Dataweaz

riotinto.com

Summary

Registrar
CSC Corporate Domains, Inc.
Status
clientTransferProhibited
Created on
February 7, 1997
Expires on
February 8, 2027
Name servers
dns16.domainnetwork.net, dns11.domainnetwork.com, dns12.domainnetwork.com, dns13.domainnetwork.com, dns14.domainnetwork.net, dns15.domainnetwork.net
Mail servers
riotinto-com.mail.protection.outlook.com
DMARC
Reject

Spoofing protection (DMARC)

Reject

E-mails spoofing this domain are rejected.

DMARC tells mail servers what to do with an e-mail that claims to come from riotinto.com but fails SPF and DKIM checks.

Policy
Reject
Subdomain policy
Reject
Messages covered
100%
DKIM alignment
Relaxed
SPF alignment
Relaxed
Aggregate reports
[email protected]
Failure reports
[email protected]

Record

v=DMARC1; p=reject; fo=1; rua=mailto:[email protected]; ruf=mailto:[email protected]

Authorized senders (SPF)

Strict

E-mails sent by any other server are rejected.

SPF lists the servers allowed to send e-mails for riotinto.com.

RuleValueResult
ip4203.15.191.188/32Allowed
ip4203.15.191.189/32Allowed
ip4203.15.191.252/32Allowed
ip4203.15.191.253/32Allowed
ip4203.15.190.226/32Allowed
ip4203.15.190.227/32Allowed
ip4208.185.229.0/24Allowed
ip4208.185.235.0/24Allowed
ip4148.59.108.0/23Allowed
ip4148.59.106.0/23Allowed
ip4148.59.107.25/32Allowed
ip4148.59.109.25/32Allowed
ip4182.160.163.188/32Allowed
ip4157.133.127.52/32Allowed
ip4205.236.155.25/32Allowed
ip469.20.6.34/32Allowed
ip487.253.233.6/32Allowed
ip43.226.40.151/32Allowed
ip4159.183.181.113Allowed
ip4149.72.116.19Allowed
ip4149.72.117.225Allowed
ip4149.72.119.192Allowed
ip4149.72.119.197Allowed
ip4149.72.119.199Allowed
ip4149.72.119.210Allowed
ip4149.72.147.106Allowed
ip4149.72.148.50Allowed
ip4149.72.155.21Allowed
ip4149.72.160.121Allowed
ip4149.72.166.148Allowed
ip435.80.141.6Allowed
ip444.229.121.55Allowed
ip474.179.243.94Allowed
ip4172.214.67.207Allowed
ip44.236.81.254Allowed
ip4148.59.100.16/28Allowed
includespf.protection.outlook.comAllowed
include_spf01.mykronos.comAllowed
includespf.mandrillapp.comAllowed
include_spf.salesforce.comAllowed
includeservers.mcsv.netAllowed
includespf1.fraedom.comAllowed
includespfa.mailendo.comAllowed
includespf1.workhuman.comAllowed
includespf-us.wfs.cloudAllowed
ip4159.135.229.88/32Allowed
ip4159.135.237.231/32Allowed
ip4207.134.161.197/32Allowed
ip420.5.80.155/32Allowed
ip420.5.82.25/32Allowed
ip474.201.88.25/32Allowed
ip412.239.120.27/32Allowed
ip4195.200.255.124Allowed
ip420.53.141.40Allowed
ip420.11.185.19Allowed
all—Rejected

