DNS Report for citizensbankonline.com

• a18-65.akam.net

  • IPv4: 95.101.36.65
  • IPv6: 2600:1480:4800::41
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• a20-66.akam.net

  • IPv4: 95.100.175.66
  • IPv6: 2a02:26f0:67::42
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• a13-64.akam.net

  • IPv4: 2.22.230.64
  • IPv6: 2600:1480:800::40
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• a9-64.akam.net

  • IPv4: 184.85.248.64
  • IPv6: 2a02:26f0:117::40
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• a22-67.akam.net

  • IPv4: 23.211.61.67
  • IPv6: 2600:1480:7800::43
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• a1-203.akam.net

  • IPv4: 193.108.91.203
  • IPv6: 2600:1401:2::cb
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• a18-65.akam.net

  • Status: Responded
  • IP(s): 184.25.36.122
  • TTL: 20 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• a20-66.akam.net

  • Status: Responded
  • IP(s): 184.25.36.122
  • TTL: 20 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• a13-64.akam.net

  • Status: Responded
  • IP(s): 184.25.36.122
  • TTL: 20 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• a9-64.akam.net

  • Status: Responded
  • IP(s): 184.25.36.122
  • TTL: 20 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• a22-67.akam.net

  • Status: Responded
  • IP(s): 184.25.36.122
  • TTL: 20 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• a1-203.akam.net

  • Status: Responded
  • IP(s): 184.25.36.122
  • TTL: 20 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

a18-65.akam.net

• Serial: 2015100691
• Refresh: 21600
• Retry: 3600
• Expire: 1728000
• Minimum TTL: 21600

a20-66.akam.net

• Serial: 2015100691
• Refresh: 21600
• Retry: 3600
• Expire: 1728000
• Minimum TTL: 21600

a13-64.akam.net

• Serial: 2015100691
• Refresh: 21600
• Retry: 3600
• Expire: 1728000
• Minimum TTL: 21600

a9-64.akam.net

• Serial: 2015100691
• Refresh: 21600
• Retry: 3600
• Expire: 1728000
• Minimum TTL: 21600

a22-67.akam.net

• Serial: 2015100691
• Refresh: 21600
• Retry: 3600
• Expire: 1728000
• Minimum TTL: 21600

a1-203.akam.net

• Serial: 2015100691
• Refresh: 21600
• Retry: 3600
• Expire: 1728000
• Minimum TTL: 21600

Serial: 2015100691 - OK

REFRESH: 21600 - OK

RETRY: 3600 - OK

EXPIRE: 1728000 - OK

MINIMUM TTL: 21600 - Note: Outside recommended range (1-3 hours)

a18-65.akam.net

• 10 citizensbankonline-com.mail.protection.outlook.com ( 52.101.9.12 )

a20-66.akam.net

• 10 citizensbankonline-com.mail.protection.outlook.com ( 52.101.42.6 )

a13-64.akam.net

• 10 citizensbankonline-com.mail.protection.outlook.com ( 52.101.41.54 )

a9-64.akam.net

• 10 citizensbankonline-com.mail.protection.outlook.com ( 52.101.11.10 )

a22-67.akam.net

• 10 citizensbankonline-com.mail.protection.outlook.com ( 52.101.9.12 )

a1-203.akam.net

• 10 citizensbankonline-com.mail.protection.outlook.com ( 52.101.41.56 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - Warning: Only one MX record

• 12.9.101.52.in-addr.arpa -> mail-bl0pr05cu00504.inbound.protection.outlook.com
• 6.42.101.52.in-addr.arpa -> mail-mw2pr02cu00306.inbound.protection.outlook.com
• 10.11.101.52.in-addr.arpa -> mail-sa9pr03cu00202.inbound.protection.outlook.com
• 56.41.101.52.in-addr.arpa -> mail-sj0pr21cu00100.inbound.protection.outlook.com
• 54.41.101.52.in-addr.arpa -> mail-sj2pr05cu00506.inbound.protection.outlook.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:_cfgspf.citizensbank.com include:spf.cashedge.com include:clientspf.tsysecom.com -all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: _cfgspf.citizensbank.com, spf.cashedge.com, clientspf.tsysecom.com
• DNS Lookups: 6
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: -all

• DKIM Records Found: No

Warnings:

• No DKIM records found for common selectors

• Record: v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:[email protected]; ruf=mailto:[email protected]
• Syntax: Valid
• Policy: reject
• RUA (Aggregate Reports): mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]
• Failure Options (fo): 1
• Reporting Interval: 3600 seconds

DMARC External Validation:

• Valid external domains: rua.agari.com, ruf.agari.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.