DNS Report for okta.com

• edns5.ultradns.biz

  • IPv4: 204.74.67.5
  • IPv6: 2610:a1:1015::205
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• edns5.ultradns.com

  • IPv4: 204.74.66.5
  • IPv6: 2001:502:f3ff::205
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• edns5.ultradns.net

  • IPv4: 204.74.110.5
  • IPv6: 2610:a1:1014::205
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• edns5.ultradns.org

  • IPv4: 204.74.111.5
  • IPv6: 2001:502:4612::205
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-1459.awsdns-54.org

  • IPv4: 205.251.197.179
  • IPv6: 2600:9000:5305:b300::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-1563.awsdns-03.co.uk

  • IPv4: 205.251.198.27
  • IPv6: 2600:9000:5306:1b00::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-285.awsdns-35.com

  • IPv4: 205.251.193.29
  • IPv6: 2600:9000:5301:1d00::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-684.awsdns-21.net

  • IPv4: 205.251.194.172
  • IPv6: 2600:9000:5302:ac00::1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-cloud-a1.googledomains.com

  • IPv4: 216.239.32.106
  • IPv6: 2001:4860:4802:32::6a
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-cloud-a2.googledomains.com

  • IPv4: 216.239.34.106
  • IPv6: 2001:4860:4802:34::6a
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-cloud-a3.googledomains.com

  • IPv4: 216.239.36.106
  • IPv6: 2001:4860:4802:36::6a
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns-cloud-a4.googledomains.com

  • IPv4: 216.239.38.106
  • IPv6: 2001:4860:4802:38::6a
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - Note: 12 nameservers (recommended: 2-7)

• edns5.ultradns.biz

  • Status: Responded
  • IP(s): 44.210.31.21
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• edns5.ultradns.com

  • Status: Responded
  • IP(s): 44.210.31.21
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• edns5.ultradns.net

  • Status: Responded
  • IP(s): 44.210.31.21
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• edns5.ultradns.org

  • Status: Responded
  • IP(s): 44.210.31.21
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• ns-1459.awsdns-54.org

  • Status: Responded
  • IP(s): 44.210.31.21
  • TTL: 300 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• ns-1563.awsdns-03.co.uk

  • Status: Responded
  • IP(s): 44.210.31.21
  • TTL: 300 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns-285.awsdns-35.com

  • Status: Responded
  • IP(s): 44.210.31.21
  • TTL: 300 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns-684.awsdns-21.net

  • Status: Responded
  • IP(s): 44.210.31.21
  • TTL: 300 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns-cloud-a1.googledomains.com

  • Status: Responded
  • IP(s): 44.210.31.21
  • TTL: 300 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• ns-cloud-a2.googledomains.com

  • Status: Responded
  • IP(s): 44.210.31.21
  • TTL: 300 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• ns-cloud-a3.googledomains.com

  • Status: Responded
  • IP(s): 44.210.31.21
  • TTL: 300 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• ns-cloud-a4.googledomains.com

  • Status: Responded
  • IP(s): 44.210.31.21
  • TTL: 300 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

edns5.ultradns.biz

• Serial: 5155808
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 60

edns5.ultradns.com

• Serial: 5155808
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 60

edns5.ultradns.net

• Serial: 5155808
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 60

edns5.ultradns.org

• Serial: 5155808
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 60

ns-1459.awsdns-54.org

• Serial: 1664
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 60

ns-1563.awsdns-03.co.uk

• Serial: 1664
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 60

ns-285.awsdns-35.com

• Serial: 1664
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 60

ns-684.awsdns-21.net

• Serial: 1664
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 60

ns-cloud-a1.googledomains.com

• Serial: 1
• Refresh: 21600
• Retry: 3600
• Expire: 259200
• Minimum TTL: 300

ns-cloud-a2.googledomains.com

• Serial: 1
• Refresh: 21600
• Retry: 3600
• Expire: 259200
• Minimum TTL: 300

ns-cloud-a3.googledomains.com

• Serial: 1
• Refresh: 21600
• Retry: 3600
• Expire: 259200
• Minimum TTL: 300

ns-cloud-a4.googledomains.com

• Serial: 1
• Refresh: 21600
• Retry: 3600
• Expire: 259200
• Minimum TTL: 300

Serial - Warning: Inconsistent across nameservers

REFRESH - Warning: Inconsistent across nameservers

RETRY - Warning: Inconsistent across nameservers

EXPIRE - Warning: Inconsistent across nameservers

MINIMUM TTL - Warning: Inconsistent across nameservers

edns5.ultradns.biz

• 10 mxa-00553301.gslb.pphosted.com ( 205.220.164.21 )
• 10 mxb-00553301.gslb.pphosted.com ( 205.220.164.21 )

