DNS & email auth

warnLast checked
Findings4 findings
  • 5 MX records found.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector google has a healthy RSA key.

    google (google._domainkey.righthookdigital.com)

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

Raw evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • aspmx2.googlemail.compriority 10
  • aspmx3.googlemail.compriority 10

Root TXT

5 records
  • google-site-verification=lLp0omgtjwUlnGnGgRvaIqDxi2mj9CpBKPNgvvK6Cxg
  • ZOOM_verify_RZDd6aR9TFiOuYtG9LEx1g
  • google-site-verification=9YeyRdkx74mQs5fvsOriTJsdId6E71zMAOJCX6_oaXM
  • v=spf1 include:_spf.google.com include:mailgun.org ~all
  • google-site-verification=CGhlsbFSZnyROefS7JQ-HBOBD_41xQecOF6WNUwrjsk

DKIM selectors

1 record
  • selector1selector1._domainkey.righthookdigital.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.righthookdigital.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.righthookdigital.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1UgXABfK8Vak9NPRhvMcBeQ/YtBSxZHZrniDkiEWJzWl5C+coW52hkT8Ll1dY2BrRi5gpblAtjqrFqOyDSx42rWaDFd+lFektFtn0GNEbZJufiuPEujyUvXoYvyI6UST4/bc9fV1e6RllvODq0igMTEl0+IiiBsCEKRiOQf++fL8HSk8SNiKe5fY+4jVRP+lMU8GRumF/Ajc8rloH4C9eou16OFVJCX3VpKcPwS9pEiK0e/b43QYptcnRscBzrvCGz5V8Jwg8sf0vZycZ+IHpw/KAln8hoVxdqbj4WKvYv4Qt4FlSwFFGPWzPZOLAfuRYQWkzHzMTXAdzVtODarEQIDAQAB
  • 2023060120230601._domainkey.righthookdigital.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.righthookdigital.com

    No TXT records returned for this selector.

  • k1k1._domainkey.righthookdigital.com

    No TXT records returned for this selector.

  • k2k2._domainkey.righthookdigital.com

    No TXT records returned for this selector.

  • s1s1._domainkey.righthookdigital.com

    No TXT records returned for this selector.

  • s2s2._domainkey.righthookdigital.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.righthookdigital.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.righthookdigital.com

    No TXT records returned for this selector.

  • mailmail._domainkey.righthookdigital.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=none; rua=mailto:admin@righthookdigital.com; ruf=mailto:admin@righthookdigital.com; pct=100