google.tv — DNS Report
D
66%
26
Pass
6
Warnings
0
Failures
5
Info
37
Total
Processed in 1s
● 📋 Domain Registration
PASS| Registrar | MarkMonitor, Inc. |
| Registrant | REDACTED FOR PRIVACY |
| Created | Aug 02, 2002 |
| Updated | Jul 06, 2026 |
| Expires | Aug 02, 2027 (351 days left) |
| DNSSEC | ✗ Unsigned |
| Status | clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited clientTransferProhibited https://icann.org/epp#clientTransferProhibited clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited serverUpdateProhibited https://icann.org/epp#serverUpdateProhibited serverDeleteProhibited https://icann.org/epp#serverDeleteProhibited serverTransferProhibited https://icann.org/epp#serverTransferProhibited |
| WHOIS Server | whois.nic.tv |
| RDAP Nameservers | ns1.google.com ns2.google.com ns3.google.com |
● 🌐 DNS Records
PASSSOA Records (1)
| Name | Value | TTL |
|---|---|---|
| google.tv | ns1.google.com dns-admin.google.com 965142848 900 900 1800 60 | 60 |
NS Records (4)
| Name | Value | TTL |
|---|---|---|
| google.tv | ns4.google.com | 345600 |
| google.tv | ns2.google.com | 345600 |
| google.tv | ns3.google.com | 345600 |
| google.tv | ns1.google.com | 345600 |
TXT Records (1)
| Name | Value | TTL |
|---|---|---|
| google.tv | v=spf1 -all | 300 |
CAA Records (1)
| Name | Value | TTL |
|---|---|---|
| google.tv | 0 issue "pki.goog" | 86400 |
● 🔗 Parent Nameservers
WARNING| Nameserver | IPv4 | IPv6 | Glue |
|---|---|---|---|
| ns1.google.com | 216.239.32.10 | 2001:4860:4802:32::a | No |
| ns3.google.com | 216.239.36.10 | 2001:4860:4802:36::a | No |
| ns2.google.com | 216.239.34.10 | 2001:4860:4802:34::a | No |
| ✓ | Nameservers Listed at Parent | The parent TLD nameserver has 3 nameserver(s) listed for google.tv.ns2.google.com ns1.google.com ns3.google.com |
| ✓ | Minimum Nameserver Count | 3 nameservers found. Good redundancy. |
| ✓ | Public IP: ns1.google.com | Nameserver ns1.google.com has a public IP address. |
| ✓ | Public IP: ns3.google.com | Nameserver ns3.google.com has a public IP address. |
| ✓ | Public IP: ns2.google.com | Nameserver ns2.google.com has a public IP address. |
| ⚠ | Parent/Auth NS Consistency | There are differences between the nameservers listed at the parent and those returned by the authoritative nameservers. This may indicate a stealth NS configuration.Only at authoritative: ns4.google.com |
● 🖥️ Authoritative Nameservers
WARNING| Nameserver | UDP | TCP | Auth | Recursion | IPv6 | Latency |
|---|---|---|---|---|---|---|
| ns1.google.com | ✓ | ✓ | ✓ | Open | ✓ | 32ms |
| ns2.google.com | ✓ | ✓ | ✓ | Open | ✓ | 32ms |
| ns3.google.com | ✓ | ✓ | ✓ | Open | ✓ | 35ms |
| ns4.google.com | ✓ | ✓ | ✓ | Open | ✓ | 40ms |
| ✓ | Authoritative Nameservers Found | Found 4 authoritative nameserver(s): ns4.google.com, ns1.google.com, ns2.google.com, ns3.google.com |
| ✓ | All Nameservers Respond | All authoritative nameservers are responding to DNS queries. |
| ✓ | UDP DNS (Port 53) | At least one nameserver is responding to UDP DNS queries on port 53. |
| ✓ | TCP DNS (Port 53) | TCP DNS queries are supported. Required for large responses and DNSSEC. |
| ✓ | Authoritative Response | At least one nameserver returns an authoritative (AA) response for the zone. |
| ⚠ | Open Recursion | One or more nameservers appear to answer recursive queries. Authoritative nameservers should not be open resolvers. |
| ✓ | Public IP Addresses | All nameservers have publicly routable IP addresses. |
| ✓ | IPv6 Support | At least one nameserver has an IPv6 (AAAA) address. |
| ✓ | NS Record Consistency | All authoritative nameservers return identical NS records. |
| ✓ | Multiple Network Diversity | Nameservers appear to be on different subnets/networks. Good resilience. |
● 📄 SOA Record
WARNING| Primary NS (MNAME) | ns1.google.com |
| Email (RNAME) | dns-admin.google.com |
| Serial | 965142848 |
| Refresh | 900 (15 min) |
| Retry | 900 (15 min) |
| Expire | 1800 (30 min) |
| Minimum TTL | 60 (1 min) |
| ✓ | SOA Record Exists | SOA record found for google.tv. |
| ✓ | SOA MNAME | SOA MNAME (ns1.google.com) is listed as an authoritative nameserver. |
| ✓ | SOA RNAME | SOA contact email: dns-admin@google.com |
| ℹ | SOA Serial Format | SOA serial is 965142848. The recommended format is YYYYMMDDNN (e.g., 2024010101). |
| ✓ | SOA Serial Consistency | All authoritative nameservers return the same SOA serial number. |
| ⚠ | SOA Refresh | SOA Refresh is 900 seconds. Values below 1200s are unusually low. |
| ⚠ | SOA Retry | SOA Retry (900s) is >= Refresh (900s). Retry should be less than Refresh. |
| ⚠ | SOA Expire | SOA Expire is 1800 seconds (0 days). RFC 1912 recommends 2-4 weeks. |
| ✓ | SOA Minimum TTL | SOA Minimum TTL (negative caching) is 60 seconds. |
● 📧 Mail Servers (MX)
INFONo MX records found. This domain cannot receive email.
