DNS report for caas.gov.sg

This report was generated 2 weeks ago. Refresh?
A+
Connectivity
100%
Performance
100%
Resilience & Security
100%
DNS records
100%
Proud of your DNS score? Share it with the world!

Connectivity: 100%

The following nameservers are available and responding correctly for DNS queries for your domain caas.gov.sg.

Nameserver IP address(es) SOA serial
a1-6.akam.net. 193.108.91.6
2600:1401:2::6
2016060082
a2-65.akam.net. 95.100.174.65 2016060082
a20-66.akam.net. 95.100.175.66
2a02:26f0:67::42
2016060082
a3-67.akam.net. 96.7.49.67
2600:1408:1c::43
2016060082
a8-64.akam.net. 2.16.40.64
2600:1403:a::40
2016060082
a9-65.akam.net. 184.85.248.65
2a02:26f0:117::41
2016060082
ns10.gdnsdef.com. 45.116.42.10 2016060082
ns12.gdnsdef.com. 45.116.42.12 2016060082
ns12.gdnsec.com. 45.116.40.12 2016060082
ns3.gdnsec.com. 45.116.40.3 2016060082
ns7.gdnsdef.com. 45.116.42.7 2016060082
ns9.gdnsec.com. 45.116.40.9 2016060082

Good news, no warnings or errors were found.

We could not find any recommendations at this time.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • All nameservers reply with the same SOA serial number.
  • The nameserver IPs are distributed across multiple subnets.
  • All nameservers are online.
  • Nameservers are available over IPv4.
  • Nameservers are available over IPv6.

Performance: 100%

We tested each nameserver and measured the following response times.

Nameserver IP address(es) Response time
a1-6.akam.net. 193.108.91.6
2600:1401:2::6
19ms
27ms
a2-65.akam.net. 95.100.174.65 23ms
a20-66.akam.net. 95.100.175.66
2a02:26f0:67::42
31ms
23ms
a3-67.akam.net. 96.7.49.67
2600:1408:1c::43
39ms
35ms
a8-64.akam.net. 2.16.40.64
2600:1403:a::40
23ms
27ms
a9-65.akam.net. 184.85.248.65
2a02:26f0:117::41
19ms
19ms
ns10.gdnsdef.com. 45.116.42.10 23ms
ns12.gdnsdef.com. 45.116.42.12 27ms
ns12.gdnsec.com. 45.116.40.12 31ms
ns3.gdnsec.com. 45.116.40.3 35ms
ns7.gdnsdef.com. 45.116.42.7 27ms
ns9.gdnsec.com. 45.116.40.9 31ms

Good news, no warnings or errors were found.

We could not find any recommendations at this time.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • Nameserver a1-6.akam.net. (193.108.91.6) replied quickly (< 50ms).
  • Nameserver a1-6.akam.net. (2600:1401:2::6) replied in a reasonable time.
  • Nameserver a2-65.akam.net. (95.100.174.65) replied quickly (< 50ms).
  • Nameserver a20-66.akam.net. (95.100.175.66) replied quickly (< 50ms).
  • Nameserver a20-66.akam.net. (2a02:26f0:67::42) replied in a reasonable time.
  • Nameserver a3-67.akam.net. (96.7.49.67) replied quickly (< 50ms).
  • Nameserver a3-67.akam.net. (2600:1408:1c::43) replied in a reasonable time.
  • Nameserver a8-64.akam.net. (2.16.40.64) replied quickly (< 50ms).
  • Nameserver a8-64.akam.net. (2600:1403:a::40) replied in a reasonable time.
  • Nameserver a9-65.akam.net. (184.85.248.65) replied quickly (< 50ms).
  • Nameserver a9-65.akam.net. (2a02:26f0:117::41) replied in a reasonable time.
  • Nameserver ns10.gdnsdef.com. (45.116.42.10) replied quickly (< 50ms).
  • Nameserver ns12.gdnsdef.com. (45.116.42.12) replied quickly (< 50ms).
  • Nameserver ns12.gdnsec.com. (45.116.40.12) replied quickly (< 50ms).
  • Nameserver ns3.gdnsec.com. (45.116.40.3) replied quickly (< 50ms).
  • Nameserver ns7.gdnsdef.com. (45.116.42.7) replied quickly (< 50ms).
  • Nameserver ns9.gdnsec.com. (45.116.40.9) replied quickly (< 50ms).

Resilience & Security: 100%

These are the locations and providers of your nameservers.

