Skip to content
whois.me.uk
Menu
Sign in

example.com

domain Resolves DNSSEC validated

DNS by Cloudflare · Nameservers: NS 13 2 86400 20261116200028 20261114180028 34505 example.com. 1wAVkNdJRBgSy7ZxhW0DLXTr5TRswygDCtsyxwDJ7llN0fdT2CvZdU7+m/UBN+LvAtpmjkNGcPV8+iDJ/+OUsA==, elliott.ns.cloudflare.com, hera.ns.cloudflare.com

Re-run JSON PDF Snapshot Watch this
80 / 100 · Fair 4 pass 1 caution 1 fail 1 note Checked 20 seconds ago (cached) · 297 ms

Findings

  • Fail 1 nameserver(s) do not answer authoritatively DNS-LAME-DELEGATION

    NS 13 2 86400 20261116200028 20261114180028 34505 example.com. 1wAVkNdJRBgSy7ZxhW0DLXTr5TRswygDCtsyxwDJ7llN0fdT2CvZdU7+m/UBN+LvAtpmjkNGcPV8+iDJ/+OUsA== (does not resolve)

    How to fix: Every delegated nameserver must host the zone and answer with the AA flag. Remove servers that no longer serve the zone or load the zone onto them.

    Read the fix guide →

  • Caution NS set inside the zone differs from the delegation DNS-NS-SET-MISMATCH

    elliott.ns.cloudflare.com lists: elliott.ns.cloudflare.com, hera.ns.cloudflare.com

    How to fix: Keep the NS records in the zone identical to the nameservers configured at the registrar.

    Read the fix guide →

  • Note No CAA record DNS-NO-CAA

    Any certificate authority may issue certificates for this domain.

    Read the fix guide →

  • Pass Zone transfers are refused to outsiders DNS-AXFR-CLOSED

    2 server(s) tested

  • Pass Nameservers agree on the zone serial DNS-SERIAL-OK

    2420077714

  • Pass IPv6 address published for the apex DNS-IPV6-OK
  • Pass DNSSEC signed and validated DNSSEC-VALIDATED

    DS at the parent matches a DNSKEY in the zone; the validating resolver set the AD flag.

Records

All
NS SOA A AAAA www (A) MX TXT DNSKEY DS (parent) HTTPS

NS 3

NameTypeTTLValue
example.com NS 86400 hera.ns.cloudflare.com.
example.com NS 86400 elliott.ns.cloudflare.com.
example.com RRSIG 86400 covers NS until 20261116200028 key 34505

SOA 2

NameTypeTTLValue
example.com SOA 1800 primary elliott.ns.cloudflare.com contact dns.cloudflare.com serial 2420077714 refresh/retry/expire/min 10000/2400/604800/1800
example.com RRSIG 1800 covers SOA until 20261116200028 key 34505

A 3

NameTypeTTLValue
example.com A 232 172.66.147.243
example.com A 232 104.20.23.154
example.com RRSIG 232 covers A until 20261116195920 key 34505

AAAA 3

NameTypeTTLValue
example.com AAAA 48 2606:4700:10:0:0:0:ac42:93f3
example.com AAAA 48 2606:4700:10:0:0:0:6814:179a
example.com RRSIG 48 covers AAAA until 20261116195616 key 34505

www (A) 3

NameTypeTTLValue
www.example.com A 55 172.66.147.243
www.example.com A 55 104.20.23.154
www.example.com RRSIG 55 covers A until 20261116195622 key 34505

MX 2

NameTypeTTLValue
example.com MX 300 0
example.com RRSIG 300 covers MX until 20261116200028 key 34505

TXT 3

NameTypeTTLValue
example.com TXT 300 v=spf1 -all
example.com TXT 300 _k2n1y4vw3qtb4skdx9e7dxt97qrmmq9
example.com RRSIG 300 covers TXT until 20261116200028 key 34505

CAA 0

No CAA records (NOERROR).

SRV 0

No SRV records (NOERROR).

DNSKEY 5

NameTypeTTLValue
example.com DNSKEY 3371 ZSK alg 13 MjyZielP0GqniI1+j+wAG/3t0ImDDIlj1CxR0oob...
example.com DNSKEY 3371 ZSK alg 13 kxipjoIbNZDsWqEKaYaGq6fM/XThrRp1ue6AV9R/...
example.com DNSKEY 3371 ZSK alg 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XN...
example.com DNSKEY 3371 KSK alg 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopK...
example.com RRSIG 3371 covers DNSKEY until 20270112174651 key 2371

DS (parent) 2

NameTypeTTLValue
example.com DS 84251 2371 13 2 c988ec423e3880eb8dd8a46fe06ca230ee23f35b578d64e78b29c3e1c83d245a
example.com RRSIG 84251 covers DS until 20261121013335 key 65344

HTTPS 2

NameTypeTTLValue
example.com HTTPS 300 1 . alpn="h3,h2" ipv4hint=104.20.23.154,172.66.147.243 ipv6hint=2606:4700:10:0:0:0:6814:179a,2606:4700:10:0:0:0:ac42:93f3
example.com RRSIG 300 covers HTTPS until 20261116200010 key 34505

Nameserver agreement

ServerAddressAuthoritativeSerialTime
NS 13 2 86400 20261116200028 20261114180028 34505 example.com. 1wAVkNdJRBgSy7ZxhW0DLXTr5TRswygDCtsyxwDJ7llN0fdT2CvZdU7+m/UBN+LvAtpmjkNGcPV8+iDJ/+OUsA== — no · does not resolve — —
elliott.ns.cloudflare.com 108.162.195.228, 162.159.44.228, 172.64.35.228, 2606:4700:58:0:0:0:a29f:2ce4, 2803:f800:50:0:0:0:6ca2:c3e4, 2a06:98c1:50:0:0:0:ac40:23e4 yes 2420077714 7 ms
hera.ns.cloudflare.com 108.162.192.162, 172.64.32.162, 173.245.58.162, 2606:4700:50:0:0:0:adf5:3aa2, 2803:f800:50:0:0:0:6ca2:c0a2, 2a06:98c1:50:0:0:0:ac40:20a2 yes 2420077714 8 ms

Zone transfer (AXFR)

  • elliott.ns.cloudflare.com108.162.195.228refused (FORMERR)
  • hera.ns.cloudflare.com108.162.192.162refused (FORMERR)