Domainlinode.com
✓ 20 Pass
⚠ 4 Warn
ℹ 9 Info
Action Items
Failures first, then warnings
Warn
DNSSEC
DS records
No DS records found at parent.
Warn
DNSSEC
DNSSEC chain
No DS records found at parent. Domain appears unsigned.
Warn
Parent Nameservers
DNS Parent sent Glue
No glue records found in parent response. This is expected if nameservers are outside the delegated zone.
Warn
SOA Record
SOA Minimum TTL
Min TTL: 86400 (1 day(s)). SOA Minimum TTL is 86400 (1 day). RFC 2308 redefines this as the Negative Cache TTL. A value of 3600 to 10800 (1-3 hours) is recommended to prevent prolonged outages for missing records.
Category
Status
Test name
Information
PARENT
Info
Parent delegation records
Delegation NS records returned by parent zone com (a.gtld-servers.net):
a3-67.akam.netglue=[—] resolved=[96.7.49.67, 2600:1408:1c::43][TTL=172800]
a1-249.akam.netglue=[—] resolved=[193.108.91.249, 2600:1401:2::f9][TTL=172800]
a7-65.akam.netglue=[—] resolved=[23.61.199.65, 2600:1406:32::41][TTL=172800]
a12-65.akam.netglue=[—] resolved=[184.26.160.65, 2600:1480:f000::41][TTL=172800]
a16-64.akam.netglue=[—] resolved=[23.211.132.64, 2600:1406:1b::40][TTL=172800]
a4-64.akam.netglue=[—] resolved=[72.246.46.64, 2600:1480:9000::40][TTL=172800]
PARENT
Pass
Nameservers listed at parent
Good. Parent server a.gtld-servers.net has the nameservers listed.
PARENT
Pass
Nameserver IPv4 address records
Good. Every nameserver has IPv4 A records. IPv6 AAAA records are informational only.
PARENT
Warn
DNS Parent sent Glue
No glue records found in parent response. This is expected if nameservers are outside the delegated zone.
Category
Status
Test name
Information
NS
Info
NS records
NS records from the nameservers. Address health checks validate IPv4 A records only.
a1-249.akam.net[193.108.91.249][TTL=21600]
a12-65.akam.net[184.26.160.65][TTL=21600]
a16-64.akam.net[23.211.132.64][TTL=21600]
a3-67.akam.net[96.7.49.67][TTL=21600]
a4-64.akam.net[72.246.46.64][TTL=21600]
a7-65.akam.net[23.61.199.65][TTL=21600]
NS
Pass
Recursive queries
Good. The nameservers do not allow recursive queries for outside hosts.
a1-249.akam.net 193.108.91.249 auth=ok recursion=closed tcp=ok serial=2026092336
a12-65.akam.net 184.26.160.65 auth=ok recursion=closed tcp=ok serial=2026092336
a16-64.akam.net 23.211.132.64 auth=ok recursion=closed tcp=ok serial=2026092336
a3-67.akam.net 96.7.49.67 auth=ok recursion=closed tcp=ok serial=2026092336
a4-64.akam.net 72.246.46.64 auth=ok recursion=closed tcp=ok serial=2026092336
a7-65.akam.net 23.61.199.65 auth=ok recursion=closed tcp=ok serial=2026092336
NS
Pass
Multiple nameservers
Good. It have 6 nameservers. RFC2182 recommends at least 3.
NS
Pass
Different subnets
Good. Nameservers are on 6 different subnets.
NS
Pass
Public IPs
Good. All nameserver IPv4 addresses are public.
NS
Pass
DNS servers responded
Good. All nameserver IPv4 addresses responded.
a1-249.akam.net 193.108.91.249 auth=ok recursion=closed tcp=ok serial=2026092336
a12-65.akam.net 184.26.160.65 auth=ok recursion=closed tcp=ok serial=2026092336
a16-64.akam.net 23.211.132.64 auth=ok recursion=closed tcp=ok serial=2026092336
a3-67.akam.net 96.7.49.67 auth=ok recursion=closed tcp=ok serial=2026092336
a4-64.akam.net 72.246.46.64 auth=ok recursion=closed tcp=ok serial=2026092336
a7-65.akam.net 23.61.199.65 auth=ok recursion=closed tcp=ok serial=2026092336
NS
Pass
TCP connections
Good. All nameserver IPv4 addresses accept TCP connections on port 53.
