DNS Report for deloitte.com

• auth111.ns.uu.net

  • IPv4: 198.6.1.115
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• dbru.br.ns.els-gms.att.net

  • IPv4: 68.94.156.134
  • IPv6: 2001:1890:1ff:9f0:68:94:156:134
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• dmtu.mt.ns.els-gms.att.net

  • IPv4: 99.99.99.134
  • IPv6: 2001:1890:1ff:9f1:99:99:99:134
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• auth120.ns.uu.net

  • IPv4: 198.6.1.154
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

Nameserver Count - OK

• auth111.ns.uu.net

  • Status: Responded
  • IP(s): 170.194.156.208
  • TTL: 3600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• dbru.br.ns.els-gms.att.net

  • Status: Responded
  • IP(s): 170.194.156.208
  • TTL: 3600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• dmtu.mt.ns.els-gms.att.net

  • Status: Responded
  • IP(s): 170.194.156.208
  • TTL: 3600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• auth120.ns.uu.net

  • Status: Responded
  • IP(s): 170.194.156.208
  • TTL: 3600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

auth111.ns.uu.net

• Serial: 677287108
• Refresh: 10800
• Retry: 600
• Expire: 1728000
• Minimum TTL: 900

dbru.br.ns.els-gms.att.net

• Serial: 677287108
• Refresh: 10800
• Retry: 600
• Expire: 1728000
• Minimum TTL: 900

dmtu.mt.ns.els-gms.att.net

• Serial: 677287108
• Refresh: 10800
• Retry: 600
• Expire: 1728000
• Minimum TTL: 900

auth120.ns.uu.net

• Serial: 677287108
• Refresh: 10800
• Retry: 600
• Expire: 1728000
• Minimum TTL: 900

Serial: 677287108 - OK

REFRESH: 10800 - OK

RETRY: 600 - OK

EXPIRE: 1728000 - OK

MINIMUM TTL: 900 - Note: Outside recommended range (1-3 hours)

auth111.ns.uu.net

• 100 mx1.deloitte.iphmx.com ( 68.232.135.188 )
• 100 mx1.hc5291-32.iphmx.com ( 216.71.141.159 )
• 100 mx2.deloitte.iphmx.com ( 68.232.135.188 )
• 100 mx2.hc5291-32.iphmx.com ( 216.71.145.13 )

dbru.br.ns.els-gms.att.net

• 100 mx1.deloitte.iphmx.com ( 68.232.130.225 )
• 100 mx1.hc5291-32.iphmx.com ( 216.71.145.13 )
• 100 mx2.deloitte.iphmx.com ( 68.232.130.225 )
• 100 mx2.hc5291-32.iphmx.com ( 216.71.145.13 )

dmtu.mt.ns.els-gms.att.net

• 100 mx1.deloitte.iphmx.com ( 68.232.135.188 )
• 100 mx1.hc5291-32.iphmx.com ( 216.71.141.159 )
• 100 mx2.deloitte.iphmx.com ( 68.232.130.225 )
• 100 mx2.hc5291-32.iphmx.com ( 216.71.141.159 )

auth120.ns.uu.net

• 100 mx1.deloitte.iphmx.com ( 68.232.130.225 )
• 100 mx1.hc5291-32.iphmx.com ( 216.71.145.13 )
• 100 mx2.deloitte.iphmx.com ( 68.232.135.188 )
• 100 mx2.hc5291-32.iphmx.com ( 216.71.141.159 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 159.141.71.216.in-addr.arpa -> esa.hc5291-32.iphmx.com
• 159.141.71.216.in-addr.arpa -> esa.hc5291-32.iphmx.com
• 225.130.232.68.in-addr.arpa -> esa.deloitte.iphmx.com
• 188.135.232.68.in-addr.arpa -> esa.deloitte.iphmx.com
• 188.135.232.68.in-addr.arpa -> esa.deloitte.iphmx.com
• 13.145.71.216.in-addr.arpa -> esa.hc5291-32.iphmx.com
• 13.145.71.216.in-addr.arpa -> esa.hc5291-32.iphmx.com
• 225.130.232.68.in-addr.arpa -> esa.deloitte.iphmx.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 exists:%{i}.spf.deloitte.iphmx.com ip4:216.71.141.160 ip4:216.71.142.133 ip4:68.232.135.213 ip4:68.232.130.230 ip4:104.146.16.192/27 ip4:104.146.17.128/27 a:mx1.deloitteie.c3s2.iphmx.com a:mx1.deloittetw.iphmx.com exists:%{i}.spf.hc169-40.ca.iphmx.
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses: 216.71.141.160, 216.71.142.133, 68.232.135.213, 68.232.130.230, 104.146.16.192/27, 104.146.17.128/27
• Includes:
• DNS Lookups: 11 (Warning: Exceeds limit)
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: Not Present

Warnings:

• SPF record doesn't contain an 'all' mechanism
• SPF record has more than 10 DNS lookups, which may cause lookup limits

Errors:

• SPF record syntax is invalid

• DKIM Records Found: Yes
• Selectors Found: selector1
• Selector 'selector1':
  Record: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrpZ0AH7J6bHsfmzPQlb9Y23HRoDArUyQhX0ddW8kj2maM3N2nHlekAQQIspwm90gxVyCgw1JjRbttw1vUvKjEY6xYoqXP5GinVs3FJl4xK+4aJLTEzp0jKx9a0B0d6Hme+hl558BGPpwvOueskiULStdacjAvnnHP6rAy4rk9RBqpc+VXVTDyauNFdsPY9bC
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:[email protected]; ruf=mailto:[email protected]
• Syntax: Valid
• Policy: reject
• RUA (Aggregate Reports): mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]
• Failure Options (fo): 1
• Reporting Interval: 3600 seconds

DMARC External Validation:

• Valid external domains: rua.agari.com, ruf.agari.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.