Created
October 29, 2024 14:40
-
-
Save seanthegeek/61b2634de4a1377af74d6ac7b0b0ff5b to your computer and use it in GitHub Desktop.
Output of checkdmarc --skip-tls ally.com bankofamerica.com chase.com
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| [ | |
| { | |
| "domain": "ally.com", | |
| "base_domain": "ally.com", | |
| "dnssec": false, | |
| "ns": { | |
| "hostnames": [ | |
| "gns5.ally.com", | |
| "gns8.ally.com", | |
| "gns7.ally.com", | |
| "gns6.ally.com" | |
| ], | |
| "warnings": [] | |
| }, | |
| "mx": { | |
| "hosts": [ | |
| { | |
| "preference": 10, | |
| "hostname": "mxa-00239e02.gslb.pphosted.com", | |
| "addresses": [ | |
| "205.220.165.100" | |
| ], | |
| "dnssec": false | |
| }, | |
| { | |
| "preference": 10, | |
| "hostname": "mxb-00239e02.gslb.pphosted.com", | |
| "addresses": [ | |
| "205.220.165.100" | |
| ], | |
| "dnssec": false | |
| } | |
| ], | |
| "warnings": [] | |
| }, | |
| "mta_sts": { | |
| "valid": false, | |
| "error": "An MTA-STS DNS record does not exist for this domain" | |
| }, | |
| "spf": { | |
| "record": "v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all", | |
| "valid": true, | |
| "dns_lookups": 1, | |
| "dns_void_lookups": 0, | |
| "warnings": [], | |
| "parsed": { | |
| "pass": [], | |
| "neutral": [], | |
| "softfail": [], | |
| "fail": [], | |
| "include": [ | |
| { | |
| "domain": "%{ir}.%{v}.%{d}.spf.has.pphosted.com" | |
| } | |
| ], | |
| "redirect": null, | |
| "exp": null, | |
| "all": "softfail" | |
| } | |
| }, | |
| "dmarc": { | |
| "record": "v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:[email protected]; ruf=mailto:[email protected]", | |
| "valid": true, | |
| "location": "ally.com", | |
| "warnings": [], | |
| "tags": { | |
| "v": { | |
| "value": "DMARC1", | |
| "explicit": true | |
| }, | |
| "p": { | |
| "value": "reject", | |
| "explicit": true | |
| }, | |
| "fo": { | |
| "value": "1", | |
| "explicit": true | |
| }, | |
| "ri": { | |
| "value": 3600, | |
| "explicit": true | |
| }, | |
| "rua": { | |
| "value": [ | |
| { | |
| "scheme": "mailto", | |
| "address": "[email protected]", | |
| "size_limit": null | |
| } | |
| ], | |
| "explicit": true | |
| }, | |
| "ruf": { | |
| "value": [ | |
| { | |
| "scheme": "mailto", | |
| "address": "[email protected]", | |
| "size_limit": null | |
| } | |
| ], | |
| "explicit": true | |
| }, | |
| "adkim": { | |
| "value": "r", | |
| "explicit": false | |
| }, | |
| "aspf": { | |
| "value": "r", | |
| "explicit": false | |
| }, | |
| "pct": { | |
| "value": 100, | |
| "explicit": false | |
| }, | |
| "rf": { | |
| "value": "afrf", | |
| "explicit": false | |
| }, | |
| "sp": { | |
| "value": "reject", | |
| "explicit": false | |
| } | |
| } | |
| }, | |
| "smtp_tls_reporting": { | |
| "valid": false, | |
| "error": "An SMTP TLS Reporting DNS record does not exist for this domain" | |
| }, | |
| "bimi": { | |
| "record": "v=BIMI1; l=https://bimi.entrust.net/ally.com/logo.svg;a=https://bimi.entrust.net/ally.com/certchain.pem", | |
| "valid": true, | |
| "selector": "default", | |
| "tags": { | |
| "v": { | |
| "value": "BIMI1" | |
| }, | |
| "l": { | |
| "value": "https://bimi.entrust.net/ally.com/logo.svg" | |
| }, | |
| "a": { | |
| "value": "https://bimi.entrust.net/ally.com/certchain.pem" | |
| } | |
| }, | |
| "image": { | |
| "svg_version": "1.2", | |
| "base_profile": "tiny-ps", | |
| "title": "Ally", | |
