goldr.org — DNS Report
B
81%
30
Pass
2
Warnings
0
Failures
4
Info
36
Total
Processed in 0s
● 📋 Domain Registration
PASS| Registrar | Spaceship, Inc. |
| Registrar ID | 3862 |
| Created | Sep 11, 2025 |
| Updated | Aug 10, 2026 |
| Expires | Sep 11, 2027 (397 days left) |
| DNSSEC | ✗ Unsigned |
| Status | client transfer prohibited |
| RDAP Nameservers | fonzie.ns.cloudflare.com olivia.ns.cloudflare.com |
● 🌐 DNS Records
PASSSOA Records (1)
| Name | Value | TTL |
|---|---|---|
| goldr.org | fonzie.ns.cloudflare.com dns.cloudflare.com 2411814294 10000 2400 604800 1800 | 1800 |
NS Records (2)
| Name | Value | TTL |
|---|---|---|
| goldr.org | fonzie.ns.cloudflare.com | 86400 |
| goldr.org | olivia.ns.cloudflare.com | 86400 |
A Records (2)
| Name | Value | TTL |
|---|---|---|
| goldr.org | 172.67.203.213 | 300 |
| goldr.org | 104.21.93.30 | 300 |
AAAA Records (2)
| Name | Value | TTL |
|---|---|---|
| goldr.org | 2606:4700:3030::ac43:cbd5 | 300 |
| goldr.org | 2606:4700:3033::6815:5d1e | 300 |
MX Records (1)
| Name | Value | TTL |
|---|---|---|
| goldr.org | mx.stackmail.com | 300 |
TXT Records (2)
| Name | Value | TTL |
|---|---|---|
| goldr.org | google-site-verification=JcRuOPiLiUo1b8-0zD16tjGeQdJ6hCjnxuYiIEvVr4M | 300 |
| goldr.org | v=spf1 include:spf.stackmail.com a mx -all | 300 |
● 🔗 Parent Nameservers
PASS| Nameserver | IPv4 | IPv6 | Glue |
|---|---|---|---|
| fonzie.ns.cloudflare.com | 162.159.44.70, 108.162.195.70, 172.64.35.70 | 2606:4700:58::a29f:2c46, 2803:f800:50::6ca2:c346, 2a06:98c1:50::ac40:2346 | No |
| olivia.ns.cloudflare.com | 162.159.38.221, 108.162.194.221, 172.64.34.221 | 2a06:98c1:50::ac40:22dd, 2606:4700:50::a29f:26dd, 2803:f800:50::6ca2:c2dd | No |
| ✓ | Nameservers Listed at Parent | The parent TLD nameserver has 2 nameserver(s) listed for goldr.org.fonzie.ns.cloudflare.com olivia.ns.cloudflare.com |
| ✓ | Minimum Nameserver Count | 2 nameservers found. Good redundancy. |
| ✓ | Public IP: fonzie.ns.cloudflare.com | Nameserver fonzie.ns.cloudflare.com has a public IP address. |
| ✓ | Public IP: olivia.ns.cloudflare.com | Nameserver olivia.ns.cloudflare.com has a public IP address. |
| ✓ | Parent/Auth NS Consistency | The nameservers listed at the parent match those returned by the authoritative nameservers. |
● 🖥️ Authoritative Nameservers
PASS| Nameserver | UDP | TCP | Auth | Recursion | IPv6 | Latency |
|---|---|---|---|---|---|---|
| fonzie.ns.cloudflare.com | ✓ | ✓ | ✓ | Closed | ✓ | 23ms |
| olivia.ns.cloudflare.com | ✓ | ✓ | ✓ | Closed | ✓ | 12ms |
| ✓ | Authoritative Nameservers Found | Found 2 authoritative nameserver(s): olivia.ns.cloudflare.com, fonzie.ns.cloudflare.com |
| ✓ | All Nameservers Respond | All authoritative nameservers are responding to DNS queries. |
| ✓ | UDP DNS (Port 53) | At least one nameserver is responding to UDP DNS queries on port 53. |
| ✓ | TCP DNS (Port 53) | TCP DNS queries are supported. Required for large responses and DNSSEC. |
| ✓ | Authoritative Response | At least one nameserver returns an authoritative (AA) response for the zone. |
| ✓ | Open Recursion | Nameservers do not appear to answer recursive queries from outside. Good. |
| ✓ | Public IP Addresses | All nameservers have publicly routable IP addresses. |
| ✓ | IPv6 Support | At least one nameserver has an IPv6 (AAAA) address. |
| ✓ | NS Record Consistency | All authoritative nameservers return identical NS records. |
| ✓ | Multiple Network Diversity | Nameservers appear to be on different subnets/networks. Good resilience. |
● 📄 SOA Record
INFO| Primary NS (MNAME) | fonzie.ns.cloudflare.com |
| Email (RNAME) | dns.cloudflare.com |
| Serial | 2411814294 |
| Refresh | 10000 (2h 46m) |
| Retry | 2400 (40 min) |
| Expire | 604800 (7 days) |
| Minimum TTL | 1800 (30 min) |
| ✓ | SOA Record Exists | SOA record found for goldr.org. |
| ✓ | SOA MNAME | SOA MNAME (fonzie.ns.cloudflare.com) is listed as an authoritative nameserver. |
