DNS & email auth

warnLast checked
Findings4 findings

Recommended (3)

  • The record uses softfail (~all), which is weaker than fail (-all).

    SPF
  • No DKIM key was found for the common selectors checked.

    DKIM

    Custom selectors may still exist outside the common probe list.

  • DMARC policy is p=none, so it monitors but does not enforce.

    DMARC

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

Healthy (1)

  • 5 MX records found.

    MX

Evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • alt3.aspmx.l.google.compriority 10
  • alt4.aspmx.l.google.compriority 10

Root TXT

4 records
  • google-site-verification=itVnh0tubCfdEv4LJyhnUImQSVAb-caW0m82S_YWuQE
  • mandrill_verify.hKTjkEuyZHHZStQ4WaxUhQ
  • stripe-verification=c7b6f4c6e6165c70863a02a2102f87c89208a71beed7fa7cbd0830766423d0e2
  • v=spf1 include:45390829.spf04.hubspotemail.net include:_spf.google.com ~all

DKIM selectors

0 records
  • selector1selector1._domainkey.atlasdomus.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.atlasdomus.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.atlasdomus.com

    No TXT records returned for this selector.

  • 2023060120230601._domainkey.atlasdomus.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.atlasdomus.com

    No TXT records returned for this selector.

  • k1k1._domainkey.atlasdomus.com

    No TXT records returned for this selector.

  • k2k2._domainkey.atlasdomus.com

    No TXT records returned for this selector.

  • s1s1._domainkey.atlasdomus.com

    No TXT records returned for this selector.

  • s2s2._domainkey.atlasdomus.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.atlasdomus.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.atlasdomus.com

    No TXT records returned for this selector.

  • mailmail._domainkey.atlasdomus.com

    No TXT records returned for this selector.

DMARC

1 record
v=DMARC1; p=none; rua=mailto:7c45d7f3a73e41bcb08f6d1d2fad8550@dmarc-reports.cloudflare.net;
v=DMARC1
Identifies this TXT record as a DMARC policy. Must be the first tag.
p=none
Monitoring only: receivers deliver failing mail normally and just send reports.
rua=mailto:7c45d7f3a73e41bcb08f6d1d2fad8550@dmarc-reports.cloudflare.net
Receivers send daily aggregate reports about passing and failing mail to 7c45d7f3a73e41bcb08f6d1d2fad8550@dmarc-reports.cloudflare.net.
sp=nonedefault
No sp= tag is published, so subdomains inherit the domain's p= policy.
pct=100default
No pct= tag is published, so the policy applies to all failing mail.
adkim=rdefault
No adkim= tag is published, so DKIM alignment is relaxed: any subdomain of the From domain may sign.
aspf=rdefault
No aspf= tag is published, so SPF alignment is relaxed: the envelope sender may be any subdomain of the From domain.
Raw JSON