DNS Report for gusto.com

• anahi.ns.cloudflare.com

  • IPv4: 172.64.34.24, 162.159.38.24, 108.162.194.24
  • IPv6: 2606:4700:50::a29f:2618, 2a06:98c1:50::ac40:2218, 2803:f800:50::6ca2:c218
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• reese.ns.cloudflare.com

  • IPv4: 162.159.44.117, 108.162.195.117, 172.64.35.117
  • IPv6: 2a06:98c1:50::ac40:2375, 2803:f800:50::6ca2:c375, 2606:4700:58::a29f:2c75
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• anahi.ns.cloudflare.com

  • Status: Responded
  • IP(s): 104.18.33.187, 172.64.154.69
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• reese.ns.cloudflare.com

  • Status: Responded
  • IP(s): 104.18.33.187, 172.64.154.69
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

anahi.ns.cloudflare.com

• Serial: 2349669029
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

reese.ns.cloudflare.com

• Serial: 2349669029
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

Serial: 2349669029 - OK

REFRESH: 10000 - OK

RETRY: 2400 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 1800 - Note: Outside recommended range (1-3 hours)

anahi.ns.cloudflare.com

• 1 aspmx.l.google.com ( 142.250.31.26 )
• 5 alt1.aspmx.l.google.com ( 209.85.202.27 )
• 5 alt2.aspmx.l.google.com ( 64.233.184.27 )
• 10 alt3.aspmx.l.google.com ( 142.250.27.26 )
• 10 alt4.aspmx.l.google.com ( 142.250.153.27 )

reese.ns.cloudflare.com

• 1 aspmx.l.google.com ( 142.250.31.26 )
• 5 alt1.aspmx.l.google.com ( 209.85.202.26 )
• 5 alt2.aspmx.l.google.com ( 64.233.184.26 )
• 10 alt3.aspmx.l.google.com ( 142.250.27.26 )
• 10 alt4.aspmx.l.google.com ( 142.250.153.27 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 26.31.250.142.in-addr.arpa -> bj-in-f26.1e100.net
• 26.27.250.142.in-addr.arpa -> ra-in-f26.1e100.net
• 27.202.85.209.in-addr.arpa -> dg-in-f27.1e100.net
• 26.202.85.209.in-addr.arpa -> dg-in-f26.1e100.net
• 27.153.250.142.in-addr.arpa -> ea-in-f27.1e100.net
• 26.184.233.64.in-addr.arpa -> wa-in-f26.1e100.net
• 27.184.233.64.in-addr.arpa -> wa-in-f27.1e100.net

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:_netblocks.google.com include:_netblocks2.google.com include:_netblocks3.google.com include:_spf.salesforce.com include:helpscoutemail.com include:mktomail.com ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.8.0/21 include:spfo.gusto.co
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses: 205.201.128.0/20, 198.2.128.0/18, 148.105.8.0/21
• Includes: _netblocks.google.com, _netblocks2.google.com, _netblocks3.google.com, _spf.salesforce.com, helpscoutemail.com, mktomail.com, spfo.gusto.co
• DNS Lookups: 10
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: Not Present

Warnings:

• SPF record doesn't contain an 'all' mechanism

• DKIM Records Found: Yes
• Selectors Found: google
• Selector 'google':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8VvTm/4ucStS/jltGA6LCc4fA/KC9Ayi0Nqnkdq681vTsyDga7It3ayGs2ILP/UMRM4t7fH50FQDCTfE48bckn+WJuISzTc0Fz/KyN3MfuhOboCYrwlRTSJiw0ATFuSKpDnWQ9gmKklPnfmRvbGQ3fLImbo4000SHRJWvo9q7wwIDAQAB
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; aspf=r; rua=mailto:[email protected];
• Syntax: Valid
• Policy: reject
• RUA (Aggregate Reports): mailto:[email protected]
• SPF Alignment (aspf): Relaxed

DMARC External Validation:

• Valid external domains: dmarc-reports.cloudflare.net
• All external domains in your DMARC record are giving permission to send them DMARC reports.