Who handles your email

Each service below receives or sends email for allbirds.com.

Receives your mail: your MX records deliver the domain's mail there.
Set up to send: its records for sending are in your DNS.
Likely sends: one clue points to it, such as a key named for it.

Service	Category	Status	Setup
Microsoft 365	Mailbox	Receives your mail	✓ setup complete
Amazon SES	Transactional	Set up to send
Freshdesk	Support and CRM	Set up to send
Google Workspace	Mailbox	Set up to send	⚠ setup incomplete
Iterable	Marketing	Set up to send
Mailchimp	Marketing	Set up to send	✓ setup complete
Mailgun	Transactional	Set up to send	✓ setup complete
Mailjet	Transactional	Set up to send	⚠ setup incomplete
Postmark	Transactional	Set up to send	✓ setup complete
SendGrid	Transactional	Set up to send	✓ setup complete
Shopify	Commerce and apps	Set up to send
SparkPost	Transactional	Set up to send	✓ setup complete
Zendesk	Support and CRM	Set up to send	✓ setup complete
Customer.io	Marketing	Likely sends	from: DKIM key
Mandrill	Transactional	Likely sends	from: DKIM key

What to fix

Problems found in the setup, most serious first.

Two DKIM keys at allbirds.com are 1024-bit: k1 (Mailchimp) and mandrill (Mandrill)

Some receivers already treat 1024-bit RSA keys as weak. Rotate to 2048-bit.
Records
- k1._domainkey.allbirds.com TXT k=rsa; p=MIGfMA0GCSqG..., 1024-bit, fp 53d7bb0466c8346d via dkim.mcsv.net
- mandrill._domainkey.allbirds.com TXT v=DKIM1; k=rsa; p=MIGfMA0GCSqG..., 1024-bit, fp 9cee89b6f986543a
Google Workspace at alerts.allbirds.com and mail.allbirds.com has no DKIM

Its documented setup needs it and the map shows it missing: no key at google._domainkey, a name that does not exist.
Records
- google._domainkey.alerts.allbirds.com TXT no such name
- _domainkey.alerts.allbirds.com TXT no record of this type
- google._domainkey.mail.allbirds.com TXT no such name
- _domainkey.mail.allbirds.com TXT no record of this type
Mailjet at allbirds.com has no DKIM

Its documented setup needs it and the map shows it missing: no key at mailjet._domainkey, a name that does not exist.
Records
- mailjet._domainkey.allbirds.com TXT no such name

Good to know

Nothing to change here. These explain what the map shows.

SPF at allbirds.com is managed through EasyDMARC. EasyDMARC copies the domain's senders into its own record. The walk read that record, so the services and ranges it lists are reported here as the domain's.
Records
- allbirds.com TXT v=spf1 include:allbirds_com._es.easydmarc.com include:spf.protection.outlook.com ~all

The proof, service by service

The DNS records behind each service above, for anyone who wants to check them.

MX: where the domain's mail is delivered.
SPF: the list of servers allowed to send as the domain.
DKIM: a signature key that proves mail really came from the domain.
Verification token: proves the domain owner set up an account with the service.
Autodiscover: lets mail apps find their settings.
Tracking CNAME: links in a service's emails point here.
Bounce CNAME: lets a service handle bounced mail under the domain's name.

Microsoft 365

Mailbox

Receives your mail

MX: allbirds-com.mail.protection.outlook.com

SPF: include:spf.protection.outlook.com
DKIM keys: selector1, selector2 (both 2048 bit, by CNAME)
Verification tokens: MS=A01B077C9CEAFC03E22F0B625C7E7600E37CC59A, MS=ms40651830, MS=ms79507765
Autodiscover CNAME: autodiscover.allbirds.com

setup complete

All records

MX

allbirds.com MX 0 allbirds-com.mail.protection.outlook.com

SPF

allbirds.com TXT include:spf.protection.outlook.com

DKIM keys

selector1._domainkey.allbirds.com TXT v=DKIM1; k=rsa; p=MIIBIjANBgkq..., 2048-bit, fp d16c91a9c741c096 via selector1-allbirds-com._domainkey.axnygroup.e-v1.dkim.mail.microsoft
selector2._domainkey.allbirds.com TXT v=DKIM1; k=rsa; p=MIIBIjANBgkq..., 2048-bit, fp 6cc817c15f61a3e2 via selector2-allbirds-com._domainkey.axnygroup.e-v1.dkim.mail.microsoft

