DNS & email auth

failLast checked Jul 23, 2026, 6:41 PM

Findings6 findings

Fix now (1)

The record requires 19 DNS lookups, over the limit of 10. Receivers treat this as a permanent error.
SPF
How to fix
Remove unused includes or flatten nested ones. include, a, mx, ptr, exists, and redirect each cost one lookup.

Recommended (4)

The record uses softfail (~all), which is weaker than fail (-all).
SPF
How to fix
Move to -all once you're confident every legitimate sender is listed.
The record uses the ptr mechanism, which is deprecated, slow, and unreliable.
SPF
How to fix
Replace ptr with ip4/ip6 networks or an include.
No DKIM key was found for the common selectors checked.
DKIM
Custom selectors may still exist outside the common probe list.
How to fix
If this domain sends mail, enable DKIM signing at the email provider and publish the selector records it gives you.
DMARC policy is p=none, so it monitors but does not enforce.
DMARC
How to fix
Once your legitimate senders pass, move to p=quarantine and then p=reject.

Healthy (1)

1 MX record found.
MX

Evidence

MX

1 record

mail.ludwigmarketingandsales.compriority 0

SPF

19 of 10 lookups

DNS lookups19 / 10

ludwigmarketingandsales.com

v=spf1 a mx include:helpscoutemail.com ptr include:bluehost.com ~all

include:helpscoutemail.com

v=spf1 ip4:54.173.229.38 ip4:52.0.20.102 ip4:54.174.116.32 ip4:52.2.238.96 ip4:52.20.146.34 ip4:34.198.122.65 ~all

include:bluehost.com

v=spf1 ip4:209.17.115.0/24 ip4:64.69.218.0/24 include:spf2.bluehost.com include:_spf.qualtrics.com include:_spf.salesforce.com include:sparkpostmail.com include:spf.mailjet.com include:spf.protection.outlook.com include:_spf.myorderbox.com include:eig.spf.a.cloudfilter.net include:spf.websitewelcome.com -all

include:spf2.bluehost.com

v=spf1 ip4:66.147.240.0/20 ip4:69.89.16.0/20 ip4:74.220.192.0/19 ip4:67.222.32.0/19 ip4:70.40.192.0/19 ip4:67.20.64.0/18 ip4:173.254.0.0/17 ip4:50.87.0.0/16 ip4:69.195.64.0/18 -all

include:_spf.qualtrics.com

v=spf1 ip4:162.247.216.0/22 ip4:139.60.152.0/22 ip4:98.97.248.0/21 ip4:64.69.212.0/24 ip4:54.186.193.102/32 ip4:52.222.73.120/32 ip4:52.222.73.83 ip4:52.222.62.51 ip4:52.222.75.85 ip4:52.222.89.228 ip4:160.1.62.192 ip4:52.61.91.9 ip4:15.200.21.50 ip4:15.200.201.185 ip4:15.200.44.248 -all

include:_spf.salesforce.com

v=spf1 exists:%{i}._spf.mta.salesforce.com -all

include:sparkpostmail.com

v=spf1 exists:%{i}._spf.sparkpostmail.com ~all

include:spf.mailjet.com

v=spf1 ip4:87.253.232.0/21 ip4:185.189.236.0/22 ip4:185.211.120.0/22 ip4:185.250.236.0/22 ip4:45.14.148.0/22 ~all

include:spf.protection.outlook.com

v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all

include:_spf.myorderbox.com

v=spf1 ip4:162.215.231.0/24 ip4:162.214.222.0/24 ?all

include:eig.spf.a.cloudfilter.net

v=spf1 ip4:35.89.44.32/29 ip4:44.202.169.32/29 ip4:34.226.25.166/32 ~all

include:spf.websitewelcome.com

v=spf1 include:_spf.nfco-mailout.com ip4:209.17.115.0/24 ip4:64.69.218.0/24 ip4:65.254.253.0/24 ip4:65.254.254.0/24 ip4:162.210.50.0/23 ip4:162.210.48.0/23 ip4:206.188.220.0/23 ip4:206.188.222.0/23 ip4:72.22.75.0/24 ip4:66.235.215.0/24 ~all

include:_spf.nfco-mailout.com

v=spf1 include:_netblocks-pro.nfco-mailout.com include:_netblocks-atl.nfco-mailout.com ~all

include:_netblocks-pro.nfco-mailout.com

v=spf1 ip4:67.20.127.0/27 ip4:50.87.255.32/27 ip4:66.147.243.192/27 ip4:162.241.146.0/23 ip4:162.215.244.0/23 ~all

include:_netblocks-atl.nfco-mailout.com

v=spf1 ip4:192.185.0.0/16 ip4:50.116.64.0/18 ip4:162.210.50.0/23 ip4:162.210.48.0/23 ~all