Nameserver Location ISP
a1-6.akam.net. IPv4: NL
IPv6: US
AS21342 - AKAMAI-ASN2, NL
AS21342 - AKAMAI-ASN2, NL
a2-65.akam.net. IPv4: NL AS21342 - AKAMAI-ASN2, NL
a20-66.akam.net. IPv4: NL
IPv6: NL
AS21342 - AKAMAI-ASN2, NL
AS21342 - AKAMAI-ASN2, NL
a3-67.akam.net. IPv4: US
IPv6: US
AS21342 - AKAMAI-ASN2, NL
AS21342 - AKAMAI-ASN2, NL
a8-64.akam.net. IPv4: NL
IPv6: US
AS21342 - AKAMAI-ASN2, NL
AS21342 - AKAMAI-ASN2, NL
a9-65.akam.net. IPv4: US
IPv6: NL
AS21342 - AKAMAI-ASN2, NL
AS21342 - AKAMAI-ASN2, NL
ns10.gdnsdef.com. IPv4: HK AS45474 - NEXUSGUARD-AS-AP NEXUSGUARD LIMITED, HK
ns12.gdnsdef.com. IPv4: HK AS45474 - NEXUSGUARD-AS-AP NEXUSGUARD LIMITED, HK
ns12.gdnsec.com. IPv4: HK AS45474 - NEXUSGUARD-AS-AP NEXUSGUARD LIMITED, HK
ns3.gdnsec.com. IPv4: HK AS45474 - NEXUSGUARD-AS-AP NEXUSGUARD LIMITED, HK
ns7.gdnsdef.com. IPv4: HK AS45474 - NEXUSGUARD-AS-AP NEXUSGUARD LIMITED, HK
ns9.gdnsec.com. IPv4: HK AS45474 - NEXUSGUARD-AS-AP NEXUSGUARD LIMITED, HK

Good news, no warnings or errors were found.

We detected some possible recommendations for you to consider. No penalties were given for these, but resolving them can give you a higher DNS score.

  • No CAA records found. Consider adding CAA records, as it adds increased security by limiting which Certificate Authorities can issue certificates for this domain. (more info)

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • You have more than 1 nameserver.
  • The IPv4 nameservers are distributed among multiple providers.
  • The IPv4 nameservers are distributed across multiple locations.
  • The IPv6 nameservers are distributed among multiple providers.
  • The IPv6 nameservers are distributed across multiple locations.
  • DNSSEC is enabled.
  • The nameservers are being operated from multiple domains (akam.net, gdnsdef.com, gdnsec.com).

DNS records: 100%

Our scans detected the following publicly available DNS records.

Record TTL Value
A caas.gov.sg 4h 35.201.83.130
AAAA caas.gov.sg 4h 2600:1901:0:8a57::
DNSKEY caas.gov.sg 302400s ZSK | RSA/SHA-256 | AwEAAc1RhcfK4bXZuG16yFE0h6A2XUIDwvVt2f78JWN4iZoKbgy87Ef8 loCNx8/cQmwIHyHyB76EEb4XxdEcv4soqN+Jb3RYEzyngK5B2WAgjCWV 9cuabEKpPFzPopAuqJiTp33ZGZdUMM7fdfqP3lo4e3b/GXXoFXdUhJ/2 BEvHWwYz

ZSK | RSA/SHA-256 | AwEAAd2TqQfvuYmH/tzKViaMgrXUoRhNaZ5h5s9xhgScgcZlaf/26/KZ /B3tbN2P+7n4dcDpkhW3FrACjRehLQkw9QKKgKv7XYwS40Z6junrZ0Xz NUz8Who4jh0fFeVaQXuq1vrwy9gREWyja4qcOzl9gn7Aq2L0RCGRZQyh ksf+QL+L

ZSK | RSA/SHA-256 | AwEAAdhuC6WStcfCDT2p3LfAH8iuBdgC3A5LMsBoE1DerZcaYU3nZjaJ ATjKiLB9JCLs+lYGZU73AFGnBDT2Kb1QLTHNPCrfyakbKcAVS7CK1HbO BFgDCZa6B8zYaDbCEgBI6utOus+fhTxOHbSsPD+eZFKtPgwPh326ZwVD iE9GGPW7

