tools.bd — DNS & WHOIS Analysis — Domain Analyzer Tools

● 📋 Domain Registration

FAIL

This domain is not supported for WHOIS/RDAP lookup.

● 🌐 DNS Records

PASS

SOA Records (1)

Name	Value	TTL
tools.bd	magdalena.ns.cloudflare.com dns.cloudflare.com 2411796752 10000 2400 604800 1800	1800

NS Records (2)

Name	Value	TTL
tools.bd	magdalena.ns.cloudflare.com	86400
tools.bd	major.ns.cloudflare.com	86400

A Records (1)

Name	Value	TTL
tools.bd	165.99.164.179	60

TXT Records (2)

Name	Value	TTL
tools.bd	6cc430a5-2e8f-4158-a802-e4706bc7cf63	300
tools.bd	google-site-verification=kFWmZxNrhq4qJncOl66TIO_jzqbjqmzKZHMiY0UaDYc	300

DNSKEY Records (2)

Name	Value	TTL
tools.bd	Flags=257 Protocol=3 Alg=13 KeyTag=2371	3600
tools.bd	Flags=256 Protocol=3 Alg=13 KeyTag=34505	3600

● 🔗 Parent Nameservers

PASS

Nameserver	IPv4	IPv6	Glue
major.ns.cloudflare.com	108.162.193.241, 172.64.33.241, 173.245.59.241	2606:4700:58::adf5:3bf1, 2a06:98c1:50::ac40:21f1, 2803:f800:50::6ca2:c1f1	No
magdalena.ns.cloudflare.com	162.159.38.8, 172.64.34.8, 108.162.194.8	2a06:98c1:50::ac40:2208, 2803:f800:50::6ca2:c208, 2606:4700:50::a29f:2608	No

✓	Nameservers Listed at Parent	The parent TLD nameserver has 2 nameserver(s) listed for tools.bd. magdalena.ns.cloudflare.com major.ns.cloudflare.com
✓	Minimum Nameserver Count	2 nameservers found. Good redundancy.
✓	Public IP: major.ns.cloudflare.com	Nameserver major.ns.cloudflare.com has a public IP address.
✓	Public IP: magdalena.ns.cloudflare.com	Nameserver magdalena.ns.cloudflare.com has a public IP address.
✓	Parent/Auth NS Consistency	The nameservers listed at the parent match those returned by the authoritative nameservers.

● 🖥️ Authoritative Nameservers

WARNING

Nameserver	UDP	TCP	Auth	Recursion	IPv6	Latency
magdalena.ns.cloudflare.com	✓	✓	✓	Open	✓	12ms
major.ns.cloudflare.com	✓	✓	✓	Closed	✓	12ms

✓	Authoritative Nameservers Found	Found 2 authoritative nameserver(s): major.ns.cloudflare.com, magdalena.ns.cloudflare.com
✓	All Nameservers Respond	All authoritative nameservers are responding to DNS queries.
✓	UDP DNS (Port 53)	At least one nameserver is responding to UDP DNS queries on port 53.
✓	TCP DNS (Port 53)	TCP DNS queries are supported. Required for large responses and DNSSEC.
✓	Authoritative Response	At least one nameserver returns an authoritative (AA) response for the zone.
⚠	Open Recursion	One or more nameservers appear to answer recursive queries. Authoritative nameservers should not be open resolvers.
✓	Public IP Addresses	All nameservers have publicly routable IP addresses.
✓	IPv6 Support	At least one nameserver has an IPv6 (AAAA) address.
✓	NS Record Consistency	All authoritative nameservers return identical NS records.
✓	Multiple Network Diversity	Nameservers appear to be on different subnets/networks. Good resilience.

● 📄 SOA Record

INFO

Primary NS (MNAME)	magdalena.ns.cloudflare.com
Email (RNAME)	dns.cloudflare.com
Serial	2411796752
Refresh	10000 (2h 46m)
Retry	2400 (40 min)
Expire	604800 (7 days)
Minimum TTL	1800 (30 min)

✓	SOA Record Exists	SOA record found for tools.bd.
✓	SOA MNAME	SOA MNAME (magdalena.ns.cloudflare.com) is listed as an authoritative nameserver.
✓	SOA RNAME	SOA contact email: dns@cloudflare.com
ℹ	SOA Serial Format	SOA serial is 2411796752. The recommended format is YYYYMMDDNN (e.g., 2024010101).
✓	SOA Serial Consistency	All authoritative nameservers return the same SOA serial number.
✓	SOA Refresh	SOA Refresh is 10000 seconds (2h). Reasonable value.
✓	SOA Retry	SOA Retry is 2400 seconds.
✓	SOA Expire	SOA Expire is 604800 seconds (7 days). Reasonable value.
✓	SOA Minimum TTL	SOA Minimum TTL (negative caching) is 1800 seconds.

● 📧 Mail Servers (MX)

INFO

No MX records found. This domain cannot receive email.

ℹ

MX Records

No MX records found for tools.bd. This domain cannot receive email.

