satisfyhost.com — DNS Report
C
79%
34
Pass
2
Warnings
0
Failures
6
Info
42
Total
Processed in 1s
● 📋 Domain Registration
PASS| Registrar | Porkbun LLC |
| Registrar ID | 1861 |
| Registry | Verisign |
| Registry ID | 1766659171_DOMAIN_COM-VRSN |
| Created | Dec 16, 2012 |
| Updated | Jul 19, 2023 |
| Expires | Jul 19, 2033 (2534 days left) |
| DNSSEC | ✗ Unsigned |
| Status | client delete prohibited client transfer prohibited |
| RDAP Nameservers | aida.ns.cloudflare.com merlin.ns.cloudflare.com |
● 🌐 DNS Records
PASSSOA Records (1)
| Name | Value | TTL |
|---|---|---|
| satisfyhost.com | aida.ns.cloudflare.com dns.cloudflare.com 2411836922 10000 2400 604800 1800 | 1800 |
NS Records (2)
| Name | Value | TTL |
|---|---|---|
| satisfyhost.com | aida.ns.cloudflare.com | 86400 |
| satisfyhost.com | merlin.ns.cloudflare.com | 86400 |
A Records (2)
| Name | Value | TTL |
|---|---|---|
| satisfyhost.com | 172.67.171.64 | 300 |
| satisfyhost.com | 104.21.29.18 | 300 |
AAAA Records (2)
| Name | Value | TTL |
|---|---|---|
| satisfyhost.com | 2606:4700:3031::6815:1d12 | 300 |
| satisfyhost.com | 2606:4700:3037::ac43:ab40 | 300 |
MX Records (7)
| Name | Value | TTL |
|---|---|---|
| satisfyhost.com | aspmx.l.google.com | 300 |
| satisfyhost.com | alt2.aspmx.l.google.com | 300 |
| satisfyhost.com | alt1.aspmx.l.google.com | 300 |
| satisfyhost.com | mxb.mailgun.org | 300 |
| satisfyhost.com | mxa.mailgun.org | 300 |
| satisfyhost.com | alt4.aspmx.l.google.com | 300 |
| satisfyhost.com | alt3.aspmx.l.google.com | 300 |
TXT Records (8)
| Name | Value | TTL |
|---|---|---|
| satisfyhost.com | MS=88A52DA34AFC16DB771E20C67E808D9CF0E6E3E1 | 300 |
| satisfyhost.com | v=spf1 include:spf.ipzmarketing.com include:mailgun.org include:_spf.google.com ~all | 300 |
| satisfyhost.com | stripe-verification=cf3afb37c2aff3c3cc8a4d535788cc0943985fbafb06b1dfb1d85b5e016ef621 | 300 |
| satisfyhost.com | google-site-verification=ZVEp1mZpDAf-Nkv_8CJEWXeOmhvDF7dQsnvk_LT9O3g | 300 |
| satisfyhost.com | facebook-domain-verification=vd7nnw9wds5renawdaiav5w7waq5ea | 300 |
| satisfyhost.com | amazonses:Q3FtlYpNTOti7au8qcVkR7+R2bnGdJ4YbQdf5bf/Ong= | 300 |
| satisfyhost.com | amazonses:CgdYCFyMm3xt1R6M6c7dRFFS9SQuqBVOL7YffJNjlK8= | 300 |
| satisfyhost.com | MS=ms35627262 | 300 |
CAA Records (10)
| Name | Value | TTL |
|---|---|---|
| satisfyhost.com | 0 issuewild "ssl.com" | 3600 |
| satisfyhost.com | 0 issuewild "digicert.com; cansignhttpexchanges=yes" | 3600 |
| satisfyhost.com | 0 issuewild "pki.goog; cansignhttpexchanges=yes" | 3600 |
| satisfyhost.com | 0 issue "comodoca.com" | 3600 |
| satisfyhost.com | 0 issue "digicert.com; cansignhttpexchanges=yes" | 3600 |
| satisfyhost.com | 0 issue "letsencrypt.org" | 3600 |
| satisfyhost.com | 0 issue "pki.goog; cansignhttpexchanges=yes" | 3600 |
| satisfyhost.com | 0 issue "ssl.com" | 3600 |
| satisfyhost.com | 0 issuewild "comodoca.com" | 3600 |
