Skip to content
whois.me.uk

example.org

domain Resolves DNSSEC validated

DNS by Cloudflare · Nameservers: NS 13 2 86400 20261028172746 20261026152746 34505 example.org. Qu38LqaYvJBODAXoc7aYodt+lXGA9VpIyeXHKWDdOPesI965IQDw92zjA3YCpmtrKW8caIJKfIi7zC3+2ToX1Q==, katelyn.ns.cloudflare.com, mitch.ns.cloudflare.com

80 / 100 · Fair 4 pass 1 caution 1 fail 1 note Checked 19 seconds ago (cached) · 305 ms

Findings

  • Fail 1 nameserver(s) do not answer authoritatively DNS-LAME-DELEGATION

    NS 13 2 86400 20261028172746 20261026152746 34505 example.org. Qu38LqaYvJBODAXoc7aYodt+lXGA9VpIyeXHKWDdOPesI965IQDw92zjA3YCpmtrKW8caIJKfIi7zC3+2ToX1Q== (does not resolve)

    How to fix: Every delegated nameserver must host the zone and answer with the AA flag. Remove servers that no longer serve the zone or load the zone onto them.

    Read the fix guide →

  • Caution NS set inside the zone differs from the delegation DNS-NS-SET-MISMATCH

    katelyn.ns.cloudflare.com lists: katelyn.ns.cloudflare.com, mitch.ns.cloudflare.com

    How to fix: Keep the NS records in the zone identical to the nameservers configured at the registrar.

    Read the fix guide →

  • Note No CAA record DNS-NO-CAA

    Any certificate authority may issue certificates for this domain.

    Read the fix guide →

  • Pass Zone transfers are refused to outsiders DNS-AXFR-CLOSED

    2 server(s) tested

  • Pass Nameservers agree on the zone serial DNS-SERIAL-OK

    2418002692

  • Pass IPv6 address published for the apex DNS-IPV6-OK
  • Pass DNSSEC signed and validated DNSSEC-VALIDATED

    DS at the parent matches a DNSKEY in the zone; the validating resolver set the AD flag.

Records

All
NS SOA A AAAA www (A) MX TXT DNSKEY DS (parent) HTTPS

NS 3

NameTypeTTLValue
example.org NS 86400 mitch.ns.cloudflare.com.
example.org NS 86400 katelyn.ns.cloudflare.com.
example.org RRSIG 86400 covers NS until 20261028172746 key 34505

SOA 2

NameTypeTTLValue
example.org SOA 1800 primary katelyn.ns.cloudflare.com contact dns.cloudflare.com serial 2418002692 refresh/retry/expire/min 10000/2400/604800/1800
example.org RRSIG 1800 covers SOA until 20261028172746 key 34505

A 3

NameTypeTTLValue
example.org A 244 104.20.26.136
example.org A 244 172.66.157.237
example.org RRSIG 244 covers A until 20261028172650 key 34505

AAAA 3

NameTypeTTLValue
example.org AAAA 77 2606:4700:10:0:0:0:ac42:9ded
example.org AAAA 77 2606:4700:10:0:0:0:6814:1a88
example.org RRSIG 77 covers AAAA until 20261028172403 key 34505

www (A) 3

NameTypeTTLValue
www.example.org A 300 104.20.26.136
www.example.org A 300 172.66.157.237
www.example.org RRSIG 300 covers A until 20261028172746 key 34505

MX 2

NameTypeTTLValue
example.org MX 300 0
example.org RRSIG 300 covers MX until 20261028172746 key 34505

TXT 3

NameTypeTTLValue
example.org TXT 300 v=spf1 -all
example.org TXT 300 _uyh0vgv5ukyofwj3ddwspnni01vmlyy
example.org RRSIG 300 covers TXT until 20261028172746 key 34505

CAA 0

No CAA records (NOERROR).

SRV 0

No SRV records (NOERROR).

DNSKEY 4

NameTypeTTLValue
example.org DNSKEY 1232 ZSK alg 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XN...
example.org DNSKEY 1232 ZSK alg 13 rrb+BlJVun2ZQH2D9zT6YCcFPRcK89MQBo2digql...
example.org DNSKEY 1232 KSK alg 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopK...
example.org RRSIG 1232 covers DNSKEY until 20261219172309 key 2371

DS (parent) 2

NameTypeTTLValue
example.org DS 3600 2371 13 2 169521ab547df3a14c1719a0f0d5289278e22682b53ce9f22d379b922125bf98
example.org RRSIG 3600 covers DS until 20261115152640 key 25488

HTTPS 2

NameTypeTTLValue
example.org HTTPS 300 1 . alpn="h3,h2" ipv4hint=104.20.26.136,172.66.157.237 ipv6hint=2606:4700:10:0:0:0:6814:1a88,2606:4700:10:0:0:0:ac42:9ded
example.org RRSIG 300 covers HTTPS until 20261028172746 key 34505

Nameserver agreement

ServerAddressAuthoritativeSerialTime
NS 13 2 86400 20261028172746 20261026152746 34505 example.org. Qu38LqaYvJBODAXoc7aYodt+lXGA9VpIyeXHKWDdOPesI965IQDw92zjA3YCpmtrKW8caIJKfIi7zC3+2ToX1Q== — no · does not resolve — —
katelyn.ns.cloudflare.com 108.162.194.235, 162.159.38.235, 172.64.34.235, 2606:4700:50:0:0:0:a29f:26eb, 2803:f800:50:0:0:0:6ca2:c2eb, 2a06:98c1:50:0:0:0:ac40:22eb yes 2418002692 7 ms
mitch.ns.cloudflare.com 108.162.193.208, 172.64.33.208, 173.245.59.208, 2606:4700:58:0:0:0:adf5:3bd0, 2803:f800:50:0:0:0:6ca2:c1d0, 2a06:98c1:50:0:0:0:ac40:21d0 yes 2418002692 8 ms

Zone transfer (AXFR)

  • katelyn.ns.cloudflare.com108.162.194.235refused (FORMERR)
  • mitch.ns.cloudflare.com108.162.193.208refused (FORMERR)