Verification tokens

allbirds.com TXT MS=A01B077C9CEAFC03E22F0B625C7E7600E37CC59A
allbirds.com TXT MS=ms40651830
allbirds.com TXT MS=ms79507765

Autodiscover CNAME

autodiscover.allbirds.com CNAME autodiscover.outlook.com

setup complete: SPF present, DKIM present, MX present, bounce CNAME not needed

Amazon SES

Transactional

Set up to send

SPF ranges: ip4:199.255.192.0/22, ip4:199.127.232.0/22 and 11 more

SPF: include:amazonses.com at alerts.allbirds.com and mail.allbirds.com

All records

SPF ranges

_spf.allbirds_com._d.easydmarc.pro TXT ip4:199.255.192.0/22 via amazonses.com TXT ip4:199.255.192.0/22
_spf.allbirds_com._d.easydmarc.pro TXT ip4:199.127.232.0/22 via amazonses.com TXT ip4:199.127.232.0/22
_spf.allbirds_com._d.easydmarc.pro TXT ip4:54.240.0.0/18 via amazonses.com TXT ip4:54.240.0.0/18
_spf.allbirds_com._d.easydmarc.pro TXT ip4:69.169.224.0/20 via amazonses.com TXT ip4:69.169.224.0/20
_spf.allbirds_com._d.easydmarc.pro TXT ip4:23.249.208.0/20 via amazonses.com TXT ip4:23.249.208.0/20
_spf.allbirds_com._d.easydmarc.pro TXT ip4:23.251.224.0/19 via amazonses.com TXT ip4:23.251.224.0/19
_spf.allbirds_com._d.easydmarc.pro TXT ip4:76.223.176.0/20 via amazonses.com TXT ip4:76.223.176.0/20
_spf.allbirds_com._d.easydmarc.pro TXT ip4:54.240.64.0/18 via amazonses.com TXT ip4:54.240.64.0/18
_spf.allbirds_com._d.easydmarc.pro TXT ip4:76.223.128.0/19 via amazonses.com TXT ip4:76.223.128.0/19
_spf.allbirds_com._d.easydmarc.pro TXT ip4:216.221.160.0/19 via amazonses.com TXT ip4:216.221.160.0/19
_spf.allbirds_com._d.easydmarc.pro TXT ip4:206.55.144.0/20 via amazonses.com TXT ip4:206.55.144.0/20
_spf.allbirds_com._d.easydmarc.pro TXT ip4:24.110.64.0/18 via amazonses.com TXT ip4:24.110.64.0/18
_spf.allbirds_com._d.easydmarc.pro TXT ip4:98.77.0.0/16 via amazonses.com TXT ip4:98.77.0.0/16

SPF

alerts.allbirds.com TXT include:amazonses.com
mail.allbirds.com TXT include:amazonses.com

Freshdesk

Support and CRM

Set up to send

SPF ranges: ip4:3.7.25.40/29, ip4:13.127.153.86 and 6 more

All records

SPF ranges

_spf1.allbirds_com._d.easydmarc.pro TXT ip4:3.7.25.40/29 via fdspfind.freshemail.io TXT ip4:3.7.25.40/29
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:13.127.153.86 via fdspfind.freshemail.io TXT ip4:13.127.153.86
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:52.66.154.99 via fdspfind.freshemail.io TXT ip4:52.66.154.99
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:13.127.210.61 via fdspfind.freshemail.io TXT ip4:13.127.210.61
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:3.120.181.200/29 via fdspfeuc.freshemail.io TXT ip4:3.120.181.192/28
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:3.222.0.24/29 via fdspfus.freshemail.io TXT ip4:3.222.0.24/29
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:44.192.35.0/24 via fdspfus.freshemail.io TXT ip4:44.192.35.0/24
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:3.25.47.0/29 via fdspfaus.freshemail.io TXT ip4:3.25.47.0/29

