DNS Report for nespresso.com

• a8-64.akam.net

  • IPv4: 2.16.40.64
  • IPv6: 2600:1403:a::40
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• a14-66.akam.net

  • IPv4: 184.26.161.66
  • IPv6: 2600:1480:1800::42
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• a9-65.akam.net

  • IPv4: 184.85.248.65
  • IPv6: 2a02:26f0:117::41
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• a11-65.akam.net

  • IPv4: 84.53.139.65
  • IPv6: 2600:1480:1::41
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• a16-67.akam.net

  • IPv4: 23.211.132.67
  • IPv6: 2600:1406:1b::43
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• a1-86.akam.net

  • IPv4: 193.108.91.86
  • IPv6: 2600:1401:2::56
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• a8-64.akam.net

  • Status: Responded
  • IP(s): 23.219.8.203
  • TTL: 20 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• a14-66.akam.net

  • Status: Responded
  • IP(s): 23.219.8.203
  • TTL: 20 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• a9-65.akam.net

  • Status: Responded
  • IP(s): 23.219.8.203
  • TTL: 20 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• a11-65.akam.net

  • Status: Responded
  • IP(s): 23.219.8.203
  • TTL: 20 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• a16-67.akam.net

  • Status: Responded
  • IP(s): 23.219.8.203
  • TTL: 20 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• a1-86.akam.net

  • Status: Responded
  • IP(s): 23.219.8.203
  • TTL: 20 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

a8-64.akam.net

• Serial: 2010072827
• Refresh: 3600
• Retry: 1800
• Expire: 604800
• Minimum TTL: 1800

a14-66.akam.net

• Serial: 2010072827
• Refresh: 3600
• Retry: 1800
• Expire: 604800
• Minimum TTL: 1800

a9-65.akam.net

• Serial: 2010072827
• Refresh: 3600
• Retry: 1800
• Expire: 604800
• Minimum TTL: 1800

a11-65.akam.net

• Serial: 2010072827
• Refresh: 3600
• Retry: 1800
• Expire: 604800
• Minimum TTL: 1800

a16-67.akam.net

• Serial: 2010072827
• Refresh: 3600
• Retry: 1800
• Expire: 604800
• Minimum TTL: 1800

a1-86.akam.net

• Serial: 2010072827
• Refresh: 3600
• Retry: 1800
• Expire: 604800
• Minimum TTL: 1800

Serial: 2010072827 - OK

REFRESH: 3600 - OK

RETRY: 1800 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 1800 - Note: Outside recommended range (1-3 hours)

a8-64.akam.net

• 10 nespresso-com.mail.protection.outlook.com ( 52.101.68.5 )

a14-66.akam.net

• 10 nespresso-com.mail.protection.outlook.com ( 52.101.68.25 )

a9-65.akam.net

• 10 nespresso-com.mail.protection.outlook.com ( 52.101.68.5 )

a11-65.akam.net

• 10 nespresso-com.mail.protection.outlook.com ( 52.101.73.11 )

a16-67.akam.net

• 10 nespresso-com.mail.protection.outlook.com ( 52.101.73.15 )

a1-86.akam.net

• 10 nespresso-com.mail.protection.outlook.com ( 52.101.68.18 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - Warning: Only one MX record

• 25.68.101.52.in-addr.arpa -> mail-db8pr02cu00101.inbound.protection.outlook.com
• 11.73.101.52.in-addr.arpa -> mail-am1pr04cu00103.inbound.protection.outlook.com
• 5.68.101.52.in-addr.arpa -> mail-du2pr03cu00105.inbound.protection.outlook.com
• 15.73.101.52.in-addr.arpa -> mail-am9pr04cu00107.inbound.protection.outlook.com
• 18.68.101.52.in-addr.arpa -> mail-db4pr02cu00302.inbound.protection.outlook.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:spf.protection.outlook.com include:_spf.createsend.com ~all
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: %{i}._ip.%{h}._ehlo.%{d}._spf.vali.email, spf.protection.outlook.com, _spf.createsend.com
• DNS Lookups: 7
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: ~all

Errors:

• SPF record syntax is invalid

• DKIM Records Found: Yes
• Selectors Found: default
• Selector 'default':
  Record: v=DKIM1; k=rsa; s=email; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZv/k697LZijnSGns2ZaE22DCVaRBfn24l7IS2IfMR/7fxQ/lPZ+JwWkFBaaHI9C6PBT2A5R7UjNSCm0hPF2COsVx2nOodwNSCLnrQqnZn/mY07BWdrP1nHw4HaWLihzLNnXR6UQkO4mw69t+KpEAlciiFYypb4D8cd4UsljtlPwIDAQAB
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; rua=mailto:[email protected]
• Syntax: Valid
• Policy: reject
• RUA (Aggregate Reports): mailto:[email protected]

DMARC External Validation:

• Valid external domains: vali.email
• All external domains in your DMARC record are giving permission to send them DMARC reports.