ludwigmarketingandsales.com

failScanned · Jul 23, 2026, 6:41 PM

Summary

ludwigmarketingandsales.com has critical problems

1To fix now

4Recommended

3Healthy

DNS & email auth

failLast checked Jul 23, 2026, 6:41 PM

Findings6 findings

Fix now (1)

The record requires 19 DNS lookups, over the limit of 10. Receivers treat this as a permanent error.
SPF
How to fix
Remove unused includes or flatten nested ones. include, a, mx, ptr, exists, and redirect each cost one lookup.

Recommended (4)

The record uses softfail (~all), which is weaker than fail (-all).
SPF
How to fix
Move to -all once you're confident every legitimate sender is listed.
The record uses the ptr mechanism, which is deprecated, slow, and unreliable.
SPF
How to fix
Replace ptr with ip4/ip6 networks or an include.
No DKIM key was found for the common selectors checked.
DKIM
Custom selectors may still exist outside the common probe list.
How to fix
If this domain sends mail, enable DKIM signing at the email provider and publish the selector records it gives you.
DMARC policy is p=none, so it monitors but does not enforce.
DMARC
How to fix
Once your legitimate senders pass, move to p=quarantine and then p=reject.

Healthy (1)

1 MX record found.
MX

Evidence

MX

1 record

mail.ludwigmarketingandsales.compriority 0

SPF

19 of 10 lookups

DNS lookups19 / 10

ludwigmarketingandsales.com

v=spf1 a mx include:helpscoutemail.com ptr include:bluehost.com ~all

include:helpscoutemail.com

v=spf1 ip4:54.173.229.38 ip4:52.0.20.102 ip4:54.174.116.32 ip4:52.2.238.96 ip4:52.20.146.34 ip4:34.198.122.65 ~all

include:bluehost.com

v=spf1 ip4:209.17.115.0/24 ip4:64.69.218.0/24 include:spf2.bluehost.com include:_spf.qualtrics.com include:_spf.salesforce.com include:sparkpostmail.com include:spf.mailjet.com include:spf.protection.outlook.com include:_spf.myorderbox.com include:eig.spf.a.cloudfilter.net include:spf.websitewelcome.com -all

include:spf2.bluehost.com

v=spf1 ip4:66.147.240.0/20 ip4:69.89.16.0/20 ip4:74.220.192.0/19 ip4:67.222.32.0/19 ip4:70.40.192.0/19 ip4:67.20.64.0/18 ip4:173.254.0.0/17 ip4:50.87.0.0/16 ip4:69.195.64.0/18 -all

include:_spf.qualtrics.com

v=spf1 ip4:162.247.216.0/22 ip4:139.60.152.0/22 ip4:98.97.248.0/21 ip4:64.69.212.0/24 ip4:54.186.193.102/32 ip4:52.222.73.120/32 ip4:52.222.73.83 ip4:52.222.62.51 ip4:52.222.75.85 ip4:52.222.89.228 ip4:160.1.62.192 ip4:52.61.91.9 ip4:15.200.21.50 ip4:15.200.201.185 ip4:15.200.44.248 -all

include:_spf.salesforce.com

v=spf1 exists:%{i}._spf.mta.salesforce.com -all

include:sparkpostmail.com

v=spf1 exists:%{i}._spf.sparkpostmail.com ~all

include:spf.mailjet.com

v=spf1 ip4:87.253.232.0/21 ip4:185.189.236.0/22 ip4:185.211.120.0/22 ip4:185.250.236.0/22 ip4:45.14.148.0/22 ~all

include:spf.protection.outlook.com

v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all

include:_spf.myorderbox.com

v=spf1 ip4:162.215.231.0/24 ip4:162.214.222.0/24 ?all

include:eig.spf.a.cloudfilter.net

v=spf1 ip4:35.89.44.32/29 ip4:44.202.169.32/29 ip4:34.226.25.166/32 ~all

include:spf.websitewelcome.com

v=spf1 include:_spf.nfco-mailout.com ip4:209.17.115.0/24 ip4:64.69.218.0/24 ip4:65.254.253.0/24 ip4:65.254.254.0/24 ip4:162.210.50.0/23 ip4:162.210.48.0/23 ip4:206.188.220.0/23 ip4:206.188.222.0/23 ip4:72.22.75.0/24 ip4:66.235.215.0/24 ~all

include:_spf.nfco-mailout.com

v=spf1 include:_netblocks-pro.nfco-mailout.com include:_netblocks-atl.nfco-mailout.com ~all

include:_netblocks-pro.nfco-mailout.com

v=spf1 ip4:67.20.127.0/27 ip4:50.87.255.32/27 ip4:66.147.243.192/27 ip4:162.241.146.0/23 ip4:162.215.244.0/23 ~all

include:_netblocks-atl.nfco-mailout.com

v=spf1 ip4:192.185.0.0/16 ip4:50.116.64.0/18 ip4:162.210.50.0/23 ip4:162.210.48.0/23 ~all

