DNS report for hattum.eu

This report was generated 1 week ago. Refresh?
A
Connectivity
100%
Performance
93%
Resilience & Security
88%
DNS records
94%
Proud of your DNS score? Share it with the world!

Connectivity: 100%

The following nameservers are available and responding correctly for DNS queries for your domain hattum.eu.

Nameserver IP address(es) SOA serial
ns21.cloudns.net. 109.201.133.61
2a00:1768:1001:9::21
2017064840
ns22.cloudns.net. 108.59.2.202
2604:9a00:2100:a006:4::1
2017064840
ns23.cloudns.net. 79.137.84.65
2001:41d0:401:3100::5784
2017064840
ns24.cloudns.net. 46.165.221.164
2a00:c98:2030:a006:2::1
2017064840
pns21.cloudns.net. 185.136.96.96
2a06:fb00:1::1:96
2017064840

Good news, no warnings or errors were found.

We could not find any recommendations at this time.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • All nameservers reply with the same SOA serial number.
  • The nameserver IPs are distributed across multiple subnets.
  • All nameservers are online.
  • Nameservers are available over IPv4.
  • Nameservers are available over IPv6.

Performance: 93%

We tested each nameserver and measured the following response times.

Nameserver IP address(es) Response time
ns21.cloudns.net. 109.201.133.61
2a00:1768:1001:9::21
5ms
4ms
ns22.cloudns.net. 108.59.2.202
2604:9a00:2100:a006:4::1
714ms
91ms
ns23.cloudns.net. 79.137.84.65
2001:41d0:401:3100::5784
15ms
18ms
ns24.cloudns.net. 46.165.221.164
2a00:c98:2030:a006:2::1
9ms
10ms
pns21.cloudns.net. 185.136.96.96
2a06:fb00:1::1:96
6ms
6ms

We detected the following errors or warnings about your DNS configuration. These caused your DNS rating to be lowered. Resolving these will grant a higher DNS Spy rating for your domain.

  • Nameserver ns22.cloudns.net. (108.59.2.202) replied, but took too long (714ms). This will severely impact performance.

We could not find any recommendations at this time.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • Nameserver ns21.cloudns.net. (109.201.133.61) replied quickly (< 50ms).
  • Nameserver ns21.cloudns.net. (2a00:1768:1001:9::21) replied in a reasonable time.
  • Nameserver ns22.cloudns.net. (2604:9a00:2100:a006:4::1) replied in a reasonable time.
  • Nameserver ns23.cloudns.net. (79.137.84.65) replied quickly (< 50ms).
  • Nameserver ns23.cloudns.net. (2001:41d0:401:3100::5784) replied in a reasonable time.
  • Nameserver ns24.cloudns.net. (46.165.221.164) replied quickly (< 50ms).
  • Nameserver ns24.cloudns.net. (2a00:c98:2030:a006:2::1) replied in a reasonable time.
  • Nameserver pns21.cloudns.net. (185.136.96.96) replied quickly (< 50ms).
  • Nameserver pns21.cloudns.net. (2a06:fb00:1::1:96) replied in a reasonable time.

Resilience & Security: 88%

These are the locations and providers of your nameservers.

Nameserver Location ISP
ns21.cloudns.net. IPv4: NL
IPv6: NL
AS43350 - NFORCE, NL
AS43350 - NFORCE, NL
ns22.cloudns.net. IPv4: US
IPv6: US
AS30633 - LEASEWEB-USA-WDC-01 - Leaseweb USA, Inc., US
AS30633 - LEASEWEB-USA-WDC-01 - Leaseweb USA, Inc., US
ns23.cloudns.net. IPv4: FR
IPv6: FR
AS16276 - OVH, FR
AS16276 - OVH, FR
ns24.cloudns.net. IPv4: DE
IPv6: DE
AS28753 - LEASEWEB-DE-FRA-10, DE
AS28753 - LEASEWEB-DE-FRA-10, DE
pns21.cloudns.net. IPv4: BG
IPv6: BG
AS203391 - CLOUDNSNET, BG
AS203391 - CLOUDNSNET, BG

We detected the following errors or warnings about your DNS configuration. These caused your DNS rating to be lowered. Resolving these will grant a higher DNS Spy rating for your domain.

  • All the nameservers are being operated from a single domain (cloudns.net). If that domain gets compromised or goes offline, the DNS will be unavailable. Consider spreading the nameservers across multiple domains.

We could not find any recommendations at this time.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • You have more than 1 nameserver.
  • The IPv4 nameservers are distributed among multiple providers.
  • The IPv4 nameservers are distributed across multiple locations.
  • The IPv6 nameservers are distributed among multiple providers.
  • The IPv6 nameservers are distributed across multiple locations.
  • DNSSEC is enabled.
  • CAA records found.

DNS records: 94%

Our scans detected the following publicly available DNS records.