| ✓ | SOA RNAME | SOA contact email: dns@cloudflare.com |
| ℹ | SOA Serial Format | SOA serial is 2411814294. The recommended format is YYYYMMDDNN (e.g., 2024010101). |
| ✓ | SOA Serial Consistency | All authoritative nameservers return the same SOA serial number. |
| ✓ | SOA Refresh | SOA Refresh is 10000 seconds (2h). Reasonable value. |
| ✓ | SOA Retry | SOA Retry is 2400 seconds. |
| ✓ | SOA Expire | SOA Expire is 604800 seconds (7 days). Reasonable value. |
| ✓ | SOA Minimum TTL | SOA Minimum TTL (negative caching) is 1800 seconds. |
● 📧 Mail Servers (MX)
WARNING| Priority | Hostname | IPv4 | IPv6 | PTR |
|---|---|---|---|---|
| 10 | mx.stackmail.com | 185.151.28.67 | - | mx.stackmail.com |
| ✓ | MX Records Exist | Found 1 MX record(s) for goldr.org. |
| ⚠ | MX Redundancy | Only one MX record found. A single mail server is a single point of failure. Consider adding a backup MX. |
| ✓ | MX Reverse DNS (PTR) | MX server(s) have PTR (reverse DNS) records. Many mail servers require rDNS for anti-spam. |
| ✓ | MX Consistency | All authoritative nameservers return consistent MX records. |
● 🌍 WWW / Web
INFO| Target | Type | IPs |
|---|---|---|
| www.goldr.org | A | 172.67.203.213, 104.21.93.30, 2606:4700:3033::6815:5d1e, 2606:4700:3030::ac43:cbd5 |
| ✓ | WWW Record | www.goldr.org resolves to: 172.67.203.213, 104.21.93.30, 2606:4700:3033::6815:5d1e, 2606:4700:3030::ac43:cbd5 |
| ℹ | WWW vs Apex IP | www.goldr.org and goldr.org resolve to different IP addresses. This is normal if they are intentionally served differently. |
● 🔒 DNSSEC
INFO| Enabled | No |
Chain of Trust
| Level | DS | DNSKEY | RRSIG | Status |
|---|---|---|---|---|
| . | — | ✓ | ✓ | PASS |
| org | ✓ | ✓ | ✓ | PASS |
| goldr.org | — | — | — | INFO |
| ℹ | DNSSEC Status | DNSSEC is not enabled for goldr.org. No DS or DNSKEY records found. |
● 🛡️ Email Security
WARNINGSPF (Sender Policy Framework)
| Record | v=spf1 include:spf.stackmail.com a mx -all |
| All Mechanism | -all |
| DNS Lookups | 3 / 10 max |
DMARC (Domain-based Message Authentication)
No DMARC record found. Consider adding a DMARC policy to protect against email spoofing.
CAA (Certificate Authority Authorization)
No CAA records found. Any certificate authority can issue SSL certificates for this domain.
| ✓ | SPF Record | SPF record found.v=spf1 include:spf.stackmail.com a mx -all |
| ✓ | SPF All Mechanism | SPF record uses '-all' (fail). Non-listed senders will be rejected. Good. |
| ✓ | SPF DNS Lookup Count | SPF record uses approximately 3 DNS lookups (limit is 10). |
| ⚠ | DMARC Record | No DMARC record found at _dmarc.[domain]. DMARC helps prevent email spoofing and phishing. |
| ℹ | CAA Records | No CAA records found for goldr.org. CAA records specify which certificate authorities may issue SSL/TLS certificates for this domain. |
● 📡 DNS Propagation
PASS| Status | Resolver | Location | Result | Latency |
|---|---|---|---|---|
| ✓ | Comodo Secure (8.26.56.26) | US (Comodo) | 172.67.203.213, 104.21.93.30 | 24ms |
| ✓ | Quad9 (9.9.9.9) | US (Quad9) | 104.21.93.30, 172.67.203.213 | 28ms |
| ✓ | Google Public DNS (8.8.8.8) | US (Google) | 104.21.93.30, 172.67.203.213 | 29ms |
| ✓ | Google Public DNS 2 (8.8.4.4) | US (Google) | 104.21.93.30, 172.67.203.213 | 31ms |
| ✓ | Cloudflare (1.1.1.1) | US (Cloudflare) | 172.67.203.213, 104.21.93.30 | 17ms |
| ✓ | Cloudflare 2 (1.0.0.1) | US (Cloudflare) | 104.21.93.30, 172.67.203.213 | 17ms |
| ✓ | Verisign (64.6.64.6) | US (Verisign) | 104.21.93.30, 172.67.203.213 | 27ms |
| ✓ | OpenDNS (208.67.222.222) | US (OpenDNS) | 104.21.93.30, 172.67.203.213 | 90ms |
| ✓ | OpenDNS 2 (208.67.220.220) | US (OpenDNS) | 104.21.93.30, 172.67.203.213 | 91ms |
| ✓ | Yandex.DNS (77.88.8.8) | RU (Yandex) | 172.67.203.213, 104.21.93.30 | 506ms |
● 🔄 Reverse DNS (PTR)
INFO| IP Address | PTR Record | Forward Match |
|---|---|---|
| 185.151.28.67 | mx.stackmail.com | ✓ Match |