DNS Report for mozilla.com

• ns7-66.akam.net

  • IPv4: 96.7.49.66
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• ns4-64.akam.net

  • IPv4: 84.53.139.64
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• ns5-65.akam.net

  • IPv4: 184.85.248.65
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• ns1-240.akam.net

  • IPv4: 193.108.91.240
  • IPv6: 2600:1401:2::f0
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• ns7-66.akam.net

  • Status: Responded
  • IP(s): 44.235.246.155, 44.236.72.93, 44.236.48.31
  • TTL: 3600 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• ns4-64.akam.net

  • Status: Responded
  • IP(s): 44.236.72.93, 44.236.48.31, 44.235.246.155
  • TTL: 3600 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• ns5-65.akam.net

  • Status: Responded
  • IP(s): 44.235.246.155, 44.236.72.93, 44.236.48.31
  • TTL: 3600 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• ns1-240.akam.net

  • Status: Responded
  • IP(s): 44.236.72.93, 44.236.48.31, 44.235.246.155
  • TTL: 3600 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

ns7-66.akam.net

• Serial: 2018044398
• Refresh: 180
• Retry: 180
• Expire: 1209600
• Minimum TTL: 60

ns4-64.akam.net

• Serial: 2018044398
• Refresh: 180
• Retry: 180
• Expire: 1209600
• Minimum TTL: 60

ns5-65.akam.net

• Serial: 2018044398
• Refresh: 180
• Retry: 180
• Expire: 1209600
• Minimum TTL: 60

ns1-240.akam.net

• Serial: 2018044398
• Refresh: 180
• Retry: 180
• Expire: 1209600
• Minimum TTL: 60

Serial: 2018044398 - OK

REFRESH: 180 - OK

RETRY: 180 - OK

EXPIRE: 1209600 - OK

MINIMUM TTL: 60 - Note: Outside recommended range (1-3 hours)

ns7-66.akam.net

• 1 aspmx.l.google.com ( 172.253.122.26 )
• 5 alt1.aspmx.l.google.com ( 209.85.202.27 )
• 5 alt2.aspmx.l.google.com ( 64.233.184.26 )
• 10 aspmx3.googlemail.com ( 64.233.184.26 )

ns4-64.akam.net

• 1 aspmx.l.google.com ( 172.253.62.26 )
• 5 alt1.aspmx.l.google.com ( 209.85.202.26 )
• 5 alt2.aspmx.l.google.com ( 64.233.184.26 )
• 10 aspmx3.googlemail.com ( 64.233.184.26 )

ns5-65.akam.net

• 1 aspmx.l.google.com ( 172.253.122.26 )
• 5 alt1.aspmx.l.google.com ( 209.85.202.27 )
• 5 alt2.aspmx.l.google.com ( 64.233.184.26 )
• 10 aspmx3.googlemail.com ( 64.233.184.26 )

ns1-240.akam.net

• 1 aspmx.l.google.com ( 172.253.122.26 )
• 5 alt1.aspmx.l.google.com ( 209.85.202.27 )
• 5 alt2.aspmx.l.google.com ( 64.233.184.26 )
• 10 aspmx3.googlemail.com ( 64.233.184.26 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 27.202.85.209.in-addr.arpa -> dg-in-f27.1e100.net
• 26.184.233.64.in-addr.arpa -> wa-in-f26.1e100.net
• 26.122.253.172.in-addr.arpa -> bh-in-f26.1e100.net
• 26.184.233.64.in-addr.arpa -> wa-in-f26.1e100.net
• 26.202.85.209.in-addr.arpa -> dg-in-f26.1e100.net
• 26.62.253.172.in-addr.arpa -> bc-in-f26.1e100.net

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:mozilla.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:helpscoutemail.com ~all
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: mozilla.com._nspf.vali.email, %{i}._ip.%{h}._ehlo.%{d}._spf.vali.email, helpscoutemail.com
• DNS Lookups: 10
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: ~all

Errors:

• SPF record syntax is invalid

• DKIM Records Found: Yes
• Selectors Found: google
• Selector 'google':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCCcnBWaCz++TEWIbOcNF7r7/0ZeCW7TZKp869GI/AcZ/pnWhiyBTYvNJC/RlTl7w5bZovjEFhIOym7NFnOkotHQngTA4eB2W2xmHN+SLKDmFJ5JafFiRB3+BOZ2rsydjPHdcqLllPkwLgf6i2X76WMW8P2OaHXrtzFKEpNJOyx9wIDAQAB
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; pct=100; adkim=r; aspf=r; rua=mailto:[email protected],mailto:[email protected]
• Syntax: Valid
• Policy: reject
• Percent: 100%
• RUA (Aggregate Reports): mailto:[email protected], mailto:[email protected]
• DKIM Alignment (adkim): Relaxed
• SPF Alignment (aspf): Relaxed

DMARC External Validation:

• Valid external domains: vali.email
• All external domains in your DMARC record are giving permission to send them DMARC reports.