DNS Spy
Connectivity: 100%
The following nameservers are available and responding correctly for DNS queries for your domain zse.hr.
| Nameserver | IP address(es) | SOA serial |
|---|---|---|
| bjesomar.srce.hr. |
161.53.2.70
2001:b68:c:2::70:0 |
2024032430 |
| ns1.zse.hr. | 194.152.205.85 | 2024032430 |
| ns2.zse.hr. | 194.152.205.86 | 2024032430 |
| ns3-drs.zse.hr. | 194.152.205.19 | 2024032430 |
| ns4-drs.zse.hr. | 194.152.205.20 | 2024032430 |
Good news, no warnings or errors were found.
We could not find any recommendations at this time.
Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.
- All nameservers reply with the same SOA serial number.
- The nameserver IPs are distributed across multiple subnets.
- All nameservers are online.
- Nameservers are available over IPv4.
- Nameservers are available over IPv6.
Performance: 100%
We tested each nameserver and measured the following response times.
| Nameserver | IP address(es) | Response time |
|---|---|---|
| bjesomar.srce.hr. |
161.53.2.70
2001:b68:c:2::70:0 |
51ms
51ms |
| ns1.zse.hr. | 194.152.205.85 | 43ms |
| ns2.zse.hr. | 194.152.205.86 | 39ms |
| ns3-drs.zse.hr. | 194.152.205.19 | 43ms |
| ns4-drs.zse.hr. | 194.152.205.20 | 43ms |
Good news, no warnings or errors were found.
We detected some possible recommendations for you to consider. No penalties were given for these, but resolving them can give you a higher DNS score.
- Nameserver bjesomar.srce.hr. (161.53.2.70) replied reasonably fast (< 150ms), but you should aim for < 50ms response times.
Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.
- Nameserver bjesomar.srce.hr. (2001:b68:c:2::70:0) replied in a reasonable time.
- Nameserver ns1.zse.hr. (194.152.205.85) replied quickly (< 50ms).
- Nameserver ns2.zse.hr. (194.152.205.86) replied quickly (< 50ms).
- Nameserver ns3-drs.zse.hr. (194.152.205.19) replied quickly (< 50ms).
- Nameserver ns4-drs.zse.hr. (194.152.205.20) replied quickly (< 50ms).
Resilience & Security: 100%
These are the locations and providers of your nameservers.
| Nameserver | Location | ISP |
|---|---|---|
| bjesomar.srce.hr. |
IPv4: HR
IPv6: HR |
AS2108 - CARNET-AS J.Marohnica 5, 10000 Zagreb, HR
AS2108 - CARNET-AS J.Marohnica 5, 10000 Zagreb, HR |
| ns1.zse.hr. | IPv4: HR | AS5391 - T-HT Croatian Telecom Inc., HR |
| ns2.zse.hr. | IPv4: HR | AS5391 - T-HT Croatian Telecom Inc., HR |
| ns3-drs.zse.hr. | IPv4: HR | AS5391 - T-HT Croatian Telecom Inc., HR |
| ns4-drs.zse.hr. | IPv4: HR | AS5391 - T-HT Croatian Telecom Inc., HR |
Good news, no warnings or errors were found.
We detected some possible recommendations for you to consider. No penalties were given for these, but resolving them can give you a higher DNS score.
- All IPv4 nameservers appear to be hosted in the same country (HR). You might want to consider spreading the nameservers geographically.
Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.
- You have more than 1 nameserver.
- The IPv4 nameservers are distributed among multiple providers.
- The IPv6 nameservers are distributed among multiple providers.
- The IPv6 nameservers are distributed across multiple locations.
- DNSSEC is enabled.
- CAA records found.
- The nameservers are being operated from multiple domains (srce.hr, zse.hr).
