DNS report
bdc.nsw.edu.au
Complete DNS, mail, web and security analysis.
DNS cache tools
If you have recently made DNS changes and they are not yet reflected in the report, you can try to flush the DNS cache of these public resolvers: The domain name will be copied to your clipboard automatically when clicking on a button
| Category | Status | Test | Details | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
WHOIS0.2 ms |
Domain Status |
Source: WHOIS (port 43) auto -> whois.auda.org.au
Registrar lock not detected Warning: no public transfer lock status was found. Confirm with the registrar that transfer lock is enabled to reduce the risk of unauthorized transfer. |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
PARENT0.0 ms |
Domain NS records |
Nameserver records returned by the parent servers are:
ns1.domainname.edu.au [13.248.158.180] (NO GLUE) [TTL=3600] ns3.domainname.edu.au [76.223.26.245] (NO GLUE) [TTL=3600] ns2.domainname.edu.au [75.2.118.134] (NO GLUE) [TTL=3600] q.au was kind enough to give us that information. |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| TLD Parent Check |
q.au has information for your TLD.
This is a good thing as there are some other domain extensions like "co.us" for example that are missing a direct check. |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Your nameservers are listed |
q.au has your nameservers listed.
This is a must if you want to be found as anyone that does not know your DNS servers will first ask the parent nameservers. |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| DNS Parent sent Glue |
0 of 3 nameservers sent GLUE.
The parent nameserver a.gtld-servers.net is not sending out GLUE for every nameserver listed, meaning it is sending your nameserver hostnames without their corresponding A records. This is acceptable, but it requires an extra A record lookup, which may slightly delay DNS resolution. This often occurs when nameservers are on a different TLD (e.g., domain.com with nameserver ns.otherdomain.com). |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Nameservers A records |
Every nameserver listed has A records.
This is a must if you want to be found. |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
NS3336.3 ms |
NS records from your NameServers |
NS records returned by the currently delegated nameservers are:
All NS records have the same TTL: 3600 seconds. |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Public Resolver |
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Mismatched NS records |
The NS records at all your nameservers are identical to those listed by the parent.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| DNS servers responded |
All nameservers listed at the parent server responded.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Name of nameservers are valid |
All of the NS records that your nameservers report seem valid.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Multiple Nameservers |
You have 3 nameservers. According to RFC2182 section 5, this is recommended.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Missing nameservers reported by parent |
All NS records are the same at the parent and at your nameservers.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Missing nameservers reported by your nameservers |
All nameservers returned by the parent server are the same as the ones reported by your nameservers.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Domain CNAMEs |
OK. RFC1912 2.4 and RFC2181 10.3 state that there should be no CNAMEs if an NS (or any other) record is present.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| NSs CNAME check |
OK. RFC1912 2.4 and RFC2181 10.3 state that there should be no CNAMEs if an NS (or any other) record is present.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Different subnets |
You have nameservers on different subnets.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Recursive Queries |
ns2.domainname.edu.au → ❌ This DNS server allows recursion, which may pose a security risk (it responds to out-of-zone queries).
ns1.domainname.edu.au → ❌ This DNS server allows recursion, which may pose a security risk (it responds to out-of-zone queries). ns3.domainname.edu.au → ❌ This DNS server allows recursion, which may pose a security risk (it responds to out-of-zone queries). |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Same Glue |
The A records (GLUE) from the parent zone match the A records returned by your nameservers. OK.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| NS Self-IP Consistency |
All nameservers return consistent IP addresses with what they declare in the zone.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Glue for NS records |
GLUE was not sent when I asked your nameservers for your NS records.
This is ok but you should know that in this case an extra A record lookup is required. The nameservers without glue are: 75.2.118.134 13.248.158.180 76.223.26.245 You can fix this by adding A records to your nameservers. |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Nameservers are lame |
All the nameservers listed at the parent servers answer authoritatively for your domain.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| IPs of nameservers are public |
Ok. Looks like the IP addresses of your nameservers are public.