| "width": 400.0, | |
| "height": 400.0, | |
| "filesize": "0.867 KB", | |
| "sha256": "154ecfb3469a620b58e10051ec77cd4644321812741e21ff5a9c3bc0a7c04117" | |
| }, | |
| "certificate": { | |
| "issuer": { | |
| "C": "US", | |
| "O": "Entrust, Inc.", | |
| "CN": "Entrust Verified Mark CA - VMC2" | |
| }, | |
| "subject": { | |
| "C": "US", | |
| "ST": "Michigan", | |
| "L": "Detroit", | |
| "street": "200 Renaissance Ctr", | |
| "jurisdictionC": "US", | |
| "jurisdictionST": "Delaware", | |
| "O": "Ally Financial Inc.", | |
| "businessCategory": "Private Organization", | |
| "serialNumber": "2720811", | |
| "UNDEF": "United States Patent and Trademark Office (USPTO)", | |
| "CN": "Ally Financial Inc." | |
| }, | |
| "serial_number": "49954278744903885952847991743177486124", | |
| "expires": "2024-12-03 21:15:34Z", | |
| "valid": true, | |
| "domains": [ | |
| "ally.com" | |
| ], | |
| "logotype_sha256": "154ecfb3469a620b58e10051ec77cd4644321812741e21ff5a9c3bc0a7c04117" | |
| }, | |
| "warnings": [] | |
| } | |
| }, | |
| { | |
| "domain": "bankofamerica.com", | |
| "base_domain": "bankofamerica.com", | |
| "dnssec": true, | |
| "ns": { | |
| "hostnames": [ | |
| "ns6.bac.com", | |
| "ns12.bac.com", | |
| "ns7.bac.com", | |
| "ns11.bac.com", | |
| "ns5.bac.com", | |
| "ns10.bac.com", | |
| "ns8.bac.com" | |
| ], | |
| "warnings": [] | |
| }, | |
| "mx": { | |
| "hosts": [ | |
| { | |
| "preference": 10, | |
| "hostname": "mxa-0000ec05.gslb.pphosted.com", | |
| "addresses": [ | |
| "208.84.65.230" | |
| ], | |
| "dnssec": false | |
| }, | |
| { | |
| "preference": 10, | |
| "hostname": "mxb-0000ec05.gslb.pphosted.com", | |
| "addresses": [ | |
| "208.86.201.225" | |
| ], | |
| "dnssec": false | |
| } | |
| ], | |
| "warnings": [] | |
| }, | |
| "mta_sts": { | |
| "valid": false, | |
| "error": "An MTA-STS DNS record does not exist for this domain" | |
| }, | |
| "spf": { | |
| "record": "v=spf1 ip4:171.161.41.178 ip4:171.159.227.167 ip4:171.161.147.155 include:spf-0000ec08.pphosted.com include:spf-0000ec15.pphosted.com ~all", | |
| "valid": true, | |
| "dns_lookups": 2, | |
| "dns_void_lookups": 0, | |
| "warnings": [], | |
| "parsed": { | |
| "pass": [ | |
| { | |
| "value": "171.161.41.178", | |
| "mechanism": "ip4" | |
| }, | |
| { | |
| "value": "171.159.227.167", | |
| "mechanism": "ip4" | |
| }, | |
| { | |
| "value": "171.161.147.155", | |
| "mechanism": "ip4" | |
| } | |
| ], | |
| "neutral": [], | |
| "softfail": [], | |
| "fail": [], | |
| "include": [ | |
| { | |
| "domain": "spf-0000ec08.pphosted.com", | |
| "record": "v=spf1 ip4:148.163.158.107 ip4:148.163.156.110", | |
| "dns_lookups": 0, | |
| "dns_void_lookups": 0, | |
| "parsed": { | |
| "pass": [ | |
| { | |
| "value": "148.163.158.107", | |
| "mechanism": "ip4" | |
| }, | |
| { | |
| "value": "148.163.156.110", | |
| "mechanism": "ip4" | |
| } | |
| ], | |
| "neutral": [], | |
| "softfail": [], | |
| "fail": [], | |
| "include": [], | |
| "redirect": null, | |
| "exp": null, | |
| "all": "neutral" | |
| }, | |
| "warnings": [] | |
| }, | |
| { | |
| "domain": "spf-0000ec15.pphosted.com", | |
| "record": "v=spf1 ip4:66.159.240.40 ip4:66.159.238.13", | |
| "dns_lookups": 0, | |
| "dns_void_lookups": 0, | |
| "parsed": { | |
| "pass": [ | |
| { | |
| "value": "66.159.240.40", | |
| "mechanism": "ip4" | |
| }, | |
| { | |
| "value": "66.159.238.13", | |
