Monitor this domain

DNS & email auth

warnLast checked
Findings5 findings

  • 5 MX records found.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector google uses a 1024-bit RSA key.

    google (google._domainkey.nx3corp.com); use at least 2048 bits.

  • DKIM selector mail uses a 1024-bit RSA key.

    mail (mail._domainkey.nx3corp.com); use at least 2048 bits.

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

Raw evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • alt3.aspmx.l.google.compriority 10
  • alt4.aspmx.l.google.compriority 10

Root TXT

4 records
  • brevo-code:d77fb99ba302e0c4c435972908948822
  • twilio-domain-verification=fe336672718a535ef7688028327b8fde
  • v=spf1 include:_spf.google.com ~all
  • apple-domain-verification=ZcSWf2qh5M5V7ATnKeiVtOi74mYVHlDAPdqNsRoz_lg

DKIM selectors

2 records
  • selector1selector1._domainkey.nx3corp.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.nx3corp.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.nx3corp.com
    • v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDrb29vPmmzIyL+uqFvdkTFzXWZjgYnCRROgqKGU99FX4hO+X1uyTTChHjCgqHM5MFRwBriLMaNyObRXSyh13GOqeKVT8GTz7nSf6ac4ZxW1EhoSN+n88l/gp8RnL33LbokLu84uCxG9DEiKNRzR5gMi5S3dYdjhZtLEaaII9TO+wIDAQAB
  • 2023060120230601._domainkey.nx3corp.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.nx3corp.com

    No TXT records returned for this selector.

  • k1k1._domainkey.nx3corp.com

    No TXT records returned for this selector.

  • k2k2._domainkey.nx3corp.com

    No TXT records returned for this selector.

  • s1s1._domainkey.nx3corp.com

    No TXT records returned for this selector.

  • s2s2._domainkey.nx3corp.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.nx3corp.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.nx3corp.com

    No TXT records returned for this selector.

  • mailmail._domainkey.nx3corp.com
    • k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z+FApQ6ra2VsXfbJP3HE6wAO0YTVEJt1TmeczhEd2Jiz/fcabIISgXEdSpTYJhb0ct0VJRxcg4c8c7wIDAQAB

DMARC TXT

1 record
  • v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com