DNS & email auth

failLast checked Sep 5, 2026, 11:38 PM

Findings7 findings

Fix now (2)

The record requires 18 DNS lookups, over the limit of 10. Receivers treat this as a permanent error.
SPF
How to fix
Remove unused includes or flatten nested ones. include, a, mx, ptr, exists, and redirect each cost one lookup.
No DMARC record was found at _dmarc.lightspandigital.com.
DMARC
How to fix
Publish this TXT record to start monitoring, swapping the rua= address for a mailbox you read. Tighten the policy to quarantine or reject once legitimate senders pass.
TXT @ _dmarc.lightspandigital.com
v=DMARC1; p=none; rua=mailto:dmarc@lightspandigital.com

Recommended (4)

The record uses neutral (?all), which gives receivers no enforcement signal.
SPF
How to fix
Move to -all once you're confident every legitimate sender is listed.
The record uses the ptr mechanism, which is deprecated, slow, and unreliable.
SPF
How to fix
Replace ptr with ip4/ip6 networks or an include.
DKIM selector default uses a 768-bit RSA key.
DKIM
default (default._domainkey.lightspandigital.com)
How to fix
Rotate to an RSA key of at least 2048 bits.
DKIM selector mail uses a 1024-bit RSA key.
DKIM
mail (mail._domainkey.lightspandigital.com)
How to fix
Rotate to an RSA key of at least 2048 bits.

Healthy (1)

7 MX records found.
MX

Evidence

MX

7 records

aspmx.l.google.compriority 10
alt1.aspmx.l.google.compriority 20
alt2.aspmx.l.google.compriority 20
aspmx2.googlemail.compriority 30
aspmx3.googlemail.compriority 30
aspmx4.googlemail.compriority 30
aspmx5.googlemail.compriority 30

SPF

18 of 10 lookups

DNS lookups18 / 10

lightspandigital.com

v=spf1 a mx ptr include:bluehost.com ip4:192.163.252.133 ?all

include:bluehost.com

v=spf1 ip4:209.17.115.0/24 ip4:64.69.218.0/24 include:spf2.bluehost.com include:_spf.qualtrics.com include:_spf.salesforce.com include:sparkpostmail.com include:spf.mailjet.com include:spf.protection.outlook.com include:_spf.myorderbox.com include:eig.spf.a.cloudfilter.net include:spf.websitewelcome.com -all

include:spf2.bluehost.com

v=spf1 ip4:66.147.240.0/20 ip4:69.89.16.0/20 ip4:74.220.192.0/19 ip4:67.222.32.0/19 ip4:70.40.192.0/19 ip4:67.20.64.0/18 ip4:173.254.0.0/17 ip4:50.87.0.0/16 ip4:69.195.64.0/18 -all

include:_spf.qualtrics.com

v=spf1 ip4:162.247.216.0/22 ip4:139.60.152.0/22 ip4:98.97.248.0/21 ip4:64.69.212.0/24 ip4:54.186.193.102/32 ip4:52.222.73.120/32 ip4:52.222.73.83 ip4:52.222.62.51 ip4:52.222.75.85 ip4:52.222.89.228 ip4:160.1.62.192 ip4:52.61.91.9 ip4:15.200.21.50 ip4:15.200.201.185 ip4:15.200.44.248 -all

include:_spf.salesforce.com

v=spf1 exists:%{i}._spf.mta.salesforce.com -all

include:sparkpostmail.com

v=spf1 exists:%{i}._spf.sparkpostmail.com ~all

include:spf.mailjet.com

v=spf1 ip4:87.253.232.0/21 ip4:185.189.236.0/22 ip4:185.211.120.0/22 ip4:185.250.236.0/22 ip4:45.14.148.0/22 ~all

