Sbmoffshore.com DNS record lookup check

DNS record types tested in our free DNS record lookup test are divided into 6 large groups with a total of 71 tests:

  • DNS Parent Group - 5 tests
  • NS (Nameserver) - 17 tests
  • SOA (Start of Authority) - 9 tests
  • MX (Mail Exchanger) - 12 tests
  • MAIL (Email) - 4 tests
  • WWW (World Wide Web) - 24 tests

For ease of summarization, review and understanding, we have divided the test results of our DNS lookup record check in four statuses:

  • PASS status - No problem was found in the DNS record
  • FAIL status - We found a DNS record error that requires your attention
  • WARN status - We found a minor DNS record error
  • INFO status - Only information about a given DNS record for educational purposes without any detected errors



Below is an overview of the record results of our comprehensive DNS lookup check for a domain Sbmoffshore.com:

DNS Record DNS Check DNS Test Name DNS Record Information
PARENT
PASS Missing Direct Parent check OK. Your direct parent zone exists, SOA of parent zone com is a.gtld-servers.net which is good. Some domains (usually third or fourth level domains, such as example.co.us or subdomain.example.co.us) do not have a direct parent zone ('co.us' in this example), which is legal but can cause confusion.
FAIL Glue at parent nameservers The parent servers do not have glue for your nameservers
INFO NS records at parent servers Your NS record at parent servers are:
gns2.perf1.com[IP Address=81.92.95.200][TTL=172800]
gns3.perf1.com[IP Address=152.89.172.200][TTL=172800]

