DNS Report for asos.com

• a2-64.akam.net

  • IPv4: 95.100.174.64
  • IPv6: 2600:1480:7000::40
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• dns3.p09.nsone.net

  • IPv4: 198.51.44.73
  • IPv6: 2620:4d:4000:6259:7:9:0:3
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• dns1.p09.nsone.net

  • IPv4: 198.51.44.9
  • IPv6: 2620:4d:4000:6259:7:9:0:1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• a1-17.akam.net

  • IPv4: 193.108.91.17
  • IPv6: 2600:1401:2::11
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• dns2.p09.nsone.net

  • IPv4: 198.51.45.9
  • IPv6: 2a00:edc0:6259:7:9::2
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• a11-66.akam.net

  • IPv4: 84.53.139.66
  • IPv6: 2600:1480:1::42
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• dns4.p09.nsone.net

  • IPv4: 198.51.45.73
  • IPv6: 2a00:edc0:6259:7:9::4
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• a16-67.akam.net

  • IPv4: 23.211.132.67
  • IPv6: 2600:1406:1b::43
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - Note: 8 nameservers (recommended: 2-7)

• a2-64.akam.net

  • Status: Responded
  • IP(s): 23.217.116.202, 23.217.116.211
  • TTL: 20 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• dns3.p09.nsone.net

  • Status: Responded
  • IP(s): 23.212.251.16, 23.212.251.10
  • TTL: 16 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• dns1.p09.nsone.net

  • Status: Responded
  • IP(s): 23.212.251.16, 23.212.251.10
  • TTL: 16 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• a1-17.akam.net

  • Status: Responded
  • IP(s): 23.217.116.202, 23.217.116.211
  • TTL: 20 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• dns2.p09.nsone.net

  • Status: Responded
  • IP(s): 23.212.251.16, 23.212.251.10
  • TTL: 16 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• a11-66.akam.net

  • Status: Responded
  • IP(s): 23.217.116.211, 23.217.116.202
  • TTL: 20 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• dns4.p09.nsone.net

  • Status: Responded
  • IP(s): 23.212.251.16, 23.212.251.10
  • TTL: 15 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• a16-67.akam.net

  • Status: Responded
  • IP(s): 23.217.116.202, 23.217.116.211
  • TTL: 20 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

a2-64.akam.net

• Serial: 1651578586
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 1800

dns3.p09.nsone.net

• Serial: 1651578586
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 1800

dns1.p09.nsone.net

• Serial: 1651578586
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 1800

a1-17.akam.net

• Serial: 1651578586
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 1800

dns2.p09.nsone.net

• Serial: 1651578586
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 1800

a11-66.akam.net

• Serial: 1651578586
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 1800

dns4.p09.nsone.net

• Serial: 1651578586
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 1800

a16-67.akam.net

• Serial: 1651578586
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 1800

Serial: 1651578586 - OK

REFRESH: 3600 - OK

RETRY: 600 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 1800 - Note: Outside recommended range (1-3 hours)

a2-64.akam.net

• 0 asos-com.mail.protection.outlook.com ( 52.101.73.1 )

dns3.p09.nsone.net

• 0 asos-com.mail.protection.outlook.com ( 52.101.73.26 )

dns1.p09.nsone.net

• 0 asos-com.mail.protection.outlook.com ( 52.101.73.26 )

a1-17.akam.net

• 0 asos-com.mail.protection.outlook.com ( 52.101.68.29 )

dns2.p09.nsone.net

• 0 asos-com.mail.protection.outlook.com ( 52.101.73.1 )

a11-66.akam.net

• 0 asos-com.mail.protection.outlook.com ( 52.101.73.12 )

dns4.p09.nsone.net

• 0 asos-com.mail.protection.outlook.com ( 52.101.68.21 )

a16-67.akam.net

• 0 asos-com.mail.protection.outlook.com ( 52.101.73.12 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - Warning: Only one MX record

• 1.73.101.52.in-addr.arpa -> mail-am3pr04cu00501.inbound.protection.outlook.com
• 12.73.101.52.in-addr.arpa -> mail-am4pr0401cu00104.inbound.protection.outlook.com
• 21.68.101.52.in-addr.arpa -> mail-db4pr02cu00205.inbound.protection.outlook.com
• 29.68.101.52.in-addr.arpa -> mail-dbapr03cu00105.inbound.protection.outlook.com
• 26.73.101.52.in-addr.arpa -> mail-as9pr05cu01302.inbound.protection.outlook.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:spfip.asos.com include:spf-a.rnmk.com include:email-od.com include:spf.protection.outlook.com include:asos.gnatta.com include:em5214.asos.com include:spf.workfront.com -all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: spfip.asos.com, spf-a.rnmk.com, email-od.com, spf.protection.outlook.com, asos.gnatta.com, em5214.asos.com, spf.workfront.com
• DNS Lookups: 15 (Warning: Exceeds limit)
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: -all

Warnings:

• SPF record has more than 10 DNS lookups, which may cause lookup limits

• DKIM Records Found: Yes
• Selectors Found: selector1
• Selector 'selector1':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCam9roOQdpB+xrTkj2nloMgJn8SUkVBPiX1qYLmhS0q0AB+mGZGKUcNfBdfXQOA5xWDANP6e4sz78eQCqXoo4MMEMPr3aJ7dyzbV3BCVdxBqTJalfc49gT1hs2LO66oktzrr6GYqq3UTk2aVhydGuw+RFVK5Zm4YDEIAzTPfX/twIDAQAB; n=1024,1450897983,1
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; aspf=r; adkim=r; rua=mailto:[email protected],mailto:[email protected]; fo=1; sp=none
• Syntax: Valid
• Policy: reject
• Subdomain Policy: none
• RUA (Aggregate Reports): mailto:[email protected], mailto:[email protected]
• Failure Options (fo): 1
• DKIM Alignment (adkim): Relaxed
• SPF Alignment (aspf): Relaxed

DMARC External Validation:

• Valid external domains: vali.email, dmarc.inboxmonster.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.