Email authentication fix · closed to new work
The email authentication fix is closed to new work.
From 29 September 2026 we take no new domains. The free lookup below still runs in your browser, and the rest of the page is a record of what the fix did.
We finish it or settle it with you, and the terms you agreed to still apply, including refunds. Write to hello@cybernative.ai about your domain.
| No SPF record | One SPF record for your host |
|---|---|
| Two SPF records | One record in their place |
| SPF needs more than 10 lookups | One record within the limit |
| Two DMARC records | One DMARC record |
| No DKIM key at your host | Steps to turn DKIM on |
Free lookup · still runs
Three public records. Look them up yourself.
Mail hostMX | |
|---|---|
SPFyourdomain.com | exactly one record starting v=spf1 |
DMARC_dmarc.yourdomain.com | exactly one record starting v=DMARC1 |
DKIMgoogle._domainkey · selector1._domainkey · your Zoho selector | a key at your host’s DKIM name |
google and selector1 are the default names for Google Workspace and Microsoft 365 (a CNAME), each followed by your domain. Zoho Mail has no default: use the selector name shown in your Zoho admin console (Zoho’s own example is zoho).Any free DNS lookup site shows these records. From a terminal, dig +short TXT yourdomain.com lists the SPF record.
They are public. Anyone can read them, including the servers that receive your email. If we wrote to you about your domain, the record we named is one of these.
Record · what the fix included
The records, the steps and a second check.
- A check of your domain’s public DNS records for SPF, DKIM and DMARC.
- The exact records your domain needs for your mail host, with step-by-step instructions for adding them at your DNS provider.
- A second check after you add them: your public DNS again, and one test message you send from your domain to a Gmail address you control and forward to us.
- A short note on before and after, and a dated plan for moving your DMARC policy from monitoring to enforcement.
Record · done when
All three show PASS, or the $49 comes back.
| SPF | PASS |
|---|---|
| DKIM | PASS |
| DMARC | PASS |
- If you add the records we sent exactly as written and SPF, DKIM and DMARC do not all show PASS, and we cannot put that right, we refund you in full.
- If we have not sent your records yet, you can ask for a full refund at any time within 14 days of paying.
- You, or whoever manages your domain, add the records. We never ask for DNS, registrar or mailbox passwords, and we never send email as your domain.
Record · four steps
How it worked.
- The customer emailed hello@cybernative.ai with the domain and its mail host, and named any other service that sends email as the domain, such as a newsletter or invoicing tool.
- We replied with the $49 payment link.
- Within one business day of payment, we sent the records and the steps for their DNS provider.
- They added them and told us. Within one business day, we did the second check and sent the note and the DMARC plan.
Closed to new work
Questions about a fix you already agreed?
Write to hello@cybernative.ai. The terms you agreed to, including refunds, are on the terms page.
Contact us