DNS & email auth

warnLast checked
Findings4 findings

Recommended (1)

  • DMARC policy is p=none, so it monitors but does not enforce.

    DMARC

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

Healthy (3)

  • 5 MX records found.

    MX
  • SPF record is valid, using 1 of 10 DNS lookups.

    SPF
  • DKIM selector google has a healthy RSA key.

    DKIM

    google (google._domainkey.trytriplewhale.com)

Evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • alt3.aspmx.l.google.compriority 10
  • alt4.aspmx.l.google.compriority 10

Root TXT

5 records
  • google-site-verification=5xJI3nV-IC7a9qVKJI7AKcoc5d98pZgVwi97mXGL6bo
  • google-site-verification=6Ktwqy7nkbRMemrgf7bmTmNqc-X_yG7S-XmXEqc0YXM
  • google-site-verification=rU7PaENSeaDdR8-huxVYKYen4oC14z09JuL3d7c-BJw
  • google-site-verification=wRULkNoaJEgZsB8kYmRnnNyWArxi3MXSbXhDXtVJ_Xg
  • v=spf1 include:_spf.google.com -all

DKIM selectors

1 record
  • selector1selector1._domainkey.trytriplewhale.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.trytriplewhale.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.trytriplewhale.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvgaqZVTJUkpIXsJkLKe17y9FDWxMUh4mWVgP99/kNaWCRvTINnNPcBCfqB5k4Xd8XVopj+tit9dqYOfx3jeqCVDyvVyywsLBzU8pYLoisVjln9qu6Ms4MKYZf4J3D0pYmKMoutV7r5rqTWHqC/aHW7kvDqsW18FvkUPGPVxL4+TXChi5BqmpmV9tgviWttujF36llfa2cGNb33J33C9L4Ko0pUdydYLYpPdxM7Dsy+K+YVt8htpJ8IWPYfS9eJr3YyiLerJOfcE3a7/pA3M1UZRWXMXyXeI9msDGAqGghKHvzZoum8ygq4sXbuDzc8QiPBSiKJs9Ys70465EzC5UwIDAQAB
  • 2023060120230601._domainkey.trytriplewhale.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.trytriplewhale.com

    No TXT records returned for this selector.

  • k1k1._domainkey.trytriplewhale.com

    No TXT records returned for this selector.

  • k2k2._domainkey.trytriplewhale.com

    No TXT records returned for this selector.

  • s1s1._domainkey.trytriplewhale.com

    No TXT records returned for this selector.

  • s2s2._domainkey.trytriplewhale.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.trytriplewhale.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.trytriplewhale.com

    No TXT records returned for this selector.

  • mailmail._domainkey.trytriplewhale.com

    No TXT records returned for this selector.

DMARC

1 record
v=DMARC1; p=none; rua=mailto:postmaster@trytriplewhale.com
v=DMARC1
Identifies this TXT record as a DMARC policy. Must be the first tag.
p=none
Monitoring only: receivers deliver failing mail normally and just send reports.
rua=mailto:postmaster@trytriplewhale.com
Receivers send daily aggregate reports about passing and failing mail to postmaster@trytriplewhale.com.
sp=nonedefault
No sp= tag is published, so subdomains inherit the domain's p= policy.
pct=100default
No pct= tag is published, so the policy applies to all failing mail.
adkim=rdefault
No adkim= tag is published, so DKIM alignment is relaxed: any subdomain of the From domain may sign.
aspf=rdefault
No aspf= tag is published, so SPF alignment is relaxed: the envelope sender may be any subdomain of the From domain.
Raw JSON