Monitor this domain

DNS & email auth

warnLast checked
Findings6 findings

  • 5 MX records found.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector google uses a 1024-bit RSA key.

    google (google._domainkey.aspektagency.com); use at least 2048 bits.

  • DKIM selector default uses a 1024-bit RSA key.

    default (default._domainkey.aspektagency.com); use at least 2048 bits.

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    Add rua=mailto:you@example.com to receive daily aggregate reports from receivers.

Raw evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • alt3.aspmx.l.google.compriority 10
  • alt4.aspmx.l.google.compriority 10

Root TXT

4 records
  • google-site-verification=_rFn_EZzdkjl95P5G3BKeQcJguB-oBRE01PGyOyUIuM
  • google-site-verification=3KnlPgZR-jrX3MY5AfvE8_sDuVxxayomLqkKJ4llxEE
  • klaviyo-site-verification=Sde4jM
  • v=spf1 include:_spf.google.com include:aspektagency.com.spf.auto.dnssmarthost.net ~all

DKIM selectors

2 records
  • selector1selector1._domainkey.aspektagency.com

    No TXT records returned for this selector.

  • selector2selector2._domainkey.aspektagency.com

    No TXT records returned for this selector.

  • googlegoogle._domainkey.aspektagency.com
    • v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCKYjQCj8uiqWAs8WUe+bS+Fqey/HbpH/OhQAZq+GwLvLeZs3Bgc0JS9qe0cDqxE4TzbUoo0RtpFOtvGpmRTrouKmvyTzgr7p0MXZJnh6G7mfv42IG89mW4PgpORGtIDAaUkbjz9GbxIB70c8nWqRELkD84JvC1GnG0wOpKUQsl9wIDAQAB
  • 2023060120230601._domainkey.aspektagency.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.aspektagency.com

    No TXT records returned for this selector.

  • k1k1._domainkey.aspektagency.com

    No TXT records returned for this selector.

  • k2k2._domainkey.aspektagency.com

    No TXT records returned for this selector.

  • s1s1._domainkey.aspektagency.com

    No TXT records returned for this selector.

  • s2s2._domainkey.aspektagency.com

    No TXT records returned for this selector.

  • defaultdefault._domainkey.aspektagency.com
    CNAME aspektagency.com.default.dkim.auto.dnssmarthost.net
    • v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDp/IOQzie5WojHWl77C9eg//rxhF7TU14ALVn5scJbj+uiKzy3LL9qMOGgseY9z1ih0FGKXsKbcCt7Ui7kO4C8qh79R5ip42I7KH/I27NyQTjx8l1qsJ6vdgn6r7bEOm5VYQF6gEDvJMBujF5Nf9HRKbm2PRaAEeCJh9kHCTAtowIDAQAB;
  • dkimdkim._domainkey.aspektagency.com

    No TXT records returned for this selector.

  • mailmail._domainkey.aspektagency.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=none; aspf=r; adkim=r;