DNS report for groenewegen.it

This report was generated 2 weeks ago. Refresh?
A+
Connectivity
100%
Performance
100%
Resilience & Security
100%
DNS records
100%
Proud of your DNS score? Share it with the world!

Connectivity: 100%

The following nameservers are available and responding correctly for DNS queries for your domain groenewegen.it.

Nameserver IP address(es) SOA serial
een.dnssrv.nl. 85.17.199.26
2a02:40c0:1:2::100
2019062601
lisa.neostrada.nl. 66.228.38.167
2600:3c03::f03c:91ff:fe0a:b97
2019062601
twee.dnssrv.nl. 172.104.143.74
2a01:7e01::f03c:91ff:fee9:95bd
2019062601

Good news, no warnings or errors were found.

We could not find any recommendations at this time.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • All nameservers reply with the same SOA serial number.
  • The nameserver IPs are distributed across multiple subnets.
  • All nameservers are online.
  • Nameservers are available over IPv4.
  • Nameservers are available over IPv6.

Performance: 100%

We tested each nameserver and measured the following response times.

Nameserver IP address(es) Response time
een.dnssrv.nl. 85.17.199.26
2a02:40c0:1:2::100
15ms
5ms
lisa.neostrada.nl. 66.228.38.167
2600:3c03::f03c:91ff:fe0a:b97
78ms
79ms
twee.dnssrv.nl. 172.104.143.74
2a01:7e01::f03c:91ff:fee9:95bd
11ms
19ms

Good news, no warnings or errors were found.

We detected some possible recommendations for you to consider. No penalties were given for these, but resolving them can give you a higher DNS score.

  • Nameserver lisa.neostrada.nl. (66.228.38.167) replied reasonably fast (< 150ms), but you should aim for < 50ms response times.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • Nameserver een.dnssrv.nl. (85.17.199.26) replied quickly (< 50ms).
  • Nameserver een.dnssrv.nl. (2a02:40c0:1:2::100) replied in a reasonable time.
  • Nameserver lisa.neostrada.nl. (2600:3c03::f03c:91ff:fe0a:b97) replied in a reasonable time.
  • Nameserver twee.dnssrv.nl. (172.104.143.74) replied quickly (< 50ms).
  • Nameserver twee.dnssrv.nl. (2a01:7e01::f03c:91ff:fee9:95bd) replied in a reasonable time.

Resilience & Security: 100%

These are the locations and providers of your nameservers.

Nameserver Location ISP
een.dnssrv.nl. IPv4: NL
IPv6: NL
AS60781 - LEASEWEB-NL-AMS-01 Netherlands, NL
AS60781 - LEASEWEB-NL-AMS-01 Netherlands, NL
lisa.neostrada.nl. IPv4: US
IPv6: US
AS63949 - LINODE-AP Linode, LLC, US
AS63949 - LINODE-AP Linode, LLC, US
twee.dnssrv.nl. IPv4: US
IPv6: GB
AS63949 - LINODE-AP Linode, LLC, US
AS63949 - LINODE-AP Linode, LLC, US

Good news, no warnings or errors were found.

We could not find any recommendations at this time.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • You have more than 1 nameserver.
  • The IPv4 nameservers are distributed among multiple providers.
  • The IPv4 nameservers are distributed across multiple locations.
  • The IPv6 nameservers are distributed among multiple providers.
  • The IPv6 nameservers are distributed across multiple locations.
  • DNSSEC is enabled.
  • CAA records found.
  • The nameservers are being operated from multiple domains (dnssrv.nl, neostrada.nl).

DNS records: 100%

Our scans detected the following publicly available DNS records.

