alvihasan.com — DNS Report
C
77%
29
Pass
1
Warnings
0
Failures
7
Info
37
Total
Processed in 1s
● 📋 Domain Registration
PASS| Registrar | PDR Ltd. d/b/a PublicDomainRegistry.com |
| Registrar ID | 303 |
| Registry | Verisign |
| Registry ID | 2199343651_DOMAIN_COM-VRSN |
| Created | Dec 12, 2017 |
| Updated | Jan 27, 2026 |
| Expires | Dec 12, 2026 (124 days left) |
| DNSSEC | ✗ Unsigned |
| Status | client transfer prohibited |
| RDAP Nameservers | ns1.vercel-dns.com ns2.vercel-dns.com |
● 🌐 DNS Records
PASSSOA Records (1)
| Name | Value | TTL |
|---|---|---|
| alvihasan.com | ns1.vercel-dns.com hostmaster.nsone.net 1769478048 43200 7200 1209600 600 | 3600 |
NS Records (2)
| Name | Value | TTL |
|---|---|---|
| alvihasan.com | ns1.vercel-dns.com | 86400 |
| alvihasan.com | ns2.vercel-dns.com | 86400 |
A Records (2)
| Name | Value | TTL |
|---|---|---|
| alvihasan.com | 216.198.79.1 | 1800 |
| alvihasan.com | 64.29.17.1 | 1800 |
TXT Records (1)
| Name | Value | TTL |
|---|---|---|
| alvihasan.com | v=spf1 include:amazonses.com ~all | 60 |
CAA Records (3)
| Name | Value | TTL |
|---|---|---|
| alvihasan.com | 0 issue "letsencrypt.org" | 60 |
| alvihasan.com | 0 issue "pki.goog" | 60 |
| alvihasan.com | 0 issue "sectigo.com" | 60 |
● 🔗 Parent Nameservers
PASS| Nameserver | IPv4 | IPv6 | Glue |
|---|---|---|---|
| ns2.vercel-dns.com | 198.51.45.13 | 2a00:edc0:6259:7:13::2 | Yes |
| ns1.vercel-dns.com | 198.51.44.13 | 2620:4d:4000:6259:7:13:0:1 | Yes |
| ✓ | Nameservers Listed at Parent | The parent TLD nameserver has 2 nameserver(s) listed for alvihasan.com.ns1.vercel-dns.com ns2.vercel-dns.com |
| ✓ | Minimum Nameserver Count | 2 nameservers found. Good redundancy. |
| ✓ | Glue Record: ns2.vercel-dns.com | Glue record found for ns2.vercel-dns.com: 198.51.45.13, 2a00:edc0:6259:7:13::2 |
| ✓ | Public IP: ns2.vercel-dns.com | Nameserver ns2.vercel-dns.com has a public IP address. |
| ✓ | Glue Record: ns1.vercel-dns.com | Glue record found for ns1.vercel-dns.com: 198.51.44.13, 2620:4d:4000:6259:7:13:0:1 |
| ✓ | Public IP: ns1.vercel-dns.com | Nameserver ns1.vercel-dns.com has a public IP address. |
| ✓ | Parent/Auth NS Consistency | The nameservers listed at the parent match those returned by the authoritative nameservers. |
● 🖥️ Authoritative Nameservers
PASS| Nameserver | UDP | TCP | Auth | Recursion | IPv6 | Latency |
|---|---|---|---|---|---|---|
| ns1.vercel-dns.com | ✓ | ✓ | ✓ | Closed | ✓ | 11ms |
| ns2.vercel-dns.com | ✓ | ✗ Down | ✓ | Closed | ✓ | 10ms |
| ✓ | Authoritative Nameservers Found | Found 2 authoritative nameserver(s): ns1.vercel-dns.com, ns2.vercel-dns.com |
| ✓ | All Nameservers Respond | All authoritative nameservers are responding to DNS queries. |
| ✓ | UDP DNS (Port 53) | At least one nameserver is responding to UDP DNS queries on port 53. |
| ✓ | TCP DNS (Port 53) | TCP DNS queries are supported. Required for large responses and DNSSEC. |
| ✓ | Authoritative Response | At least one nameserver returns an authoritative (AA) response for the zone. |
| ✓ | Open Recursion | Nameservers do not appear to answer recursive queries from outside. Good. |
| ✓ | Public IP Addresses | All nameservers have publicly routable IP addresses. |
| ✓ | IPv6 Support | At least one nameserver has an IPv6 (AAAA) address. |
| ✓ | NS Record Consistency | All authoritative nameservers return identical NS records. |
| ✓ | Multiple Network Diversity | Nameservers appear to be on different subnets/networks. Good resilience. |
● 📄 SOA Record
INFO| Primary NS (MNAME) | ns1.vercel-dns.com |
| Email (RNAME) | hostmaster.nsone.net |
| Serial | 1769478048 |
| Refresh | 43200 (12 hours) |
| Retry | 7200 (2 hours) |
| Expire | 1209600 (14 days) |
| Minimum TTL | 600 (10 min) |
| ✓ | SOA Record Exists | SOA record found for alvihasan.com. |
| ✓ | SOA MNAME | SOA MNAME (ns1.vercel-dns.com) is listed as an authoritative nameserver. |
| ✓ | SOA RNAME | SOA contact email: hostmaster@nsone.net |
| ℹ | SOA Serial Format | SOA serial is 1769478048. The recommended format is YYYYMMDDNN (e.g., 2024010101). |
| ✓ | SOA Serial Consistency | All authoritative nameservers return the same SOA serial number. |
| ✓ | SOA Refresh | SOA Refresh is 43200 seconds (12h). Reasonable value. |
| ✓ | SOA Retry | SOA Retry is 7200 seconds. |
| ✓ | SOA Expire | SOA Expire is 1209600 seconds (14 days). Reasonable value. |
| ✓ | SOA Minimum TTL | SOA Minimum TTL (negative caching) is 600 seconds. |
● 📧 Mail Servers (MX)
INFONo MX records found. This domain cannot receive email.