| satisfyhost.com | 0 issuewild "letsencrypt.org" | 3600 |
● 🔗 Parent Nameservers
PASS| Nameserver | IPv4 | IPv6 | Glue |
|---|---|---|---|
| merlin.ns.cloudflare.com | 172.64.33.205, 108.162.193.205, 173.245.59.205 | 2a06:98c1:50::ac40:21cd, 2803:f800:50::6ca2:c1cd, 2606:4700:58::adf5:3bcd | Yes |
| aida.ns.cloudflare.com | 172.64.32.58, 173.245.58.58, 108.162.192.58 | 2606:4700:50::adf5:3a3a, 2a06:98c1:50::ac40:203a, 2803:f800:50::6ca2:c03a | Yes |
| ✓ | Nameservers Listed at Parent | The parent TLD nameserver has 2 nameserver(s) listed for satisfyhost.com.aida.ns.cloudflare.com merlin.ns.cloudflare.com |
| ✓ | Minimum Nameserver Count | 2 nameservers found. Good redundancy. |
| ✓ | Glue Record: merlin.ns.cloudflare.com | Glue record found for merlin.ns.cloudflare.com: 108.162.193.205, 172.64.33.205, 173.245.59.205, 2606:4700:58::adf5:3bcd, 2803:f800:50::6ca2:c1cd, 2a06:98c1:50::ac40:21cd |
| ✓ | Public IP: merlin.ns.cloudflare.com | Nameserver merlin.ns.cloudflare.com has a public IP address. |
| ✓ | Glue Record: aida.ns.cloudflare.com | Glue record found for aida.ns.cloudflare.com: 108.162.192.58, 172.64.32.58, 173.245.58.58, 2606:4700:50::adf5:3a3a, 2803:f800:50::6ca2:c03a, 2a06:98c1:50::ac40:203a |
| ✓ | Public IP: aida.ns.cloudflare.com | Nameserver aida.ns.cloudflare.com has a public IP address. |
| ✓ | Parent/Auth NS Consistency | The nameservers listed at the parent match those returned by the authoritative nameservers. |
● 🖥️ Authoritative Nameservers
PASS| Nameserver | UDP | TCP | Auth | Recursion | IPv6 | Latency |
|---|---|---|---|---|---|---|
| aida.ns.cloudflare.com | ✓ | ✓ | ✓ | Closed | ✓ | 12ms |
| merlin.ns.cloudflare.com | ✓ | ✓ | ✓ | Closed | ✓ | 12ms |
| ✓ | Authoritative Nameservers Found | Found 2 authoritative nameserver(s): merlin.ns.cloudflare.com, aida.ns.cloudflare.com |
| ✓ | All Nameservers Respond | All authoritative nameservers are responding to DNS queries. |
| ✓ | UDP DNS (Port 53) | At least one nameserver is responding to UDP DNS queries on port 53. |
| ✓ | TCP DNS (Port 53) | TCP DNS queries are supported. Required for large responses and DNSSEC. |
| ✓ | Authoritative Response | At least one nameserver returns an authoritative (AA) response for the zone. |
| ✓ | Open Recursion | Nameservers do not appear to answer recursive queries from outside. Good. |
| ✓ | Public IP Addresses | All nameservers have publicly routable IP addresses. |
| ✓ | IPv6 Support | At least one nameserver has an IPv6 (AAAA) address. |
| ✓ | NS Record Consistency | All authoritative nameservers return identical NS records. |
| ✓ | Multiple Network Diversity | Nameservers appear to be on different subnets/networks. Good resilience. |
● 📄 SOA Record
INFO| Primary NS (MNAME) | aida.ns.cloudflare.com |
| Email (RNAME) | dns.cloudflare.com |
| Serial | 2411836922 |
| Refresh | 10000 (2h 46m) |
| Retry | 2400 (40 min) |
| Expire | 604800 (7 days) |
| Minimum TTL | 1800 (30 min) |
