gmail.com
domain ResolvesDNS by Google Cloud DNS · Nameservers: ns1.google.com, ns2.google.com, ns3.google.com, ns4.google.com
Findings
-
Caution SOA refresh outside the recommended range DNS-SOA-REFRESH
refresh=900s (recommended 20 min – 12 h)
-
Caution SOA expire is shorter than a week DNS-SOA-EXPIRE
expire=1800s
How to fix: Secondaries stop answering if the primary is unreachable for this long. 1–4 weeks is typical.
-
Note DNSSEC is not enabled DNSSEC-OFF
-
Pass Zone transfers are refused to outsiders DNS-AXFR-CLOSED
4 server(s) tested
-
Pass All nameservers answer authoritatively DNS-AUTHORITATIVE-OK
ns1.google.com, ns2.google.com, ns3.google.com, ns4.google.com
-
Pass Nameservers agree on the zone serial DNS-SERIAL-OK
1007156695
-
Pass IPv6 address published for the apex DNS-IPV6-OK
-
Pass CAA restricts which authorities may issue certificates DNS-CAA-OK
pki.goog
NS 4
| Name | Type | TTL | Value |
|---|---|---|---|
| gmail.com | NS | 340708 | ns4.google.com. |
| gmail.com | NS | 340708 | ns3.google.com. |
| gmail.com | NS | 340708 | ns1.google.com. |
| gmail.com | NS | 340708 | ns2.google.com. |
SOA 1
| Name | Type | TTL | Value |
|---|---|---|---|
| gmail.com | SOA | 60 | primary ns1.google.com contact dns-admin.google.com serial 1007156695 refresh/retry/expire/min 900/900/1800/60 |
A 4
| Name | Type | TTL | Value |
|---|---|---|---|
| gmail.com | A | 226 | 192.178.223.17 |
| gmail.com | A | 226 | 192.178.223.18 |
| gmail.com | A | 226 | 192.178.223.19 |
| gmail.com | A | 226 | 192.178.223.83 |
AAAA 4
| Name | Type | TTL | Value |
|---|---|---|---|
| gmail.com | AAAA | 300 | 2a00:1450:4009:c13:0:0:0:53 |
| gmail.com | AAAA | 300 | 2a00:1450:4009:c13:0:0:0:11 |
| gmail.com | AAAA | 300 | 2a00:1450:4009:c13:0:0:0:12 |
| gmail.com | AAAA | 300 | 2a00:1450:4009:c13:0:0:0:13 |
www (A) 4
| Name | Type | TTL | Value |
|---|---|---|---|
| www.gmail.com | A | 277 | 142.250.151.19 |
| www.gmail.com | A | 277 | 142.250.151.17 |
| www.gmail.com | A | 277 | 142.250.151.83 |
| www.gmail.com | A | 277 | 142.250.151.18 |
MX 5
| Name | Type | TTL | Value |
|---|---|---|---|
| gmail.com | MX | 494 | 40 alt4.gmail-smtp-in.l.google.com |
| gmail.com | MX | 494 | 10 alt1.gmail-smtp-in.l.google.com |
| gmail.com | MX | 494 | 5 gmail-smtp-in.l.google.com |
| gmail.com | MX | 494 | 20 alt2.gmail-smtp-in.l.google.com |
| gmail.com | MX | 494 | 30 alt3.gmail-smtp-in.l.google.com |
TXT 4
| Name | Type | TTL | Value |
|---|---|---|---|
| gmail.com | TXT | 300 | yahoo-verification-key=+eZwIPSgRxkAUzDtqT8Qhk+j4A1JF6V/wtGoyGTkELY= |
| gmail.com | TXT | 300 | globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8= |
| gmail.com | TXT | 300 | v=spf1 redirect=_spf.google.com |
| gmail.com | TXT | 300 | yahoo-verification-key=dKYwfVbaxatmcXiXy6LDAxMRirqpOq5tj98iJv9qWVk= |
CAA 1
| Name | Type | TTL | Value |
|---|---|---|---|
| gmail.com | CAA | 86400 | 0 issue pki.goog |
SRV 0
No SRV records (NOERROR).
DNSKEY 0
No DNSKEY records (NOERROR).
DS (parent) 0
No DS (parent) records (NOERROR).
HTTPS 0
No HTTPS records (NOERROR).
Nameserver agreement
| Server | Address | Authoritative | Serial | Time |
|---|---|---|---|---|
| ns1.google.com | 216.239.32.10, 2001:4860:4802:32:0:0:0:a | yes | 1007156695 | 12 ms |
| ns2.google.com | 216.239.34.10, 2001:4860:4802:34:0:0:0:a | yes | 1007156695 | 22 ms |
| ns3.google.com | 216.239.36.10, 2001:4860:4802:36:0:0:0:a | yes | 1007156695 | 12 ms |
| ns4.google.com | 216.239.38.10, 2001:4860:4802:38:0:0:0:a | yes | 1007156695 | 7 ms |
Zone transfer (AXFR)
- ns1.google.com216.239.32.10refused (NOERROR)
- ns2.google.com216.239.34.10refused (NOERROR)
- ns3.google.com216.239.36.10refused (NOERROR)
- ns4.google.com216.239.38.10refused (NOERROR)
