wp-premium.org — DNS Report

Scan ID: wp-premium.org-1786371909999518162 Scanned: Aug 10, 2026

C 77%

Rescan

37 Pass

5 Warnings

0 Failures

4 Info

46 Total

Processed in 1s

● 📋 Domain Registration

PASS

Registrar	Cloudflare, Inc.
Registrar ID	1910
Created	Aug 06, 2023
Updated	Aug 10, 2026
Expires	Aug 06, 2027 (360 days left)
DNSSEC	✗ Unsigned
Status	client transfer prohibited
RDAP Nameservers	kristina.ns.cloudflare.com michael.ns.cloudflare.com

● 🌐 DNS Records

PASS

SOA Records (1)

Name	Value	TTL
wp-premium.org	kristina.ns.cloudflare.com dns.cloudflare.com 2411638013 10000 2400 604800 1800	1800

NS Records (2)

Name	Value	TTL
wp-premium.org	kristina.ns.cloudflare.com	86400
wp-premium.org	michael.ns.cloudflare.com	86400

A Records (2)

Name	Value	TTL
wp-premium.org	104.21.38.230	300
wp-premium.org	172.67.140.194	300

AAAA Records (2)

Name	Value	TTL
wp-premium.org	2606:4700:3030::ac43:8cc2	300
wp-premium.org	2606:4700:3033::6815:26e6	300

MX Records (2)

Name	Value	TTL
wp-premium.org	mx2.hostinger.com	300
wp-premium.org	mx1.hostinger.com	300

TXT Records (2)

Name	Value	TTL
wp-premium.org	71e098e1ad9483a6364957ebaf45d084	300
wp-premium.org	v=spf1 include:_spf.mail.hostinger.com ~all	300

CAA Records (10)

Name	Value	TTL
wp-premium.org	0 issuewild "pki.goog; cansignhttpexchanges=yes"	3600
wp-premium.org	0 issue "letsencrypt.org"	3600
wp-premium.org	0 issue "ssl.com"	3600
wp-premium.org	0 issuewild "comodoca.com"	3600
wp-premium.org	0 issuewild "digicert.com; cansignhttpexchanges=yes"	3600
wp-premium.org	0 issuewild "letsencrypt.org"	3600
wp-premium.org	0 issue "comodoca.com"	3600
wp-premium.org	0 issuewild "ssl.com"	3600
wp-premium.org	0 issue "digicert.com; cansignhttpexchanges=yes"	3600
wp-premium.org	0 issue "pki.goog; cansignhttpexchanges=yes"	3600

DNSKEY Records (2)

Name	Value	TTL
wp-premium.org	Flags=256 Protocol=3 Alg=13 KeyTag=34505	3600
wp-premium.org	Flags=257 Protocol=3 Alg=13 KeyTag=2371	3600

● 🔗 Parent Nameservers

PASS

Nameserver	IPv4	IPv6	Glue
michael.ns.cloudflare.com	172.64.35.12, 162.159.44.12, 108.162.195.12	2606:4700:58::a29f:2c0c, 2a06:98c1:50::ac40:230c, 2803:f800:50::6ca2:c30c	No
kristina.ns.cloudflare.com	172.64.34.125, 108.162.194.125, 162.159.38.125	2a06:98c1:50::ac40:227d, 2606:4700:50::a29f:267d, 2803:f800:50::6ca2:c27d	No

✓	Nameservers Listed at Parent	The parent TLD nameserver has 2 nameserver(s) listed for wp-premium.org. michael.ns.cloudflare.com kristina.ns.cloudflare.com
✓	Minimum Nameserver Count	2 nameservers found. Good redundancy.
✓	Public IP: michael.ns.cloudflare.com	Nameserver michael.ns.cloudflare.com has a public IP address.
✓	Public IP: kristina.ns.cloudflare.com	Nameserver kristina.ns.cloudflare.com has a public IP address.
✓	Parent/Auth NS Consistency	The nameservers listed at the parent match those returned by the authoritative nameservers.

