DNS Report for dayforce.com

• ns1-02.azure-dns.com

  • IPv4: 13.107.236.2
  • IPv6: 2603:1061:0:700::2
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns2-02.azure-dns.net

  • IPv4: 150.171.21.2
  • IPv6: 2620:1ec:8ec:700::2
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns3-02.azure-dns.org

  • IPv4: 204.14.183.2
  • IPv6: 2a01:111:4000:700::2
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns4-02.azure-dns.info

  • IPv4: 208.84.5.2
  • IPv6: 2620:1ec:bda:700::2
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• ns1-02.azure-dns.com

  • Status: Responded
  • IP(s): 20.119.16.26
  • TTL: 300 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns2-02.azure-dns.net

  • Status: Responded
  • IP(s): 20.119.16.26
  • TTL: 300 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns3-02.azure-dns.org

  • Status: Responded
  • IP(s): 20.119.16.26
  • TTL: 300 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns4-02.azure-dns.info

  • Status: Responded
  • IP(s): 20.119.16.26
  • TTL: 300 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

ns1-02.azure-dns.com

• Serial: 2020042301
• Refresh: 3600
• Retry: 300
• Expire: 2419200
• Minimum TTL: 300

ns2-02.azure-dns.net

• Serial: 2020042301
• Refresh: 3600
• Retry: 300
• Expire: 2419200
• Minimum TTL: 300

ns3-02.azure-dns.org

• Serial: 2020042301
• Refresh: 3600
• Retry: 300
• Expire: 2419200
• Minimum TTL: 300

ns4-02.azure-dns.info

• Serial: 2020042301
• Refresh: 3600
• Retry: 300
• Expire: 2419200
• Minimum TTL: 300

Serial: 2020042301 - OK

REFRESH: 3600 - OK

RETRY: 300 - OK

EXPIRE: 2419200 - OK

MINIMUM TTL: 300 - Note: Outside recommended range (1-3 hours)

ns1-02.azure-dns.com

• 10 mxa-0001b201.gslb.pphosted.com ( 67.231.158.158 )
• 10 mxb-0001b201.gslb.pphosted.com ( 67.231.158.158 )

ns2-02.azure-dns.net

• 10 mxa-0001b201.gslb.pphosted.com ( 67.231.158.158 )
• 10 mxb-0001b201.gslb.pphosted.com ( 67.231.158.158 )

ns3-02.azure-dns.org

• 10 mxa-0001b201.gslb.pphosted.com ( 67.231.158.158 )
• 10 mxb-0001b201.gslb.pphosted.com ( 67.231.151.29 )

ns4-02.azure-dns.info

• 10 mxa-0001b201.gslb.pphosted.com ( 67.231.151.29 )
• 10 mxb-0001b201.gslb.pphosted.com ( 67.231.158.158 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 158.158.231.67.in-addr.arpa -> mx0c-0001b201.pphosted.com
• 29.151.231.67.in-addr.arpa -> mx0d-0001b201.pphosted.com
• 29.151.231.67.in-addr.arpa -> mx0d-0001b201.pphosted.com
• 158.158.231.67.in-addr.arpa -> mx0c-0001b201.pphosted.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 mx a include:docebosaas.com include:_spf.salesforce.com include:spf1.dayforce.com include:aspmx.pardot.com include:cust-spf.exacttarget.com ip4:208.84.65.220 ip4:20.5.80.155 ip4:20.5.82.25 ip4:67.231.152.177 ip4:54.211.103.137 ip4:34.196.213.209 ip
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses: 208.84.65.220, 20.5.80.155, 20.5.82.25, 67.231.152.177, 54.211.103.137, 34.196.213.209
• Includes: docebosaas.com, _spf.salesforce.com, spf1.dayforce.com, aspmx.pardot.com, cust-spf.exacttarget.com
• DNS Lookups: 16 (Warning: Exceeds limit)
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: Not Present

Warnings:

• SPF record doesn't contain an 'all' mechanism
• SPF record has more than 10 DNS lookups, which may cause lookup limits

Errors:

• SPF record syntax is invalid

• DKIM Records Found: No

Warnings:

• No DKIM records found for common selectors

• Record: v=DMARC1; p=reject; pct=100; rua=mailto:[email protected];
• Syntax: Valid
• Policy: reject
• Percent: 100%
• RUA (Aggregate Reports): mailto:[email protected]

DMARC External Validation:

• Valid external domains: ag.dmarcian.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.