DNS Report for bcbsla.com

• ns1-04.azure-dns.com

  • IPv4: 13.107.236.4
  • IPv6: 2603:1061:0:700::4
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns2-04.azure-dns.net

  • IPv4: 150.171.21.4
  • IPv6: 2620:1ec:8ec:700::4
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns3-04.azure-dns.org

  • IPv4: 204.14.183.4
  • IPv6: 2a01:111:4000:700::4
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns4-04.azure-dns.info

  • IPv4: 208.84.5.4
  • IPv6: 2620:1ec:bda:700::4
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• ns1-04.azure-dns.com

  • Status: Responded
  • IP(s): 66.248.253.88
  • TTL: 120 seconds
  • Recursive Queries: Unclear (Response code: NOERROR)
  • TCP Connectivity: Allows TCP connections

• ns2-04.azure-dns.net

  • Status: Responded
  • IP(s): 66.248.253.88
  • TTL: 120 seconds
  • Recursive Queries: Unclear (Response code: NOERROR)
  • TCP Connectivity: Allows TCP connections

• ns3-04.azure-dns.org

  • Status: Responded
  • IP(s): 66.248.253.88
  • TTL: 120 seconds
  • Recursive Queries: Unclear (Response code: NOERROR)
  • TCP Connectivity: Allows TCP connections

• ns4-04.azure-dns.info

  • Status: Responded
  • IP(s): 66.248.253.88
  • TTL: 120 seconds
  • Recursive Queries: Unclear (Response code: NOERROR)
  • TCP Connectivity: Allows TCP connections

ns1-04.azure-dns.com

• Serial: 2021062301
• Refresh: 3600
• Retry: 1800
• Expire: 86400
• Minimum TTL: 3600

ns2-04.azure-dns.net

• Serial: 2021062301
• Refresh: 3600
• Retry: 1800
• Expire: 86400
• Minimum TTL: 3600

ns3-04.azure-dns.org

• Serial: 2021062301
• Refresh: 3600
• Retry: 1800
• Expire: 86400
• Minimum TTL: 3600

ns4-04.azure-dns.info

• Serial: 2021062301
• Refresh: 3600
• Retry: 1800
• Expire: 86400
• Minimum TTL: 3600

Serial: 2021062301 - OK

REFRESH: 3600 - OK

RETRY: 1800 - OK

EXPIRE: 86400 - OK

MINIMUM TTL: 3600 - OK

ns1-04.azure-dns.com

• 10 mxa-001dc402.gslb.pphosted.com ( 148.163.150.165 )
• 20 mxb-001dc402.gslb.pphosted.com ( 148.163.150.165 )

ns2-04.azure-dns.net

• 10 mxa-001dc402.gslb.pphosted.com ( 148.163.150.165 )
• 20 mxb-001dc402.gslb.pphosted.com ( 148.163.150.165 )

ns3-04.azure-dns.org

• 10 mxa-001dc402.gslb.pphosted.com ( 148.163.153.77 )
• 20 mxb-001dc402.gslb.pphosted.com ( 148.163.150.165 )

ns4-04.azure-dns.info

• 10 mxa-001dc402.gslb.pphosted.com ( 148.163.153.77 )
• 20 mxb-001dc402.gslb.pphosted.com ( 148.163.150.165 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 165.150.163.148.in-addr.arpa -> mx0a-001dc402.pphosted.com
• 77.153.163.148.in-addr.arpa -> mx0b-001dc402.pphosted.com
• 165.150.163.148.in-addr.arpa -> mx0a-001dc402.pphosted.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 mx ip4:199.117.168.131 ip4:199.117.168.1 include:spf.protection.outlook.com include:mktomail.com include:spf-001dc402.pphosted.com include:_spf.zycus.com include:spf.blu70809.zixworks.com include:spf.mandrillapp.com ~all
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses: 199.117.168.131, 199.117.168.1
• Includes: spf.protection.outlook.com, mktomail.com, spf-001dc402.pphosted.com, _spf.zycus.com, spf.blu70809.zixworks.com, spf.mandrillapp.com
• DNS Lookups: 11 (Warning: Exceeds limit)
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: ~all

Warnings:

• SPF record has more than 10 DNS lookups, which may cause lookup limits

Errors:

• SPF record syntax is invalid

• DKIM Records Found: Yes
• Selectors Found: mandrill
• Selector 'mandrill':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y78dHZj1YeRXXVvWob2OaKynO8/lQIDAQAB;
• Valid Syntax: Yes

• Record: v=DMARC1; p=none; fo=1; rua=mailto:[email protected]; ruf=mailto:[email protected]
• Syntax: Valid
• Policy: none
• RUA (Aggregate Reports): mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]
• Failure Options (fo): 1

DMARC External Validation:

• Valid external domains: emaildefense.proofpoint.com, emaildefense.proofpoint.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.