Top-level DNS lookups: 9 of 10 allowed

Record

v=spf1 ip4:203.15.191.188/32 ip4:203.15.191.189/32 ip4:203.15.191.252/32 ip4:203.15.191.253/32 ip4:203.15.190.226/32 ip4:203.15.190.227/32 ip4:208.185.229.0/24 ip4:208.185.235.0/24 ip4:148.59.108.0/23 ip4:148.59.106.0/23 ip4:148.59.107.25/32 ip4:148.59.109.25/32 ip4:182.160.163.188/32 ip4:157.133.127.52/32 ip4:205.236.155.25/32 ip4:69.20.6.34/32 ip4:87.253.233.6/32 ip4:3.226.40.151/32 ip4:159.183.181.113 ip4:149.72.116.19 ip4:149.72.117.225 ip4:149.72.119.192 ip4:149.72.119.197 ip4:149.72.119.199 ip4:149.72.119.210 ip4:149.72.147.106 ip4:149.72.148.50 ip4:149.72.155.21 ip4:149.72.160.121 ip4:149.72.166.148 ip4:35.80.141.6 ip4:44.229.121.55 ip4:74.179.243.94 ip4:172.214.67.207 ip4:4.236.81.254 ip4:148.59.100.16/28 include:spf.protection.outlook.com include:_spf01.mykronos.com include:spf.mandrillapp.com include:_spf.salesforce.com include:servers.mcsv.net include:spf1.fraedom.com include:spfa.mailendo.com include:spf1.workhuman.com include:spf-us.wfs.cloud ip4:159.135.229.88/32 ip4:159.135.237.231/32 ip4:207.134.161.197/32 ip4:20.5.80.155/32 ip4:20.5.82.25/32 ip4:74.201.88.25/32 ip4:12.239.120.27/32 ip4:195.200.255.124 ip4:20.53.141.40 ip4:20.11.185.19 -all

E-mail signing (DKIM)

DKIM keys published by riotinto.com under the most common selectors. Other keys may exist under selectors specific to each sending service.

SelectorLikely serviceKeyStatus
selector1Microsoft 365RSA 2048 bitsActive
selector2Microsoft 365RSA 1024 bits · shortActive
k1MailchimpRSA 1024 bits · shortActive
mandrillMandrillRSA 1024 bits · shortActive
s1SendGridRSA 2048 bitsActive
s2SendGridRSA 1024 bits · shortActive
default—RSA 2048 bitsActive

RSA keys shorter than 2048 bits, called short keys, are discouraged: they are easier to break.

MX, SPF, DKIM and DMARC: the e-mail records

Four DNS records make a domain's e-mail work. MX says where e-mails sent to riotinto.com arrive; SPF, DKIM and DMARC let mail servers check that an e-mail claiming to come from riotinto.com was really sent by this domain, which protects it against spoofing.

MX

An MX (Mail Exchanger) record designates a server that receives e-mails sent to the domain. When someone writes to an @riotinto.com address, their mail server queries the DNS for the domain's MX records, then delivers the message to the server they point to.

Example record

riotinto.com  MX  10 mx1.riotinto.com.
riotinto.com  MX  20 mx2.riotinto.com.

What the record contains

10, 20
Priority: the server with the lowest number is tried first. Servers with equal priority share the load.
mx1.riotinto.com.
Host name of the mail server. It must point to an A or AAAA record: an IP address or an alias (CNAME) is not allowed here.
0 .
An MX "0 .", called a null MX, declares that the domain accepts no e-mail: sending servers give up at once instead of retrying.

Declaring at least two servers with different priorities avoids losing e-mails during an outage: sending servers retry for several days and fall back on the backup server. Without any MX, they try to deliver directly to the IP address of the domain.

SPF

SPF (Sender Policy Framework) is a TXT record listing the servers allowed to send e-mails on behalf of the domain. The receiving server checks that the sender is on this list. The final "all" rule says what to do with other servers: reject them (-all), flag their e-mails as suspicious (~all) or make no decision (?all).

Example record

riotinto.com  TXT  "v=spf1 mx include:_spf.google.com ip4:192.0.2.10 -all"

What the record contains

v=spf1
Identifies the record as an SPF policy. It must come first.
ip4, ip6
Allows a specific IP address or an address range, for example ip4:192.0.2.0/24.
a, mx
Allows the addresses of the domain itself (A record) or those of its mail servers (MX).
include
Allows the servers of another domain, usually a sending service: include:_spf.google.com for Google Workspace.
-all, ~all
Final rule, applied to every other server. Its qualifier decides what happens to them: - rejects them, ~ flags their e-mails as suspicious, ? makes no decision, + accepts them (avoid it).

