DNS Report for bitwarden.com

• igor.ns.cloudflare.com

  • IPv4: 172.64.33.119, 173.245.59.119, 108.162.193.119
  • IPv6: 2606:4700:58::adf5:3b77, 2a06:98c1:50::ac40:2177, 2803:f800:50::6ca2:c177
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• rose.ns.cloudflare.com

  • IPv4: 108.162.192.141, 173.245.58.141, 172.64.32.141
  • IPv6: 2a06:98c1:50::ac40:208d, 2803:f800:50::6ca2:c08d, 2606:4700:50::adf5:3a8d
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• igor.ns.cloudflare.com

  • Status: Responded
  • IP(s): 151.101.1.91, 151.101.193.91, 151.101.65.91, 151.101.129.91
  • TTL: 16 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• rose.ns.cloudflare.com

  • Status: Responded
  • IP(s): 151.101.1.91, 151.101.65.91, 151.101.129.91, 151.101.193.91
  • TTL: 15 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

igor.ns.cloudflare.com

• Serial: 2346944481
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

rose.ns.cloudflare.com

• Serial: 2346944481
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

Serial: 2346944481 - OK

REFRESH: 10000 - OK

RETRY: 2400 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 1800 - Note: Outside recommended range (1-3 hours)

igor.ns.cloudflare.com

• 1 aspmx.l.google.com ( 142.251.16.27 )
• 5 alt1.aspmx.l.google.com ( 209.85.202.27 )
• 5 alt2.aspmx.l.google.com ( 64.233.184.27 )
• 10 alt3.aspmx.l.google.com ( 142.250.27.26 )
• 10 alt4.aspmx.l.google.com ( 142.250.153.26 )

rose.ns.cloudflare.com

• 1 aspmx.l.google.com ( 142.251.16.27 )
• 5 alt1.aspmx.l.google.com ( 209.85.202.26 )
• 5 alt2.aspmx.l.google.com ( 64.233.184.27 )
• 10 alt3.aspmx.l.google.com ( 142.250.27.27 )
• 10 alt4.aspmx.l.google.com ( 142.250.153.26 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 27.27.250.142.in-addr.arpa -> ra-in-f27.1e100.net
• 26.27.250.142.in-addr.arpa -> ra-in-f26.1e100.net
• 27.202.85.209.in-addr.arpa -> dg-in-f27.1e100.net
• 27.16.251.142.in-addr.arpa -> bl-in-f27.1e100.net
• 27.184.233.64.in-addr.arpa -> wa-in-f27.1e100.net
• 26.153.250.142.in-addr.arpa -> ea-in-f26.1e100.net
• 26.202.85.209.in-addr.arpa -> dg-in-f26.1e100.net

PTR Records - OK

• Signed: Yes
• Validation: Successful
• DNSKEY Records: 2
• DS Records in parent zone: 0
• DS at Parent: False

DNSSEC - OK

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:spf.braintreegateway.com include:_spf.google.com include:amazonses.com include:_spf.freshsales.io include:22371289.spf07.hubspotemail.net ~all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: spf.braintreegateway.com, _spf.google.com, amazonses.com, _spf.freshsales.io, 22371289.spf07.hubspotemail.net
• DNS Lookups: 13 (Warning: Exceeds limit)
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: ~all

Warnings:

• SPF record has more than 10 DNS lookups, which may cause lookup limits

• DKIM Records Found: Yes
• Selectors Found: google
• Selector 'google':
  Record: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnNeA2wQcfiEUwTU18v3h4fU9d/uZzn6BPVW6FJdLqiSz/5p/xrpdaIlzDFEGhIndSxhukJqNp+GtScUXAA4wWRlkO7EnTy9EDBS0reB+TWLHfnTYtwXle6sfaCL3JPm+VH/WcHWFP+LsZ88ag+iOceHJBegYOWLKXaowkF7GRe7cDvo0uVytYzfCTN5LPJ3A
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; rua=mailto:[email protected],mailto:[email protected],mailto:[email protected]; ruf=mailto:[email protected]; aspf=r; fo=1; pct=100
• Syntax: Valid
• Policy: reject
• Percent: 100%
• RUA (Aggregate Reports): mailto:[email protected], mailto:[email protected], mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]
• Failure Options (fo): 1
• SPF Alignment (aspf): Relaxed

DMARC External Validation:

• Valid external domains: ag.dmarcian.com, inbound.dmarcdigests.com
• Invalid external domains: fr.drmarcian.com

Warnings:

• Some external domains are not properly configured to receive DMARC reports: fr.drmarcian.com