This is a good thing because it will prevent DNS delays and other problems. |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| DNS servers allow TCP connection |
OK. Seems all your DNS servers allow TCP connections.
This is a good thing and useful even if UDP connections are used by default. |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Different autonomous systems |
All authoritative name servers appear to be in the same autonomous system: AS16509.
Using a single AS reduces resiliency and increases the blast radius of network incidents. Consider hosting your NS records across multiple autonomous systems. WARNING: Single point of failure. |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Stealth NS records sent |
Ok. No stealth NS records are sent
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
DNSSEC258.8 ms |
Zone signed |
DNSSEC: Unsigned
No RRSIG record found. The zone is not signed with DNSSEC. |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| DNSKEY records |
No DNSKEY records found.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| DS record in parent |
No DS record found in the parent zone.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| NSEC/NSEC3 record |
No NSEC or NSEC3 record found when querying a non-existent subdomain.
This may indicate a misconfiguration or lack of proper DNSSEC denial-of-existence support. |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
SOA0.1 ms |
SOA Record |
The SOA (Start of Authority) record is:
Primary nameserver: ns1.domainname.edu.au Hostmaster E-mail address: dmain@netregistry@net Serial #: 2026090602 Refresh: 86400 Retry: 7200 Expire: 3600000 Default TTL: 172800 |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| NSs have same SOA serial |
OK. All your nameservers agree that your SOA serial number is 2026090602.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| SOA MNAME entry |
OK. ns1.domainname.edu.au is listed at the parent servers.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| SOA Serial |
Your SOA serial number is: 2026090602. This appears to follow the recommended YYYYMMDDnn format.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| SOA REFRESH |
Your SOA REFRESH interval is: 86400. OK.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| SOA RETRY |
Your SOA RETRY value is: 7200. OK.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| SOA EXPIRE |
Your SOA EXPIRE number is: 3600000. Looks OK.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| SOA MINIMUM TTL |
Your SOA MINIMUM TTL is: 172800. This is fine
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
MX ... |
MX Records |
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
TXT0.1 ms |
TXT Records |
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Duplicate TXT records |
Multiple TXT records were found for the same host/selector. This can break email authentication.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
SPF ... |
SPF Analysis |
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
DMARC39.9 ms |
DMARC Configuration |
DMARC Record was found:
v=DMARC1; p=quarantine; rua=mailto:[email protected] Policy summary:
v=DMARC1; p=quarantine; sp=quarantine; rua=mailto:[email protected]; ruf=none; fo=0; pct=100; adkim=r; aspf=r; ri=86400; rf=afrf; DMARC Evaluation Score: 1.5/3 To improve your score:
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
MTA-STS / TLS-RPT205.8 ms |
Mail TLS security |
MTA-STS score 0/5 Recommendations:
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
DKIM ... |
DKIM Records Detected |
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
BIMI67.1 ms |
BIMI Record |
No BIMI record found at: default._bimi.bdc.nsw.edu.au.
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
SSL ... |
SSL Certificate Summary |
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
CAA ... |
CAA Records |
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
HSTS ... |
HSTS |
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
HTTPS ... |
HTTPS |
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
HTTPS (DNS) ... |
HTTPS DNS record |
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
WWW ... |
A Record |
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
AXFR (Zone Transfer)272.7 ms |
AXFR status for the zone |
AXFR test could not be determined for bdc.nsw.edu.au.
Nameservers tested: ns2.domainname.edu.au, ns1.domainname.edu.au, ns3.domainname.edu.au |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Security note |
Zone transfers (AXFR) should be disabled in production unless explicitly required and restricted.
