DNS Report for shield.com

• cheryl.ns.cloudflare.com

  • IPv4: 172.64.32.83, 173.245.58.83, 108.162.192.83
  • IPv6: 2803:f800:50::6ca2:c053, 2a06:98c1:50::ac40:2053, 2606:4700:50::adf5:3a53
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• james.ns.cloudflare.com

  • IPv4: 172.64.33.178, 108.162.193.178, 173.245.59.178
  • IPv6: 2606:4700:58::adf5:3bb2, 2a06:98c1:50::ac40:21b2, 2803:f800:50::6ca2:c1b2
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• cheryl.ns.cloudflare.com

  • Status: Responded
  • IP(s): 34.234.52.18, 52.206.163.162, 3.233.126.24
  • TTL: 54 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• james.ns.cloudflare.com

  • Status: Responded
  • IP(s): 3.233.126.24, 34.234.52.18, 52.206.163.162
  • TTL: 12 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

cheryl.ns.cloudflare.com

• Serial: 2349658329
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

james.ns.cloudflare.com

• Serial: 2349658329
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

Serial: 2349658329 - OK

REFRESH: 10000 - OK

RETRY: 2400 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 1800 - Note: Outside recommended range (1-3 hours)

cheryl.ns.cloudflare.com

• 10 aspmx.l.google.com ( 142.251.111.26 )
• 20 alt1.aspmx.l.google.com ( 209.85.202.27 )
• 30 alt2.aspmx.l.google.com ( 64.233.184.26 )
• 40 aspmx2.googlemail.com ( 209.85.202.27 )
• 50 aspmx3.googlemail.com ( 64.233.184.27 )

james.ns.cloudflare.com

• 10 aspmx.l.google.com ( 142.251.167.27 )
• 20 alt1.aspmx.l.google.com ( 209.85.202.27 )
• 30 alt2.aspmx.l.google.com ( 64.233.184.26 )
• 40 aspmx2.googlemail.com ( 209.85.202.26 )
• 50 aspmx3.googlemail.com ( 64.233.184.27 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 27.167.251.142.in-addr.arpa -> ww-in-f27.1e100.net
• 26.184.233.64.in-addr.arpa -> wa-in-f26.1e100.net
• 27.184.233.64.in-addr.arpa -> wa-in-f27.1e100.net
• 27.202.85.209.in-addr.arpa -> dg-in-f27.1e100.net
• 27.202.85.209.in-addr.arpa -> dg-in-f27.1e100.net
• 26.202.85.209.in-addr.arpa -> dg-in-f26.1e100.net
• 26.111.251.142.in-addr.arpa -> bk-in-f26.1e100.net

PTR Records - OK

• Signed: Yes
• Validation: Failed
• DNSKEY Records: 2
• DS Records in parent zone: 0
• DS at Parent: False

DNSSEC - Warning: Validation failed

Issue: No DS record found at the parent zone.

Action: Please add the DS record to both your DNS server and domain registrar.

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:spf.mandrillapp.com include:_spf.google.com include:_spf.salesforce.com. ~all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: spf.mandrillapp.com, _spf.google.com, _spf.salesforce.com.
• DNS Lookups: 7
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: ~all

• DKIM Records Found: Yes
• Selectors Found: google
• Selector 'google':
  Record: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk06GW2cTHnq+wjNhNsH/3u63wWYyQ7NJk3Qle+FQ9IszjXKLsL8Hbzm9eou8QIcnDy0tAa1CMW4DRkPErT0iWjfoH37RuY3FobCLK33aBwpSYKYNkN/OrQSif9n3lAYqpVgQkKCxNfv6b/kfH2jm0RYymJKGe9XoMVWvkaVaSSX4wPUWCniB7RX63Prd8xN4N
• Valid Syntax: Yes

• Record: v=DMARC1;p=reject
• Syntax: Valid
• Policy: reject
• RUA (Aggregate Reports):

DMARC External Validation:

• All external domains in your DMARC record are giving permission to send them DMARC reports.