SPF / DKIM / DMARC snapshot · Shopify · Klaviyo · Mailchimp

Your Klaviyo flow can look fine and still fail SPF.

Inboxpass reads SPF, DKIM, DMARC, BIMI, MX, and from-domain alignment on the domain you send from. Then we write a scored report in plain English, with five fixes. You get it in 24 hours.

$129 Snapshot · 24-hour SLA · Watch $49/mo after a 14-day trial

Get a Snapshot → See a real finding

No call. No deck. Pay, send the sending domain, get the report. This checks DNS authentication. It is not a seed-list inbox test.

Sample finding · public DNS, captured 29 Aug 2026, 12:58am PT

80 colourpop.com · Shopify storefront

SPF never says -all, so Gmail does not know who to reject

Public Shopify anycast (A 23.227.38.65). We did not send them mail. We queried DNS.

SPF

v=spf1 mx include:_spf.google.com: no -all, no Shopify, no Mailchimp

DMARC

p=reject with rua. Enforcement is on. The SPF holes are now expensive.

DKIM

Selectors that answered: google, k1 (Mailchimp’s default). Klaviyo / shopify selectors: empty.

Fix 1

Terminate SPF with -all after listing every ESP. Stay under 10 lookups.

Fix 2

Mailchimp k1 is live; SPF does not include Mailchimp. Add the include.

Fix 3

Shopify storefront, but shops.shopify.com is not in SPF. Check the current include in Shopify Admin before changing records.

View HTML sample · Download sample (PDF) · labelled sample, not a paid run

What we check

Six records. One score. No theater.

SPF

Present? Includes? Lookup count against the RFC 7208 cap of 10? Flattening risk if you add Attentive next week?

DMARC

none / quarantine / reject. rua mailbox. Whether the policy actually does anything.

DKIM

We try google, k1, k2, s1, s2, selector1, selector2, klaviyo, mailchimp, shopify, sendgrid, amazonses, cm, mx, default. Custom selectors you name, we add.

BIMI

Is the logo record there? Only useful once DMARC is enforcing.

MX

Where replies and bounces go. Null MX vs “we forgot.”

Alignment

Shopify IP with no Shopify include. Mailchimp k1 with no Mailchimp SPF. Inferred from DNS. We do not capture a live message.

Also MTA-STS and TLS-RPT if present. If a lookup fails, the report says failed. We do not invent records.

What you get

A 4 to 6 page Snapshot. No dashboard to log into.

A 0–100 score and one honest headline (“Gmail can send this to spam,” or whatever the records actually say).
Every record quoted, not paraphrased.
Five ranked fixes with the TXT to paste this week.
24-hour SLA from paid Stripe. Usually faster.
A 14-day Watch trial: we re-query weekly and tell you if someone breaks SPF.

Pricing

Pay. Send the domain. Get the report.

Snapshot

$129

24-hour SLA from paid Stripe

One sending domain. SPF, DKIM, DMARC, BIMI, MX, alignment notes. Five fixes. HTML report. Watch trial attached.

DNS authentication, not inbox placement. 7-day refund: email hello@getinboxpass.com after delivery.

Pay $129 →

Watch

$49 /mo

14-day trial on every Snapshot

Weekly DNS re-check. Alert if records drift or break. Cancel anytime. The usual failure is a contractor adding an ESP, not a hacker.

Card on file. The first $49 is charged after 14 days.

Start Watch trial →

Fit

Built for Shopify mail.

Who it’s for

Shopify stores sending Klaviyo, Mailchimp, or Attentive
DTC beauty, apparel, CPG, home: a founder or email lead who can put $129 on a card
You just got “your mail is going to spam” from a customer

Who it’s not for

B2B SaaS / indie developer tools (different product)
Anyone who needs procurement, a SOW, or a “strategy call”
Anyone buying a seed-list inbox-placement test. We don’t sell that

FAQ

Short answers.

Is this a free audit?

No. Free-audit emails are spam. You pay $129. We query DNS. You get the report in 24 hours.

Will you hop on a call first?

No. The Stripe link is the call.

Do you guarantee inbox placement?

No. We audit DNS authentication. Gmail still weighs complaints, list quality, and domain reputation. We will not pretend a TXT record is a placement test.

What if our DNS is already perfect?

You still get the grid, the lookup count, and Watch. If you want your money back because you already knew, email hello@getinboxpass.com within 7 days of delivery.

How is this different from MXToolbox?

MXToolbox is a console. This is a scored, plain-English report with five ranked fixes, a 24-hour SLA, and a weekly Watch. You are paying for the write-up and the follow-through.

Refunds?

Email hello@getinboxpass.com within 7 days of delivery. After you pay, reply if the From: domain you send from is different from the sending domain you entered on Stripe.

Who is Inboxpass?

A productized SPF, DKIM, and DMARC snapshot, run by an operator in La Jolla. Reach us at hello@getinboxpass.com.

Records rot. Catch a bad TXT before the next send.

Contractors add ESPs. Shopify apps write TXT. Someone deletes DKIM. Snapshot today, Watch after.

Get the Snapshot · $129 Watch · $49/mo