DNS Report for kbb.com

• edns3.ultradns.com

  • IPv4: 204.74.66.3
  • IPv6: 2001:502:f3ff::203
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• edns3.ultradns.net

  • IPv4: 204.74.110.3
  • IPv6: 2610:a1:1014::203
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns52.ultradns2.com

  • IPv4: 204.74.104.52
  • IPv6: 2610:a1:3134::53
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns52.ultradns2.org

  • IPv4: 204.74.106.52
  • IPv6: 2610:a1:3234::53
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• edns3.ultradns.com

  • Status: Responded
  • IP(s): 104.94.113.115
  • TTL: 2 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• edns3.ultradns.net

  • Status: Responded
  • IP(s): 104.94.113.115
  • TTL: 17 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• ns52.ultradns2.com

  • Status: Responded
  • IP(s): 23.38.77.125
  • TTL: 16 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns52.ultradns2.org

  • Status: Responded
  • IP(s): 23.38.77.125
  • TTL: 16 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

edns3.ultradns.com

• Serial: 2014053225
• Refresh: 600
• Retry: 600
• Expire: 604800
• Minimum TTL: 1800

edns3.ultradns.net

• Serial: 2014053225
• Refresh: 600
• Retry: 600
• Expire: 604800
• Minimum TTL: 1800

ns52.ultradns2.com

• Serial: 2014053225
• Refresh: 600
• Retry: 600
• Expire: 604800
• Minimum TTL: 1800

ns52.ultradns2.org

• Serial: 2014053225
• Refresh: 600
• Retry: 600
• Expire: 604800
• Minimum TTL: 1800

Serial: 2014053225 - OK

REFRESH: 600 - OK

RETRY: 600 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 1800 - Note: Outside recommended range (1-3 hours)

edns3.ultradns.com

• 5 mxa-0028a403.gslb.pphosted.com ( 148.163.155.93 )
• 5 mxb-0028a403.gslb.pphosted.com ( 148.163.151.145 )

edns3.ultradns.net

• 5 mxa-0028a403.gslb.pphosted.com ( 148.163.155.93 )
• 5 mxb-0028a403.gslb.pphosted.com ( 148.163.151.145 )

ns52.ultradns2.com

• 5 mxa-0028a403.gslb.pphosted.com ( 148.163.155.93 )
• 5 mxb-0028a403.gslb.pphosted.com ( 148.163.151.145 )

ns52.ultradns2.org

• 5 mxa-0028a403.gslb.pphosted.com ( 148.163.155.93 )
• 5 mxb-0028a403.gslb.pphosted.com ( 148.163.151.145 )

MX Record Consistency - OK

MX Record Count - OK

• 145.151.163.148.in-addr.arpa -> mx0a-0028a403.pphosted.com
• 93.155.163.148.in-addr.arpa -> mx0b-0028a403.pphosted.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com include:spf.protection.outlook.com ~all
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: %{ir}.%{v}.%{d}.spf.has.pphosted.com, spf.protection.outlook.com
• DNS Lookups: 4
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: ~all

Errors:

• SPF record syntax is invalid

• DKIM Records Found: Yes
• Selectors Found: selector1
• Selector 'selector1':
  Record: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKH6YnAXvyKBiboa4XNUdSu5SL+0rnFDKPQMJLciKSSbHmrscsGzBCe0j2j9EwU0El3TGQT81birHj1zeyOckbNFH6kco2l6eCnxvgi9gZNcs6WmNQPXrjQXHgLXM4Xxp4Z7j4jVpqR6HD5gUUUlQQMxFaJ5ov+UC6Sie3mGYD1ID25jTSwYSuapk16yW1jQs
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; fo=1; rua=mailto:[email protected]; ruf=mailto:[email protected]
• Syntax: Valid
• Policy: reject
• RUA (Aggregate Reports): mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]
• Failure Options (fo): 1

DMARC External Validation:

• Valid external domains: emaildefense.proofpoint.com, emaildefense.proofpoint.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.