| "mechanism": "ip4" | |
| } | |
| ], | |
| "neutral": [], | |
| "softfail": [], | |
| "fail": [], | |
| "include": [], | |
| "redirect": null, | |
| "exp": null, | |
| "all": "neutral" | |
| }, | |
| "warnings": [] | |
| } | |
| ], | |
| "redirect": null, | |
| "exp": null, | |
| "all": "softfail" | |
| } | |
| }, | |
| "dmarc": { | |
| "record": "v=DMARC1; p=reject; fo=1; rua=mailto:[email protected]; ruf=mailto:[email protected]", | |
| "valid": true, | |
| "location": "bankofamerica.com", | |
| "warnings": [], | |
| "tags": { | |
| "v": { | |
| "value": "DMARC1", | |
| "explicit": true | |
| }, | |
| "p": { | |
| "value": "reject", | |
| "explicit": true | |
| }, | |
| "fo": { | |
| "value": "1", | |
| "explicit": true | |
| }, | |
| "rua": { | |
| "value": [ | |
| { | |
| "scheme": "mailto", | |
| "address": "[email protected]", | |
| "size_limit": null | |
| } | |
| ], | |
| "explicit": true | |
| }, | |
| "ruf": { | |
| "value": [ | |
| { | |
| "scheme": "mailto", | |
| "address": "[email protected]", | |
| "size_limit": null | |
| } | |
| ], | |
| "explicit": true | |
| }, | |
| "adkim": { | |
| "value": "r", | |
| "explicit": false | |
| }, | |
| "aspf": { | |
| "value": "r", | |
| "explicit": false | |
| }, | |
| "pct": { | |
| "value": 100, | |
| "explicit": false | |
| }, | |
| "rf": { | |
| "value": "afrf", | |
| "explicit": false | |
| }, | |
| "ri": { | |
| "value": 86400, | |
| "explicit": false | |
| }, | |
| "sp": { | |
| "value": "reject", | |
| "explicit": false | |
| } | |
| } | |
| }, | |
| "smtp_tls_reporting": { | |
| "valid": false, | |
| "error": "An SMTP TLS Reporting DNS record does not exist for this domain" | |
| }, | |
| "bimi": { | |
| "record": "v=BIMI1; l=https://bimi.entrust.net/bankofamerica.com/logo.svg; a=https://bimi.entrust.net/bankofamerica.com/certchain.pem", | |
| "valid": true, | |
| "selector": "default", | |
| "tags": { | |
| "v": { | |
| "value": "BIMI1" | |
| }, | |
| "l": { | |
| "value": "https://bimi.entrust.net/bankofamerica.com/logo.svg" | |
| }, | |
| "a": { | |
| "value": "https://bimi.entrust.net/bankofamerica.com/certchain.pem" | |
| } | |
| }, | |
| "image": { | |
| "svg_version": "1.2", | |
| "base_profile": "tiny-ps", | |
| "title": "Bank of America", | |
| "width": 405.4, | |
| "height": 405.4, | |
| "filesize": "1.369 KB", | |
| "sha256": "f46597c77046058e9b7e1b1c666aeb9d61155fc6549cef4114900a6e5f7125dd" | |
| }, | |
| "certificate": { | |
| "issuer": { | |
| "C": "US", | |
| "O": "Entrust, Inc.", | |
| "CN": "Entrust Verified Mark CA - VMC2" | |
| }, | |
| "subject": { | |
| "C": "US", | |
| "ST": "Illinois", | |
| "L": "Chicago", | |
| "street": "135 S La Salle St", | |
| "jurisdictionC": "US", | |
| "jurisdictionST": "Delaware", | |
| "O": "Bank of America Corporation", | |
| "businessCategory": "Private Organization", | |
| "serialNumber": "2927442", | |
| "UNDEF": "United States Patent and Trademark Office (USPTO)", | |
| "CN": "Bank of America Corporation" | |
| }, | |
| "serial_number": "31169944882148210039451758842250145422", | |
| "expires": "2025-06-10 09:23:03Z", | |
| "valid": true, | |
| "domains": [ | |
| "bankofamerica.com" | |
| ], | |
| "logotype_sha256": "f46597c77046058e9b7e1b1c666aeb9d61155fc6549cef4114900a6e5f7125dd" | |
| }, | |
| "warnings": [] | |
| } | |
| }, | |
| { | |
| "domain": "chase.com", | |
| "base_domain": "chase.com", | |
| "dnssec": false, | |
