Skip to results
IntoDNS.run
Domainnytimes.com
✓ 19 Pass ⚠ 5 Warn ℹ 9 Info
Action Items
Failures first, then warnings
Warn
DNSSEC
DS records
No DS records found at parent.
Warn
DNSSEC
DNSSEC chain
No DS records found at parent. Domain appears unsigned.
Warn
NS Records
SOA serial consistency
SOA serial mismatch across IPv4 nameservers. This usually indicates that secondary nameservers are out of sync with the primary, causing inconsistent DNS responses.
Warn
SOA Record
SOA Refresh
Refresh: 300 (5 min(s)). Recommended range is 1–24 hours.
Warn
SOA Record
SOA Retry
Retry: 150 (2 min(s)). Recommended range is 10 minutes to 1 hour.
PARENT
Info
Parent delegation records
Delegation NS records returned by parent zone com (a.gtld-servers.net):
ns-244.awsdns-30.comglue=[205.251.192.244, 2600:9000:5300:f400::1] resolved=[205.251.192.244, 2600:9000:5300:f400::1][TTL=172800] ns-635.awsdns-15.netglue=[—] resolved=[205.251.194.123, 2600:9000:5302:7b00::1][TTL=172800] ns-1328.awsdns-38.orgglue=[—] resolved=[205.251.197.48, 2600:9000:5305:3000::1][TTL=172800] ns-1652.awsdns-14.co.ukglue=[—] resolved=[205.251.198.116, 2600:9000:5306:7400::1][TTL=172800] dns1.p06.nsone.netglue=[—] resolved=[198.51.44.6, 2620:4d:4000:6259:7:6:0:1][TTL=172800] dns2.p06.nsone.netglue=[—] resolved=[198.51.45.6, 2a00:edc0:6259:7:6::2][TTL=172800] dns3.p06.nsone.netglue=[—] resolved=[198.51.44.70, 2620:4d:4000:6259:7:6:0:3][TTL=172800] dns4.p06.nsone.netglue=[—] resolved=[198.51.45.70, 2a00:edc0:6259:7:6::4][TTL=172800]
PARENT
Pass
Nameservers listed at parent
Good. Parent server a.gtld-servers.net has the nameservers listed.
PARENT
Pass
Nameserver IPv4 address records
Good. Every nameserver has IPv4 A records. IPv6 AAAA records are informational only.
PARENT
Pass
DNS Parent sent Glue
Good. Parent response included glue address records.
NS
Info
NS records
NS records from the nameservers. Address health checks validate IPv4 A records only.
dns1.p06.nsone.net[198.51.44.6][TTL=21600] dns2.p06.nsone.net[198.51.45.6][TTL=21600] dns3.p06.nsone.net[198.51.44.70][TTL=21600] dns4.p06.nsone.net[198.51.45.70][TTL=21600] ns-1328.awsdns-38.org[205.251.197.48][TTL=21600] ns-1652.awsdns-14.co.uk[205.251.198.116][TTL=21600] ns-244.awsdns-30.com[205.251.192.244][TTL=21600] ns-635.awsdns-15.net[205.251.194.123][TTL=21600]
NS
Pass
Recursive queries
Good. The nameservers do not allow recursive queries for outside hosts.
dns1.p06.nsone.net 198.51.44.6 auth=ok recursion=closed tcp=ok serial=1652977959 dns2.p06.nsone.net 198.51.45.6 auth=ok recursion=closed tcp=ok serial=1652977959 dns3.p06.nsone.net 198.51.44.70 auth=ok recursion=closed tcp=ok serial=1652977959 dns4.p06.nsone.net 198.51.45.70 auth=ok recursion=closed tcp=ok serial=1652977959 ns-1328.awsdns-38.org 205.251.197.48 auth=ok recursion=closed tcp=ok serial=1 ns-1652.awsdns-14.co.uk 205.251.198.116 auth=ok recursion=closed tcp=ok serial=1 ns-244.awsdns-30.com 205.251.192.244 auth=ok recursion=closed tcp=ok serial=1 ns-635.awsdns-15.net 205.251.194.123 auth=ok recursion=closed tcp=ok serial=1
NS
Pass
Multiple nameservers
Good. It have 8 nameservers. RFC2182 recommends at least 3.
NS
Pass
Different subnets
Good. Nameservers are on 6 different subnets.
NS
Pass
Public IPs
Good. All nameserver IPv4 addresses are public.
NS
Pass
DNS servers responded
Good. All nameserver IPv4 addresses responded.
dns1.p06.nsone.net 198.51.44.6 auth=ok recursion=closed tcp=ok serial=1652977959 dns2.p06.nsone.net 198.51.45.6 auth=ok recursion=closed tcp=ok serial=1652977959 dns3.p06.nsone.net 198.51.44.70 auth=ok recursion=closed tcp=ok serial=1652977959 dns4.p06.nsone.net 198.51.45.70 auth=ok recursion=closed tcp=ok serial=1652977959 ns-1328.awsdns-38.org 205.251.197.48 auth=ok recursion=closed tcp=ok serial=1 ns-1652.awsdns-14.co.uk 205.251.198.116 auth=ok recursion=closed tcp=ok serial=1 ns-244.awsdns-30.com 205.251.192.244 auth=ok recursion=closed tcp=ok serial=1 ns-635.awsdns-15.net 205.251.194.123 auth=ok recursion=closed tcp=ok serial=1
NS
Pass
TCP connections
Good. All nameserver IPv4 addresses accept TCP connections on port 53.
