DNS Report for aarp.org

• pdns83.ultradns.biz

  • IPv4: 156.154.66.83
  • IPv6: 2610:a1:1015::77
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• pdns83.ultradns.org

  • IPv4: 156.154.67.83
  • IPv6: 2001:502:4612::77
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• pdns83.ultradns.net

  • IPv4: 156.154.65.83
  • IPv6: 2610:a1:1014::77
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• pdns83.ultradns.com

  • IPv4: 156.154.64.83
  • IPv6: 2001:502:f3ff::77
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• pdns83.ultradns.biz

  • Status: Responded
  • IP(s): 45.60.152.55, 45.60.172.55
  • TTL: 60 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• pdns83.ultradns.org

  • Status: Responded
  • IP(s): 45.60.152.55, 45.60.172.55
  • TTL: 60 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• pdns83.ultradns.net

  • Status: Responded
  • IP(s): 45.60.172.55, 45.60.152.55
  • TTL: 60 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• pdns83.ultradns.com

  • Status: Responded
  • IP(s): 45.60.152.55, 45.60.172.55
  • TTL: 60 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

pdns83.ultradns.biz

• Serial: 2017094962
• Refresh: 28800
• Retry: 7200
• Expire: 604800
• Minimum TTL: 31

pdns83.ultradns.org

• Serial: 2017094962
• Refresh: 28800
• Retry: 7200
• Expire: 604800
• Minimum TTL: 31

pdns83.ultradns.net

• Serial: 2017094962
• Refresh: 28800
• Retry: 7200
• Expire: 604800
• Minimum TTL: 31

pdns83.ultradns.com

• Serial: 2017094962
• Refresh: 28800
• Retry: 7200
• Expire: 604800
• Minimum TTL: 31

Serial: 2017094962 - OK

REFRESH: 28800 - OK

RETRY: 7200 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 31 - Note: Outside recommended range (1-3 hours)

pdns83.ultradns.biz

• 10 mx1.hc5440-32.iphmx.com ( 23.90.112.12 )
• 10 mx2.hc5440-32.iphmx.com ( 23.90.101.110 )

pdns83.ultradns.org

• 10 mx1.hc5440-32.iphmx.com ( 23.90.101.110 )
• 10 mx2.hc5440-32.iphmx.com ( 23.90.112.12 )

pdns83.ultradns.net

• 10 mx1.hc5440-32.iphmx.com ( 23.90.101.110 )
• 10 mx2.hc5440-32.iphmx.com ( 23.90.112.12 )

pdns83.ultradns.com

• 10 mx1.hc5440-32.iphmx.com ( 23.90.101.110 )
• 10 mx2.hc5440-32.iphmx.com ( 23.90.101.110 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 110.101.90.23.in-addr.arpa -> esa.hc5440-32.iphmx.com
• 110.101.90.23.in-addr.arpa -> esa.hc5440-32.iphmx.com
• 12.112.90.23.in-addr.arpa -> esa.hc5440-32.iphmx.com
• 12.112.90.23.in-addr.arpa -> esa.hc5440-32.iphmx.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 ip4:170.109.0.0/16 include:_spf.salesforce.com include:servers.mcsv.net include:spf.protection.outlook.com exists:%{i}.spf.hc5440-32.iphmx.com include:mailgun.org ~all
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses: 170.109.0.0/16
• Includes: _spf.salesforce.com, servers.mcsv.net, spf.protection.outlook.com, mailgun.org
• DNS Lookups: 9
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: ~all

Errors:

• SPF record syntax is invalid

• DKIM Records Found: Yes
• Selectors Found: selector1
• Selector 'selector1':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCiR396at8kdDALZDR31NaRK7XXXNZHbspryjJzH551XLZIGbXFdxWvXlTwhxcNxmsuSWgzvEa7KbMJArQFii+FLxbI/H1uFU0OYKtZxBbV4qBRHCMcKRIsZ8TLqRFNb0XYzCcK4vgKtwSR3o2XRzdhMZqv7KW9AzpZuZxccRclZwIDAQAB; n=1024,1453373098,1
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; sp=none; fo=1; rua=mailto:[email protected];
• Syntax: Valid
• Policy: reject
• Subdomain Policy: none
• RUA (Aggregate Reports): mailto:[email protected]
• Failure Options (fo): 1

DMARC External Validation:

• Valid external domains: vali.email
• All external domains in your DMARC record are giving permission to send them DMARC reports.