Dataweaz

2degrees.nz

Summary

Registrar
iSERVE
Status
ok
Created on
October 7, 2015
Expires on
—
Name servers
ns-536.awsdns-03.net, ns-1235.awsdns-26.org, ns-1949.awsdns-51.co.uk, ns-223.awsdns-27.com
Mail servers
2degrees-nz.mail.protection.outlook.com

Spoofing protection (DMARC)

Monitoring

E-mails spoofing this domain are only reported, not blocked.

DMARC tells mail servers what to do with an e-mail that claims to come from 2degrees.nz but fails SPF and DKIM checks.

Policy
Monitoring
Subdomain policy
Monitoring
Messages covered
100%
DKIM alignment
Relaxed
SPF alignment
Relaxed
Failure reports
—

Record

v=DMARC1; p=none; sp=none; rua=mailto:[email protected],mailto:[email protected]; aspf=r; pct=100

Authorized senders (SPF)

Strict

E-mails sent by any other server are rejected.

SPF lists the servers allowed to send e-mails for 2degrees.nz.

RuleValueResult
ip4118.148.2.45Allowed
ip4118.148.3.166Allowed
includespf.protection.outlook.comAllowed
includecanary.co.nzAllowed
include_spf.imx.t3.nzAllowed
includeamazonses.comAllowed
includespf.exclaimer.netAllowed
include_spf.google.comAllowed
all—Rejected

Top-level DNS lookups: 6 of 10 allowed

Record

v=spf1 ip4:118.148.2.45 ip4:118.148.3.166 include:spf.protection.outlook.com include:canary.co.nz include:_spf.imx.t3.nz include:amazonses.com include:spf.exclaimer.net include:_spf.google.com -all

E-mail signing (DKIM)

DKIM keys published by 2degrees.nz under the most common selectors. Other keys may exist under selectors specific to each sending service.

SelectorLikely serviceKeyStatus
selector1Microsoft 365RSA 1024 bits · shortActive
mailjetMailjetRSA 1024 bits · shortActive

RSA keys shorter than 2048 bits, called short keys, are discouraged: they are easier to break.

MX, SPF, DKIM and DMARC: the e-mail records

Four DNS records make a domain's e-mail work. MX says where e-mails sent to 2degrees.nz arrive; SPF, DKIM and DMARC let mail servers check that an e-mail claiming to come from 2degrees.nz was really sent by this domain, which protects it against spoofing.

MX

An MX (Mail Exchanger) record designates a server that receives e-mails sent to the domain. When someone writes to an @2degrees.nz address, their mail server queries the DNS for the domain's MX records, then delivers the message to the server they point to.

Example record

2degrees.nz  MX  10 mx1.2degrees.nz.
2degrees.nz  MX  20 mx2.2degrees.nz.

What the record contains

10, 20
Priority: the server with the lowest number is tried first. Servers with equal priority share the load.
mx1.2degrees.nz.
Host name of the mail server. It must point to an A or AAAA record: an IP address or an alias (CNAME) is not allowed here.
0 .
An MX "0 .", called a null MX, declares that the domain accepts no e-mail: sending servers give up at once instead of retrying.

Declaring at least two servers with different priorities avoids losing e-mails during an outage: sending servers retry for several days and fall back on the backup server. Without any MX, they try to deliver directly to the IP address of the domain.

SPF

SPF (Sender Policy Framework) is a TXT record listing the servers allowed to send e-mails on behalf of the domain. The receiving server checks that the sender is on this list. The final "all" rule says what to do with other servers: reject them (-all), flag their e-mails as suspicious (~all) or make no decision (?all).

Example record

2degrees.nz  TXT  "v=spf1 mx include:_spf.google.com ip4:192.0.2.10 -all"

What the record contains

v=spf1
Identifies the record as an SPF policy. It must come first.
ip4, ip6
Allows a specific IP address or an address range, for example ip4:192.0.2.0/24.
a, mx
Allows the addresses of the domain itself (A record) or those of its mail servers (MX).
include
Allows the servers of another domain, usually a sending service: include:_spf.google.com for Google Workspace.
-all, ~all
Final rule, applied to every other server. Its qualifier decides what happens to them: - rejects them, ~ flags their e-mails as suspicious, ? makes no decision, + accepts them (avoid it).