KSK | RSA/SHA-256 | AwEAAcNlfhQhpSWaqJMOxQufMrEZ62O7PK3gS1DCq4NCLSVT0pcdVANo vRgFZVRnYbsER+RB8XvRLU863IxS5fWW/hGFnw1dTQXbtBkY8sYZAPdt +WpwukdI1RoQef9L7zQ31htM/BSqF28yE8pPB2oUbWJDAQK+aYRyZoOa 2VP0VLV8BHwGG3A1ww7hd7DhSZhUUGSS0U9J8X8ZVCzYgrI6m7b2ORYh leg85Y18qZmd5ot7CBS5kfqyc/OLPZR7vRaXEPyVrv9m0Vc7f/bcFWSD cM1jf4V8g07Y2jlZV1jehm2piGK0Vnr8He3SWRaxbAB2uQCfeGxC3eBk Fal9kCa6Zd8=
MX caas.gov.sg 4h 10 mx2.sgict.gov.sg.
20 mx1.sgict.gov.sg.
50 mx4.sgict.gov.sg.
60 mx3.sgict.gov.sg.
NS caas.gov.sg 4h a1-6.akam.net.
a2-65.akam.net.
a20-66.akam.net.
a3-67.akam.net.
a8-64.akam.net.
a9-65.akam.net.
ns10.gdnsdef.com.
ns12.gdnsdef.com.
ns12.gdnsec.com.
ns3.gdnsec.com.
ns7.gdnsdef.com.
ns9.gdnsec.com.
SOA caas.gov.sg 4h gccin3psicnsp01.sgnet.gov.sg. root.pridns.gov.sg. 2016060082 10800 1080 2419200 900
TXT caas.gov.sg 1h "221s8ufu5erk46ukliupa2batk"
"35CJ887U8KQ7ET99FJMDJB3TL9"
"414ibb1afcj2h7fj4vd8jt24l0"
"5J6RL4921NGNMA8SK9K0NVE3HS"
"5s1mr8p5mucsqiquprvbon87t0"
"8un5qn7qpobsk64h32vncfq3q5"
"MS=0DACB759FF7B7FE41AA7C4428EEE2CC91B1E40DD"
"MS=ms74800983"
"ZOOM_verify_vhqlmqd7SjuOyNTnMYxp_Q"
"ae9nl0934mkuo2u15sbjbjh5g4"
"amazonses:3kiZFqV4B5Sd1Cgwczq8Ig3RXsu0PwQpPxNqQIvbpqA="
"amazonses:kTHPLImyBUQHtIttHSFBMribCKWklogWJXncWAf6Hoc="
"apple-domain-verification=quAw7VKvaBTBnvGw"
"asb77skp92c5nlg6o85utfl2bl"
"cvblciijlnj7v1f5nf3mbtuv5s"
"f1d6feuo964t6ut4irhen83e2n"
"f641dmcmgu7s39htdpkbk8s4bd"
"google-site-verification=l94TsEnrbZdJuXokW-1ChDIyo3UYyh0gG_RcU2a1Txs"
"hpsp8fofmcu5p0b3kcoo9ijc72"
"j2isr8tuqbrkdn97h37866ksv8"
"l5gojkr6sk1103njb20eumajh7"
"mle9pajmb8g109dukc3uurtjcv"
"n8418durc5l8j0flkvgc8enala"
"s3vjhvd3nbhcdp9gw4bwy7y8385d1tg6"
"sa1n86s7de8jpm1jg9k3867ndq"
"tha9o41iqudvbc9vg0a5vkgem6"
"v=spf1 include:support.gov.sg include:gpc.gov.sg include:amazonses.com include:spf.protection.outlook.com include:sendgrid.net a:mailrelay1.g-cloud.gov.sg a:mailrelay2.g-cloud.gov.sg -all"
"viuvhonk7l21uaap7pkrsubk4m"
TXT _amazonses.caas.gov.sg 4h "WaGw82R2IFCccnZNYJ7pLq4Lm3iAvuSN/PCNfTwBifg="
CNAME www.caas.gov.sg 4h d2tigyy8lxtrcc.cloudfront.net.

Good news, no warnings or errors were found.

We detected some possible recommendations for you to consider. No penalties were given for these, but resolving them can give you a higher DNS score.

  • No DMARC records have been found. Consider configuring DMARC for improved e-mail authentication.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • Multiple MX records found.
  • MX records with different priorities found (main + fall-back mailservers).
  • The MX record for "caas.gov.sg" has a long TTL (1h+).
  • The MX records points to multiple mailservers.
  • The NS records have a long TTL (1h+).
  • Your SOA serial number follows the best practice YYYYMMDDxx format.
  • SPF records have been found.
  • SPF records are set up restrictively.
  • Found a root (apex) DNS record.
  • Found a www DNS record.
  • Found an IPv6 root DNS record.
  • The active nameservers match the NS records.
  • The DNS records appear to be RFC compliant.
Proud of your DNS score? Share it with the world!

 

Have a look at other public DNS scans.