edns5.ultradns.com

• 10 mxa-00553301.gslb.pphosted.com ( 205.220.164.21 )
• 10 mxb-00553301.gslb.pphosted.com ( 205.220.176.21 )

edns5.ultradns.net

• 10 mxa-00553301.gslb.pphosted.com ( 205.220.164.21 )
• 10 mxb-00553301.gslb.pphosted.com ( 205.220.176.21 )

edns5.ultradns.org

• 10 mxa-00553301.gslb.pphosted.com ( 205.220.164.21 )
• 10 mxb-00553301.gslb.pphosted.com ( 205.220.176.21 )

ns-1459.awsdns-54.org

• 10 mxa-00553301.gslb.pphosted.com ( 205.220.164.21 )
• 10 mxb-00553301.gslb.pphosted.com ( 205.220.164.21 )

ns-1563.awsdns-03.co.uk

• 10 mxa-00553301.gslb.pphosted.com ( 205.220.164.21 )
• 10 mxb-00553301.gslb.pphosted.com ( 205.220.164.21 )

ns-285.awsdns-35.com

• 10 mxa-00553301.gslb.pphosted.com ( 205.220.164.21 )
• 10 mxb-00553301.gslb.pphosted.com ( 205.220.176.21 )

ns-684.awsdns-21.net

• 10 mxa-00553301.gslb.pphosted.com ( 205.220.164.21 )
• 10 mxb-00553301.gslb.pphosted.com ( 205.220.164.21 )

ns-cloud-a1.googledomains.com

• 10 mxa-00553301.gslb.pphosted.com ( 205.220.164.21 )
• 10 mxb-00553301.gslb.pphosted.com ( 205.220.176.21 )

ns-cloud-a2.googledomains.com

• 10 mxa-00553301.gslb.pphosted.com ( 205.220.164.21 )
• 10 mxb-00553301.gslb.pphosted.com ( 205.220.176.21 )

ns-cloud-a3.googledomains.com

• 10 mxa-00553301.gslb.pphosted.com ( 205.220.164.21 )
• 10 mxb-00553301.gslb.pphosted.com ( 205.220.164.21 )

ns-cloud-a4.googledomains.com

• 10 mxa-00553301.gslb.pphosted.com ( 205.220.164.21 )
• 10 mxb-00553301.gslb.pphosted.com ( 205.220.164.21 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 21.164.220.205.in-addr.arpa -> mx0a-00553301.pphosted.com
• 21.164.220.205.in-addr.arpa -> mx0a-00553301.pphosted.com
• 21.176.220.205.in-addr.arpa -> mx0b-00553301.pphosted.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:spf1.okta.com include:mailsenders.netsuite.com include:amazonses.com include:mktomail.com include:mg-spf.greenhouse.io include:_netblocks.google.com include:_netblocks2.google.com
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: spf1.okta.com, mailsenders.netsuite.com, amazonses.com, mktomail.com, mg-spf.greenhouse.io, _netblocks.google.com, _netblocks2.google.com
• DNS Lookups: 12 (Warning: Exceeds limit)
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: Not Present

Warnings:

• SPF record doesn't contain an 'all' mechanism
• SPF record has more than 10 DNS lookups, which may cause lookup limits

Errors:

• SPF record syntax is invalid

• DKIM Records Found: No

Warnings:

• No DKIM records found for common selectors

• Record: v=DMARC1; p=reject; rua=mailto:[email protected]; ruf=mailto:[email protected];
• Syntax: Valid
• Policy: reject
• RUA (Aggregate Reports): mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]

DMARC External Validation:

• Valid external domains: emaildefense.proofpoint.com, emaildefense.proofpoint.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.