Monitor this domain

DNS & email auth

warnLast checked
Findings5 findings

  • 5 MX records found.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector google has a healthy RSA key.

    google (google._domainkey.aeolidia.com)

  • Subdomains use the weaker sp=none while the domain enforces p=reject.

    Spoofers can target any subdomain, e.g. invoices.yourdomain.com. Remove sp= or match it to p=.

  • DMARC policy is enforced with p=reject.

Raw evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • alt3.aspmx.l.google.compriority 10
  • alt4.aspmx.l.google.compriority 10

Root TXT

4 records
  • v=spf1 include:6750410.spf08.hubspotemail.net include:_spf.google.com ~all
  • ahrefs-site-verification_986778d077e76f6bfcc4ca79597289446df74c9e418033c4c00adb38fa680a23
  • google-site-verification=ZvTeD9O_YDpHUoAa_J4p1YGttwRdw9BF07PDGNlPWHo
  • google-site-verification=uTQO4uadOx2vI717r3skTCKsOowvZBd3rv85UdF2mDs

DKIM selectors

1 record
  • selector1selector1._domainkey.aeolidia.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.aeolidia.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.aeolidia.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy6yE//xDJ/JadLsmuJB7MZAL8dTfMF9CmE2L2g4a46khnM3sSGa8rdsVLzUhiZvgfEb7zZT4p8uMQC0/mgTyWgh9xMAYLe65ZY0TC1qqeIzp5c8GCouopihdPV6s+kj+aNp8xBy0KcTZuE8WmABeZhsirikBnLnEUmujigLwVlCR0EcVLfhfdj8qIo+elm4jXZDOmtH3sdOJ46MPYaQ8vzgGjA7qDOCer22pU+g5mELxtd0NUJeEds4NM3AHNuC/ofFRRbWe/2fn6IMxLY2qPC/l/Bujtz+jyBvjzRdZEfcyNVAq0GFEBEQeXYZC5lXkcIOVdO/2wBT1z6uSwbpKwIDAQAB
  • 2023060120230601._domainkey.aeolidia.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.aeolidia.com

    No TXT records returned for this selector.

  • k1k1._domainkey.aeolidia.com

    No TXT records returned for this selector.

  • k2k2._domainkey.aeolidia.com

    No TXT records returned for this selector.

  • s1s1._domainkey.aeolidia.com

    No TXT records returned for this selector.

  • s2s2._domainkey.aeolidia.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.aeolidia.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.aeolidia.com

    No TXT records returned for this selector.

  • mailmail._domainkey.aeolidia.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=reject; pct=100; rua=mailto:re+t9mpv5gf6jv@dmarc.postmarkapp.com; sp=none; aspf=r;