example.uk
domain Resolves DNSSEC validatedDNS by Cloudflare · Nameservers: NS 13 2 86400 20261028172820 20261026152820 34505 example.uk. WDa/gS19+UgkIrBKYmDQfjF3K8u9H2Do26NcN1CyhyG89WjZIwpbim4ACzt+z6YmpoizOVm4lmU9TN71xNPVlQ==, curt.ns.cloudflare.com, dee.ns.cloudflare.com
Findings
-
Fail 1 nameserver(s) do not answer authoritatively DNS-LAME-DELEGATION
NS 13 2 86400 20261028172820 20261026152820 34505 example.uk. WDa/gS19+UgkIrBKYmDQfjF3K8u9H2Do26NcN1CyhyG89WjZIwpbim4ACzt+z6YmpoizOVm4lmU9TN71xNPVlQ== (does not resolve)
How to fix: Every delegated nameserver must host the zone and answer with the AA flag. Remove servers that no longer serve the zone or load the zone onto them.
-
Caution NS set inside the zone differs from the delegation DNS-NS-SET-MISMATCH
curt.ns.cloudflare.com lists: curt.ns.cloudflare.com, dee.ns.cloudflare.com
How to fix: Keep the NS records in the zone identical to the nameservers configured at the registrar.
-
Note No MX records DNS-NO-MX
Mail for this domain falls back to the A record, or the domain does not receive mail.
-
Note No CAA record DNS-NO-CAA
Any certificate authority may issue certificates for this domain.
-
Pass Zone transfers are refused to outsiders DNS-AXFR-CLOSED
2 server(s) tested
-
Pass Nameservers agree on the zone serial DNS-SERIAL-OK
2417214191
-
Pass IPv6 address published for the apex DNS-IPV6-OK
-
Pass DNSSEC signed and validated DNSSEC-VALIDATED
DS at the parent matches a DNSKEY in the zone; the validating resolver set the AD flag.
NS 3
| Name | Type | TTL | Value |
|---|---|---|---|
| example.uk | NS | 86400 | dee.ns.cloudflare.com. |
| example.uk | NS | 86400 | curt.ns.cloudflare.com. |
| example.uk | RRSIG | 86400 | covers NS until 20261028172820 key 34505 |
SOA 2
| Name | Type | TTL | Value |
|---|---|---|---|
| example.uk | SOA | 1800 | primary curt.ns.cloudflare.com contact dns.cloudflare.com serial 2417214191 refresh/retry/expire/min 10000/2400/604800/1800 |
| example.uk | RRSIG | 1800 | covers SOA until 20261028172820 key 34505 |
A 3
| Name | Type | TTL | Value |
|---|---|---|---|
| example.uk | A | 300 | 104.21.5.94 |
| example.uk | A | 300 | 172.67.133.65 |
| example.uk | RRSIG | 300 | covers A until 20261028172820 key 34505 |
AAAA 3
| Name | Type | TTL | Value |
|---|---|---|---|
| example.uk | AAAA | 300 | 2606:4700:3031:0:0:0:ac43:8541 |
| example.uk | AAAA | 300 | 2606:4700:3035:0:0:0:6815:55e |
| example.uk | RRSIG | 300 | covers AAAA until 20261028172820 key 34505 |
www (A) 3
| Name | Type | TTL | Value |
|---|---|---|---|
| www.example.uk | A | 300 | 104.21.5.94 |
| www.example.uk | A | 300 | 172.67.133.65 |
| www.example.uk | RRSIG | 300 | covers A until 20261028172820 key 34505 |
MX 0
No MX records (NOERROR).
TXT 0
No TXT records (NOERROR).
CAA 0
No CAA records (NOERROR).
SRV 0
No SRV records (NOERROR).
DNSKEY 3
| Name | Type | TTL | Value |
|---|---|---|---|
| example.uk | DNSKEY | 713 | ZSK alg 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XN... |
| example.uk | DNSKEY | 713 | KSK alg 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopK... |
| example.uk | RRSIG | 713 | covers DNSKEY until 20261210142127 key 2371 |
DS (parent) 2
| Name | Type | TTL | Value |
|---|---|---|---|
| example.uk | DS | 3600 | 2371 13 2 efae4e6af9f06643b4f72afa47e8110331bde5162f188626456183be590732be |
| example.uk | RRSIG | 3600 | covers DS until 20261125002637 key 64744 |
HTTPS 2
| Name | Type | TTL | Value |
|---|---|---|---|
| example.uk | HTTPS | 300 | 1 . alpn="h3,h2" ipv4hint=104.21.5.94,172.67.133.65 ech=AEX+DQBB6wAgACAbbsjPCLtZIa62Loutvoih3vYoXIanfU+unuznDtwCRwAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3031:0:0:0:ac43:8541,2606:4700:3035:0:0:0:6815:55e |
| example.uk | RRSIG | 300 | covers HTTPS until 20261028172820 key 34505 |
Nameserver agreement
| Server | Address | Authoritative | Serial | Time |
|---|---|---|---|---|
| NS 13 2 86400 20261028172820 20261026152820 34505 example.uk. WDa/gS19+UgkIrBKYmDQfjF3K8u9H2Do26NcN1CyhyG89WjZIwpbim4ACzt+z6YmpoizOVm4lmU9TN71xNPVlQ== | — | no · does not resolve | — | — |
| curt.ns.cloudflare.com | 108.162.193.94, 172.64.33.94, 173.245.59.94, 2606:4700:58:0:0:0:adf5:3b5e, 2803:f800:50:0:0:0:6ca2:c15e, 2a06:98c1:50:0:0:0:ac40:215e | yes | 2417214191 | 8 ms |
| dee.ns.cloudflare.com | 108.162.192.93, 172.64.32.93, 173.245.58.93, 2606:4700:50:0:0:0:adf5:3a5d, 2803:f800:50:0:0:0:6ca2:c05d, 2a06:98c1:50:0:0:0:ac40:205d | yes | 2417214191 | 8 ms |
Zone transfer (AXFR)
- curt.ns.cloudflare.com108.162.193.94refused (FORMERR)
- dee.ns.cloudflare.com108.162.192.93refused (FORMERR)
