DNS report for hrmoovs.nl

This report was generated 3d ago. Refresh?
A
Connectivity
86%
Performance
100%
Resilience & Security
100%
DNS records
93%
Proud of your DNS score? Share it with the world!

Connectivity: 86%

The following nameservers are available and responding correctly for DNS queries for your domain hrmoovs.nl.

Nameserver IP address(es) SOA serial
ns3.firstfind.nl. 5.157.86.222 2018090400
ns4.firstfind.nl. 5.157.87.222 2018090400
ns5.firstfind.net. 178.128.167.58 2018090400

We detected the following errors or warnings about your DNS configuration. These caused your DNS rating to be lowered. Resolving these will grant a higher DNS Spy rating for your domain.

  • No IPv6 reachable nameservers were found. Users on IPv6-only networks are unable to reach you.

We could not find any recommendations at this time.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • All nameservers reply with the same SOA serial number.
  • The nameserver IPs are distributed across multiple subnets.
  • All nameservers are online.
  • Nameservers are available over IPv4.

Performance: 100%

We tested each nameserver and measured the following response times.

Nameserver IP address(es) Response time
ns3.firstfind.nl. 5.157.86.222 7ms
ns4.firstfind.nl. 5.157.87.222 7ms
ns5.firstfind.net. 178.128.167.58 13ms

Good news, no warnings or errors were found.

We could not find any recommendations at this time.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • Nameserver ns3.firstfind.nl. (5.157.86.222) replied quickly (< 50ms).
  • Nameserver ns4.firstfind.nl. (5.157.87.222) replied quickly (< 50ms).
  • Nameserver ns5.firstfind.net. (178.128.167.58) replied quickly (< 50ms).

Resilience & Security: 100%

These are the locations and providers of your nameservers.

Nameserver Location ISP
ns3.firstfind.nl. IPv4: NL AS48635 - ASTRALUS, NL
ns4.firstfind.nl. IPv4: NL AS48635 - ASTRALUS, NL
ns5.firstfind.net. IPv4: NL AS14061 - DIGITALOCEAN-ASN - DigitalOcean, LLC, US

Good news, no warnings or errors were found.

We detected some possible recommendations for you to consider. No penalties were given for these, but resolving them can give you a higher DNS score.

  • All IPv4 nameservers appear to be hosted in the same country (NL). You might want to consider spreading the nameservers geographically.
  • No CAA records found. Consider adding CAA records, as it adds increased security by limiting which Certificate Authorities can issue certificates for this domain. (more info)

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • You have more than 1 nameserver.
  • The IPv4 nameservers are distributed among multiple providers.
  • DNSSEC is enabled.
  • The nameservers are being operated from multiple domains (firstfind.nl, firstfind.net).

DNS records: 93%

Our scans detected the following publicly available DNS records.

Record TTL Value
A hrmoovs.nl 4h 216.185.152.145
DNSKEY hrmoovs.nl 4h ZSK | RSA/SHA-256 | AwEAAbOSHbCG67/WDKkG8GbOJlvAq4WFIgsjA8gNW5B/tuOqIOYWo5kF SkJpMjsfKBY6dWjLCOX4p71hOH29itFkR8J0phsa6p2v+r9A7gidSKII PV5Ei0d/otnFDA3unOZt1EdjY476GB07rS7vVh9vAZkeXWFOeb9mr3Fq faYsdyvF

KSK | RSA/SHA-256 | AwEAAckcz5vR8HDPMrngmj8/zX1t7lvZn01Zp53YD3sJZf3cOSorUWs/ Da6SfPbECbYlaG2TmLW9bA6ENyoMQ8HqTZSDA+fWSQPsZoC0+3jw6yzT wk052hWViMhLHEeLa+qFdBj99o/nVLGbfrlOBotXw6axafxKZKIzNYQq qhofdA0GDPG9wcR02Bm0/yV9qDPX3wtiTjRONT5dqyYxTlmv7xqjmnB9 pG+kclCk79ns4BgfEiDyQ2zB4gQrIOsZfwQUIoh9tFdxiFwuyk2nSOAT Frwus7ELyTCrNLrqGZQwWxXOszR21zU0UqdQvC+KhjmxP2uszqAVuMdC XtS7v1AtkhE=
MX hrmoovs.nl 4h 3600 hrmoovs-nl.mail.protection.outlook.com.
NS hrmoovs.nl 4h ns3.firstfind.nl.
ns4.firstfind.nl.
ns5.firstfind.net.
SOA hrmoovs.nl 1h ns3.firstfind.nl. hostmaster.firstfind.nl. 2018090400 16384 2048 1048576 14400
TXT hrmoovs.nl 4h "'v=spf1 include:spf.protection.outlook.com include:spf.mandrillapp.com -all'"
"MS=ms88245490"
"v=spf1 include:spf.protection.outlook.com -all"
SRV _sip._tls.hrmoovs.nl 4h 0 1 443 sipdir.online.lync.com.
SRV _sipfederationtls._tcp.hrmoovs.nl 4h 0 1 5061 sipfed.online.lync.com.
A *.hrmoovs.nl 4h 216.185.152.145
CNAME autodiscover.hrmoovs.nl 4h autodiscover.outlook.com.
CNAME enterpriseenrollment.hrmoovs.nl 4h enterpriseenrollment.manage.microsoft.com.
CNAME enterpriseregistration.hrmoovs.nl 4h enterpriseregistration.windows.net.
CNAME ftp.hrmoovs.nl 4h hrmoovs.nl.
CNAME imap.hrmoovs.nl 4h hrmoovs.nl.
A localhost.hrmoovs.nl 4h 127.0.0.1
CNAME lyncdiscover.hrmoovs.nl 4h webdir.online.lync.com.
CNAME mail.hrmoovs.nl 4h server16.firstfind.nl.
CNAME msoid.hrmoovs.nl 4h clientconfig.microsoftonline-p.net.
CNAME pop.hrmoovs.nl 4h server16.firstfind.nl.
CNAME pop3.hrmoovs.nl 4h server16.firstfind.nl.
CNAME sip.hrmoovs.nl 4h sipdir.online.lync.com.
CNAME smtp.hrmoovs.nl 4h server16.firstfind.nl.
CNAME webmail.hrmoovs.nl 4h webmail.yourhosting.nl.
CNAME www.hrmoovs.nl 4h hrmoovs.nl.

We detected the following errors or warnings about your DNS configuration. These caused your DNS rating to be lowered. Resolving these will grant a higher DNS Spy rating for your domain.

  • Multiple SPF records have been found. You can only have one Sender Policy Framework record.

We detected some possible recommendations for you to consider. No penalties were given for these, but resolving them can give you a higher DNS score.

  • No DMARC records have been found. Consider configuring DMARC for improved e-mail authentication.
  • No IPv6 record has been found on the zone apex (hrmoovs.nl). Consider enabling IPv6 in the infrastructure by adding an AAAA record on this domain.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • Single MX record but with multiple IPs associated to it.
  • The MX record for "hrmoovs.nl" has a long TTL (1h+).
  • The NS records have a long TTL (1h+).
  • Your SOA serial number follows the best practice YYYYMMDDxx format.
  • SPF records have been found.
  • SPF records are set up restrictively.
  • Found a root (apex) DNS record.
  • Found a www DNS record.
  • The active nameservers match the NS records.
  • The DNS records appear to be RFC compliant.
Proud of your DNS score? Share it with the world!

 

Have a look at other public DNS scans.