A domain must publish only one SPF record, and its evaluation cannot exceed 10 DNS lookups (include, a, mx, exists, redirect). Beyond that, mail servers treat it as invalid.

DKIM

DKIM (DomainKeys Identified Mail) signs every outgoing e-mail with a private key. The matching public key is published in a TXT record at selector._domainkey.riotinto.com, so the recipient can check that the message really comes from the domain and was not altered on the way. The selector is chosen by each sending service and cannot be guessed: Dataweaz checks the most common ones (Google Workspace, Microsoft 365, Mailchimp, SendGrid…), so a key published under another selector may exist without appearing here.

Example record

google._domainkey.riotinto.com  TXT  "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA…"

What the record contains

v=DKIM1
Protocol version. Optional but recommended, in which case it must come first.
k
Key algorithm: rsa, the most common, or ed25519.
p
Public key, base64-encoded. An empty value means the key has been revoked.
t
Flags: y marks a key in testing, whose failures must not be penalized; s forbids its use for subdomains.

Each sending service publishes its key under its own selector (google, selector1, k1…), which allows several keys and seamless rotation. A 2048-bit RSA key is recommended today.

DMARC

DMARC (Domain-based Message Authentication, Reporting and Conformance) builds on SPF and DKIM. Published on _dmarc.riotinto.com, it tells mail servers what to do with an e-mail that fails these checks (let it through, send it to spam or reject it) and where to send reports.

Example record

_dmarc.riotinto.com  TXT  "v=DMARC1; p=quarantine; rua=mailto:[email protected]; adkim=r; aspf=r"

What the record contains

v=DMARC1
Identifies the record as a DMARC policy. It must come first.
p
Policy applied to e-mails that fail the checks: none (monitoring only), quarantine (spam folder) or reject.
sp
Subdomain policy. Without it, subdomains follow the domain's policy.
rua
Address that receives daily aggregate reports about e-mails sent on behalf of the domain, whether they pass the checks or not.
ruf
Address that receives detailed failure reports, message by message. Few providers still send them.
pct
Percentage of e-mails subject to the policy, for a gradual rollout. 100 by default.
adkim, aspf
DKIM and SPF alignment: r (relaxed, a subdomain of the same domain is enough) or s (strict, the domain must be identical).

To roll out DMARC without blocking legitimate e-mails, start with p=none and an rua address, analyze the reports to find every service sending on behalf of the domain, then move to quarantine and finally to reject.

DNS records of riotinto.com

IP addresses (A and AAAA)

An A record maps the domain name to an IPv4 address: the address of the server that browsers contact to display the website. The AAAA record does the same for an IPv6 address. A domain can have several of them to spread visits across several servers.

Name servers (NS)

NS records designate the authoritative DNS servers of the domain: they answer every question about its other records (A, MX, TXT…). They are provided by the registrar, the hosting provider or a dedicated DNS service, and several servers are declared so that the domain keeps working if one of them fails.

ServerIP address
dns16.domainnetwork.net204.74.115.248
dns11.domainnetwork.com204.74.108.248
dns12.domainnetwork.com204.74.109.248
dns13.domainnetwork.com199.7.68.248
dns14.domainnetwork.net199.7.69.248
dns15.domainnetwork.net204.74.114.248

Mail servers (MX)

MX records point to the servers that receive e-mails sent to the domain, that is to @riotinto.com addresses. Each server has a priority: the one with the lowest number is tried first, the others take over if it fails. Without an MX record, the domain cannot receive e-mails.

PriorityServerIP address
0riotinto-com.mail.protection.outlook.com52.101.41.22

TXT records

TXT records hold free text. They are used to prove ownership of the domain to online services (Google, Microsoft, Facebook…) and to publish e-mail security rules: SPF on the domain itself, DMARC on _dmarc.riotinto.com.

