DNS Report for who.int

• whqdns3.who.int

  • IPv4: 211.24.11.120
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• ext-dns-2.cern.ch

  • IPv4: 192.91.245.85
  • IPv6: 2001:1458:1:2::100:85
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• ns1.wpro.who.int

  • IPv4: 123.176.64.11
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• whqdns1.who.int

  • IPv4: 158.232.12.5
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

• whqdns2.who.int

  • IPv4: 158.232.12.6
  • IPv6: No IPv6 found
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): N/A seconds
  • Recursive: N/A

Nameserver Count - OK

• whqdns3.who.int

  • Status: Responded
  • IP(s): 192.133.11.1
  • TTL: 900 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ext-dns-2.cern.ch

  • Status: Responded
  • IP(s): 192.133.11.1
  • TTL: 900 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• ns1.wpro.who.int

  • Status: Responded
  • IP(s): 192.133.11.1
  • TTL: 900 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• whqdns1.who.int

  • Status: Responded
  • IP(s): 192.133.11.1
  • TTL: 900 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

• whqdns2.who.int

  • Status: Responded
  • IP(s): 192.133.11.1
  • TTL: 900 seconds
  • Recursive Queries: Does not allow recursive queries
  • TCP Connectivity: TCP connection failed (Response code: REFUSED)

whqdns3.who.int

• Serial: 2024090400
• Refresh: 10800
• Retry: 3600
• Expire: 604800
• Minimum TTL: 10800

ext-dns-2.cern.ch

• Serial: 2024090400
• Refresh: 10800
• Retry: 3600
• Expire: 604800
• Minimum TTL: 10800

ns1.wpro.who.int

• Serial: 2024090400
• Refresh: 10800
• Retry: 3600
• Expire: 604800
• Minimum TTL: 10800

whqdns1.who.int

• Serial: 2024090400
• Refresh: 10800
• Retry: 3600
• Expire: 604800
• Minimum TTL: 10800

whqdns2.who.int

• Serial: 2024090400
• Refresh: 10800
• Retry: 3600
• Expire: 604800
• Minimum TTL: 10800

Serial: 2024090400 - OK

REFRESH: 10800 - OK

RETRY: 3600 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 10800 - OK

whqdns3.who.int

• 10 who-int.mail.protection.outlook.com ( 52.101.73.26 )

ext-dns-2.cern.ch

• 10 who-int.mail.protection.outlook.com ( 52.101.68.25 )

ns1.wpro.who.int

• 10 who-int.mail.protection.outlook.com ( 52.101.68.8 )

whqdns1.who.int

• 10 who-int.mail.protection.outlook.com ( 52.101.73.26 )

whqdns2.who.int

• 10 who-int.mail.protection.outlook.com ( 52.101.68.25 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - Warning: Only one MX record

• 25.68.101.52.in-addr.arpa -> mail-db8pr02cu00101.inbound.protection.outlook.com
• 26.73.101.52.in-addr.arpa -> mail-as9pr05cu01302.inbound.protection.outlook.com
• 8.68.101.52.in-addr.arpa -> mail-du0pr03cu00100.inbound.protection.outlook.com

PTR Records - OK

• Signed: No
• Validation: Failed
• DNSKEY Records: None
• DS Records in parent zone: None
• DS at Parent: None

DNSSEC - Note: Domain is not signed with DNSSEC

Error: No DNSSEC records found

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 ip4:158.232.12.0/24 include:spf.protection.outlook.com include:_spfincludes.who.int -all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses: 158.232.12.0/24
• Includes: spf.protection.outlook.com, _spfincludes.who.int
• DNS Lookups: 3
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: -all

• DKIM Records Found: Yes
• Selectors Found: selector1
• Selector 'selector1':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCRwBa715KydSa2CDovKP5fohCcyb+yNwALH4Z8pSlO5Gm2GJ+m4IWu1GZs04t9+Z1sD6Woik8fPX4idC6Uvn3BFvqbTGGbrMqScgI/cqt6xAeWnIcybSxErqfQqi07/M0PphE1SjiFE7kzX84+FiXRgJQYDrYUA1MWPBQfBvI1cQIDAQAB; n=1024,1462810595,1
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; pct=100; fo=1; ri=3600; rua=mailto:[email protected],mailto:[email protected];
• Syntax: Valid
• Policy: reject
• Percent: 100%
• RUA (Aggregate Reports): mailto:[email protected], mailto:[email protected]
• Failure Options (fo): 1
• Reporting Interval: 3600 seconds

DMARC External Validation:

• Valid external domains: inbox.ondmarc.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.