Who handles email for mills-reeve.com?

5 services handle email for mills-reeve.com. 2 things need fixing.

Checked 2026-10-12 01:24 UTC: 644 DNS lookups in 0.0 s over Google DNS over HTTPS.

Mimecast stands in front of the domain's mail as a security gateway, so the mailbox provider is not visible from MX.

Four other services are set up to send as the domain: one commerce and apps (Docebo), one support and CRM (Freshdesk), one mailbox (Microsoft 365), one transactional (SendGrid).

DMARC reports go to Mimecast DMARC Analyzer.

Not checked: the website (turned off), DKIM selectors past the first 27 on two subdomains, and the crt.sh certificate log (read only with --ct).

Who handles your email

Each service below receives or sends email for mills-reeve.com.

ServiceCategoryStatusSetup
Mimecast Security gateway Receives your mail
Docebo Commerce and apps Set up to send
Freshdesk Support and CRM Set up to send
Microsoft 365 Mailbox Set up to send ⚠ setup incomplete
SendGrid Transactional Set up to send ✓ setup complete

What to fix

Problems found in the setup, most serious first.

  1. The SendGrid key s2 at mills-reeve.com is 1024-bit

    Some receivers already treat 1024-bit RSA keys as weak. Rotate to 2048-bit.

    Records
    • s2._domainkey.mills-reeve.com TXT k=rsa; t=s (strict); p=MIGfMA0GCSqG..., 1024-bit, fp 1d0c1f3114d84753 via s2.domainkey.u10198980.wl231.sendgrid.net

  2. Microsoft 365 at mills-reeve.com has no DKIM

    Its documented setup needs it and the map shows it missing: no key at selector1._domainkey or selector2._domainkey, names with no TXT record; this zone gives that answer for every name that does not exist.

    Records
    • selector1._domainkey.mills-reeve.com TXT no record of this type
    • selector2._domainkey.mills-reeve.com TXT no record of this type

Good to know

Nothing to change here. These explain what the map shows.

The proof, service by service

The DNS records behind each service above, for anyone who wants to check them.

Mimecast

Security gateway

Receives your mail

MX: eu-smtp-inbound-1.mimecast.com, eu-smtp-inbound-2.mimecast.com

  • SPF: include:eu._netblocks.mimecast.com, include:_netblocks.mimecast.com at mills-reeve.com and update.mills-reeve.com
All records

MX

  • mills-reeve.com MX 10 eu-smtp-inbound-1.mimecast.com
  • mills-reeve.com MX 10 eu-smtp-inbound-2.mimecast.com

SPF

  • mills-reeve.com TXT include:eu._netblocks.mimecast.com
  • update.mills-reeve.com TXT include:_netblocks.mimecast.com

Docebo

Commerce and apps

Set up to send

SPF: include:docebosaas.com

All records

SPF

  • mills-reeve.com TXT include:docebosaas.com

Freshdesk

Support and CRM

Set up to send

SPF range: ip4:3.120.181.200/29

All records

SPF range

  • fsspfeuc.freshemail.io TXT ip4:3.120.181.200/29 via fdspfeuc.freshemail.io TXT ip4:3.120.181.192/28

Microsoft 365

Mailbox

Set up to send

SPF: include:spf.protection.outlook.com

  • Verification token: MS=ms75548982
  • Autodiscover CNAME: autodiscover.mills-reeve.com

setup incomplete: DKIM missing

All records

SPF

  • mills-reeve.com TXT include:spf.protection.outlook.com

Verification token

  • mills-reeve.com TXT MS=ms75548982

Autodiscover CNAME

  • autodiscover.mills-reeve.com CNAME autodiscover.outlook.com

setup incomplete: SPF present, DKIM missing, MX not used (optional, MX at mills-reeve.com), bounce CNAME not needed

SendGrid

Transactional

Set up to send

DKIM keys: s1 2048 bit, s2 1024 bit (by CNAME)

setup complete

All records

DKIM keys

  • s1._domainkey.mills-reeve.com TXT k=rsa; t=s (strict); p=MIIBIjANBgkq..., 2048-bit, fp ae8406c18072b4fc via s1.domainkey.u10198980.wl231.sendgrid.net
  • s2._domainkey.mills-reeve.com TXT k=rsa; t=s (strict); p=MIGfMA0GCSqG..., 1024-bit, fp 1d0c1f3114d84753 via s2.domainkey.u10198980.wl231.sendgrid.net

setup complete: DKIM present, bounce CNAME not used (optional, CNAME at 25 labels under mills-reeve.com), SPF not needed, tracking CNAME not used (optional, CNAME at 25 labels under mills-reeve.com)

Not matched to a service

These records point somewhere Sendermap does not recognise: a service it does not know yet, or your own servers.

How this was checked

644 lookups at 3 names · 4 things not checked

Not checked

What was asked

644 lookups at 3 names

Names asked

mills-reeve.com

  • Pages (1): https://api.certspotter.com/v1/issuances?domain=mills-reeve.com&include_subdomains=true&expand=dns_names
  • CNAME labels (25): bounce, bounces, em, email, mail, send, mta, rp, pm-bounces, links, link, click, track, tracking, url, go, autodiscover, cf-bounce, eversrv, fwdkim1, bnc3, bounces.cloud.em, bounces.cloud2.em, outbound.intercom, atlassian-bounces
  • DKIM selectors (110): selector1, selector2, acdkim1, acdkim2, ses, aweber_key_a, aweber_key_b, aweber_key_c, brevo, brevo1, brevo2, cm, cf2024-1, ctct1, ctct2, krs, e2ma-k1, e2ma-k2, e2ma-k3, everlytickey1, everlytickey2, fm2, fm1, fm3, mesmtp, secureserver1, secureserver2, google, gapps, gor, strong1, strong2, hs1, hs2, intercom, s1-ionos, s42582890, s2-ionos, cka, kl, kl1, kl2, km1, km2, k2, k1, k3, litesrv, mg, mailgun, mg1, pdk1, pdk2, mailjet, mailpoet2, mailpoet1, mandrill, mte1, mte2, marketo, mkto, mkto1, mimecast, mimecast20190719, pepipost, pp1, protonmail, protonmail2, protonmail3, resend, sailthru, salesforce, salesforce2, salesforce1, sf, sf1, sf2, sfdc, 200608, pardot, sfmc, s1, s2, smtpapi, scph0819, sparkpost, squarespace, zendesk1, zendesk2, zoho, mail, mailru, api, default, dk, dkim, dkim1, dkim2, email, k, key, key1, key2, mta, mx, pm, s, selector, smtp, sp

update.mills-reeve.com

  • DKIM selectors (29): acdkim1, acdkim2, ses, aweber_key_a, aweber_key_b, aweber_key_c, brevo, brevo1, brevo2, cm, cf2024-1, ctct1, ctct2, krs, e2ma-k1, e2ma-k2, e2ma-k3, everlytickey1, everlytickey2, fm2, fm1, fm3, mesmtp, secureserver1, secureserver2, google, gapps, mimecast, mimecast20190719

updates.mills-reeve.com

  • DKIM selectors (27): acdkim1, acdkim2, ses, aweber_key_a, aweber_key_b, aweber_key_c, brevo, brevo1, brevo2, cm, cf2024-1, ctct1, ctct2, krs, e2ma-k1, e2ma-k2, e2ma-k3, everlytickey1, everlytickey2, fm2, fm1, fm3, mesmtp, secureserver1, secureserver2, google, gapps