DNS Report for empower-retirement.com

• ns1.empower.com

  • IPv4: 143.199.24.10
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• ns4.empower.com

  • IPv4: 143.199.28.11
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• ns3.empower.com

  • IPv4: 143.199.26.10
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• ns2.empower.com

  • IPv4: 143.199.28.10
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

Nameserver Count - OK

• ns1.empower.com

  • Status: Responded
  • IP(s): 143.199.140.192
  • TTL: 600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns4.empower.com

  • Status: Responded
  • IP(s): 143.199.140.192
  • TTL: 600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns3.empower.com

  • Status: Responded
  • IP(s): 143.199.140.192
  • TTL: 600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns2.empower.com

  • Status: Responded
  • IP(s): 143.199.140.192
  • TTL: 600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

ns1.empower.com

• Serial: 2022103271
• Refresh: 7200
• Retry: 3600
• Expire: 3628800
• Minimum TTL: 1800

ns4.empower.com

• Serial: 2022103271
• Refresh: 7200
• Retry: 3600
• Expire: 3628800
• Minimum TTL: 1800

ns3.empower.com

• Serial: 2022103271
• Refresh: 7200
• Retry: 3600
• Expire: 3628800
• Minimum TTL: 1800

ns2.empower.com

• Serial: 2022103271
• Refresh: 7200
• Retry: 3600
• Expire: 3628800
• Minimum TTL: 1800

Serial: 2022103271 - OK

REFRESH: 7200 - OK

RETRY: 3600 - OK

EXPIRE: 3628800 - OK

MINIMUM TTL: 1800 - Note: Outside recommended range (1-3 hours)

ns1.empower.com

• 10 mxa-0000fa01.gslb.pphosted.com ( 205.220.160.158 )
• 10 mxb-0000fa01.gslb.pphosted.com ( 205.220.172.157 )

ns4.empower.com

• 10 mxa-0000fa01.gslb.pphosted.com ( 205.220.160.158 )
• 10 mxb-0000fa01.gslb.pphosted.com ( 205.220.172.157 )

ns3.empower.com

• 10 mxa-0000fa01.gslb.pphosted.com ( 205.220.160.158 )
• 10 mxb-0000fa01.gslb.pphosted.com ( 205.220.160.158 )

ns2.empower.com

• 10 mxa-0000fa01.gslb.pphosted.com ( 205.220.160.158 )
• 10 mxb-0000fa01.gslb.pphosted.com ( 205.220.160.158 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 158.160.220.205.in-addr.arpa -> mx0a-0000fa01.pphosted.com
• 157.172.220.205.in-addr.arpa -> mx0b-0000fa01.pphosted.com
• 158.160.220.205.in-addr.arpa -> mx0a-0000fa01.pphosted.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: %{ir}.%{v}.%{d}.spf.has.pphosted.com
• DNS Lookups: 3
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: ~all

Errors:

• SPF record syntax is invalid

• DKIM Records Found: Yes
• Selectors Found: selector1
• Selector 'selector1':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5TJkWHpOuuOT2Kh/PEOcBSmmb/ATtYB+dJijwkm1SUvejysuG/nF2nCYRLtc4uybj/K+h9F4ylm6chRs1CmwcVKmLtFsNxaorF9jIs57mUXOqXt4y3GFgciVSGiHsYX2+ZN0kP3b58Aj3sY7jX8SbRu/hfhb7YeIjJdL57qy5zQIDAQAB;
• Valid Syntax: Yes

• Record: v=DMARC1; p=none; fo=1; rua=mailto:[email protected]; ruf=mailto:[email protected]
• Syntax: Valid
• Policy: none
• RUA (Aggregate Reports): mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]
• Failure Options (fo): 1

DMARC External Validation:

• Valid external domains: emaildefense.proofpoint.com, emaildefense.proofpoint.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.