Monitor this domain

DNS & email auth

warnLast checked
Findings7 findings

  • 5 MX records found.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector google has a healthy RSA key.

    google (google._domainkey.thriveopm.com)

  • DKIM selector s1 has a healthy RSA key.

    s1 (s1._domainkey.thriveopm.com)

  • DKIM selector s2 has a healthy RSA key.

    s2 (s2._domainkey.thriveopm.com)

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    Add rua=mailto:you@example.com to receive daily aggregate reports from receivers.

Raw evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • aspmx2.googlemail.compriority 10
  • aspmx3.googlemail.compriority 10

Root TXT

3 records
  • v=spf1 a mx include:_spf.google.com ~all
  • google-site-verification=F9bJKBAwIsrGPyjS5Sn-iYwWKWfcXgq_h3KMsHDzUMU
  • google-site-verification=tlfNH5fSuRxNffq_g63QNDM7an-72hd-FxjhVdSucZI

DKIM selectors

3 records
  • selector1selector1._domainkey.thriveopm.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.thriveopm.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.thriveopm.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu0qxmJXY+molq3qLbxBmN9r4F8iIV8cBzmw0rK5clV0TmJ7CkbrmqkTzppgmULY9YTokdbyCLM6LO0pshZf7FRWvjXpZy2D7yCVEgbMKwTVnFwGKkcaXK94QWOUjhAZe0ndLE+/lS15EDLV61AN2xHZ7Ns4x6fjEBrXFS6qbnYWaFKY0pXSZEYsT6OlapDZpKVZiBH5UUE3TKDYlxmbols+UlHiwDrb2GPJIMB1cmimD2pzf9evROB7/dvOA7QAWLrrqpYfjY7IvyAnlj7xqJUB8LjDtun6GDy3XqNM8gFGcAN4vYO7nmGXz5df0OcT8s3qGA/IJ1yAfEtfnFb8UwIDAQAB
  • 2023060120230601._domainkey.thriveopm.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.thriveopm.com

    No TXT records returned for this selector.

  • k1k1._domainkey.thriveopm.com

    No TXT records returned for this selector.

  • k2k2._domainkey.thriveopm.com

    No TXT records returned for this selector.

  • s1s1._domainkey.thriveopm.com
    CNAME s1.domainkey.u25499330.wl081.sendgrid.net
    • k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvv3JYgt2mUcdywPcqVGBbCEHdBiAO+v4VVe01SGJuHREyfqrWSghccWE9ur2KsplGs3v85hHlwKv1/n1bpBgznyJGPnS/ga8VCnMoluO0VrxujTJa5wfFBzPOJgkpjy0J/akybyfs090XJSYQHP2le6BQiPcSxdLgmGmLF4g4OvUG2Nth8wWixcNSCaYIIHsia3uJOO6dumfYlzLMPBQBAnyiox1AevUtP24u0jmNDLMkpDA993L8SaNd99BJcLPxKkaNxHEdoGE7enxqvxxxwf2D7xMddJETttILaouvfw0h5Fgg/RerIJLS/1h53sBSK2216WsekEarE+01UMUQIDAQAB
  • s2s2._domainkey.thriveopm.com
    CNAME s2.domainkey.u25499330.wl081.sendgrid.net
    • k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW2hTLW5OM00xOFVrxhpoqN+qwYDpO/FBRf8bvFPROG3djiRtElv2JK0P+P7KJ+ZUrE2fOB0S5hiLxkv2O5QoayH3HJNnXNcaKhz2fcaq3m0YPQbyzcvcY0QWiJlR7PT9c3QVi68hmQyEkyLjerurPgX5bwaYN2CHXYnD62Ua6+qSBK0utWB3OdthXpi00l62x8kqu2YtTHldsnWmHtA6MEj/SshI7LfpLvP8Iu8t2oj1Z9+SX4VAXa7YVxbhGwFDu64NrmqU5JBHo+DEuRomUSGzDRlwr2Opqi2lEORdcCCCTIgQ8lCLhtF3SYtA9uOqiRLL85RpBj+G248ZtPdlwIDAQAB
  • defaultdefault._domainkey.thriveopm.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.thriveopm.com

    No TXT records returned for this selector.

  • mailmail._domainkey.thriveopm.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=none