example.org
domain Resolves DNSSEC validatedDNS by Cloudflare · Nameservers: NS 13 2 86400 20261028172746 20261026152746 34505 example.org. Qu38LqaYvJBODAXoc7aYodt+lXGA9VpIyeXHKWDdOPesI965IQDw92zjA3YCpmtrKW8caIJKfIi7zC3+2ToX1Q==, katelyn.ns.cloudflare.com, mitch.ns.cloudflare.com
Findings
-
Fail 1 nameserver(s) do not answer authoritatively DNS-LAME-DELEGATION
NS 13 2 86400 20261028172746 20261026152746 34505 example.org. Qu38LqaYvJBODAXoc7aYodt+lXGA9VpIyeXHKWDdOPesI965IQDw92zjA3YCpmtrKW8caIJKfIi7zC3+2ToX1Q== (does not resolve)
How to fix: Every delegated nameserver must host the zone and answer with the AA flag. Remove servers that no longer serve the zone or load the zone onto them.
-
Caution NS set inside the zone differs from the delegation DNS-NS-SET-MISMATCH
katelyn.ns.cloudflare.com lists: katelyn.ns.cloudflare.com, mitch.ns.cloudflare.com
How to fix: Keep the NS records in the zone identical to the nameservers configured at the registrar.
-
Note No CAA record DNS-NO-CAA
Any certificate authority may issue certificates for this domain.
-
Pass Zone transfers are refused to outsiders DNS-AXFR-CLOSED
2 server(s) tested
-
Pass Nameservers agree on the zone serial DNS-SERIAL-OK
2418002692
-
Pass IPv6 address published for the apex DNS-IPV6-OK
-
Pass DNSSEC signed and validated DNSSEC-VALIDATED
DS at the parent matches a DNSKEY in the zone; the validating resolver set the AD flag.
NS 3
| Name | Type | TTL | Value |
|---|---|---|---|
| example.org | NS | 86400 | mitch.ns.cloudflare.com. |
| example.org | NS | 86400 | katelyn.ns.cloudflare.com. |
| example.org | RRSIG | 86400 | covers NS until 20261028172746 key 34505 |
SOA 2
| Name | Type | TTL | Value |
|---|---|---|---|
| example.org | SOA | 1800 | primary katelyn.ns.cloudflare.com contact dns.cloudflare.com serial 2418002692 refresh/retry/expire/min 10000/2400/604800/1800 |
| example.org | RRSIG | 1800 | covers SOA until 20261028172746 key 34505 |
A 3
| Name | Type | TTL | Value |
|---|---|---|---|
| example.org | A | 244 | 104.20.26.136 |
| example.org | A | 244 | 172.66.157.237 |
| example.org | RRSIG | 244 | covers A until 20261028172650 key 34505 |
AAAA 3
| Name | Type | TTL | Value |
|---|---|---|---|
| example.org | AAAA | 77 | 2606:4700:10:0:0:0:ac42:9ded |
| example.org | AAAA | 77 | 2606:4700:10:0:0:0:6814:1a88 |
| example.org | RRSIG | 77 | covers AAAA until 20261028172403 key 34505 |
www (A) 3
| Name | Type | TTL | Value |
|---|---|---|---|
| www.example.org | A | 300 | 104.20.26.136 |
| www.example.org | A | 300 | 172.66.157.237 |
| www.example.org | RRSIG | 300 | covers A until 20261028172746 key 34505 |
MX 2
| Name | Type | TTL | Value |
|---|---|---|---|
| example.org | MX | 300 | 0 |
| example.org | RRSIG | 300 | covers MX until 20261028172746 key 34505 |
TXT 3
| Name | Type | TTL | Value |
|---|---|---|---|
| example.org | TXT | 300 | v=spf1 -all |
| example.org | TXT | 300 | _uyh0vgv5ukyofwj3ddwspnni01vmlyy |
| example.org | RRSIG | 300 | covers TXT until 20261028172746 key 34505 |
CAA 0
No CAA records (NOERROR).
SRV 0
No SRV records (NOERROR).
DNSKEY 4
| Name | Type | TTL | Value |
|---|---|---|---|
| example.org | DNSKEY | 1232 | ZSK alg 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XN... |
| example.org | DNSKEY | 1232 | ZSK alg 13 rrb+BlJVun2ZQH2D9zT6YCcFPRcK89MQBo2digql... |
| example.org | DNSKEY | 1232 | KSK alg 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopK... |
| example.org | RRSIG | 1232 | covers DNSKEY until 20261219172309 key 2371 |
DS (parent) 2
| Name | Type | TTL | Value |
|---|---|---|---|
| example.org | DS | 3600 | 2371 13 2 169521ab547df3a14c1719a0f0d5289278e22682b53ce9f22d379b922125bf98 |
| example.org | RRSIG | 3600 | covers DS until 20261115152640 key 25488 |
HTTPS 2
| Name | Type | TTL | Value |
|---|---|---|---|
| example.org | HTTPS | 300 | 1 . alpn="h3,h2" ipv4hint=104.20.26.136,172.66.157.237 ipv6hint=2606:4700:10:0:0:0:6814:1a88,2606:4700:10:0:0:0:ac42:9ded |
| example.org | RRSIG | 300 | covers HTTPS until 20261028172746 key 34505 |
Nameserver agreement
| Server | Address | Authoritative | Serial | Time |
|---|---|---|---|---|
| NS 13 2 86400 20261028172746 20261026152746 34505 example.org. Qu38LqaYvJBODAXoc7aYodt+lXGA9VpIyeXHKWDdOPesI965IQDw92zjA3YCpmtrKW8caIJKfIi7zC3+2ToX1Q== | — | no · does not resolve | — | — |
| katelyn.ns.cloudflare.com | 108.162.194.235, 162.159.38.235, 172.64.34.235, 2606:4700:50:0:0:0:a29f:26eb, 2803:f800:50:0:0:0:6ca2:c2eb, 2a06:98c1:50:0:0:0:ac40:22eb | yes | 2418002692 | 7 ms |
| mitch.ns.cloudflare.com | 108.162.193.208, 172.64.33.208, 173.245.59.208, 2606:4700:58:0:0:0:adf5:3bd0, 2803:f800:50:0:0:0:6ca2:c1d0, 2a06:98c1:50:0:0:0:ac40:21d0 | yes | 2418002692 | 8 ms |
Zone transfer (AXFR)
- katelyn.ns.cloudflare.com108.162.194.235refused (FORMERR)
- mitch.ns.cloudflare.com108.162.193.208refused (FORMERR)
