imdb.fr

Delegation · The nameservers at the parent and in the zone should be the same. Only at the parent: pdns1.ultradns.net, pdns2.ultradns.net, pdns3.ultradns.org, pdns4.ultradns.org, pdns5.ultradns.info, pdns6.ultradns.co.uk; only in the zone: ns-1325.awsdns-37.org, ns-172.awsdns-21.com, ns-1726.awsdns-23.co.uk, ns-784.awsdns-34.net. ns-1325.awsdns-37.org, ns-172.awsdns-21.com, ns-1726.awsdns-23.co.uk, ns-784.awsdns-34.net, pdns1.ultradns.net, pdns2.ultradns.net, pdns3.ultradns.org, pdns4.ultradns.org, pdns5.ultradns.info, pdns6.ultradns.co.uk report NS ns-1325.awsdns-37.org ns-172.awsdns-21.com ns-1726.awsdns-23.co.uk ns-784.awsdns-34.net.

SOA · The nameservers serve different versions of the zone: 101 on ns-1325.awsdns-37.org (205.251.197.45), ns-1325.awsdns-37.org (2600:9000:5305:2d00::1), ns-172.awsdns-21.com (205.251.192.172), ns-172.awsdns-21.com (2600:9000:5300:ac00::1), ns-1726.awsdns-23.co.uk (205.251.198.190), ns-1726.awsdns-23.co.uk (2600:9000:5306:be00::1), ns-784.awsdns-34.net (205.251.195.16), ns-784.awsdns-34.net (2600:9000:5303:1000::1); 2009091036 on pdns1.ultradns.net (204.74.108.1), pdns1.ultradns.net (2001:502:f3ff::1), pdns2.ultradns.net (204.74.109.1), pdns2.ultradns.net (2610:a1:1014::1), pdns3.ultradns.org (199.7.68.1), pdns3.ultradns.org (2610:a1:1015::1), pdns4.ultradns.org (199.7.69.1), pdns4.ultradns.org (2001:502:4612::1), pdns5.ultradns.info (204.74.114.1), pdns5.ultradns.info (2610:a1:1016::1), pdns6.ultradns.co.uk (204.74.115.1), pdns6.ultradns.co.uk (2610:a1:1017::1). This is normal for a few minutes after a change; if it lasts, zone transfers to the secondaries are failing.

SOA · negative caching TTL (minimum) 1m is outside 5m–1d (RFC 2308 recommends 1–3 hours). Current values: refresh 1h, retry 15m, expire 7d, negative TTL 1m.

DNSSEC · The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.

DKIM · The _domainkey name exists but no DKIM key was found under the common selectors. Selectors are provider-specific; check yours with -selector.

DNSSEC · DNSSEC is not enabled for this domain. Consider enabling DNSSEC to protect against DNS spoofing attacks.

MX · No MX records found. If this domain is used for email, add MX records to specify mail servers. If it never receives mail, publish a null MX ("MX 0 .").

DMARC · These report addresses are in another domain that has not agreed to receive your reports, so receivers will not send them: mailto:report@dmarc.amazon.com (needs imdb.fr._report._dmarc.dmarc.amazon.com). Ask the report provider to publish the record, or check the address.