DNS Report for ghost.io

• sara.ns.cloudflare.com

  • IPv4: 108.162.192.144, 173.245.58.144, 172.64.32.144
  • IPv6: 2606:4700:50::adf5:3a90, 2803:f800:50::6ca2:c090, 2a06:98c1:50::ac40:2090
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• woz.ns.cloudflare.com

  • IPv4: 108.162.193.150, 172.64.33.150, 173.245.59.150
  • IPv6: 2803:f800:50::6ca2:c196, 2606:4700:58::adf5:3b96, 2a06:98c1:50::ac40:2196
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• sara.ns.cloudflare.com

  • Status: Responded
  • IP(s): 151.101.67.7, 151.101.131.7, 151.101.3.7, 151.101.195.7
  • TTL: 36 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• woz.ns.cloudflare.com

  • Status: Responded
  • IP(s): 151.101.3.7, 151.101.67.7, 151.101.131.7, 151.101.195.7
  • TTL: 45 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

sara.ns.cloudflare.com

• Serial: 2349033270
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

woz.ns.cloudflare.com

• Serial: 2349033270
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

Serial: 2349033270 - OK

REFRESH: 10000 - OK

RETRY: 2400 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 1800 - Note: Outside recommended range (1-3 hours)

sara.ns.cloudflare.com

• 10 mxa.mailgun.org ( 34.160.63.108 )
• 10 mxb.mailgun.org ( 34.149.236.64 )

woz.ns.cloudflare.com

• 10 mxa.mailgun.org ( 34.160.63.108 )
• 10 mxb.mailgun.org ( 34.160.13.42 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 108.63.160.34.in-addr.arpa -> 108.63.160.34.bc.googleusercontent.com
• 42.13.160.34.in-addr.arpa -> 42.13.160.34.bc.googleusercontent.com
• 64.236.149.34.in-addr.arpa -> 64.236.149.34.bc.googleusercontent.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:mailgun.org -all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: mailgun.org
• DNS Lookups: 3
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: -all

• DKIM Records Found: Yes
• Selectors Found: default
• Selector 'default':
  Record: v=DKIM1;t=s;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDN+LnEt1J889lHAHeOKemnwdwP7eiJ+riWldFm5e9PXAISYOa5tCJy/vg++20Z24S4ovMW3h5xAvi1uGuGSJ9BbIASpwpBmVDK3bEMAu3cYo22CWL3l5tbBPbLVT7DZgKACl3q0/utiEMudKLZZKhDKJ4/aF4fmMLjHIjWNxihaQIDAQAB
• Valid Syntax: No

Warnings:

• DKIM record for selector 'default' may be incomplete

• Record: v=DMARC1; p=none; rua=mailto:[email protected]; aspf=r; adkim=r
• Syntax: Valid
• Policy: none
• RUA (Aggregate Reports): mailto:[email protected]
• DKIM Alignment (adkim): Relaxed
• SPF Alignment (aspf): Relaxed

DMARC External Validation:

• Valid external domains: inbound.dmarcdigests.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.