DNS Report for ao.com

• connie.ns.cloudflare.com

  • IPv4: 173.245.58.247, 108.162.192.247, 172.64.32.247
  • IPv6: 2803:f800:50::6ca2:c0f7, 2a06:98c1:50::ac40:20f7, 2606:4700:50::adf5:3af7
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ram.ns.cloudflare.com

  • IPv4: 108.162.193.225, 172.64.33.225, 173.245.59.225
  • IPv6: 2606:4700:58::adf5:3be1, 2a06:98c1:50::ac40:21e1, 2803:f800:50::6ca2:c1e1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• connie.ns.cloudflare.com

  • Status: Responded
  • IP(s): 104.18.177.129, 104.18.174.129, 104.18.176.129, 104.18.175.129, 104.18.173.129
  • TTL: 300 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ram.ns.cloudflare.com

  • Status: Responded
  • IP(s): 104.18.175.129, 104.18.174.129, 104.18.176.129, 104.18.173.129, 104.18.177.129
  • TTL: 300 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

connie.ns.cloudflare.com

• Serial: 2349220793
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

ram.ns.cloudflare.com

• Serial: 2349220793
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

Serial: 2349220793 - OK

REFRESH: 10000 - OK

RETRY: 2400 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 1800 - Note: Outside recommended range (1-3 hours)

connie.ns.cloudflare.com

• 10 eu-smtp-inbound-1.mimecast.com ( 91.220.42.211 )
• 10 eu-smtp-inbound-2.mimecast.com ( 91.220.42.241 )

ram.ns.cloudflare.com

• 10 eu-smtp-inbound-1.mimecast.com ( 195.130.217.211 )
• 10 eu-smtp-inbound-2.mimecast.com ( 91.220.42.201 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 241.42.220.91.in-addr.arpa -> eu-smtp-inbound-1.mimecast.com
• 211.217.130.195.in-addr.arpa -> eu-smtp-inbound-1.mimecast.com
• 211.42.220.91.in-addr.arpa -> eu-smtp-inbound-2.mimecast.com
• 201.42.220.91.in-addr.arpa -> eu-smtp-inbound-1.mimecast.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:spf.avature.net include:eu._netblocks.mimecast.com include:amazonses.com ip4:51.179.179.152 ip4:51.179.179.155 include:ao.gnatta.com ~all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses: 51.179.179.152, 51.179.179.155
• Includes: spf.avature.net, eu._netblocks.mimecast.com, amazonses.com, ao.gnatta.com
• DNS Lookups: 13 (Warning: Exceeds limit)
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: ~all

Warnings:

• SPF record has more than 10 DNS lookups, which may cause lookup limits

• DKIM Records Found: Yes
• Selectors Found: mta
• Selector 'mta':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCoZWZnsfFz88b5P7xsAieRNW9INyk9R4rPHLhUjM6iGSut7scgK21KcSt4fnQfnVL6lOuLMrgmLjJRDGA23WeH23uLjbjKX49YmYVyh8LqngoLN0kZjvNH7C15iLaujXJCr4kgN+8hOcKuztyVPVL8nk5yxYFOkXiX9fIYsMXZZQIDAQAB
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=1
• Syntax: Valid
• Policy: reject
• RUA (Aggregate Reports): mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]
• Failure Options (fo): 1

DMARC External Validation:

• Valid external domains: rep.dmarcanalyzer.com, for.dmarcanalyzer.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.