Root TXT

4 records

proxy-ssl.webflow.com
brevo-code:8eace5390c53354d15e1150f947744d2
v=spf1 a mx include:helpscoutemail.com ptr include:bluehost.com ~all
MS=307F44C7BAE3602E63A438D9188626F2AC7E9B78

DKIM selectors

0 records

selector1selector1._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
selector2selector2._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
googlegoogle._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
2023060120230601._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
2021011220210112._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
k1k1._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
k2k2._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
s1s1._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
s2s2._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
defaultdefault._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
dkimdkim._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
mailmail._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.

DMARC

1 record

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

v=DMARC1: Identifies this TXT record as a DMARC policy. Must be the first tag.
p=none: Monitoring only: receivers deliver failing mail normally and just send reports.
rua=mailto:rua@dmarc.brevo.com: Receivers send daily aggregate reports about passing and failing mail to rua@dmarc.brevo.com.
sp=nonedefault: No sp= tag is published, so subdomains inherit the domain's p= policy.
pct=100default: No pct= tag is published, so the policy applies to all failing mail.
adkim=rdefault: No adkim= tag is published, so DKIM alignment is relaxed: any subdomain of the From domain may sign.
aspf=rdefault: No aspf= tag is published, so SPF alignment is relaxed: the envelope sender may be any subdomain of the From domain.