● 🖥️ Authoritative Nameservers

PASS

Nameserver	UDP	TCP	Auth	Recursion	IPv6	Latency
kristina.ns.cloudflare.com	✓	✓	✓	Closed	✓	14ms
michael.ns.cloudflare.com	✓	✓	✓	Closed	✓	22ms

✓	Authoritative Nameservers Found	Found 2 authoritative nameserver(s): kristina.ns.cloudflare.com, michael.ns.cloudflare.com
✓	All Nameservers Respond	All authoritative nameservers are responding to DNS queries.
✓	UDP DNS (Port 53)	At least one nameserver is responding to UDP DNS queries on port 53.
✓	TCP DNS (Port 53)	TCP DNS queries are supported. Required for large responses and DNSSEC.
✓	Authoritative Response	At least one nameserver returns an authoritative (AA) response for the zone.
✓	Open Recursion	Nameservers do not appear to answer recursive queries from outside. Good.
✓	Public IP Addresses	All nameservers have publicly routable IP addresses.
✓	IPv6 Support	At least one nameserver has an IPv6 (AAAA) address.
✓	NS Record Consistency	All authoritative nameservers return identical NS records.
✓	Multiple Network Diversity	Nameservers appear to be on different subnets/networks. Good resilience.

● 📄 SOA Record

INFO

Primary NS (MNAME)	kristina.ns.cloudflare.com
Email (RNAME)	dns.cloudflare.com
Serial	2411638013
Refresh	10000 (2h 46m)
Retry	2400 (40 min)
Expire	604800 (7 days)
Minimum TTL	1800 (30 min)

✓	SOA Record Exists	SOA record found for wp-premium.org.
✓	SOA MNAME	SOA MNAME (kristina.ns.cloudflare.com) is listed as an authoritative nameserver.
✓	SOA RNAME	SOA contact email: dns@cloudflare.com
ℹ	SOA Serial Format	SOA serial is 2411638013. The recommended format is YYYYMMDDNN (e.g., 2024010101).
✓	SOA Serial Consistency	All authoritative nameservers return the same SOA serial number.
✓	SOA Refresh	SOA Refresh is 10000 seconds (2h). Reasonable value.
✓	SOA Retry	SOA Retry is 2400 seconds.
✓	SOA Expire	SOA Expire is 604800 seconds (7 days). Reasonable value.
✓	SOA Minimum TTL	SOA Minimum TTL (negative caching) is 1800 seconds.

● 📧 Mail Servers (MX)

WARNING

Priority	Hostname	IPv4	IPv6	PTR
10	mx2.hostinger.com	172.65.182.103	2606:4700:90:0:c1f8:f874:2386:b61f	-
5	mx1.hostinger.com	172.65.182.103	2606:4700:90:0:c1f8:f874:2386:b61f	-

✓	MX Records Exist	Found 2 MX record(s) for wp-premium.org.
✓	MX Redundancy	Multiple MX records found (2). Good for redundancy.
⚠	Duplicate MX IP Addresses	Multiple MX records resolve to the same IP address(es): 172.65.182.103. This reduces redundancy.
⚠	MX Reverse DNS (PTR)	No PTR records found for MX server IP(s). Many mail servers require rDNS for spam filtering.
✓	MX Consistency	All authoritative nameservers return consistent MX records.

● 🌍 WWW / Web

INFO

Target	Type	IPs
www.wp-premium.org	A	104.21.38.230, 172.67.140.194, 2606:4700:3033::6815:26e6, 2606:4700:3030::ac43:8cc2

✓	WWW Record	www.wp-premium.org resolves to: 104.21.38.230, 172.67.140.194, 2606:4700:3033::6815:26e6, 2606:4700:3030::ac43:8cc2
ℹ	WWW vs Apex IP	www.wp-premium.org and wp-premium.org resolve to different IP addresses. This is normal if they are intentionally served differently.

● 🔒 DNSSEC

WARNING

Enabled	Yes
DNSKEY	KeyTag=2371 Alg=ECDSAP256SHA256 Flags=257, KeyTag=34505 Alg=ECDSAP256SHA256 Flags=256
Algorithms	ECDSAP256SHA256, ECDSAP256SHA256

Chain of Trust

Level	DS	DNSKEY	RRSIG	Status
.	—	✓	✓	PASS
org	✓	✓	✓	PASS
wp-premium.org	—	✓	✓	WARNING

