Monitor this domain

DNS & email auth

warnLast checked
Findings7 findings

  • 5 MX records found.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector google uses a 1024-bit RSA key.

    google (google._domainkey.prospectfuture.com); use at least 2048 bits.

  • DKIM selector default uses a 1024-bit RSA key.

    default (default._domainkey.prospectfuture.com); use at least 2048 bits.

  • DKIM selector mail uses a 1024-bit RSA key.

    mail (mail._domainkey.prospectfuture.com); use at least 2048 bits.

  • DKIM selector k2 has a healthy RSA key.

    k2 (k2._domainkey.prospectfuture.com)

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

Raw evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • alt3.aspmx.l.google.compriority 10
  • alt4.aspmx.l.google.compriority 10

Root TXT

7 records
  • facebook-domain-verification=hxu3f6ysleqj0x8n0rnxs5sa4r2yek
  • v=spf1 +a +mx ip4:34.174.114.126 include:spf.sendinblue.com include:_spf.google.com include:prospectfuture.com.spf.auto.dnssmarthost.net ~all
  • stripe-verification=0e193a10f277e8e9e14375392bfec3162163ac8322f068c5509055af53356b6e
  • klaviyo-site-verification=UJ6zJt
  • apple-domain-verification=7k32-gb1vbkoFW0fd8Ym6SClVizRF9ex7BToikgaXVc
  • google-site-verification=eBs02rXvQvM0hbgczaUN0_BED4g4zKmqLC_DTLSmnfU
  • Sendinblue-code:4efb77546f17f18ed40b4d4c13d12bc5

DKIM selectors

4 records
  • selector1selector1._domainkey.prospectfuture.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.prospectfuture.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.prospectfuture.com
    • v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCSmCgJO597vP41vgTzf7CsAa5bO6vZ7UY19duWP0/fhaPmRwMwv72TPfvnROYJwPnvspzNi0Ad75mIxBSeOdZo6wVjo6NFRNQnmUIcuDQmyl0HQ1VPGsbBUr2xp9Kt2XVEXZnFKM/ugzB2o6ae0PeRCBj7gbBgyOFDPzk48KJ6CQIDAQAB
  • 2023060120230601._domainkey.prospectfuture.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.prospectfuture.com

    No TXT records returned for this selector.

  • k1k1._domainkey.prospectfuture.com

    No TXT records returned for this selector.

  • k2k2._domainkey.prospectfuture.com
    CNAME dkim2.mcsv.net
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA0b90ObWaLDc+i9MtTNmGeWO009hr20fIxhGg6XBT2kjZ1DTThopSe1nAndsupmcBwlQ5Q6LJ+ZAxLcujnPIxM0ZBLmgpkv8u6RfY4eFP8OLvdAW3oSuB0DyLDigQX4Sj8wBO4YIdQH6AAmBeOsidsKAFNFUCpc3vCxtBDR12U+cBg724l3sBkMQ8evnz6idnqxq9QAVYh8k4kJ+RP+6cqTdy7LjIm8xY/bQNpQIpGUAuDo2DjLcCDun9DAI4Q/3z+Q0o9QuQIDAQAB;
  • s1s1._domainkey.prospectfuture.com

    No TXT records returned for this selector.

  • s2s2._domainkey.prospectfuture.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.prospectfuture.com
    CNAME prospectfuture.com.default.dkim.auto.dnssmarthost.net
    • v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCgVgGcfaB5Pn1rz8OetikJBCf45txknUjIPrWHVHW15YerRVueIzTiie2ZZIZY6LGLlKndYNbKvDQmo1civs+BvfDPAHmvVCGiK/g4QWklmtDK5kP4G7UWjGsrdOQ0TIeqNMUaZkogKzPQx0QtHITKobZjA9AMzoTbCpbGo7OSLQIDAQAB;
  • dkimdkim._domainkey.prospectfuture.com

    No TXT records returned for this selector.

  • mailmail._domainkey.prospectfuture.com
    • k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z+FApQ6ra2VsXfbJP3HE6wAO0YTVEJt1TmeczhEd2Jiz/fcabIISgXEdSpTYJhb0ct0VJRxcg4c8c7wIDAQAB

DMARC TXT

1 record
  • v=DMARC1; p=none; sp=none; rua=mailto:dmarc@mailinblue.com!10m; ruf=mailto:dmarc@mailinblue.com!10m; rf=afrf; pct=100; ri=86400