Raw JSON

{
  "mx": [
    {
      "type": "MX",
      "exchange": "mail.ludwigmarketingandsales.com",
      "priority": 0
    }
  ],
  "spf": {
    "tree": {
      "via": "root",
      "domain": "ludwigmarketingandsales.com",
      "issues": [],
      "records": [
        "v=spf1 a mx include:helpscoutemail.com ptr include:bluehost.com ~all"
      ],
      "children": [
        {
          "via": "include",
          "domain": "helpscoutemail.com",
          "issues": [],
          "records": [
            "v=spf1 ip4:54.173.229.38 ip4:52.0.20.102 ip4:54.174.116.32 ip4:52.2.238.96 ip4:52.20.146.34 ip4:34.198.122.65 ~all"
          ],
          "children": []
        },
        {
          "via": "include",
          "domain": "bluehost.com",
          "issues": [],
          "records": [
            "v=spf1 ip4:209.17.115.0/24 ip4:64.69.218.0/24 include:spf2.bluehost.com include:_spf.qualtrics.com include:_spf.salesforce.com include:sparkpostmail.com include:spf.mailjet.com include:spf.protection.outlook.com include:_spf.myorderbox.com include:eig.spf.a.cloudfilter.net include:spf.websitewelcome.com -all"
          ],
          "children": [
            {
              "via": "include",
              "domain": "spf2.bluehost.com",
              "issues": [],
              "records": [
                "v=spf1 ip4:66.147.240.0/20 ip4:69.89.16.0/20 ip4:74.220.192.0/19 ip4:67.222.32.0/19 ip4:70.40.192.0/19 ip4:67.20.64.0/18 ip4:173.254.0.0/17 ip4:50.87.0.0/16 ip4:69.195.64.0/18 -all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "_spf.qualtrics.com",
              "issues": [],
              "records": [
                "v=spf1 ip4:162.247.216.0/22 ip4:139.60.152.0/22 ip4:98.97.248.0/21 ip4:64.69.212.0/24 ip4:54.186.193.102/32 ip4:52.222.73.120/32 ip4:52.222.73.83 ip4:52.222.62.51 ip4:52.222.75.85 ip4:52.222.89.228 ip4:160.1.62.192 ip4:52.61.91.9 ip4:15.200.21.50 ip4:15.200.201.185 ip4:15.200.44.248 -all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "_spf.salesforce.com",
              "issues": [],
              "records": [
                "v=spf1 exists:%{i}._spf.mta.salesforce.com -all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "sparkpostmail.com",
              "issues": [],
              "records": [
                "v=spf1 exists:%{i}._spf.sparkpostmail.com ~all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "spf.mailjet.com",
              "issues": [],
              "records": [
                "v=spf1 ip4:87.253.232.0/21 ip4:185.189.236.0/22 ip4:185.211.120.0/22 ip4:185.250.236.0/22 ip4:45.14.148.0/22 ~all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "spf.protection.outlook.com",
              "issues": [],
              "records": [
                "v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "_spf.myorderbox.com",
              "issues": [],
              "records": [
                "v=spf1 ip4:162.215.231.0/24 ip4:162.214.222.0/24 ?all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "eig.spf.a.cloudfilter.net",
              "issues": [],
              "records": [
                "v=spf1 ip4:35.89.44.32/29 ip4:44.202.169.32/29 ip4:34.226.25.166/32 ~all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "spf.websitewelcome.com",
              "issues": [],
              "records": [
                "v=spf1 include:_spf.nfco-mailout.com ip4:209.17.115.0/24 ip4:64.69.218.0/24 ip4:65.254.253.0/24 ip4:65.254.254.0/24 ip4:162.210.50.0/23 ip4:162.210.48.0/23 ip4:206.188.220.0/23 ip4:206.188.222.0/23 ip4:72.22.75.0/24 ip4:66.235.215.0/24 ~all"
              ],
              "children": [
                {
                  "via": "include",
                  "domain": "_spf.nfco-mailout.com",
                  "issues": [],
                  "records": [
                    "v=spf1 include:_netblocks-pro.nfco-mailout.com include:_netblocks-atl.nfco-mailout.com ~all"
                  ],
                  "children": [
                    {
                      "via": "include",
                      "domain": "_netblocks-pro.nfco-mailout.com",
                      "issues": [],
                      "records": [
                        "v=spf1 ip4:67.20.127.0/27 ip4:50.87.255.32/27 ip4:66.147.243.192/27 ip4:162.241.146.0/23 ip4:162.215.244.0/23 ~all"
                      ],
                      "children": []
                    },
                    {
                      "via": "include",
                      "domain": "_netblocks-atl.nfco-mailout.com",
                      "issues": [],
                      "records": [
                        "v=spf1 ip4:192.185.0.0/16 ip4:50.116.64.0/18 ip4:162.210.50.0/23 ip4:162.210.48.0/23 ~all"
                      ],
                      "children": []
                    }
                  ]
                }
              ]
            }
          ]
        }
      ]
    },
    "truncated": false,
    "lookupCount": 19,
    "voidLookupCount": 0
  },
  "dkim": [
    {
      "cname": [],
      "records": [],
      "selector": "selector1",
      "queryName": "selector1._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "selector2",
      "queryName": "selector2._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "google",
      "queryName": "google._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20230601",
      "queryName": "20230601._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20210112",
      "queryName": "20210112._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k1",
      "queryName": "k1._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k2",
      "queryName": "k2._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s1",
      "queryName": "s1._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s2",
      "queryName": "s2._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "default",
      "queryName": "default._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "dkim",
      "queryName": "dkim._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "mail",
      "queryName": "mail._domainkey.ludwigmarketingandsales.com"
    }
  ],
  "rootTxt": [
    "proxy-ssl.webflow.com",
    "brevo-code:8eace5390c53354d15e1150f947744d2",
    "v=spf1 a mx include:helpscoutemail.com ptr include:bluehost.com ~all",
    "MS=307F44C7BAE3602E63A438D9188626F2AC7E9B78"
  ],
  "dmarcTxt": [
    "v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com"
  ]
}

Fix now (1)

The record requires 19 DNS lookups, over the limit of 10. Receivers treat this as a permanent error.

Recommended (4)

The record uses softfail (~all), which is weaker than fail (-all).

The record uses the ptr mechanism, which is deprecated, slow, and unreliable.

No DKIM key was found for the common selectors checked.

DMARC policy is p=none, so it monitors but does not enforce.

Healthy (1)

1 MX record found.

Evidence

MX

SPF

Root TXT

DKIM selectors

DMARC