include:spf.protection.outlook.com

v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all

include:_spf.myorderbox.com

v=spf1 ip4:162.215.231.0/24 ip4:162.214.222.0/24 ?all

include:eig.spf.a.cloudfilter.net

v=spf1 ip4:35.89.44.32/29 ip4:44.202.169.32/29 ip4:34.226.25.166/32 ip4:100.28.182.33/32 ip4:100.28.254.76/32 ip4:100.61.84.220/32 ip4:18.210.124.212/32 ip4:18.215.137.104/32 ip4:3.214.91.57/32 ip4:3.230.200.110/32 ip4:32.199.66.231/32 ip4:34.206.118.3/32 ip4:34.225.157.126/32 ip4:34.225.28.86/32 ip4:44.205.110.174/32 ip4:44.215.46.63/32 ip4:52.71.2.206/32 ip4:54.156.90.4/32 ip4:54.158.220.113/32 ip4:54.159.3.40/32 ip4:54.205.72.13/32 ip4:100.22.108.84/32 ip4:18.236.15.47/32 ip4:32.184.43.39/32 ip4:34.211.229.208/32 ip4:44.226.35.153/32 ip4:44.230.149.34/32 ip4:44.235.174.145/32 ip4:44.237.127.95/32 ip4:44.237.171.165/32 ip4:44.240.126.13/32 ip4:52.11.150.220/32 ip4:52.11.48.74/32 ip4:52.24.246.80/32 ip4:52.27.15.193/32 ip4:52.27.38.162/32 ip4:52.34.58.233/32 ip4:52.35.6.222/32 ip4:52.41.18.59/32 ip4:52.88.198.243/32 ip4:54.148.42.2/32 ip4:54.191.193.91/32 ip4:54.213.97.249/32 ip4:54.244.7.238/32 ip4:54.71.112.137/32 ~all

include:spf.websitewelcome.com

v=spf1 include:_spf.nfco-mailout.com ip4:209.17.115.0/24 ip4:64.69.218.0/24 ip4:65.254.253.0/24 ip4:65.254.254.0/24 ip4:162.210.50.0/23 ip4:162.210.48.0/23 ip4:206.188.220.0/23 ip4:206.188.222.0/23 ip4:72.22.75.0/24 ip4:66.235.215.0/24 ~all

include:_spf.nfco-mailout.com

v=spf1 include:_netblocks-pro.nfco-mailout.com include:_netblocks-atl.nfco-mailout.com ~all

include:_netblocks-pro.nfco-mailout.com

v=spf1 ip4:67.20.127.0/27 ip4:50.87.255.32/27 ip4:66.147.243.192/27 ip4:162.241.146.0/23 ip4:162.215.244.0/23 ~all

include:_netblocks-atl.nfco-mailout.com

v=spf1 ip4:192.185.0.0/16 ip4:50.116.64.0/18 ip4:162.210.50.0/23 ip4:162.210.48.0/23 ~all

Root TXT

3 records

v=spf1 a mx ptr include:bluehost.com ip4:192.163.252.133 ?all
Sendinblue-code:f8b648182ea24fc22b1b78e314f74329
google-site-verification=VfDgQYPFh7PZ4drZBoFfUQsiPd0cbCO1V5uMn9v9BiQ

DKIM selectors

2 records

s1s1._domainkey.lightspandigital.com
CNAME sg1.v5575683.c190465.e.marketingautomation.services
No TXT records returned for this selector.
s2s2._domainkey.lightspandigital.com
CNAME sg2.v5575683.c190465.e.marketingautomation.services
No TXT records returned for this selector.
defaultdefault._domainkey.lightspandigital.com
- k=rsa; p=MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhALjY87XuzZW5BKNJr5OZfZ6aIoQzhRb4iNyYQscYGqf79B/OLcS0B2nxKiDDHeNdH1AAnIK8J5CRLD+7vI6CPzIySztKTZ++u6uRFhgVytPyYQSliB4yHFYVg9iwyWLf3wIDAQAB
mailmail._domainkey.lightspandigital.com
- k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z+FApQ6ra2VsXfbJP3HE6wAO0YTVEJt1TmeczhEd2Jiz/fcabIISgXEdSpTYJhb0ct0VJRxcg4c8c7wIDAQAB

Probed with no records: selector1, selector2, google, 20230601, 20210112, k1, k2, dkim

DMARC TXT

0 records

No TXT records were returned at _dmarc.