Google Workspace

Mailbox

Set up to send

SPF ranges: ip4:74.125.0.0/16, ip4:209.85.128.0/17 and 6 more

MX for a subdomain's mail: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com at mail.allbirds.com
SPF: include:_spf.google.com at alerts.allbirds.com and mail.allbirds.com
DKIM key: google (2048 bit, named for it)

setup incomplete: DKIM missing at alerts.allbirds.com and mail.allbirds.com

All records

SPF ranges

_spf.allbirds_com._d.easydmarc.pro TXT ip4:74.125.0.0/16 via _spf.google.com TXT ip4:74.125.0.0/16
_spf.allbirds_com._d.easydmarc.pro TXT ip4:209.85.128.0/17 via _spf.google.com TXT ip4:209.85.128.0/17
_spf.allbirds_com._d.easydmarc.pro TXT ip6:2001:4860:4864::/56 via _spf.google.com TXT ip6:2001:4860:4864::/56
_spf.allbirds_com._d.easydmarc.pro TXT ip6:2404:6800:4864::/56 via _spf.google.com TXT ip6:2404:6800:4864::/56
_spf.allbirds_com._d.easydmarc.pro TXT ip6:2607:f8b0:4864::/56 via _spf.google.com TXT ip6:2607:f8b0:4864::/56
_spf.allbirds_com._d.easydmarc.pro TXT ip6:2800:3f0:4864::/56 via _spf.google.com TXT ip6:2800:3f0:4864::/56
_spf.allbirds_com._d.easydmarc.pro TXT ip6:2a00:1450:4864::/56 via _spf.google.com TXT ip6:2a00:1450:4864::/56
_spf.allbirds_com._d.easydmarc.pro TXT ip6:2c0f:fb50:4864::/56 via _spf.google.com TXT ip6:2c0f:fb50:4864::/56

MX for a subdomain's mail

mail.allbirds.com MX 1 aspmx.l.google.com
mail.allbirds.com MX 5 alt1.aspmx.l.google.com
mail.allbirds.com MX 10 alt2.aspmx.l.google.com

SPF

alerts.allbirds.com TXT include:_spf.google.com
mail.allbirds.com TXT include:_spf.google.com

DKIM key

google._domainkey.allbirds.com TXT v=DKIM1; k=rsa; p=MIIBIjANBgkq..., 2048-bit, fp d8f8fdab59ca9b21

setup incomplete: SPF present at allbirds.com, alerts.allbirds.com and mail.allbirds.com, DKIM present at allbirds.com, MX not used (optional, MX at allbirds.com) at allbirds.com, bounce CNAME not needed at allbirds.com, alerts.allbirds.com and mail.allbirds.com, DKIM missing at alerts.allbirds.com and mail.allbirds.com, MX not used (optional, MX at alerts.allbirds.com) at alerts.allbirds.com, MX present at mail.allbirds.com

Iterable

Marketing

Set up to send

Tracking CNAME: links.allbirds.com

All records

Tracking CNAME

links.allbirds.com CNAME links.iterable.com

Mailchimp

Marketing

Set up to send

DKIM key: k1 (1024 bit, by CNAME)

setup complete

All records

DKIM key

k1._domainkey.allbirds.com TXT k=rsa; p=MIGfMA0GCSqG..., 1024-bit, fp 53d7bb0466c8346d via dkim.mcsv.net

setup complete: DKIM present (older setup: a key at k1; the current setup names k2), SPF not needed, bounce CNAME not needed

Mailgun

Transactional

Set up to send

SPF ranges: ip4:141.193.32.0/23, ip4:159.135.140.80/29 and 16 more

Tracking CNAME: email.allbirds.com
MX for bounces: mxa.mailgun.org, mxb.mailgun.org at email.allbirds.com
SPF: include:mailgun.org, include:_spf.mailgun.org, include:_spf.eu.mailgun.org at alerts.allbirds.com, email.allbirds.com and mail.allbirds.com