A domain must publish only one SPF record, and its evaluation cannot exceed 10 DNS lookups (include, a, mx, exists, redirect). Beyond that, mail servers treat it as invalid.

DKIM

DKIM (DomainKeys Identified Mail) signs every outgoing e-mail with a private key. The matching public key is published in a TXT record at selector._domainkey.2degrees.nz, so the recipient can check that the message really comes from the domain and was not altered on the way. The selector is chosen by each sending service and cannot be guessed: Dataweaz checks the most common ones (Google Workspace, Microsoft 365, Mailchimp, SendGrid…), so a key published under another selector may exist without appearing here.

Example record

google._domainkey.2degrees.nz  TXT  "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA…"

What the record contains

v=DKIM1
Protocol version. Optional but recommended, in which case it must come first.
k
Key algorithm: rsa, the most common, or ed25519.
p
Public key, base64-encoded. An empty value means the key has been revoked.
t
Flags: y marks a key in testing, whose failures must not be penalized; s forbids its use for subdomains.

Each sending service publishes its key under its own selector (google, selector1, k1…), which allows several keys and seamless rotation. A 2048-bit RSA key is recommended today.

DMARC

DMARC (Domain-based Message Authentication, Reporting and Conformance) builds on SPF and DKIM. Published on _dmarc.2degrees.nz, it tells mail servers what to do with an e-mail that fails these checks (let it through, send it to spam or reject it) and where to send reports.

Example record

_dmarc.2degrees.nz  TXT  "v=DMARC1; p=quarantine; rua=mailto:[email protected]; adkim=r; aspf=r"

What the record contains

v=DMARC1
Identifies the record as a DMARC policy. It must come first.
p
Policy applied to e-mails that fail the checks: none (monitoring only), quarantine (spam folder) or reject.
sp
Subdomain policy. Without it, subdomains follow the domain's policy.
rua
Address that receives daily aggregate reports about e-mails sent on behalf of the domain, whether they pass the checks or not.
ruf
Address that receives detailed failure reports, message by message. Few providers still send them.
pct
Percentage of e-mails subject to the policy, for a gradual rollout. 100 by default.
adkim, aspf
DKIM and SPF alignment: r (relaxed, a subdomain of the same domain is enough) or s (strict, the domain must be identical).

To roll out DMARC without blocking legitimate e-mails, start with p=none and an rua address, analyze the reports to find every service sending on behalf of the domain, then move to quarantine and finally to reject.

DNS records of 2degrees.nz

IP addresses (A and AAAA)

An A record maps the domain name to an IPv4 address: the address of the server that browsers contact to display the website. The AAAA record does the same for an IPv6 address. A domain can have several of them to spread visits across several servers.

TypeIP address
A118.148.5.99

Name servers (NS)

NS records designate the authoritative DNS servers of the domain: they answer every question about its other records (A, MX, TXT…). They are provided by the registrar, the hosting provider or a dedicated DNS service, and several servers are declared so that the domain keeps working if one of them fails.

ServerIP address
ns-536.awsdns-03.net205.251.194.24
ns-1235.awsdns-26.org205.251.196.211
ns-1949.awsdns-51.co.uk205.251.199.157
ns-223.awsdns-27.com205.251.192.223

Mail servers (MX)

MX records point to the servers that receive e-mails sent to the domain, that is to @2degrees.nz addresses. Each server has a priority: the one with the lowest number is tried first, the others take over if it fails. Without an MX record, the domain cannot receive e-mails.

PriorityServerIP address
02degrees-nz.mail.protection.outlook.com52.101.149.9

TXT records

TXT records hold free text. They are used to prove ownership of the domain to online services (Google, Microsoft, Facebook…) and to publish e-mail security rules: SPF on the domain itself, DMARC on _dmarc.2degrees.nz.

