7
records
Name Servers
TTL
20m
20m
20m
demo.entrust.com. 1200 IN NS ns-1243.awsdns-27.org. demo.entrust.com. 1200 IN NS ns-2006.awsdns-58.co.uk. demo.entrust.com. 1200 IN NS ns-408.awsdns-51.com. demo.entrust.com. 1200 IN NS ns-908.awsdns-49.net.
SOA Details
TTL
15m
SOA
Responsible
awsdns-hostmaster.amazon.com
SOA
Serial
1
SOA
Times
Refresh
2h
Retry
15m
Expire
14d
Minimum TTL
1d
demo.entrust.com. 900 IN SOA ns-908.awsdns-49.net. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400
DMARC
TTL
DMARC
Policy
Organizational policy (p): how receivers treat mail that fails aligned DMARC checks — none (monitor only), quarantine (often junk), or reject (block).
none
quarantine
reject
20m
DMARC
Subdomain Policy
Subdomain policy (sp): when set, it applies to hostnames below this domain instead of p; if omitted, subdomains inherit the organizational policy.
none
quarantine
reject
DMARC
Percentage
pct: share of mail that gets quarantine/reject; 100 = all failing messages (default).
100
DMARC
RUA
mailto:[email protected]
Aggregate DMARC reports (ZIP/XML). Optional but recommended for visibility.
DMARC
RUF
mailto:[email protected]
Forensic (per-failure) reports. Often omitted for privacy or volume.
demo.entrust.com. 1200 IN DMARC v=DMARC1; p=reject; pct=100; sp=reject; rua=mailto:[email protected]; ruf=mailto:[email protected]; adkim=r; aspf=r; fo=1; rf=afrf; ri=3600
SPF (Sender Policy Framework)
TTL
SPF
SPFv1
| Qualifier | Mechanism | Target / value | Valid | Details |
|---|---|---|---|---|
| + Pass | include |
|
||
| - Fail | all |
—
|
|
5m
demo.entrust.com. 300 IN TXT "v=spf1 include:_u.demo.entrust.com._spf.smart.ondmarc.com -all"