Raw JSON

{
  "mx": [
    {
      "type": "MX",
      "exchange": "aspmx.l.google.com",
      "priority": 10
    },
    {
      "type": "MX",
      "exchange": "alt1.aspmx.l.google.com",
      "priority": 20
    },
    {
      "type": "MX",
      "exchange": "alt2.aspmx.l.google.com",
      "priority": 20
    },
    {
      "type": "MX",
      "exchange": "aspmx2.googlemail.com",
      "priority": 30
    },
    {
      "type": "MX",
      "exchange": "aspmx3.googlemail.com",
      "priority": 30
    },
    {
      "type": "MX",
      "exchange": "aspmx4.googlemail.com",
      "priority": 30
    },
    {
      "type": "MX",
      "exchange": "aspmx5.googlemail.com",
      "priority": 30
    }
  ],
  "spf": {
    "tree": {
      "via": "root",
      "domain": "lightspandigital.com",
      "issues": [],
      "records": [
        "v=spf1 a mx ptr include:bluehost.com ip4:192.163.252.133 ?all"
      ],
      "children": [
        {
          "via": "include",
          "domain": "bluehost.com",
          "issues": [],
          "records": [
            "v=spf1 ip4:209.17.115.0/24 ip4:64.69.218.0/24 include:spf2.bluehost.com include:_spf.qualtrics.com include:_spf.salesforce.com include:sparkpostmail.com include:spf.mailjet.com include:spf.protection.outlook.com include:_spf.myorderbox.com include:eig.spf.a.cloudfilter.net include:spf.websitewelcome.com -all"
          ],
          "children": [
            {
              "via": "include",
              "domain": "spf2.bluehost.com",
              "issues": [],
              "records": [
                "v=spf1 ip4:66.147.240.0/20 ip4:69.89.16.0/20 ip4:74.220.192.0/19 ip4:67.222.32.0/19 ip4:70.40.192.0/19 ip4:67.20.64.0/18 ip4:173.254.0.0/17 ip4:50.87.0.0/16 ip4:69.195.64.0/18 -all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "_spf.qualtrics.com",
              "issues": [],
              "records": [
                "v=spf1 ip4:162.247.216.0/22 ip4:139.60.152.0/22 ip4:98.97.248.0/21 ip4:64.69.212.0/24 ip4:54.186.193.102/32 ip4:52.222.73.120/32 ip4:52.222.73.83 ip4:52.222.62.51 ip4:52.222.75.85 ip4:52.222.89.228 ip4:160.1.62.192 ip4:52.61.91.9 ip4:15.200.21.50 ip4:15.200.201.185 ip4:15.200.44.248 -all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "_spf.salesforce.com",
              "issues": [],
              "records": [
                "v=spf1 exists:%{i}._spf.mta.salesforce.com -all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "sparkpostmail.com",
              "issues": [],
              "records": [
                "v=spf1 exists:%{i}._spf.sparkpostmail.com ~all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "spf.mailjet.com",
              "issues": [],
              "records": [
                "v=spf1 ip4:87.253.232.0/21 ip4:185.189.236.0/22 ip4:185.211.120.0/22 ip4:185.250.236.0/22 ip4:45.14.148.0/22 ~all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "spf.protection.outlook.com",
              "issues": [],
              "records": [
                "v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "_spf.myorderbox.com",
              "issues": [],
              "records": [
                "v=spf1 ip4:162.215.231.0/24 ip4:162.214.222.0/24 ?all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "eig.spf.a.cloudfilter.net",
              "issues": [],
              "records": [
                "v=spf1 ip4:35.89.44.32/29 ip4:44.202.169.32/29 ip4:34.226.25.166/32 ip4:100.28.182.33/32 ip4:100.28.254.76/32 ip4:100.61.84.220/32 ip4:18.210.124.212/32 ip4:18.215.137.104/32 ip4:3.214.91.57/32 ip4:3.230.200.110/32 ip4:32.199.66.231/32 ip4:34.206.118.3/32 ip4:34.225.157.126/32 ip4:34.225.28.86/32 ip4:44.205.110.174/32 ip4:44.215.46.63/32 ip4:52.71.2.206/32 ip4:54.156.90.4/32 ip4:54.158.220.113/32 ip4:54.159.3.40/32 ip4:54.205.72.13/32 ip4:100.22.108.84/32 ip4:18.236.15.47/32 ip4:32.184.43.39/32 ip4:34.211.229.208/32 ip4:44.226.35.153/32 ip4:44.230.149.34/32 ip4:44.235.174.145/32 ip4:44.237.127.95/32 ip4:44.237.171.165/32 ip4:44.240.126.13/32 ip4:52.11.150.220/32 ip4:52.11.48.74/32 ip4:52.24.246.80/32 ip4:52.27.15.193/32 ip4:52.27.38.162/32 ip4:52.34.58.233/32 ip4:52.35.6.222/32 ip4:52.41.18.59/32 ip4:52.88.198.243/32 ip4:54.148.42.2/32 ip4:54.191.193.91/32 ip4:54.213.97.249/32 ip4:54.244.7.238/32 ip4:54.71.112.137/32 ~all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "spf.websitewelcome.com",
              "issues": [],
              "records": [
