DNS Report for optimizely.com

• doug.ns.cloudflare.com

  • IPv4: 172.64.33.159, 173.245.59.159, 108.162.193.159
  • IPv6: 2606:4700:58::adf5:3b9f, 2a06:98c1:50::ac40:219f, 2803:f800:50::6ca2:c19f
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• harmony.ns.cloudflare.com

  • IPv4: 172.64.34.146, 108.162.194.146, 162.159.38.146
  • IPv6: 2606:4700:50::a29f:2692, 2803:f800:50::6ca2:c292, 2a06:98c1:50::ac40:2292
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• doug.ns.cloudflare.com

  • Status: Responded
  • IP(s): 217.114.94.2
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• harmony.ns.cloudflare.com

  • Status: Responded
  • IP(s): 217.114.94.2
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

doug.ns.cloudflare.com

• Serial: 2347391285
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

harmony.ns.cloudflare.com

• Serial: 2347391285
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

Serial: 2347391285 - OK

REFRESH: 10000 - OK

RETRY: 2400 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 1800 - Note: Outside recommended range (1-3 hours)

doug.ns.cloudflare.com

• 10 de-smtp-inbound-1.mimecast.com ( 194.104.108.22 )
• 20 de-smtp-inbound-2.mimecast.com ( 194.104.108.22 )

harmony.ns.cloudflare.com

• 10 de-smtp-inbound-1.mimecast.com ( 194.104.108.22 )
• 20 de-smtp-inbound-2.mimecast.com ( 194.104.110.22 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 22.108.104.194.in-addr.arpa -> de-smtp-inbound-1.mimecast.com
• 22.108.104.194.in-addr.arpa -> de-smtp-inbound-1.mimecast.com
• 22.110.104.194.in-addr.arpa -> de-smtp-inbound-1.mimecast.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: %{i}._ip.%{h}._ehlo.%{d}._spf.vali.email
• DNS Lookups: 4
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: ~all

Errors:

• SPF record syntax is invalid

• DKIM Records Found: Yes
• Selectors Found: google
• Selector 'google':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCkROvYqVYBiZJ8sbxlQ2oUBGSuyNPiQciF/6Zh222CIRlpI5ZDZ4VYtf62U0Fx0NSOkrgTa+sRcVXpkxYqupcknR2iVhLecpuaOE3bgJpJN4lFyZsAj9iJ58wtfqAbkwHwLB0zgyBkmqwPvhUt4u8Y7irTnyjgJ8Jo8SfjQzX6hQIDAQAB
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; pct=100; rua=mailto:[email protected],mailto:[email protected],mailto:[email protected],mailto:[email protected]; ruf=mailto:[email protected],mailto:de75fbc2707d464@for
• Syntax: Valid
• Policy: reject
• Percent: 100%
• RUA (Aggregate Reports): mailto:[email protected], mailto:[email protected], mailto:[email protected], mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected], mailto:de75fbc2707d464@for

DMARC External Validation:

• Valid external domains: rep.dmarcanalyzer.com, rep.dmarcanalyzer.com, vali.email, for.dmarcanalyzer.com
• Invalid external domains: for

Warnings:

• Some external domains are not properly configured to receive DMARC reports: for