DNS & email auth

warnLast checked
Findings4 findings

Recommended (3)

  • The record uses softfail (~all), which is weaker than fail (-all).

    SPF

    How to fix

    Move to -all once you're confident every legitimate sender is listed.

  • No DKIM key was found for the common selectors checked.

    DKIM

    Custom selectors may still exist outside the common probe list.

    How to fix

    If this domain sends mail, enable DKIM signing at the email provider and publish the selector records it gives you.

  • DMARC policy is p=none, so it monitors but does not enforce.

    DMARC

    How to fix

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

Healthy (1)

  • 5 MX records found.

    MX

Evidence

MX

5 records
  • aspmx.l.google.compriority 1
  • alt1.aspmx.l.google.compriority 5
  • alt2.aspmx.l.google.compriority 5
  • aspmx2.googlemail.compriority 10
  • aspmx3.googlemail.compriority 10

SPF

4 of 10 lookups
DNS lookups4 / 10
fuelmade.com
include:klaviyomail.com
include:sendgrid.net
include:ab.sendgrid.net
include:_spf.google.com

Root TXT

5 records
  • google-site-verification=tmUhQK5Eg6ZbGBKOMAZvBSoGxMKKG5jmP2i96xZ7IOI
  • klaviyo-site-verification=JK7HKR
  • v=spf1 include:klaviyomail.com include:_spf.google.com ~all
  • google-site-verification=QnFVrupjJ-1VTQqLpgVtimt0vWGOAsHrpVNOSYgTszs
  • google-site-verification=faaLQ48YF1flUy1TDXkKe6v_3r5fXmx7qfdmcCfK-gs

DKIM selectors

0 records

Probed with no records: selector1, selector2, google, 20230601, 20210112, k1, k2, s1, s2, default, dkim, mail

DMARC

1 record
v=DMARC1; p=none; pct=100; rua=mailto:re+mikxidfqxwv@dmarc.postmarkapp.com; sp=none; aspf=r;
v=DMARC1
Identifies this TXT record as a DMARC policy. Must be the first tag.
p=none
Monitoring only: receivers deliver failing mail normally and just send reports.
pct=100
The policy applies to all failing mail.
rua=mailto:re+mikxidfqxwv@dmarc.postmarkapp.com
Receivers send daily aggregate reports about passing and failing mail to re+mikxidfqxwv@dmarc.postmarkapp.com.
sp=none
Policy for subdomains, overriding p=. Monitoring only: receivers deliver failing mail normally and just send reports.
aspf=r
Relaxed SPF alignment: the envelope sender may be any subdomain of the From domain.
adkim=rdefault
No adkim= tag is published, so DKIM alignment is relaxed: any subdomain of the From domain may sign.
Raw JSON