NameContent
riotinto.comqrbv9svhy3dw2ymmjl03k7wgcq0c81zw
riotinto.comapple-domain-verification=M7a8jqKFLvcSwwWr
riotinto.comdocusign=ee110089-7963-4dd8-9d8f-3e2fad64e851
riotinto.comcanva-site-verification=L3muY1chtiNlnRcB-PRSSA
riotinto.comDynatrace-site-verification=87e22acd-8e28-4878-bf85-81491916e677__ojakb6jcr9a2enoedbk5m143nb
riotinto.comwdbnwv31ARXNDTtK1XTcmrsbKAvp2qUJE2smun10S8vSDeaMcffM/xRSBPGJRtFlr99qfrdDTAc7z2WSUTwgVA==
riotinto.comdtm-domain-verification=bmVgDQ0LntXbuyykTMKmOWgoRR0BK1vmaQmEyD3hY0w
riotinto.comvyf7f13gv9802cgj05swkxn821s690mg
riotinto.comd78e3258ac8716d0be2efdc97104998e797c6fc718b5685e03cca5e2e13b84de
riotinto.comworkplace-domain-verification=D4j4L0ihB76NPZU32Nlotb2xlGX2rC
riotinto.comdocker-verification=23e700a9-97b9-4913-8929-c8df7a162155
riotinto.com_qm4uqtvmrw1cut1ageeip50nmv84ez6
riotinto.comsuccessfactors-site-verification=YzJjZmU5MWU0ODA2ZDI2MzJiNTBhNmNiZTUzNDRhMDg1NzAwYzdmZjU0MGJjZWIxYTI3MTMwMWFlMWVkZGE3Yg==
riotinto.comxz32dmvvr0whkm34m9swgn86nlr840lw
riotinto.comglobalsign-domain-verification=1505763E272B8F151050219814F87D6E
riotinto.comopenai-domain-verification=dv-dHFaFfUBtDg6tubYMPOxIvqb
riotinto.comteamviewer-sso-verification=741d796e12bb408dbb6766e0f3ac6b30
riotinto.com_hl6dogj5okhc0dxa3qiu39fr8aonjj3
riotinto.comv=spf1 ip4:203.15.191.188/32 ip4:203.15.191.189/32 ip4:203.15.191.252/32 ip4:203.15.191.253/32 ip4:203.15.190.226/32 ip4:203.15.190.227/32 ip4:208.185.229.0/24 ip4:208.185.235.0/24 ip4:148.59.108.0/23 ip4:148.59.106.0/23 ip4:148.59.107.25/32 ip4:148.59.109.25/32 ip4:182.160.163.188/32 ip4:157.133.127.52/32 ip4:205.236.155.25/32 ip4:69.20.6.34/32 ip4:87.253.233.6/32 ip4:3.226.40.151/32 ip4:159.183.181.113 ip4:149.72.116.19 ip4:149.72.117.225 ip4:149.72.119.192 ip4:149.72.119.197 ip4:149.72.119.199 ip4:149.72.119.210 ip4:149.72.147.106 ip4:149.72.148.50 ip4:149.72.155.21 ip4:149.72.160.121 ip4:149.72.166.148 ip4:35.80.141.6 ip4:44.229.121.55 ip4:74.179.243.94 ip4:172.214.67.207 ip4:4.236.81.254 ip4:148.59.100.16/28 include:spf.protection.outlook.com include:_spf01.mykronos.com include:spf.mandrillapp.com include:_spf.salesforce.com include:servers.mcsv.net include:spf1.fraedom.com include:spfa.mailendo.com include:spf1.workhuman.com include:spf-us.wfs.cloud ip4:159.135.229.88/32 ip4:159.135.237.231/32 ip4:207.134.161.197/32 ip4:20.5.80.155/32 ip4:20.5.82.25/32 ip4:74.201.88.25/32 ip4:12.239.120.27/32 ip4:195.200.255.124 ip4:20.53.141.40 ip4:20.11.185.19 -all
