DNS Report for nexcess.net

• ns-1479.awsdns-56.org

  • IPv4: 205.251.197.199
  • IPv6: 2600:9000:5305:c700::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-185.awsdns-23.com

  • IPv4: 205.251.192.185
  • IPv6: 2600:9000:5300:b900::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-1911.awsdns-46.co.uk

  • IPv4: 205.251.199.119
  • IPv6: 2600:9000:5307:7700::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-832.awsdns-40.net

  • IPv4: 205.251.195.64
  • IPv6: 2600:9000:5303:4000::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• ns-1479.awsdns-56.org

  • Status: Responded
  • IP(s): 18.238.25.110, 18.238.25.123, 18.238.25.86, 18.238.25.18
  • TTL: 300 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns-185.awsdns-23.com

  • Status: Responded
  • IP(s): 18.238.25.18, 18.238.25.110, 18.238.25.123, 18.238.25.86
  • TTL: 300 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns-1911.awsdns-46.co.uk

  • Status: Responded
  • IP(s): 18.238.25.110, 18.238.25.18, 18.238.25.123, 18.238.25.86
  • TTL: 300 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns-832.awsdns-40.net

  • Status: Responded
  • IP(s): 18.238.25.18, 18.238.25.86, 18.238.25.123, 18.238.25.110
  • TTL: 300 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

ns-1479.awsdns-56.org

• Serial: 1
• Refresh: 7200
• Retry: 900
• Expire: 1209600
• Minimum TTL: 86400

ns-185.awsdns-23.com

• Serial: 1
• Refresh: 7200
• Retry: 900
• Expire: 1209600
• Minimum TTL: 86400

ns-1911.awsdns-46.co.uk

• Serial: 1
• Refresh: 7200
• Retry: 900
• Expire: 1209600
• Minimum TTL: 86400

ns-832.awsdns-40.net

• Serial: 1
• Refresh: 7200
• Retry: 900
• Expire: 1209600
• Minimum TTL: 86400

Serial: 1 - OK

REFRESH: 7200 - OK

RETRY: 900 - OK

EXPIRE: 1209600 - OK

MINIMUM TTL: 86400 - Note: Outside recommended range (1-3 hours)

ns-1479.awsdns-56.org

• 1 aspmx.l.google.com ( 142.251.16.26 )
• 5 alt1.aspmx.l.google.com ( 209.85.202.26 )
• 5 alt2.aspmx.l.google.com ( 64.233.184.27 )
• 10 alt3.aspmx.l.google.com ( 142.250.27.27 )
• 10 alt4.aspmx.l.google.com ( 142.250.153.26 )

ns-185.awsdns-23.com

• 1 aspmx.l.google.com ( 142.251.16.26 )
• 5 alt1.aspmx.l.google.com ( 209.85.202.26 )
• 5 alt2.aspmx.l.google.com ( 64.233.184.26 )
• 10 alt3.aspmx.l.google.com ( 142.250.27.27 )
• 10 alt4.aspmx.l.google.com ( 142.250.153.26 )

ns-1911.awsdns-46.co.uk

• 1 aspmx.l.google.com ( 142.251.16.26 )
• 5 alt1.aspmx.l.google.com ( 209.85.202.26 )
• 5 alt2.aspmx.l.google.com ( 64.233.184.27 )
• 10 alt3.aspmx.l.google.com ( 142.250.27.27 )
• 10 alt4.aspmx.l.google.com ( 142.250.153.26 )

ns-832.awsdns-40.net

• 1 aspmx.l.google.com ( 172.253.63.27 )
• 5 alt1.aspmx.l.google.com ( 209.85.202.26 )
• 5 alt2.aspmx.l.google.com ( 64.233.184.26 )
• 10 alt3.aspmx.l.google.com ( 142.250.27.27 )
• 10 alt4.aspmx.l.google.com ( 142.250.153.26 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 26.153.250.142.in-addr.arpa -> ea-in-f26.1e100.net
• 26.16.251.142.in-addr.arpa -> bl-in-f26.1e100.net
• 27.27.250.142.in-addr.arpa -> ra-in-f27.1e100.net
• 26.184.233.64.in-addr.arpa -> wa-in-f26.1e100.net
• 27.63.253.172.in-addr.arpa -> bi-in-f27.1e100.net
• 27.184.233.64.in-addr.arpa -> wa-in-f27.1e100.net
• 26.202.85.209.in-addr.arpa -> dg-in-f26.1e100.net

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 ip4:207.32.181.132 ip4:207.32.181.131 ip4:208.69.120.1/24 include:_spf.google.com include:mktomail.com include:relay.mailchannels.net include:_spf.psm.knowbe4.com exists:%{i}._spf.mta.salesforce.com include:spf.sendinblue.com mx ~all
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses: 207.32.181.132, 207.32.181.131, 208.69.120.1/24
• Includes: _spf.google.com, mktomail.com, relay.mailchannels.net, _spf.psm.knowbe4.com, spf.sendinblue.com
• DNS Lookups: 14 (Warning: Exceeds limit)
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: ~all

Warnings:

• SPF record has more than 10 DNS lookups, which may cause lookup limits

Errors:

• SPF record syntax is invalid

• DKIM Records Found: Yes
• Selectors Found: google
• Selector 'google':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCJaR+umRp/r9UwkGPHPz/s7/3eIlCy5yEza1JScu8tMniYIhlIiLYDY90JXIb2yIPZdbPyNA/OXJbvMJ/yWhOZYtiRi3ZDc96xYQ1BEW6UHcC4azqYi2cRtmhCzfMN6+sE2//epL3nufohF8Qdw3qkW40JbIxVwc8hh5kV6Jex9wIDAQAB
• Valid Syntax: Yes

• Record: v=DMARC1; p=none; sp=none; rua=mailto:[email protected]!10m; ruf=mailto:[email protected]!10m; rf=afrf; pct=100; ri=86400
• Syntax: Valid
• Policy: none
• Subdomain Policy: none
• Percent: 100%
• RUA (Aggregate Reports): mailto:[email protected]!10m
• RUF (Forensic Reports): mailto:[email protected]!10m
• Reporting Interval: 86400 seconds

DMARC External Validation:

• Invalid external domains: mailinblue.com!10m, mailinblue.com!10m

Warnings:

• Some external domains are not properly configured to receive DMARC reports: mailinblue.com!10m, mailinblue.com!10m