DNS report for scan.io

This report was generated 3 weeks ago. Refresh?
A+
Connectivity
100%
Performance
100%
Resilience & Security
100%
DNS records
94%
Proud of your DNS score? Share it with the world!

Connectivity: 100%

The following nameservers are available and responding correctly for DNS queries for your domain scan.io.

Nameserver IP address(es) SOA serial
ns0.scan.io. 213.138.111.65
2001:41c8:51:641:fcff:ff:fe00:3ec5
2019042501
ns1.scan.io. 178.62.31.201
2a03:b0c0:1:d0::75:4001
2019042501

Good news, no warnings or errors were found.

We could not find any recommendations at this time.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • All nameservers reply with the same SOA serial number.
  • The nameserver IPs are distributed across multiple subnets.
  • All nameservers are online.
  • Nameservers are available over IPv4.
  • Nameservers are available over IPv6.

Performance: 100%

We tested each nameserver and measured the following response times.

Nameserver IP address(es) Response time
ns0.scan.io. 213.138.111.65
2001:41c8:51:641:fcff:ff:fe00:3ec5
19ms
19ms
ns1.scan.io. 178.62.31.201
2a03:b0c0:1:d0::75:4001
15ms
13ms

Good news, no warnings or errors were found.

We could not find any recommendations at this time.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • Nameserver ns0.scan.io. (213.138.111.65) replied quickly (< 50ms).
  • Nameserver ns0.scan.io. (2001:41c8:51:641:fcff:ff:fe00:3ec5) replied in a reasonable time.
  • Nameserver ns1.scan.io. (178.62.31.201) replied quickly (< 50ms).
  • Nameserver ns1.scan.io. (2a03:b0c0:1:d0::75:4001) replied in a reasonable time.

Resilience & Security: 100%

These are the locations and providers of your nameservers.

Nameserver Location ISP
ns0.scan.io. IPv4: GB
IPv6: GB
AS35425 - BYTEMARK-AS, GB
AS35425 - BYTEMARK-AS, GB
ns1.scan.io. IPv4: EU
IPv6: NL
AS14061 - DIGITALOCEAN-ASN - DigitalOcean, LLC, US
AS14061 - DIGITALOCEAN-ASN - DigitalOcean, LLC, US

Good news, no warnings or errors were found.

We detected some possible recommendations for you to consider. No penalties were given for these, but resolving them can give you a higher DNS score.

  • No CAA records found. Consider adding CAA records, as it adds increased security by limiting which Certificate Authorities can issue certificates for this domain. (more info)

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • You have more than 1 nameserver.
  • The IPv4 nameservers are distributed among multiple providers.
  • The IPv4 nameservers are distributed across multiple locations.
  • The IPv6 nameservers are distributed among multiple providers.
  • The IPv6 nameservers are distributed across multiple locations.
  • DNSSEC is enabled.
  • You are using glue records, this will speed up the initial DNS requests.

DNS records: 94%

Our scans detected the following publicly available DNS records.

Record TTL Value
A scan.io 7200s 178.62.31.201
AAAA scan.io 7200s 2a03:b0c0:1:d0::75:4001
DNSKEY scan.io 7200s ZSK | RSA/SHA-256 | AwEAAbDEZFksos2o2ec8+Yha4QE4ZjvRMPcmOkNUhohReoSN2qXyBl4y J7uNAVZCrEMK4Y05Lc/dEg+gpwLm/TXkvCNbykzfnw1O/g/ceIiSGa6G Vq/A/HbvOZOH7RHOqBxkZW3W/ntM/FF1eaKfVuO9NbVBarBC/DcqZc8Y vqgGyIHmQCylc5tndl2CIzgTS/J3GZWsZz43hFjR5jMIkeCWhUgL+cQ0 qaVXOrfHPoAOeaEBxn2lWXX4ddgEPixTSsFjpe5FlA3rV06g+ohgP1qf GG+zb2UeRi131C6H35mO2TOh9M2ojBoQba9OnPc6YdwqyGX+rHU+vNd2 J2mW21NIw18=