| "ns": { | |
| "hostnames": [ | |
| "ns05.jpmorganchase.com", | |
| "ns1.jpmorganchase.com", | |
| "ns06.jpmorganchase.com", | |
| "ns0119.secondary.cloudflare.com", | |
| "ns0140.secondary.cloudflare.com", | |
| "ns2.jpmorganchase.com" | |
| ], | |
| "warnings": [] | |
| }, | |
| "mx": { | |
| "hosts": [ | |
| { | |
| "preference": 10, | |
| "hostname": "cluster14.us.messagelabs.com", | |
| "addresses": [ | |
| "67.219.246.221", | |
| "67.219.247.200", | |
| "67.219.250.210" | |
| ], | |
| "dnssec": true | |
| }, | |
| { | |
| "preference": 20, | |
| "hostname": "cluster14.us.messagelabs.com", | |
| "addresses": [] | |
| }, | |
| { | |
| "preference": 30, | |
| "hostname": "cluster14.us.messagelabs.com", | |
| "addresses": [] | |
| }, | |
| { | |
| "preference": 40, | |
| "hostname": "cluster14a.us.messagelabs.com", | |
| "addresses": [ | |
| "67.219.246.221", | |
| "67.219.247.200", | |
| "67.219.250.210" | |
| ], | |
| "dnssec": true | |
| } | |
| ], | |
| "warnings": [ | |
| "Hostname cluster14.us.messagelabs.com is listed in multiple MX records" | |
| ] | |
| }, | |
| "mta_sts": { | |
| "valid": false, | |
| "error": "Unrelated TXT records were discovered. These should be removed, as some receivers may not expect to find unrelated TXT records at _mta-sts.chase.com\n\nv=spf1 -all" | |
| }, | |
| "spf": { | |
| "record": "v=spf1 exists:%{i}.spf.chase.com exists:%{i}.spf.hc4673-96.iphmx.com exists:%{i}.spf.hc4698-8.iphmx.com include:tpo.chase.com ip4:207.162.228.0/24 ip4:207.162.229.0/24 ip4:207.162.225.0/24 ip4:196.37.232.50 ip4:159.53.46.0/24 ip4:159.53.36.0/24 ip4:159.53.110.0/24 ip4:159.53.78.0/24 -all", | |
| "valid": true, | |
| "dns_lookups": 4, | |
| "dns_void_lookups": 0, | |
| "warnings": [], | |
| "parsed": { | |
| "pass": [ | |
| { | |
| "value": "%{i}.spf.chase.com", | |
| "mechanism": "exists" | |
| }, | |
| { | |
| "value": "%{i}.spf.hc4673-96.iphmx.com", | |
| "mechanism": "exists" | |
| }, | |
| { | |
| "value": "%{i}.spf.hc4698-8.iphmx.com", | |
| "mechanism": "exists" | |
| }, | |
| { | |
| "value": "207.162.228.0/24", | |
| "mechanism": "ip4" | |
| }, | |
| { | |
| "value": "207.162.229.0/24", | |
| "mechanism": "ip4" | |
| }, | |
| { | |
| "value": "207.162.225.0/24", | |
| "mechanism": "ip4" | |
| }, | |
| { | |
| "value": "196.37.232.50", | |
| "mechanism": "ip4" | |
| }, | |
| { | |
| "value": "159.53.46.0/24", | |
| "mechanism": "ip4" | |
| }, | |
| { | |
| "value": "159.53.36.0/24", | |
| "mechanism": "ip4" | |
| }, | |
| { | |
| "value": "159.53.110.0/24", | |
| "mechanism": "ip4" | |
| }, | |
| { | |
| "value": "159.53.78.0/24", | |
| "mechanism": "ip4" | |
| } | |
| ], | |
| "neutral": [], | |
| "softfail": [], | |
| "fail": [], | |
| "include": [ | |
| { | |
| "domain": "tpo.chase.com", | |
| "record": "v=spf1 ip4:68.233.76.14/32 ip4:63.150.74.35/32 ip4:198.64.159.0/24 ip4:198.104.137.206/32 ip4:161.58.88.0/24 -all", | |
| "dns_lookups": 0, | |
| "dns_void_lookups": 0, | |
| "parsed": { | |
| "pass": [ | |
| { | |
| "value": "68.233.76.14/32", | |
| "mechanism": "ip4" | |
| }, | |
| { | |
| "value": "63.150.74.35/32", | |
| "mechanism": "ip4" | |
| }, | |
| { | |
| "value": "198.64.159.0/24", | |
| "mechanism": "ip4" | |
| }, | |
| { | |
| "value": "198.104.137.206/32", | |
| "mechanism": "ip4" | |
| }, | |
| { | |
| "value": "161.58.88.0/24", | |
| "mechanism": "ip4" | |
| } | |
| ], | |
| "neutral": [], | |