setup complete

All records

SPF ranges

_spf1.allbirds_com._d.easydmarc.pro TXT ip4:141.193.32.0/23 via _spf.eu.mailgun.org TXT ip4:141.193.32.0/23
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:159.135.140.80/29 via _spf.eu.mailgun.org TXT ip4:159.135.140.80/29
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:159.135.132.128/25 via _spf.eu.mailgun.org TXT ip4:159.135.132.128/25
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:161.38.204.0/22 via _spf.eu.mailgun.org TXT ip4:161.38.204.0/22
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:143.55.236.0/22 via _spf.eu.mailgun.org TXT ip4:143.55.236.0/22
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:198.244.60.0/22 via _spf.eu.mailgun.org TXT ip4:198.244.60.0/22
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:204.220.160.0/20 via _spf.eu.mailgun.org TXT ip4:204.220.160.0/20
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:159.135.224.0/20 via _spf1.mailgun.org TXT ip4:159.135.224.0/20
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:69.72.32.0/20 via _spf1.mailgun.org TXT ip4:69.72.32.0/20
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:204.220.90.0/23 via _spf1.mailgun.org TXT ip4:204.220.90.0/23
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:204.220.92.0/22 via _spf1.mailgun.org TXT ip4:204.220.92.0/22
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:161.38.192.0/20 via _spf2.mailgun.org TXT ip4:161.38.192.0/20
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:143.55.224.0/21 via _spf2.mailgun.org TXT ip4:143.55.224.0/21
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:143.55.232.0/22 via _spf2.mailgun.org TXT ip4:143.55.232.0/22
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:159.112.240.0/20 via _spf2.mailgun.org TXT ip4:159.112.240.0/20
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:198.244.48.0/20 via _spf2.mailgun.org TXT ip4:198.244.48.0/20
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:204.220.168.0/21 via _spf2.mailgun.org TXT ip4:204.220.168.0/21
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:204.220.176.0/20 via _spf2.mailgun.org TXT ip4:204.220.176.0/20

Tracking CNAME

email.allbirds.com CNAME mailgun.org

MX for bounces

email.allbirds.com MX 10 mxa.mailgun.org
email.allbirds.com MX 10 mxb.mailgun.org

SPF

alerts.allbirds.com TXT include:mailgun.org
email.allbirds.com TXT include:_spf.mailgun.org
email.allbirds.com TXT include:_spf.eu.mailgun.org
mail.allbirds.com TXT include:mailgun.org

setup complete: SPF present at allbirds.com, alerts.allbirds.com and mail.allbirds.com, MX not used (optional, MX at allbirds.com) at allbirds.com, tracking CNAME present at allbirds.com, MX not used (optional, MX at alerts.allbirds.com) at alerts.allbirds.com, tracking CNAME not checked (no label was asked at alerts.allbirds.com) at alerts.allbirds.com, MX not used (optional, MX at mail.allbirds.com) at mail.allbirds.com, tracking CNAME not checked (no label was asked at mail.allbirds.com) at mail.allbirds.com

Mailjet

Transactional

Set up to send

SPF ranges: ip4:87.253.232.0/21, ip4:185.189.236.0/22 and 2 more

setup incomplete: DKIM missing

All records

SPF ranges

_spf1.allbirds_com._d.easydmarc.pro TXT ip4:87.253.232.0/21 via 1.236.253.87.origin.asn.cymru.com TXT 200069 | 87.253.236.0/24 | FR | ripencc | 2012-09-10 via as200069.asn.cymru.com TXT 200069 | FR | ripencc | 2013-10-16 | MAILJET, FR via 1.238.253.87.origin.asn.cymru.com TXT 200069 | 87.253.238.0/24 | FR | ripencc | 2012-09-10
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:185.189.236.0/22 via 1.236.189.185.origin.asn.cymru.com TXT 200069 | 185.189.236.0/24 | FR | ripencc | 2017-02-13 via as200069.asn.cymru.com TXT 200069 | FR | ripencc | 2013-10-16 | MAILJET, FR via 1.238.189.185.origin.asn.cymru.com TXT 200069 | 185.189.238.0/24 | FR | ripencc | 2017-02-13 via 1.239.189.185.origin.asn.cymru.com TXT 200069 | 185.189.239.0/24 | FR | ripencc | 2017-02-13
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:185.211.120.0/22 via 1.120.211.185.origin.asn.cymru.com TXT 200069 | 185.211.120.0/24 | US | ripencc | 2017-07-04 via as200069.asn.cymru.com TXT 200069 | FR | ripencc | 2013-10-16 | MAILJET, FR via 1.122.211.185.origin.asn.cymru.com TXT 200069 | 185.211.122.0/24 | US | ripencc | 2017-07-04 via 1.123.211.185.origin.asn.cymru.com TXT 200069 | 185.211.123.0/24 | US | ripencc | 2017-07-04
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:185.250.236.0/22 via 1.236.250.185.origin.asn.cymru.com TXT 200069 | 185.250.236.0/24 | GB | ripencc | 2018-03-21 via as200069.asn.cymru.com TXT 200069 | FR | ripencc | 2013-10-16 | MAILJET, FR via 1.238.250.185.origin.asn.cymru.com TXT 200069 | 185.250.238.0/24 | GB | ripencc | 2018-03-21 via 1.239.250.185.origin.asn.cymru.com TXT 200069 | 185.250.239.0/24 | GB | ripencc | 2018-03-21

