Monitor this domain

DNS & email auth

failLast checked
Findings9 findings

  • 1 MX record found.

  • include:spf.klaviyo.com points at a domain with no SPF record. Receivers treat this as a permanent error.

  • The record uses softfail (~all), which is weaker than fail (-all).

  • DKIM selector selector1 uses a 1024-bit RSA key.

    selector1 (selector1._domainkey.stemcommerce.com); use at least 2048 bits.

  • DKIM selector selector2 has a healthy RSA key.

    selector2 (selector2._domainkey.stemcommerce.com)

  • DKIM selector s1 has a healthy RSA key.

    s1 (s1._domainkey.stemcommerce.com)

  • DKIM selector s2 has a healthy RSA key.

    s2 (s2._domainkey.stemcommerce.com)

  • DMARC policy is p=none, so it monitors but does not enforce.

    Once your legitimate senders pass, move to p=quarantine and then p=reject.

  • The record has no rua= aggregate reporting address, so no one is told when DMARC fails.

    Add rua=mailto:you@example.com to receive daily aggregate reports from receivers.

Raw evidence

MX

1 record
  • stemcommerce-com.mail.protection.outlook.compriority 0

Root TXT

4 records
  • MS=ms69263181
  • v=spf1 include:secureserver.net include:spf.klaviyo.com ~all
  • google-site-verification=-73MTIRiS8OA3_sSe3iCIa-zaQRtH5ZyIlyhf3zXsUY
  • klaviyo-site-verification=McTmVM

DKIM selectors

4 records
  • selector1selector1._domainkey.stemcommerce.com
    CNAME selector1-stemcommerce-com._domainkey.netorg1441663.onmicrosoft.com
    • v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCSo7P9If8BiJj13A+2RYg2SxOJsyJZzJfOjcezxwl1/GOMhaGqrZg0RpKFSqFuWL2zvdNJexVB7wajv4m7A84ZDEJJTkhi25qCoCzKBjUJ5AHUO1wyQSu6+9cia86EvNQzHDSCxu34kpCwp0gAe9amZNusGogCnG05NvbBBTOmIwIDAQAB;
  • selector2selector2._domainkey.stemcommerce.com
    CNAME selector2-stemcommerce-com._domainkey.netorg1441663.onmicrosoft.com
    • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yrCs53dWqpK65udPhip+YimTw8x4OVoKYvzgyoDtnT4NkLZwNUPTtkqiF9YLqWW+qRQRjPK7NBLP5BC2X3lQ6PPoK0LHejWFCnbK5CP6AFVTuTAHL3bT9mfg7OupFtvNdpXBbFxEn15Oh4Oyr0szAp/DsVWrgvSvMN74plkORGaGKnJ6PCr3ENqwrnLTR7PTXrA/VmlcapmMSCb9Y8YTsJvYmi3L32hGzwFkHv8wDgqUE1qGZ5TCR2AjPuSAY4htqxxUwxmN1OgjXcIwPVDZdRDwhIiIChK1NLx8MuvEyYzB78PUY76Riq5bBjK9vGiqTMOMYM/DO7Yc2qrLzwhEQIDAQAB;
  • googlegoogle._domainkey.stemcommerce.com

    No TXT records returned for this selector.

  • 2023060120230601._domainkey.stemcommerce.com

    No TXT records returned for this selector.

  • 2021011220210112._domainkey.stemcommerce.com

    No TXT records returned for this selector.

  • k1k1._domainkey.stemcommerce.com

    No TXT records returned for this selector.

  • k2k2._domainkey.stemcommerce.com

    No TXT records returned for this selector.

  • s1s1._domainkey.stemcommerce.com
    CNAME s1.domainkey.u161779.wl030.sendgrid.net
    • k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H7I4QyPJLDb4VCzzcV8mYxAKOCm9MrQz4graCnyXvGrVw0w6MrxefVB3MtNoU/T9VCyaNcdsNQCbmSCRzBL/5c/xTvGzSaaLYkfKuPoUsIX4wVjcr7KXqlbquuYSwuu+PlOVFzuHP7UjIQ0Y93lpw/MrT+QIAb4ZY34a7+f1/0xXsyEoapnaOSbX367vzBgtXmJ98aqpvyUozesOx5br0C0zjFVzjQ26iThcXxAGRZtV97nsaQiyC9RjoobRWhW1kw9BHSoNfvgVM2NwAXwE73tfrY6wcFBxOOyL8kaznthvfAYgRLw1GzX2cY2ZordBSzJ0jd2/HvXNpDl/7V5AwIDAQAB
  • s2s2._domainkey.stemcommerce.com
    CNAME s2.domainkey.u161779.wl030.sendgrid.net
    • k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWLiEiPtEitla+4jor54Ye+kOrIrgnzgTqbBYrvXQJKDk94qaXN7d4WFMTPLVhKIlRP29DLzI+4TXmeQJOVZWGPzOrFKIwLlnF/tmKre2yV4cSW5PfJBLsgIRMJAw1z0w2g59b38vv2ZsVXEzjGU8gvhG+yXAKQclmvRePXlhti0KMvESU0xKEOoBKfmk52zTID6EpdLZhzPBfWdPTrhpyy9STnzm0jyYWmrC4R7+LorsLFQm6vyGFy2u/DDqcT/qaQIeSCM2knf7Y77kcJBnMWBw/J9XtuIpV94WTdbiCNoyYdWATW95/aBPynfwgeOI6JHsdnToJbZCIispSSd9wIDAQAB
  • defaultdefault._domainkey.stemcommerce.com

    No TXT records returned for this selector.

  • dkimdkim._domainkey.stemcommerce.com

    No TXT records returned for this selector.

  • mailmail._domainkey.stemcommerce.com

    No TXT records returned for this selector.

DMARC TXT

1 record
  • v=DMARC1; p=none