Record TTL Value
A groenewegen.it 1h 185.94.230.229
AAAA groenewegen.it 1h 2a00:f10:13f:0:1c00:beff:fe00:1d2
CAA groenewegen.it 1h 0 issue "sectigo.com"
DNSKEY groenewegen.it 1h ZSK | RSA/SHA-256 | AwEAAez6LiMWVIsjbFgWgryCDkLqwDMrsUTjCl2fPP04RScrB7E/l4Q7 uFhXIkEijrV1ckNi9v7dmEJiYZWs9oFxJIxFYDKqoSVjEt38FLsoZgMu fOE4ka7pygAYtmTZOvKuEpU3tUME88RUNO37a4PdqXpiZ3+a+llyUrgu JPuOY1lZ

KSK | RSA/SHA-256 | AwEAAb3kXkIIp5HEoV3vYERVh3dtuLa5pkfy6duSxuPdDO9WfNnFH9pc d7eBolVv9H6BG/6JfBq9/h9AH5QMvDyjb68Afuctf8PSOLTIRazjqpmC R+g3iiSyo20kzmDja5wqM19RpRcCugNboWpi5TI+gWtwNXTYMfia3taY AgNke7uBam+KNFDH5+E3Ul52V4yBx97Dq3P1+Qr6YuiXurU9hWC3ep5J 718FrEDow3eA7I5xvdAUTbiCgQpUwoen8jflSOVRmxvtOZrpQoZkcRjW EwXHDcDY7O8zSlwuguyXBXlqTxFb6S9B+5Vn5Isvo9O5AJ+dNf6TjkeO PZt69KELDMs=
MX groenewegen.it 1h 10 mail.groenewegen.it.
20 webmail.groenewegen.it.
NS groenewegen.it 1h een.dnssrv.nl.
lisa.neostrada.nl.
twee.dnssrv.nl.
SOA groenewegen.it 1h lisa.neostrada.nl. hostmaster.dnssrv.nl. 2019062601 10800 3600 604800 3600
TXT groenewegen.it 1h "v=spf1 +a +mx +ip4:185.94.230.229 +include:totaalholding.nl +include:spf.totaalholding.nl -all"
TXT _dmarc.groenewegen.it 1h "v=DMARC1\; p=quarantine\; rua=mailto:info@groenewegen.it\; ruf=mailto:info@groenewegen.it\;"
A *.groenewegen.it 1h 185.94.230.229
TXT default._domainkey.groenewegen.it 1h "v=DKIM1\; k=rsa\; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUGuaAbmyHdFmHJgFSW1m7O6LlLgaB4ILxwSHM0FnBxZwvUumS/7sMI1WUN24WMDf5QyPYf3sZHl8NzKthZXT8BPk9sEXlnmeBmSXIuXkG+p2ngq6hMzX5u+cxSr4N0IY9jL5tVTeuyQrwDJ/xjg9/J2fN6LKRnqbEJQ6U/MhN1XhAoa/HapQey3qiKbqZtpj" "GJnQ313GKB0k2W02Ae2WYU6wYWD+4bzw8iASN13RgPZKGCTCgEKVE6emUjkRagWbLTDVa9+DGbcUjyK/lgeWvJKlpqm5ZMecXYwVjW1KIAqUfb/Ft3lWJ81rGdEd81D3wTepPjRztEvGOIO0PisVQIDAQAB\;"
A localhost.groenewegen.it 1h 127.0.0.1
A mail.groenewegen.it 1h 185.94.230.229
AAAA mail.groenewegen.it 1h 2a00:f10:13f:0:1c00:beff:fe00:1d2
A www.groenewegen.it 1h 185.94.230.229
AAAA www.groenewegen.it 1h 2a00:f10:13f:0:1c00:beff:fe00:1d2

Good news, no warnings or errors were found.

We could not find any recommendations at this time.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • Multiple MX records found.
  • MX records with different priorities found (main + fall-back mailservers).
  • The MX record for "groenewegen.it" has a long TTL (1h+).
  • The MX records points to multiple mailservers.
  • The NS records have a long TTL (1h+).
  • Your SOA serial number follows the best practice YYYYMMDDxx format.
  • SPF records have been found.
  • SPF records are set up restrictively.
  • DMARC records have been found.
  • DMARC records are set up restrictively.
  • Found a root (apex) DNS record.
  • Found a www DNS record.
  • Found an IPv6 root DNS record.
  • The active nameservers match the NS records.
  • The DNS records appear to be RFC compliant.
Proud of your DNS score? Share it with the world!

 

Have a look at other public DNS scans.