← Interactive report

stickydigital.io

warnScanned ·
Summary

stickydigital.io has warnings

0To fix now
2Recommended
5Healthy

DNS & email auth

warnLast checked
Findings5 findings

Recommended (2)

  • The record uses softfail (~all), which is weaker than fail (-all).

    SPF

    How to fix

    Move to -all once you're confident every legitimate sender is listed.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    DMARC

    How to fix

    Add rua=mailto:you@example.com to the record to receive daily aggregate reports from receivers.

Healthy (3)

  • 5 MX records found.

    MX

  • DKIM selector google has a healthy RSA key.

    DKIM

    google (google._domainkey.stickydigital.io)

  • DMARC policy is enforced with p=quarantine.

    DMARC

Evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • aspmx2.googlemail.compriority 10
  • aspmx3.googlemail.compriority 10

SPF

3 of 10 lookups
DNS lookups3 / 10
stickydigital.io
v=spf1 include:dc-34c065e1ae._spfm.stickydigital.io ~all
include:dc-34c065e1ae._spfm.stickydigital.io
v=spf1 include:6633442.spf03.hubspotemail.net include:_spf.google.com ~all
include:6633442.spf03.hubspotemail.net
v=spf1 ip4:3.93.157.0/24 ip4:3.210.190.0/24 ip4:18.208.124.128/25 ip4:54.174.52.0/24 ip4:54.174.57.0/24 ip4:54.174.59.0/24 ip4:54.174.60.0/23 ip4:54.174.63.0/24 ip4:108.179.144.0/20 ip4:139.180.17.0/24 ip4:141.193.184.32/27 ip4:141.193.184.64/26 ip4:141.193.184.128/25 ip4:141.193.185.32/27 ip4:141.193.185.64/26 ip4:141.193.185.128/25 ip4:143.244.80.0/20 ip4:158.247.16.0/20 ip4:216.139.64.0/19 -all
include:_spf.google.com
v=spf1 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ~all

Root TXT

2 records
  • google-site-verification=So8Lk16dEIRFKktpDsqrp0S80JSlUhlsoTQJv_iRDjg
  • v=spf1 include:dc-34c065e1ae._spfm.stickydigital.io ~all

DKIM selectors

1 record
  • googlegoogle._domainkey.stickydigital.io
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX7p2bFlor/XEf01wwVdqegLLlD6OkbTFfA+4Ta29YX6QYQEpkeXkCGxcuco9SltjJTqk2MRjgFG0Edls9NnD9+BF41NPOA8S8SG4Bt/MgyOO86lutaAxQh4DvSfSBAVrqSeKTrOePwEKRAeXbjs/fCOjX1wex6xfab0wuzWrSo/9PCNvknZuIcbOt/gxtkbMEzb5hDmakp63rVqECLEPRTnMYGjHOJZKV4C/T59Th1wY8MrMYGit3LfhpmsKYKOBtXKe+G9cdLeFCcRfM5jvEq1/eC3rT1vUmGXXOFbshaLCIOzpoFuM5eix4LXpMEjnKD67bZUi/2HkAlMot6oaQIDAQAB

Probed with no records: selector1, selector2, 20230601, 20210112, k1, k2, s1, s2, default, dkim, mail