✓	DNSSEC Enabled	DNSSEC appears to be enabled for wp-premium.org.
⚠	DS Record	DNSKEY found but no DS record at the parent. DNSSEC chain of trust is broken — the parent zone has not signed the delegation.
✓	DNSKEY Record	DNSKEY record(s) found in the zone. KeyTag=2371 Alg=ECDSAP256SHA256 Flags=257 KeyTag=34505 Alg=ECDSAP256SHA256 Flags=256
✓	DNSSEC Algorithm	Algorithm ECDSAP256SHA256 is in use. This is a strong algorithm.
✓	DNSSEC Algorithm	Algorithm ECDSAP256SHA256 is in use. This is a strong algorithm.
✓	RRSIG Records	RRSIG (signature) records found. Zone records are signed. TypeCovered=DNSKEY Alg=13 KeyTag=2371 Signer=wp-premium.org TypeCovered=SOA Alg=13 KeyTag=34505 Signer=wp-premium.org TypeCovered=NS Alg=13 KeyTag=34505 Signer=wp-premium.org
⚠	DNSSEC Chain	Chain of trust: ✓ . → ✓ org → ⚠ wp-premium.org

● 🛡️ Email Security

WARNING

SPF (Sender Policy Framework)

Record	v=spf1 include:_spf.mail.hostinger.com ~all
All Mechanism	~all
DNS Lookups	1 / 10 max

DMARC (Domain-based Message Authentication)

Record	v=DMARC1; p=none; rua=mailto:6c4b2124c1014cb8b7854b57da7866af@dmarc-reports.cloudflare.net
Policy (p=)	none
Aggregate Reports (rua)	mailto:6c4b2124c1014cb8b7854b57da7866af@dmarc-reports.cloudflare.net

CAA (Certificate Authority Authorization)

Flag	Tag	Value
0	issue	comodoca.com
0	issue	digicert.com; cansignhttpexchanges=yes
0	issue	letsencrypt.org
0	issue	pki.goog; cansignhttpexchanges=yes
0	issue	ssl.com
0	issuewild	comodoca.com
0	issuewild	digicert.com; cansignhttpexchanges=yes
0	issuewild	letsencrypt.org
0	issuewild	pki.goog; cansignhttpexchanges=yes
0	issuewild	ssl.com

✓	SPF Record	SPF record found. v=spf1 include:_spf.mail.hostinger.com ~all
ℹ	SPF All Mechanism	SPF record uses '~all' (softfail). Non-listed senders will be marked but not rejected. Consider '-all' for strict enforcement.
✓	SPF DNS Lookup Count	SPF record uses approximately 1 DNS lookups (limit is 10).
✓	DMARC Record	DMARC record found. v=DMARC1; p=none; rua=mailto:6c4b2124c1014cb8b7854b57da7866af@dmarc-reports.cloudflare.net
⚠	DMARC Policy	DMARC policy is 'none' (monitoring only). Emails failing DMARC will not be rejected or quarantined. Consider upgrading to 'quarantine' or 'reject'.
✓	DMARC Reporting (rua)	Aggregate reports (rua) will be sent to: mailto:6c4b2124c1014cb8b7854b57da7866af@dmarc-reports.cloudflare.net
✓	CAA Records	CAA records found (10). Certificate issuance is restricted.
ℹ	CAA iodef Tag	No 'iodef' CAA tag. Consider adding an iodef tag to receive reports of unauthorized certificate requests.

● 📡 DNS Propagation

PASS

Status	Resolver	Location	Result	Latency
✓	Cloudflare 2 (1.0.0.1)	US (Cloudflare)	104.21.38.230, 172.67.140.194	18ms
✓	Comodo Secure (8.26.56.26)	US (Comodo)	172.67.140.194, 104.21.38.230	30ms
✓	Quad9 (9.9.9.9)	US (Quad9)	172.67.140.194, 104.21.38.230	33ms
✓	OpenDNS (208.67.222.222)	US (OpenDNS)	104.21.38.230, 172.67.140.194	48ms
✓	Google Public DNS (8.8.8.8)	US (Google)	104.21.38.230, 172.67.140.194	30ms
✓	Google Public DNS 2 (8.8.4.4)	US (Google)	172.67.140.194, 104.21.38.230	31ms
✓	Verisign (64.6.64.6)	US (Verisign)	172.67.140.194, 104.21.38.230	22ms
✓	OpenDNS 2 (208.67.220.220)	US (OpenDNS)	104.21.38.230, 172.67.140.194	91ms
✓	Cloudflare (1.1.1.1)	US (Cloudflare)	172.67.140.194, 104.21.38.230	66ms
✓	Yandex.DNS (77.88.8.8)	RU (Yandex)	104.21.38.230, 172.67.140.194	411ms

● 🔄 Reverse DNS (PTR)

INFO

IP Address	PTR Record	Forward Match
172.65.182.103	-	✗ No match
172.65.182.103	-	✗ No match