kifm.edu.bd — DNS & WHOIS Analysis

● 📋 Domain Registration

PASS

Registrant	KADHURKHIL ISLAMIA FAZIL MADRASHA
Created	Aug 29, 2023
Updated	Aug 24, 2026
Expires	Aug 29, 2026 (4 days left)
Status	Registered success
WHOIS Server	whois.get.bd
RDAP Nameservers	ns1.shebahost.com ns2.shebahost.com

● 🌐 DNS Records

PASS

SOA Records (1)

Name	Value	TTL
kifm.edu.bd	ns1.shebahost webpointbdltd.gmail.com 2026082201 3600 1800 1209600 86400	21600

NS Records (2)

Name	Value	TTL
kifm.edu.bd	ns2.shebahost	21600
kifm.edu.bd	ns1.shebahost	21600

A Records (1)

Name	Value	TTL
kifm.edu.bd	14.128.14.2	14400

MX Records (1)

Name	Value	TTL
kifm.edu.bd	mail.kifm.edu.bd	14400

TXT Records (1)

Name	Value	TTL
kifm.edu.bd	v=spf1 ip4:14.128.14.2 ip4:14.128.14.7 ip4:14.128.14.9 ip4:14.128.14.5 ip4:14.128.14.100 ip4:66.198.240.31 include:spf.supercp.com +a +mx +ip4:70.32.23.13 ~all	14400

● 🔗 Parent Nameservers

WARNING

Nameserver	IPv4	IPv6	Glue
ns2.shebahost.com	14.128.14.2	-	No
ns1.shebahost.com	14.128.14.2	-	No

✓	Nameservers Listed at Parent	The parent TLD nameserver has 2 nameserver(s) listed for kifm.edu.bd. ns1.shebahost.com ns2.shebahost.com
✓	Minimum Nameserver Count	2 nameservers found. Good redundancy.
✓	Public IP: ns2.shebahost.com	Nameserver ns2.shebahost.com has a public IP address.
✓	Public IP: ns1.shebahost.com	Nameserver ns1.shebahost.com has a public IP address.
⚠	Parent/Auth NS Consistency	There are differences between the nameservers listed at the parent and those returned by the authoritative nameservers. This may indicate a stealth NS configuration. Only at parent: ns1.shebahost.com, ns2.shebahost.com Only at authoritative: ns2.shebahost, ns1.shebahost

● 🖥️ Authoritative Nameservers

FAIL

Nameserver	UDP	TCP	Auth	Recursion	IPv6	Latency
ns1.shebahost Could not resolve nameserver IP	✗ Down	✗ Down	✗	Closed	-	Timeout
ns2.shebahost Could not resolve nameserver IP	✗ Down	✗ Down	✗	Closed	-	Timeout

✓	Authoritative Nameservers Found	Found 2 authoritative nameserver(s): ns2.shebahost, ns1.shebahost
✗	All Nameservers Respond	One or more authoritative nameservers are not responding. This could cause DNS resolution failures.
⚠	TCP DNS (Port 53)	No nameserver responded to TCP DNS queries. TCP is required for responses over 512 bytes and DNSSEC.
✗	Authoritative Response	No nameserver returned an authoritative (AA) response. This may indicate a lame delegation.
✓	Open Recursion	Nameservers do not appear to answer recursive queries from outside. Good.
✗	Public IP Addresses	One or more nameservers have private/reserved IP addresses. They must be publicly accessible.
ℹ	IPv6 Support	No nameserver has an IPv6 (AAAA) address. IPv6 support is recommended.
✓	NS Record Consistency	All authoritative nameservers return identical NS records.
⚠	Multiple Network Diversity	All nameservers appear to be on the same or similar subnet. For resilience, nameservers should be on different networks.

● 📄 SOA Record

FAIL

No SOA record found.

✗

SOA Record

Could not resolve IP for authoritative nameserver ns2.shebahost.

● 📧 Mail Servers (MX)

WARNING

Priority	Hostname	IPv4	IPv6	PTR
0	mail.kifm.edu.bd	14.128.14.2	-	bdserver1.instrawebs.com

✓	MX Records Exist	Found 1 MX record(s) for kifm.edu.bd.
⚠	MX Redundancy	Only one MX record found. A single mail server is a single point of failure. Consider adding a backup MX.
✓	MX Reverse DNS (PTR)	MX server(s) have PTR (reverse DNS) records. Many mail servers require rDNS for anti-spam.
✓	MX Consistency	All authoritative nameservers return consistent MX records.