NameContent
2degrees.nzcursor-domain-verification-avevsb=jgblt2CxfUrW8xQKWH9cqJIHT
2degrees.nzfigma-domain-verification=d16b99dec07c3fb10124c868d6140e4c5b0c701a637b19d4444f1535e704aa3c-1760561546
2degrees.nzgoogle-site-verification=5qqfor5gM8YsFtddMmQdV8fTAeDC84R5OF74ECfC7z4
2degrees.nzgoogle-site-verification=9y5XHB67jc_gBquwszgKm3C6UsnOWtLdWoj0KO_wNXs
2degrees.nzgoogle-site-verification=A4lec-DObdyjWfRq8zMNYb0M-HZjtK1l77Vo04caXak
2degrees.nzgoogle-site-verification=IF4QCYI4MP773VO06a5h10R-6BaGiwu0NGOP_uiAp6s
2degrees.nzgoogle-site-verification=IH1zZqomtCBWzJwGpBYCUALVUE3ZssOhBUAjTi7G5ng
2degrees.nzgoogle-site-verification=hqKhvizshoQhNbpagMIh3NlEc1fuFGr_0VPi4fBJllg
2degrees.nzhj-ownership=nNHPejj3u6wG0TK
2degrees.nzhpe-greenlake-domain-verification=7345313847564d366d7a49436d70354738474642784d6652346d31326d59346f
2degrees.nzideally-domain-verification=rEY60QH/B6s3KDwHGG6ONzkR2dFUHsncLzqXI8S5Cxw=
2degrees.nzmonday-com-verification=ihNNtJWt0N6noxqWqWJZLLZFHMoZ3RIqy7KLphHzA94
2degrees.nzmongodb-site-verification=Vq6lGL9hO0SUED8Yf2GDXmyBeozsLkUW
2degrees.nzopenai-domain-verification=dv-yKqOG4TrrJnFyhSKEJScA20T
2degrees.nzpardot646173=99430e23b101cd5d0bba2110c9e849c5a99c40873c8d5c59c4f01ea031003f9e
2degrees.nzparkable-domain-verification=AvNc0wUaG-lbsoIRPimztnonP2jryIPYjXPpi4akLTE=
2degrees.nzpostman-domain-verification=bc34e250d7fee1b2007a8d6a2af61e2f90d1875d8670ee10160fcc99bdcfcc0e44ca0894e9fa7a41d11f4f3593f3102ef9a132dd548153b1ae17bf5f8a9db18c
2degrees.nzuber-domain-verification=60b13f53-26e9-4b20-86cd-0e2186633ec6
2degrees.nzv=spf1 ip4:118.148.2.45 ip4:118.148.3.166 include:spf.protection.outlook.com include:canary.co.nz include:_spf.imx.t3.nz include:amazonses.com include:spf.exclaimer.net include:_spf.google.com -all
2degrees.nzwiz-domain-verification=ecfab2d5a1cfb6fd8dc9da48b87bb873133f20b6e21432ea3ec911dc89ed9d552
2degrees.nz1password-site-verification=SMZYDQJ7OREJZIFLO2NDKXOLOA
2degrees.nz4B5xFjPzbAfl+BHjEsmx2zm/A7Y1DfBBmkGmaf6DDLW1+Hcf1zk6mGJAcMb4YKpTLuPNUmRMcbTWeLDrCI3dNA==
2degrees.nzCAi5ArbEfnxMfeGwtFghUO1rs6sWePtJaKyoEUGDdifbOljhubvf7KfbVkVIRvGVLfaPG91G1tXsukbD3UhdRg==
2degrees.nzMS=ms34055316
2degrees.nzMS=ms44896576
2degrees.nzMS=ms82170433
2degrees.nzMS=ms90799891
2degrees.nzadobe-idp-site-verification=eab6b93736a854a690f68c69dbc3237774cb512cc76573bef4ab4bdc4497012b
2degrees.nzanthropic-domain-verification-j484w4=kHLZ8b01uK6qa2r4vxMryABqo
2degrees.nzatlassian-domain-verification=0FYBr0obLHTcUtDlun9Zs/P9NTxrAN+MGlxOYcEHV7uNBDs7/f/GyPC5xUXXz4gi
2degrees.nzatlassian-domain-verification=atnt9af8a0bbZKh4BTm4xZv17AWaC/vIZkovfNOjOiIAKjtehAEIvTqANdDjP92p
2degrees.nzb317c889-4244-4e5f-a6dd-c555387e2c05
2degrees.nzbrowserstack-domain-verification=75370fd5-d6d8-4b27-8d7c-06ae37422e9a
_dmarc.2degrees.nzv=DMARC1; p=none; sp=none; rua=mailto:[email protected],mailto:[email protected]; aspf=r; pct=100
selector1._domainkey.2degrees.nzv=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDUwo6R4yhNqtzEHAgd3Y3XTVsdlaU7TpJzBX+l7+ho+dTPPOh7kYPuOdR4yjXKD/SyBtNJRf0zt1mxvPb9vSJsanmXAeBnEYsVq2SzsjbAjG6SpfFc/pvLYEKLkz3oiecNtKjlx38yzU93ivoDfp0Oq7x57kbfsMc6AC9qR77SeQIDAQAB;
mailjet._domainkey.2degrees.nzk=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCp5ErAH4jgpgeep5zUdFJzk3ZNdkGpqw4t4+0wWgPpIEJdtp5IzHqo4HKAyEM49NXKdddLRUZH1Yu0MRCtfrmQ4/VXDyTmSSxW352I+w9oEBby+esPH3E7+pyFycutamKwPQPtYi5u04mdq8YlbU3tIko/TpcplUo2p4auUhr9OwIDAQAB

