DNS report for dismail.de

This report was generated 4 weeks ago. Refresh?
A+
Connectivity
100%
Performance
100%
Resilience & Security
100%
DNS records
100%
Proud of your DNS score? Share it with the world!

Connectivity: 100%

The following nameservers are available and responding correctly for DNS queries for your domain dismail.de.

Nameserver IP address(es) SOA serial
ns1.core-networks.de. 194.213.5.254
2001:1bc0:d::fffe
2020050260
ns2.core-networks.eu. 78.111.72.98
2a02:f98:0:22::ffff
2020050260
ns3.core-networks.com. 82.96.73.254
2001:1bc0:d::ffff
2020050260

Good news, no warnings or errors were found.

We could not find any recommendations at this time.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • All nameservers reply with the same SOA serial number.
  • The nameserver IPs are distributed across multiple subnets.
  • All nameservers are online.
  • Nameservers are available over IPv4.
  • Nameservers are available over IPv6.

Performance: 100%

We tested each nameserver and measured the following response times.

Nameserver IP address(es) Response time
ns1.core-networks.de. 194.213.5.254
2001:1bc0:d::fffe
8ms
10ms
ns2.core-networks.eu. 78.111.72.98
2a02:f98:0:22::ffff
10ms
11ms
ns3.core-networks.com. 82.96.73.254
2001:1bc0:d::ffff
7ms
9ms

Good news, no warnings or errors were found.

We could not find any recommendations at this time.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • Nameserver ns1.core-networks.de. (194.213.5.254) replied quickly (< 50ms).
  • Nameserver ns1.core-networks.de. (2001:1bc0:d::fffe) replied in a reasonable time.
  • Nameserver ns2.core-networks.eu. (78.111.72.98) replied quickly (< 50ms).
  • Nameserver ns2.core-networks.eu. (2a02:f98:0:22::ffff) replied in a reasonable time.
  • Nameserver ns3.core-networks.com. (82.96.73.254) replied quickly (< 50ms).
  • Nameserver ns3.core-networks.com. (2001:1bc0:d::ffff) replied in a reasonable time.

Resilience & Security: 100%

These are the locations and providers of your nameservers.

Nameserver Location ISP
ns1.core-networks.de. IPv4: DE
IPv6: DE
AS29686 - PROBENETWORKS-AS, DE
AS29686 - PROBENETWORKS-AS, DE
ns2.core-networks.eu. IPv4: DE
IPv6: DE
AS33984 - SURFPLANET-AS, DE
AS33984 - SURFPLANET-AS, DE
ns3.core-networks.com. IPv4: DE
IPv6: DE
AS29686 - PROBENETWORKS-AS, DE
AS29686 - PROBENETWORKS-AS, DE

Good news, no warnings or errors were found.

We detected some possible recommendations for you to consider. No penalties were given for these, but resolving them can give you a higher DNS score.

  • All IPv4 nameservers appear to be hosted in the same country (DE). You might want to consider spreading the nameservers geographically.
  • All IPv6 nameservers appear to be hosted in the same country (DE). You might want to consider spreading the nameservers geographically.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • You have more than 1 nameserver.
  • The IPv4 nameservers are distributed among multiple providers.
  • The IPv6 nameservers are distributed among multiple providers.
  • DNSSEC is enabled.
  • CAA records found.
  • The nameservers are being operated from multiple domains (core-networks.de, core-networks.eu, core-networks.com).

DNS records: 100%

Our scans detected the following publicly available DNS records.

Record TTL Value
A dismail.de 1800s 116.203.7.146
AAAA dismail.de 1800s 2a01:4f8:1c0c:80ac::80:1
CAA dismail.de 24h 0 issue "letsencrypt.org"
DNSKEY dismail.de 1800s ZSK | RSA/SHA-256 | AwEAAd7Mryk7w5E2L33Z4PXKgUob3kc0ODLZAfeqIQ5wNS1iTh5AO761 fzIDNmxmE2X2sW6rPblkfBXzj5HH2K2wNlCAt17W9PwEv7An0HyJJApZ /jjstQlh9oYsvkNX5SDu9aZkA84URtibLYRoptrRSJRgOOZ4ezP02EsU S7dvK1YALwqIuHRSOkYyXlNq1FWd9pIauEptdQ+9j9oPdf2B5RHsZMSm EMMVCPRLzadbUYVqAAPhqU27B8hDsc7j6oENl48+i3xXxdaoCLZZM/fR IqvaFHaekgnIEjv79FTijgLjN5QDzEmYNLShnoBpyogNg6buugy9poS+ Utp3j87NInM=