riotinto.comadobe-idp-site-verification=a115a72dee4b216a2c454c5b98a72af4c5eea21e8da9637d30781f3be7cfd1a8
riotinto.comgxkxd5s76mlwlcmpckkjythmn64qwljf
riotinto.comXcVJU8t5BTApd9ynj8GuQblKtoD2wItUVB2ammJdpUq3PS0bZM7D3aU4LMsy09qD0GCBYQmVZa0vbUv3Yiah8Q==
riotinto.comMS=ms32875429
riotinto.com_globalsign-domain-verification=AGPloDOvkD4Wr2TKw92KqYzI5QaeN-wzUM3HRbSx-E
riotinto.comdtm-domain-verification=sRjT7RXdKgsUxYkq_4viDdeyOTP097pMbxpxF2PFykw
riotinto.combndkbn08rqmbcw40f1wfnmdxqcqqg6v5
riotinto.com_30qly7boakc1tx6eibpfyzhkr4jsjst
riotinto.comdocusign=1729138f-cb6c-47c6-be94-d8d207ee6f37
riotinto.compexip-ms-tenant-domain-verification=0f3f3800-d6b3-449d-87ba-e81f6341bbc6
riotinto.comapple-domain-verification=TDmZl1EhXR7QYmA4
riotinto.commiro-verification=357c965b9c8be9702911c362ddb72c1959227ff2
riotinto.comn2jljmv1191jtnym33g8vmwcv1fw9v0f
riotinto.comhpe-greenlake-domain-verification=657536633437656a72584f64706f4668756d674e49424c397335526346525867
riotinto.com6c8192b8b16e61b79fa6ff1018cf5a2234da9d8d4d1a55d585c8d71893dd714a
riotinto.comtgxyfgznybjcf1n8ycn6k4v1bpbvhd35
riotinto.comglobalsign-domain-verification=F15F01F4C704302FB974C74EC3A7A324
riotinto.com3kh44kvfgfhm451ob51g64jn3l
riotinto.comd365mktkey=ychfosc72wz3ci9h5ov53wba
riotinto.com2s95775p4696gvnn4jkrfdppwd82zy5v
riotinto.comkr00cqrge6r3sdiaudj24sh4jg
riotinto.comatlassian-domain-verification=dBq7OjGxqxBRqVpkFzoawvkz/7KVFvAApfiXH4NiMpRslxOn5hcdE0zDaRsFVPjD
riotinto.comvnyqptz2m58fqvjdy1m17jdf774tgqtf
riotinto.comglobalsign-domain-verification=f68df60504bc65355eec6a252bff889c
riotinto.comxcpq2x05v7x85gq84c7n3gqw0xv2m153
riotinto.comj2tdf4w62gqqj19d57bkyr22vldq92q7
riotinto.comprb9l0fm3p1jhhym8h688s941hbyj6sz
riotinto.comapple-domain-verification=kmIdRWj81aFv2sPO
_dmarc.riotinto.comv=DMARC1; p=reject; fo=1; rua=mailto:[email protected]; ruf=mailto:[email protected]