KSK | RSA/SHA-256 | AwEAAanNrmdEIjlg5QosMjBP7N6C3IAX20eVNUYk8+yLMVEjXHr4ZNij eDBxPziO1L8w+X8gucKzvmX9azIDeIfmZz5T6tVrKb89MuUG8v/4qdYf AVPBr996a0JiF1q1CtbGQ46LdC1XrshqtmF9YJg+GzY+K/3ilyERX+pP iZAOhVlCFgsPNtL4U6dMt0GDhgs+a3d7RBOcmNPBYsCQrajymtoN77cH AgDLC2ZuRXJiHitxpZFrzCG2qfJYfA5zmBcU2lDHvFvorH1xIlNqd7MT Il+ll9UHg2X2bLd8KoDn9qvM42Eee+/kjd8pgKWc1wJqNgVFCpb1vXk6 GHgwBv4mAbHf4rc4CfqZNbI0E+vqmbzPGX5bd62+P8MH5QKlj5z4qIOR agO4vtI3jcur68AuLxf1JDkun2EVps29XaYyoxvSdisU5CkgAH/Ji47U 4ws56bjd9F7cpwL74nmA0uUKmo4FgeNTXOv6NsNXuUO8fxJlkWxkYfry 8z1WiFCNW89CKpC+LLS7joCgPXaU99dGMXSaShI/00hoHQbrCR8omCFn mROxKDx5zdtLzU4HF5/e5N2RSKGmrfsku64d4G6SLB5fz7u+HyMxvvyh gr+MI0uWHxuiTo9+X5L5khbQtMAPTNK/tu+A1sfzduTG52li6E7GzlOv pYZ3V5CIv8Wqy8oP
MX scan.io 7200s 10 mail.scan.io.
NS scan.io 7200s ns0.scan.io.
ns1.scan.io.
SOA scan.io 7200s ns0.scan.io. hostmaster.scan.io. 2019042501 7200 3600 2419200 7200
TXT scan.io 7200s "v=spf1 mx -all"
TXT _dmarc.scan.io 7200s "v=DMARC1\; p=none\; rua=mailto:postmaster@scan.io"
A mail.scan.io 7200s 213.138.111.65
AAAA mail.scan.io 7200s 2001:41c8:51:641:fcff:ff:fe00:3ec5
A ns0.scan.io 7200s 213.138.111.65
AAAA ns0.scan.io 7200s 2001:41c8:51:641:fcff:ff:fe00:3ec5
A ns1.scan.io 7200s 178.62.31.201
AAAA ns1.scan.io 7200s 2a03:b0c0:1:d0::75:4001
A www.scan.io 7200s 178.62.31.201
AAAA www.scan.io 7200s 2a03:b0c0:1:d0::75:4001

We detected the following errors or warnings about your DNS configuration. These caused your DNS rating to be lowered. Resolving these will grant a higher DNS Spy rating for your domain.

  • We only detected 1 MX record. Multiple MX records (or multiple IPs behind the MX record) provide redundancy and a more robust e-mail setup.

We detected some possible recommendations for you to consider. No penalties were given for these, but resolving them can give you a higher DNS score.

  • You have DMARC records configured, but the "p=none" policy only triggers reports to your e-mail address, the receiver is instructed to not take actions.

Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.

  • The MX record for "scan.io" has a long TTL (1h+).
  • The NS records have a long TTL (1h+).
  • Your SOA serial number follows the best practice YYYYMMDDxx format.
  • SPF records have been found.
  • SPF records are set up restrictively.
  • DMARC records have been found.
  • Found a root (apex) DNS record.
  • Found a www DNS record.
  • Found an IPv6 root DNS record.
  • The active nameservers match the NS records.
  • The DNS records appear to be RFC compliant.
Proud of your DNS score? Share it with the world!

 

Have a look at other public DNS scans.