DNS & email auth

warnLast checked
Findings5 findings
  • 1 MX record found.

  • SPF record is valid, using 1 of 10 DNS lookups.

  • DKIM selector k2 has a healthy RSA key.

    k2 (k2._domainkey.elevatemybrand.com)

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    Add rua=mailto:you@example.com to receive daily aggregate reports from receivers.

Raw evidence

MX

1 record
  • elevatemybrand-com.mail.protection.outlook.compriority 0

Root TXT

3 records
  • google-site-verification=wSwsFZn6tmdzQyLMGOoati5y-r0G2wbxPZSEvWSZRb8
  • v=spf1 include:spf.protection.outlook.com -all
  • MS=B781FF4EB5A76976EDD23F6DA5D0BE0B0C7D7ABF

DKIM selectors

12 records
  • selector1selector1._domainkey.elevatemybrand.com
    • v=spf1 include:emailsrvr.com -all
  • selector2selector2._domainkey.elevatemybrand.com
    • v=spf1 include:emailsrvr.com -all
  • googlegoogle._domainkey.elevatemybrand.com
    • v=spf1 include:emailsrvr.com -all
  • 2023060120230601._domainkey.elevatemybrand.com
    • v=spf1 include:emailsrvr.com -all
  • 2021011220210112._domainkey.elevatemybrand.com
    • v=spf1 include:emailsrvr.com -all
  • k1k1._domainkey.elevatemybrand.com
    • v=spf1 include:emailsrvr.com -all
  • k2k2._domainkey.elevatemybrand.com
    CNAME dkim2.mcsv.net
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA0b90ObWaLDc+i9MtTNmGeWO009hr20fIxhGg6XBT2kjZ1DTThopSe1nAndsupmcBwlQ5Q6LJ+ZAxLcujnPIxM0ZBLmgpkv8u6RfY4eFP8OLvdAW3oSuB0DyLDigQX4Sj8wBO4YIdQH6AAmBeOsidsKAFNFUCpc3vCxtBDR12U+cBg724l3sBkMQ8evnz6idnqxq9QAVYh8k4kJ+RP+6cqTdy7LjIm8xY/bQNpQIpGUAuDo2DjLcCDun9DAI4Q/3z+Q0o9QuQIDAQAB;
  • s1s1._domainkey.elevatemybrand.com
    • v=spf1 include:emailsrvr.com -all
  • s2s2._domainkey.elevatemybrand.com
    • v=spf1 include:emailsrvr.com -all
  • defaultdefault._domainkey.elevatemybrand.com
    • v=spf1 include:emailsrvr.com -all
  • dkimdkim._domainkey.elevatemybrand.com
    • v=spf1 include:emailsrvr.com -all
  • mailmail._domainkey.elevatemybrand.com
    • v=spf1 include:emailsrvr.com -all

DMARC TXT

1 record
  • v=DMARC1; p=none;