| ℹ | MX Records | No MX records found for alvihasan.com. This domain cannot receive email. |
● 🌍 WWW / Web
INFO| Target | Type | IPs |
|---|---|---|
| www.alvihasan.com | A | 64.29.17.65, 216.198.79.65 |
| ✓ | WWW Record | www.alvihasan.com resolves to: 64.29.17.65, 216.198.79.65 |
| ℹ | WWW vs Apex IP | www.alvihasan.com and alvihasan.com resolve to different IP addresses. This is normal if they are intentionally served differently. |
● 🔒 DNSSEC
INFO| Enabled | No |
Chain of Trust
| Level | DS | DNSKEY | RRSIG | Status |
|---|---|---|---|---|
| . | — | ✓ | ✓ | PASS |
| com | ✓ | ✓ | ✓ | PASS |
| alvihasan.com | — | — | — | INFO |
| ℹ | DNSSEC Status | DNSSEC is not enabled for alvihasan.com. No DS or DNSKEY records found. |
● 🛡️ Email Security
WARNINGSPF (Sender Policy Framework)
| Record | v=spf1 include:amazonses.com ~all |
| All Mechanism | ~all |
| DNS Lookups | 1 / 10 max |
DMARC (Domain-based Message Authentication)
No DMARC record found. Consider adding a DMARC policy to protect against email spoofing.
CAA (Certificate Authority Authorization)
| Flag | Tag | Value |
|---|---|---|
| 0 | issue | letsencrypt.org |
| 0 | issue | pki.goog |
| 0 | issue | sectigo.com |
| ✓ | SPF Record | SPF record found.v=spf1 include:amazonses.com ~all |
| ℹ | SPF All Mechanism | SPF record uses '~all' (softfail). Non-listed senders will be marked but not rejected. Consider '-all' for strict enforcement. |
| ✓ | SPF DNS Lookup Count | SPF record uses approximately 1 DNS lookups (limit is 10). |
| ⚠ | DMARC Record | No DMARC record found at _dmarc.[domain]. DMARC helps prevent email spoofing and phishing. |
| ✓ | CAA Records | CAA records found (3). Certificate issuance is restricted. |
| ℹ | CAA issuewild Tag | No 'issuewild' CAA tag. The 'issue' policy applies to wildcard certificates too, unless overridden. |
| ℹ | CAA iodef Tag | No 'iodef' CAA tag. Consider adding an iodef tag to receive reports of unauthorized certificate requests. |
● 📡 DNS Propagation
PASS| Status | Resolver | Location | Result | Latency |
|---|---|---|---|---|
| ✓ | Google Public DNS 2 (8.8.4.4) | US (Google) | 64.29.17.1, 64.29.17.65 | 26ms |
| ✓ | Quad9 (9.9.9.9) | US (Quad9) | 216.198.79.65, 64.29.17.1 | 30ms |
| ✓ | Cloudflare (1.1.1.1) | US (Cloudflare) | 216.198.79.65, 64.29.17.1 | 47ms |
| ✓ | Cloudflare 2 (1.0.0.1) | US (Cloudflare) | 216.198.79.1, 64.29.17.1 | 50ms |
| ✓ | Comodo Secure (8.26.56.26) | US (Comodo) | 216.198.79.1, 64.29.17.1 | 50ms |
| ✓ | OpenDNS 2 (208.67.220.220) | US (OpenDNS) | 64.29.17.65, 64.29.17.1 | 20ms |
| ✓ | OpenDNS (208.67.222.222) | US (OpenDNS) | 64.29.17.65, 216.198.79.65 | 37ms |
| ✓ | Verisign (64.6.64.6) | US (Verisign) | 64.29.17.1, 64.29.17.65 | 26ms |
| ✓ | Google Public DNS (8.8.8.8) | US (Google) | 64.29.17.65, 64.29.17.1 | 26ms |
| ✓ | Yandex.DNS (77.88.8.8) | RU (Yandex) | 216.198.79.1, 64.29.17.1 | 340ms |