DNS Report for zscalergov.net

• dns1.p07.nsone.net

  • IPv4: 198.51.44.7
  • IPv6: 2620:4d:4000:6259:7:7:0:1
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• dns2.p07.nsone.net

  • IPv4: 198.51.45.7
  • IPv6: 2a00:edc0:6259:7:7::2
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• dns3.p07.nsone.net

  • IPv4: 198.51.44.71
  • IPv6: 2620:4d:4000:6259:7:7:0:3
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

• dns4.p07.nsone.net

  • IPv4: 198.51.45.71
  • IPv6: 2a00:edc0:6259:7:7::4
  • TTL (IPv4): 30 seconds
  • TTL (IPv6): 30 seconds
  • Recursive: N/A

Nameserver Count - OK

• dns1.p07.nsone.net

  • Status: Failed: The DNS response does not contain an answer to the question: zscalergov.net. IN A
  • IP(s):
  • TTL: N/A seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• dns2.p07.nsone.net

  • Status: Failed: The DNS response does not contain an answer to the question: zscalergov.net. IN A
  • IP(s):
  • TTL: N/A seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• dns3.p07.nsone.net

  • Status: Failed: The DNS response does not contain an answer to the question: zscalergov.net. IN A
  • IP(s):
  • TTL: N/A seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

• dns4.p07.nsone.net

  • Status: Failed: The DNS response does not contain an answer to the question: zscalergov.net. IN A
  • IP(s):
  • TTL: N/A seconds
  • Recursive Queries: Unclear (Response code: NXDOMAIN)
  • TCP Connectivity: TCP connection failed (Response code: NXDOMAIN)

dns1.p07.nsone.net

• Serial: 1651542923
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 3600

dns2.p07.nsone.net

• Serial: 1651542923
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 3600

dns3.p07.nsone.net

• Serial: 1651542923
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 3600

dns4.p07.nsone.net

• Serial: 1651542923
• Refresh: 3600
• Retry: 600
• Expire: 604800
• Minimum TTL: 3600

Serial: 1651542923 - OK

REFRESH: 3600 - OK

RETRY: 600 - OK

EXPIRE: 604800 - OK

MINIMUM TTL: 3600 - OK

dns1.p07.nsone.net

• 10 aspmx.l.google.com ( 172.253.62.26 )
• 20 alt1.aspmx.l.google.com ( 209.85.202.26 )
• 20 alt2.aspmx.l.google.com ( 64.233.184.26 )
• 30 aspmx2.googlemail.com ( 209.85.202.27 )
• 30 aspmx3.googlemail.com ( 64.233.184.27 )

dns2.p07.nsone.net

• 10 aspmx.l.google.com ( 172.253.122.26 )
• 20 alt1.aspmx.l.google.com ( 209.85.202.26 )
• 20 alt2.aspmx.l.google.com ( 64.233.184.26 )
• 30 aspmx2.googlemail.com ( 209.85.202.27 )
• 30 aspmx3.googlemail.com ( 64.233.184.26 )

dns3.p07.nsone.net

• 10 aspmx.l.google.com ( 172.253.122.26 )
• 20 alt1.aspmx.l.google.com ( 209.85.202.26 )
• 20 alt2.aspmx.l.google.com ( 64.233.184.26 )
• 30 aspmx2.googlemail.com ( 209.85.202.27 )
• 30 aspmx3.googlemail.com ( 64.233.184.26 )

dns4.p07.nsone.net

• 10 aspmx.l.google.com ( 172.253.122.26 )
• 20 alt1.aspmx.l.google.com ( 209.85.202.26 )
• 20 alt2.aspmx.l.google.com ( 64.233.184.26 )
• 30 aspmx2.googlemail.com ( 209.85.202.27 )
• 30 aspmx3.googlemail.com ( 64.233.184.26 )

MX Record Consistency - Warning: Inconsistencies found

MX Record Count - OK

• 27.202.85.209.in-addr.arpa -> dg-in-f27.1e100.net
• 27.184.233.64.in-addr.arpa -> wa-in-f27.1e100.net
• 26.62.253.172.in-addr.arpa -> bc-in-f26.1e100.net
• 26.184.233.64.in-addr.arpa -> wa-in-f26.1e100.net
• 26.122.253.172.in-addr.arpa -> bh-in-f26.1e100.net
• 26.184.233.64.in-addr.arpa -> wa-in-f26.1e100.net
• 26.202.85.209.in-addr.arpa -> dg-in-f26.1e100.net

PTR Records - OK

• Signed: Yes
• Validation: Successful
• DNSKEY Records: 3
• DS Records in parent zone: 0
• DS at Parent: False

DNSSEC - OK

SPF Record Published: Passed

Multiple SPF Records: Passed

SPF Record 1:

• Record: v=spf1 ip4:165.225.44.202/31 ip4:165.225.3.234/32 ip4:165.225.3.235/32 ip4:165.225.3.231/32 ip4:136.226.16.131/32 include:_spf.google.com ~all
• SPF Syntax: Passed
• Deprecated Elements: Passed
• IP Addresses: 165.225.44.202/31, 165.225.3.234/32, 165.225.3.235/32, 165.225.3.231/32, 136.226.16.131/32
• Includes: _spf.google.com
• DNS Lookups: 2
• Void Lookups: Passed
• Escaping Chars: Not Present
• All Mechanism: ~all

• DKIM Records Found: Yes
• Selectors Found: selector1
• Selector 'selector1':
  Record: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCzdffkZF26G2VgRa8xGtw65gFiuts/kMTX69GwMYGWN8pW0w+4UKi2Mw8YyHiROZDwIWPN4MwGh57h6alBIFnsT3acFDzb/icnQ1Rmd8ojk0DvpbYdHOa9R3XCwaDi9zAIwGZWvgA+u3tReTPNLMI5vYJeIyiVwLPoSdmk/+NU4QIDAQAB;
• Valid Syntax: Yes

• Record: v=DMARC1; p=reject; rua=mailto:[email protected]; ruf=mailto:[email protected]
• Syntax: Valid
• Policy: reject
• RUA (Aggregate Reports): mailto:[email protected]
• RUF (Forensic Reports): mailto:[email protected]

DMARC External Validation:

• Valid external domains: zscaler.com, zscaler.com
• All external domains in your DMARC record are giving permission to send them DMARC reports.