nazmul.foo — DNS & WHOIS Analysis — Domain Analyzer Tools

● 📋 Domain Registration

PASS

Registrar	Name.com, Inc.
Registrar ID	625
Registry ID	E117ECA85-FOO
Created	Oct 05, 2025
Updated	Oct 10, 2025
Expires	Oct 05, 2026 (55 days left)
DNSSEC	✓ Signed
Status	client transfer prohibited
RDAP Nameservers	maya.ns.cloudflare.com newt.ns.cloudflare.com

● 🌐 DNS Records

PASS

SOA Records (1)

Name	Value	TTL
nazmul.foo	maya.ns.cloudflare.com dns.cloudflare.com 2411846406 10000 2400 604800 1800	1800

NS Records (2)

Name	Value	TTL
nazmul.foo	maya.ns.cloudflare.com	86400
nazmul.foo	newt.ns.cloudflare.com	86400

MX Records (3)

Name	Value	TTL
nazmul.foo	route3.mx.cloudflare.net	300
nazmul.foo	route2.mx.cloudflare.net	300
nazmul.foo	route1.mx.cloudflare.net	300

TXT Records (1)

Name	Value	TTL
nazmul.foo	v=spf1 include:_spf.mx.cloudflare.net ~all	300

● 🔗 Parent Nameservers

PASS

Nameserver	IPv4	IPv6	Glue
newt.ns.cloudflare.com	172.64.33.212, 173.245.59.212, 108.162.193.212	2a06:98c1:50::ac40:21d4, 2606:4700:58::adf5:3bd4, 2803:f800:50::6ca2:c1d4	No
maya.ns.cloudflare.com	172.64.32.194, 108.162.192.194, 173.245.58.194	2a06:98c1:50::ac40:20c2, 2606:4700:50::adf5:3ac2, 2803:f800:50::6ca2:c0c2	No

✓	Nameservers Listed at Parent	The parent TLD nameserver has 2 nameserver(s) listed for nazmul.foo. newt.ns.cloudflare.com maya.ns.cloudflare.com
✓	Minimum Nameserver Count	2 nameservers found. Good redundancy.
✓	Public IP: newt.ns.cloudflare.com	Nameserver newt.ns.cloudflare.com has a public IP address.
✓	Public IP: maya.ns.cloudflare.com	Nameserver maya.ns.cloudflare.com has a public IP address.
✓	Parent/Auth NS Consistency	The nameservers listed at the parent match those returned by the authoritative nameservers.

● 🖥️ Authoritative Nameservers

PASS

Nameserver	UDP	TCP	Auth	Recursion	IPv6	Latency
maya.ns.cloudflare.com	✓	✓	✓	Closed	✓	12ms
newt.ns.cloudflare.com	✓	✓	✓	Closed	✓	12ms

✓	Authoritative Nameservers Found	Found 2 authoritative nameserver(s): maya.ns.cloudflare.com, newt.ns.cloudflare.com
✓	All Nameservers Respond	All authoritative nameservers are responding to DNS queries.
✓	UDP DNS (Port 53)	At least one nameserver is responding to UDP DNS queries on port 53.
✓	TCP DNS (Port 53)	TCP DNS queries are supported. Required for large responses and DNSSEC.
✓	Authoritative Response	At least one nameserver returns an authoritative (AA) response for the zone.
✓	Open Recursion	Nameservers do not appear to answer recursive queries from outside. Good.
✓	Public IP Addresses	All nameservers have publicly routable IP addresses.
✓	IPv6 Support	At least one nameserver has an IPv6 (AAAA) address.
✓	NS Record Consistency	All authoritative nameservers return identical NS records.
✓	Multiple Network Diversity	Nameservers appear to be on different subnets/networks. Good resilience.

● 📄 SOA Record

INFO

Primary NS (MNAME)	maya.ns.cloudflare.com
Email (RNAME)	dns.cloudflare.com
Serial	2411846406
Refresh	10000 (2h 46m)
Retry	2400 (40 min)
Expire	604800 (7 days)
Minimum TTL	1800 (30 min)

✓	SOA Record Exists	SOA record found for nazmul.foo.
✓	SOA MNAME	SOA MNAME (maya.ns.cloudflare.com) is listed as an authoritative nameserver.
✓	SOA RNAME	SOA contact email: dns@cloudflare.com
ℹ	SOA Serial Format	SOA serial is 2411846406. The recommended format is YYYYMMDDNN (e.g., 2024010101).
✓	SOA Serial Consistency	All authoritative nameservers return the same SOA serial number.
✓	SOA Refresh	SOA Refresh is 10000 seconds (2h). Reasonable value.
✓	SOA Retry	SOA Retry is 2400 seconds.
✓	SOA Expire	SOA Expire is 604800 seconds (7 days). Reasonable value.
✓	SOA Minimum TTL	SOA Minimum TTL (negative caching) is 1800 seconds.

● 📧 Mail Servers (MX)

PASS

Priority	Hostname	IPv4	IPv6	PTR
38	route3.mx.cloudflare.net	162.159.205.23, 162.159.205.24, 162.159.205.25	2606:4700:f5::13, 2606:4700:f5::11, 2606:4700:f5::12	route3.mx.cloudflare.net, route3.mx.cloudflare.net, route3.mx.cloudflare.net
39	route2.mx.cloudflare.net	162.159.205.19, 162.159.205.18, 162.159.205.17	2606:4700:f5::10, 2606:4700:f5::e, 2606:4700:f5::f	route2.mx.cloudflare.net, route2.mx.cloudflare.net, route2.mx.cloudflare.net
86	route1.mx.cloudflare.net	162.159.205.11, 162.159.205.12, 162.159.205.13	2606:4700:f5::c, 2606:4700:f5::d, 2606:4700:f5::b	route1.mx.cloudflare.net, route1.mx.cloudflare.net, route1.mx.cloudflare.net

✓	MX Records Exist	Found 3 MX record(s) for nazmul.foo.
✓	MX Redundancy	Multiple MX records found (3). Good for redundancy.
✓	MX Reverse DNS (PTR)	MX server(s) have PTR (reverse DNS) records. Many mail servers require rDNS for anti-spam.
✓	MX Consistency	All authoritative nameservers return consistent MX records.

