DNS Report for harness.io

• ns-cloud-b1.googledomains.com

  • IPv4: 216.239.32.107
  • IPv6: 2001:4860:4802:32::6b
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-cloud-b2.googledomains.com

  • IPv4: 216.239.34.107
  • IPv6: 2001:4860:4802:34::6b
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-cloud-b4.googledomains.com

  • IPv4: 216.239.38.107
  • IPv6: 2001:4860:4802:38::6b
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-cloud-b3.googledomains.com

  • IPv4: 216.239.36.107
  • IPv6: 2001:4860:4802:36::6b
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• ns-cloud-b1.googledomains.com

  • Status: Responded
  • IP(s): 75.2.70.75, 99.83.190.102
  • TTL: 300 seconds
  • Recursive Queries: Unclear (Response code: NOERROR)
  • TCP Connectivity: Allows TCP connections

• ns-cloud-b2.googledomains.com

  • Status: Responded
  • IP(s): 75.2.70.75, 99.83.190.102
  • TTL: 300 seconds
  • Recursive Queries: Unclear (Response code: NOERROR)
  • TCP Connectivity: Allows TCP connections

• ns-cloud-b4.googledomains.com

  • Status: Responded
  • IP(s): 99.83.190.102, 75.2.70.75
  • TTL: 300 seconds
  • Recursive Queries: Unclear (Response code: NOERROR)
  • TCP Connectivity: Allows TCP connections

• ns-cloud-b3.googledomains.com

  • Status: Responded
  • IP(s): 99.83.190.102, 75.2.70.75
  • TTL: 300 seconds
  • Recursive Queries: Unclear (Response code: NOERROR)
  • TCP Connectivity: Allows TCP connections

ns-cloud-b1.googledomains.com

• Serial: 5
• Refresh: 21600
• Retry: 3600
• Expire: 259200
• Minimum TTL: 300

ns-cloud-b2.googledomains.com

• Serial: 5
• Refresh: 21600
• Retry: 3600
• Expire: 259200
• Minimum TTL: 300

ns-cloud-b4.googledomains.com

• Serial: 5
• Refresh: 21600
• Retry: 3600
• Expire: 259200
• Minimum TTL: 300

ns-cloud-b3.googledomains.com

• Serial: 5
• Refresh: 21600
• Retry: 3600
• Expire: 259200
• Minimum TTL: 300

Serial: 5 - OK

REFRESH: 21600 - OK

RETRY: 3600 - OK

EXPIRE: 259200 - OK

MINIMUM TTL: 300 - Note: Outside recommended range (1-3 hours)

ns-cloud-b1.googledomains.com

• 10 us-smtp-inbound-1.mimecast.com ( 170.10.128.141 )
• 10 us-smtp-inbound-2.mimecast.com ( 205.139.110.242 )

ns-cloud-b2.googledomains.com

• 10 us-smtp-inbound-1.mimecast.com ( 170.10.128.221 )
• 10 us-smtp-inbound-2.mimecast.com ( 205.139.110.221 )

ns-cloud-b4.googledomains.com

• 10 us-smtp-inbound-1.mimecast.com ( 205.139.110.242 )
• 10 us-smtp-inbound-2.mimecast.com ( 205.139.110.242 )

ns-cloud-b3.googledomains.com

• 10 us-smtp-inbound-1.mimecast.com ( 205.139.110.221 )
• 10 us-smtp-inbound-2.mimecast.com ( 170.10.128.221 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 221.128.10.170.in-addr.arpa -> us-smtp-inbound-1.mimecast.com
• 221.110.139.205.in-addr.arpa -> us-smtp-inbound-1.mimecast.com
• 221.128.10.170.in-addr.arpa -> us-smtp-inbound-1.mimecast.com
• 242.110.139.205.in-addr.arpa -> us-smtp-inbound-1.mimecast.com
• 242.110.139.205.in-addr.arpa -> us-smtp-inbound-2.mimecast.com
• 141.128.10.170.in-addr.arpa -> us-smtp-inbound-2.mimecast.com
• 221.110.139.205.in-addr.arpa -> us-smtp-inbound-1.mimecast.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:_spf.google.com include:us._netblocks.mimecast.com include:mktomail.com include:spf.mandrillapp.com include:mail.zendesk.com include:sendgrid.net ip4:3.120.181.200 ip4:3.222.0.24 ip4:198.21.4.52 ip4:167.89.31.27 ip4:167.89.127.244 ip4:3.7.2
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses: 3.120.181.200, 3.222.0.24, 198.21.4.52, 167.89.31.27, 167.89.127.244, 3.7.2
• Includes: _spf.google.com, us._netblocks.mimecast.com, mktomail.com, spf.mandrillapp.com, mail.zendesk.com, sendgrid.net
• DNS Lookups: 11 (Warning: Exceeds limit)
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: Not Present

Warnings:

• SPF record doesn't contain an 'all' mechanism
• SPF record has more than 10 DNS lookups, which may cause lookup limits

• DKIM Records Found: Yes
• Selectors Found: google
• Selector 'google':
  Record: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1Cfl4P6QKGDX1qph4OH8afS0FOkD22McE7Dci3DlO49J9je995u4XtRyCeoNvhD7QGypi2OF3rwEUTtmxKuZPWtBNo8N9Bn6UBwjVeHMREwkI8B+stP9WRxdKzSfMMzXyTJR7MXwOgHbt/8xTZHgxPVT2mDVRiC87J3RyJRMzmAzCq/
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; rua=mailto:[email protected]; ruf=mailto:[email protected];
• Syntax: Valid
• Policy: reject
• RUA (Aggregate Reports): mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]

DMARC External Validation:

• Valid external domains: ag.us.dmarcian.com, fr.us.dmarcian.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.