selector1._domainkey.riotinto.comv=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wz221L2jmWZBCjf8jgi3mAEbsxt4zCnePYJS+vs6qSbVXOMJCLDzYviHf40YGcCoQlX9+s9E2Ozqm3TRWLtq5IUNFtDe1YNu1YAn/hrDwV45xt+n/gVJNV+8YIVv9/XalalRjXF3/iWYy6+PC7YZqOIk30WSx/1EZfWxhlLxRTh/uQgviJF/87yBDuqn3wrw2mPAxbq/GrnDu8VHrPQU8elIx1oShdCwkyDbvG6Eokz9Y7q+hsVMh/txNDYCljn22jHTGkt2q1yWIZvqX9S/3fVXaJe92n7ml0+K12ERLtx7kew693V17YCzsOjY10ILe249PYRW8fsKlp6Ubs3oQIDAQAB;
selector2._domainkey.riotinto.comv=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4TzQreTge+ElJb2Rg1zxzToCyykqF/m60O+36t7Cgj9JBuhWc+g4sTfam6XqaFkya/bSvKqBViBmW4nPRX8X7D9u3VcV/OfeDJOdldxBLdgp9LPQjUhwYfxI8MiKsVFr1vH0DyTKnuzLvstVzg6HLuxcIulInbOokbpJcrLBWrwIDAQAB;
k1._domainkey.riotinto.comk=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUoNyIR4Bn84LVcfZE20rmDeXQblIupNWBqLXM1Q+VieI/eZu/7k9/vOkLSaQQdml4Cv8lb3PcnluMVIhQIDAQAB;
mandrill._domainkey.riotinto.comv=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y78dHZj1YeRXXVvWob2OaKynO8/lQIDAQAB
s1._domainkey.riotinto.comk=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCUhDCCcx+C9kD8/7bUgIkcSlfFnLQoqk1IJ1h6+R2GGPgWF6QWKTKeEdMIFl1jvLmd14Er4hLafqOa2HvPzv5vkMv9430S5iXUDfD4oq2Efc4GHojQrL/GOv6PG9sYLUN298vhngbDX6LgGQOJIJA3V+x1z2wdI162pJTaWgP0L6AET9EUZc2qMhDWJV1NDnBjhgH7sZzsGAinF7mWy2EELQ8ftYcLj3g9vrD3zriDpZJ/3zJwfxUtudnti3+GTWbEWgsorbNIpRmVmIrRZobQ3LCJ6vRLZEKsNonR7bx89cMeFfZBHj24WVJBVTXpokVjIrL4Uh/JEh0GPKQ166QIDAQAB
s2._domainkey.riotinto.comk=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+vwhq6Intd7qm/D2R8gzuD5HZZfxY5BYNrmeS5xgsuQ5wdxpyKYgY3ks0T3sF0Tt5XKvXY0GwHuTpQwq6uNe8Ce0AUprGYECq8JxOzIxdeYn+78Fi6qju7CvIwefr4lvT4sbghr58BHnlhBZL8X+L5jvIYkPCQ5TFdWS0EhuyUwIDAQAB
default._domainkey.riotinto.comv=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XS9xBue2fpAxkqsrfvEHBC2F0MIClU7wt/yaMjizad66VIyX2mPpy16gpVEBZ7R2inYmHGWGYvwded0OTYzF2EBQimiH3FqyIT+ctwwZQU1k/6hEgHa/cQ8FMRDLypZbnKLtsmuFbngCn421zdj3ki4KG9cBI9nUJHtnVoBQ9v0hyU6IJvzyOPRoeq+bWIXHoHB7aoMA8iC0cA2Pm3gBfXbYXKZ5B9zfxdbSNeUuKioxFE90HWS2MnKmGkEwGeCQ4BB5D73N36yYM/9vPZ29zZmavXsrFM3tbT7YZSnbiwboVOx1FDd0hNjk0M/dzcKOMAJjT8/kdkrnf3jfyWLQQIDAQAB

