Monitor this domain

DNS & email auth

warnLast checked
Findings5 findings

  • 5 MX records found.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector google has a healthy RSA key.

    google (google._domainkey.forgeapollo.com)

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    Add rua=mailto:you@example.com to receive daily aggregate reports from receivers.

Raw evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • aspmx2.googlemail.compriority 10
  • aspmx3.googlemail.compriority 10

Root TXT

6 records
  • google-site-verification=IWxFGl1Q36fGuodbmurZ3Ftjf5ethUWBKokiLYQbj80
  • google-site-verification=L9dvWDOYOiMhwO7TIUuWZLwasLOGNeTOTLaIEKDI8tc
  • include:5958199.spf06.hubspotemail.net
  • v=spf1 include:_spf.google.com include:5958199.spf06.hubspotemail.net ~all
  • google-site-verification=0S6kC5syuHZuZRgz_OMiGb3okH9oXdb8NSgAbiUgAOc
  • google-site-verification=0S6kC5syuHZuZRgz_OMiGb3okH9oXdb8NSgAbiUgAOc

DKIM selectors

1 record
  • selector1selector1._domainkey.forgeapollo.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.forgeapollo.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.forgeapollo.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH+ajCfStgSEbPnLGdjVXRkMXjmx28aoYdgP4oPxeffq1+4Ai+RyT+QpSXqYyPl8tnwPpPkXDSemjoPxLkykpqj0X2Fhws+YQ9WLZYyQ5K2jYUnwhxWV87bGPwIUBHQTwlgDCKcRiIja0s4T6nQoDc4tNs3UoODDN3JPyS5738lAipTFANABZeJ97p3Dw25cpM2KO3xp7VpV9CyvNp457y8Cf2u/7DDrV8D4ZL+l/cxewBpJNnkX6OUpjczVpPgjnKGgOLmfBVKlGy1lEmEpIHoI5FIgO1yqTYJQSfbXTcoLUqWfxUvsZhidHhVR9UpA+wyV65K76lAG+bxD002SqwIDAQAB
  • 2023060120230601._domainkey.forgeapollo.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.forgeapollo.com

    No TXT records returned for this selector.

  • k1k1._domainkey.forgeapollo.com

    No TXT records returned for this selector.

  • k2k2._domainkey.forgeapollo.com

    No TXT records returned for this selector.

  • s1s1._domainkey.forgeapollo.com

    No TXT records returned for this selector.

  • s2s2._domainkey.forgeapollo.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.forgeapollo.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.forgeapollo.com

    No TXT records returned for this selector.

  • mailmail._domainkey.forgeapollo.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=none;