DNS Report for lever.co

• ns-1281.awsdns-32.org

  • IPv4: 205.251.197.1
  • IPv6: 2600:9000:5305:100::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-1577.awsdns-05.co.uk

  • IPv4: 205.251.198.41
  • IPv6: 2600:9000:5306:2900::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-509.awsdns-63.com

  • IPv4: 205.251.193.253
  • IPv6: 2600:9000:5301:fd00::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-756.awsdns-30.net

  • IPv4: 205.251.194.244
  • IPv6: 2600:9000:5302:f400::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• ns-1281.awsdns-32.org

  • Status: Responded
  • IP(s): 76.223.22.197, 13.248.159.192
  • TTL: 60 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns-1577.awsdns-05.co.uk

  • Status: Responded
  • IP(s): 76.223.22.197, 13.248.159.192
  • TTL: 60 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns-509.awsdns-63.com

  • Status: Responded
  • IP(s): 13.248.159.192, 76.223.22.197
  • TTL: 60 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• ns-756.awsdns-30.net

  • Status: Responded
  • IP(s): 76.223.22.197, 13.248.159.192
  • TTL: 60 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

ns-1281.awsdns-32.org

• Serial: 2
• Refresh: 7200
• Retry: 900
• Expire: 1209600
• Minimum TTL: 86400

ns-1577.awsdns-05.co.uk

• Serial: 2
• Refresh: 7200
• Retry: 900
• Expire: 1209600
• Minimum TTL: 86400

ns-509.awsdns-63.com

• Serial: 2
• Refresh: 7200
• Retry: 900
• Expire: 1209600
• Minimum TTL: 86400

ns-756.awsdns-30.net

• Serial: 2
• Refresh: 7200
• Retry: 900
• Expire: 1209600
• Minimum TTL: 86400

Serial: 2 - OK

REFRESH: 7200 - OK

RETRY: 900 - OK

EXPIRE: 1209600 - OK

MINIMUM TTL: 86400 - Note: Outside recommended range (1-3 hours)

ns-1281.awsdns-32.org

• 10 lever-co.mail.protection.outlook.com ( 52.101.42.13 )

ns-1577.awsdns-05.co.uk

• 10 lever-co.mail.protection.outlook.com ( 52.101.42.18 )

ns-509.awsdns-63.com

• 10 lever-co.mail.protection.outlook.com ( 52.101.42.4 )

ns-756.awsdns-30.net

• 10 lever-co.mail.protection.outlook.com ( 52.101.42.13 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - Warning: Only one MX record

• 4.42.101.52.in-addr.arpa -> mail-co1pr03cu00104.inbound.protection.outlook.com
• 18.42.101.52.in-addr.arpa -> mail-co1pr03cu00302.inbound.protection.outlook.com
• 13.42.101.52.in-addr.arpa -> mail-mw2pr02cu00405.inbound.protection.outlook.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:_spf.google.com include:mail.zendesk.com include:mktomail.com include:_spf0.lever.co include:_spf.salesforce.com include:spf.protection.outlook.com ~all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: _spf.google.com, mail.zendesk.com, mktomail.com, _spf0.lever.co, _spf.salesforce.com, spf.protection.outlook.com
• DNS Lookups: 10
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: ~all

• DKIM Records Found: Yes
• Selectors Found: google
• Selector 'google':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8aUd0wqg9mPl/2f/d3GJQSaTZCzulkEcEsGG5xn/J80Lin0EKftP4wWUnO4m7/LDpIO8c7MZrkGYlnIRcPo+KkWP/zfNno9Mgs5ADj6bB1ug/PecdvpGPDXrbDkZrJbYXTBfch1OWPQjO2wEQaplo2w2B+yHL0hVZmNAQmNMwkwIDAQAB
• Valid Syntax: Yes

• Record: v=DMARC1; p=quarantine; rua=mailto:[email protected]; ruf=mailto:[email protected]; adkim=r; aspf=r; fo=0; sp=reject; pct=100; ri=604800
• Syntax: Valid
• Policy: quarantine
• Subdomain Policy: reject
• Percent: 100%
• RUA (Aggregate Reports): mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]
• Failure Options (fo): 0
• DKIM Alignment (adkim): Relaxed
• SPF Alignment (aspf): Relaxed
• Reporting Interval: 604800 seconds

DMARC External Validation:

• All external domains in your DMARC record are giving permission to send them DMARC reports.