a1-249.akam.net 193.108.91.249 auth=ok recursion=closed tcp=ok serial=2026092336
a12-65.akam.net 184.26.160.65 auth=ok recursion=closed tcp=ok serial=2026092336
a16-64.akam.net 23.211.132.64 auth=ok recursion=closed tcp=ok serial=2026092336
a3-67.akam.net 96.7.49.67 auth=ok recursion=closed tcp=ok serial=2026092336
a4-64.akam.net 72.246.46.64 auth=ok recursion=closed tcp=ok serial=2026092336
a7-65.akam.net 23.61.199.65 auth=ok recursion=closed tcp=ok serial=2026092336
NS
Pass
Delegation mismatch
Good. NS records match between parent and authoritative servers.
NS
Pass
SOA serial consistency
Good. All nameservers agree on SOA serial: 2026092336.
a1-249.akam.net 193.108.91.249 auth=ok recursion=closed tcp=ok serial=2026092336
a12-65.akam.net 184.26.160.65 auth=ok recursion=closed tcp=ok serial=2026092336
a16-64.akam.net 23.211.132.64 auth=ok recursion=closed tcp=ok serial=2026092336
a3-67.akam.net 96.7.49.67 auth=ok recursion=closed tcp=ok serial=2026092336
a4-64.akam.net 72.246.46.64 auth=ok recursion=closed tcp=ok serial=2026092336
a7-65.akam.net 23.61.199.65 auth=ok recursion=closed tcp=ok serial=2026092336
Category
Status
Test name
Information
SOA
Info
SOA record
SOA record details:
Primary NS : a1-249.akam.net
Hostmaster : dns@linode.com
Serial : 2026092336
Refresh : 4200
Retry : 3600
Expire : 2419200
Min TTL : 86400
SOA
Pass
SOA MNAME
OK. a1-249.akam.net is listed in the NS records.
SOA
Info
SOA Serial
Current SOA serial is 2026092336. Format looks correct (YYYYMMDDnn).
SOA
Pass
SOA Refresh
Refresh: 4200 (1 hour(s)). OK. Within recommended 1 to 24 hours range.
SOA
Pass
SOA Retry
Retry: 3600 (1 hour(s)). OK.
SOA
Pass
SOA Expire
Expire: 2419200 (28 day(s)). OK.
SOA
Warn
SOA Minimum TTL
Min TTL: 86400 (1 day(s)). SOA Minimum TTL is 86400 (1 day). RFC 2308 redefines this as the Negative Cache TTL. A value of 3600 to 10800 (1-3 hours) is recommended to prevent prolonged outages for missing records.
Category
Status
Test name
Information
MX
Info
MX Records
Current MX records:
10 mxb-00190b01.gslb.pphosted.com [67.231.157.127]
10 mxa-00190b01.gslb.pphosted.com [67.231.157.127]
MX
Pass
MX count
Zone have 2 MX record(s). Good redundancy.
MX
Pass
MX IPv4 addresses are public
Good. All MX records use public IPv4 addresses.
MX
Pass
MX is hostname
Good. All MX records use hostnames, not IP addresses.
MX
Pass
MX CNAME check
OK. No CNAME records found for MX hosts.
MX
Pass
Reverse PTR records
PTR (reverse DNS) records for MX hosts:
67.231.157.127 → mx0b-00190b01.pphosted.com
67.231.157.127 → mx0b-00190b01.pphosted.com
Category
Status
Test name
Information
DNSSEC
Warn
DS records
No DS records found at parent.
DNSSEC
Info
DNSKEY records
No DNSKEY records found at child.
DNSSEC
Warn
DNSSEC chain
No DS records found at parent. Domain appears unsigned.
Category
Status
Test name
Information
WWW
Info
WWW A Record
www.linode.com resolves to:
23.46.216.206
23.46.216.199
WWW
Info
WWW AAAA (IPv6)
IPv6 addresses:
2600:1406:2e00:49::172e:d8c7
2600:1406:2e00:49::172e:d8ce
WWW
Pass
WWW IPv4 addresses are public
Good. All WWW IPv4 addresses are public.
WWW
Info
WWW CNAME
www.linode.com has a CNAME pointing to linode.com.edgekey.net.
Processed in 0.299s · Real DNS resolution via dnspython · Wed, 23 Sep 2026 20:35:59 GMT