DNS & IP Record Check for Web1.shifthosting.com

This tool gives you a detailed look at Web1.shifthosting.com DNS setup. It checks various parts of the DNS records to ensure everything is functioning smoothly and securely.

DNS Record Group Breakdown:

Our DNS & IP record check is organized into 6 main groups, each focusing on different aspects of your domain's DNS configuration. Each group tests key components to ensure optimal domain performance:

  1. DNS Parent Group - 5 tests
  2. NS (Nameserver) - 17 tests
  3. SOA (Start of Authority) - 9 tests
  4. MX (Mail Exchanger) - 12 tests
  5. MAIL (Email) - 4 tests
  6. WWW (World Wide Web) - 24 tests
Test Status Summary:

To help you better understand the results, our team has categorized the outcomes into four statuses:

  1. PASS - No issues found in the DNS record.
  2. FAIL - We detected a DNS record error that needs your attention.
  3. WARN - A minor DNS record issue was found.
  4. INFO - Informational data about the DNS record with no errors detected.

To ensure the integrity and security of Web1.shifthosting.com DNS data, use our DNSSEC check tool. This test provides a deeper analysis, focusing on digital signatures, security, and integrity of the DNS records.


Below is an overview of the results from our comprehensive DNS lookup for the domain Web1.shifthosting.com:

DNS Group DNS Check DNS Record Type DNS Data Information
PARENT
PASS Missing Direct Parent check OK. Your direct parent zone exists, SOA of parent zone com is a.gtld-servers.net which is good. Some domains (usually third or fourth level domains, such as example.co.us or subdomain.example.co.us) do not have a direct parent zone ('co.us' in this example), which is legal but can cause confusion.
FAIL Glue at parent nameservers The parent servers do not have glue for your nameservers
INFO NS records at parent servers Your NS record at parent servers are:
ines.ns.cloudflare.com[IP Address=108.162.192.164][TTL=172800]
ines.ns.cloudflare.com[IP Address=172.64.32.164][TTL=172800]
ines.ns.cloudflare.com[IP Address=173.245.58.164][TTL=172800]
kayden.ns.cloudflare.com[IP Address=108.162.195.74][TTL=172800]
kayden.ns.cloudflare.com[IP Address=162.159.44.74][TTL=172800]
kayden.ns.cloudflare.com[IP Address=172.64.35.74][TTL=172800]

These were obtained from m.gtld-servers.net. However these were obtained from authority section and not answer section. It is better if they were obtained from answer section.
PASS DNS servers have A records OK. All your DNS servers either have A records at the zone parent servers
PASS Parent nameservers have your nameservers listed OK. When someone uses DNS to look up your domain, the first step (if it doesn't already know about your domain) is to go to the parent servers. If you aren't listed there, you can't be found. But you are listed there.
DNS Group DNS Status DNS Record Type DNS Data Information
NS
INFO NS records at your nameservers Your NS records at your nameservers are:
PASS Mismatched NS records OK. NS records at all your nameservers are identical.
PASS All nameservers respond All your nameservers responding.
PASS Recursive queries None of your nameservers allow recursive queries
PASS Zone Transfer Zone transfer not allowed by any of your nameservers
PASS No NS A records at nameservers OK. Your nameservers do include corresponding A records when asked for your NS records. This ensures that your DNS servers know the A records corresponding to all your NS records.
PASS Nameserver name validity OK. All of the NS records that your nameservers report seem valid (no IPs or partial domain names).
PASS Number of nameservers You have 2 nameservers. You must have at least 2 nameservers (RFC2182 section 5 recommends at least 3 nameservers), and preferably no more than 7.
PASS Lame nameservers OK. All the nameservers listed at the parent servers answer authoritatively for your domain.
PASS Missing (stealth) nameservers You have no stealth servers.
FAIL Missing nameservers 2 ERROR: One or more of the nameservers listed at the parent servers are not listed as NS records at your nameservers. The problem NS records are:
ines.ns.cloudflare.com, kayden.ns.cloudflare.com
FAIL Same Glue Glue provided by parent servers different from that provided by nameservers for these NS records: kayden.ns.cloudflare.com at parent 172.64.35.74 dns query: 162.159.44.74
PASS No CNAMEs for domain OK. There are no CNAMEs for Web1.shifthosting.com. RFC1912 2.4 and RFC2181 10.3 state that there should be no CNAMEs if an NS (or any other) record is present.
PASS TCP Allowed All your nameservers allow TCP connection
PASS Stealth NS record leakage Your DNS servers doesn't leak NS record in non-NS request.
PASS Nameservers on separate class C's OK. You have nameservers on different Class C (technically, /24) IP ranges. You must have nameservers at geographically and topologically dispersed locations. RFC2182 3.1 goes into more detail about secondary nameserver location.
PASS All NS IPs public OK. All of your NS records appear to use public IPs. If there were any private IPs, they would not be reachable, causing DNS delays.
PASS Glue for NS record OK. When we asked your nameservers for your NS records they also returned the A records for the NS records. This is a good thing as it will spare an extra A lookup needed to find those A records.
DNS Group DNS Status DNS Record Type DNS Data Information
SOA
INFO SOA record Your SOA record [TTL=] is:
Primary Name server:
Hostmaster E-mail address:
Serial #:
Refresh:
Retry:
Expire:
Default:
FAIL SOA MNAME entry SOA MNAME is not listed as a primary nameserver at your parent nameserver
FAIL SOA RNAME entry OK. valid SOA rname record not found
PASS NS agreement on SOA Serial # OK. All your nameservers agree that your SOA serial number is 2009050102. That means that all your nameservers are using the same data (unless you have different sets of data with the same serial number, which would be very bad)! Note that the DNS report only checks the NS records listed at the parent servers (not any stealth servers).
FAIL SOA Serial Your SOA serial number is: . This doesn't appears to be in the recommended format of YYYYMMDDnn.
FAIL SOA REFRESH Your SOA REFRESH interval is: . That is not right
FAIL SOA RETRY OK. Your SOA RETRY interval is: . That is not right
FAIL SOA EXPIRE Your SOA EXPIRE interval is: . That is not right
PASS SOA MINIMUM TTL Your SOA MINIMUM TTL is: . That is not right
DNS Group DNS Status DNS Record Type DNS Data Information
MX
FAIL MX Record No MX records found. You may ignore results of any other MX tests.
FAIL Reverse MX A records (PTR) There are no A records for your MXs, so the test cannot be performed.
DNS Group DNS Status DNS Record Type DNS Data Information
MAIL
WARN SPF record No SPF framework implemented
WARN Sender ID record(spfv2.0) SenderID framework not implemented
WARN Domain Key Test Domain keys not implemenetd for _domainkey.Web1.shifthosting.com. Separate domainkey records may exist for subdomains and selectors under this domain. this cannot be tested.
WARN DMARC DMARC policy not found. Not enabled.
DNS Group DNS Status DNS Record Type DNS Data Information
WWW
FAIL WWW Record Your WWW record not found
PASS SSL / HTTPS Protocol Domain use encrypted SSL / HTTPS connection on port 443.
View SSL Certificate: Web1.shifthosting.com.
FAIL IPv6 Your domain has no IPv6 support

Click below to copy URL to clipboard for easy sharing of results: