example.net
domain Resolves DNSSEC validatedDNS by Cloudflare · Nameservers: NS 13 2 86400 20261028172756 20261026152756 34505 example.net. zNQ59oUkxnD/5wGb30bzvuBNOsC70wPnJEcaFsPIAgiSosHSejW2+wBOPJ//NYW8d+DhBVD39JJZPqkIQhwHmA==, betty.ns.cloudflare.com, hugh.ns.cloudflare.com
Findings
-
Fail 1 nameserver(s) do not answer authoritatively DNS-LAME-DELEGATION
NS 13 2 86400 20261028172756 20261026152756 34505 example.net. zNQ59oUkxnD/5wGb30bzvuBNOsC70wPnJEcaFsPIAgiSosHSejW2+wBOPJ//NYW8d+DhBVD39JJZPqkIQhwHmA== (does not resolve)
How to fix: Every delegated nameserver must host the zone and answer with the AA flag. Remove servers that no longer serve the zone or load the zone onto them.
-
Caution NS set inside the zone differs from the delegation DNS-NS-SET-MISMATCH
betty.ns.cloudflare.com lists: betty.ns.cloudflare.com, hugh.ns.cloudflare.com
How to fix: Keep the NS records in the zone identical to the nameservers configured at the registrar.
-
Note No CAA record DNS-NO-CAA
Any certificate authority may issue certificates for this domain.
-
Pass Zone transfers are refused to outsiders DNS-AXFR-CLOSED
2 server(s) tested
-
Pass Nameservers agree on the zone serial DNS-SERIAL-OK
2418002667
-
Pass IPv6 address published for the apex DNS-IPV6-OK
-
Pass DNSSEC signed and validated DNSSEC-VALIDATED
DS at the parent matches a DNSKEY in the zone; the validating resolver set the AD flag.
NS 3
| Name | Type | TTL | Value |
|---|---|---|---|
| example.net | NS | 86400 | hugh.ns.cloudflare.com. |
| example.net | NS | 86400 | betty.ns.cloudflare.com. |
| example.net | RRSIG | 86400 | covers NS until 20261028172756 key 34505 |
SOA 2
| Name | Type | TTL | Value |
|---|---|---|---|
| example.net | SOA | 1800 | primary betty.ns.cloudflare.com contact dns.cloudflare.com serial 2418002667 refresh/retry/expire/min 10000/2400/604800/1800 |
| example.net | RRSIG | 1800 | covers SOA until 20261028172756 key 34505 |
A 3
| Name | Type | TTL | Value |
|---|---|---|---|
| example.net | A | 140 | 104.20.21.8 |
| example.net | A | 140 | 172.66.175.59 |
| example.net | RRSIG | 140 | covers A until 20261028172515 key 34505 |
AAAA 3
| Name | Type | TTL | Value |
|---|---|---|---|
| example.net | AAAA | 300 | 2606:4700:10:0:0:0:6814:1508 |
| example.net | AAAA | 300 | 2606:4700:10:0:0:0:ac42:af3b |
| example.net | RRSIG | 300 | covers AAAA until 20261028172756 key 34505 |
www (A) 3
| Name | Type | TTL | Value |
|---|---|---|---|
| www.example.net | A | 145 | 172.66.175.59 |
| www.example.net | A | 145 | 104.20.21.8 |
| www.example.net | RRSIG | 145 | covers A until 20261028172520 key 34505 |
MX 2
| Name | Type | TTL | Value |
|---|---|---|---|
| example.net | MX | 300 | 0 |
| example.net | RRSIG | 300 | covers MX until 20261028172756 key 34505 |
TXT 3
| Name | Type | TTL | Value |
|---|---|---|---|
| example.net | TXT | 300 | v=spf1 -all |
| example.net | TXT | 300 | _amxnurhoscjcufk1gioomxkqicy03vx |
| example.net | RRSIG | 300 | covers TXT until 20261028172756 key 34505 |
CAA 0
No CAA records (NOERROR).
SRV 0
No SRV records (NOERROR).
DNSKEY 4
| Name | Type | TTL | Value |
|---|---|---|---|
| example.net | DNSKEY | 1279 | ZSK alg 13 Nlir3WAtyzwPCJ2r2XG/8mTue4aQ6JrlzAFYlsFk... |
| example.net | DNSKEY | 1279 | ZSK alg 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XN... |
| example.net | DNSKEY | 1279 | KSK alg 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopK... |
| example.net | RRSIG | 1279 | covers DNSKEY until 20261219172243 key 2371 |
DS (parent) 2
| Name | Type | TTL | Value |
|---|---|---|---|
| example.net | DS | 86400 | 2371 13 2 6ebdd24b59ebb0a642d07f2d8ef3cb65aaf1124fa5507fb2f2101d53b45fe666 |
| example.net | RRSIG | 86400 | covers DS until 20261102035439 key 3840 |
HTTPS 2
| Name | Type | TTL | Value |
|---|---|---|---|
| example.net | HTTPS | 300 | 1 . alpn="h3,h2" ipv4hint=104.20.21.8,172.66.175.59 ipv6hint=2606:4700:10:0:0:0:6814:1508,2606:4700:10:0:0:0:ac42:af3b |
| example.net | RRSIG | 300 | covers HTTPS until 20261028172756 key 34505 |
Nameserver agreement
| Server | Address | Authoritative | Serial | Time |
|---|---|---|---|---|
| NS 13 2 86400 20261028172756 20261026152756 34505 example.net. zNQ59oUkxnD/5wGb30bzvuBNOsC70wPnJEcaFsPIAgiSosHSejW2+wBOPJ//NYW8d+DhBVD39JJZPqkIQhwHmA== | — | no · does not resolve | — | — |
| betty.ns.cloudflare.com | 108.162.192.75, 172.64.32.75, 173.245.58.75, 2606:4700:50:0:0:0:adf5:3a4b, 2803:f800:50:0:0:0:6ca2:c04b, 2a06:98c1:50:0:0:0:ac40:204b | yes | 2418002667 | 7 ms |
| hugh.ns.cloudflare.com | 108.162.193.117, 172.64.33.117, 173.245.59.117, 2606:4700:58:0:0:0:adf5:3b75, 2803:f800:50:0:0:0:6ca2:c175, 2a06:98c1:50:0:0:0:ac40:2175 | yes | 2418002667 | 7 ms |
Zone transfer (AXFR)
- betty.ns.cloudflare.com108.162.192.75refused (FORMERR)
- hugh.ns.cloudflare.com108.162.193.117refused (FORMERR)
