DNS Report: nationalinterest.org

Generated: 2026-08-09T04:10:54-05:00

76/100

Diagnostics

StatusCheckPointsDetails
OKIPv4 (A)30/302 IPv4 address(es) detected.
OKIPv6 (AAAA)10/102 IPv6 address(es) detected.
OKName server redundancy20/202 NS record(s); 2 or more required.
OKSOA record10/10Authoritative zone record.
ERRORDNSSEC chain0/15Both DS and DNSKEY are required.
OKCAA policy5/5Certificate authority restriction.
OKDNS propagation10/10Agreement between public resolvers.
OKMX records20/201 MX record(s).
OKSPF25/25SPF policy published.
OKDMARC25/25DMARC policy published.
OKDKIM20/20A DKIM selector was verified.
ERRORMTA-STS0/5Mail transport policy.
ERRORTLS-RPT0/5TLS reporting policy.
OKValid TLS certificate55/5587 day(s) remaining.
OKCertificate lifetime10/10Full points require at least 30 days remaining.
WARNINGHTTP security headers8/352 of 9 evaluated headers detected.
ERRORPTR reverse DNS0/30PTR not detected.
OKIPv4 diversity35/35Two or more IPv4 addresses receive full points.
OKIPv6 connectivity35/35AAAA availability.
OKDNS resolution40/40At least one address family must resolve.
ERRORHTTP response0/40HTTP/2 403
OKHTTPS final URL20/20Final URL uses HTTPS.

DNS Records

TipoValues
A
172.66.43.46
172.66.40.210
AAAA
2606:4700:3108::ac42:28d2
2606:4700:3108::ac42:2b2e
CNAME
MX
0 nationalinterest-org.mail.protection.outlook.com.
TXT
"facebook-domain-verification=mrzbb5ym2jz9k1op6ogftk0bf403gn"
"google-site-verification=kkfbepRYNZYjJItGCKqYD3tIzeJa2TLlEZ7Pd5mxFw8"
"MS=ms20358893"
"google-site-verification=cNiYKKOYAbe7jLrE1dRP6nmrglTaFUe3_4B5TOXGyNY"
"google-site-verification=RAW3OAH4q3io8iP3xdnEWdYb7sOLQrHMrpmLtLqrycc"
"v=spf1 include:spf.protection.outlook.com ip4:162.242.234.155 ~all"
NS
hugh.ns.cloudflare.com.
joan.ns.cloudflare.com.
SOA
hugh.ns.cloudflare.com. dns.cloudflare.com. 2411677464 10000 2400 604800 1800
CAA
0 issuewild "comodoca.com"
0 issuewild "pki.goog; cansignhttpexchanges=yes"
0 issuewild "digicert.com; cansignhttpexchanges=yes"
0 issue "letsencrypt.org"
0 issue "ssl.com"
0 issuewild "letsencrypt.org"
0 issue "digicert.com; cansignhttpexchanges=yes"
0 issue "comodoca.com"
0 issue "pki.goog; cansignhttpexchanges=yes"
0 issuewild "ssl.com"
DS
DNSKEY
RRSIG
NSEC
NSEC3
SRV
NAPTR
TLSA
SSHFP