example.org
domain Resolves DNSSEC validatedDNS by Cloudflare · Nameservers: NS 13 2 86400 20261029190152 20261027170152 34505 example.org. TAG2QLHMFESo0DyrgM2oIqmnWJ44Iex9dpyzJKVRRipR6ilOUKv2MQgGsLr+w/O1+hQ+J6XerD5ZvyoLA4NPug==, katelyn.ns.cloudflare.com, mitch.ns.cloudflare.com
Findings
-
Fail 1 nameserver(s) do not answer authoritatively DNS-LAME-DELEGATION
NS 13 2 86400 20261029190152 20261027170152 34505 example.org. TAG2QLHMFESo0DyrgM2oIqmnWJ44Iex9dpyzJKVRRipR6ilOUKv2MQgGsLr+w/O1+hQ+J6XerD5ZvyoLA4NPug== (does not resolve)
How to fix: Every delegated nameserver must host the zone and answer with the AA flag. Remove servers that no longer serve the zone or load the zone onto them.
-
Caution NS set inside the zone differs from the delegation DNS-NS-SET-MISMATCH
katelyn.ns.cloudflare.com lists: katelyn.ns.cloudflare.com, mitch.ns.cloudflare.com
How to fix: Keep the NS records in the zone identical to the nameservers configured at the registrar.
-
Note No CAA record DNS-NO-CAA
Any certificate authority may issue certificates for this domain.
-
Note Very low TTL on A records DNS-TTL-LOW
53s
-
Pass Zone transfers are refused to outsiders DNS-AXFR-CLOSED
2 server(s) tested
-
Pass Nameservers agree on the zone serial DNS-SERIAL-OK
2418002692
-
Pass IPv6 address published for the apex DNS-IPV6-OK
-
Pass DNSSEC signed and validated DNSSEC-VALIDATED
DS at the parent matches a DNSKEY in the zone; the validating resolver set the AD flag.
HTTPS 2
| Name | Type | TTL | Value |
|---|---|---|---|
| example.org | HTTPS | 300 | 1 . alpn="h3,h2" ipv4hint=104.20.26.136,172.66.157.237 ipv6hint=2606:4700:10:0:0:0:6814:1a88,2606:4700:10:0:0:0:ac42:9ded |
| example.org | RRSIG | 300 | covers HTTPS until 20261029190152 key 34505 |
Nameserver agreement
| Server | Address | Authoritative | Serial | Time |
|---|---|---|---|---|
| NS 13 2 86400 20261029190152 20261027170152 34505 example.org. TAG2QLHMFESo0DyrgM2oIqmnWJ44Iex9dpyzJKVRRipR6ilOUKv2MQgGsLr+w/O1+hQ+J6XerD5ZvyoLA4NPug== | — | no · does not resolve | — | — |
| katelyn.ns.cloudflare.com | 108.162.194.235, 162.159.38.235, 172.64.34.235, 2606:4700:50:0:0:0:a29f:26eb, 2803:f800:50:0:0:0:6ca2:c2eb, 2a06:98c1:50:0:0:0:ac40:22eb | yes | 2418002692 | 7 ms |
| mitch.ns.cloudflare.com | 108.162.193.208, 172.64.33.208, 173.245.59.208, 2606:4700:58:0:0:0:adf5:3bd0, 2803:f800:50:0:0:0:6ca2:c1d0, 2a06:98c1:50:0:0:0:ac40:21d0 | yes | 2418002692 | 6 ms |
Zone transfer (AXFR)
- katelyn.ns.cloudflare.com108.162.194.235refused (FORMERR)
- mitch.ns.cloudflare.com108.162.193.208refused (FORMERR)
