DNS Report for apple.com

• b.ns.apple.com

  • IPv4: 17.253.207.1
  • IPv6: 2620:149:ae7::53
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• a.ns.apple.com

  • IPv4: 17.253.200.1
  • IPv6: 2620:149:ae0::53
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• c.ns.apple.com

  • IPv4: 204.19.119.1
  • IPv6: 2620:171:800:714::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• d.ns.apple.com

  • IPv4: 204.26.57.1
  • IPv6: 2620:171:801:714::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• b.ns.apple.com

  • Status: Responded
  • IP(s): 17.253.144.10
  • TTL: 900 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• a.ns.apple.com

  • Status: Responded
  • IP(s): 17.253.144.10
  • TTL: 900 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• c.ns.apple.com

  • Status: Responded
  • IP(s): 17.253.144.10
  • TTL: 900 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• d.ns.apple.com

  • Status: Responded
  • IP(s): 17.253.144.10
  • TTL: 900 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

b.ns.apple.com

• Serial: 2010131601
• Refresh: 900
• Retry: 900
• Expire: 2016000
• Minimum TTL: 14400

a.ns.apple.com

• Serial: 2010131601
• Refresh: 900
• Retry: 900
• Expire: 2016000
• Minimum TTL: 14400

c.ns.apple.com

• Serial: 2010131601
• Refresh: 900
• Retry: 900
• Expire: 2016000
• Minimum TTL: 14400

d.ns.apple.com

• Serial: 2010131601
• Refresh: 900
• Retry: 900
• Expire: 2016000
• Minimum TTL: 14400

Serial: 2010131601 - OK

REFRESH: 900 - OK

RETRY: 900 - OK

EXPIRE: 2016000 - OK

MINIMUM TTL: 14400 - Note: Outside recommended range (1-3 hours)

b.ns.apple.com

• 10 mx-in.g.apple.com ( 17.32.222.242 )
• 20 mx-in-hfd.apple.com ( 17.57.165.2 )
• 20 mx-in-mdn.apple.com ( 17.32.222.242 )
• 20 mx-in-rno.apple.com ( 17.179.253.242 )
• 20 mx-in-vib.apple.com ( 17.57.170.2 )

a.ns.apple.com

• 10 mx-in.g.apple.com ( 17.32.222.242 )
• 20 mx-in-hfd.apple.com ( 17.57.165.2 )
• 20 mx-in-mdn.apple.com ( 17.32.222.242 )
• 20 mx-in-rno.apple.com ( 17.179.253.242 )
• 20 mx-in-vib.apple.com ( 17.57.170.2 )

c.ns.apple.com

• 10 mx-in.g.apple.com ( 17.32.222.242 )
• 20 mx-in-hfd.apple.com ( 17.57.165.2 )
• 20 mx-in-mdn.apple.com ( 17.32.222.242 )
• 20 mx-in-rno.apple.com ( 17.179.253.242 )
• 20 mx-in-vib.apple.com ( 17.57.170.2 )

d.ns.apple.com

• 10 mx-in.g.apple.com ( 17.32.222.242 )
• 20 mx-in-hfd.apple.com ( 17.57.165.2 )
• 20 mx-in-mdn.apple.com ( 17.32.222.242 )
• 20 mx-in-rno.apple.com ( 17.179.253.242 )
• 20 mx-in-vib.apple.com ( 17.57.170.2 )

MX Record Consistency - OK

MX Record Count - OK

• 242.253.179.17.in-addr.arpa -> mx-in-rno.apple.com
• 2.165.57.17.in-addr.arpa -> mx-in-hfd.apple.com
• 2.170.57.17.in-addr.arpa -> mx-in-vib.apple.com
• 242.222.32.17.in-addr.arpa -> mx-in-mdn.apple.com
• 242.222.32.17.in-addr.arpa -> mx-in-mdn.apple.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:_spf.apple.com include:_spf-txn.apple.com ~all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: _spf.apple.com, _spf-txn.apple.com
• DNS Lookups: 5
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: ~all

• DKIM Records Found: Yes
• Selectors Found: selector1
• Selector 'selector1':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDGh555cVTGrCFyGsKqZyAehAhyNLVzwSCNdtgBSol5e/KboxA6edyqdfl1EL279hNdHM9UWcXcgk/HhKPQdmgzMTA927ZXxrsHxMHjVl7Bid78qOIebr75prj3jxuH8KrZfNe14l/dh6TJZt/SkEncmhbVx/tNy9lrHkN5T7LXjQIDAQAB; n=1024,1483209771,1
• Valid Syntax: Yes

• Record: v=DMARC1; p=quarantine; sp=reject; rua=mailto:[email protected]; ruf=mailto:[email protected];
• Syntax: Valid
• Policy: quarantine
• Subdomain Policy: reject
• RUA (Aggregate Reports): mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]

DMARC External Validation:

• Valid external domains: rua.agari.com, ruf.agari.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.