DNS Report for citrix.com

• ns1.cedexis.net

  • IPv4: 172.85.90.4
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• ns4.cedexis.net

  • IPv4: 172.85.88.4
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• ns3.cedexis.net

  • IPv4: 69.28.180.4
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• ns2.cedexis.net

  • IPv4: 172.85.91.4
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

Nameserver Count - OK

• ns1.cedexis.net

  • Status: Responded
  • IP(s): 54.86.126.30
  • TTL: 60 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• ns4.cedexis.net

  • Status: Responded
  • IP(s): 54.86.126.30
  • TTL: 60 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• ns3.cedexis.net

  • Status: Responded
  • IP(s): 54.86.126.30
  • TTL: 60 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• ns2.cedexis.net

  • Status: Responded
  • IP(s): 54.86.126.30
  • TTL: 60 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

ns1.cedexis.net

• Serial: 2531
• Refresh: 3600
• Retry: 600
• Expire: 1209600
• Minimum TTL: 900

ns4.cedexis.net

• Serial: 2531
• Refresh: 3600
• Retry: 600
• Expire: 1209600
• Minimum TTL: 900

ns3.cedexis.net

• Serial: 2531
• Refresh: 3600
• Retry: 600
• Expire: 1209600
• Minimum TTL: 900

ns2.cedexis.net

• Serial: 2531
• Refresh: 3600
• Retry: 600
• Expire: 1209600
• Minimum TTL: 900

Serial: 2531 - OK

REFRESH: 3600 - OK

RETRY: 600 - OK

EXPIRE: 1209600 - OK

MINIMUM TTL: 900 - Note: Outside recommended range (1-3 hours)

ns1.cedexis.net

• 1 aspmx.l.google.com ( 172.253.115.26 )
• 5 alt1.aspmx.l.google.com ( 209.85.202.26 )
• 5 alt2.aspmx.l.google.com ( 64.233.184.27 )
• 10 alt3.aspmx.l.google.com ( 142.250.27.27 )

ns4.cedexis.net

• 1 aspmx.l.google.com ( 172.253.115.26 )
• 5 alt1.aspmx.l.google.com ( 209.85.202.26 )
• 5 alt2.aspmx.l.google.com ( 64.233.184.27 )
• 10 alt3.aspmx.l.google.com ( 142.250.27.26 )

ns3.cedexis.net

• 1 aspmx.l.google.com ( 172.253.115.26 )
• 5 alt1.aspmx.l.google.com ( 209.85.202.26 )
• 5 alt2.aspmx.l.google.com ( 64.233.184.27 )
• 10 alt3.aspmx.l.google.com ( 142.250.27.26 )

ns2.cedexis.net

• 1 aspmx.l.google.com ( 172.253.115.26 )
• 5 alt1.aspmx.l.google.com ( 209.85.202.26 )
• 5 alt2.aspmx.l.google.com ( 64.233.184.27 )
• 10 alt3.aspmx.l.google.com ( 142.250.27.26 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 27.27.250.142.in-addr.arpa -> ra-in-f27.1e100.net
• 26.27.250.142.in-addr.arpa -> ra-in-f26.1e100.net
• 26.115.253.172.in-addr.arpa -> bg-in-f26.1e100.net
• 27.184.233.64.in-addr.arpa -> wa-in-f27.1e100.net
• 26.202.85.209.in-addr.arpa -> dg-in-f26.1e100.net

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:spf.citrix.com include:spf2.citrix.com include:_spf.google.com include:spf.protection.outlook.com exists:%{i}.spf.hc3370-68.iphmx.com exists:%{i}._spf.mta.salesforce.com ~all
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: spf.citrix.com, spf2.citrix.com, _spf.google.com, spf.protection.outlook.com
• DNS Lookups: 10
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: ~all

Errors:

• SPF record syntax is invalid

• DKIM Records Found: Yes
• Selectors Found: google
• Selector 'google':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDB3J6DYYxyQHf1GF53nKtLxAVNodhQyd28Dq8RMXeAyQfRyVIxkZKRe6J3bBTTZQsPleiGZzR5v8l/hMp79aWHDmCpSv8T58AKDG0XbhsSm7Im4RUiQbhDEky7qs9pBX2JFrFce+++hkDVtWO0G+iTFXIESnwsgC5dhsLECNaaCQIDAQAB
• Valid Syntax: Yes

• Record: v=DMARC1;p=reject;sp=reject;pct=100;rua=mailto:[email protected]
• Syntax: Valid
• Policy: reject
• Subdomain Policy: reject
• Percent: 100%
• RUA (Aggregate Reports): mailto:[email protected]

DMARC External Validation:

• Valid external domains: ag.dmarcian.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.