example.uk
domain Resolves DNSSEC validatedDNS by Cloudflare · Nameservers: NS 13 2 86400 20261116200039 20261114180039 34505 example.uk. gKw2jeweZjg7OHbZ3EhQC8C7ulxYY0hgmkYssg1pjik4i0bKCsDL2gfgtL29KSLJBdUYintqolYz7gzytL8hfg==, curt.ns.cloudflare.com, dee.ns.cloudflare.com
Findings
-
Fail 1 nameserver(s) do not answer authoritatively DNS-LAME-DELEGATION
NS 13 2 86400 20261116200039 20261114180039 34505 example.uk. gKw2jeweZjg7OHbZ3EhQC8C7ulxYY0hgmkYssg1pjik4i0bKCsDL2gfgtL29KSLJBdUYintqolYz7gzytL8hfg== (does not resolve)
How to fix: Every delegated nameserver must host the zone and answer with the AA flag. Remove servers that no longer serve the zone or load the zone onto them.
-
Caution NS set inside the zone differs from the delegation DNS-NS-SET-MISMATCH
curt.ns.cloudflare.com lists: curt.ns.cloudflare.com, dee.ns.cloudflare.com
How to fix: Keep the NS records in the zone identical to the nameservers configured at the registrar.
-
Note No MX records DNS-NO-MX
Mail for this domain falls back to the A record, or the domain does not receive mail.
-
Note No CAA record DNS-NO-CAA
Any certificate authority may issue certificates for this domain.
-
Pass Zone transfers are refused to outsiders DNS-AXFR-CLOSED
2 server(s) tested
-
Pass Nameservers agree on the zone serial DNS-SERIAL-OK
2419287794
-
Pass IPv6 address published for the apex DNS-IPV6-OK
-
Pass DNSSEC signed and validated DNSSEC-VALIDATED
DS at the parent matches a DNSKEY in the zone; the validating resolver set the AD flag.
NS 3
| Name | Type | TTL | Value |
|---|---|---|---|
| example.uk | NS | 86400 | dee.ns.cloudflare.com. |
| example.uk | NS | 86400 | curt.ns.cloudflare.com. |
| example.uk | RRSIG | 86400 | covers NS until 20261116200039 key 34505 |
SOA 2
| Name | Type | TTL | Value |
|---|---|---|---|
| example.uk | SOA | 1800 | primary curt.ns.cloudflare.com contact dns.cloudflare.com serial 2419287794 refresh/retry/expire/min 10000/2400/604800/1800 |
| example.uk | RRSIG | 1800 | covers SOA until 20261116200039 key 34505 |
A 3
| Name | Type | TTL | Value |
|---|---|---|---|
| example.uk | A | 300 | 104.21.5.94 |
| example.uk | A | 300 | 172.67.133.65 |
| example.uk | RRSIG | 300 | covers A until 20261116200039 key 34505 |
AAAA 3
| Name | Type | TTL | Value |
|---|---|---|---|
| example.uk | AAAA | 300 | 2606:4700:3031:0:0:0:ac43:8541 |
| example.uk | AAAA | 300 | 2606:4700:3035:0:0:0:6815:55e |
| example.uk | RRSIG | 300 | covers AAAA until 20261116200039 key 34505 |
www (A) 3
| Name | Type | TTL | Value |
|---|---|---|---|
| www.example.uk | A | 300 | 104.21.5.94 |
| www.example.uk | A | 300 | 172.67.133.65 |
| www.example.uk | RRSIG | 300 | covers A until 20261116200039 key 34505 |
MX 0
No MX records (NOERROR).
TXT 0
No TXT records (NOERROR).
CAA 0
No CAA records (NOERROR).
SRV 0
No SRV records (NOERROR).
DNSKEY 3
| Name | Type | TTL | Value |
|---|---|---|---|
| example.uk | DNSKEY | 1705 | ZSK alg 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XN... |
| example.uk | DNSKEY | 1705 | KSK alg 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopK... |
| example.uk | RRSIG | 1705 | covers DNSKEY until 20270103142131 key 2371 |
DS (parent) 2
| Name | Type | TTL | Value |
|---|---|---|---|
| example.uk | DS | 3600 | 2371 13 2 efae4e6af9f06643b4f72afa47e8110331bde5162f188626456183be590732be |
| example.uk | RRSIG | 3600 | covers DS until 20261215232549 key 64744 |
HTTPS 2
| Name | Type | TTL | Value |
|---|---|---|---|
| example.uk | HTTPS | 300 | 1 . alpn="h3,h2" ipv4hint=104.21.5.94,172.67.133.65 ech=AEX+DQBBBQAgACApXDV5FwvHlyguALzkfM98quDfHKMCOE46jVxG13umOQAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3031:0:0:0:ac43:8541,2606:4700:3035:0:0:0:6815:55e |
| example.uk | RRSIG | 300 | covers HTTPS until 20261116200039 key 34505 |
Nameserver agreement
| Server | Address | Authoritative | Serial | Time |
|---|---|---|---|---|
| NS 13 2 86400 20261116200039 20261114180039 34505 example.uk. gKw2jeweZjg7OHbZ3EhQC8C7ulxYY0hgmkYssg1pjik4i0bKCsDL2gfgtL29KSLJBdUYintqolYz7gzytL8hfg== | — | no · does not resolve | — | — |
| curt.ns.cloudflare.com | 108.162.193.94, 172.64.33.94, 173.245.59.94, 2606:4700:58:0:0:0:adf5:3b5e, 2803:f800:50:0:0:0:6ca2:c15e, 2a06:98c1:50:0:0:0:ac40:215e | yes | 2419287794 | 8 ms |
| dee.ns.cloudflare.com | 108.162.192.93, 172.64.32.93, 173.245.58.93, 2606:4700:50:0:0:0:adf5:3a5d, 2803:f800:50:0:0:0:6ca2:c05d, 2a06:98c1:50:0:0:0:ac40:205d | yes | 2419287794 | 9 ms |
Zone transfer (AXFR)
- curt.ns.cloudflare.com108.162.193.94refused (FORMERR)
- dee.ns.cloudflare.com108.162.192.93refused (FORMERR)