setup incomplete: SPF present, DKIM missing

Postmark

Transactional

Set up to send

Bounce CNAME: pm-bounces.allbirds.com

setup complete

All records

Bounce CNAME

pm-bounces.allbirds.com CNAME pm.mtasv.net

setup complete: SPF not needed, bounce CNAME present

SendGrid

Transactional

Set up to send

SPF ranges: ip4:208.117.48.0/20, ip4:50.31.32.0/19 and 16 more

DKIM keys: s1, s2 (both 2048 bit, by CNAME)

setup complete

All records

SPF ranges

_spf.allbirds_com._d.easydmarc.pro TXT ip4:208.117.48.0/20 via sendgrid.net TXT ip4:208.117.48.0/20
_spf.allbirds_com._d.easydmarc.pro TXT ip4:50.31.32.0/19 via sendgrid.net TXT ip4:50.31.32.0/19
_spf.allbirds_com._d.easydmarc.pro TXT ip4:198.37.144.0/20 via sendgrid.net TXT ip4:198.37.144.0/20
_spf.allbirds_com._d.easydmarc.pro TXT ip4:198.21.0.0/21 via sendgrid.net TXT ip4:198.21.0.0/21
_spf.allbirds_com._d.easydmarc.pro TXT ip4:192.254.112.0/20 via sendgrid.net TXT ip4:192.254.112.0/20
_spf.allbirds_com._d.easydmarc.pro TXT ip4:149.72.0.0/16 via sendgrid.net TXT ip4:149.72.0.0/16
_spf.allbirds_com._d.easydmarc.pro TXT ip4:159.183.0.0/16 via sendgrid.net TXT ip4:159.183.0.0/16
_spf.allbirds_com._d.easydmarc.pro TXT ip4:134.128.64.0/18 via sendgrid.net TXT ip4:134.128.64.0/18
_spf.allbirds_com._d.easydmarc.pro TXT ip4:159.26.176.0/20 via sendgrid.net TXT ip4:159.26.176.0/20
_spf.allbirds_com._d.easydmarc.pro TXT ip4:223.165.113.0/24 via ab.sendgrid.net TXT ip4:223.165.113.0/24
_spf.allbirds_com._d.easydmarc.pro TXT ip4:223.165.115.0/24 via ab.sendgrid.net TXT ip4:223.165.115.0/24
_spf.allbirds_com._d.easydmarc.pro TXT ip4:223.165.118.0/23 via ab.sendgrid.net TXT ip4:223.165.118.0/23
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:223.165.120.0/23 via ab.sendgrid.net TXT ip4:223.165.120.0/23
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:198.21.4.52 via sendgrid.net TXT ip4:198.21.0.0/21
_spf.allbirds_com._d.easydmarc.pro TXT ip4:167.89.0.0/17 via 1.0.89.167.origin.asn.cymru.com TXT 11377 | 167.89.0.0/18 | US | arin | 2013-10-31 via as11377.asn.cymru.com TXT 11377 | US | arin | 2012-06-28 | SENDGRID - SendGrid, Inc., US via 1.64.89.167.origin.asn.cymru.com TXT 11377 | 167.89.64.0/19 | US | arin | 2013-10-31 via 1.96.89.167.origin.asn.cymru.com TXT 11377 | 167.89.96.0/20 | US | arin | 2013-10-31
_spf.allbirds_com._d.easydmarc.pro TXT ip4:168.245.0.0/17 via 1.0.245.168.origin.asn.cymru.com TXT 11377 | 168.245.0.0/18 | US | arin | 2016-11-10 via as11377.asn.cymru.com TXT 11377 | US | arin | 2012-06-28 | SENDGRID - SendGrid, Inc., US via 1.64.245.168.origin.asn.cymru.com TXT 11377 | 168.245.64.0/20 | US | arin | 2016-11-10 via 1.96.245.168.origin.asn.cymru.com TXT 11377 | 168.245.96.0/19 | US | arin | 2016-11-10
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:167.89.31.27 via 27.31.89.167.origin.asn.cymru.com TXT 11377 | 167.89.0.0/18 | US | arin | 2013-10-31 via as11377.asn.cymru.com TXT 11377 | US | arin | 2012-06-28 | SENDGRID - SendGrid, Inc., US
_spf1.allbirds_com._d.easydmarc.pro TXT ip4:167.89.127.244 via 244.127.89.167.origin.asn.cymru.com TXT 11377 | 167.89.126.0/23 | US | arin | 2013-10-31 via as11377.asn.cymru.com TXT 11377 | US | arin | 2012-06-28 | SENDGRID - SendGrid, Inc., US

