Total Tests
28
Passed
27
Critical Issues
0
Your domain is using Cloudflare's DNS service, which provides DDoS protection, global CDN, and performance optimization features.
Information provided by ns01.trs-dns.com
162.159.38.33108.162.194.33172.64.34.332803:f800:50::6ca2:c2212606:4700:50::a29f:26212a06:98c1:50::ac40:2221172.64.33.219108.162.193.219173.245.59.2192606:4700:58::adf5:3bdb2a06:98c1:50::ac40:21db2803:f800:50::6ca2:c1dbNote:
The parent server is providing glue records for these nameservers. While not required (since the nameservers are not under your domain), this helps optimize DNS resolution.
| Status | Test name | Information |
|---|---|---|
Authoritative Nameservers | These nameservers are responsible for answering queries about your domain 2 Records poppy.ns.cloudflare.comowen.ns.cloudflare.comCloudflareYour domain is using Cloudflare's DNS service, which provides DDoS protection, global CDN, and performance optimization features. Source: This information was kindly provided by ns01.trs-dns.com ๐๐ผ | |
TLD Delegation Check | Good. ns01.trs-dns.com has information for your TLD. This confirms your domain is properly delegated. | |
Nameservers Listed at Parent | Good. The parent server has your nameservers listed and they match the actual NS records. This ensures consistent DNS resolution. | |
Glue Records from Parent | Glue Records from Parent ServerInformation provided by ns01.trs-dns.com poppy.ns.cloudflare.comNameserver IPv4 Addresses: 162.159.38.33108.162.194.33172.64.34.33IPv6 Addresses: 2803:f800:50::6ca2:c2212606:4700:50::a29f:26212a06:98c1:50::ac40:2221owen.ns.cloudflare.comNameserver IPv4 Addresses: 172.64.33.219108.162.193.219173.245.59.219IPv6 Addresses: 2606:4700:58::adf5:3bdb2a06:98c1:50::ac40:21db2803:f800:50::6ca2:c1dbNote: The parent server is providing glue records for these nameservers. While not required (since the nameservers are not under your domain), this helps optimize DNS resolution. |
| Status | Test name | Information |
|---|---|---|
Nameserver Records from Zone | owen.ns.cloudflare.comCloudflare IPv4 Addresses 172.64.33.219 173.245.59.219 108.162.193.219 IPv6 Addresses 2606:4700:58::adf5:3bdb 2803:f800:50::6ca2:c1db 2a06:98c1:50::ac40:21db Authoritative Non-Recursive TCP UDP TTL: 900s (0 days) poppy.ns.cloudflare.comCloudflare IPv4 Addresses 162.159.38.33 108.162.194.33 172.64.34.33 IPv6 Addresses 2a06:98c1:50::ac40:2221 2803:f800:50::6ca2:c221 2606:4700:50::a29f:2621 Authoritative Non-Recursive TCP UDP TTL: 900s (0 days) | |
Open Recursive Queries | Good. No nameservers allow recursive queries. | |
Glue Record Consistency | Cloudflareโs DNS uses a global network to speed up responses. Normally, the IP addresses at the parent nameservers and Cloudflareโs servers should match. If they donโt, it might just be a short-term update. | |
Missing Glue for NS Records | Cloudflare manages glue records through their global DNS infrastructure. | |
Mismatched NS records | Good. The NS records at all your nameservers are identical. | |
DNS servers responded | Good. All nameservers listed at the parent server responded. | |
Name of nameservers are valid | All NS records appear to be valid hostnames. | |
Nameserver Redundancy Check | You have 2 nameservers. This meets the minimum requirement, though RFC2182 section 5 recommends at least 3 for better reliability. | |
Lame Delegation Check | Good. All nameservers are answering authoritatively for your domain. | |
Parent Missing Nameservers | Good. All NS records match between parent and nameservers, as required by RFC1034 section 3.6. | |
Zone Missing Nameservers | Good. All parent-listed nameservers are reported by your nameservers, as required by RFC1034 section 3.6. | |
CNAMEs at Apex Check | Good. No CNAME records found for NS records, as per RFC1912 section 2.4 and RFC2181 section 10.3. | |
NS IP Subnet Diversity | Anycast provider detected (Cloudflare). While 2 IP pair(s) share a /16 prefix (172.64.33.219 and 172.64.34.33, 108.162.193.219 and 108.162.194.33), Cloudflare distributes these across globally diverse datacenters using anycast routing. No subnet diversity concern per RFC2182 section 5. |
Serial Number
2400471265
A unique version number that changes whenever the zone file is updated
How often secondary nameservers check for updates (20m - 24h)
How long to wait before retrying a failed zone transfer (2m - 2h)
How long secondary servers serve stale zone data (1w - 4w)
Default time-to-live for resource records (5m - 24h)
| Status | Test name | Information |
|---|---|---|
SOA record | Primary Nameserverowen.ns.cloudflare.com Hostmaster Emaildns.cloudflare.com Serial Number 2400471265 Non-Standard (Unix Timestamp) A unique version number that changes whenever the zone file is updated Time IntervalsRefresh10000 seconds (2 hours) How often secondary nameservers check for updates (20m - 24h) Retry2400 seconds (40 minutes) How long to wait before retrying a failed zone transfer (2m - 2h) Expire604800 seconds (7 days) How long secondary servers serve stale zone data (1w - 4w) TTL1800 seconds (30 minutes) Default time-to-live for resource records (5m - 24h) | |
SOA Serial Consistency | SOA Serial numbers per nameserver:
owen.ns.cloudflare.com: 2400471265
poppy.ns.cloudflare.com: 2400471265
Good. All nameservers report the same SOA serial number. | |
