subur88.co — DNS Report
C
76%
25
Pass
2
Warnings
0
Failures
5
Info
32
Total
Processed in 3s
● 📋 Domain Registration
FAILThis domain is not supported for WHOIS/RDAP lookup.
● 🌐 DNS Records
PASSSOA Records (1)
| Name | Value | TTL |
|---|---|---|
| subur88.co | archer.ns.cloudflare.com dns.cloudflare.com 2411602938 10000 2400 604800 1800 | 1800 |
NS Records (2)
| Name | Value | TTL |
|---|---|---|
| subur88.co | archer.ns.cloudflare.com | 86400 |
| subur88.co | paige.ns.cloudflare.com | 86400 |
A Records (2)
| Name | Value | TTL |
|---|---|---|
| subur88.co | 172.67.143.101 | 300 |
| subur88.co | 104.21.46.252 | 300 |
AAAA Records (2)
| Name | Value | TTL |
|---|---|---|
| subur88.co | 2606:4700:3030::ac43:8f65 | 300 |
| subur88.co | 2606:4700:3035::6815:2efc | 300 |
CAA Records (10)
| Name | Value | TTL |
|---|---|---|
| subur88.co | 0 issue "pki.goog; cansignhttpexchanges=yes" | 3600 |
| subur88.co | 0 issue "ssl.com" | 3600 |
| subur88.co | 0 issuewild "comodoca.com" | 3600 |
| subur88.co | 0 issuewild "digicert.com; cansignhttpexchanges=yes" | 3600 |
| subur88.co | 0 issuewild "letsencrypt.org" | 3600 |
| subur88.co | 0 issuewild "pki.goog; cansignhttpexchanges=yes" | 3600 |
| subur88.co | 0 issuewild "ssl.com" | 3600 |
| subur88.co | 0 issue "letsencrypt.org" | 3600 |
| subur88.co | 0 issue "digicert.com; cansignhttpexchanges=yes" | 3600 |
| subur88.co | 0 issue "comodoca.com" | 3600 |
● 🔗 Parent Nameservers
PASS| Nameserver | IPv4 | IPv6 | Glue |
|---|---|---|---|
| archer.ns.cloudflare.com | 108.162.195.136, 162.159.44.136, 172.64.35.136 | 2a06:98c1:50::ac40:2388, 2803:f800:50::6ca2:c388, 2606:4700:58::a29f:2c88 | No |
| paige.ns.cloudflare.com | 172.64.34.38, 162.159.38.38, 108.162.194.38 | 2606:4700:50::a29f:2626, 2a06:98c1:50::ac40:2226, 2803:f800:50::6ca2:c226 | No |
| ✓ | Nameservers Listed at Parent | The parent TLD nameserver has 2 nameserver(s) listed for subur88.co.paige.ns.cloudflare.com archer.ns.cloudflare.com |
| ✓ | Minimum Nameserver Count | 2 nameservers found. Good redundancy. |
| ✓ | Public IP: archer.ns.cloudflare.com | Nameserver archer.ns.cloudflare.com has a public IP address. |
| ✓ | Public IP: paige.ns.cloudflare.com | Nameserver paige.ns.cloudflare.com has a public IP address. |
| ✓ | Parent/Auth NS Consistency | The nameservers listed at the parent match those returned by the authoritative nameservers. |
● 🖥️ Authoritative Nameservers
PASS| Nameserver | UDP | TCP | Auth | Recursion | IPv6 | Latency |
|---|---|---|---|---|---|---|
| archer.ns.cloudflare.com | ✓ | ✓ | ✓ | Closed | ✓ | 23ms |
| paige.ns.cloudflare.com | ✓ | ✓ | ✓ | Closed | ✓ | 12ms |
| ✓ | Authoritative Nameservers Found | Found 2 authoritative nameserver(s): archer.ns.cloudflare.com, paige.ns.cloudflare.com |
| ✓ | All Nameservers Respond | All authoritative nameservers are responding to DNS queries. |
| ✓ | UDP DNS (Port 53) | At least one nameserver is responding to UDP DNS queries on port 53. |
| ✓ | TCP DNS (Port 53) | TCP DNS queries are supported. Required for large responses and DNSSEC. |
| ✓ | Authoritative Response | At least one nameserver returns an authoritative (AA) response for the zone. |
| ✓ | Open Recursion | Nameservers do not appear to answer recursive queries from outside. Good. |
| ✓ | Public IP Addresses | All nameservers have publicly routable IP addresses. |
| ✓ | IPv6 Support | At least one nameserver has an IPv6 (AAAA) address. |
| ✓ | NS Record Consistency | All authoritative nameservers return identical NS records. |
| ✓ | Multiple Network Diversity | Nameservers appear to be on different subnets/networks. Good resilience. |
● 📄 SOA Record
INFO| Primary NS (MNAME) | archer.ns.cloudflare.com |
| Email (RNAME) | dns.cloudflare.com |
| Serial | 2411602938 |
| Refresh | 10000 (2h 46m) |
| Retry | 2400 (40 min) |
| Expire | 604800 (7 days) |
| Minimum TTL | 1800 (30 min) |
| ✓ | SOA Record Exists | SOA record found for subur88.co. |
| ✓ | SOA MNAME | SOA MNAME (archer.ns.cloudflare.com) is listed as an authoritative nameserver. |
| ✓ | SOA RNAME | SOA contact email: dns@cloudflare.com |
| ℹ | SOA Serial Format | SOA serial is 2411602938. The recommended format is YYYYMMDDNN (e.g., 2024010101). |
| ✓ | SOA Serial Consistency | All authoritative nameservers return the same SOA serial number. |
| ✓ | SOA Refresh | SOA Refresh is 10000 seconds (2h). Reasonable value. |
| ✓ | SOA Retry | SOA Retry is 2400 seconds. |
| ✓ | SOA Expire | SOA Expire is 604800 seconds (7 days). Reasonable value. |
| ✓ | SOA Minimum TTL | SOA Minimum TTL (negative caching) is 1800 seconds. |
● 📧 Mail Servers (MX)
INFONo MX records found. This domain cannot receive email.
