Guest demo · Read-only access to Pingy’s own website reports. Monitor your website →

pingy.io

Healthy · The latest website check succeeded.

HTTPS / port 443 Checked 44 seconds ago

100%Uptime 24h

445 msAvg. response 24h

12 regionsCheck Regions

—Open incidents

Last collected 18 minutes ago · Oct 30 21:44 UTC

What this means & how to fix it

What the evidence tells you

Visitors can receive different answers when authoritative servers disagree. A delegation or DNSSEC error can make an otherwise running website unreachable.

Suggested next steps

Compare parent delegation with the zone nameservers, then compare A/AAAA records and SOA serials on each server. Check DS/DNSKEY alignment with your DNS provider before changing DNSSEC. Review MX, SPF, and DMARC findings separately for mail.

Evidence collected Oct 30, 2026 21:44 UTC. Current settings may have changed since this check.

A+

DNS Report

Delegation, sync, and records all check out.

Checked 18 minutes ago · 23 passed · 0 warnings · 0 failed

Nameservers

Avg response

29 ms

In sync

Yes

DNSSEC

Off

Mail auth

SPF + DMARC

Open in Dig

1. Authoritative Nameservers

All authoritative ✓

Nameserver	Response	Serial	Auth	TCP	Recursion	IPv6
ns-1106.awsdns-10.org 205.251.196.82	37 ms	1	✓	✓	closed	✓
ns-1990.awsdns-56.co.uk 205.251.199.198	18 ms	1	✓	✓	closed	✓
ns-329.awsdns-41.com 205.251.193.73	18 ms	1	✓	✓	closed	✓
ns-600.awsdns-11.net 205.251.194.88	42 ms	1	✓	✓	closed	✓

Each server is queried directly. Auth = answers with the authority (AA) bit · TCP = answers over TCP · Recursion should be closed on authoritative servers.

2. Parent Delegation

Matches zone ✓

Asked a0.nic.io (a .io zone server) who runs pingy.io — answered in 30ms.

Nameserver	Parent	Zone	Glue
ns-1106.awsdns-10.org	✓	✓	—
ns-1990.awsdns-56.co.uk	✓	✓	—
ns-329.awsdns-41.com	✓	✓	—
ns-600.awsdns-11.net	✓	✓	—

3. SOA Record

Primary (MNAME) ns-1990.awsdns-56.co.uk

Zone contact awsdns-hostmaster@amazon.com

Serial 1

Refresh 2 hours

Retry 15 min

Expire 14 days

Negative-cache TTL 1 days

Read from ns-1106.awsdns-10.org. Timer sanity (RIPE-203 ranges) is graded in the full report below.

4. Mail (MX · SPF · DMARC)

No MX records — this domain doesn’t advertise a mail server.

SPF v=spf1 include:amazonses.com ~all

DMARC v=DMARC1; p=none;

5. Records & Security

pingy.io (A) 18.165.116.105, 18.165.116.49, 18.165.116.67, 18.165.116.89

IPv6 (AAAA) 2600:9000:2500:c00:15:9416:cbc0:93a1, 2600:9000:2500:6000:15:9416:cbc0:93a1, 2600:9000:2500:8400:15:9416:cbc0:93a1, 2600:9000:2500:b000:15:9416:cbc0:93a1, 2600:9000:2500:cc00:15:9416:cbc0:93a1, 2600:9000:2500:7e00:15:9416:cbc0:93a1, 2600:9000:2500:d000:15:9416:cbc0:93a1, 2600:9000:2500:a000:15:9416:cbc0:93a1

www 18.165.116.89, 18.165.116.67, 18.165.116.105, 18.165.116.49

Apex CNAME none (correct)

Record TTL 1 min

DNSSEC not signed

CAA not set

6. Full DNS Report

Every check we ran, DNSStuff-style — direct queries against the parent zone and each authoritative server.

Parent

✓ Delegation found at parent The io zone servers (a0.nic.io) answered in 30ms and delegate pingy.io.

✓ NS records at parent 4 NS record(s) listed at the parent: ns-1106.awsdns-10.org, ns-1990.awsdns-56.co.uk, ns-329.awsdns-41.com, ns-600.awsdns-11.net.

– Glue at parent Glue is not required — the nameservers live outside pingy.io.

✓ Parent and zone NS agree The parent delegation matches the NS records inside the zone exactly.

Nameservers

✓ Multiple nameservers 4 nameservers (RFC 2182 recommends at least 2).

✓ All nameservers respond All 4 nameservers answered our direct queries.

✓ No lame delegations Every listed nameserver answers authoritatively (AA bit set).

✓ Network diversity Nameservers are spread across 4 different /24 networks.

✓ Response time Average 29ms · slowest ns-600.awsdns-11.net at 42ms.

✓ SOA serials in sync All nameservers report serial 1.

✓ A records in sync Every nameserver returns the same address set for pingy.io.

✓ TCP allowed All nameservers answer over TCP (needed for large responses).

✓ Recursion disabled No nameserver answered a recursive query for a foreign zone.

✓ IPv6 reachability 4 of 4 nameservers publish an AAAA record.

SOA

✓ MNAME listed as NS Primary master ns-1990.awsdns-56.co.uk is in the NS set.

– Serial format Serial 1 is not date-encoded (allowed — many providers use unix timestamps or counters).

✓ Refresh interval Refresh interval is 2h (7,200s) — within the recommended 20m–12h.

✓ Retry interval Retry interval is 15m (900s) — within the recommended 2m–2h.

✓ Expire time Expire time is 14d (1,209,600s) — within the recommended 7d–28d.

✓ Negative-cache TTL Negative-cache TTL is 1d (86,400s) — within the recommended 5m–1d.

Mail

– MX records No MX records — mail for pingy.io falls back to its A record (or the domain sends no mail).

✓ SPF record v=spf1 include:amazonses.com ~all

– DMARC record DMARC present but p=none (monitoring only — forged mail is still delivered).

Web

✓ pingy.io resolves pingy.io → 18.165.116.105, 18.165.116.49, 18.165.116.67, 18.165.116.89.

✓ IPv6 (AAAA) pingy.io → 2600:9000:2500:c00:15:9416:cbc0:93a1, 2600:9000:2500:6000:15:9416:cbc0:93a1, 2600:9000:2500:8400:15:9416:cbc0:93a1, 2600:9000:2500:b000:15:9416:cbc0:93a1, 2600:9000:2500:cc00:15:9416:cbc0:93a1, 2600:9000:2500:7e00:15:9416:cbc0:93a1, 2600:9000:2500:d000:15:9416:cbc0:93a1, 2600:9000:2500:a000:15:9416:cbc0:93a1.

✓ www resolves www.pingy.io → 18.165.116.89, 18.165.116.67, 18.165.116.105, 18.165.116.49.

✓ No CNAME at apex The zone apex is not a CNAME.

Security

– DNSSEC signed The zone is not DNSSEC-signed (optional, but prevents spoofed answers).

– CAA records No CAA records — any certificate authority may issue for pingy.io.

7. DNS Health Grade

A+

100/100

Delegation20 / 20

Redundancy20 / 20

Performance20 / 20

Zone Hygiene20 / 20

Security & Mail20 / 20

Recent DNS changes

This report shows the current DNS findings. Pro monitoring tracks changes hourly and alerts you when action is needed.

Back to overview →