Print reportMonitor this domain

DNS & email auth

warnLast checked
Findings5 findings

Recommended (4)

  • The record has no all mechanism, so it never states a policy for unlisted servers.

    SPF

    How to fix

    End the record with -all or ~all.

  • No DKIM key was found for the common selectors checked.

    DKIM

    Custom selectors may still exist outside the common probe list.

    How to fix

    If this domain sends mail, enable DKIM signing at the email provider and publish the selector records it gives you.

  • DMARC policy is p=none, so it monitors but does not enforce.

    DMARC

    How to fix

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    DMARC

    How to fix

    Add rua=mailto:you@example.com to the record to receive daily aggregate reports from receivers.

Healthy (1)

  • 8 MX records found.

    MX

Evidence

MX

8 records
  • ASPMX.L.GOOGLE.compriority 1
  • ALT1.ASPMX.L.GOOGLE.compriority 5
  • ALT2.ASPMX.L.GOOGLE.compriority 5
  • ALT3.ASPMX.L.GOOGLE.compriority 10
  • ALT4.ASPMX.L.GOOGLE.compriority 10
  • mxext1.mailbox.orgpriority 30
  • mxext2.mailbox.orgpriority 30
  • mxext3.mailbox.orgpriority 30

SPF

3 of 10 lookups
DNS lookups3 / 10
r17ventures.com
v=spf1 include:mailbox.org include:143360366.spf05.hubspotemail.net
include:mailbox.org
v=spf1 ip4:213.203.238.0/25 ip4:195.10.208.0/24 ip4:91.198.250.0/24 ip4:80.241.56.0/21 ip6:2001:67c:2050::/48 mx ~all
include:143360366.spf05.hubspotemail.net
v=spf1 ip4:3.93.157.0/24 ip4:3.210.190.0/24 ip4:18.208.124.128/25 ip4:54.174.52.0/24 ip4:54.174.57.0/24 ip4:54.174.59.0/24 ip4:54.174.60.0/23 ip4:54.174.63.0/24 ip4:108.179.144.0/20 ip4:139.180.17.0/24 ip4:141.193.184.32/27 ip4:141.193.184.64/26 ip4:141.193.184.128/25 ip4:141.193.185.32/27 ip4:141.193.185.64/26 ip4:141.193.185.128/25 ip4:143.244.80.0/20 ip4:158.247.16.0/20 ip4:216.139.64.0/19 -all

Root TXT

5 records
  • google-site-verification=CNafze3_6LAeh_TpHBNJCE_9f1TEKbaA9otdlLzZs1w
  • google-site-verification=GxmjZGKJqUsgxdxyg86eClzyRfOw9M1zvI1YsyOMBDo
  • google-site-verification=L2Yf4-fR_0kN_YRxNMtXtNSyfb2cuPG1mYIuQ1SRhRE
  • v=spf1 include:mailbox.org include:143360366.spf05.hubspotemail.net
  • facebook-domain-verification=p6to65ndiu8cx7qbyst1a45knesn3p

DKIM selectors

0 records

Probed with no records: selector1, selector2, google, 20230601, 20210112, k1, k2, s1, s2, default, dkim, mail