DNS records: 100%
Our scans detected the following publicly available DNS records.
| Record | TTL | Value | |
|---|---|---|---|
| A | zse.hr | 1h | 185.143.192.25 |
| CAA | zse.hr | 1h |
0 iodef "mailto:[email protected]" 0 issue "digicert.com" |
| DNSKEY | zse.hr | 1h |
ZSK | RSASHA1-NSEC3-SHA1 | AwEAAbMLuhp17LNoUqHLkAe4XhIk3SzITXGOwySrFvD/czucCHGqsHdF yigOV+7s2NTTJT8LiSshcWMUaUa9KFrv3YnQHpkp8i7uv/57K5LD5NRE 2CBwUX0+vQLQRlurEW/NqzA8iTEo2QRmnVM6lkdWcylnSquaXPc0bmoH Rg81bG2FMn8UXcgJFiYDJc87bX8jag+tJMMLTrV5UKFYI7vggyRR4FLW BLJ7ECZJmzt/qd/epdQghi+0uo9jxEyioYew6s73NokgsdBEQ7Vq+oyJ GGrKymzt6JCboxfpbLL2ZFyTndfrpv6P3wVneYgshtAD6U9rU5LyT4+V vsCD5HfbWB0= ZSK | RSA/SHA-256 | AwEAAa9dkihijMu/1cp/ZKSZH9QQUnJnPxscEZfKuYYQfBIjZ3ys4pYA 6wHIGgm4n5ukSf1cCY8sotKzc2dvzzCKlFyB0XUrCmlYIXbvm7u0vjSD f8lx6xyuU3dQx5zGSP/wZrPNvFmw224xzicF7f5STMCNEj0YAYMsXns2 j4pubC8JnTEzk3IGTG8O1JKZ8cwoihH5lGfe/DQmwwvcklDZ/WU= KSK | RSASHA1-NSEC3-SHA1 | AwEAAeC4Fc+QMxS8Icg4beGzOAZ7eNWnn0ZIU7FPCp6Had41IQGrmbRw TAoKc1Ow4h94lfSo/EJwLSMFFLkbjgsfbYpXrDAzo3MhSlxnMkYB1Aqc xXv044XQyqutKL6CpK+/HTp8AaK32eQ5a+UZ9csL+0gBQoVCoNTpyKPp svWTX4f5z1NO72J5C6frijNgvKc8djYSdS5V+0Rq4bvwfzPSx/7oK/e4 xRi64XwVHDe/H1yWjaZ5gXQb1D9wFWoHDTFJv31NC5bSvBfpRGbK90Hh NT6INGe0RInDO1Kl+7bkdXNmSiD42cd1S9zYfqGyIY4Qjo7DArXNxUWX +1UHnRUwgJxFJU2U2HZcNQJl+gL8dnto4crc5FkJLHpk8YiTf8fWpcjR /dD4CbY5CrE3D5h/pSLHeUFxhsKR0aPqWiMct96ObbZGPOo0tyX5GTi4 CA3uuwkxn392aVmyr8ONlYf1OvH0Q1Y+M7V9FaUakqBmPj65F5FTaAXj iApC6BRamggWhKC9LahX/wNzC0FdT7MLazVs+tN9qw2sPx6KUOAgsKEh OEOkArKBIjPFIBqCYim/I5zy4RhqOr5tEHl+RW0Is9CGdjYLJ4vnp8iY zjPEMVZk1LnqFNKVJa2aYnyZLF3j2tbLSPcSWrkbAQXTEaM/YQGp03W5 aBi+qX4GoXlOd7LX KSK | RSA/SHA-256 | AwEAAa5q4a1IjuF3DdDXssQEmFKiGFL3U+XbTS06jcZ4xp2zuQIqsIfF hhAZPl2sbkEM+IU5mqhbsA1Ik7pilClKfPbhyjbP9gNnj7K/Qd5rozbP 25DFJDFPtfiHnPiI4+xxXmvtMzqAvjvBAflcdPeB0nanmoXaT3UY1Tm8 Z7Ppn59XszVaeVjTgix6PGE/wlNyEH16eHc/k4s1VmJXeegqmHON5fwz 3TTlvmRHitK/z/WW+uMjtC0aOahDEtz35GW9mn/atOeYeAQ5LiYflp3m eRjijDJp9vi0WY6a7N5RvMw+iQFtBNMg9xSJ4VRXz8S94cFZC8O5pQec MdANUhemSq0= |
| MX | zse.hr | 1h |
10 mx1.zse.hr. 15 mx2.zse.hr. 20 mx3-drs.zse.hr. |
| NS | zse.hr | 1h |
bjesomar.srce.hr. ns1.zse.hr. ns2.zse.hr. ns3-drs.zse.hr. ns4-drs.zse.hr. |
| SOA | zse.hr | 1h | ns1.zse.hr. root.zse.hr. 2024032430 14400 3600 1209600 3600 |
| TXT | zse.hr | 1h | "v=spf1 a mx -all" |
