← Check another domain

sendgrid.com

93/100

A

Scanned 2026-05-21

Cached result — add ?fresh=1 to force a new scan

Subcheck breakdown

Check	Status	Score
DMARC policy	reject	25/25
SPF record	ok	10/10
DKIM selector	found	10/10
TLS certificate	ok	20/20
WHOIS integrity	ok	10/10
Subdomain takeover	clean	15/15
MTA-STS / TLSRPT	missing	0/5
DNSSEC	unsigned	0/5

Recommendations

Publish MTA-STS: add _mta-sts.sendgrid.com TXT and host a policy at https://mta-sts.sendgrid.com/.well-known/mta-sts.txt
Enable DNSSEC on sendgrid.com — DS records must be published to the com zone by your registrar
Add includeSubDomains to the HSTS header on https://sendgrid.com/ to extend protection to every subdomain.

Details

Area	Detail
DMARC	v=DMARC1; p=reject; sp=reject; pct=100; adkim=r; aspf=r; rua=mailto:dmarc_agg@vali.email,mailto:dmarc_rua@sendgrid.com; ruf=mailto:dmarc@sendgrid.com; fo=1; rf=afrf; ri=86400
SPF	v=spf1 include:sendgrid.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:stspg-customer.com ip4:167.89.60.95 ip4:50.31.36.205 ~all
DKIM selectors	s1, s2, smtpapi, krs
TLS certificate	Ok (283 days remaining) — CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US
WHOIS registrar	MarkMonitor Inc.
WHOIS expires	2028-04-20T09:09:19Z
Subdomains (111 subdomains scanned, 0 at risk)	111 found
DNSSEC	Unsigned