pokemongolive.com

SPF record published

Found

Record

v=spf1 include:uXXXXXX.wl.sendgrid.net -all

DNS lookups

1 of 10

Void lookups

1 of 2

Problem

include:uxxxxxx.wl.sendgrid.net does not exist or has no records

Checks

• ✓ No deprecated ptr mechanism #1

  No ptr mechanism found in SPF record.
• !

  1 of 10 DNS lookups, with problems

  SPF record needs 1 DNS lookups (limit is 10). Problems found: include:uxxxxxx.wl.sendgrid.net does not exist or has no records.

  #2
• ✓ Ends with -all #3

  SPF record properly uses -all to restrict unauthorized senders.
• ✓ Record published #6

  SPF record exists for this domain.
• ✓ Single record #16

  Exactly one SPF record is published.
• ✓ Valid syntax #25

  All SPF mechanisms and modifiers are valid.
• !

  1 void lookup

  1 include/redirect target does not exist or has no records (limit is 2). This usually is a stale include; remove it.

  #26
• ✓ No overly broad IP ranges #27

  All ip4/ip6 ranges are narrow enough.

p=reject (_dmarc.pokemongolive.com)

Found

Record

v=DMARC1; p=reject; rua=mailto:dmarc_agg@dmarc.250ok.net,ruf=mailto:dmarc_fr@dmarc.250ok.net; fo=1; pct=100; rf=afrf

Found at

_dmarc.pokemongolive.com

External report address

mailto:dmarc_agg@dmarc.250ok.net (authorized)

External report address

ruf=mailto:dmarc_fr@dmarc.250ok.net (only mailto: report addresses are supported by receivers)

Checks

• ✓ Policy: reject #4

  DMARC policy is set to 'reject', which provides the strongest protection against email spoofing.
• ✓ Record published #5

  DMARC record exists for this domain.
• ✓ Valid syntax #17

  DMARC record syntax is valid.
• ✓ Applies to 100% of mail #18

  DMARC policy applies to all failing mail.
• ✓ Aggregate reports enabled #19

  Aggregate reports are sent to: mailto:dmarc_agg@dmarc.250ok.net, ruf=mailto:dmarc_fr@dmarc.250ok.net
• ✓ Subdomain policy: reject #20

  Subdomains are covered by policy 'reject'.
• !

  Unsupported report address

  Receivers only send reports to mailto: addresses: ruf=mailto:dmarc_fr@dmarc.250ok.net.

  #29

Selectors: s1, s2

Found

Selectors

s1, s2

_domainkey

NOERROR

Checks

• ✓ Keys found: s1, s2 #7

  DKIM keys found for this domain with selectors: s1, s2
• !

  1024-bit DKIM key

  1024-bit RSA keys are the minimum and are considered weak today: s2 (1024 bits). Rotate to a 2048-bit key.

  #23
• ✓ No problematic flags #24

  No keys in test mode, revoked, or limited to SHA-1.

Signed, but no DS at parent

Found

DNSKEY records

Yes (2)

DS at parent

No

Algorithms

RSASHA256 (8)

Key tags

47222, 47520

Signatures valid until

10 November 2026, 12:19 UTC

Checks

• !

  Signed, but no DS at parent

  The zone is signed (DNSKEY present) but the parent has no DS record, so the chain of trust is incomplete. Publish the DS record at your registrar.

  #8
• ✓ Signatures valid until 2026-11-10 #21

  DNSKEY signatures are valid until 2026-11-10T12:19:48Z.

No MX records found

Checks

• !

  No MX records

  No MX records found. If this domain is used for email, add MX records to specify mail servers. If it never receives mail, publish a null MX ("MX 0 .").

  #9
• i

  Receives no mail but sends

  The domain has no MX records but its SPF record authorizes senders. If it does not send mail either, use "v=spf1 -all" and DMARC p=reject.

  #28