Leaving AXFR open allows anyone to enumerate your entire DNS zone (subdomains, MX, TXT, internal hosts, etc.). |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
PORTS ... |
Open ports detected (54.153.229.39) |
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
REPUTATION ... |
IP in blacklists (54.153.229.39) |
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
DNS found ... |
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Test | Details | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Website Preview0.0 ms
|
Snapshot is generated through DNSprobe's rendering proxy and may be served from a short cache.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Security Headers20011.2 ms
|
Score: 5/100 (F) Failing, very weak or absent security headers
Recommended starter configuration (.htaccess) Starter configuration to copy and adapt. CSP, CORS and cookie rewriting are intentionally commented because they can break some sites if enabled blindly. |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
WHOIS524.8 ms
|
Source: WHOIS (port 43) auto -> whois.auda.org.au
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
RDAP 524.5 ms
|
Source: RDAP rdap.org → rdap.cctld.au
Registrar
RDAP JSON (raw){
"rdapConformance": [
"rdap_level_0",
"auda_rdap_response_profile_0",
"auData_level_0",
"redacted"
],
"notices": [
{
"title": "Terms of Service",
"description": [
"Access to RDAP information is provided to assist persons in determining the contents of a domain name registration record in the registry database. The data in this record is provided by Identity Digital Australia Pty Ltd on behalf of .au Domain Administration Limited (auDA) for informational purposes only, and neither Identity Digital nor .au Domain Administration Limited (auDA) guarantee its accuracy. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to (a) allow, enable, or otherwise support the transmission by e-mail, telephone, facsimile, or any other electronic means of communication, of mass unsolicited communications, including commercial advertising or solicitations to entities other than the data recipient's own existing customers or for the collection of data sets to which the data recipient has no other legal source of access; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Identity Digital, a Registrar, or Registry Operator except as reasonably necessary to register domain names or modify existing registrations. When using the RDAP service, please consider the following: the RDAP service is not a replacement for standard EPP commands to the SRS service. RDAP is not considered authoritative for registered domain objects. The RDAP service may be scheduled for downtime during production or OT&E maintenance periods. Queries to the RDAP services are throttled. If too many queries are received from a single IP address within a specified time, the service will begin to reject further queries for a period of time to prevent disruption of RDAP service access. Abuse of the RDAP system through data mining is mitigated by detecting and limiting bulk query access from single sources. Where applicable, the presence of a [Non-Public Data] tag indicates that such data is not made publicly available due to applicable data privacy laws or requirements. Should you wish to contact the registrant, please refer to the RDAP records available through the registrar URL listed above. Access to non-public data may be provided, upon request, where it can be confirmed that the requester holds a legal entitlement to access the withheld data. The RDAP Service is provided for information purposes only. By using the RDAP Service, you agree to be bound by these terms and conditions. The RDAP Service is operated in accordance with the auDA Policy available at: https://www.auda.org.au/whois-policy"
],
"links": [
{
"value": "https://rdap.cctld.au/rdap/domain/bdc.nsw.edu.au",
"rel": "terms-of-service",
"href": "https://www.auda.org.au/whois-policy",
"type": "text/html"
}
]
},
{
"title": "Status Codes",
"description": [
"For more information on domain status codes, please visit https://www.identitydigital.au/whois-status-codes/"
