DNS Report for safaricom.co.ke

• ns3.safaricombusiness.co.ke

  • IPv4: 197.248.128.2
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• ns1.safaricombusiness.co.ke

  • IPv4: 41.203.208.129
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• ns4.safaricombusiness.co.ke

  • IPv4: 41.203.208.130
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• ns2.safaricombusiness.co.ke

  • IPv4: 197.248.128.1
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

Nameserver Count - OK

• ns3.safaricombusiness.co.ke

  • Status: Responded
  • IP(s): 45.223.18.17, 45.223.28.17
  • TTL: 14400 seconds
  • Recursive Queries: Error checking recursive queries: The DNS operation timed out.
  • TCP Connectivity: Allows TCP connections

• ns1.safaricombusiness.co.ke

  • Status: Responded
  • IP(s): 45.223.28.17, 45.223.18.17
  • TTL: 14400 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: TCP connection failed: The DNS operation timed out.

• ns4.safaricombusiness.co.ke

  • Status: Responded
  • IP(s): 45.223.28.17, 45.223.18.17
  • TTL: 14400 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• ns2.safaricombusiness.co.ke

  • Status: Responded
  • IP(s): 45.223.18.17, 45.223.28.17
  • TTL: 14400 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: TCP connection failed: The DNS operation timed out.

ns3.safaricombusiness.co.ke

• Serial: 2024082700
• Refresh: 86400
• Retry: 7200
• Expire: 3600000
• Minimum TTL: 300

ns1.safaricombusiness.co.ke

• Serial: 2024082700
• Refresh: 86400
• Retry: 7200
• Expire: 3600000
• Minimum TTL: 300

ns4.safaricombusiness.co.ke

• Serial: 2024082700
• Refresh: 86400
• Retry: 7200
• Expire: 3600000
• Minimum TTL: 300

ns2.safaricombusiness.co.ke

• Serial: 2024082700
• Refresh: 86400
• Retry: 7200
• Expire: 3600000
• Minimum TTL: 300

Serial: 2024082700 - OK

REFRESH: 86400 - OK

RETRY: 7200 - OK

EXPIRE: 3600000 - OK

MINIMUM TTL: 300 - Note: Outside recommended range (1-3 hours)

ns3.safaricombusiness.co.ke

• 0 mx1.hc502-0.eu.iphmx.com ( 207.54.69.54 )
• 0 mx2.hc502-0.eu.iphmx.com ( 207.54.76.105 )

ns1.safaricombusiness.co.ke

• 0 mx1.hc502-0.eu.iphmx.com ( 207.54.69.54 )
• 0 mx2.hc502-0.eu.iphmx.com ( 207.54.69.54 )

ns4.safaricombusiness.co.ke

• 0 mx1.hc502-0.eu.iphmx.com ( 207.54.76.105 )
• 0 mx2.hc502-0.eu.iphmx.com ( 207.54.69.54 )

ns2.safaricombusiness.co.ke

• 0 mx1.hc502-0.eu.iphmx.com ( 207.54.69.54 )
• 0 mx2.hc502-0.eu.iphmx.com ( 207.54.69.54 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 54.69.54.207.in-addr.arpa -> esa.hc502-0.eu.iphmx.com
• 105.76.54.207.in-addr.arpa -> esa.hc502-0.eu.iphmx.com
• 54.69.54.207.in-addr.arpa -> esa.hc502-0.eu.iphmx.com
• 105.76.54.207.in-addr.arpa -> esa.hc502-0.eu.iphmx.com

PTR Records - OK

• Signed: Yes
• Validation: Successful
• DNSKEY Records: 2
• DS Records in parent zone: 0
• DS at Parent: False

DNSSEC - OK

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 exists:%{i}.spf.hc502-0.eu.iphmx.com ip4:196.201.213.56 ip4:196.201.213.93 ip4:196.201.213.118 ip4:196.201.213.42 ip4:196.201.213.106 ip4:196.201.213.172 ip4:196.201.213.221 ip4:196.201.213.222 ~a
• SPF Syntax: Failed
• Deprecated Elements: Passed
• IP Addresses: 196.201.213.56, 196.201.213.93, 196.201.213.118, 196.201.213.42, 196.201.213.106, 196.201.213.172, 196.201.213.221, 196.201.213.222
• Includes:
• DNS Lookups: 3
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: Not Present

Warnings:

• SPF record doesn't contain an 'all' mechanism

Errors:

• SPF record syntax is invalid

• DKIM Records Found: Yes
• Selectors Found: default
• Selector 'default':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCyDRrJzbPvxlG0WPZkn67s30mZhPB8bQek26hOhIJepDiec4sN4ICbx1PsWdf9Oz5pqcJEnGydwlNXh4OSOhw1hfx2ZAjQsvI36flQ2unIZ0r7T2RYkGHegGtztyz98R2L4IAHZAxVhOUGl+InV0oipxD0M317si1v4Z712mf9GQIDAQAB
• Valid Syntax: Yes

• Record: v=DMARC1;p=reject;sp=none;adkim=r;aspf=r;pct=100;fo=0;rf=afrf;ri=86400;rua=mailto:[email protected],mailto:[email protected];ruf=mailto:[email protected],mailto:[email protected]
• Syntax: Valid
• Policy: reject
• Subdomain Policy: none
• Percent: 100%
• RUA (Aggregate Reports): mailto:[email protected], mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected], mailto:[email protected]
• Failure Options (fo): 0
• DKIM Alignment (adkim): Relaxed
• SPF Alignment (aspf): Relaxed
• Reporting Interval: 86400 seconds

DMARC External Validation:

• Valid external domains: rua.dmp.cisco.com, ruf.dmp.cisco.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.