SOA MNAME entry | OK. owen.ns.cloudflare.com is correctly listed as one of your nameservers. | |
SOA Serial | Your SOA serial number is: 2400471265. Using Cloudflare's automatic serial number management. | |
SOA REFRESH | OK. Your SOA REFRESH interval is: 10000 seconds (167 minutes). This is within the recommended range of 1200-43200 seconds as per RFC1912 section 2.2. | |
SOA RETRY | OK. Your SOA RETRY value is: 2400 seconds (40 minutes). This is within the recommended range of 120-7200 seconds as per RFC1912 section 2.2. | |
SOA EXPIRE | Current expire time is 604800 seconds (7 days). Using Cloudflare's optimized SOA expire time. | |
SOA MINIMUM TTL | OK. Your SOA MINIMUM TTL is: 1800 seconds (30 minutes). This value is used for negative caching and is within the recommended range of 180-86400 seconds as per RFC2308 section 4. |
Your domain is using Cloudflare's infrastructure for content delivery and security
172.67.207.200104.21.53.21Configuration Benefits
Global content delivery
Content served from edge locations worldwide
DDoS protection
Built-in protection against distributed denial-of-service attacks
Load balancing
Intelligent traffic distribution across global network
Automatic failover
Seamless switching to healthy servers during outages
| Status | Test name | Information |
|---|---|---|
A Record Configuration | IPv4 ConfigurationYour domain is using Cloudflare's infrastructure for content delivery and security IPv4 Addresses 172.67.207.200104.21.53.21Configuration Benefits Global content delivery Content served from edge locations worldwide DDoS protection Built-in protection against distributed denial-of-service attacks Load balancing Intelligent traffic distribution across global network Automatic failover Seamless switching to healthy servers during outages TTL: 300s Provides a good balance between propagation speed and DNS load | |
A Record TTL | TTL of 300 seconds provides a good balance between propagation speed and DNS load. |
Your domain is using Cloudflare's infrastructure for content delivery and security
2606:4700:3037::6815:35152606:4700:3036::ac43:cfc8| Status | Test name | Information |
|---|---|---|
IPv6 Configuration | IPv6 ConfigurationYour domain is using Cloudflare's infrastructure for content delivery and security IPv6 Addresses 2606:4700:3037::6815:35152606:4700:3036::ac43:cfc8TTL: 300s Provides a good balance between propagation speed and DNS load |
| Priority | Mail Server | Actions |
|---|---|---|
4 | route2.mx.cloudflare.net | |
6 | route1.mx.cloudflare.net | |
68 | route3.mx.cloudflare.net |
| Status | Test name | Information | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Mail Server Consistency | All nameservers are reporting the same mail server configuration. This consistency ensures reliable email delivery. | |||||||||||||
Mail Server Configuration | Mail Exchange Configuration
Cloudflare MX servers use anycast IPs for optimal email routing. | |||||||||||||
Mail Server Hostname Validation | All mail server hostnames are properly formatted. | |||||||||||||
Public IP Validation | All mail servers use public IP addresses, ensuring global email delivery. | |||||||||||||
CNAME Validation | Mail servers are properly configured without CNAME records. | |||||||||||||
IP Uniqueness | Each mail server has unique IP addresses, indicating proper distribution of mail handling. | |||||||||||||
Reverse DNS Records | Using managed mail services: Cloudflare Email. PTR records are automatically managed by these providers. |
WWW record type: CDN Proxied (Proxied through Cloudflare)
104.21.53.21172.67.207.2002606:4700:3036::ac43:cfc82606:4700:3037::6815:3515CDN Configuration
| Status | Test name | Information |
|---|---|---|
WWW Configuration | WWW record type: CDN Proxied (Proxied through Cloudflare) www. CDN Proxied Record IPv4 Addresses 104.21.53.21172.67.207.200IPv6 Addresses 2606:4700:3036::ac43:cfc82606:4700:3037::6815:3515CDN Configuration Your WWW record is proxied through Cloudflare, providing:
|
| Status | Test name | Information |
|---|---|---|
DNSSEC | This domain uses Cloudflare. DNSSEC queries returned SERVFAIL, which may be due to resolver compatibility rather than a configuration issue. Cloudflare manages DNSSEC through their infrastructure โ check their dashboard for DNSSEC status. | |
Zone Transfer | Your domain uses Cloudflare nameservers. Zone transfers are managed securely through Cloudflare's infrastructure using proprietary protocols.
Learn more: https://dnschkr.com/blog/dns-attacks-guide#dns-zone-transfer-attack-axfr | |
CAA Records | No CAA records found. While optional, CAA records help control which Certificate Authorities can issue certificates for your domain. | |
Subdomain Takeover | Checked 8 common subdomains โ none have external CNAME records. No subdomain takeover risk from dangling CNAMEs.
Learn more: https://dnschkr.com/blog/dns-attacks-guide#subdomain-takeover |
v | spf1 include:_spf.mx.cloudflare.net ~all |
| Status | Test name | Information | ||||
|---|---|---|---|---|---|---|
TXT Records | Click any row to copy the raw value
Showing 1 of 1 record | |||||
SPF Record | Found SPF record: v=spf1 include:_spf.mx.cloudflare.net ~all | |||||
DMARC Record | No DMARC record found. DMARC helps prevent email spoofing and provides reporting capabilities. Consider adding a DMARC record to improve email security. |