Record TTL Value
A hattum.eu 5m 77.174.235.139
CAA hattum.eu 5m 0 issue "comodoca.com"
DNSKEY hattum.eu 172800s ZSK | RSA/SHA-256 | AwEAAc54Cz132+msSEPScT7tuA3FiiSRXJsq9aAI0HpBMk3FMuHxG+1o UvGgAk/Cq7QsgOZX8m7M12NmHKuLUvAXZfoFoGSzjQQgZCniPuTbCyXA dIwSPH+nORC1bOURfks3YZG1BVjCzPZ20u3MFKJGpk3gBV28ebA3cT5j mi2Ji3jod+iwNaSDeLO27E6BRfBJs0Btx2ygpmkWpoa/Ihydco4R4AqW a/NpQN5TO/Tmi18UdtmQVpAtPIp4zBwapEa5qKqgt8CUDH3XmxOyJxJ/ fnDFJuFUNQoTsS6DbeoWx6DYFybkOQm/FipgJk2KMy34tCcS4jjKXTLU IsDBijCtNcc=

ZSK | RSA/SHA-256 | AwEAAd84W0imlo2GmPykBLkBm+/twSrhE9GwrC7vI5TkaW4svHCbgvwB hVcSz5c7/HOskE2EIzHoooasB7aDtmeekeoZkIyAqdJecQW/YLoveLG+ tSiwzTYx1AoDIbVto4sVF0AZpNz2C3j3omnTJ0oWFAvhGDIj3w87s+wG rUHUgU2/neQS1Kkt4Q/+IevZvwYoR04ZZTMU+tynQdabsklV5H+Lsf0W X9siI2w3gW4H6FCqwDkbJ3XuviAYwDF2e8rnueABcsTvghsbInwq8mM7 15tO2wgBDG1CvMMHUghvAjTSKnMIG/iGsmCr009ju20f0/AHEL1hC+Nt ZskwcCDTTGs=

ZSK | RSA/SHA-256 | AwEAAdiSnd30ErbG0F6Ouwemdu5nx7H9h72l7Ep2UaZMDPq1/AmrP6ZJ +vvMW5E+Qi1ElOCJuDlondwYaLAAkx5M6Mayulx8FRFpApmlVS2jOT41 vCGxpuPUE1I5ASmb4U5imTty2HYEvtpsFW/IuL9Rp4keP3aLogVdSYZ1 QUFky/NOlFsrVcw7FXyXZk4pLiEYqUw7gTeoDl2NU5g+UIVS4W/g2dQ7 2aO7yRLRSRfrAXorQi0IsyzcT32HyjzNIp09hfq9qSE3+gl2NPmN77BZ jQXmRzDXypLu1Mbggt0xMVQqeYleWuNlNO9QQ/IqIxlpCpMQeEejrkOV Jej1pT17hD8=

KSK | RSA/SHA-256 | AwEAAclIN87S7XyX87nKJfehMiuQkDQSSi+ZP81+OsB4csb0GcOzcEw8 th54fLOENt8M6Ok9F0bFQpQKPJWQ+Ko254mx61BXHw+ezD02lM04BWtN /QbXwDNM77fpts0/yPGFZl62yqRJdEidcWO+gTsY2zmjWhr6S+YEIQDM hpPro4k5nCa93lTTjsSh0QzKTnC3Vq6xwvX8ZzLuMO3zTTHUQimLPjAu ckLUmC2mCTzolVTFhx1kGOLlw2t0/jice94pFXTVW5hlRKkigR7NvTkt FF5dx/CLOmMlBLG/5cZQzFk2tXisAvL1OsrhunPryZxFI6VyIGbRjYce pNZbtr/WCR0=
MX hattum.eu 1h 10 mail.hattum.eu.
20 mail2.hattum.eu.
NS hattum.eu 5m ns21.cloudns.net.
ns22.cloudns.net.
ns23.cloudns.net.
ns24.cloudns.net.
pns21.cloudns.net.
SOA hattum.eu 5m pns21.cloudns.net. postmaster.vhattum.nl. 2017064840 36000 3600 2419200 900
TXT hattum.eu 5m "v=spf1 mx a a:telfortglasvezel.nl a:concepts.nl ip4:213.197.30.0/24 ip6:2001:838:2::/48 include:van.hattum.eu -all"
TXT _dmarc.hattum.eu 5m "v=DMARC1\;" "p=reject\;" "pct=100\;" "rua=mailto:info@van.hattum.eu\;" "ruf=mailto:info@van.hattum.eu\;" "fo=1\;" "sp=none\;"
A mail.hattum.eu 5m 77.174.235.111
A mail2.hattum.eu 5m 77.174.235.139
A smtp.hattum.eu 5m 77.174.235.75
A test.hattum.eu 5m 77.174.235.18
A www.hattum.eu 5m 77.174.235.139

We detected the following errors or warnings about your DNS configuration. These caused your DNS rating to be lowered. Resolving these will grant a higher DNS Spy rating for your domain.

  • Consider giving the NS records a longer TTL, as those don't change often (1h+).

We detected some possible recommendations for you to consider. No penalties were given for these, but resolving them can give you a higher DNS score.

  • No IPv6 record has been found on the zone apex (hattum.eu). Consider enabling IPv6 in the infrastructure by adding an AAAA record on this domain.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • Multiple MX records found.
  • MX records with different priorities found (main + fall-back mailservers).
  • The MX records have a long TTL (1h+).
  • The MX records points to multiple mailservers.
  • Your SOA serial number follows the best practice YYYYMMDDxx format.
  • SPF records have been found.
  • SPF records are set up restrictively.
  • DMARC records have been found.
  • DMARC records are set up restrictively.
  • Found a root (apex) DNS record.
  • Found a www DNS record.
  • The active nameservers match the NS records.
  • The DNS records appear to be RFC compliant.
Proud of your DNS score? Share it with the world!

 

Have a look at other public DNS scans.