IPv6 Addresses Detected
2606:4700:20::ac43:4663
2606:4700:20::681a:b27
2606:4700:20::681a:a27
IPv4 Addresses Detected
104.26.10.39
104.26.11.39
172.67.70.99
Network Information
WHOISIPv6 Network
- Organization
- Cloudflare, Inc.
- Country
- US
- ASN
- AS13335 CLOUDFLARENET - Cloudflare, Inc., US
- Network
- 2606:4700::/32
IPv4 Network
- Organization
- Cloudflare, Inc.
- Country
- US
- ASN
- AS13335 CLOUDFLARENET - Cloudflare, Inc., US
- Network
- 104.16.0.0/12
Web Services
35%The domain has at least one IPv6 address (AAAA DNS record).
✓ 2606:4700:20::ac43:4663, 2606:4700:20::681a:b27, 2606:4700:20::681a:a27
The IPv6 addresses are publicly routable — not link-local, ULA, loopback or documentation ranges.
✓ All addresses are globally routable.
Website reachable on port 80 when connecting via IPv6.
✓ HTTP (port 80) responds over IPv6 — 32ms TTFB.
Website reachable on port 443 when connecting via IPv6.
✓ HTTPS (port 443) responds over IPv6 — 181ms TTFB.
Website responds when connected exclusively over IPv6, with no IPv4 fallback. Simulates what happens when IPv4 is turned off.
✓ Site is fully reachable via IPv6-only.
The SSL/TLS certificate is valid, not expired, and matches the domain when connected via IPv6.
✓ Certificate valid — issued by C = US, O = Google Trust Services, CN = WE1, expires Sep 17 08:34:22 2026 GMT
The domain has both A and AAAA records for backwards compatibility during the IPv6 transition.
✓ Domain has both A and AAAA records.
Server advertises HTTP/3 support via the Alt-Svc: h3 header.
✓ Alt-Svc: h3 header detected.
DNS & DNSSEC
25%At least one authoritative nameserver has an IPv6 address (AAAA record).
✓ Nameserver has IPv6 address.
Authoritative nameserver accepts TCP connections on port 53 over IPv6.
✓ Nameserver is reachable via IPv6 on port 53.
Nameserver actually resolves DNS queries when asked over IPv6 — not just TCP open, but functionally answering.
✓ DNS queries answered over IPv6.
Full DNSSEC chain-of-trust validation passes. Prevents DNS cache poisoning and spoofing.
✗ DNSSEC validation failed or zone is unsigned.
A PTR record exists in ip6.arpa for the IPv6 address. Important for email delivery and network diagnostics.
✗ No PTR record found.
Delegation Signer record exists in the parent zone.
✗ No DS record at parent.
RRSIG signatures are present and not expired.
✓ RRSIG signatures are current and valid.
The cryptographic algorithm used for DNSSEC signing.
ECDSAP256SHA256
Email Services
25%The domain has at least one MX (Mail Exchange) DNS record pointing to a mail server.
✓ MX record found.
The highest-priority MX server resolves to an IPv6 address (AAAA record).
✓ MX server has AAAA record.
The MX server accepts SMTP connections (port 25) over IPv6 and responds with a 220 banner.
Not measurable from this test node: the connection timed out, which cannot be told apart from filtering on our own network. Excluded from scoring rather than counted against this domain.
The MX server supports STARTTLS encryption when connected over IPv6.
Not measurable from this test node: the connection timed out, which cannot be told apart from filtering on our own network. Excluded from scoring rather than counted against this domain.
A TXT record with v=spf1 exists, declaring which servers may send email for this domain.
✓ SPF record found.
A DKIM public key is published at a common selector, enabling email signature verification.
DKIM selector found: selector1._domainkey
A DMARC policy record exists at _dmarc.<domain>, enabling email authentication reporting.
✓ DMARC record found.
IPv4 Baseline
15%The domain has at least one IPv4 address (A DNS record).
✓ 104.26.10.39, 104.26.11.39, 172.67.70.99
Website reachable on port 80 when connecting via IPv4.
✓ HTTP (port 80) responds over IPv4 — 34ms TTFB.
Website reachable on port 443 when connecting via IPv4.
✓ HTTPS (port 443) responds over IPv4 — 164ms TTFB.
Render-Path Dependencies
not weightedAn AAAA record on this domain says nothing about the stylesheets, scripts and fonts the page then loads from somewhere else. Those are scored here, separately, because a blended figure would flatter both numbers. This score does not affect the 90% above.
The dependency chain could not be walked because this check predates dependency scoring. This is recorded as unmeasured rather than counted against the domain.
DNS Resolution Performance
Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.
| Resolver | Transport | A (IPv4) | AAAA (IPv6) | Delta |
|---|---|---|---|---|
| System | Default | 23.59 ms (p95: 26.74) | 21.99 ms (p95: 23.3) | -1.6 ms |
| IPv4 | 84.98 ms (p95: 88.44) | 85.92 ms (p95: 91.77) | +0.9 ms | |
| IPv6 | 87.74 ms (p95: 98.82) | 79.88 ms (p95: 95.64) | -7.9 ms | |
| Cloudflare | IPv4 | 21.97 ms (p95: 22.19) | 22.67 ms (p95: 24.61) | +0.7 ms |
| Cloudflare | IPv6 | 24.23 ms (p95: 30.05) | 21.51 ms (p95: 23.64) | -2.7 ms |
This result is backed by an HMAC-SHA256 signed evidence record. Scan the code or follow the link to verify the audit trail independently.
3758f386-ad49-430b-8b8f-1e6a98eb5815
Errors During Last Check
- SMTP over IPv6 not measurable for msu-edu-my.mail.protection.outlook.com (timeout, 3 attempts) — excluded from scoring.
- STARTTLS over IPv6 not measurable for msu-edu-my.mail.protection.outlook.com (timeout, 3 attempts) — excluded from scoring.
Score History
Check History
Last 4 checks
| Date | Score | Status | Triggered By |
|---|---|---|---|
|
08 Aug 2026 18:32 UTC |
90 % | Full | manual |
|
08 Aug 2026 11:05 UTC |
90 % | Full | manual |
|
01 Aug 2026 03:01 UTC |
82 % | Partial | scheduled |
|
04 Jul 2026 03:51 UTC |
82 % | Partial | manual |