DNS Report for pfizer.com

• ns4.p201.dns.oraclecloud.net

  • IPv4: 108.59.172.201
  • IPv6: 2600:2000:2130::c9
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns3.p201.dns.oraclecloud.net

  • IPv4: 108.59.170.201
  • IPv6: 2600:2000:2120::c9
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns1.p201.dns.oraclecloud.net

  • IPv4: 108.59.166.201
  • IPv6: 2600:2000:2100::c9
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns2.p201.dns.oraclecloud.net

  • IPv4: 108.59.168.201
  • IPv6: 2600:2000:2110::c9
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• ns4.p201.dns.oraclecloud.net

  • Status: Responded
  • IP(s): 172.64.152.162, 104.18.35.94
  • TTL: 39 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• ns3.p201.dns.oraclecloud.net

  • Status: Responded
  • IP(s): 172.64.152.162, 104.18.35.94
  • TTL: 163 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• ns1.p201.dns.oraclecloud.net

  • Status: Responded
  • IP(s): 172.64.152.162, 104.18.35.94
  • TTL: 163 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• ns2.p201.dns.oraclecloud.net

  • Status: Responded
  • IP(s): 172.64.152.162, 104.18.35.94
  • TTL: 162 seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

ns4.p201.dns.oraclecloud.net

• Serial: 601
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 1800

ns3.p201.dns.oraclecloud.net

• Serial: 601
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 1800

ns1.p201.dns.oraclecloud.net

• Serial: 601
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 1800

ns2.p201.dns.oraclecloud.net

• Serial: 601
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 1800

Serial: 601 - OK

REFRESH: 3600 - OK

RETRY: 600 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 1800 - Note: Outside recommended range (1-3 hours)

ns4.p201.dns.oraclecloud.net

• 10 mxa-00013f02.gslb.pphosted.com ( 208.86.201.12 )
• 10 mxb-00013f02.gslb.pphosted.com ( 208.84.65.12 )

ns3.p201.dns.oraclecloud.net

• 10 mxa-00013f02.gslb.pphosted.com ( 208.86.201.12 )
• 10 mxb-00013f02.gslb.pphosted.com ( 208.86.201.12 )

ns1.p201.dns.oraclecloud.net

• 10 mxa-00013f02.gslb.pphosted.com ( 208.84.65.12 )
• 10 mxb-00013f02.gslb.pphosted.com ( 208.84.65.12 )

ns2.p201.dns.oraclecloud.net

• 10 mxa-00013f02.gslb.pphosted.com ( 208.84.65.12 )
• 10 mxb-00013f02.gslb.pphosted.com ( 208.84.65.12 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 12.65.84.208.in-addr.arpa -> mx0a-00013f02.pphosted.com
• 12.65.84.208.in-addr.arpa -> mx0a-00013f02.pphosted.com
• 12.201.86.208.in-addr.arpa -> mx0b-00013f02.pphosted.com
• 12.201.86.208.in-addr.arpa -> mx0b-00013f02.pphosted.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:_spf.pfizer.com include:spf1.pfizer.com include:_spf2.pfizer.com include:_spf3.pfizer.com include:mktomail.com include:_spf.mailgun.org include:_spf.eu.mailgun.org include:amazonses.com -all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: _spf.pfizer.com, spf1.pfizer.com, _spf2.pfizer.com, _spf3.pfizer.com, mktomail.com, _spf.mailgun.org, _spf.eu.mailgun.org, amazonses.com
• DNS Lookups: 14 (Warning: Exceeds limit)
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: -all

Warnings:

• SPF record has more than 10 DNS lookups, which may cause lookup limits

• DKIM Records Found: Yes
• Selectors Found: mdaemon
• Selector 'mdaemon':
  Record: v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCx/FkFAPENp7+tLK+IUV+dW9ZymvUx23UNykZb5HqlYPOnIm/NPajCfO95OBnmODUpDMtXxyxPLDP+QRsPNHJH3svACsnG9+fKgzb5eyxa2MqatayOrqgHC45wrZAkSh0hTzfENigWJJ/0rgy7QhDKm0eQcs1C+WNNgMrByjuiEQIDAQAB
• Valid Syntax: No

Warnings:

• DKIM record for selector 'mdaemon' may be incomplete

• Record: v=DMARC1; p=reject; fo=1; rua=mailto:[email protected],mailto:[email protected]; ruf=mailto:[email protected],mailto:[email protected]
• Syntax: Valid
• Policy: reject
• RUA (Aggregate Reports): mailto:[email protected], mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected], mailto:[email protected]
• Failure Options (fo): 1

DMARC External Validation:

• Valid external domains: emaildefense.proofpoint.com, emaildefense.proofpoint.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.