Axiata Group

The domain has at least one IPv6 address (AAAA DNS record).

✓ 2606:4700::6812:1684, 2606:4700::6812:1784

The IPv6 addresses are publicly routable — not link-local, ULA, loopback or documentation ranges.

✓ All addresses are globally routable.

Website reachable on port 80 when connecting via IPv6.

✓ HTTP (port 80) responds over IPv6 — 120ms TTFB.

Website reachable on port 443 when connecting via IPv6.

✓ HTTPS (port 443) responds over IPv6 — 107ms TTFB.

Website responds when connected exclusively over IPv6, with no IPv4 fallback. Simulates what happens when IPv4 is turned off.

✓ Site is fully reachable via IPv6-only.

The SSL/TLS certificate is valid, not expired, and matches the domain when connected via IPv6.

✓ Certificate valid — issued by C = US, O = Google Trust Services, CN = WE1, expires Sep 12 11:58:55 2026 GMT

The domain has both A and AAAA records for backwards compatibility during the IPv6 transition.

✓ Domain has both A and AAAA records.

At least one authoritative nameserver has an IPv6 address (AAAA record).

✓ Nameserver has IPv6 address.

Authoritative nameserver accepts TCP connections on port 53 over IPv6.

✓ Nameserver is reachable via IPv6 on port 53.

Nameserver actually resolves DNS queries when asked over IPv6 — not just TCP open, but functionally answering.

✓ DNS queries answered over IPv6.

Full DNSSEC chain-of-trust validation passes. Prevents DNS cache poisoning and spoofing.

✓ DNSSEC fully validated.

Delegation Signer record exists in the parent zone.

✓ DS record found at parent zone.

RRSIG signatures are present and not expired.

✓ RRSIG signatures are current and valid.

The cryptographic algorithm used for DNSSEC signing.

ECDSAP256SHA256

The domain has at least one MX (Mail Exchange) DNS record pointing to a mail server.

✓ MX record found.

The highest-priority MX server resolves to an IPv6 address (AAAA record).

✓ MX server has AAAA record.

A TXT record with v=spf1 exists, declaring which servers may send email for this domain.

✓ SPF record found.

A DKIM public key is published at a common selector, enabling email signature verification.

DKIM selector found: selector1._domainkey

A DMARC policy record exists at _dmarc.<domain>, enabling email authentication reporting.

✓ DMARC record found.

The domain has at least one IPv4 address (A DNS record).

✓ 104.18.22.132, 104.18.23.132

Website reachable on port 80 when connecting via IPv4.

✓ HTTP (port 80) responds over IPv4 — 80ms TTFB.

Website reachable on port 443 when connecting via IPv4.

✓ HTTPS (port 443) responds over IPv4 — 75ms TTFB.