● 🌍 WWW / Web

PASS

Target	Type	IPs
www.nazmul.foo	A	172.67.202.96, 104.21.42.64, 2606:4700:3030::ac43:ca60, 2606:4700:3037::6815:2a40

✓

WWW Record

www.nazmul.foo resolves to: 172.67.202.96, 104.21.42.64, 2606:4700:3030::ac43:ca60, 2606:4700:3037::6815:2a40

● 🔒 DNSSEC

INFO

Enabled

No

Chain of Trust

Level	DS	DNSKEY	RRSIG	Status
.	—	✓	✓	PASS
foo	✓	✓	✓	PASS
nazmul.foo	—	—	—	INFO

ℹ

DNSSEC Status

DNSSEC is not enabled for nazmul.foo. No DS or DNSKEY records found.

● 🛡️ Email Security

WARNING

SPF (Sender Policy Framework)

Record	v=spf1 include:_spf.mx.cloudflare.net ~all
All Mechanism	~all
DNS Lookups	1 / 10 max

DMARC (Domain-based Message Authentication)

Record	v=DMARC1; p=none; rua=mailto:85e91a5195ee45e095e8d9b7922dc4f0@dmarc-reports.cloudflare.net
Policy (p=)	none
Aggregate Reports (rua)	mailto:85e91a5195ee45e095e8d9b7922dc4f0@dmarc-reports.cloudflare.net

CAA (Certificate Authority Authorization)

No CAA records found. Any certificate authority can issue SSL certificates for this domain.

✓	SPF Record	SPF record found. v=spf1 include:_spf.mx.cloudflare.net ~all
ℹ	SPF All Mechanism	SPF record uses '~all' (softfail). Non-listed senders will be marked but not rejected. Consider '-all' for strict enforcement.
✓	SPF DNS Lookup Count	SPF record uses approximately 1 DNS lookups (limit is 10).
✓	DMARC Record	DMARC record found. v=DMARC1; p=none; rua=mailto:85e91a5195ee45e095e8d9b7922dc4f0@dmarc-reports.cloudflare.net
⚠	DMARC Policy	DMARC policy is 'none' (monitoring only). Emails failing DMARC will not be rejected or quarantined. Consider upgrading to 'quarantine' or 'reject'.
✓	DMARC Reporting (rua)	Aggregate reports (rua) will be sent to: mailto:85e91a5195ee45e095e8d9b7922dc4f0@dmarc-reports.cloudflare.net
ℹ	CAA Records	No CAA records found for nazmul.foo. CAA records specify which certificate authorities may issue SSL/TLS certificates for this domain.

● 📡 DNS Propagation

PASS

Status	Resolver	Location	Result	Latency
ℹ	Cloudflare 2 (1.0.0.1)	US (Cloudflare)	No A records	40ms
ℹ	Cloudflare (1.1.1.1)	US (Cloudflare)	No A records	40ms
ℹ	Google Public DNS 2 (8.8.4.4)	US (Google)	No A records	50ms
ℹ	Comodo Secure (8.26.56.26)	US (Comodo)	No A records	69ms
ℹ	OpenDNS 2 (208.67.220.220)	US (OpenDNS)	No A records	43ms
ℹ	Google Public DNS (8.8.8.8)	US (Google)	No A records	27ms
ℹ	Verisign (64.6.64.6)	US (Verisign)	No A records	79ms
ℹ	OpenDNS (208.67.222.222)	US (OpenDNS)	No A records	99ms
ℹ	Quad9 (9.9.9.9)	US (Quad9)	No A records	158ms
ℹ	Yandex.DNS (77.88.8.8)	RU (Yandex)	No A records	235ms

● 🔄 Reverse DNS (PTR)

INFO

IP Address	PTR Record	Forward Match
162.159.205.23	route3.mx.cloudflare.net	✓ Match
162.159.205.24	route3.mx.cloudflare.net	✓ Match
162.159.205.25	route3.mx.cloudflare.net	✓ Match
162.159.205.19	route2.mx.cloudflare.net	✓ Match
162.159.205.18	route2.mx.cloudflare.net	✓ Match
162.159.205.17	route2.mx.cloudflare.net	✓ Match
162.159.205.11	route1.mx.cloudflare.net	✓ Match
162.159.205.12	route1.mx.cloudflare.net	✓ Match
162.159.205.13	route1.mx.cloudflare.net	✓ Match

nazmul.foo — DNS Report

● 📋 Domain Registration

● 🌐 DNS Records

SOA Records (1)

NS Records (2)

MX Records (3)

TXT Records (1)

● 🔗 Parent Nameservers

● 🖥️ Authoritative Nameservers

● 📄 SOA Record

● 📧 Mail Servers (MX)

● 🌍 WWW / Web

● 🔒 DNSSEC

Chain of Trust

● 🛡️ Email Security

SPF (Sender Policy Framework)

DMARC (Domain-based Message Authentication)

CAA (Certificate Authority Authorization)

● 📡 DNS Propagation

● 🔄 Reverse DNS (PTR)