Related IP addresses

IPv4 addresses used by riotinto.com: website, name servers, mail servers and senders authorized by SPF.

IP addressUsed for/24 block
45.60.198.134Website45.60.198.0/24
45.60.200.134Website45.60.200.0/24
204.74.115.248Name server dns16.domainnetwork.net204.74.115.0/24
204.74.108.248Name server dns11.domainnetwork.com204.74.108.0/24
204.74.109.248Name server dns12.domainnetwork.com204.74.109.0/24
199.7.68.248Name server dns13.domainnetwork.com199.7.68.0/24
199.7.69.248Name server dns14.domainnetwork.net199.7.69.0/24
204.74.114.248Name server dns15.domainnetwork.net204.74.114.0/24
52.101.41.22Mail server riotinto-com.mail.protection.outlook.com52.101.41.0/24
203.15.191.188Authorized by SPF203.15.191.0/24
203.15.191.189Authorized by SPF203.15.191.0/24
203.15.191.252Authorized by SPF203.15.191.0/24
203.15.191.253Authorized by SPF203.15.191.0/24
203.15.190.226Authorized by SPF203.15.190.0/24
203.15.190.227Authorized by SPF203.15.190.0/24
148.59.107.25Authorized by SPF148.59.107.0/24
148.59.109.25Authorized by SPF148.59.109.0/24
182.160.163.188Authorized by SPF182.160.163.0/24
157.133.127.52Authorized by SPF157.133.127.0/24
205.236.155.25Authorized by SPF205.236.155.0/24
69.20.6.34Authorized by SPF69.20.6.0/24
87.253.233.6Authorized by SPF87.253.233.0/24
3.226.40.151Authorized by SPF3.226.40.0/24
159.183.181.113Authorized by SPF159.183.181.0/24
149.72.116.19Authorized by SPF149.72.116.0/24
149.72.117.225Authorized by SPF149.72.117.0/24
149.72.119.192Authorized by SPF149.72.119.0/24
149.72.119.197Authorized by SPF149.72.119.0/24
149.72.119.199Authorized by SPF149.72.119.0/24
149.72.119.210Authorized by SPF149.72.119.0/24
149.72.147.106Authorized by SPF149.72.147.0/24
149.72.148.50Authorized by SPF149.72.148.0/24
149.72.155.21Authorized by SPF149.72.155.0/24
149.72.160.121Authorized by SPF149.72.160.0/24
149.72.166.148Authorized by SPF149.72.166.0/24
35.80.141.6Authorized by SPF35.80.141.0/24
44.229.121.55Authorized by SPF44.229.121.0/24
74.179.243.94Authorized by SPF74.179.243.0/24
172.214.67.207Authorized by SPF172.214.67.0/24
4.236.81.254Authorized by SPF4.236.81.0/24
159.135.229.88Authorized by SPF159.135.229.0/24
159.135.237.231Authorized by SPF159.135.237.0/24
207.134.161.197Authorized by SPF207.134.161.0/24
20.5.80.155Authorized by SPF20.5.80.0/24
20.5.82.25Authorized by SPF20.5.82.0/24
74.201.88.25Authorized by SPF74.201.88.0/24
12.239.120.27Authorized by SPF12.239.120.0/24
195.200.255.124Authorized by SPF195.200.255.0/24
20.53.141.40Authorized by SPF20.53.141.0/24
20.11.185.19Authorized by SPF20.11.185.0/24

WHOIS of the domain riotinto.com

Domain Name: RIOTINTO.COM
   Registry Domain ID: 1741882_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.corporatedomains.com
   Registrar URL: http://cscdbs.com
   Updated Date: 2026-02-04T06:12:01Z
   Creation Date: 1997-02-07T05:00:00Z
   Registry Expiry Date: 2027-02-08T05:00:00Z
   Registrar: CSC Corporate Domains, Inc.
   Registrar IANA ID: 299
   Registrar Abuse Contact Email: [email protected]
   Registrar Abuse Contact Phone: 8887802723
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: serverDeleteProhibited https://icann.org/epp#serverDeleteProhibited
   Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
   Domain Status: serverUpdateProhibited https://icann.org/epp#serverUpdateProhibited
   Name Server: DNS11.DOMAINNETWORK.COM
   Name Server: DNS12.DOMAINNETWORK.COM
   Name Server: DNS13.DOMAINNETWORK.COM
   Name Server: DNS14.DOMAINNETWORK.NET
   Name Server: DNS15.DOMAINNETWORK.NET
   Name Server: DNS16.DOMAINNETWORK.NET
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2026-10-01T20:45:28Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.