dns1.p06.nsone.net 198.51.44.6 auth=ok recursion=closed tcp=ok serial=1652977959 dns2.p06.nsone.net 198.51.45.6 auth=ok recursion=closed tcp=ok serial=1652977959 dns3.p06.nsone.net 198.51.44.70 auth=ok recursion=closed tcp=ok serial=1652977959 dns4.p06.nsone.net 198.51.45.70 auth=ok recursion=closed tcp=ok serial=1652977959 ns-1328.awsdns-38.org 205.251.197.48 auth=ok recursion=closed tcp=ok serial=1 ns-1652.awsdns-14.co.uk 205.251.198.116 auth=ok recursion=closed tcp=ok serial=1 ns-244.awsdns-30.com 205.251.192.244 auth=ok recursion=closed tcp=ok serial=1 ns-635.awsdns-15.net 205.251.194.123 auth=ok recursion=closed tcp=ok serial=1
NS
Pass
Delegation mismatch
Good. NS records match between parent and authoritative servers.
NS
Warn
SOA serial consistency
SOA serial mismatch across IPv4 nameservers. This usually indicates that secondary nameservers are out of sync with the primary, causing inconsistent DNS responses.
dns1.p06.nsone.net 198.51.44.6 auth=ok recursion=closed tcp=ok serial=1652977959 dns2.p06.nsone.net 198.51.45.6 auth=ok recursion=closed tcp=ok serial=1652977959 dns3.p06.nsone.net 198.51.44.70 auth=ok recursion=closed tcp=ok serial=1652977959 dns4.p06.nsone.net 198.51.45.70 auth=ok recursion=closed tcp=ok serial=1652977959 ns-1328.awsdns-38.org 205.251.197.48 auth=ok recursion=closed tcp=ok serial=1 ns-1652.awsdns-14.co.uk 205.251.198.116 auth=ok recursion=closed tcp=ok serial=1 ns-244.awsdns-30.com 205.251.192.244 auth=ok recursion=closed tcp=ok serial=1 ns-635.awsdns-15.net 205.251.194.123 auth=ok recursion=closed tcp=ok serial=1
SOA
Info
SOA record
SOA record details:
Primary NS : ns-635.awsdns-15.net Hostmaster : hostmaster@nytimes.com Serial : 1 Refresh : 300 Retry : 150 Expire : 1209600 Min TTL : 300
SOA
Pass
SOA MNAME
OK. ns-635.awsdns-15.net is listed in the NS records.
SOA
Info
SOA Serial
Current SOA serial is 1. RFC 1912 recommends the YYYYMMDDnn date-based format(Year-Month-Day-Revision).
SOA
Warn
SOA Refresh
Refresh: 300 (5 min(s)). Recommended range is 1–24 hours.
SOA
Warn
SOA Retry
Retry: 150 (2 min(s)). Recommended range is 10 minutes to 1 hour.
SOA
Pass
SOA Expire
Expire: 1209600 (14 day(s)). OK.
SOA
Pass
SOA Minimum TTL
Min TTL: 300 (5 min(s)). OK. RFC2308 recommends 1-3 hours for negative caching.
MX
Info
MX Records
Current MX records:
1 aspmx.l.google.com [192.178.164.27] 5 alt1.aspmx.l.google.com [172.253.145.26] 5 alt2.aspmx.l.google.com [172.253.135.26] 10 alt3.aspmx.l.google.com [173.194.42.26] 10 alt4.aspmx.l.google.com [142.251.96.27]
MX
Pass
MX count
Zone have 5 MX record(s). Good redundancy.
MX
Pass
MX IPv4 addresses are public
Good. All MX records use public IPv4 addresses.
MX
Pass
MX is hostname
Good. All MX records use hostnames, not IP addresses.
MX
Pass
MX CNAME check
OK. No CNAME records found for MX hosts.
MX
Pass
Reverse PTR records
PTR (reverse DNS) records for MX hosts:
192.178.164.27 → yuphxer-in-f27.1e100.net 172.253.145.26 → yulnkjt-in-f26.1e100.net 172.253.135.26 → yudfwta-in-f26.1e100.net 173.194.42.26 → yucbfwv-in-f26.1e100.net 142.251.96.27 → yutulth-in-f27.1e100.net
DNSSEC
Warn
DS records
No DS records found at parent.
DNSSEC
Info
DNSKEY records
No DNSKEY records found at child.
DNSSEC
Warn
DNSSEC chain
No DS records found at parent. Domain appears unsigned.
WWW
Info
WWW A Record
www.nytimes.com resolves to:
151.101.193.164 151.101.129.164 151.101.1.164 151.101.65.164
WWW
Info
WWW AAAA (IPv6)
No IPv6 AAAA record found for www.nytimes.com. IPv6 is optional and not used for pass/fail status.
WWW
Pass
WWW IPv4 addresses are public
Good. All WWW IPv4 addresses are public.
WWW
Info
WWW CNAME
www.nytimes.com has a CNAME pointing to www.prd.map.nytimes.com.
Processed in 0.291s · Real DNS resolution via dnspython · Wed, 23 Sep 2026 20:39:49 GMT