DNS & email auth

failLast checked
Findings6 findings
  • 5 MX records found.

  • include:_spf.pbxes.com points at a domain with no SPF record. Receivers treat this as a permanent error.

  • The record uses 10 of 10 allowed DNS lookups.

    Adding another sender could push it over the limit and break SPF entirely.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector google has a healthy RSA key.

    google (google._domainkey.whitecanvasco.com)

  • DMARC policy is enforced with p=reject.

Raw evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • alt3.aspmx.l.google.compriority 10
  • alt4.aspmx.l.google.compriority 10

Root TXT

3 records
  • google-site-verification=9Cv-Ziupz24rk8N3ceVpquag-u3RiJDAOD4D5XdRqcM
  • klaviyo-site-verification=SVfa4J
  • v=spf1 include:_spf.google.com include:klaviyo.com include:_spf.pbxes.com ~all

DKIM selectors

1 record
  • selector1selector1._domainkey.whitecanvasco.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.whitecanvasco.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.whitecanvasco.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gqOS38bcI6HzVZJ0+qqs8ziX5VemLPGvGlCffPW1Gu3FSgOKiVpj4PoVVxvdjrNvDgK82b2lxp3R0RzfxgJE44RyizSNuyLw+7X8JkNb5qhPVKbb1X3cEQ1WPMDv9KIzoV1alz7Vx5i/lfhDO4vleT7yB/2m7hnEHPO8EKDowBgnVI9cB0ZnwJD/9XDS+HEswGOUq1EfEm4l8pM+byBKujg334JgiKWL3xk1eI1x/qk51wzzPs3WKvBu599NXtOfXCsClPJLaLUG2goHWO1lgqzIokIivXNUqvRzWq1KiJZEdMQZ5lvhPPwg8z0+dkkSgflzChIixdn2RRfYkqDOQIDAQAB
  • 2023060120230601._domainkey.whitecanvasco.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.whitecanvasco.com

    No TXT records returned for this selector.

  • k1k1._domainkey.whitecanvasco.com

    No TXT records returned for this selector.

  • k2k2._domainkey.whitecanvasco.com

    No TXT records returned for this selector.

  • s1s1._domainkey.whitecanvasco.com

    No TXT records returned for this selector.

  • s2s2._domainkey.whitecanvasco.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.whitecanvasco.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.whitecanvasco.com

    No TXT records returned for this selector.

  • mailmail._domainkey.whitecanvasco.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=reject; rua=mailto:postmaster@whitecanvasco.com; ruf=mailto:admin@whitecanvasco.com; aspf=r