These were obtained from d.gtld-servers.net. However these were obtained from authority section and not answer section. It is better if they were obtained from answer section.
PASS DNS servers have A records OK. All your DNS servers either have A records at the zone parent servers
PASS Parent nameservers have your nameservers listed OK. When someone uses DNS to look up your domain, the first step (if it doesn't already know about your domain) is to go to the parent servers. If you aren't listed there, you can't be found. But you are listed there.
DNS Group DNS Status DNS Test Name DNS Record Information
NS
INFO NS records at your nameservers Your NS records at your nameservers are:
gns1.perf1.fr[TTL=86400]
gns2.perf1.com[TTL=86400]
gns3.perf1.com[TTL=86400]
PASS Mismatched NS records OK. NS records at all your nameservers are identical.
PASS All nameservers respond All your nameservers responding.
PASS Recursive queries None of your nameservers allow recursive queries
PASS Zone Transfer Zone transfer not allowed by any of your nameservers
PASS No NS A records at nameservers OK. Your nameservers do include corresponding A records when asked for your NS records. This ensures that your DNS servers know the A records corresponding to all your NS records.
PASS Nameserver name validity OK. All of the NS records that your nameservers report seem valid (no IPs or partial domain names).
PASS Number of nameservers You have 3 nameservers. You must have at least 2 nameservers (RFC2182 section 5 recommends at least 3 nameservers), and preferably no more than 7.
PASS Lame nameservers OK. All the nameservers listed at the parent servers answer authoritatively for your domain.
PASS Missing (stealth) nameservers You have no stealth servers.
PASS Missing nameservers 2 All nameservers listed at parent servers are listed as NS records at your nameservers
PASS No CNAMEs for domain OK. There are no CNAMEs for Sbmoffshore.com. RFC1912 2.4 and RFC2181 10.3 state that there should be no CNAMEs if an NS (or any other) record is present.
PASS TCP Allowed All your nameservers allow TCP connection
PASS Stealth NS record leakage Your DNS servers doesn't leak NS record in non-NS request.
PASS Nameservers on separate class C's OK. You have nameservers on different Class C (technically, /24) IP ranges. You must have nameservers at geographically and topologically dispersed locations. RFC2182 3.1 goes into more detail about secondary nameserver location.
PASS All NS IPs public OK. All of your NS records appear to use public IPs. If there were any private IPs, they would not be reachable, causing DNS delays.
FAIL Glue for NS record Your nameservers for your NS records didn't return the A records for the NS records.
DNS Group DNS Status DNS Test Name DNS Record Information
SOA
INFO SOA record Your SOA record [TTL=3600] is:
Primary Name server: gns1.perf1.fr
Hostmaster E-mail address: technical.nameshield.net
Serial #:2024052817
Refresh: 28800
Retry: 7200
Expire: 604800
Default: 7200
PASS SOA MNAME entry SOA MNAME gns1.perf1.fr is listed as a primary nameserver at your parent nameserver
PASS SOA RNAME entry OK. Your SOA (Start of Authority) record states that your DNS contact E-mail address is: [email protected] (techie note: we have changed the initial '.' to an '@' for display purposes).
PASS NS agreement on SOA Serial # OK. All your nameservers agree that your SOA serial number is 2009050102. That means that all your nameservers are using the same data (unless you have different sets of data with the same serial number, which would be very bad)! Note that the DNS report only checks the NS records listed at the parent servers (not any stealth servers).
PASS SOA Serial Your SOA serial number is: 2024052817. This appears to be in the recommended format of YYYYMMDDnn.
INFO SOA REFRESH OK. Your SOA REFRESH interval is: 28800. RFC 1912 recommends 1200 to 43200 seconds, low (1200) if the data is volatile or 43200 (12 hours) if it's not. If you are using NOTIFY you can set for much higher values, for instance, 1 or more days (> 86400 seconds).
WARN SOA RETRY OK. Your SOA RETRY interval is: 7200. Typical values would be 180 (3 minutes) to 900 (15 minutes) or higher.
WARN SOA EXPIRE OK. Your SOA EXPIRE interval is: 604800 .RFC 1912 recommends 1209600 to 2419200 seconds (2-4 weeks) to allow for major outages of the zone master.
PASS SOA MINIMUM TTL OK. Your SOA MINIMUM TTL is: 7200. That is OK
DNS Group DNS Status DNS Test Name DNS Record Information
MX
