heroallies.com (root domain, Workspace + Apollo + SendGrid + Flowlu + BD IP)
heroalliesmail.com (cousin domain for Mailgun + Apollo + PushlapGrowth)
; =============================
; HeroAllies.com Zone File
; =============================
; --- A Record ---
@ A 66.147.239.51
; --- MX (Google Workspace) ---
@ MX 1 ASPMX.L.GOOGLE.COM.
@ MX 5 ALT1.ASPMX.L.GOOGLE.COM.
@ MX 5 ALT2.ASPMX.L.GOOGLE.COM.
@ MX 10 ALT3.ASPMX.L.GOOGLE.COM.
@ MX 10 ALT4.ASPMX.L.GOOGLE.COM.
; --- SPF ---
@ TXT "v=spf1 include:_spf.google.com include:_spf.flowlu.com include:sendgrid.net ip4:66.147.239.51 ~all"
; --- DKIM ---
google._domainkey TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yq1U4bCR1zpu+/Q4DO+1diGgvzcnWsIe2hgUJYcLHAbWGwar6t1BdzGmVp154hgxx9+iB1D2roM16Wb/eQ+6GVICZULRWXM7iFhgJbORYuWtLd4M2vQQmgevDl2L9wRrcDyxjV4cOfRLK4yEDbU45bH7OFu1+kOGOatXULYe7Zax205eVJUokNuPg9XCdmI44ov0XlsigcnS1VM+Fw48NvvMsIkm/GFeFnynTUec2UZWW5WjvMxJ1cdjaQJ8GQDSDLYqLTJi7VpjTmcTQAG4JXU9hbYp9BfU58IYbJxuD2nu6/pDY/zll7sxBRNF04gOTxavNUqHj7urNaKEAJ0iQIDAQAB"
apollo._domainkey TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqENIZdgZnmE8GE1gGZS9E2ssV++V2ub15ISvGeIXopytb9GFcyLJF+jOdFxy/tjgRSZm0Xcl4/gWB6Pb8gN2w3t4bRRecUgbc72w7W+HsmNxQC0+wKW9g54b041J+hmMjhnyUCocSFzia/mE5kWhWPF4nEuaz8lJ7TWxIyVbsY51Q9SfxXEX+usf3dttePaI6ai0oPlvV0XnHyh1dRKFqovSwxusHdnclWOyczM5gXtV+QkwBDMzt3Mn6xgUHKRD/fjGlDXypSna7ZgvSzimYIq2dO1NdRsI0nL693aOrXUXaxACQwqiQuh+pBdK9hWUzOQ5nyyT4Bkmhzs2OkWs6QIDAQAB"
; --- DMARC ---
_dmarc TXT "v=DMARC1; p=quarantine; adkim=r; aspf=r; rua=mailto:report@heroallies.com,mailto:dmarc_rua@onsecureserver.net"
; --- Apollo Tracking ---
cst CNAME excited-cornichons.aplonet.com.
; =============================
; HeroAlliesMail.com Zone File
; =============================
; --- A Record (optional, for redirect to heroallies.com) ---
@ A 66.147.239.51
www CNAME heroallies.com.
; --- Subdomain: news.heroalliesmail.com ---
news TXT "v=spf1 include:mailgun.org ~all"
s1._domainkey.news TXT (Mailgun DKIM S1)
s2._domainkey.news TXT (Mailgun DKIM S2)
_dmarc.news TXT "v=DMARC1; p=quarantine; rua=mailto:report@heroallies.com"
email.news CNAME mailgun.org.
; --- Subdomain: outreach.heroalliesmail.com ---
outreach TXT "v=spf1 include:mailgun.org ~all"
s1._domainkey.outreach TXT (Mailgun DKIM S1)
s2._domainkey.outreach TXT (Mailgun DKIM S2)
_dmarc.outreach TXT "v=DMARC1; p=quarantine; rua=mailto:report@heroallies.com"
email.outreach CNAME mailgun.org.
; --- Subdomain: notify.heroalliesmail.com ---
notify TXT "v=spf1 include:mailgun.org ~all"
s1._domainkey.notify TXT (Mailgun DKIM S1)
s2._domainkey.notify TXT (Mailgun DKIM S2)
_dmarc.notify TXT "v=DMARC1; p=quarantine; rua=mailto:report@heroallies.com"
email.notify CNAME mailgun.org.
; --- Subdomain: offers.heroalliesmail.com ---
offers TXT "v=spf1 include:mailgun.org ~all"
s1._domainkey.offers TXT (Mailgun DKIM S1 when issued)
s2._domainkey.offers TXT (Mailgun DKIM S2 when issued)
_dmarc.offers TXT "v=DMARC1; p=quarantine; rua=mailto:report@heroallies.com"
email.offers CNAME mailgun.org.
; --- Subdomain: events.heroalliesmail.com ---
events TXT "v=spf1 include:mailgun.org ~all"
s1._domainkey.events TXT (Mailgun DKIM S1 when issued)
s2._domainkey.events TXT (Mailgun DKIM S2 when issued)
_dmarc.events TXT "v=DMARC1; p=quarantine; rua=mailto:report@heroallies.com"
email.events CNAME mailgun.org.
; --- PushlapGrowth Subdomain: mailgun.heroalliesmail.com ---
mailgun TXT "v=spf1 include:mailgun.org ~all"
mx._domainkey.mailgun TXT "k=rsa; p=LONG_KEY_FROM_PUSHLAPGROWTH"
_dmarc.mailgun TXT "v=DMARC1; p=quarantine; rua=mailto:report@heroallies.com"
email.mailgun CNAME mailgun.org.
mailgun MX 10 mxa.mailgun.org.
mailgun MX 10 mxb.mailgun.org.
Do not remove Google’s or Apollo’s DKIM from heroallies.com. Both are required.
For heroalliesmail.com subdomains (news, outreach, notify, offers, events):
Add SPF now.
Add DMARC now.
Add CNAME tracking now.
Add DKIM TXT keys once Mailgun generates them.
PushlapGrowth manages mailgun.heroalliesmail.com. Keep their DNS records exactly.
Use external SMTP in Gmail for subdomain identities (Mailgun accounts).
Test every change using:
dig TXT _dmarc.heroallies.com
dig TXT google._domainkey.heroallies.com
dig TXT news.heroalliesmail.com
Run live mail through mail-tester.com → aim ≥ 9/10.