● 🌍 WWW / Web

PASS

Target	Type	IPs
www.tools.bd	A	165.99.164.179

✓	WWW Record	www.tools.bd resolves to: 165.99.164.179
✓	WWW vs Apex IP	www.tools.bd and tools.bd resolve to the same IP address(es).

● 🔒 DNSSEC

WARNING

Enabled	Yes
DNSKEY	KeyTag=34505 Alg=ECDSAP256SHA256 Flags=256, KeyTag=2371 Alg=ECDSAP256SHA256 Flags=257
Algorithms	ECDSAP256SHA256, ECDSAP256SHA256

Chain of Trust

Level	DS	DNSKEY	RRSIG	Status
.	—	✓	✓	PASS
bd	✓	✓	✓	PASS
tools.bd	—	✓	✓	WARNING

✓	DNSSEC Enabled	DNSSEC appears to be enabled for tools.bd.
⚠	DS Record	DNSKEY found but no DS record at the parent. DNSSEC chain of trust is broken — the parent zone has not signed the delegation.
✓	DNSKEY Record	DNSKEY record(s) found in the zone. KeyTag=34505 Alg=ECDSAP256SHA256 Flags=256 KeyTag=2371 Alg=ECDSAP256SHA256 Flags=257
✓	DNSSEC Algorithm	Algorithm ECDSAP256SHA256 is in use. This is a strong algorithm.
✓	DNSSEC Algorithm	Algorithm ECDSAP256SHA256 is in use. This is a strong algorithm.
✓	RRSIG Records	RRSIG (signature) records found. Zone records are signed. TypeCovered=DNSKEY Alg=13 KeyTag=2371 Signer=tools.bd TypeCovered=SOA Alg=13 KeyTag=34505 Signer=tools.bd TypeCovered=NS Alg=13 KeyTag=34505 Signer=tools.bd
⚠	DNSSEC Chain	Chain of trust: ✓ . → ✓ bd → ⚠ tools.bd

● 🛡️ Email Security

WARNING

SPF (Sender Policy Framework)

No SPF record found. Your domain may be vulnerable to email spoofing.

DMARC (Domain-based Message Authentication)

Record	v=DMARC1; p=none; rua=mailto:16ce805534584a93a053be31031ada0e@dmarc-reports.cloudflare.net
Policy (p=)	none
Aggregate Reports (rua)	mailto:16ce805534584a93a053be31031ada0e@dmarc-reports.cloudflare.net

CAA (Certificate Authority Authorization)

No CAA records found. Any certificate authority can issue SSL certificates for this domain.

⚠	SPF Record	No SPF record found. SPF helps prevent email spoofing by specifying authorized mail servers.
✓	DMARC Record	DMARC record found. v=DMARC1; p=none; rua=mailto:16ce805534584a93a053be31031ada0e@dmarc-reports.cloudflare.net
⚠	DMARC Policy	DMARC policy is 'none' (monitoring only). Emails failing DMARC will not be rejected or quarantined. Consider upgrading to 'quarantine' or 'reject'.
✓	DMARC Reporting (rua)	Aggregate reports (rua) will be sent to: mailto:16ce805534584a93a053be31031ada0e@dmarc-reports.cloudflare.net
ℹ	CAA Records	No CAA records found for tools.bd. CAA records specify which certificate authorities may issue SSL/TLS certificates for this domain.

● 📡 DNS Propagation

PASS

Status	Resolver	Location	Result	Latency
✓	Cloudflare (1.1.1.1)	US (Cloudflare)	165.99.164.179	13ms
✓	Comodo Secure (8.26.56.26)	US (Comodo)	165.99.164.179	25ms
✓	Google Public DNS (8.8.8.8)	US (Google)	165.99.164.179	28ms
✓	Google Public DNS 2 (8.8.4.4)	US (Google)	165.99.164.179	28ms
✓	OpenDNS 2 (208.67.220.220)	US (OpenDNS)	165.99.164.179	23ms
✓	OpenDNS (208.67.222.222)	US (OpenDNS)	165.99.164.179	36ms
✓	Cloudflare 2 (1.0.0.1)	US (Cloudflare)	165.99.164.179	13ms
✓	Quad9 (9.9.9.9)	US (Quad9)	165.99.164.179	24ms
✓	Verisign (64.6.64.6)	US (Verisign)	165.99.164.179	279ms
✓	Yandex.DNS (77.88.8.8)	RU (Yandex)	165.99.164.179	414ms

tools.bd — DNS Report

● 📋 Domain Registration

● 🌐 DNS Records

SOA Records (1)

NS Records (2)

A Records (1)

TXT Records (2)

DNSKEY Records (2)

● 🔗 Parent Nameservers

● 🖥️ Authoritative Nameservers

● 📄 SOA Record

● 📧 Mail Servers (MX)

● 🌍 WWW / Web

● 🔒 DNSSEC

Chain of Trust

● 🛡️ Email Security

SPF (Sender Policy Framework)

DMARC (Domain-based Message Authentication)

CAA (Certificate Authority Authorization)

● 📡 DNS Propagation