],
"links": [
{
"value": "https://rdap.cctld.au/rdap/domain/bdc.nsw.edu.au",
"rel": "glossary",
"href": "https://www.identitydigital.au/whois-status-codes/",
"type": "application/rdap+json"
}
]
},
{
"title": "RDDS Inaccuracy Complaint Form",
"description": [
"URL of the auDA RDDS Inaccuracy Complaint Form: https://www.auda.org.au/au-domain-names/complaints-and-disputes/au-complaints/submit-a-complaint/"
],
"links": [
{
"value": "https://rdap.cctld.au/rdap/domain/bdc.nsw.edu.au",
"rel": "help",
"href": "https://www.auda.org.au/au-domain-names/complaints-and-disputes/au-complaints/submit-a-complaint/",
"type": "application/rdap+json"
}
]
}
],
"ldhName": "bdc.nsw.edu.au",
"unicodeName": "bdc.nsw.edu.au",
"auData_statusReasons": [
{
"auData_status": "server renew prohibited",
"auData_statusReason": [
"Not Currently Eligible For Renewal"
]
}
],
"auData_eligibility": [
{
"name": "registrant name",
"value": "Bishop Druitt College"
},
{
"name": "eligibility type",
"value": "Non-Government School"
}
],
"nameservers": [
{
"ldhName": "ns1.domainname.edu.au",
"unicodeName": "ns1.domainname.edu.au",
"ipAddresses": {
"v4": [
"13.248.158.180"
]
},
"objectClassName": "nameserver",
"handle": "6874d375827c458fa097dac750340527-AU",
"status": [
"associated"
]
},
{
"ldhName": "ns3.domainname.edu.au",
"unicodeName": "ns3.domainname.edu.au",
"ipAddresses": {
"v4": [
"76.223.26.245"
]
},
"objectClassName": "nameserver",
"handle": "fb34b39558ff4cc6a7906ba52b28c80c-AU",
"status": [
"associated"
]
},
{
"ldhName": "ns2.domainname.edu.au",
"unicodeName": "ns2.domainname.edu.au",
"ipAddresses": {
"v4": [
"75.2.118.134"
]
},
"objectClassName": "nameserver",
"handle": "c4b84744cab146df9f4091878e60bf8b-AU",
"status": [
"associated"
]
}
],
"secureDNS": {
"delegationSigned": false,
"maxSigLife": 1
},
"redacted": [
{
"name": {
"type": "Registry Domain Registration Date"
},
"prePath": "$.events[?(@.eventAction=='registration')]",
"pathLang": "jsonpath",
"method": "removal"
},
{
"name": {
"type": "Registry Domain Expiration Date"
},
"prePath": "$.events[?(@.eventAction=='expiration')]",
"pathLang": "jsonpath",
"method": "removal"
},
{
"name": {
"description": "Registrant"
},
"method": "removal"
},
{
"name": {
"description": "Technical Contact"
},
"method": "removal"
},
{
"name": {
"description": "Administrative Contact"
},
"method": "removal"
},
{
"name": {
"type": "AU Eligibility Policy Reason"
},
"prePath": "$.auData_eligibility[?(@.name=='policy reason')]",
"pathLang": "jsonpath",
"method": "removal"
}
],
"objectClassName": "domain",
"handle": "9d83a92ef5214d76ba5c0f4e79866632-AU",
"status": [
"server renew prohibited"
],
"events": [
{
"eventAction": "last changed",
"eventDate": "2026-08-15T23:54:27.386Z"
},
{
"eventAction": "last update of RDAP database",
"eventDate": "2026-10-21T21:44:04.577Z"
}
],
"entities": [
{
"vcardArray": [
"vcard",
[
[
"version",
[],
"text",
"4.0"
],
[
"fn",
[],
"text",
"Education Services Australia Limited"
]
]
],
"roles": [
"registrar"
],
"publicIds": [
{
"type": "Registrar ID",
"identifier": "802237"
}
],
"objectClassName": "entity",
"handle": "802237",
"entities": [
{
"vcardArray": [
"vcard",
[
[
"version",
[],
"text",
"4.0"
],
[
"fn",
[],
"text",
""
],
[
"tel",
{
"type": "voice"
},
"uri",
"tel:+61.399109829"
],
[
"email",
[],
"text",
"[email protected]"
]
]
],
"roles": [
"abuse"
],
"objectClassName": "entity"
}
],
"links": [
{
"value": "https://rdap.cctld.au/rdap/entity/802237",
"rel": "self",
"href": "https://rdap.cctld.au/rdap/entity/802237",
"type": "application/rdap+json"
},
{
"value": "https://www.domainname.edu.au",
"rel": "related",
"href": "https://www.domainname.edu.au",
"type": "application/rdap+json"
}
]
}
],
"links": [
{
"value": "https://rdap.cctld.au/rdap/domain/bdc.nsw.edu.au",
"rel": "self",
"href": "https://rdap.cctld.au/rdap/domain/bdc.nsw.edu.au",
"type": "application/rdap+json"
}
]
} |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Processed in 0.01 seconds.
Made with with PHP and a bit of JS.
Made with with PHP and a bit of JS.
Lines of code: 20,304