mills-reeve.com

5 services send email as this domain · 2 things to fix

Checked 2026-10-12 01:24 UTC · 633 lookups in 0.0 s over Google DNS over HTTPS

Mimecast stands in front of the domain's mail as a security gateway, so the mailbox provider is not visible from MX.

Four other services are set up to send as the domain: one commerce and apps (Docebo), one support and CRM (Freshdesk), one mailbox (Microsoft 365), one transactional (SendGrid).

DMARC reports go to Mimecast DMARC Analyzer.

Not checked: the website (turned off), DKIM selectors past the first 27 on two subdomains, and the crt.sh certificate log (read only with --ct).

At a glance

ServiceCategoryStatusSetup
Mimecast Security gateway Receives mail
Docebo Commerce and apps Set up to send
Freshdesk Support and CRM Set up to send
Microsoft 365 Mailbox Set up to send ⚠ setup incomplete
SendGrid Transactional Set up to send ✓ setup complete

Reports go to Mimecast DMARC Analyzer.

Fix these

  1. The SendGrid key s2 at mills-reeve.com is 1024-bit

    Some receivers already treat 1024-bit RSA keys as weak. Rotate to 2048-bit.

    Records
    • s2._domainkey.mills-reeve.com TXT k=rsa; t=s (strict); p=MIGfMA0GCSqG..., 1024-bit, fp 1d0c1f3114d84753 via s2.domainkey.u10198980.wl231.sendgrid.net

  2. Microsoft 365 at mills-reeve.com has no DKIM

    Its documented setup needs it and the map shows it missing: no key at selector1._domainkey or selector2._domainkey, names with no TXT record; this zone gives that answer for every name that does not exist.

    Records
    • selector1._domainkey.mills-reeve.com TXT no record of this type
    • selector2._domainkey.mills-reeve.com TXT no record of this type

Notes

Evidence, service by service

Mimecast

Security gateway

Receives mail

MX: eu-smtp-inbound-1.mimecast.com, eu-smtp-inbound-2.mimecast.com

  • SPF: include:eu._netblocks.mimecast.com, include:_netblocks.mimecast.com at mills-reeve.com and update.mills-reeve.com
All records

MX

  • mills-reeve.com MX 10 eu-smtp-inbound-1.mimecast.com
  • mills-reeve.com MX 10 eu-smtp-inbound-2.mimecast.com

SPF

  • mills-reeve.com TXT include:eu._netblocks.mimecast.com
  • update.mills-reeve.com TXT include:_netblocks.mimecast.com

Docebo

Commerce and apps

Set up to send

SPF: include:docebosaas.com

All records

SPF

  • mills-reeve.com TXT include:docebosaas.com

Freshdesk

Support and CRM

Set up to send

SPF range: ip4:3.120.181.200/29

All records

SPF range

  • fsspfeuc.freshemail.io TXT ip4:3.120.181.200/29 via fdspfeuc.freshemail.io TXT ip4:3.120.181.192/28

Microsoft 365

Mailbox

Set up to send

SPF: include:spf.protection.outlook.com

  • Verification token: MS=ms75548982
  • Autodiscover CNAME: autodiscover.mills-reeve.com

setup incomplete: DKIM missing

All records

SPF

  • mills-reeve.com TXT include:spf.protection.outlook.com

Verification token

  • mills-reeve.com TXT MS=ms75548982

Autodiscover CNAME

  • autodiscover.mills-reeve.com CNAME autodiscover.outlook.com

setup incomplete: SPF present, DKIM missing, MX not used (optional, MX at mills-reeve.com), bounce CNAME not needed

SendGrid

Transactional

Set up to send

DKIM keys: s1 2048 bit, s2 1024 bit (by CNAME)

setup complete

All records

DKIM keys

  • s1._domainkey.mills-reeve.com TXT k=rsa; t=s (strict); p=MIIBIjANBgkq..., 2048-bit, fp ae8406c18072b4fc via s1.domainkey.u10198980.wl231.sendgrid.net
  • s2._domainkey.mills-reeve.com TXT k=rsa; t=s (strict); p=MIGfMA0GCSqG..., 1024-bit, fp 1d0c1f3114d84753 via s2.domainkey.u10198980.wl231.sendgrid.net

setup complete: DKIM present, bounce CNAME not used (optional, CNAME at 25 labels under mills-reeve.com), SPF not needed, tracking CNAME not used (optional, CNAME at 25 labels under mills-reeve.com)

Not recognised

How this was checked

633 lookups at 3 names · 4 things not checked

Not checked

What was asked

633 lookups at 3 names

Names asked

mills-reeve.com

  • Pages (1): https://api.certspotter.com/v1/issuances?domain=mills-reeve.com&include_subdomains=true&expand=dns_names
  • CNAME labels (25): bounce, bounces, em, email, mail, send, mta, rp, pm-bounces, links, link, click, track, tracking, url, go, autodiscover, cf-bounce, eversrv, fwdkim1, bnc3, bounces.cloud.em, bounces.cloud2.em, outbound.intercom, atlassian-bounces
  • DKIM selectors (109): selector1, selector2, acdkim1, acdkim2, ses, aweber_key_a, aweber_key_b, aweber_key_c, brevo, brevo1, brevo2, cm, cf2024-1, ctct1, ctct2, krs, e2ma-k1, e2ma-k2, e2ma-k3, everlytickey1, everlytickey2, fm2, fm1, fm3, mesmtp, secureserver1, secureserver2, google, gapps, gor, strong1, strong2, hs1, hs2, intercom, s1-ionos, s42582890, s2-ionos, cka, kl, kl1, kl2, km1, km2, k2, k1, k3, litesrv, mg, mailgun, mg1, pdk1, pdk2, mailjet, mailpoet2, mailpoet1, mandrill, mte1, mte2, marketo, mkto, mkto1, mimecast, mimecast20190719, pepipost, pp1, protonmail, protonmail2, protonmail3, resend, sailthru, salesforce, salesforce2, salesforce1, sf, sf1, sf2, sfdc, 200608, pardot, sfmc, s1, s2, smtpapi, scph0819, sparkpost, squarespace, zendesk1, zendesk2, zoho, api, default, dk, dkim, dkim1, dkim2, email, k, key, key1, key2, mail, mta, mx, pm, s, selector, smtp, sp

update.mills-reeve.com

  • DKIM selectors (29): acdkim1, acdkim2, ses, aweber_key_a, aweber_key_b, aweber_key_c, brevo, brevo1, brevo2, cm, cf2024-1, ctct1, ctct2, krs, e2ma-k1, e2ma-k2, e2ma-k3, everlytickey1, everlytickey2, fm2, fm1, fm3, mesmtp, secureserver1, secureserver2, google, gapps, mimecast, mimecast20190719

updates.mills-reeve.com

  • DKIM selectors (27): acdkim1, acdkim2, ses, aweber_key_a, aweber_key_b, aweber_key_c, brevo, brevo1, brevo2, cm, cf2024-1, ctct1, ctct2, krs, e2ma-k1, e2ma-k2, e2ma-k3, everlytickey1, everlytickey2, fm2, fm1, fm3, mesmtp, secureserver1, secureserver2, google, gapps