FAIL MX Glue MX record look up did not send glue record for atleast 1 MX server:
mx1.hc398-99.eu.iphmx.com, mx2.hc398-99.eu.iphmx.com
PASS MX records are not CNAMEs OK. Looking up your MX record did not just return a CNAME. If an MX record query returns a CNAME, extra processing is required, and some mail servers may not be able to handle it.
PASS MX name validity Good. We did not detect any invalid chars in hostnames for your MX records.
PASS MX is host name, not IP OK. All of your MX records are host names (as opposed to IP addresses, which are not allowed in MX records).
PASS Different MX records at nameservers Good. Looks like all your nameservers have the same set of MX records. This tests to see if there are any MX records not reported by all your nameservers
FAIL MX Glues match MX Glue returned by nameserver for MX record doesn't match with A record of MX hostname
mx1.hc398-99.eu.iphmx.com > 207.54.76.20;///// X
mx2.hc398-99.eu.iphmx.com > 207.54.76.20;///// X
FAIL Duplicate MX records You have duplicate MX records (pointing to the same IP). Although technically valid, duplicate MX records can cause a lot of confusion, and waste resources.
PASS MX A lookups have no CNAMEs OK. There appear to be no CNAMEs returned for A records lookups from your MX records (CNAMEs are prohibited in MX records, according to RFC974, RFC1034 3.6.2, RFC1912 2.4, and RFC2181 10.3).
INFO MX Record Your 2 records:
10    mx1.hc398-99.eu.iphmx.com    [IP Address=207.54.76.20]  [TTL=3600]
10    mx2.hc398-99.eu.iphmx.com    [IP Address=207.54.76.20]  [TTL=3600]
PASS Multiple MX records OK. You have multiple MX records. This means that if one is down or unreachable, the other(s) will be able to accept mail for you.
PASS Reverse MX A records (PTR) The reverse (PTR) record for your MX records:
207.54.76.20 -> esa1.hc398-99.eu.iphmx.com
207.54.76.20 -> esa1.hc398-99.eu.iphmx.com
PASS All MX IPs public OK. All of your MX records appear to use public IPs. If there were any private IPs, they would not be reachable, causing slight mail delays, extra resource usage, and possibly bounced mail.
DNS Group DNS Status DNS Test Name DNS Record Information
MAIL
PASS SPF record 5B77058CDCCB8437548A128E12A23AC1E7DAE5A265F8BA8BC80E5539F0386930
MS=ms29679309
TXT _globalsign-domain-verification=R7dQXeRpe07juM5WmcSS7VU-HhVjDFlUKoIIe4buBV
_globalsign-domain-verification=8sqGtjj0BiZAbTcZNj-Xb45d_B8QLhRvQSxz8dVnOO
_globalsign-domain-verification=R7dQXeRpe07juM5WmcSS7VU-HhVjDFlUKoIIe4buBV
_globalsign-domain-verification=RWZAfpywVc9xDOIX3uMv_b1VY9ErM5x37TfpPeGN8X
_globalsign-domain-verification=S_E3baGXQ0fxNuvjXgE-9TO-agR-Hzpg7_NESKeWth
_globalsign-domain-verification=TaWjihHYbtuiKcGAo5JRZ1bTUJqPGdV-gnr3VWktc-
_globalsign-domain-verification=Vj60mtm0v0ExYJei8-Fw3XEs0dhoAdKeMHiO2ixum6
_globalsign-domain-verification=h6r-E9R8im9nhnbGkAqP-1vRiBr9MyqKB9ISsJqcTT
_globalsign-domain-verification=kz4NxWGBBxAEUpRL5Y-As3lnbD8794EE3yikUNdNu5
_globalsign-domain-verification=x5KA871r1LVXiLY8B8MtbZ6Ca3jVwAq9Cw2Ol4zV5T
adobe-idp-site-verification=e8d43a0985d8f36ce3aee6c8d56d907fc0699fdd6b728a9ef328303fffb3a9cf
cisco-ci-domain-verification=74551e7e6f4b7c921ae13b2f00eb6f787a05216a571f1e1c4aea0ed466a6e0e5
docusign=9f950b51-68ab-4ba2-835e-be449104becb
v=spf1 mx exists:%{i}.spf.hc398-99.eu.iphmx.com include:_spf.salesforce.com include:spf.afas.online ~all
veracitysbmoffshorecom=UtFFSDH4DiOybv8a3KjUSa0/DDrS0OIMUgZT6w8/4pzvoxlZTib04jB891Paxn3m3Q0WGbOJWi3yxAdFOfJsTQ==
this domain sends email from following domains/subdomains:_spf.salesforce.com, spf.afas.online
domain sends mail through its MX servers
WARN Sender ID record(spfv2.0) SenderID framework not implemented
WARN Domain Key Test Domain keys not implemenetd for _domainkey.Sbmoffshore.com. Separate domainkey records may exist for subdomains and selectors under this domain. this cannot be tested.
WARN DMARC DMARC policy not found. Not enabled.
DNS Group DNS Status DNS Test Name DNS Record Information
WWW
INFO WWW A record Your WWW A record is:
investis.id.prod.edgekey.net > e25397.b.akamaiedge.net > 23.219.2.136
Your WWW is CNAME record and your CNAME entry returns A record which is good.
PASS IPs are public OK. All of your WWW IP addresses appear to be public IP addresses.
PASS HTTP Service OK: We can connect to http service on port 80.
FAIL Server http service on port 80 didn't return server information.
INFO Server Header http response header didn't return any server information
PASS Connection http connection header return connection as: Keep-alive