Related IP addresses

IPv4 addresses used by 2degrees.nz: website, name servers, mail servers and senders authorized by SPF.

IP addressUsed for/24 block
118.148.5.99Website118.148.5.0/24
205.251.194.24Name server ns-536.awsdns-03.net205.251.194.0/24
205.251.196.211Name server ns-1235.awsdns-26.org205.251.196.0/24
205.251.199.157Name server ns-1949.awsdns-51.co.uk205.251.199.0/24
205.251.192.223Name server ns-223.awsdns-27.com205.251.192.0/24
52.101.149.9Mail server 2degrees-nz.mail.protection.outlook.com52.101.149.0/24
118.148.2.45Authorized by SPF118.148.2.0/24
118.148.3.166Authorized by SPF118.148.3.0/24

WHOIS of the domain 2degrees.nz

Domain Name: 2degrees.nz
Registrar URL: https://iserve.nz/
Updated Date: 2025-11-25T23:12:45Z
Creation Date: 2015-10-07T07:10:20Z
Original Created: 2015-10-07T07:10:20Z
Registrar: iSERVE
Domain Status: ok https://icann.org/epp#ok
Name Server: ns-1235.awsdns-26.org
Name Server: ns-1949.awsdns-51.co.uk
Name Server: ns-223.awsdns-27.com
Name Server: ns-536.awsdns-03.net
DNSSEC: unsigned
URL of the Domain Name Commission Limited Inaccuracy Complaint Form: https://dnc.org.nz/enquiry-form/
>>> Last update of WHOIS database: 2026-10-01T14:52:28Z <<<

% Terms of Use
%
% By submitting a WHOIS query you are entering into an agreement with Domain
% Name Commission Ltd on the following terms and conditions, and subject to
% all relevant .nz Policies and procedures as found at https://dnc.org.nz/.
%
% It is prohibited to:
% - Send high volume WHOIS queries with the effect of downloading part of or
%   all of the .nz Register or collecting register data or records;
% - Access the .nz Register in bulk through the WHOIS service (ie. where a
%   user is able to access WHOIS data other than by sending individual queries
%   to the database);
% - Use WHOIS data to allow, enable, or otherwise support mass unsolicited
%   commercial advertising, or mass solicitations to registrants or to
%   undertake market research via direct mail, electronic mail, SMS, telephone
%   or any other medium;
% - Use WHOIS data in contravention of any applicable data and privacy laws,
%   including the Unsolicited Electronic Messages Act 2007;
% - Store or compile WHOIS data to build up a secondary register of
%   information;
% - Publish historical or non-current versions of WHOIS data; and
% - Publish any WHOIS data in bulk.
%
% Copyright Domain Name Commission Limited (a company wholly-owned by Internet
% New Zealand Incorporated) which may enforce its rights against any person or
% entity that undertakes any prohibited activity without its written
% permission.
%
% The WHOIS service is provided by Internet New Zealand Incorporated.
%
% Additional information may be available at https://www.dnc.org.nz

% Query time: 1180 msec
% WHEN: Thu Oct 01 14:52:27 UTC 2026