| TXT | _dmarc.zse.hr | 1h | "v=DMARC1; p=quarantine; rua=mailto:[email protected]" |
| CNAME | autodiscover.zse.hr | 1h | web1.zse.hr. |
| CNAME | dev.zse.hr | 1h | web1-simu.zse.hr. |
| A | ftp.zse.hr | 1h | 194.152.205.105 |
| A | intranet.zse.hr | 1h | 172.20.6.20 |
| TXT | mail._domainkey.zse.hr | 1h | "v=DKIM1; h=sha256; k=rsa; " "p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7H5gQrbKiYC/fZ7ZniOIugjnrNP+y+F/1slH1x1GBM1rxz12+olalTvasfzI06j2oLcX2vwDWDDb0brWyA1lD6DjRmyhGxyiEiPB1EWeLom1vjll5SjHPj6rss8VlMtTcWCmNH8ljYR5GZ5V8h2/wOnbqhHtZeCdCK2ikgCrpaMq75KqsHJn46SdGvLQoVBhT69AaI0bn2BKBN" "GO8ZAX/q3UNaFJXeZsXndi/++NjLGGSoQSxtgyOWH7y2rc4T/FD7w/DAwYnetr7DC9kGEi7yVC/eTIxYD4foshgGcj7Q1lmtEPBuE0Q2YkHBx/9ZSS7dAdieA2QqJIg8tUpmEQ8QIDAQAB" |
| A | monitor.zse.hr | 1h |
194.152.205.124 194.152.205.125 |
| A | mx1.zse.hr | 1h | 194.152.205.83 |
| A | mx2.zse.hr | 1h | 194.152.205.84 |
| A | ns1.zse.hr | 1h | 194.152.205.85 |
| A | ns2.zse.hr | 1h | 194.152.205.86 |
| A | smtp.zse.hr | 1h |
194.152.205.83 194.152.205.84 |
| CNAME | support.zse.hr | 1h | web2.zse.hr. |
| A | vpn.zse.hr | 1h | 194.152.205.1 |
| A | web1.zse.hr | 1h | 194.152.205.100 |
| A | web2.zse.hr | 1h | 194.152.205.101 |
| A | www.zse.hr | 1h | 185.143.192.25 |
Good news, no warnings or errors were found.
We detected some possible recommendations for you to consider. No penalties were given for these, but resolving them can give you a higher DNS score.
- No IPv6 record has been found on the zone apex (zse.hr). Consider enabling IPv6 in the infrastructure by adding an AAAA record on this domain.
Good news, we detected the following achievements in your DNS configuration. Each of these checks has increased your DNS Spy score.
- Multiple MX records found.
- MX records with different priorities found (main + fall-back mailservers).
- The MX record for "zse.hr" has a long TTL (1h+).
- The MX records points to multiple mailservers.
- The NS records have a long TTL (1h+).
- Your SOA serial number follows the best practice YYYYMMDDxx format.
- SPF records have been found.
- SPF records are set up restrictively.
- DMARC records have been found.
- DMARC records are set up restrictively.
- Found a root (apex) DNS record.
- Found a www DNS record.
- The active nameservers match the NS records.
- The DNS records appear to be RFC compliant.
Have a look at other public DNS scans.