DKIM keys

s1._domainkey.allbirds.com TXT k=rsa; t=s (strict); p=MIIBIjANBgkq..., 2048-bit, fp 1613a2732ba0bb85 via s1.domainkey.u246613.wl114.sendgrid.net
s2._domainkey.allbirds.com TXT k=rsa; t=s (strict); p=MIIBIjANBgkq..., 2048-bit, fp 74e0ef530aa45e05 via s2.domainkey.u246613.wl114.sendgrid.net

setup complete: DKIM present, bounce CNAME not used (optional, CNAME at 25 labels under allbirds.com), SPF not needed, tracking CNAME not used (optional, CNAME at 25 labels under allbirds.com)

Shopify

Commerce and apps

Set up to send

SPF: include:shops.shopify.com at alerts.allbirds.com and mail.allbirds.com

All records

SPF

alerts.allbirds.com TXT include:shops.shopify.com
mail.allbirds.com TXT include:shops.shopify.com

SparkPost

Transactional

Set up to send

Bounce CNAME: bounce.allbirds.com

MX for bounces: smtp.sparkpostmail.com at bounce.allbirds.com and info.allbirds.com

setup complete

All records

Bounce CNAME

bounce.allbirds.com CNAME sparkpostmail.com

MX for bounces

bounce.allbirds.com MX 5 smtp.sparkpostmail.com
info.allbirds.com MX 5 smtp.sparkpostmail.com

setup complete: tracking CNAME not used (optional, CNAME at 25 labels under allbirds.com), MX not used (optional, MX at allbirds.com)

Zendesk

Support and CRM

Set up to send

SPF ranges: ip4:103.151.192.0/23, ip4:185.12.80.0/22 and 3 more

setup complete

All records

SPF ranges

_spf.allbirds_com._d.easydmarc.pro TXT ip4:103.151.192.0/23 via mail.zendesk.com TXT ip4:103.151.192.0/23
_spf.allbirds_com._d.easydmarc.pro TXT ip4:185.12.80.0/22 via mail.zendesk.com TXT ip4:185.12.80.0/22
_spf.allbirds_com._d.easydmarc.pro TXT ip4:188.172.128.0/20 via mail.zendesk.com TXT ip4:188.172.128.0/20
_spf.allbirds_com._d.easydmarc.pro TXT ip4:192.161.144.0/20 via mail.zendesk.com TXT ip4:192.161.144.0/20
_spf.allbirds_com._d.easydmarc.pro TXT ip4:216.198.0.0/18 via mail.zendesk.com TXT ip4:216.198.0.0/18

setup complete: SPF present, DKIM not used (optional, TXT at zendesk1._domainkey.allbirds.com and TXT at zendesk2._domainkey.allbirds.com)

Customer.io

Marketing

Likely sends

DKIM key: krs (2048 bit, named for it)

setup complete

All records

DKIM key

krs._domainkey.allbirds.com TXT k=rsa; p=MIIBIjANBgkq..., 2048-bit, fp f65b843679924ff6

setup complete: tracking CNAME not used (optional, CNAME at 25 labels under allbirds.com)

Mandrill

Transactional

Likely sends

DKIM key: mandrill (1024 bit, named for it)

setup complete

All records

DKIM key

mandrill._domainkey.allbirds.com TXT v=DKIM1; k=rsa; p=MIGfMA0GCSqG..., 1024-bit, fp 9cee89b6f986543a

setup complete: DKIM present (older setup: a key at mandrill; the current setup names mte1 and mte2), bounce CNAME not used (optional, CNAME at 25 labels under allbirds.com), tracking CNAME not used (optional, CNAME at 25 labels under allbirds.com)

Not matched to a service

These records point somewhere Sendermap does not recognise: a service it does not know yet, or your own servers.

