.croud.com)

  • DMARC policy is enforced with p=quarantine.

    DMARC

Evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • alt3.aspmx.l.google.compriority 10
  • alt4.aspmx.l.google.compriority 10

Root TXT

18 records
  • access-domain-verification=739e60bd3497f56f7fb83388483442ebbaa065e31c1298fbfd7cdcd29ad10c68
  • amazonses:2LEAbmOTU1mUCVScKQPGE1YnNDDATLTbcM2c5QVzk+4=
  • anthropic-domain-verification-nycc4k=5UEedEp8yVy7utkxwZn0FPLtp
  • apple-domain-verification=JMYGIjJrLs9O27SW
  • atlassian-domain-verification=TCDvgE2s7h3J2YJAuvR6jr/yU6lj2XImkIc2qmJrPaRGN5Iu2r877QRVgWNeRS9A
  • box-domain-verification=d62977bc3a13d30c6319e35e5427fed7dddce0222ad0f49753f711bd1d868e43
  • dropbox-domain-verification=z65zf345h26a
  • google-site-verification=BOUeBhvnBfADiPASkWW5vkfwzE3Dterte6czMGs_p6w
  • google-site-verification=lGr9tOG2lFSxQpKmVu8J6yNRYo-PZCmFoBtXhkWVS1Y
  • lucidlink-verification=8E0DD5JW0SDGVWJV9VE3B4X1P0
  • protonmail-verification=9523bee28112e6ba3c34bb3cbf36aa475304f497
  • slack-domain-verification=DHOrumtv7lbOdpQSGkPGp8XyInupwkZ5X3geHw7P
  • teamtailor=3ef368f047d465fef52845614aa52c82
  • tiktok-developers-site-verification=xVuadB60qvxA8jR3fBAMcM7F7tBkuadn
  • v=spf1 include:_spf.google.com include:amazonses.com include:servers.mcsv.net include:sendgrid.net include:3306408.spf07.hubspotemail.net ~all
  • MS=ms10799271
  • MS=ms14680847
  • ZOOM_verify_ItVoLdjaLkGUhkX0MDbkFq

DKIM selectors

4 records
  • selector1selector1._domainkey.croud.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.croud.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.croud.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbKWD8Y4+ucbU9F/Uup9K1BOnWu5O/AUXfk76sBhuli3kYgNi9v2ZI3iZBUSKQDW/9tYffdtYoJKCb66FnNU10X1HeyDERkYLZIruE/pb1YST/whGYGekF5MunEAfaWRRkD8K6isD1z/hUYhK9UZCaHeSdj188iCBSZ6cHVRUjdrUjDPrmLkCBjrEv1tRjc4A Ig4N4mLZ1YEeM6/v5o8QLK04VtYEyZTQTPPcc2GoVeO4SG6OynHI+XLfvdoXWMpyQvy7Pbp5aRmJmsnE1W1yLuVRBE10s59moy4xBv8n/YDknlr8XXWq5ijEsBR9RXAwMWJMaiMxT/Imx+a9JGNewIDAQAB
  • 2023060120230601._domainkey.croud.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.croud.com

    No TXT records returned for this selector.

  • k1k1._domainkey.croud.com
    CNAME dkim.mcsv.net
    • k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUoNyIR4Bn84LVcfZE20rmDeXQblIupNWBqLXM1Q+VieI/eZu/7k9/vOkLSaQQdml4Cv8lb3PcnluMVIhQIDAQAB;
  • k2k2._domainkey.croud.com

    No TXT records returned for this selector.

  • s1s1._domainkey.croud.com
    CNAME s1.domainkey.u36408320.wl071.sendgrid.net
    • k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tzD3+svIz7gZnR5+e8PChXm9v9nUOrKVaUOqzHpSFMp/uWve2eig73zxUmRtO/QgPI/k0+2wIhmjrt6l5JrfdnLb11CyW+3/BPkt/gidauDlCMG5cC6SgyBYxUHzI4kpjpFQwvj/14f80jTO6CaOrTRtCnibc86p6eZlr/BjQwAsI+IS1Gpe4rFqnCN08ePtVgeqdETzsDivQKqfrEeHQKyCDXvpRnnUW+i2XN5YfkuKZCPnAzQDPLJBLoGTsx5tUVzGrnc0Tgn94lqNRdo3w1g9+dPhTGf0HkljBSrTZii5mUU8LHFsfk03z1a44O/sSHb+0WfZAqn0HHiIFBZXQIDAQAB
  • s2s2._domainkey.croud.com
    CNAME s2.domainkey.u36408320.wl071.sendgrid.net
    • k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/0vzVQaKPC/RIkL7aPeos4htkdoAHCG8lbXwuJgS1OFvyQr2Ray2daFVSVq6sj8WWpDRzG1rLBAzPW1yAhs3mKNevoILx1uKI/Lg+46oiq1w+hqWSok6zDDF6vzg8SucQlvBeGO6MAT9LsqPlQIbprS50WAn1mHFmxCT/Aa94EtgtcwvdT09Ouub0YCTUQs+sgKVMhk48H9teNqaxxEEx+lzrkQ3TAkMvo8Bnh6EFIXjFyuxd9LC9uoM2RVC+6QHU0k0sX6y+atmPx8n+rwbC9j9q09PU8JzPXkQ02VM5W7nIGDYrzPKBAFi0EdfmSO3yA2meTXxR0QCkVzqSFrCQIDAQAB
  • defaultdefault._domainkey.croud.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.croud.com

    No TXT records returned for this selector.

  • mailmail._domainkey.croud.com

    No TXT records returned for this selector.

DMARC

1 record
v=DMARC1; p=quarantine; rua=mailto:dmarc@croud.com
v=DMARC1
Identifies this TXT record as a DMARC policy. Must be the first tag.
p=quarantine
Receivers treat failing mail with suspicion, typically sending it to spam.
rua=mailto:dmarc@croud.com
Receivers send daily aggregate reports about passing and failing mail to dmarc@croud.com.
sp=quarantinedefault
No sp= tag is published, so subdomains inherit the domain's p= policy.
pct=100default
No pct= tag is published, so the policy applies to all failing mail.
adkim=rdefault
No adkim= tag is published, so DKIM alignment is relaxed: any subdomain of the From domain may sign.
aspf=rdefault
No aspf= tag is published, so SPF alignment is relaxed: the envelope sender may be any subdomain of the From domain.
Raw JSON