canva.com
71/100
Mail provider: Google Workspace
| Check | Details | |
|---|---|---|
| MX | ✔ | aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, alt3.aspmx.l.google.com, alt4.aspmx.l.google.com |
| SPF | ⚠ | v=spf1 include:_spf1.canva.com include:_spf2.canva.com include:_spf3.canva.com include:_spf4.canva.com include:_spf5.canva.com include:_spf6.canva.com include:_spf7.canva.com include:_spf8.canva.com include:_spf9.canva.com -all (9 lookups); does not include Google Workspace (include:_spf.google.com) |
| DKIM | ⚠ | Selectors found: google (2048-bit+), k1 (1024-bit), k2 (2048-bit+), k3 (2048-bit+), s1 (2048-bit+), s2 (2048-bit+), mandrill (1024-bit), smtpapi (1024-bit); upgrade 1024-bit keys to 2048-bit |
| DMARC | ✔ | v=DMARC1; p=reject; rua=mailto:dmarc-reports@canva.com; ruf=mailto:dmarc-reports+forensics@canva.com; fo=1 |
| MTA-STS | ⚠ | Not set (optional; enforces TLS for mail sent to you) |
| TLS-RPT | ⚠ | Not set (optional; reports TLS delivery failures) |
| BIMI | ℹ | Not set (optional; shows your logo in Gmail/Yahoo; needs DMARC quarantine/reject) |
How to fix it
- SPF — Update the TXT record at canva.com (keeps your existing senders)
v=spf1 include:_spf1.canva.com include:_spf2.canva.com include:_spf3.canva.com include:_spf4.canva.com include:_spf5.canva.com include:_spf6.canva.com include:_spf7.canva.com include:_spf8.canva.com include:_spf9.canva.com include:_spf.google.com -all
DNS changes can take up to 24–48 hours. Re-run the check afterwards.
Want it fixed for you? I set up SPF, DKIM and DMARC without breaking your other senders,
with a before/after report.
Get it fixed on Fiverr
Get it fixed on Fiverr
Prefer to do it yourself? Get the step-by-step Fix Kit ($15) – 19-page guide, checklist, 20+ providers.