2 ranges in AS16509 (Amazon Web Services): 35.159.219.224/28, 18.199.180.160/27 _spf1.allbirds_com._d.easydmarc.pro TXT ip4:35.159.219.224/28
1 more record
- _spf1.allbirds_com._d.easydmarc.pro TXT ip4:18.199.180.160/27
IP address in SPF: 157.131.136.130 (AS46375, AS-SONICTELECOM - Sonic Telecom LLC, US) at mail.allbirds.com mail.allbirds.com TXT ip4:157.131.136.130
IP address in SPF: 116.66.213.98 (AS3491, PCCWG-APAC-HK PCCW Global HK Ltd., HK) at mail.allbirds.com mail.allbirds.com TXT ip4:116.66.213.98
IP address in SPF: 96.71.160.117 (AS7922, COMCAST-7922 - Comcast Cable Communications, LLC, US) at mail.allbirds.com mail.allbirds.com TXT ip4:96.71.160.117
IP address in SPF: 216.40.27.182 (AS53828, NITEL - NETWORK INNOVATIONS, LLC, US) at mail.allbirds.com mail.allbirds.com TXT ip4:216.40.27.182

Looked for and not found

Records Sendermap looked for and did not find.

DKIM keys at alerts.allbirds.com: selectors exist but none of the 36 names asked is one_domainkey.alerts.allbirds.com TXT no record of this type
DKIM keys at bounce.allbirds.com: no selectors exist: _domainkey.bounce.allbirds.com does not exist, so the 27-name sweep was skipped; the 8 names its MX, SPF and delegations point to were asked as a check, and none exists (RFC 8020 section 5)_domainkey.bounce.allbirds.com TXT no such namesendermap-wildcard-check._domainkey.bounce.allbirds.com TXT no such name
DKIM keys at email.allbirds.com: no selectors exist: _domainkey.email.allbirds.com does not exist, so the 32-name sweep was skipped; the 13 names its MX, SPF and delegations point to were asked as a check, and none exists (RFC 8020 section 5)_domainkey.email.allbirds.com TXT no such namesendermap-wildcard-check._domainkey.email.allbirds.com TXT no such name
DKIM keys at info.allbirds.com: selectors exist but none of the 27 names asked is one_domainkey.info.allbirds.com TXT no record of this type
DKIM keys at mail.allbirds.com: selectors exist but none of the 36 names asked is one_domainkey.mail.allbirds.com TXT no record of this type

How this was checked

772 lookups at 6 names · 6 things not checked

Not checked

certificate log names more than 2 labels deep: 34 not asked. Names up to 2 labels below the domain were asked (cap 2 labels).
sending subdomains: TXT, MX and NS at apisdk.allbirds.com, community.allbirds.com, dataplane.allbirds.com, jssdk.allbirds.com, rerun.allbirds.com, www.jssdk.allbirds.com: the domain's DNS servers failed to answer (SERVFAIL), so whether they send is not known
DKIM selectors at alerts and mail.allbirds.com: 78 of 114 not asked at each. The first 27 were asked, plus any the name's own SPF, MX or delegation points to (cap 27).
DKIM selectors at info.allbirds.com: 83 of 110 not asked. The first 27 were asked, plus any the name's own SPF, MX or delegation points to (cap 27).
the website. Web checks were turned off (--no-web).
certificate transparency, crt.sh. Read only with --ct (it also holds expired certificates).

What was asked

772 lookups at 6 names

At allbirds.com: 110 possible DKIM key names, 25 service record names, 1 web page.
At alerts.allbirds.com: 36 possible DKIM key names.
At bounce.allbirds.com: 8 possible DKIM key names.
At email.allbirds.com: 13 possible DKIM key names.
At info.allbirds.com: 27 possible DKIM key names.
At mail.allbirds.com: 36 possible DKIM key names.

