DNS Report for semrush.com

• ns-cloud-e1.googledomains.com

  • IPv4: 216.239.32.110
  • IPv6: 2001:4860:4802:32::6e
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-cloud-e4.googledomains.com

  • IPv4: 216.239.38.110
  • IPv6: 2001:4860:4802:38::6e
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-cloud-e3.googledomains.com

  • IPv4: 216.239.36.110
  • IPv6: 2001:4860:4802:36::6e
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-cloud-e2.googledomains.com

  • IPv4: 216.239.34.110
  • IPv6: 2001:4860:4802:34::6e
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• ns-cloud-e1.googledomains.com

  • Status: Responded
  • IP(s): 34.120.45.191
  • TTL: 600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns-cloud-e4.googledomains.com

  • Status: Responded
  • IP(s): 34.120.45.191
  • TTL: 600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns-cloud-e3.googledomains.com

  • Status: Responded
  • IP(s): 34.120.45.191
  • TTL: 600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns-cloud-e2.googledomains.com

  • Status: Responded
  • IP(s): 34.120.45.191
  • TTL: 600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

ns-cloud-e1.googledomains.com

• Serial: 1
• Refresh: 21600
• Retry: 3600
• Expire: 259200
• Minimum TTL: 300

ns-cloud-e4.googledomains.com

• Serial: 1
• Refresh: 21600
• Retry: 3600
• Expire: 259200
• Minimum TTL: 300

ns-cloud-e3.googledomains.com

• Serial: 1
• Refresh: 21600
• Retry: 3600
• Expire: 259200
• Minimum TTL: 300

ns-cloud-e2.googledomains.com

• Serial: 1
• Refresh: 21600
• Retry: 3600
• Expire: 259200
• Minimum TTL: 300

Serial: 1 - OK

REFRESH: 21600 - OK

RETRY: 3600 - OK

EXPIRE: 259200 - OK

MINIMUM TTL: 300 - Note: Outside recommended range (1-3 hours)

ns-cloud-e1.googledomains.com

• 5 usb-smtp-inbound-1.mimecast.com ( 170.10.150.242 )
• 5 usb-smtp-inbound-2.mimecast.com ( 170.10.150.242 )

ns-cloud-e4.googledomains.com

• 5 usb-smtp-inbound-1.mimecast.com ( 170.10.152.242 )
• 5 usb-smtp-inbound-2.mimecast.com ( 170.10.152.242 )

ns-cloud-e3.googledomains.com

• 5 usb-smtp-inbound-1.mimecast.com ( 170.10.150.242 )
• 5 usb-smtp-inbound-2.mimecast.com ( 170.10.152.242 )

ns-cloud-e2.googledomains.com

• 5 usb-smtp-inbound-1.mimecast.com ( 170.10.152.242 )
• 5 usb-smtp-inbound-2.mimecast.com ( 170.10.152.242 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 242.152.10.170.in-addr.arpa -> usb-smtp-delivery-2.mimecast.com
• 242.150.10.170.in-addr.arpa -> usb-smtp-delivery-2.mimecast.com
• 242.150.10.170.in-addr.arpa -> usb-smtp-delivery-2.mimecast.com
• 242.152.10.170.in-addr.arpa -> usb-smtp-delivery-2.mimecast.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 mx include:_spf.google.com include:usb._netblocks.mimecast.com include:spf.mandrillapp.com include:mktomail.com include:_spf.salesforce.com ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.8.0/21 ip4:192.243.55.0/24 ip4:85.208.98.64/32 ip4:198.2
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses: 205.201.128.0/20, 198.2.128.0/18, 148.105.8.0/21, 192.243.55.0/24, 85.208.98.64/32, 198.2
• Includes: _spf.google.com, usb._netblocks.mimecast.com, spf.mandrillapp.com, mktomail.com, _spf.salesforce.com
• DNS Lookups: 11 (Warning: Exceeds limit)
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: Not Present

Warnings:

• SPF record doesn't contain an 'all' mechanism
• SPF record has more than 10 DNS lookups, which may cause lookup limits

Errors:

• SPF record syntax is invalid

• DKIM Records Found: Yes
• Selectors Found: google
• Selector 'google':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCScgNlUtwFe0X1gDexvBjygvVnUM0lmBeU/EaBMlk5vl01UXVetdpB6iLIj8eRYu4dhKvUoSACgBxC+UqBiccI9kF7v7dyOgww+9oq3aCIaVQnXBIdPh2B0C01FQNnvlGxksy4kUN4nULcmekbYq6wN/D1yuTPmLO0ZaHHYUx6JwIDAQAB
• Valid Syntax: Yes

• Record: v=DMARC1; p=quarantine; pct=50; rua=mailto:[email protected], mailto:[email protected]; ruf=mailto:[email protected]; adkim=r; aspf=r; fo=1; sp=none;
• Syntax: Valid
• Policy: quarantine
• Subdomain Policy: none
• Percent: 50%
• RUA (Aggregate Reports): mailto:[email protected],
• RUF (Forensic Reports): mailto:[email protected]
• Failure Options (fo): 1
• DKIM Alignment (adkim): Relaxed
• SPF Alignment (aspf): Relaxed

DMARC External Validation:

• Valid external domains: ag.us.dmarcian.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.