DNS Report for protonmail.com

• ns2.protonmail.com

  • IPv4: 176.119.200.150
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• ns3.protonmail.com

  • IPv4: 205.132.47.1
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• ns1.protonmail.com

  • IPv4: 185.70.42.150
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

Nameserver Count - OK

• ns2.protonmail.com

  • Status: Responded
  • IP(s): 185.70.42.12
  • TTL: 1200 seconds
  • Recursive Queries: Error checking recursive queries: The DNS operation timed out.
  • TCP Connectivity: TCP connection failed:

• ns3.protonmail.com

  • Status: Responded
  • IP(s): 185.70.42.12
  • TTL: 1200 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns1.protonmail.com

  • Status: Responded
  • IP(s): 185.70.42.12
  • TTL: 1200 seconds
  • Recursive Queries: Error checking recursive queries: The DNS operation timed out.
  • TCP Connectivity: TCP connection failed:

ns2.protonmail.com

• Serial: 2406241665
• Refresh: 1200
• Retry: 144
• Expire: 1814400
• Minimum TTL: 7200

ns3.protonmail.com

• Serial: 2406241665
• Refresh: 1200
• Retry: 144
• Expire: 1814400
• Minimum TTL: 7200

ns1.protonmail.com

• Serial: 2406241665
• Refresh: 1200
• Retry: 144
• Expire: 1814400
• Minimum TTL: 7200

Serial: 2406241665 - OK

REFRESH: 1200 - OK

RETRY: 144 - OK

EXPIRE: 1814400 - OK

MINIMUM TTL: 7200 - OK

ns2.protonmail.com

• 5 mail.protonmail.ch ( 176.119.200.128 )
• 10 mailsec.protonmail.ch ( 176.119.200.129 )

ns3.protonmail.com

• 5 mail.protonmail.ch ( 185.70.42.128 )
• 10 mailsec.protonmail.ch ( 176.119.200.129 )

ns1.protonmail.com

• 5 mail.protonmail.ch ( 185.205.70.128 )
• 10 mailsec.protonmail.ch ( 185.70.42.129 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 128.200.119.176.in-addr.arpa -> mail.protonmail.ch
• 129.42.70.185.in-addr.arpa -> mailsec.protonmail.ch
• 128.42.70.185.in-addr.arpa -> mail.protonmail.ch
• 128.70.205.185.in-addr.arpa -> mail.protonmail.ch
• 129.200.119.176.in-addr.arpa -> mailsec.protonmail.ch

PTR Records - OK

• Signed: Yes
• Validation: Successful
• DNSKEY Records: 2
• DS Records in parent zone: 0
• DS at Parent: False

DNSSEC - OK

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:_spf.protonmail.ch ~all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses:
• Includes: _spf.protonmail.ch
• DNS Lookups: 3
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: ~all

• DKIM Records Found: No

Warnings:

• No DKIM records found for common selectors

• Record: v=DMARC1; p=quarantine; fo=1; aspf=s; adkim=s;
• Syntax: Valid
• Policy: quarantine
• RUA (Aggregate Reports):
• Failure Options (fo): 1
• DKIM Alignment (adkim): Strict
• SPF Alignment (aspf): Strict

DMARC External Validation:

• All external domains in your DMARC record are giving permission to send them DMARC reports.