Print reportMonitor this domain

DNS & email auth

warnLast checked
Findings5 findings

Recommended (4)

  • The record uses softfail (~all), which is weaker than fail (-all).

    SPF

    How to fix

    Move to -all once you're confident every legitimate sender is listed.

  • DKIM selector default uses a 1024-bit RSA key.

    DKIM

    default (default._domainkey.risevisible.com)

    How to fix

    Rotate to an RSA key of at least 2048 bits.

  • DMARC policy is p=none, so it monitors but does not enforce.

    DMARC

    How to fix

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    DMARC

    How to fix

    Add rua=mailto:you@example.com to the record to receive daily aggregate reports from receivers.

Healthy (1)

  • 3 MX records found.

    MX

Evidence

MX

3 records
  • mx10.antispam.mailspamprotection.compriority 10
  • mx20.antispam.mailspamprotection.compriority 20
  • mx30.antispam.mailspamprotection.compriority 30

SPF

3 of 10 lookups
DNS lookups3 / 10
risevisible.com
v=spf1 +a include:_spf.google.com +mx ~all
include:_spf.google.com
v=spf1 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ~all

Root TXT

2 records
  • v=spf1 +a include:_spf.google.com +mx ~all
  • v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCzjjLUDmxkA0FMbjB61Vt2HGf06bpXMDNXx926QGeFGZHL+dTrNP/InTgRb5HA5z020en7uEXvSeR/dfAon2eUeVxfSSX2RfyfK9q1fEwlMJj/HzKCrAphHE+VM4EpoePLCrVJ37o2s0SLKY/lcUdU8tGRRs104B/6M7jYKz6oFwIDAQAB

DKIM selectors

1 record
  • defaultdefault._domainkey.risevisible.com
    CNAME risevisible.com.default.dkim.auto.dnssmarthost.net
    • v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC9URJ6Uoe5Ir0hIGFe12h3z5/LBQxVKAQhUEuOvsVx+vsUCSpR+8p+ikKXksCvwEsAis1pSh4mer+9Lp3vO1SYTqMJ1cAqSUer6ndomPKU6oEbLvdOwD/Yhro4FNPs0aHLp6OeJWmuYiREXx5JxNpPglrknhSUh3PdqjPBMCD97wIDAQAB;

Probed with no records: selector1, selector2, google, 20230601, 20210112, k1, k2, s1, s2, dkim, mail

DMARC

1 record
v=DMARC1; p=none; aspf=r; adkim=r;
v=DMARC1
Identifies this TXT record as a DMARC policy. Must be the first tag.
p=none
Monitoring only: receivers deliver failing mail normally and just send reports.
aspf=r
Relaxed SPF alignment: the envelope sender may be any subdomain of the From domain.
adkim=r
Relaxed DKIM alignment: the DKIM signature may come from any subdomain of the From domain.
sp=nonedefault
No sp= tag is published, so subdomains inherit the domain's p= policy.
pct=100default
No pct= tag is published, so the policy applies to all failing mail.
Raw JSON
{
  "mx": [
    {
      "type": "MX",
      "exchange": "mx10.antispam.mailspamprotection.com",
      "priority": 10
    },
    {
      "type": "MX",
      "exchange": "mx20.antispam.mailspamprotection.com",
      "priority": 20
    },
    {
      "type": "MX",
      "exchange": "mx30.antispam.mailspamprotection.com",
      "priority": 30
    }
  ],
  "spf": {
    "tree": {
      "via": "root",
      "domain": "risevisible.com",
      "issues": [],
      "records": [
        "v=spf1 +a include:_spf.google.com +mx ~all"
      ],
      "children": [
        {
          "via": "include",
          "domain": "_spf.google.com",
          "issues": [],
          "records": [
            "v=spf1 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ~all"
          ],
          "children": []
        }
      ]
    },
    "truncated": false,
    "lookupCount": 3,
    "voidLookupCount": 0
  },
  "dkim": [
    {
      "cname": [],
      "records": [],
      "selector": "selector1",
      "queryName": "selector1._domainkey.risevisible.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "selector2",
      "queryName": "selector2._domainkey.risevisible.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "google",
      "queryName": "google._domainkey.risevisible.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20230601",
      "queryName": "20230601._domainkey.risevisible.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20210112",
      "queryName": "20210112._domainkey.risevisible.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k1",
      "queryName": "k1._domainkey.risevisible.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k2",
      "queryName": "k2._domainkey.risevisible.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s1",
      "queryName": "s1._domainkey.risevisible.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s2",
      "queryName": "s2._domainkey.risevisible.com"
    },
    {
      "cname": [
        "risevisible.com.default.dkim.auto.dnssmarthost.net"
      ],
      "records": [
        "v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC9URJ6Uoe5Ir0hIGFe12h3z5/LBQxVKAQhUEuOvsVx+vsUCSpR+8p+ikKXksCvwEsAis1pSh4mer+9Lp3vO1SYTqMJ1cAqSUer6ndomPKU6oEbLvdOwD/Yhro4FNPs0aHLp6OeJWmuYiREXx5JxNpPglrknhSUh3PdqjPBMCD97wIDAQAB;"
      ],
      "selector": "default",
      "queryName": "default._domainkey.risevisible.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "dkim",
      "queryName": "dkim._domainkey.risevisible.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "mail",
      "queryName": "mail._domainkey.risevisible.com"
    }
  ],
  "rootTxt": [
    "v=spf1 +a include:_spf.google.com +mx ~all",
    "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCzjjLUDmxkA0FMbjB61Vt2HGf06bpXMDNXx926QGeFGZHL+dTrNP/InTgRb5HA5z020en7uEXvSeR/dfAon2eUeVxfSSX2RfyfK9q1fEwlMJj/HzKCrAphHE+VM4EpoePLCrVJ37o2s0SLKY/lcUdU8tGRRs104B/6M7jYKz6oFwIDAQAB"
  ],
  "dmarcTxt": [
    "v=DMARC1; p=none; aspf=r; adkim=r;"
  ]
}