DNS mail check report: google.com

Generated: Fri, 17 Jul 2026 15:06:11 UTC

Summary


Status	ERRORS
Errors	1
Warnings	10
Passed checks	8

Errors to fix

❌ DKIM record missing for selector 'google' at google._domainkey.google.com

Warnings

⚠️ SPF uses softfail ~all — consider -all for stricter policy
⚠️ FCrdNS mismatch for smtp.google.com: A=smtp.google.com, PTR=wn-in-f27.1e100.net. (expected matching hostname)
⚠️ FCrdNS mismatch for smtp.google.com: A=smtp.google.com, PTR=wn-in-f26.1e100.net. (expected matching hostname)
⚠️ FCrdNS mismatch for smtp.google.com: A=smtp.google.com, PTR=wo-in-f27.1e100.net. (expected matching hostname)
⚠️ FCrdNS mismatch for smtp.google.com: A=smtp.google.com, PTR=wm-in-f26.1e100.net. (expected matching hostname)
⚠️ FCrdNS mismatch for smtp.google.com: A=smtp.google.com, PTR=wo-in-f26.1e100.net. (expected matching hostname)
⚠️ FCrdNS mismatch for smtp.google.com: A=smtp.google.com, PTR=wo-in-f26.1e100.net. (expected matching hostname)
⚠️ FCrdNS mismatch for smtp.google.com: A=smtp.google.com, PTR=wm-in-f27.1e100.net. (expected matching hostname)
⚠️ FCrdNS mismatch for smtp.google.com: A=smtp.google.com, PTR=wn-in-f27.1e100.net. (expected matching hostname)
⚠️ FCrdNS mismatch for smtp.google.com: A=smtp.google.com, PTR=wn-in-f26.1e100.net. (expected matching hostname)

Authoritative nameservers

Nameserver	IP
ns3.google.com	216.239.36.10
ns2.google.com	216.239.34.10
ns4.google.com	216.239.38.10
ns1.google.com	216.239.32.10

Record consistency across nameservers

Each row shows whether all authoritative NS return the same data.

Record	Consistent	Value (from first NS)
SPF	✓	`v=spf1 include:_spf.google.com ~all`
DMARC	✓	`v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com`
MX	✓	`10 smtp.google.com.`
DKIM (google) TXT	✓	`(empty)`
DKIM (google) CNAME	✓	`(empty)`

MX host resolution

MX host	A	PTR	FCrdNS
smtp.google.com	74.125.71.27 74.125.71.26 74.125.133.27 64.233.166.26 74.125.133.26 2a00:1450:400c:c07::1a 2a00:1450:400c:c09::1b 2a00:1450:400c:c02::1b 2a00:1450:400c:c02::1a	wn-in-f27.1e100.net.	✗

Per-nameserver records

NS 216.239.36.10

SPF:

v=spf1 include:_spf.google.com ~all

Other apex TXT (non-SPF):

globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8=
Z29vZ2xl
docusign=1b0a6754-49b1-4db5-8540-d2c12664b289
docusign=05958488-4752-4ef2-95eb-aa7ba8a3bd0e
google-site-verification=wD8N7i1JTNTkezJ49swvWW48f8_9xveREV4oB-0Hf5o
google-site-verification=TV9-DBe4R80X4v0M4U_bd_J9cpOJM0nikft0jAgjmsQ
work-accounts-domain-verification=Tcj6JjIMZOw2KsSEw2Nt2rLae89tN6
cisco-ci-domain-verification=47c38bc8c4b74b7233e9053220c1bbe76bcc1cd33c7acf7acd36cd6a5332004b
onetrust-domain-verification=6d685f1d41a94696ad7ef771f68993e0
apple-domain-verification=30afIBcvSuDV2PLX
onetrust-domain-verification=0d477fe608074e6f9c12bca7826035cc
MS=E4A68B9AB2BB9670BCE15412F62916164C0B20BB
facebook-domain-verification=22rm551cu4k0ab0bxsw536tlds4h95
google-site-verification=4ibFUgB-wXLQ_S7vsXVomSTVamuOXBiVAzpR5IZ87D0

DMARC:

v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com

MX:

10 smtp.google.com.