Root TXT

4 records

proxy-ssl.webflow.com
brevo-code:8eace5390c53354d15e1150f947744d2
v=spf1 a mx include:helpscoutemail.com ptr include:bluehost.com ~all
MS=307F44C7BAE3602E63A438D9188626F2AC7E9B78

DKIM selectors

0 records

selector1selector1._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
selector2selector2._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
googlegoogle._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
2023060120230601._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
2021011220210112._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
k1k1._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
k2k2._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
s1s1._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
s2s2._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
defaultdefault._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
dkimdkim._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.
mailmail._domainkey.ludwigmarketingandsales.com
No TXT records returned for this selector.

DMARC

1 record

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

v=DMARC1: Identifies this TXT record as a DMARC policy. Must be the first tag.
p=none: Monitoring only: receivers deliver failing mail normally and just send reports.
rua=mailto:rua@dmarc.brevo.com: Receivers send daily aggregate reports about passing and failing mail to rua@dmarc.brevo.com.
sp=nonedefault: No sp= tag is published, so subdomains inherit the domain's p= policy.
pct=100default: No pct= tag is published, so the policy applies to all failing mail.
adkim=rdefault: No adkim= tag is published, so DKIM alignment is relaxed: any subdomain of the From domain may sign.
aspf=rdefault: No aspf= tag is published, so SPF alignment is relaxed: the envelope sender may be any subdomain of the From domain.

Raw JSON

{
  "mx": [
    {
      "type": "MX",
      "exchange": "mail.ludwigmarketingandsales.com",
      "priority": 0
    }
  ],
  "spf": {
    "tree": {
      "via": "root",
      "domain": "ludwigmarketingandsales.com",
      "issues": [],
      "records": [
        "v=spf1 a mx include:helpscoutemail.com ptr include:bluehost.com ~all"
      ],
      "children": [
        {
          "via": "include",
          "domain": "helpscoutemail.com",
          "issues": [],
          "records": [
            "v=spf1 ip4:54.173.229.38 ip4:52.0.20.102 ip4:54.174.116.32 ip4:52.2.238.96 ip4:52.20.146.34 ip4:34.198.122.65 ~all"
          ],
          "children": []
        },
        {
          "via": "include",
          "domain": "bluehost.com",
          "issues": [],
          "records": [
            "v=spf1 ip4:209.17.115.0/24 ip4:64.69.218.0/24 include:spf2.bluehost.com include:_spf.qualtrics.com include:_spf.salesforce.com include:sparkpostmail.com include:spf.mailjet.com include:spf.protection.outlook.com include:_spf.myorderbox.com include:eig.spf.a.cloudfilter.net include:spf.websitewelcome.com -all"
          ],
          "children": [
            {
              "via": "include",
              "domain": "spf2.bluehost.com",
              "issues": [],
              "records": [
                "v=spf1 ip4:66.147.240.0/20 ip4:69.89.16.0/20 ip4:74.220.192.0/19 ip4:67.222.32.0/19 ip4:70.40.192.0/19 ip4:67.20.64.0/18 ip4:173.254.0.0/17 ip4:50.87.0.0/16 ip4:69.195.64.0/18 -all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "_spf.qualtrics.com",
              "issues": [],
              "records": [
                "v=spf1 ip4:162.247.216.0/22 ip4:139.60.152.0/22 ip4:98.97.248.0/21 ip4:64.69.212.0/24 ip4:54.186.193.102/32 ip4:52.222.73.120/32 ip4:52.222.73.83 ip4:52.222.62.51 ip4:52.222.75.85 ip4:52.222.89.228 ip4:160.1.62.192 ip4:52.61.91.9 ip4:15.200.21.50 ip4:15.200.201.185 ip4:15.200.44.248 -all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "_spf.salesforce.com",
              "issues": [],
              "records": [
                "v=spf1 exists:%{i}._spf.mta.salesforce.com -all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "sparkpostmail.com",
              "issues": [],
              "records": [
                "v=spf1 exists:%{i}._spf.sparkpostmail.com ~all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "spf.mailjet.com",
              "issues": [],
              "records": [
                "v=spf1 ip4:87.253.232.0/21 ip4:185.189.236.0/22 ip4:185.211.120.0/22 ip4:185.250.236.0/22 ip4:45.14.148.0/22 ~all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "spf.protection.outlook.com",
              "issues": [],
              "records": [
                "v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "_spf.myorderbox.com",
              "issues": [],
              "records": [
                "v=spf1 ip4:162.215.231.0/24 ip4:162.214.222.0/24 ?all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "eig.spf.a.cloudfilter.net",
              "issues": [],
              "records": [
                "v=spf1 ip4:35.89.44.32/29 ip4:44.202.169.32/29 ip4:34.226.25.166/32 ~all"
              ],
              "children": []
            },
            {
              "via": "include",
              "domain": "spf.websitewelcome.com",
              "issues": [],
              "records": [
                "v=spf1 include:_spf.nfco-mailout.com ip4:209.17.115.0/24 ip4:64.69.218.0/24 ip4:65.254.253.0/24 ip4:65.254.254.0/24 ip4:162.210.50.0/23 ip4:162.210.48.0/23 ip4:206.188.220.0/23 ip4:206.188.222.0/23 ip4:72.22.75.0/24 ip4:66.235.215.0/24 ~all"
              ],
              "children": [
                {
                  "via": "include",
                  "domain": "_spf.nfco-mailout.com",
                  "issues": [],
                  "records": [
                    "v=spf1 include:_netblocks-pro.nfco-mailout.com include:_netblocks-atl.nfco-mailout.com ~all"
                  ],
                  "children": [
                    {
                      "via": "include",
                      "domain": "_netblocks-pro.nfco-mailout.com",
                      "issues": [],
                      "records": [
                        "v=spf1 ip4:67.20.127.0/27 ip4:50.87.255.32/27 ip4:66.147.243.192/27 ip4:162.241.146.0/23 ip4:162.215.244.0/23 ~all"
                      ],
                      "children": []
                    },
                    {
                      "via": "include",
                      "domain": "_netblocks-atl.nfco-mailout.com",
                      "issues": [],
                      "records": [
                        "v=spf1 ip4:192.185.0.0/16 ip4:50.116.64.0/18 ip4:162.210.50.0/23 ip4:162.210.48.0/23 ~all"
                      ],
                      "children": []
                    }
                  ]
                }
              ]
            }
          ]
        }
      ]
    },
    "truncated": false,
    "lookupCount": 19,
    "voidLookupCount": 0
  },
  "dkim": [
    {
      "cname": [],
      "records": [],
      "selector": "selector1",
      "queryName": "selector1._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "selector2",
      "queryName": "selector2._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "google",
      "queryName": "google._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20230601",
      "queryName": "20230601._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "20210112",
      "queryName": "20210112._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k1",
      "queryName": "k1._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "k2",
      "queryName": "k2._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s1",
      "queryName": "s1._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "s2",
      "queryName": "s2._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "default",
      "queryName": "default._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "dkim",
      "queryName": "dkim._domainkey.ludwigmarketingandsales.com"
    },
    {
      "cname": [],
      "records": [],
      "selector": "mail",
      "queryName": "mail._domainkey.ludwigmarketingandsales.com"
    }
  ],
  "rootTxt": [
    "proxy-ssl.webflow.com",
    "brevo-code:8eace5390c53354d15e1150f947744d2",
    "v=spf1 a mx include:helpscoutemail.com ptr include:bluehost.com ~all",
    "MS=307F44C7BAE3602E63A438D9188626F2AC7E9B78"
  ],
  "dmarcTxt": [
    "v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com"
  ]
}