DMARC

1 record
v=DMARC1; p=none;
v=DMARC1
Identifies this TXT record as a DMARC policy. Must be the first tag.
p=none
Monitoring only: receivers deliver failing mail normally and just send reports.
sp=nonedefault
No sp= tag is published, so subdomains inherit the domain's p= policy.
pct=100default
No pct= tag is published, so the policy applies to all failing mail.
adkim=rdefault
No adkim= tag is published, so DKIM alignment is relaxed: any subdomain of the From domain may sign.
aspf=rdefault
No aspf= tag is published, so SPF alignment is relaxed: the envelope sender may be any subdomain of the From domain.
Raw JSON
{
  "mx": [
    {
      "type": "MX",
      "exchange": "ASPMX.L.GOOGLE.com",
      "priority": 1
    },
    {
      "type": "MX",
      "exchange": "ALT1.ASPMX.L.GOOGLE.com",
      "priority": 5
    },
    {
      "type": "MX",
      "exchange": "ALT2.ASPMX.L.GOOGLE.com",
      "priority": 5
    },
    {
      "type": "MX",
      "exchange": "ALT3.ASPMX.L.GOOGLE.com",
      "priority": 10
    },
    {
      "type": "MX",
      "exchange": "ALT4.ASPMX.L.GOOGLE.com",
      "priority": 10
    },
    {
      "type": "MX",
      "exchange": "mxext1.mailbox.org",
      "priority": 30
    },
    {
      "type": "MX",
      "exchange": "mxext2.mailbox.org",
      "priority": 30
    },
    {
      "type": "MX",
      "exchange": "mxext3.mailbox.org",
      "priority": 30
    }
  ],
  "spf": {
    "tree": {
      "via": "root",
      "domain": "r17ventures.com",
      "issues": [],
      "records": [
        "v=spf1 include:mailbox.org include:143360366.spf05.hubspotemail.net"
      ],
      "children": [
        {
          "via": "include",
          "domain": "mailbox.org",
          "issues": [],
          "records": [
            "v=spf1 ip4:213.203.238.0/25 ip4:195.10.208.0/24 ip4:91.198.250.0/24 ip4:80.241.56.0/21 ip6:2001:67c:2050::/48 mx ~all"
          ],
          "children": []
        },
        {
          "via": "include",
          "domain": "143360366.spf05.hubspotemail.net",
          "issues": [],
          "records": [
            "v=spf1 ip4:3.93.157.0/24 ip4:3.210.190.0/24 ip4:18.208.124.128/25 ip4:54.174.52.0/24 ip4:54.174.57.0/24 ip4:54.174.59.0/24 ip4:54.174.60.0/23 ip4:54.174.63.0/24 ip4:108.179.144.0/20 ip4:139.180.17.0/24 ip4:141.193.184.32/27 ip4:141.193.184.64/26 ip4:141.193.184.128/25 ip4:141.193.185.32/27 ip4:141.193.185.64/26 ip4:141.193.185.128/25 ip4:143.244.80.0/20 ip4:158.247.16.0/20 ip4:216.139.64.0/19 -all"
          ],
          "children": []
        }
      ]
    },
    "truncated": false,
    "lookupCount": 3,
    "voidLookupCount": 0
  },
  "dkim": [
    {
      "cname": [],
      "records": [],
      "selector": "selector1",
      "queryName": "selector1._domainkey.r17ventures.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "selector2",
      "queryName": "selector2._domainkey.r17ventures.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "google",
      "queryName": "google._domainkey.r17ventures.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20230601",
      "queryName": "20230601._domainkey.r17ventures.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20210112",
      "queryName": "20210112._domainkey.r17ventures.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k1",
      "queryName": "k1._domainkey.r17ventures.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k2",
      "queryName": "k2._domainkey.r17ventures.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s1",
      "queryName": "s1._domainkey.r17ventures.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s2",
      "queryName": "s2._domainkey.r17ventures.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "default",
      "queryName": "default._domainkey.r17ventures.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "dkim",
      "queryName": "dkim._domainkey.r17ventures.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "mail",
      "queryName": "mail._domainkey.r17ventures.com"
    }
  ],
  "rootTxt": [
    "google-site-verification=CNafze3_6LAeh_TpHBNJCE_9f1TEKbaA9otdlLzZs1w",
    "google-site-verification=GxmjZGKJqUsgxdxyg86eClzyRfOw9M1zvI1YsyOMBDo",
    "google-site-verification=L2Yf4-fR_0kN_YRxNMtXtNSyfb2cuPG1mYIuQ1SRhRE",
    "v=spf1 include:mailbox.org include:143360366.spf05.hubspotemail.net",
    "facebook-domain-verification=p6to65ndiu8cx7qbyst1a45knesn3p"
  ],
  "dmarcTxt": [
    "v=DMARC1; p=none;"
  ]
}