Skip to content
whois.me.uk

example.org

domain Resolves DNSSEC validated

DNS by Cloudflare · Nameservers: NS 13 2 86400 20261116200029 20261114180029 34505 example.org. EPchXK2iraf5gXauAn17KsIYujDenQfXA+HsQJXWcegEEXn7hLA9mVAtzBqGf9OOCju1LZ7/umrFt/swl4oysA==, katelyn.ns.cloudflare.com, mitch.ns.cloudflare.com

80 / 100 · Fair 4 pass 1 caution 1 fail 1 note Checked 26 seconds ago (cached) · 284 ms

Findings

  • Fail 1 nameserver(s) do not answer authoritatively DNS-LAME-DELEGATION

    NS 13 2 86400 20261116200029 20261114180029 34505 example.org. EPchXK2iraf5gXauAn17KsIYujDenQfXA+HsQJXWcegEEXn7hLA9mVAtzBqGf9OOCju1LZ7/umrFt/swl4oysA== (does not resolve)

    How to fix: Every delegated nameserver must host the zone and answer with the AA flag. Remove servers that no longer serve the zone or load the zone onto them.

    Read the fix guide →

  • Caution NS set inside the zone differs from the delegation DNS-NS-SET-MISMATCH

    katelyn.ns.cloudflare.com lists: katelyn.ns.cloudflare.com, mitch.ns.cloudflare.com

    How to fix: Keep the NS records in the zone identical to the nameservers configured at the registrar.

    Read the fix guide →

  • Note No CAA record DNS-NO-CAA

    Any certificate authority may issue certificates for this domain.

    Read the fix guide →

  • Pass Zone transfers are refused to outsiders DNS-AXFR-CLOSED

    2 server(s) tested

  • Pass Nameservers agree on the zone serial DNS-SERIAL-OK

    2420076294

  • Pass IPv6 address published for the apex DNS-IPV6-OK
  • Pass DNSSEC signed and validated DNSSEC-VALIDATED

    DS at the parent matches a DNSKEY in the zone; the validating resolver set the AD flag.

Records

All
NS SOA A AAAA www (A) MX TXT DNSKEY DS (parent) HTTPS

NS 3

NameTypeTTLValue
example.org NS 86400 mitch.ns.cloudflare.com.
example.org NS 86400 katelyn.ns.cloudflare.com.
example.org RRSIG 86400 covers NS until 20261116200029 key 34505

SOA 2

NameTypeTTLValue
example.org SOA 1800 primary katelyn.ns.cloudflare.com contact dns.cloudflare.com serial 2420076294 refresh/retry/expire/min 10000/2400/604800/1800
example.org RRSIG 1800 covers SOA until 20261116200029 key 34505

A 3

NameTypeTTLValue
example.org A 160 172.66.157.237
example.org A 160 104.20.26.136
example.org RRSIG 160 covers A until 20261116195809 key 34505

AAAA 3

NameTypeTTLValue
example.org AAAA 60 2606:4700:10:0:0:0:ac42:9ded
example.org AAAA 60 2606:4700:10:0:0:0:6814:1a88
example.org RRSIG 60 covers AAAA until 20261116195628 key 34505

www (A) 3

NameTypeTTLValue
www.example.org A 62 172.66.157.237
www.example.org A 62 104.20.26.136
www.example.org RRSIG 62 covers A until 20261116195630 key 34505

MX 2

NameTypeTTLValue
example.org MX 300 0
example.org RRSIG 300 covers MX until 20261116200029 key 34505

TXT 3

NameTypeTTLValue
example.org TXT 300 v=spf1 -all
example.org TXT 300 _uyh0vgv5ukyofwj3ddwspnni01vmlyy
example.org RRSIG 300 covers TXT until 20261116200029 key 34505

CAA 0

No CAA records (NOERROR).

SRV 0

No SRV records (NOERROR).

DNSKEY 4

NameTypeTTLValue
example.org DNSKEY 3385 ZSK alg 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XN...
example.org DNSKEY 3385 ZSK alg 13 rrb+BlJVun2ZQH2D9zT6YCcFPRcK89MQBo2digql...
example.org DNSKEY 3385 KSK alg 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopK...
example.org RRSIG 3385 covers DNSKEY until 20270112172311 key 2371

DS (parent) 2

NameTypeTTLValue
example.org DS 2151 2371 13 2 169521ab547df3a14c1719a0f0d5289278e22682b53ce9f22d379b922125bf98
example.org RRSIG 2151 covers DS until 20261203002355 key 11859

HTTPS 2

NameTypeTTLValue
example.org HTTPS 300 1 . alpn="h3,h2" ipv4hint=104.20.26.136,172.66.157.237 ipv6hint=2606:4700:10:0:0:0:6814:1a88,2606:4700:10:0:0:0:ac42:9ded
example.org RRSIG 300 covers HTTPS until 20261116200029 key 34505

Nameserver agreement

ServerAddressAuthoritativeSerialTime
NS 13 2 86400 20261116200029 20261114180029 34505 example.org. EPchXK2iraf5gXauAn17KsIYujDenQfXA+HsQJXWcegEEXn7hLA9mVAtzBqGf9OOCju1LZ7/umrFt/swl4oysA== — no · does not resolve — —
katelyn.ns.cloudflare.com 108.162.194.235, 162.159.38.235, 172.64.34.235, 2606:4700:50:0:0:0:a29f:26eb, 2803:f800:50:0:0:0:6ca2:c2eb, 2a06:98c1:50:0:0:0:ac40:22eb yes 2420076294 6 ms
mitch.ns.cloudflare.com 108.162.193.208, 172.64.33.208, 173.245.59.208, 2606:4700:58:0:0:0:adf5:3bd0, 2803:f800:50:0:0:0:6ca2:c1d0, 2a06:98c1:50:0:0:0:ac40:21d0 yes 2420076294 6 ms

Zone transfer (AXFR)

  • katelyn.ns.cloudflare.com108.162.194.235refused (FORMERR)
  • mitch.ns.cloudflare.com108.162.193.208refused (FORMERR)