DMARC

1 record
v=DMARC1; p=quarantine;
v=DMARC1
Identifies this TXT record as a DMARC policy. Must be the first tag.
p=quarantine
Receivers treat failing mail with suspicion, typically sending it to spam.
sp=quarantinedefault
No sp= tag is published, so subdomains inherit the domain's p= policy.
pct=100default
No pct= tag is published, so the policy applies to all failing mail.
adkim=rdefault
No adkim= tag is published, so DKIM alignment is relaxed: any subdomain of the From domain may sign.
aspf=rdefault
No aspf= tag is published, so SPF alignment is relaxed: the envelope sender may be any subdomain of the From domain.
Raw JSON
{
  "mx": [
    {
      "type": "MX",
      "exchange": "aspmx.l.google.com",
      "priority": 1
    },
    {
      "type": "MX",
      "exchange": "alt1.aspmx.l.google.com",
      "priority": 5
    },
    {
      "type": "MX",
      "exchange": "alt2.aspmx.l.google.com",
      "priority": 5
    },
    {
      "type": "MX",
      "exchange": "aspmx2.googlemail.com",
      "priority": 10
    },
    {
      "type": "MX",
      "exchange": "aspmx3.googlemail.com",
      "priority": 10
    }
  ],
  "spf": {
    "tree": {
      "via": "root",
      "domain": "stickydigital.io",
      "issues": [],
      "records": [
        "v=spf1 include:dc-34c065e1ae._spfm.stickydigital.io ~all"
      ],
      "children": [
        {
          "via": "include",
          "domain": "dc-34c065e1ae._spfm.stickydigital.io",
          "issues": [],
          "records": [
            "v=spf1 include:6633442.spf03.hubspotemail.net include:_spf.google.com ~all"
          ],
          "children": [
            {
              "via": "include",
              "domain": "6633442.spf03.hubspotemail.net",
              "issues": [],
              "records": [
                "v=spf1 ip4:3.93.157.0/24 ip4:3.210.190.0/24 ip4:18.208.124.128/25 ip4:54.174.52.0/24 ip4:54.174.57.0/24 ip4:54.174.59.0/24 ip4:54.174.60.0/23 ip4:54.174.63.0/24 ip4:108.179.144.0/20 ip4:139.180.17.0/24 ip4:141.193.184.32/27 ip4:141.193.184.64/26 ip4:141.193.184.128/25 ip4:141.193.185.32/27 ip4:141.193.185.64/26 ip4:141.193.185.128/25 ip4:143.244.80.0/20 ip4:158.247.16.0/20 ip4:216.139.64.0/19 -all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "_spf.google.com",
              "issues": [],
              "records": [
                "v=spf1 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ~all"
              ],
              "children": []
            }
          ]
        }
      ]
    },
    "truncated": false,
    "lookupCount": 3,
    "voidLookupCount": 0
  },
  "dkim": [
    {
      "cname": [],
      "records": [],
      "selector": "selector1",
      "queryName": "selector1._domainkey.stickydigital.io"
    },
    {
      "cname": [],
      "records": [],
      "selector": "selector2",
      "queryName": "selector2._domainkey.stickydigital.io"
    },
    {
      "cname": [],
      "records": [
        "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX7p2bFlor/XEf01wwVdqegLLlD6OkbTFfA+4Ta29YX6QYQEpkeXkCGxcuco9SltjJTqk2MRjgFG0Edls9NnD9+BF41NPOA8S8SG4Bt/MgyOO86lutaAxQh4DvSfSBAVrqSeKTrOePwEKRAeXbjs/fCOjX1wex6xfab0wuzWrSo/9PCNvknZuIcbOt/gxtkbMEzb5hDmakp63rVqECLEPRTnMYGjHOJZKV4C/T59Th1wY8MrMYGit3LfhpmsKYKOBtXKe+G9cdLeFCcRfM5jvEq1/eC3rT1vUmGXXOFbshaLCIOzpoFuM5eix4LXpMEjnKD67bZUi/2HkAlMot6oaQIDAQAB"
      ],
      "selector": "google",
      "queryName": "google._domainkey.stickydigital.io"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20230601",
      "queryName": "20230601._domainkey.stickydigital.io"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20210112",
      "queryName": "20210112._domainkey.stickydigital.io"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k1",
      "queryName": "k1._domainkey.stickydigital.io"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k2",
      "queryName": "k2._domainkey.stickydigital.io"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s1",
      "queryName": "s1._domainkey.stickydigital.io"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s2",
      "queryName": "s2._domainkey.stickydigital.io"
    },
    {
      "cname": [],
      "records": [],
      "selector": "default",
      "queryName": "default._domainkey.stickydigital.io"
    },
    {
      "cname": [],
      "records": [],
      "selector": "dkim",
      "queryName": "dkim._domainkey.stickydigital.io"
    },
    {
      "cname": [],
      "records": [],
      "selector": "mail",
      "queryName": "mail._domainkey.stickydigital.io"
    }
  ],
  "rootTxt": [
    "google-site-verification=So8Lk16dEIRFKktpDsqrp0S80JSlUhlsoTQJv_iRDjg",
    "v=spf1 include:dc-34c065e1ae._spfm.stickydigital.io ~all"
  ],
  "dmarcTxt": [
    "v=DMARC1; p=quarantine;"
  ]
}

SSL & domain expiry

passLast checked
Findings2 findings

Healthy (2)

  • The TLS certificate is valid until Oct 9, 2026.

    TLS certificate

    Issued by Let's Encrypt.

  • Registration expiry is not published for this domain.

    Domain expiry

    The registry does not expose expiry data over RDAP.

Evidence

TLS certificate

port 443
Issued to
stickydigital.io
Issued by
Let's Encrypt
Valid from
Valid until
Days remaining
33 days
Verification
trusted

Registration

unpublished

The registry does not expose expiry data over RDAP.

Raw JSON
{
  "tls": {
    "ok": true,
    "issuer": "Let's Encrypt",
    "subject": "stickydigital.io",
    "validTo": "2026-10-09T06:58:03.000Z",
    "validFrom": "2026-07-11T06:58:04.000Z",
    "authorized": true,
    "authorizationError": null
  },
  "domainExpiry": {
    "known": false
  },
  "registration": null
}

Generated by Internet Posture · internetposture.com