← Interactive report

lightspandigital.com

failScanned ·
Summary

lightspandigital.com has critical problems

2To fix now
4Recommended
3Healthy

DNS & email auth

failLast checked
Findings7 findings

Fix now (2)

  • The record requires 18 DNS lookups, over the limit of 10. Receivers treat this as a permanent error.

    SPF

    How to fix

    Remove unused includes or flatten nested ones. include, a, mx, ptr, exists, and redirect each cost one lookup.

  • No DMARC record was found at _dmarc.lightspandigital.com.

    DMARC

    How to fix

    Publish this TXT record to start monitoring, swapping the rua= address for a mailbox you read. Tighten the policy to quarantine or reject once legitimate senders pass.

    TXT @ _dmarc.lightspandigital.com

Recommended (4)

  • The record uses neutral (?all), which gives receivers no enforcement signal.

    SPF

    How to fix

    Move to -all once you're confident every legitimate sender is listed.

  • The record uses the ptr mechanism, which is deprecated, slow, and unreliable.

    SPF

    How to fix

    Replace ptr with ip4/ip6 networks or an include.

  • DKIM selector default uses a 768-bit RSA key.

    DKIM

    default (default._domainkey.lightspandigital.com)

    How to fix

    Rotate to an RSA key of at least 2048 bits.

  • DKIM selector mail uses a 1024-bit RSA key.

    DKIM

    mail (mail._domainkey.lightspandigital.com)

    How to fix

    Rotate to an RSA key of at least 2048 bits.

Healthy (1)

  • 7 MX records found.

    MX

Evidence

MX

7 records
  • aspmx.l.google.compriority 10
  • alt1.aspmx.l.google.compriority 20
  • alt2.aspmx.l.google.compriority 20
  • aspmx2.googlemail.compriority 30
  • aspmx3.googlemail.compriority 30
  • aspmx4.googlemail.compriority 30
  • aspmx5.googlemail.compriority 30

SPF

18 of 10 lookups
DNS lookups18 / 10
lightspandigital.com
include:bluehost.com
include:spf2.bluehost.com
include:_spf.qualtrics.com
include:_spf.salesforce.com
include:sparkpostmail.com
include:spf.mailjet.com
include:spf.protection.outlook.com
include:_spf.myorderbox.com
include:eig.spf.a.cloudfilter.net
include:spf.websitewelcome.com
include:_spf.nfco-mailout.com
include:_netblocks-pro.nfco-mailout.com
include:_netblocks-atl.nfco-mailout.com

Root TXT

3 records
  • v=spf1 a mx ptr include:bluehost.com ip4:192.163.252.133 ?all
  • Sendinblue-code:f8b648182ea24fc22b1b78e314f74329
  • google-site-verification=VfDgQYPFh7PZ4drZBoFfUQsiPd0cbCO1V5uMn9v9BiQ

DKIM selectors

2 records
  • s1s1._domainkey.lightspandigital.com
    CNAME sg1.v5575683.c190465.e.marketingautomation.services

    No TXT records returned for this selector.

  • s2s2._domainkey.lightspandigital.com
    CNAME sg2.v5575683.c190465.e.marketingautomation.services

    No TXT records returned for this selector.

  • defaultdefault._domainkey.lightspandigital.com
    • k=rsa; p=MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhALjY87XuzZW5BKNJr5OZfZ6aIoQzhRb4iNyYQscYGqf79B/OLcS0B2nxKiDDHeNdH1AAnIK8J5CRLD+7vI6CPzIySztKTZ++u6uRFhgVytPyYQSliB4yHFYVg9iwyWLf3wIDAQAB
  • mailmail._domainkey.lightspandigital.com
    • k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z+FApQ6ra2VsXfbJP3HE6wAO0YTVEJt1TmeczhEd2Jiz/fcabIISgXEdSpTYJhb0ct0VJRxcg4c8c7wIDAQAB

Probed with no records: selector1, selector2, google, 20230601, 20210112, k1, k2, dkim

DMARC TXT

0 records

No TXT records were returned at _dmarc.

Raw JSON

SSL & domain expiry

passLast checked
Findings2 findings

Healthy (2)

  • The TLS certificate is valid until Dec 1, 2026.

    TLS certificate

    Issued by Google Trust Services.

  • Registration expiry is not published for this domain.

    Domain expiry

    The registry does not expose expiry data over RDAP.

Evidence

TLS certificate

port 443
Issued to
lightspandigital.com
Issued by
Google Trust Services
Valid from
Valid until
Days remaining
86 days
Verification
trusted

Registration

unpublished

The registry does not expose expiry data over RDAP.

Raw JSON

Generated by Internet Posture · internetposture.com