                "v=spf1 include:_spf.nfco-mailout.com ip4:209.17.115.0/24 ip4:64.69.218.0/24 ip4:65.254.253.0/24 ip4:65.254.254.0/24 ip4:162.210.50.0/23 ip4:162.210.48.0/23 ip4:206.188.220.0/23 ip4:206.188.222.0/23 ip4:72.22.75.0/24 ip4:66.235.215.0/24 ~all"
              ],
              "children": [
                {
                  "via": "include",
                  "domain": "_spf.nfco-mailout.com",
                  "issues": [],
                  "records": [
                    "v=spf1 include:_netblocks-pro.nfco-mailout.com include:_netblocks-atl.nfco-mailout.com ~all"
                  ],
                  "children": [
                    {
                      "via": "include",
                      "domain": "_netblocks-pro.nfco-mailout.com",
                      "issues": [],
                      "records": [
                        "v=spf1 ip4:67.20.127.0/27 ip4:50.87.255.32/27 ip4:66.147.243.192/27 ip4:162.241.146.0/23 ip4:162.215.244.0/23 ~all"
                      ],
                      "children": []
                    },
                    {
                      "via": "include",
                      "domain": "_netblocks-atl.nfco-mailout.com",
                      "issues": [],
                      "records": [
                        "v=spf1 ip4:192.185.0.0/16 ip4:50.116.64.0/18 ip4:162.210.50.0/23 ip4:162.210.48.0/23 ~all"
                      ],
                      "children": []
                    }
                  ]
                }
              ]
            }
          ]
        }
      ]
    },
    "truncated": false,
    "lookupCount": 18,
    "voidLookupCount": 0
  },
  "dkim": [
    {
      "cname": [],
      "records": [],
      "selector": "selector1",
      "queryName": "selector1._domainkey.lightspandigital.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "selector2",
      "queryName": "selector2._domainkey.lightspandigital.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "google",
      "queryName": "google._domainkey.lightspandigital.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20230601",
      "queryName": "20230601._domainkey.lightspandigital.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20210112",
      "queryName": "20210112._domainkey.lightspandigital.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k1",
      "queryName": "k1._domainkey.lightspandigital.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k2",
      "queryName": "k2._domainkey.lightspandigital.com"
    },
    {
      "cname": [
        "sg1.v5575683.c190465.e.marketingautomation.services"
      ],
      "records": [],
      "selector": "s1",
      "queryName": "s1._domainkey.lightspandigital.com"
    },
    {
      "cname": [
        "sg2.v5575683.c190465.e.marketingautomation.services"
      ],
      "records": [],
      "selector": "s2",
      "queryName": "s2._domainkey.lightspandigital.com"
    },
    {
      "cname": [],
      "records": [
        "k=rsa; p=MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhALjY87XuzZW5BKNJr5OZfZ6aIoQzhRb4iNyYQscYGqf79B/OLcS0B2nxKiDDHeNdH1AAnIK8J5CRLD+7vI6CPzIySztKTZ++u6uRFhgVytPyYQSliB4yHFYVg9iwyWLf3wIDAQAB"
      ],
      "selector": "default",
      "queryName": "default._domainkey.lightspandigital.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "dkim",
      "queryName": "dkim._domainkey.lightspandigital.com"
    },
    {
      "cname": [],
      "records": [
        "k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z+FApQ6ra2VsXfbJP3HE6wAO0YTVEJt1TmeczhEd2Jiz/fcabIISgXEdSpTYJhb0ct0VJRxcg4c8c7wIDAQAB"
      ],
      "selector": "mail",
      "queryName": "mail._domainkey.lightspandigital.com"
    }
  ],
  "rootTxt": [
    "v=spf1 a mx ptr include:bluehost.com ip4:192.163.252.133 ?all",
    "Sendinblue-code:f8b648182ea24fc22b1b78e314f74329",
    "google-site-verification=VfDgQYPFh7PZ4drZBoFfUQsiPd0cbCO1V5uMn9v9BiQ"
  ],
  "dmarcTxt": []
}

Fix now (2)

The record requires 18 DNS lookups, over the limit of 10. Receivers treat this as a permanent error.

No DMARC record was found at _dmarc.lightspandigital.com.

Recommended (4)

The record uses neutral (?all), which gives receivers no enforcement signal.

The record uses the ptr mechanism, which is deprecated, slow, and unreliable.

DKIM selector default uses a 768-bit RSA key.

DKIM selector mail uses a 1024-bit RSA key.

Healthy (1)

7 MX records found.

Evidence

MX

SPF

Root TXT

DKIM selectors

DMARC TXT