Scan result

github.com

0Grade BScore

SPF

Which servers can send email as your domain.

Warning

DNS lookups: 10/10

v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.227.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all

•'~all' (soft fail) is okay but '-all' (hard fail) is recommended for full protection.

DKIM

Cryptographic signature proving message integrity.

Pass

Selector: google

v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6T5sl/RwdSqGoYWaWaFbS2UAeyPrEmd0gogocmRfS441qwR8/0KB81Hw89P0l4YiFRrXYk7NVIGfyCRHAYYZUzCkGeOysI2EjgzLFhd/NEsbRzOEc/kWkK/RO6JFq/5lOn6M9AZw/ap9tds4JG9ApgNNdSpPxp9DmvpsOSgNMVflRxQFrk3kdS4RNAPKu/OPoA7dlR/A/pECryjRoYgENtDXzdnK70HgCekems6UDzxDj61cjyoKoXtEMF/QsaHEQ1Gjfv014rDJBsubk/kT5VqHkWHa/ia68Z5r228Ety/wFfQNjXTx/J7KGZ9GkZlKED659eiJcLnWcKDSiQlhwIDAQAB

DMARC

Policy for handling messages that fail SPF/DKIM.

Pass

Policy: quarantine
Reports: Configured
RUA: reports@rua.getmailposture.com

v=DMARC1; p=quarantine; sp=reject; pct=100; rua=mailto:dmarc@github.com; ruf=mailto:dmarc@github.com; fo=1

MX Records

Where mail for this domain is delivered.

Pass

0 github-com.mail.protection.outlook.com.

Recommended fixes

Ordered by severity. Copy the record, paste it at your DNS registrar, and re-scan.

Improve your existing SPF record

medium

v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.227.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 -all

1Replace your current SPF TXT record with the corrected value.
2Prefer '-all' (hard fail) once you're confident all senders are included.
3Keep total DNS lookups (include/a/mx/ptr/exists/redirect) at 10 or fewer.

DNS -> Records -> Add record -> Type: TXT -> Name: as specified -> Content: paste value -> Save.

Monitor github.com 24/7

Get instant email alerts the moment your SPF, DKIM, or DMARC records change or break -- before it costs you deliverability.

Start monitoring

What is SPF?

SPF (Sender Policy Framework) is a DNS TXT record that lists which mail servers are authorized to send email on behalf of github.com. Receiving servers check the sending IP against this list; anything not listed can be rejected or marked as spam.

What is DKIM?

DKIM (DomainKeys Identified Mail) cryptographically signs outgoing messages from github.com, letting receiving servers verify the message wasn't altered in transit and genuinely came from an authorized sender.

What is DMARC?

DMARC ties SPF and DKIM together for github.com, defining what receiving servers should do when a message fails both checks -- and where to send aggregate reports so you can monitor abuse of your domain.