DNS & email auth

failLast checked
Findings7 findings
  • 1 MX record found.

  • include:spf.google.com points at a domain with no SPF record. Receivers treat this as a permanent error.

  • include:spf.wpcloud.com points at a domain with no SPF record. Receivers treat this as a permanent error.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector k2 has a healthy RSA key.

    k2 (k2._domainkey.wideangleideas.com)

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    Add rua=mailto:you@example.com to receive daily aggregate reports from receivers.

Raw evidence

MX

1 record
  • wideangleideas-com.mail.protection.outlook.compriority 0

Root TXT

3 records
  • MS=ms35102303
  • v=spf1 include:spf.wpcloud.com include:spf.google.com include:_spf.wpcloud.com include:spf.protection.outlook.com include:48216533.spf08.hubspotemail.net ~all
  • google-site-verification=Qlo31GLXfrskRMsMRUneQfzzowTm2IWF2aBwHT46sHE

DKIM selectors

28 records
  • selector1selector1._domainkey.wideangleideas.com
    CNAME selector1-wideangleideas-com._domainkey.WideAngleIdeas.q-v1.dkim.mail.microsoft.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.wideangleideas.com
    CNAME selector2-wideangleideas-com._domainkey.WideAngleIdeas.q-v1.dkim.mail.microsoft.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.wideangleideas.com
    CNAME wideangleideas.com
    • v=spf1 include:spf.wpcloud.com include:spf.google.com include:_spf.wpcloud.com include:spf.protection.outlook.com include:48216533.spf08.hubspotemail.net ~all
    • google-site-verification=Qlo31GLXfrskRMsMRUneQfzzowTm2IWF2aBwHT46sHE
    • MS=ms35102303
  • 2023060120230601._domainkey.wideangleideas.com
    CNAME wideangleideas.com
    • google-site-verification=Qlo31GLXfrskRMsMRUneQfzzowTm2IWF2aBwHT46sHE
    • MS=ms35102303
    • v=spf1 include:spf.wpcloud.com include:spf.google.com include:_spf.wpcloud.com include:spf.protection.outlook.com include:48216533.spf08.hubspotemail.net ~all
  • 2021011220210112._domainkey.wideangleideas.com
    CNAME wideangleideas.com
    • MS=ms35102303
    • v=spf1 include:spf.wpcloud.com include:spf.google.com include:_spf.wpcloud.com include:spf.protection.outlook.com include:48216533.spf08.hubspotemail.net ~all
    • google-site-verification=Qlo31GLXfrskRMsMRUneQfzzowTm2IWF2aBwHT46sHE
  • k1k1._domainkey.wideangleideas.com
    CNAME wideangleideas.com
    • v=spf1 include:spf.wpcloud.com include:spf.google.com include:_spf.wpcloud.com include:spf.protection.outlook.com include:48216533.spf08.hubspotemail.net ~all
    • MS=ms35102303
    • google-site-verification=Qlo31GLXfrskRMsMRUneQfzzowTm2IWF2aBwHT46sHE
  • k2k2._domainkey.wideangleideas.com
    CNAME dkim2.mcsv.net
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA0b90ObWaLDc+i9MtTNmGeWO009hr20fIxhGg6XBT2kjZ1DTThopSe1nAndsupmcBwlQ5Q6LJ+ZAxLcujnPIxM0ZBLmgpkv8u6RfY4eFP8OLvdAW3oSuB0DyLDigQX4Sj8wBO4YIdQH6AAmBeOsidsKAFNFUCpc3vCxtBDR12U+cBg724l3sBkMQ8evnz6idnqxq9QAVYh8k4kJ+RP+6cqTdy7LjIm8xY/bQNpQIpGUAuDo2DjLcCDun9DAI4Q/3z+Q0o9QuQIDAQAB;
  • s1s1._domainkey.wideangleideas.com
    CNAME wideangleideas.com
    • google-site-verification=Qlo31GLXfrskRMsMRUneQfzzowTm2IWF2aBwHT46sHE
    • v=spf1 include:spf.wpcloud.com include:spf.google.com include:_spf.wpcloud.com include:spf.protection.outlook.com include:48216533.spf08.hubspotemail.net ~all
    • MS=ms35102303
  • s2s2._domainkey.wideangleideas.com
    CNAME wideangleideas.com
    • google-site-verification=Qlo31GLXfrskRMsMRUneQfzzowTm2IWF2aBwHT46sHE
    • MS=ms35102303
    • v=spf1 include:spf.wpcloud.com include:spf.google.com include:_spf.wpcloud.com include:spf.protection.outlook.com include:48216533.spf08.hubspotemail.net ~all
  • defaultdefault._domainkey.wideangleideas.com
    CNAME wideangleideas.com
    • google-site-verification=Qlo31GLXfrskRMsMRUneQfzzowTm2IWF2aBwHT46sHE
    • MS=ms35102303
    • v=spf1 include:spf.wpcloud.com include:spf.google.com include:_spf.wpcloud.com include:spf.protection.outlook.com include:48216533.spf08.hubspotemail.net ~all
  • dkimdkim._domainkey.wideangleideas.com
    CNAME wideangleideas.com
    • MS=ms35102303
    • google-site-verification=Qlo31GLXfrskRMsMRUneQfzzowTm2IWF2aBwHT46sHE
    • v=spf1 include:spf.wpcloud.com include:spf.google.com include:_spf.wpcloud.com include:spf.protection.outlook.com include:48216533.spf08.hubspotemail.net ~all
  • mailmail._domainkey.wideangleideas.com
    CNAME wideangleideas.com
    • google-site-verification=Qlo31GLXfrskRMsMRUneQfzzowTm2IWF2aBwHT46sHE
    • v=spf1 include:spf.wpcloud.com include:spf.google.com include:_spf.wpcloud.com include:spf.protection.outlook.com include:48216533.spf08.hubspotemail.net ~all
    • MS=ms35102303

DMARC TXT

1 record
  • v=DMARC1; p=none;