SurfaceMap › y › yoursite.com

yoursite.com

Checked 2026-10-22 11:41 UTC · first added 2026-10-21
!Check could not complete

Domain & DNS

warn

20 passed 5 warn 0 failed

Areas

iRegistration !Delegation !Nameservers ✓SOA !DNSSEC iRecords

Problems

  • !
    NS sets differ
    Delegation · The nameservers at the parent and in the zone should be the same. Only at the parent: ns1.above.com, ns2.above.com; only in the zone: ns1.abovedomains.com, ns2.abovedomains.com. ns1.above.com, ns1.abovedomains.com, ns2.above.com, ns2.abovedomains.com report NS ns1.abovedomains.com ns2.abovedomains.com.
    #7
  • !
    Glue differs from the zone
    Delegation · The addresses at the parent (glue) differ from the addresses in the zone: ns1.above.com (glue 103.224.182.77, 103.224.182.9, 103.224.212.9, zone 103.224.212.9, 103.224.182.85, 103.224.182.9, 103.224.182.77); ns2.above.com (glue 103.224.182.10, 103.224.212.10, 103.224.212.51, zone 103.224.212.51, 103.224.212.53, 103.224.212.10, 103.224.182.10). Update the glue at your registrar.
    #8
  • !
    No IPv6
    Delegation · None of the nameservers has an IPv6 address, so IPv6-only resolvers can't reach them.
    #13
  • !
    No EDNS
    Nameservers · These nameservers don't support EDNS(0), needed for DNSSEC and answers larger than 512 bytes: ns1.above.com (103.224.212.9), ns1.above.com (103.224.182.85), ns1.above.com (103.224.182.9), ns1.above.com (103.224.182.77), ns1.abovedomains.com (103.224.182.85), ns1.abovedomains.com (103.224.212.9), ns1.abovedomains.com (103.224.182.9), ns1.abovedomains.com (103.224.182.77), ns2.above.com (103.224.212.51), ns2.above.com (103.224.212.53), ns2.above.com (103.224.212.10), ns2.above.com (103.224.182.10), ns2.abovedomains.com (103.224.212.10), ns2.abovedomains.com (103.224.182.10), ns2.abovedomains.com (103.224.212.51), ns2.abovedomains.com (103.224.212.53).
    #20
  • !
    Not signed
    DNSSEC · The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Recent checks

!

Full report

Domain & DNS report for yoursite.com ›

Mail

error

15 passed 3 warn 1 failed 4 errors

lookups failed for bimi, dmarc, mta-sts, tls-rpt; results are incomplete

Areas

✓SPF iDMARC ✗DKIM !DNSSEC !MX iTLS iBIMI

Problems

  • ✗
    No DKIM keys published
    DKIM · _domainkey.yoursite.com does not exist (SERVFAIL), so no DKIM keys are published. DKIM helps prevent email spoofing. Configure DKIM with your email service provider.
    #7
  • !
    Not enabled
    DNSSEC · DNSSEC is not enabled for this domain. Consider enabling DNSSEC to protect against DNS spoofing attacks.
    #8
  • !
    Hosts without IPv6
    MX · The following MX hosts could not be resolved to IPv6 addresses: park-mx.above.com
    #11
  • !
    Single MX host, no backup
    MX · Only one MX record found. For better email reliability, consider adding at least one backup MX server.
    #12

Recent checks

!

Full report

Mail report for yoursite.com ›