capture_version: 1.0
captured_utc_start: 2026-08-02T01:59:45.667134Z
captured_utc_second_resolver: 2026-08-02T01:59:58.843673Z
query_type: TXT
transport: DNS-over-HTTPS JSON
user_agent: evidence-audit/1.0
scope: current recursive DNS observations; not a historical DNS archive

[google-public-dns]
endpoint: https://dns.google/resolve

name: google._domainkey.mastermindpromotion.com
status: 0
ttl: 300
authoritative_response_comment: Response from 108.162.192.104.
txt: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDGT9CotioD/YAjUYIkyt0bq0MDa6wvsWnQmzGUKdx8+VRA66kifBsuoCNoX2hQapzQSdCai2PwsAzVTZvNwzz5VZT3Wa/hgfNm4x7L424RhBfokihWqNOA4KfMBdVxie8RQjjqYaeMIfgntj/rpuCq71+uiWAFcPJ5Nye/QuC8oQIDAQAB

name: arc-20240605._domainkey.google.com
status: 0
ttl: 3600
authoritative_response_comment: Response from 216.239.34.10.
txt: k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3xpv8nzv48sGAt6yT3BhDpQcLv9Cgnot1arQefERmoFpgygBi73YM3lllM3fb435QBz8Qsu3ZM+xkIM5+UM9p286xJXI/26vNSbCFEAHeYJmUCJMUP1sX1b5oKzW5NJgojoJNLRulyo6GC6nFpBLv6j2hL41GOjg+RdYDxrTcQavsP2DMQLFP/mdsg7zBlfYdg0occfvpJXHYgxN3M1mYvBvbmnmPIrMtfoMFDdmJCiri3c9X9je2yz/gcpKXoz0n+O9Clk8jVQkrPEcahkCHPpbe662VLndAYsiD36IyF0+shLOJn0duf2O5eMNlUBwMPX7N589dz3Xy32B0eoPQIDAQAB

name: 20230601._domainkey.1e100.net
status: 0
ttl: 3600
authoritative_response_comment: Response from 216.239.32.10.
txt: v=DKIM1; k=rsa; p=

[cloudflare-doh]
endpoint: https://cloudflare-dns.com/dns-query

name: google._domainkey.mastermindpromotion.com
status: 0
ttl: 300
txt: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDGT9CotioD/YAjUYIkyt0bq0MDa6wvsWnQmzGUKdx8+VRA66kifBsuoCNoX2hQapzQSdCai2PwsAzVTZvNwzz5VZT3Wa/hgfNm4x7L424RhBfokihWqNOA4KfMBdVxie8RQjjqYaeMIfgntj/rpuCq71+uiWAFcPJ5Nye/QuC8oQIDAQAB

name: arc-20240605._domainkey.google.com
status: 0
ttl: 3600
txt_joined: k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3xpv8nzv48sGAt6yT3BhDpQcLv9Cgnot1arQefERmoFpgygBi73YM3lllM3fb435QBz8Qsu3ZM+xkIM5+UM9p286xJXI/26vNSbCFEAHeYJmUCJMUP1sX1b5oKzW5NJgojoJNLRulyo6GC6nFpBLv6j2hL41GOjg+RdYDxrTcQavsP2DMQLFP/mdsg7zBlfYdg0occfvpJXHYgxN3M1mYvBvbmnmPIrMtfoMFDdmJCiri3c9X9je2yz/gcpKXoz0n+O9Clk8jVQkrPEcahkCHPpbe662VLndAYsiD36IyF0+shLOJn0duf2O5eMNlUBwMPX7N589dz3Xy32B0eoPQIDAQAB

name: 20230601._domainkey.1e100.net
status: 0
ttl: 3600
txt: v=DKIM1; k=rsa; p=

[derived-key-fingerprints]
google._domainkey.mastermindpromotion.com_spki_der_sha256: ef77ccfec11f9692a566ba203d676ff252393a50a07ba5c750c0fcfcf09ebd13
arc-20240605._domainkey.google.com_spki_der_sha256: 0f803f063f46a32d06cec0c9066906c93de674ba88af55dd84065f0618e3bcab

[interpretation]
Two distinct recursive resolver services agreed on both usable public keys at capture time.
The sender-domain result establishes a current selector-to-key binding, not publication in December 2024.
The Google ARC result supplies the key used by verify_google_arc_v1.py.  That script verifies the ARC-Message-Signature and ARC-Seal mathematics for the preserved EML.  The current X-Google-DKIM selector is revoked/empty and therefore cannot be verified from current DNS alone.