DKIM (google):

(empty)

NS 216.239.34.10

SPF:

v=spf1 include:_spf.google.com ~all

Other apex TXT (non-SPF):

docusign=05958488-4752-4ef2-95eb-aa7ba8a3bd0e
facebook-domain-verification=22rm551cu4k0ab0bxsw536tlds4h95
google-site-verification=wD8N7i1JTNTkezJ49swvWW48f8_9xveREV4oB-0Hf5o
google-site-verification=4ibFUgB-wXLQ_S7vsXVomSTVamuOXBiVAzpR5IZ87D0
work-accounts-domain-verification=Tcj6JjIMZOw2KsSEw2Nt2rLae89tN6
Z29vZ2xl
onetrust-domain-verification=6d685f1d41a94696ad7ef771f68993e0
docusign=1b0a6754-49b1-4db5-8540-d2c12664b289
MS=E4A68B9AB2BB9670BCE15412F62916164C0B20BB
onetrust-domain-verification=0d477fe608074e6f9c12bca7826035cc
cisco-ci-domain-verification=47c38bc8c4b74b7233e9053220c1bbe76bcc1cd33c7acf7acd36cd6a5332004b
globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8=
apple-domain-verification=30afIBcvSuDV2PLX
google-site-verification=TV9-DBe4R80X4v0M4U_bd_J9cpOJM0nikft0jAgjmsQ

DMARC:

v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com

MX:

10 smtp.google.com.

DKIM (google):

(empty)

NS 216.239.38.10

SPF:

v=spf1 include:_spf.google.com ~all

Other apex TXT (non-SPF):

google-site-verification=TV9-DBe4R80X4v0M4U_bd_J9cpOJM0nikft0jAgjmsQ
Z29vZ2xl
work-accounts-domain-verification=Tcj6JjIMZOw2KsSEw2Nt2rLae89tN6
google-site-verification=4ibFUgB-wXLQ_S7vsXVomSTVamuOXBiVAzpR5IZ87D0
facebook-domain-verification=22rm551cu4k0ab0bxsw536tlds4h95
google-site-verification=wD8N7i1JTNTkezJ49swvWW48f8_9xveREV4oB-0Hf5o
apple-domain-verification=30afIBcvSuDV2PLX
MS=E4A68B9AB2BB9670BCE15412F62916164C0B20BB
cisco-ci-domain-verification=47c38bc8c4b74b7233e9053220c1bbe76bcc1cd33c7acf7acd36cd6a5332004b
onetrust-domain-verification=6d685f1d41a94696ad7ef771f68993e0
globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8=
docusign=05958488-4752-4ef2-95eb-aa7ba8a3bd0e
docusign=1b0a6754-49b1-4db5-8540-d2c12664b289
onetrust-domain-verification=0d477fe608074e6f9c12bca7826035cc

DMARC:

v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com

MX:

10 smtp.google.com.

DKIM (google):

(empty)

NS 216.239.32.10

SPF:

v=spf1 include:_spf.google.com ~all

Other apex TXT (non-SPF):

google-site-verification=wD8N7i1JTNTkezJ49swvWW48f8_9xveREV4oB-0Hf5o
globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8=
docusign=1b0a6754-49b1-4db5-8540-d2c12664b289
cisco-ci-domain-verification=47c38bc8c4b74b7233e9053220c1bbe76bcc1cd33c7acf7acd36cd6a5332004b
apple-domain-verification=30afIBcvSuDV2PLX
facebook-domain-verification=22rm551cu4k0ab0bxsw536tlds4h95
google-site-verification=4ibFUgB-wXLQ_S7vsXVomSTVamuOXBiVAzpR5IZ87D0
onetrust-domain-verification=6d685f1d41a94696ad7ef771f68993e0
google-site-verification=TV9-DBe4R80X4v0M4U_bd_J9cpOJM0nikft0jAgjmsQ
MS=E4A68B9AB2BB9670BCE15412F62916164C0B20BB
onetrust-domain-verification=0d477fe608074e6f9c12bca7826035cc
work-accounts-domain-verification=Tcj6JjIMZOw2KsSEw2Nt2rLae89tN6
Z29vZ2xl
docusign=05958488-4752-4ef2-95eb-aa7ba8a3bd0e

DMARC:

v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com

MX:

10 smtp.google.com.

DKIM (google):

(empty)

Passed checks

✅ SPF records are consistent across all 4 authoritative nameservers
✅ DMARC records are consistent across all 4 authoritative nameservers
✅ MX records are consistent across all 4 authoritative nameservers
✅ DKIM selector 'google' is consistent across all 4 authoritative nameservers
✅ SPF record present: v=spf1 include:_spf.google.com ~all
✅ DMARC record present: v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com
✅ DMARC policy is p=reject (strictest)
✅ MX records present: 10 smtp.google.com.

Generated by webdns Mail DNS check