| "softfail": [], | |
| "fail": [], | |
| "include": [], | |
| "redirect": null, | |
| "exp": null, | |
| "all": "fail" | |
| }, | |
| "warnings": [] | |
| } | |
| ], | |
| "redirect": null, | |
| "exp": null, | |
| "all": "fail" | |
| } | |
| }, | |
| "dmarc": { | |
| "record": "v=DMARC1; p=reject; pct=100; rua=mailto:[email protected]; ruf=mailto:[email protected];", | |
| "valid": true, | |
| "location": "chase.com", | |
| "warnings": [], | |
| "tags": { | |
| "v": { | |
| "value": "DMARC1", | |
| "explicit": true | |
| }, | |
| "p": { | |
| "value": "reject", | |
| "explicit": true | |
| }, | |
| "pct": { | |
| "value": 100, | |
| "explicit": true | |
| }, | |
| "rua": { | |
| "value": [ | |
| { | |
| "scheme": "mailto", | |
| "address": "[email protected]", | |
| "size_limit": null | |
| } | |
| ], | |
| "explicit": true | |
| }, | |
| "ruf": { | |
| "value": [ | |
| { | |
| "scheme": "mailto", | |
| "address": "[email protected]", | |
| "size_limit": null | |
| } | |
| ], | |
| "explicit": true | |
| }, | |
| "adkim": { | |
| "value": "r", | |
| "explicit": false | |
| }, | |
| "aspf": { | |
| "value": "r", | |
| "explicit": false | |
| }, | |
| "fo": { | |
| "value": "0", | |
| "explicit": false | |
| }, | |
| "rf": { | |
| "value": "afrf", | |
| "explicit": false | |
| }, | |
| "ri": { | |
| "value": 86400, | |
| "explicit": false | |
| }, | |
| "sp": { | |
| "value": "reject", | |
| "explicit": false | |
| } | |
| } | |
| }, | |
| "smtp_tls_reporting": { | |
| "valid": false, | |
| "error": "Unrelated TXT records were discovered. These should be removed, as some receivers may not expect to find unrelated TXT records at _smtp._tls.chase.com\n\nv=spf1 -all" | |
| }, | |
| "bimi": { | |
| "record": "v=BIMI1;l=https://vmc.digicert.com/56fc8a64-c1ec-48b1-9f70-ae068ebbe8d0.svg;a=https://vmc.digicert.com/56fc8a64-c1ec-48b1-9f70-ae068ebbe8d0.pem", | |
| "valid": true, | |
| "selector": "default", | |
| "tags": { | |
| "v": { | |
| "value": "BIMI1" | |
| }, | |
| "l": { | |
| "value": "https://vmc.digicert.com/56fc8a64-c1ec-48b1-9f70-ae068ebbe8d0.svg" | |
| }, | |
| "a": { | |
| "value": "https://vmc.digicert.com/56fc8a64-c1ec-48b1-9f70-ae068ebbe8d0.pem" | |
| } | |
| }, | |
| "image": { | |
| "svg_version": "1.2", | |
| "base_profile": "tiny-ps", | |
| "title": "JPMorgan Chase & Co.", | |
| "width": 46.0, | |
| "height": 46.0, | |
| "filesize": "0.653 KB", | |
| "sha256": "690db5aeb3faf7b176e463f2f6ce67c360d8e156611266ed08fd7254d480a12d" | |
| }, | |
| "certificate": { | |
| "issuer": { | |
| "C": "US", | |
| "O": "DigiCert, Inc.", | |
| "CN": "DigiCert Verified Mark RSA4096 SHA256 2021 CA1" | |
| }, | |
| "subject": { | |
| "jurisdictionC": "US", | |
| "jurisdictionST": "Delaware", | |
| "businessCategory": "Private Organization", | |
| "serialNumber": "691011", | |
| "C": "US", | |
| "ST": "New York", | |
| "L": "New York", | |
| "street": "383 Madison Ave", | |
| "O": "JPMorgan Chase & Co.", | |
| "CN": "JPMorgan Chase & Co.", | |
| "UNDEF": "2015389" | |
| }, | |
| "serial_number": "11616056282136456203786402451019966384", | |
| "expires": "2025-08-14 23:59:59Z", | |
| "valid": true, | |
| "domains": [ | |
| "chase.com" | |
| ], | |
| "logotype_sha256": "690db5aeb3faf7b176e463f2f6ce67c360d8e156611266ed08fd7254d480a12d" | |
| }, | |
| "warnings": [] | |
| } | |
| } | |
| ] |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment