DNS Report for fidelity.com

• a2-65.akam.net

  • IPv4: 95.100.174.65
  • IPv6: 2600:1480:7000::41
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• udns2.cscdns.uk

  • IPv4: 204.74.111.1
  • IPv6: 2001:502:4612::201
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• a1-188.akam.net

  • IPv4: 193.108.91.188
  • IPv6: 2600:1401:2::bc
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• udns1.cscdns.net

  • IPv4: 204.74.66.1
  • IPv6: 2001:502:f3ff::201
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• a8-64.akam.net

  • IPv4: 2.16.40.64
  • IPv6: 2600:1403:a::40
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• a2-65.akam.net

  • Status: Responded
  • IP(s): 23.53.35.141, 23.53.35.134
  • TTL: 20 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• udns2.cscdns.uk

  • Status: Responded
  • IP(s): 75.2.43.78, 99.83.221.176
  • TTL: 3600 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• a1-188.akam.net

  • Status: Responded
  • IP(s): 23.53.35.134, 23.53.35.141
  • TTL: 20 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• udns1.cscdns.net

  • Status: Responded
  • IP(s): 75.2.43.78, 99.83.221.176
  • TTL: 3600 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• a8-64.akam.net

  • Status: Responded
  • IP(s): 23.53.35.141, 23.53.35.134
  • TTL: 20 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

a2-65.akam.net

• Serial: 12101
• Refresh: 300
• Retry: 900
• Expire: 4838400
• Minimum TTL: 3600

udns2.cscdns.uk

• Serial: 12101
• Refresh: 300
• Retry: 900
• Expire: 4838400
• Minimum TTL: 3600

a1-188.akam.net

• Serial: 12101
• Refresh: 300
• Retry: 900
• Expire: 4838400
• Minimum TTL: 3600

udns1.cscdns.net

• Serial: 12101
• Refresh: 300
• Retry: 900
• Expire: 4838400
• Minimum TTL: 3600

a8-64.akam.net

• Serial: 12101
• Refresh: 300
• Retry: 900
• Expire: 4838400
• Minimum TTL: 3600

Serial: 12101 - OK

REFRESH: 300 - OK

RETRY: 900 - OK

EXPIRE: 4838400 - OK

MINIMUM TTL: 3600 - OK

a2-65.akam.net

• 0 fidelity-com.mail.protection.outlook.com ( 52.101.41.56 )

udns2.cscdns.uk

• 0 fidelity-com.mail.protection.outlook.com ( 52.101.41.56 )

a1-188.akam.net

• 0 fidelity-com.mail.protection.outlook.com ( 52.101.41.4 )

udns1.cscdns.net

• 0 fidelity-com.mail.protection.outlook.com ( 52.101.11.2 )

a8-64.akam.net

• 0 fidelity-com.mail.protection.outlook.com ( 52.101.9.2 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - Warning: Only one MX record

• 2.9.101.52.in-addr.arpa -> mail-mn2pr02cu00202.inbound.protection.outlook.com
• 56.41.101.52.in-addr.arpa -> mail-sj0pr21cu00100.inbound.protection.outlook.com
• 2.11.101.52.in-addr.arpa -> mail-sn1pr03cu00102.inbound.protection.outlook.com
• 4.41.101.52.in-addr.arpa -> mail-sj2pr05cu00204.inbound.protection.outlook.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:_fidelitynets.fmr.com include:_fidelitypartners-a.fidelity.com -all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: _fidelitynets.fmr.com, _fidelitypartners-a.fidelity.com
• DNS Lookups: 5
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: -all

• DKIM Records Found: Yes
• Selectors Found: selector1
• Selector 'selector1':
  Record: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1Ic+X7JT5Lkw6OYUnZPSW3IvzmslbOkTV3o7VQy0zA39DyYENKSz8ZEyytc4a2v0uHxevB5P6t8U/SGvS0sL+DDmo+xSN5Iex1tlguouymLcT3TPNXlrOeefrEnkh2OGxZrZYXH3mv80bf1qe9InzYpRciDUcVcJevbnISOkmsmpCcK2krJKvXMFPJWx4RTw
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; fo=1; rua=mailto:[email protected]; ruf=mailto:[email protected]; rf=afrf; pct=100;
• Syntax: Valid
• Policy: reject
• Percent: 100%
• RUA (Aggregate Reports): mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]
• Failure Options (fo): 1

DMARC External Validation:

• Valid external domains: emaildefense.proofpoint.com, emaildefense.proofpoint.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.