DNS Report for tanium.com

• cody.ns.cloudflare.com

  • IPv4: 172.64.33.107, 173.245.59.107, 108.162.193.107
  • IPv6: 2803:f800:50::6ca2:c16b, 2606:4700:58::adf5:3b6b, 2a06:98c1:50::ac40:216b
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• leah.ns.cloudflare.com

  • IPv4: 108.162.192.129, 173.245.58.129, 172.64.32.129
  • IPv6: 2a06:98c1:50::ac40:2081, 2606:4700:50::adf5:3a81, 2803:f800:50::6ca2:c081
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• cody.ns.cloudflare.com

  • Status: Responded
  • IP(s): 104.16.35.39, 104.16.36.39
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

• leah.ns.cloudflare.com

  • Status: Responded
  • IP(s): 104.16.35.39, 104.16.36.39
  • TTL: 300 seconds
  • Recursive Queries: Allows recursive queries
  • TCP Connectivity: Allows TCP connections

cody.ns.cloudflare.com

• Serial: 2347494975
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

leah.ns.cloudflare.com

• Serial: 2347494975
• Refresh: 10000
• Retry: 2400
• Expire: 604800
• Minimum TTL: 1800

Serial: 2347494975 - OK

REFRESH: 10000 - OK

RETRY: 2400 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 1800 - Note: Outside recommended range (1-3 hours)

cody.ns.cloudflare.com

• 10 tanium-com.mail.protection.outlook.com ( 52.101.10.8 )

leah.ns.cloudflare.com

• 10 tanium-com.mail.protection.outlook.com ( 52.101.194.15 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - Warning: Only one MX record

• 15.194.101.52.in-addr.arpa -> mail-ch4pr21cu00107.inbound.protection.outlook.com
• 8.10.101.52.in-addr.arpa -> mail-bn1pr04cu00100.inbound.protection.outlook.com

PTR Records - OK

• Signed: Yes
• Validation: Failed
• DNSKEY Records: 2
• DS Records in parent zone: 0
• DS at Parent: False

DNSSEC - Warning: Validation failed

Issue: No DS record found at the parent zone.

Action: Please add the DS record to both your DNS server and domain registrar.

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 ip4:149.72.150.217 ip4:107.131.36.160/28 ip4:64.40.11.1 ip4:167.89.16.30 ip4:167.89.16.245/32 ip4:167.89.16.183 ip4:198.207.147.224/27 ip4:204.239.0.224/27 ip4:199.15.212.0/22 ip4:192.28.144.0/20 ip4:192.28.160.0/19 ip4:185.28.196.0/22 ip4:130.248.
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses: 149.72.150.217, 107.131.36.160/28, 64.40.11.1, 167.89.16.30, 167.89.16.245/32, 167.89.16.183, 198.207.147.224/27, 204.239.0.224/27, 199.15.212.0/22, 192.28.144.0/20, 192.28.160.0/19, 185.28.196.0/22, 130.248.
• Includes:
• DNS Lookups: 0
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: Not Present

Warnings:

• SPF record doesn't contain an 'all' mechanism

• DKIM Records Found: Yes
• Selectors Found: google
• Selector 'google':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHIqnIVVPXEPWKHZ7d7/zl/7wEy1Y6iLTkDnXnFlC07//7do0jxbta532KuC/2VUz9ZHh4kG9OcBjTPXjUOKwIbTgFRF7KT4vtfQHdFC9BlArRV9/ck/WvqJxXMeCax9gZZPdqyJLZ43UPYSUQe+BXAjEJP/t8KSVWrfVbyKXsUQIDAQAB
• Valid Syntax: Yes

• Record: v=DMARC1; p=quarantine; pct=100; rua=mailto:[email protected]; ruf=mailto:[email protected],mailto:[email protected]; sp=none; aspf=r;
• Syntax: Valid
• Policy: quarantine
• Subdomain Policy: none
• Percent: 100%
• RUA (Aggregate Reports): mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected], mailto:[email protected]
• SPF Alignment (aspf): Relaxed

DMARC External Validation:

• Valid external domains: vali.email, vali.email
• All external domains in your DMARC record are giving permission to send them DMARC reports.