PASS Secure Header HSTS The server implemented the HSTS (HTTP Strict Transport Security) policy by adding a header over the HTTPS connection as: Max-age=31536000; includeSubDomains
PASS Secure Header X-Frame-Options XFO response header that protects against clickjacking is found as: SAMEORIGIN
XFO enables content to be found or not within iframes via the browser.
PASS Secure Header X-Content-Type-Options The secure X-Content-Type-Options header is set as: Nosniff
The browser must interpret the file exactly as it is specified in the Content-Type HTTP header
PASS Secure Header Content-Security-Policy The return secure header sends feedback that the CSP has been found and specified. CSP is defined in the policy as: Default-src 'self' edge.api.brightcove.com viz.tools.investis.com *.media.brightcove.com cdn.jsdelivr.net *.youtube.com *.investisdigital.com google-analytics.com cookiemanager.investisdigital.com *.google-analytics.com *.doubleclick.net m.clarity.ms n.clarity.ms *.clarity.ms analytics.google.com assets.investisdigital.com region1.analytics.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com ict.infinity-tracking.net www.gstatic.com viz.tools.investis.com www.google.com maps.googleapis.com maps.google.com www.linkedin.com ajax.googleapis.com pi.pardot.com bam.nr-data.net *.googletagmanager.com *.google-analytics.com sjs.bizographics.com connect.facebook.net *.jquery.com irs.tools.investis.com *.hotjar.com px.ads.linkedin.com d2wy8f7a9ursnm.cloudfront.net ssl.p.jwpcdn.com js-agent.newrelic.com cdn.jsdelivr.net edge.api.brightcove.com *.googleapis.com www.youtube.com youtube.com s.ytimg.com unpkg.com *.investis-live.com *.investisdigital.com player.vimeo.com fast.fonts.net cdn.rawgit.com *.investisdigital.com www.recaptcha.net otp.tools.investis.com cookiemanager.investisdigital.com m.clarity.ms www.clarity.ms assets.investisdigital.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net; style-src 'self' 'unsafe-inline' 'unsafe-eval' viz.tools.investis.com fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net *.investis-live.com *.investisdigital.com fast.fonts.net api2.fonts.com assets.investisdigital.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net; img-src 'self' 'unsafe-inline' * data:; media-src 'self' edge.api.brightcove.com viz.tools.investis.com *.media.brightcove.com *.youtube.com player.vimeo.com; frame-src 'self' *.investis.com www.google.com ir.tools.investis.com staticxx.facebook.com www.youtube.com player.vimeo.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net; font-src 'self' 'unsafe-inline' data: fonts.googleapis.com fonts.gstatic.com viz.tools.investis.com themes.googleusercontent.com maxcdn.bootstrapcdn.com fast.fonts.net api2.fonts.com cdnjs.cloudflare.com
CSP prevents various types of attacks, such as cross-site scripting and other types of cross-site injection
WARN Secure Header X-Permitted-Cross-Domain-Policies X-Permitted-Cross-Domain-Policies was not found in the response header
WARN Secure Header Referrer-Policy The Referrer-Policy HTTP header is not set, as it is not in the Referrer header.
INFO Secure Header Clear-Site-Data Clear-Site-Data was not found in the response header
INFO Secure Header Cross-Origin-Embedder-Policy COEP response header was not found in the HTTP request
INFO Secure Header Cross-Origin-Opener-Policy COOP response header was not found in the HTTP request
WARN Secure Header Cross-Origin-Resource-Policy CORP policy not found in response header
PASS Secure Header Cache-Control Cache-Control policy header is found in HTTP responses as: Max-age=2764800, public
Cache-Control belongs to the security header group that contains instructions for cashing
PASS Secure Header Permissions-Policy Permissions-Policy header is found in the HTTP response. as: Interest-cohort=()
The Permissions-Policy header grants permission and controls who can access features
INFO Secure Header Feature-Policy Feature-Policy header was not found in the HTTP responses.
PASS Secure Header X-XSS-Protection (Deprecated) X-XSS-Protection header is found in the HTTP response.as: 1; mode=block
X-XSS-Protection sets up a scripting filter in your browser.
INFO Secure Header HTTP Public Key Pinning (Deprecated) HPKP header was not found in the HTTP responses.
INFO Secure Header Expect-CT (Deprecated) Expect-CT header was not found in the HTTP responses.
PASS SSL / HTTPS Protocol Domain use encrypted SSL / HTTPS connection on port 443.
Check SSL Certificate.
FAIL IPv6 Your domain has no IPv6 support

Click below to Copy url to clipboard for easy sharing of results: