DNS Report for sectigo.com

• ns3.as48447.net

  • IPv4: 91.212.12.50
  • IPv6: 2a0e:ac00:d4:c32::5bd4:c32
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns2.as48447.net

  • IPv4: 91.209.196.50
  • IPv6: 2a0e:ac00:d1:c432::5bd1:c432
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns1.as48447.net

  • IPv4: 91.199.212.50
  • IPv6: 2a0e:ac00:c7:d432::5bc7:d432
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• ns3.as48447.net

  • Status: Responded
  • IP(s): 91.199.212.90
  • TTL: 3600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns2.as48447.net

  • Status: Responded
  • IP(s): 91.199.212.90
  • TTL: 3600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns1.as48447.net

  • Status: Responded
  • IP(s): 91.199.212.90
  • TTL: 3600 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

ns3.as48447.net

• Serial: 2024072201
• Refresh: 1800
• Retry: 1200
• Expire: 1814400
• Minimum TTL: 5400

ns2.as48447.net

• Serial: 2024072201
• Refresh: 1800
• Retry: 1200
• Expire: 1814400
• Minimum TTL: 5400

ns1.as48447.net

• Serial: 2024072201
• Refresh: 1800
• Retry: 1200
• Expire: 1814400
• Minimum TTL: 5400

Serial: 2024072201 - OK

REFRESH: 1800 - OK

RETRY: 1200 - OK

EXPIRE: 1814400 - OK

MINIMUM TTL: 5400 - OK

ns3.as48447.net

• 0 sectigo-com.mail.protection.outlook.com ( 52.101.194.0 )

ns2.as48447.net

• 0 sectigo-com.mail.protection.outlook.com ( 52.101.9.17 )

ns1.as48447.net

• 0 sectigo-com.mail.protection.outlook.com ( 52.101.194.0 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - Warning: Only one MX record

• 0.194.101.52.in-addr.arpa -> mail-ch5pr02cu00200.inbound.protection.outlook.com
• 17.9.101.52.in-addr.arpa -> No PTR record found: The DNS query name does not exist: 17.9.101.52.in-addr.arpa.

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 include:spf.protection.outlook.com include:_spf.salesforce.com include:_spf.qualys.com ip4:91.199.212.0/24 ip4:91.209.196.0/24 ip4:91.212.12.0/24 ip4:148.163.156.198/32 ip6:2a0e:ac00::/32 -all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses: 91.199.212.0/24, 91.209.196.0/24, 91.212.12.0/24, 148.163.156.198/32, 2a0e:ac00::/32
• Includes: spf.protection.outlook.com, _spf.salesforce.com, _spf.qualys.com
• DNS Lookups: 8
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: -all

• DKIM Records Found: Yes
• Selectors Found: selector1
• Selector 'selector1':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCpHm3/rl6i+JDIH46tPaFDbUqq76Rz/OSS5wx2549rCRVqInHAdbj6B0xA+0ATDVuBYFOP3w0YV/ZkJJohQYVdW0Ke0Uh8KOvTDzShxnSsOxnvmWIOoAum5PmpG6WTk3VdiqIdWJEQzjE2p8s+hip6fW5izFzB4hI0KmxgZTJOiQIDAQAB;
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; rua=mailto:[email protected],mailto:[email protected]; ruf=mailto:[email protected]; fo=1;
• Syntax: Valid
• Policy: reject
• RUA (Aggregate Reports): mailto:[email protected], mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]
• Failure Options (fo): 1

DMARC External Validation:

• Valid external domains: comodoca.net, securemailanalytics.com, securemailanalytics.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.