● 🌍 WWW / Web

PASS

Target	Type	IPs
www.kifm.edu.bd	CNAME	14.128.14.2 CNAME chain: www.kifm.edu.bd → kifm.edu.bd

✓	WWW CNAME	www.kifm.edu.bd is a CNAME pointing to kifm.edu.bd, which resolves to 14.128.14.2. CNAME chain: www.kifm.edu.bd → kifm.edu.bd
✓	WWW vs Apex IP	www.kifm.edu.bd and kifm.edu.bd resolve to the same IP address(es).

● 🔒 DNSSEC

INFO

Enabled

No

Chain of Trust

Level	DS	DNSKEY	RRSIG	Status
.	—	✓	✓	PASS
bd	✓	✓	✓	PASS
edu.bd	—	—	—	INFO
kifm.edu.bd	—	—	—	INFO

ℹ

DNSSEC Status

DNSSEC is not enabled for kifm.edu.bd. No DS or DNSKEY records found.

● 🛡️ Email Security

WARNING

SPF (Sender Policy Framework)

Record	v=spf1 ip4:14.128.14.2 ip4:14.128.14.7 ip4:14.128.14.9 ip4:14.128.14.5 ip4:14.128.14.100 ip4:66.198.240.31 include:spf.supercp.com +a +mx +ip4:70.32.23.13 ~all
All Mechanism	~all
DNS Lookups	1 / 10 max

DMARC (Domain-based Message Authentication)

No DMARC record found. Consider adding a DMARC policy to protect against email spoofing.

CAA (Certificate Authority Authorization)

No CAA records found. Any certificate authority can issue SSL certificates for this domain.

✓	SPF Record	SPF record found. v=spf1 ip4:14.128.14.2 ip4:14.128.14.7 ip4:14.128.14.9 ip4:14.128.14.5 ip4:14.128.14.100 ip4:66.198.240.31 include:spf.supercp.com +a +mx +ip4:70.32.23.13 ~all
ℹ	SPF All Mechanism	SPF record uses '~all' (softfail). Non-listed senders will be marked but not rejected. Consider '-all' for strict enforcement.
✓	SPF DNS Lookup Count	SPF record uses approximately 1 DNS lookups (limit is 10).
⚠	DMARC Record	No DMARC record found at _dmarc.[domain]. DMARC helps prevent email spoofing and phishing.
ℹ	CAA Records	No CAA records found for kifm.edu.bd. CAA records specify which certificate authorities may issue SSL/TLS certificates for this domain.

● 📡 DNS Propagation

PASS

Status	Resolver	Location	Result	Latency
✓	Google Public DNS 2 (8.8.4.4)	US (Google)	14.128.14.2	244ms
✓	Cloudflare (1.1.1.1)	US (Cloudflare)	14.128.14.2	268ms
✓	Cloudflare 2 (1.0.0.1)	US (Cloudflare)	14.128.14.2	268ms
✓	Quad9 (9.9.9.9)	US (Quad9)	14.128.14.2	744ms
✓	OpenDNS 2 (208.67.220.220)	US (OpenDNS)	14.128.14.2	569ms
✓	Google Public DNS (8.8.8.8)	US (Google)	14.128.14.2	26ms
✓	OpenDNS (208.67.222.222)	US (OpenDNS)	14.128.14.2	859ms
✓	Verisign (64.6.64.6)	US (Verisign)	14.128.14.2	1452ms
✓	Yandex.DNS (77.88.8.8)	RU (Yandex)	14.128.14.2	1264ms
✓	Comodo Secure (8.26.56.26)	US (Comodo)	14.128.14.2	3022ms

● 🔄 Reverse DNS (PTR)

INFO

IP Address	PTR Record	Forward Match
14.128.14.2	bdserver1.instrawebs.com	✗ No match

kifm.edu.bd — DNS Report

● 📋 Domain Registration

● 🌐 DNS Records

SOA Records (1)

NS Records (2)

A Records (1)

MX Records (1)

TXT Records (1)

● 🔗 Parent Nameservers

● 🖥️ Authoritative Nameservers

● 📄 SOA Record

● 📧 Mail Servers (MX)

● 🌍 WWW / Web

● 🔒 DNSSEC

Chain of Trust

● 🛡️ Email Security

SPF (Sender Policy Framework)

DMARC (Domain-based Message Authentication)

CAA (Certificate Authority Authorization)

● 📡 DNS Propagation

● 🔄 Reverse DNS (PTR)