| ℹ | MX Records | No MX records found for subur88.co. This domain cannot receive email. |
● 🌍 WWW / Web
INFO| Target | Type | IPs |
|---|---|---|
| www.subur88.co | A | 104.21.46.252, 172.67.143.101, 2606:4700:3030::ac43:8f65, 2606:4700:3035::6815:2efc |
| ✓ | WWW Record | www.subur88.co resolves to: 104.21.46.252, 172.67.143.101, 2606:4700:3030::ac43:8f65, 2606:4700:3035::6815:2efc |
| ℹ | WWW vs Apex IP | www.subur88.co and subur88.co resolve to different IP addresses. This is normal if they are intentionally served differently. |
● 🔒 DNSSEC
INFO| Enabled | No |
Chain of Trust
| Level | DS | DNSKEY | RRSIG | Status |
|---|---|---|---|---|
| . | — | ✓ | ✓ | PASS |
| co | ✓ | ✓ | ✓ | PASS |
| subur88.co | — | — | — | INFO |
| ℹ | DNSSEC Status | DNSSEC is not enabled for subur88.co. No DS or DNSKEY records found. |
● 🛡️ Email Security
WARNINGSPF (Sender Policy Framework)
No SPF record found. Your domain may be vulnerable to email spoofing.
DMARC (Domain-based Message Authentication)
No DMARC record found. Consider adding a DMARC policy to protect against email spoofing.
CAA (Certificate Authority Authorization)
| Flag | Tag | Value |
|---|---|---|
| 0 | issue | comodoca.com |
| 0 | issue | digicert.com; cansignhttpexchanges=yes |
| 0 | issue | letsencrypt.org |
| 0 | issue | pki.goog; cansignhttpexchanges=yes |
| 0 | issue | ssl.com |
| 0 | issuewild | comodoca.com |
| 0 | issuewild | digicert.com; cansignhttpexchanges=yes |
| 0 | issuewild | letsencrypt.org |
| 0 | issuewild | pki.goog; cansignhttpexchanges=yes |
| 0 | issuewild | ssl.com |
| ⚠ | SPF Record | No SPF record found. SPF helps prevent email spoofing by specifying authorized mail servers. |
| ⚠ | DMARC Record | No DMARC record found at _dmarc.[domain]. DMARC helps prevent email spoofing and phishing. |
| ✓ | CAA Records | CAA records found (10). Certificate issuance is restricted. |
| ℹ | CAA iodef Tag | No 'iodef' CAA tag. Consider adding an iodef tag to receive reports of unauthorized certificate requests. |
● 📡 DNS Propagation
PASS| Status | Resolver | Location | Result | Latency |
|---|---|---|---|---|
| ✓ | Google Public DNS 2 (8.8.4.4) | US (Google) | 172.67.143.101, 104.21.46.252 | 29ms |
| ✓ | Quad9 (9.9.9.9) | US (Quad9) | 172.67.143.101, 104.21.46.252 | 30ms |
| ✓ | OpenDNS (208.67.222.222) | US (OpenDNS) | 172.67.143.101, 104.21.46.252 | 34ms |
| ✓ | OpenDNS 2 (208.67.220.220) | US (OpenDNS) | 172.67.143.101, 104.21.46.252 | 33ms |
| ✓ | Cloudflare 2 (1.0.0.1) | US (Cloudflare) | 172.67.143.101, 104.21.46.252 | 74ms |
| ✓ | Cloudflare (1.1.1.1) | US (Cloudflare) | 104.21.46.252, 172.67.143.101 | 82ms |
| ✓ | Google Public DNS (8.8.8.8) | US (Google) | 172.67.143.101, 104.21.46.252 | 28ms |
| ✓ | Verisign (64.6.64.6) | US (Verisign) | 104.21.46.252, 172.67.143.101 | 39ms |
| ✓ | Yandex.DNS (77.88.8.8) | RU (Yandex) | 104.21.46.252, 172.67.143.101 | 298ms |
| ✓ | Comodo Secure (8.26.56.26) | US (Comodo) | 172.67.143.101, 104.21.46.252 | 3033ms |