gradle.properties

What the registry for .properties publishes about your domain.

• OK

  Parent name servers

  The .properties registry answered from v0n0.nic.properties (65.22.20.46). explain

  v0n0.nic.properties  65.22.20.46
  v0n1.nic.properties  65.22.21.46
  v0n2.nic.properties  65.22.22.46
  v0n3.nic.properties  161.232.10.46
  

• OK

  Delegation at the registry

  The registry delegates the domain to 2 name server(s). explain

  ns1-coming-soon.sav.com
  ns2-coming-soon.sav.com
  

• OK

  Number of name servers

  2 name servers are delegated, which is a healthy number. explain

• Info

  Glue records

  All name servers are outside this zone, so no glue record is needed. explain

• OK

  Registry and zone agree

  The registry and your name servers publish exactly the same NS list. explain

• OK

  Registration (RDAP)

  Registration data was retrieved over RDAP. explain

  Registrar: Sav.com, LLC - 1
  Registered: 2022-08-18 13:15:00
  Expires: 2028-08-18 13:15:00
  Status: active
  

Direct queries sent to every authoritative server of the zone.

• Info

  Answering servers

  2 authoritative servers were queried directly over UDP. explain

  Name server	Addresses	Response	Serial	Authoritative	Answers
  ns1-coming-soon.sav.com	172.233.153.10, 172.236.240.58	552.5 ms	1	✓	✓
  ns2-coming-soon.sav.com	172.232.30.197, 172.234.204.183	40.3 ms	1	✓	✓

• OK

  All name servers respond

  Every delegated name server answered a direct UDP query. explain

• OK

  Authoritative answers

  Every server answers authoritatively for the zone. explain

• OK

  SOA serial is in sync

  All name servers report the same serial number (1). explain

• OK

  NS records are identical

  Every server publishes the same NS record set. explain

• OK

  Recursion is disabled

  No name server offers open recursion to the internet. explain

• OK

  DNS over TCP

  Every name server also answers over TCP. explain

• OK

  EDNS(0) support

  Every name server understands EDNS(0). explain

• OK

  Network diversity

  Name servers are spread over 4 different networks. explain

• Warning

  IPv6 reachable name servers

  No name server has an AAAA record. IPv6-only clients and networks will depend on a translator to resolve your domain. explain

• OK

  Response time

  Average response time 296.4 ms, slowest 552.5 ms. explain

• Info

  Reverse DNS of the name servers

  Reverse names resolved for the servers. explain

  ns1-coming-soon.sav.com: dns-vip-sav-parked-us-lax-01.parklogic.net
  ns2-coming-soon.sav.com: dns-vip-sav-parked-us-ord-01.parklogic.net
  

The Start Of Authority record and its timers.

• OK

  SOA record exists

  The zone publishes a SOA record. explain

  ns1.parklogic.com. hostmaster.gradle.properties. 1 3600 7200 1209600 60
  

• Warning

  Primary server (MNAME)

  The primary server in the SOA (ns1.parklogic.com) is not listed as an NS record. That is legal for a hidden primary, but dynamic updates and notifications often break because of it. explain

• OK

  Zone contact (RNAME)

  Zone contact: hostmaster@gradle.properties explain

• Info

  Serial number

  The serial is 1. The YYYYMMDDnn format (RFC 1912) makes it obvious when the zone was last edited. explain

• OK

  Refresh

  Refresh is 1h, inside the recommended range. explain

• OK

  Retry

  Retry is 2h, inside the recommended range. explain

• OK

  Expire

  Expire is 14d, inside the recommended range. explain

• Warning

  Minimum TTL (negative caching)

  Minimum TTL (negative caching) is 1min, below the recommended minimum of 5min. explain

• Warning

  Retry is lower than refresh

  Retry (2h) should be clearly smaller than refresh (1h). explain

• OK

  TTL values

  Record TTLs are in a sensible range. explain

  Record	TTL (s)	Duration
  NS	14400	4h
  A	3600	1h
  SOA	60	1min

The records a browser needs to open your site.

• OK

  Address of the domain

  gradle.properties resolves to 3 address(es). explain

  172.234.212.77
  172.236.103.15
  172.239.193.194
  

• OK

  No CNAME at the zone apex

  The zone apex correctly has no CNAME record. explain

• OK

  www subdomain

  www.gradle.properties resolves. explain

  gradle.properties.
  172.234.212.77
  172.236.103.15
  172.239.193.194
  

• Warning

  IPv6 (AAAA)

  No AAAA record was found. IPv6-only mobile networks reach your site only through a carrier translator, which adds latency. explain

• Info

  HTTPS (SVCB) record

  No HTTPS resource record. It is optional, but it removes the initial HTTP redirect and advertises HTTP/3 (ECH also relies on it). explain

• Info

  Wildcard record

  A random, non-existent subdomain answers with 172.234.212.77, 172.236.103.15, 172.239.193.194, so the zone has a wildcard. This hides typos and prevents NXDOMAIN answers. explain

• Warning

  Web server answers

  No web server answered on port 80 or 443 (ConnectionError). This does not affect DNS, but the site is not serving pages. explain

MX records and everything a receiving server checks before accepting your mail.

• Warning

  MX records

  No MX record was found. Mail for this domain will be delivered to the A record if one exists, or bounce. Publish a null MX if the domain never receives mail. explain

• OK

  Blocklists (DNSBL)

  No mail or web address of this domain is listed on the public blocklists we query. explain

SPF, DKIM, DMARC and the modern transport policies.

• Error

  SPF

  No SPF record. Anybody can send mail using your domain as the envelope sender and most receivers will accept it. explain

• Error

  DMARC

  No DMARC record at _dmarc.gradle.properties. Without it, SPF and DKIM failures have no consequence and you receive no reports about abuse of your domain. explain

• Warning

  DKIM

  No DKIM key was found on the selectors we probe. DKIM may still be active on a private selector, but without it DMARC survives no forwarding. explain

• Info

  MTA-STS

  No MTA-STS policy. It stops attackers from stripping TLS between mail servers and is supported by the large providers. explain

• Info

  TLS-RPT

  No TLS-RPT record. It is the reporting half of MTA-STS and DANE. explain

• Info

  BIMI

  No BIMI record. It shows your brand logo next to authenticated mail and requires DMARC at p=quarantine or p=reject first. explain

DNSSEC, certificate authorisation and exposure of the zone.

• Warning

  DNSSEC

  DNSSEC is not enabled. Without it, answers for your domain can be forged on the way to the resolver. explain

• Warning

  CAA

  No CAA record. Any certificate authority in the world may issue a certificate for your domain; a CAA record limits that to the ones you choose. explain

• OK

  Zone transfer (AXFR)

  No name server allows an anonymous zone transfer. explain

• OK

  Software version disclosure

  The name servers do not disclose their software version. explain