KSK | RSA/SHA-256 | AwEAAacMnihE2GBGkzjJkuruw55p5528iLCDfDXX//uTbBqYPfCagVZU HDCkkNqax8VIkemUDxf9ViLvCOOIstsEYBMDy6IqnCRqb7ToVGwMrWF5 lZCcfzqtS27ychfGpLTFU3z18+sPSZHfm066Yb8NRjM7hJqk5+DViswV qUpjE2Z/8MP/YZTfobwxKaicylG4Um8DxrXucMes6JOMqb+NxXQHCA9x 4ArvdUyrfT8AoD5llVtOPKFX/42ZMP0RiuX9dWNahKa28XqRIQbqobl2 vcFPQ0RIsf2dtwZZKpnqVMn+oaWFpqtK/kZJDKpZhYNd67aDRv75lf69 c2d3jlIgRzc=
MX dismail.de 4h 10 mx1.dismail.de.
10 mx2.dismail.de.
NS dismail.de 24h ns1.core-networks.de.
ns2.core-networks.eu.
ns3.core-networks.com.
SOA dismail.de 1800s ns1.core-networks.de. hostmaster.core-networks.de. 2020050260 28800 7200 604800 1800
TXT dismail.de 1800s "v=spf1 ip4:78.46.223.134 ip6:2a01:4f8:c17:e5e::2 ip4:159.69.191.136 ip6:2a01:4f8:1c17:7be2::2 -all"
TXT _dmarc.dismail.de 4h "v=DMARC1\; p=reject\; aspf=s\; adkim=s\; rua=mailto:dmarc-rua@dismail.de"
SRV _imap._tcp.dismail.de 1800s 0 0 143 imap.dismail.de.
SRV _imaps._tcp.dismail.de 1800s 0 0 993 imap.dismail.de.
SRV _xmpp-client._tcp.dismail.de 1800s 10 0 5222 xmpp.dismail.de.
SRV _xmpp-server._tcp.dismail.de 1800s 10 0 5269 xmpp.dismail.de.
A imap.dismail.de 4h 195.201.250.242
AAAA imap.dismail.de 4h 2a01:4f8:1c0c:80ac::1
A lb1.dismail.de 1800s 159.69.86.222
A lb2.dismail.de 1800s 159.69.87.255
A mx1.dismail.de 24h 78.46.223.134
AAAA mx1.dismail.de 1800s 2a01:4f8:c17:e5e::2
A mx2.dismail.de 1800s 159.69.191.136
AAAA mx2.dismail.de 1800s 2a01:4f8:1c17:7be2::2
A smtp.dismail.de 4h 195.201.250.242
AAAA smtp.dismail.de 4h 2a01:4f8:1c0c:80ac::1
A webmail.dismail.de 1m 116.203.7.146
AAAA webmail.dismail.de 1m 2a01:4f8:1c0c:80ac::80:1
A www.dismail.de 1800s 116.203.7.146

Good news, no warnings or errors were found.

We could not find any recommendations at this time.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • Multiple MX records found.
  • MX records with different priorities found (main + fall-back mailservers).
  • The MX record for "dismail.de" has a long TTL (1h+).
  • The MX records points to multiple mailservers.
  • The NS records have a long TTL (1h+).
  • Your SOA serial number follows the best practice YYYYMMDDxx format.
  • SPF records have been found.
  • SPF records are set up restrictively.
  • DMARC records have been found.
  • DMARC records are set up restrictively.
  • Found a root (apex) DNS record.
  • Found a www DNS record.
  • Found an IPv6 root DNS record.
  • The active nameservers match the NS records.
  • The DNS records appear to be RFC compliant.
Proud of your DNS score? Share it with the world!

 

Have a look at other public DNS scans.