DNS Report for beatrice-raws.org

• ashley.ns.cloudflare.com

  • IPv4: 173.245.58.71, 108.162.192.71, 172.64.32.71
  • IPv6: 2803:f800:50::6ca2:c047, 2a06:98c1:50::ac40:2047, 2606:4700:50::adf5:3a47
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ivan.ns.cloudflare.com

  • IPv4: 172.64.33.120, 173.245.59.120, 108.162.193.120
  • IPv6: 2a06:98c1:50::ac40:2178, 2803:f800:50::6ca2:c178, 2606:4700:58::adf5:3b78
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• ashley.ns.cloudflare.com

  • Status: Responded
  • IP(s): 104.21.58.166, 172.67.161.214
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• ivan.ns.cloudflare.com

  • Status: Responded
  • IP(s): 172.67.161.214, 104.21.58.166
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

ashley.ns.cloudflare.com

• Serial: 2351132257
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

ivan.ns.cloudflare.com

• Serial: 2351132257
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

Serial: 2351132257 - OK

REFRESH: 10000 - OK

RETRY: 2400 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 1800 - Note: Outside recommended range (1-3 hours)

ashley.ns.cloudflare.com

• 10 mx.yandex.net ( 77.88.21.249 )

ivan.ns.cloudflare.com

• 10 mx.yandex.net ( 77.88.21.249 )

MX Record Consistency - OK

MX Record Count - Warning: Only one MX record

• 249.21.88.77.in-addr.arpa -> mxfront.stable.qloud-b.yandex.net

PTR Records - OK

• Signed: Yes
• Validation: Failed
• DNSKEY Records: 2
• DS Records in parent zone: 0
• DS at Parent: False

DNSSEC - Warning: Validation failed

Issue: No DS record found at the parent zone.

Action: Please add the DS record to both your DNS server and domain registrar.

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 redirect=_spf.yandex.net
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses:
• Includes:
• DNS Lookups: 1
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: Not Present

Warnings:

• SPF record doesn't contain an 'all' mechanism

Errors:

• SPF record syntax is invalid

• DKIM Records Found: Yes
• Selectors Found: mail
• Selector 'mail':
  Record: v=DKIM1; k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCfPWkINpU/enYdFKFJgK7kXHWmWE+oiHobisEhAg22VbE4B+xnK644/SLmghl9y+1BBNyODS6Cva31eY7/mNjQ5dYwURVBJh5PKpQh/bWaWofNvVuKgTtz3x3RUfsB0499mroznd/OMKkhz8oypFsBRoXU1nuXRqzan8Kl6z4mpQIDAQAB
• Valid Syntax: Yes

• Record: v=DMARC1; p=quarantine; fo=1; rua=mailto:[email protected]; ruf=mailto:[email protected]; adkim=s; aspf=r;
• Syntax: Valid
• Policy: quarantine
• RUA (Aggregate Reports): mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]
• Failure Options (fo): 1
• DKIM Alignment (adkim): Strict
• SPF Alignment (aspf): Relaxed

DMARC External Validation:

• All external domains in your DMARC record are giving permission to send them DMARC reports.