SSL & domain expiry

passLast checked Jul 23, 2026, 6:41 PM

Findings2 findings

Healthy (2)

The TLS certificate is valid until Sep 2, 2026.
TLS certificate
Issued by Let's Encrypt.
The domain registration renews by Oct 7, 2026.
Domain expiry

Evidence

TLS certificate

port 443

Issued to: ludwigmarketingandsales.com
Issued by: Let's Encrypt
Valid from: Jun 4, 2026
Valid until: Sep 2, 2026
Days remaining: 40 days
Verification: trusted

Registration

ludwigmarketingandsales.com

Registrar: Register.com - Network Solutions, LLC
Registered: Oct 7, 2011
Updated: Sep 7, 2025
Expires: Oct 7, 2026
Days remaining: 75 days
Status: client transfer prohibited
Nameservers: ns2.wixdns.net, ns3.wixdns.net

Raw JSON

{
  "tls": {
    "ok": true,
    "issuer": "Let's Encrypt",
    "subject": "ludwigmarketingandsales.com",
    "validTo": "2026-09-02T02:50:01.000Z",
    "validFrom": "2026-06-04T02:50:02.000Z",
    "authorized": true,
    "authorizationError": null
  },
  "domainExpiry": {
    "known": true,
    "source": "ludwigmarketingandsales.com",
    "expiresAt": "2026-10-07T17:56:22.000Z"
  },
  "registration": {
    "source": "ludwigmarketingandsales.com",
    "statuses": [
      "client transfer prohibited"
    ],
    "createdAt": "2011-10-07T17:56:22.000Z",
    "expiresAt": "2026-10-07T17:56:22.000Z",
    "registrar": "Register.com - Network Solutions, LLC",
    "updatedAt": "2025-09-07T06:33:30.000Z",
    "nameservers": [
      "ns2.wixdns.net",
      "ns3.wixdns.net"
    ]
  }
}

Generated by Internet Posture · internetposture.com