Monitor this domain

DNS & email auth

warnLast checked
Findings7 findings

  • 5 MX records found.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector google uses a 1024-bit RSA key.

    google (google._domainkey.figmints.com); use at least 2048 bits.

  • DKIM selector s2 uses a 1024-bit RSA key.

    s2 (s2._domainkey.figmints.com); use at least 2048 bits.

  • DKIM selector s1 has a healthy RSA key.

    s1 (s1._domainkey.figmints.com)

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    Add rua=mailto:you@example.com to receive daily aggregate reports from receivers.

Raw evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • aspmx2.googlemail.compriority 10
  • aspmx3.googlemail.compriority 10

Root TXT

6 records
  • ahrefs-site-verification_123f67d9e46b49ae3373bb67ceb64befbdf2388e9f5f7194abf0a50e0ede6556
  • facebook-domain-verification=jxh0ra7fwoultb7jgu64hsvjssb2oq
  • loaderio=63977ae2de58e27762f3c74569c38ac3
  • google-site-verification=NLWcldFc67bK9r6hCw4q0PRcaP1jg7BsMkmb3yzXtdc
  • v=spf1 include:_spf.google.com include:313824.spf08.hubspotemail.net ~all
  • google-site-verification=tsgln1xtVj0Wa6nIZ4HpaOWZEcA-7JctTF1z_KNJ77I

DKIM selectors

3 records
  • selector1selector1._domainkey.figmints.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.figmints.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.figmints.com
    • v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDKsLLsjrdkEWGZLGyr37S8XTmPVz/3D7yUvvvHoqcfK6UmJHKESsPDe2KQMblR64utMOokNTYgEBEYAR8J+QnVbwHpjEFcHYVFQUWtz71Tzz9+o4GWSN6unjNjYavM7ze6orsqds4JQ74PzFIF2S+qG9h/1Qvgu6zRKoC2LoGsnwIDAQAB
  • 2023060120230601._domainkey.figmints.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.figmints.com

    No TXT records returned for this selector.

  • k1k1._domainkey.figmints.com

    No TXT records returned for this selector.

  • k2k2._domainkey.figmints.com

    No TXT records returned for this selector.

  • s1s1._domainkey.figmints.com
    CNAME s1.domainkey.u3866548.wl049.sendgrid.net
    • k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzznH5qjENAggBnX8l3fZHnZnIF9pxpRvInhUIJssizT3Vr0yotgfwj8loHA1VcjAY9Wx8xCJLCWpxlAZe7MzLK3z23C7H6jO8r9vQHcgKQ8jdjM8XgF402Ceyok+2AJSDcViWusCKSjidWVuNmz+SUE0cVadE0X4nzhNLOVn5nS2/RElBokYZZ5Kv6LK4qrQWBA3joLvMPfxx7vOkqmGLtOELsAqOn5YepTSkde1KZ6KiAL8yWO0873je+dbs3yIrDhtQJ4qRK6QWZmaTfJf1BEkjyGi4VusLbUo2WAq9HASSS87ENlua7QKP18nmyfP4p1ygqBZg/ET1nlQAXtukQIDAQAB
  • s2s2._domainkey.figmints.com
    CNAME s2.domainkey.u3866548.wl049.sendgrid.net
    • k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC/iQmJrNGnKH5Y1g2Xtz6+cVbYti8mh+gcCqEA7Jp5R+IkfWn7gEM41k7Kg+aC96qCaceYOrFRIlEkcRoBcRcQkNMBmZza6GB7wzZHhozjeByO0pPiI7erBMnKKGPd5ZusnlGZNC2vZD1Uqog8nMTzj4q/jjv065nyT4TFw+a9hQIDAQAB
  • defaultdefault._domainkey.figmints.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.figmints.com

    No TXT records returned for this selector.

  • mailmail._domainkey.figmints.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=none;