klickheft.de

SPF record published

Found

Record

v=spf1 include:gialogosoftwear.com a:%{i}.secured.%{h} include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email redirect=%{h} -all

DNS lookups

3 of 10

Void lookups

1 of 2

Problem

include:gialogosoftwear.com does not exist or has no records

Checks

• ✓ No deprecated ptr mechanism #1

  No ptr mechanism found in SPF record.
• !

  3 of 10 DNS lookups, with problems

  SPF record needs 3 DNS lookups (limit is 10). Problems found: include:gialogosoftwear.com does not exist or has no records.

  #2
• ✓ Ends with -all #3

  SPF record properly uses -all to restrict unauthorized senders.
• ✓ Record published #6

  SPF record exists for this domain.
• ✓ Single record #16

  Exactly one SPF record is published.
• ✓ Valid syntax #25

  All SPF mechanisms and modifiers are valid.
• !

  1 void lookup

  1 include/redirect target does not exist or has no records (limit is 2). This usually is a stale include; remove it.

  #26
• ✓ No overly broad IP ranges #27

  All ip4/ip6 ranges are narrow enough.

Selectors: default, dkim, mail, email, k1, selector1, selector2, google, zoho, mx, key, mta, pm, dkim-smtp, s1, s2

Found

Selectors

default, dkim, mail, email, k1, selector1, selector2, google, zoho, mx, key, mta, pm, dkim-smtp, s1, s2

_domainkey

NOERROR

Checks

• ✓ Keys found: default, dkim, mail, email, k1, selector1, selector2, google, zoho, mx, key, mta, pm, dkim-smtp, s1, s2 #7

  DKIM keys found for this domain with selectors: default, dkim, mail, email, k1, selector1, selector2, google, zoho, mx, key, mta, pm, dkim-smtp, s1, s2
• !

  1024-bit DKIM key

  1024-bit RSA keys are the minimum and are considered weak today: default (1024 bits), dkim (1024 bits), mail (1024 bits), email (1024 bits), k1 (1024 bits), selector1 (1024 bits), selector2 (1024 bits), google (1024 bits), zoho (1024 bits), mx (1024 bits), key (1024 bits), mta (1024 bits), pm (1024 bits), dkim-smtp (1024 bits), s1 (1024 bits), s2 (1024 bits). Rotate to a 2048-bit key.

  #23
• ✓ No problematic flags #24

  No keys in test mode, revoked, or limited to SHA-1.

Not signed

Found

DNSKEY records

No (0)

DS at parent

No

Checks

• !

  Not enabled

  DNSSEC is not enabled for this domain. Consider enabling DNSSEC to protect against DNS spoofing attacks.

  #8

No MX records found

Checks

• !

  No MX records

  No MX records found. If this domain is used for email, add MX records to specify mail servers. If it never receives mail, publish a null MX ("MX 0 .").

  #9
• i

  Receives no mail but sends

  The domain has no MX records but its SPF record authorizes senders. If it does not send mail either, use "v=spf1 -all" and DMARC p=reject.

  #28