DNS Report for letsencrypt.org

• owen.ns.cloudflare.com

  • IPv4: 172.64.33.219, 173.245.59.219, 108.162.193.219
  • IPv6: 2a06:98c1:50::ac40:21db, 2803:f800:50::6ca2:c1db, 2606:4700:58::adf5:3bdb
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• vera.ns.cloudflare.com

  • IPv4: 172.64.32.147, 108.162.192.147, 173.245.58.147
  • IPv6: 2a06:98c1:50::ac40:2093, 2606:4700:50::adf5:3a93, 2803:f800:50::6ca2:c093
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• owen.ns.cloudflare.com

  • Status: Responded
  • IP(s): 44.219.53.183, 54.161.234.33
  • TTL: 7 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• vera.ns.cloudflare.com

  • Status: Responded
  • IP(s): 44.219.53.183, 54.161.234.33
  • TTL: 9 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

owen.ns.cloudflare.com

• Serial: 2347410188
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

vera.ns.cloudflare.com

• Serial: 2347410188
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

Serial: 2347410188 - OK

REFRESH: 10000 - OK

RETRY: 2400 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 1800 - Note: Outside recommended range (1-3 hours)

owen.ns.cloudflare.com

• 1 aspmx.l.google.com ( 172.253.122.27 )
• 5 alt1.aspmx.l.google.com ( 209.85.202.27 )
• 5 alt2.aspmx.l.google.com ( 64.233.184.26 )
• 10 aspmx2.googlemail.com ( 209.85.202.26 )
• 10 aspmx3.googlemail.com ( 64.233.184.26 )

vera.ns.cloudflare.com

• 1 aspmx.l.google.com ( 172.253.122.27 )
• 5 alt1.aspmx.l.google.com ( 209.85.202.26 )
• 5 alt2.aspmx.l.google.com ( 64.233.184.26 )
• 10 aspmx2.googlemail.com ( 209.85.202.26 )
• 10 aspmx3.googlemail.com ( 64.233.184.26 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 27.202.85.209.in-addr.arpa -> dg-in-f27.1e100.net
• 27.122.253.172.in-addr.arpa -> bh-in-f27.1e100.net
• 26.184.233.64.in-addr.arpa -> wa-in-f26.1e100.net
• 26.202.85.209.in-addr.arpa -> dg-in-f26.1e100.net
• 26.184.233.64.in-addr.arpa -> wa-in-f26.1e100.net
• 26.202.85.209.in-addr.arpa -> dg-in-f26.1e100.net

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 ip4:172.217.192.0/19 ip4:198.2.177.0/24 ip4:35.243.177.105 ip4:69.72.40.94/31 ip4:216.58.192.0/19 ip4:172.217.160.0/20 ip4:172.253.112.0/20 ip4:209.61.151.251 ip4:69.72.47.205 ip4:35.191.0.0/16 ip4:198.2.128.0/24 ip4:198.2.178.0/23 ip4:199.122.123.
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses: 172.217.192.0/19, 198.2.177.0/24, 35.243.177.105, 69.72.40.94/31, 216.58.192.0/19, 172.217.160.0/20, 172.253.112.0/20, 209.61.151.251, 69.72.47.205, 35.191.0.0/16, 198.2.128.0/24, 198.2.178.0/23, 199.122.123.
• Includes:
• DNS Lookups: 0
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: Not Present

Warnings:

• SPF record doesn't contain an 'all' mechanism

• DKIM Records Found: Yes
• Selectors Found: google
• Selector 'google':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCEBV+uacEmkQqqZMwwF+Kv6oEvaPy/zDOancu+DAemWPty49Sc3PR7n+Il8JGnz8j0Ldv95ch9SGNVuvvRh5PRdoPdNsFjrfkxvSQsC7r1fXMxo2/QnYCTA9f42LB1PMgCUaqKPE3muAUWVq+6w07UTyrY9nCvtuXNm4GZvfAbfwIDAQAB
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; rua=mailto:[email protected]; fo=1
• Syntax: Valid
• Policy: reject
• RUA (Aggregate Reports): mailto:[email protected]
• Failure Options (fo): 1

DMARC External Validation:

• Valid external domains: inbound.dmarcdigests.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.