| ℹ | MX Records | No MX records found for google.tv. This domain cannot receive email. |
● 🌍 WWW / Web
WARNINGNo WWW records found.
| ⚠ | WWW Record | No A, AAAA, or CNAME record found for www.google.tv. Visitors to www.google.tv will receive an error. |
● 🔒 DNSSEC
INFO| Enabled | No |
Chain of Trust
| Level | DS | DNSKEY | RRSIG | Status |
|---|---|---|---|---|
| . | — | ✓ | ✓ | PASS |
| tv | ✓ | ✓ | ✓ | PASS |
| google.tv | — | — | — | INFO |
| ℹ | DNSSEC Status | DNSSEC is not enabled for google.tv. No DS or DNSKEY records found. |
● 🛡️ Email Security
INFOSPF (Sender Policy Framework)
| Record | v=spf1 -all |
| All Mechanism | -all |
| DNS Lookups | 0 / 10 max |
DMARC (Domain-based Message Authentication)
| Record | v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com |
| Policy (p=) | reject |
| Aggregate Reports (rua) | mailto:mailauth-reports@google.com |
CAA (Certificate Authority Authorization)
| Flag | Tag | Value |
|---|---|---|
| 0 | issue | pki.goog |
| ✓ | SPF Record | SPF record found.v=spf1 -all |
| ✓ | SPF All Mechanism | SPF record uses '-all' (fail). Non-listed senders will be rejected. Good. |
| ✓ | SPF DNS Lookup Count | SPF record uses approximately 0 DNS lookups (limit is 10). |
| ✓ | DMARC Record | DMARC record found.v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com |
| ✓ | DMARC Policy | DMARC policy is 'reject'. Failing emails will be rejected. Maximum protection. |
| ✓ | DMARC Reporting (rua) | Aggregate reports (rua) will be sent to: mailto:mailauth-reports@google.com |
| ✓ | CAA Records | CAA records found (1). Certificate issuance is restricted. |
| ℹ | CAA issuewild Tag | No 'issuewild' CAA tag. The 'issue' policy applies to wildcard certificates too, unless overridden. |
| ℹ | CAA iodef Tag | No 'iodef' CAA tag. Consider adding an iodef tag to receive reports of unauthorized certificate requests. |
● 📡 DNS Propagation
PASS| Status | Resolver | Location | Result | Latency |
|---|---|---|---|---|
| ℹ | Comodo Secure (8.26.56.26) | US (Comodo) | No A records | 27ms |
| ℹ | Google Public DNS (8.8.8.8) | US (Google) | No A records | 34ms |
| ℹ | Google Public DNS 2 (8.8.4.4) | US (Google) | No A records | 34ms |
| ℹ | Cloudflare 2 (1.0.0.1) | US (Cloudflare) | No A records | 35ms |
| ℹ | Cloudflare (1.1.1.1) | US (Cloudflare) | No A records | 35ms |
| ℹ | Quad9 (9.9.9.9) | US (Quad9) | No A records | 38ms |
| ℹ | Verisign (64.6.64.6) | US (Verisign) | No A records | 31ms |
| ℹ | OpenDNS 2 (208.67.220.220) | US (OpenDNS) | No A records | 36ms |
| ℹ | OpenDNS (208.67.222.222) | US (OpenDNS) | No A records | 43ms |
| ℹ | Yandex.DNS (77.88.8.8) | RU (Yandex) | No A records | 302ms |