| ✓ | SOA Record Exists | SOA record found for satisfyhost.com. |
| ✓ | SOA MNAME | SOA MNAME (aida.ns.cloudflare.com) is listed as an authoritative nameserver. |
| ✓ | SOA RNAME | SOA contact email: dns@cloudflare.com |
| ℹ | SOA Serial Format | SOA serial is 2411836922. The recommended format is YYYYMMDDNN (e.g., 2024010101). |
| ✓ | SOA Serial Consistency | All authoritative nameservers return the same SOA serial number. |
| ✓ | SOA Refresh | SOA Refresh is 10000 seconds (2h). Reasonable value. |
| ✓ | SOA Retry | SOA Retry is 2400 seconds. |
| ✓ | SOA Expire | SOA Expire is 604800 seconds (7 days). Reasonable value. |
| ✓ | SOA Minimum TTL | SOA Minimum TTL (negative caching) is 1800 seconds. |
● 📧 Mail Servers (MX)
WARNING| Priority | Hostname | IPv4 | IPv6 | PTR |
|---|---|---|---|---|
| 1 | aspmx.l.google.com | 74.125.132.26 | 2607:f8b0:4001:c64::1a | im-in-f26.1e100.net |
| 10 | alt3.aspmx.l.google.com | 142.250.96.26 | 2607:f8b0:4023:403::1b | gg-in-f26.1e100.net |
| 10 | alt4.aspmx.l.google.com | 172.253.132.26 | 2607:f8b0:4023:2c03::1b | yufwakf-in-f26.1e100.net |
| 10 | mxa.mailgun.org | 34.36.182.139 | - | 139.182.36.34.bc.googleusercontent.com |
| 10 | mxb.mailgun.org | 34.36.182.139 | - | 139.182.36.34.bc.googleusercontent.com |
| 5 | alt1.aspmx.l.google.com | 142.250.100.26 | 2607:f8b0:4023:3801::1a | yumciex-in-f26.1e100.net |
| 5 | alt2.aspmx.l.google.com | 172.253.149.26 | 2607:f8b0:4024:c0f::1b | yuckvax-in-f26.1e100.net |
| ✓ | MX Records Exist | Found 7 MX record(s) for satisfyhost.com. |
| ✓ | MX Redundancy | Multiple MX records found (7). Good for redundancy. |
| ⚠ | Duplicate MX IP Addresses | Multiple MX records resolve to the same IP address(es): 34.36.182.139. This reduces redundancy. |
| ✓ | MX Reverse DNS (PTR) | MX server(s) have PTR (reverse DNS) records. Many mail servers require rDNS for anti-spam. |
| ✓ | MX Consistency | All authoritative nameservers return consistent MX records. |
● 🌍 WWW / Web
INFO| Target | Type | IPs |
|---|---|---|
| www.satisfyhost.com | A | 172.67.171.64, 104.21.29.18, 2606:4700:3037::ac43:ab40, 2606:4700:3031::6815:1d12 |
| ✓ | WWW Record | www.satisfyhost.com resolves to: 172.67.171.64, 104.21.29.18, 2606:4700:3037::ac43:ab40, 2606:4700:3031::6815:1d12 |
| ℹ | WWW vs Apex IP | www.satisfyhost.com and satisfyhost.com resolve to different IP addresses. This is normal if they are intentionally served differently. |
● 🔒 DNSSEC
INFO| Enabled | No |
Chain of Trust
| Level | DS | DNSKEY | RRSIG | Status |
|---|---|---|---|---|
| . | — | ✓ | ✓ | PASS |
| com | ✓ | ✓ | ✓ | PASS |
| satisfyhost.com | — | — | — | INFO |
| ℹ | DNSSEC Status | DNSSEC is not enabled for satisfyhost.com. No DS or DNSKEY records found. |
● 🛡️ Email Security
WARNINGSPF (Sender Policy Framework)
| Record | v=spf1 include:spf.ipzmarketing.com include:mailgun.org include:_spf.google.com ~all |
| All Mechanism | ~all |
| DNS Lookups | 3 / 10 max |
DMARC (Domain-based Message Authentication)