Names asked

allbirds.com

Pages (1): https://api.certspotter.com/v1/issuances?domain=allbirds.com&include_subdomains=true&expand=dns_names
CNAME labels (25): bounce, bounces, em, email, mail, send, mta, rp, pm-bounces, links, link, click, track, tracking, url, go, autodiscover, cf-bounce, eversrv, fwdkim1, bnc3, bounces.cloud.em, bounces.cloud2.em, outbound.intercom, atlassian-bounces
DKIM selectors (110): selector1, selector2, acdkim1, acdkim2, ses, aweber_key_a, aweber_key_b, aweber_key_c, brevo, brevo1, brevo2, cm, cf2024-1, ctct1, ctct2, krs, e2ma-k1, e2ma-k2, e2ma-k3, everlytickey1, everlytickey2, fm2, fm1, fm3, mesmtp, secureserver1, secureserver2, google, gapps, gor, strong1, strong2, hs1, hs2, intercom, s1-ionos, s42582890, s2-ionos, cka, kl, kl1, kl2, km1, km2, k2, k1, k3, litesrv, mg, mailgun, mg1, pdk1, pdk2, mailjet, mailpoet2, mailpoet1, mandrill, mte1, mte2, marketo, mkto, mkto1, mimecast, mimecast20190719, pepipost, pp1, protonmail, protonmail2, protonmail3, resend, sailthru, salesforce, salesforce2, salesforce1, sf, sf1, sf2, sfdc, 200608, pardot, sfmc, s1, s2, smtpapi, scph0819, sparkpost, squarespace, zendesk1, zendesk2, zoho, mail, mailru, api, default, dk, dkim, dkim1, dkim2, email, k, key, key1, key2, mta, mx, pm, s, selector, smtp, sp

alerts.allbirds.com

DKIM selectors (36): google, gapps, acdkim1, acdkim2, ses, aweber_key_a, aweber_key_b, aweber_key_c, brevo, brevo1, brevo2, cm, cf2024-1, ctct1, ctct2, krs, e2ma-k1, e2ma-k2, e2ma-k3, everlytickey1, everlytickey2, fm2, fm1, fm3, mesmtp, secureserver1, secureserver2, 20161025, 20210112, 20221208, 20230601, mailgun, mg, mg1, pdk1, pdk2

bounce.allbirds.com

DKIM selectors (8): acdkim1, acdkim2, ses, aweber_key_a, aweber_key_b, aweber_key_c, brevo, brevo1

email.allbirds.com

DKIM selectors (13): acdkim1, acdkim2, ses, aweber_key_a, aweber_key_b, aweber_key_c, brevo, brevo1, mailgun, mg, mg1, pdk1, pdk2

info.allbirds.com

DKIM selectors (27): acdkim1, acdkim2, ses, aweber_key_a, aweber_key_b, aweber_key_c, brevo, brevo1, brevo2, cm, cf2024-1, ctct1, ctct2, krs, e2ma-k1, e2ma-k2, e2ma-k3, everlytickey1, everlytickey2, fm2, fm1, fm3, mesmtp, secureserver1, secureserver2, google, gapps

mail.allbirds.com

DKIM selectors (36): google, gapps, acdkim1, acdkim2, ses, aweber_key_a, aweber_key_b, aweber_key_c, brevo, brevo1, brevo2, cm, cf2024-1, ctct1, ctct2, krs, e2ma-k1, e2ma-k2, e2ma-k3, everlytickey1, everlytickey2, fm2, fm1, fm3, mesmtp, secureserver1, secureserver2, 20161025, 20210112, 20221208, 20230601, mailgun, mg, mg1, pdk1, pdk2

Who handles your email

What to fix

Two DKIM keys at allbirds.com are 1024-bit: k1 (Mailchimp) and mandrill (Mandrill)

Google Workspace at alerts.allbirds.com and mail.allbirds.com has no DKIM

Mailjet at allbirds.com has no DKIM

Good to know

The proof, service by service

Microsoft 365

Amazon SES

Freshdesk

Google Workspace

Iterable

Mailchimp

Mailgun

Mailjet

Postmark

SendGrid

Shopify

SparkPost

Zendesk

Customer.io

Mandrill

Not matched to a service

Looked for and not found

How this was checked

Not checked

What was asked

allbirds.com

alerts.allbirds.com

bounce.allbirds.com

email.allbirds.com

info.allbirds.com

mail.allbirds.com