search

GlobalCyberAlliance / domain-security-scanner

Scan domains and receive advice based on their BIMI, DKIM, DMARC, and SPF records
https://dmarcguide.globalcyberalliance.org/
Apache License 2.0
123 stars 22 forks source link

Domain validation not working for subdomains #19

Closed OrlandoMD closed 5 months ago

OrlandoMD commented 6 months ago

Hello - the latest DSS exe is working well overall. Oddly obtaining the following result when running a set of domains with EXE for ftpc.fpcusa.com:

ftpc.fpcusa.com 0   invalid domain name  spf: We couldn't detect any active SPF record for your domain. Please visit https://dmarcguide.globalcyberalliance.org to fix this. bimi: We couldn't detect any active BIMI record for your domain. Please visit https://dmarcguide.globalcyberalliance.org to fix this. dkim: We couldn't detect any active DKIM record for your domain. Please visit https://dmarcguide.globalcyberalliance.org to fix this. dmarc: You do not have DMARC setup! domain: Your domain looks good! No further action needed. mx: You do not have any mail servers setup, so you cannot receive email at this domain.

Interactively checking with EasyDMARC online at the following link https://easydmarc.com/tools/domain-scanner?referred_landing=false&domain=ftpc.fpcusa.com returns results for SPF, DKIM, and DMARC:

image

The Windows CMD line I'm using:

dss.exe scan -t120 -n1.1.1.1,8.8.8.8 -a -f csv < domainsin_01.19.2024.csv > results_out_2024.csv
wolveix commented 5 months ago

Hey @OrlandoMD!

The error to focus on is the following:

scanResult:
    domain: ftpc.fpcusa.com
    error: invalid domain name

Looks like our basic domain parser that validates domains before running any checks doesn't qualify subdomains correctly. Thanks for the bug report!

wolveix commented 5 months ago

@OrlandoMD this should now be fixed :) Please let us know if you continue to experience issues!

OrlandoMD commented 5 months ago

Thank you very much - will do!