| Record | v=DMARC1; p=none |
| Policy (p=) | none |
CAA (Certificate Authority Authorization)
| Flag | Tag | Value |
|---|---|---|
| 0 | issue | comodoca.com |
| 0 | issue | digicert.com; cansignhttpexchanges=yes |
| 0 | issue | letsencrypt.org |
| 0 | issue | pki.goog; cansignhttpexchanges=yes |
| 0 | issue | ssl.com |
| 0 | issuewild | comodoca.com |
| 0 | issuewild | digicert.com; cansignhttpexchanges=yes |
| 0 | issuewild | letsencrypt.org |
| 0 | issuewild | pki.goog; cansignhttpexchanges=yes |
| 0 | issuewild | ssl.com |
| ✓ | SPF Record | SPF record found.v=spf1 include:spf.ipzmarketing.com include:mailgun.org include:_spf.google.com ~all |
| ℹ | SPF All Mechanism | SPF record uses '~all' (softfail). Non-listed senders will be marked but not rejected. Consider '-all' for strict enforcement. |
| ✓ | SPF DNS Lookup Count | SPF record uses approximately 3 DNS lookups (limit is 10). |
| ✓ | DMARC Record | DMARC record found.v=DMARC1; p=none |
| ⚠ | DMARC Policy | DMARC policy is 'none' (monitoring only). Emails failing DMARC will not be rejected or quarantined. Consider upgrading to 'quarantine' or 'reject'. |
| ℹ | DMARC Reporting (rua) | No aggregate reporting (rua) address configured. Consider adding rua to receive DMARC reports. |
| ✓ | CAA Records | CAA records found (10). Certificate issuance is restricted. |
| ℹ | CAA iodef Tag | No 'iodef' CAA tag. Consider adding an iodef tag to receive reports of unauthorized certificate requests. |
● 📡 DNS Propagation
PASS| Status | Resolver | Location | Result | Latency |
|---|---|---|---|---|
| ✓ | Cloudflare 2 (1.0.0.1) | US (Cloudflare) | 172.67.171.64, 104.21.29.18 | 14ms |
| ✓ | Comodo Secure (8.26.56.26) | US (Comodo) | 172.67.171.64, 104.21.29.18 | 25ms |
| ✓ | Google Public DNS (8.8.8.8) | US (Google) | 172.67.171.64, 104.21.29.18 | 29ms |
| ✓ | Google Public DNS 2 (8.8.4.4) | US (Google) | 172.67.171.64, 104.21.29.18 | 33ms |
| ✓ | Cloudflare (1.1.1.1) | US (Cloudflare) | 104.21.29.18, 172.67.171.64 | 34ms |
| ✓ | OpenDNS (208.67.222.222) | US (OpenDNS) | 172.67.171.64, 104.21.29.18 | 29ms |
| ✓ | OpenDNS 2 (208.67.220.220) | US (OpenDNS) | 172.67.171.64, 104.21.29.18 | 51ms |
| ✓ | Verisign (64.6.64.6) | US (Verisign) | 172.67.171.64, 104.21.29.18 | 78ms |
| ✓ | Quad9 (9.9.9.9) | US (Quad9) | 104.21.29.18, 172.67.171.64 | 147ms |
| ✓ | Yandex.DNS (77.88.8.8) | RU (Yandex) | 172.67.171.64, 104.21.29.18 | 250ms |
● 🔄 Reverse DNS (PTR)
INFO| IP Address | PTR Record | Forward Match |
|---|---|---|
| 74.125.132.26 | im-in-f26.1e100.net | ✗ No match |
| 142.250.96.26 | gg-in-f26.1e100.net | ✗ No match |
| 172.253.132.26 | yufwakf-in-f26.1e100.net | ✗ No match |
| 34.36.182.139 | 139.182.36.34.bc.googleusercontent.com | ✗ No match |
| 34.36.182.139 | 139.182.36.34.bc.googleusercontent.com | ✗ No match |
| 142.250.100.26 | yumciex-in-f26.1e100.net | ✗ No match |
| 172.253.149.26 | yuckvax-in-f26.1e100.net | ✗ No match |