720yun.com

Zone com · Checked 22 October 2026, 07:33 UTC · via 8.8.8.8
!Passed with warnings
26 passed 2 warnings 0 failed 5 info

Registration

info

.com generic

Found

TLD
.com (generic)
ICANN policies apply
yes

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • i
    Registration data not available
    No registration data via RDAP: no RDAP record found for domain: com. Many ccTLD registries don't offer RDAP; check the registry's WHOIS instead.
    #3

Delegation

info

a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net

Found

Parent zone
.
Delegation from
a.root-servers.net (198.41.0.4)
NS at the parent
a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
NS in the zone
a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
NameserverAddressesNetwork (AS)Glue
a.gtld-servers.net192.5.6.30 2001:503:a83e::2:30AS396549 VRSN-AC50-340 - VeriSign Global Registry Services, US AS10515 CLT-NIC - VeriSign Infrastructure & Operations, US192.5.6.30 2001:503:a83e::2:30
b.gtld-servers.net192.33.14.30 2001:503:231d::2:30AS36617 AGTLD - VeriSign Global Registry Services, US AS36617 AGTLD - VeriSign Global Registry Services, US192.33.14.30 2001:503:231d::2:30
c.gtld-servers.net192.26.92.30 2001:503:83eb::30AS396549 VRSN-AC50-340 - VeriSign Global Registry Services, US AS10515 CLT-NIC - VeriSign Infrastructure & Operations, US192.26.92.30 2001:503:83eb::30
d.gtld-servers.net192.31.80.30 2001:500:856e::30AS396549 VRSN-AC50-340 - VeriSign Global Registry Services, US AS10515 CLT-NIC - VeriSign Infrastructure & Operations, US192.31.80.30 2001:500:856e::30
e.gtld-servers.net192.12.94.30 2001:502:1ca1::30AS396549 VRSN-AC50-340 - VeriSign Global Registry Services, US AS10515 CLT-NIC - VeriSign Infrastructure & Operations, US192.12.94.30 2001:502:1ca1::30
f.gtld-servers.net192.35.51.30 2001:503:d414::30AS36631 ZGTLD - VeriSign Global Registry Services, US AS36631 ZGTLD - VeriSign Global Registry Services, US192.35.51.30 2001:503:d414::30
g.gtld-servers.net192.42.93.30 2001:503:eea3::30AS36631 ZGTLD - VeriSign Global Registry Services, US AS36631 ZGTLD - VeriSign Global Registry Services, US192.42.93.30 2001:503:eea3::30
h.gtld-servers.net192.54.112.30 2001:502:8cc::30AS36631 ZGTLD - VeriSign Global Registry Services, US AS36631 ZGTLD - VeriSign Global Registry Services, US192.54.112.30 2001:502:8cc::30
i.gtld-servers.net192.43.172.30 2001:503:39c1::30AS36631 ZGTLD - VeriSign Global Registry Services, US AS36631 ZGTLD - VeriSign Global Registry Services, US192.43.172.30 2001:503:39c1::30
j.gtld-servers.net192.48.79.30 2001:502:7094::30AS19836 VERISIGNGRS - VeriSign Infrastructure & Operations, US AS19836 VERISIGNGRS - VeriSign Infrastructure & Operations, US192.48.79.30 2001:502:7094::30
k.gtld-servers.net192.52.178.30 2001:503:d2d::30AS19836 VERISIGNGRS - VeriSign Infrastructure & Operations, US AS19836 VERISIGNGRS - VeriSign Infrastructure & Operations, US192.52.178.30 2001:503:d2d::30
l.gtld-servers.net192.41.162.30 2001:500:d937::30AS19836 VERISIGNGRS - VeriSign Infrastructure & Operations, US AS19836 VERISIGNGRS - VeriSign Infrastructure & Operations, US192.41.162.30 2001:500:d937::30
m.gtld-servers.net192.55.83.30 2001:501:b1f9::30AS19836 VERISIGNGRS - VeriSign Infrastructure & Operations, US AS19836 VERISIGNGRS - VeriSign Infrastructure & Operations, US192.55.83.30 2001:501:b1f9::30

Checks

  • ✓ 13 nameservers #6
    Delegated to a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 13 IPv4 /24s and 13 IPv6 /48s.
  • ✓ 5 autonomous systems #11
    The nameservers are spread over: AS10515 (CLT-NIC - VeriSign Infrastructure & Operations, US): 4 addresses; AS19836 (VERISIGNGRS - VeriSign Infrastructure & Operations, US): 8 addresses; AS36617 (AGTLD - VeriSign Global Registry Services, US): 2 addresses; AS36631 (ZGTLD - VeriSign Global Registry Services, US): 8 addresses; AS396549 (VRSN-AC50-340 - VeriSign Global Registry Services, US): 4 addresses.
  • i
    All nameserver names under .net
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

info

26 of 26 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
a.gtld-servers.net 192.5.6.30NOERROR, 18 ms, authoritativenoyes / yesrefusedATLAS
a.gtld-servers.net 2001:503:a83e::2:30NOERROR, 15 ms, authoritativenoyes / yesrefusedATLAS
b.gtld-servers.net 192.33.14.30NOERROR, 38 ms, authoritativenoyes / yesrefusedATLAS
b.gtld-servers.net 2001:503:231d::2:30NOERROR, 34 ms, authoritativenoyes / yesrefusedATLAS
c.gtld-servers.net 192.26.92.30NOERROR, 16 ms, authoritativenoyes / yesrefusedATLAS
c.gtld-servers.net 2001:503:83eb::30NOERROR, 15 ms, authoritativenoyes / yesrefusedATLAS
d.gtld-servers.net 192.31.80.30NOERROR, 18 ms, authoritativenoyes / yesrefusedATLAS
d.gtld-servers.net 2001:500:856e::30NOERROR, 15 ms, authoritativenoyes / yesrefusedATLAS
e.gtld-servers.net 192.12.94.30NOERROR, 18 ms, authoritativenoyes / yesrefusedATLAS
e.gtld-servers.net 2001:502:1ca1::30NOERROR, 14 ms, authoritativenoyes / yesrefusedATLAS
f.gtld-servers.net 192.35.51.30NOERROR, 16 ms, authoritativenoyes / yesrefusedATLAS
f.gtld-servers.net 2001:503:d414::30NOERROR, 20 ms, authoritativenoyes / yesrefusedATLAS
g.gtld-servers.net 192.42.93.30NOERROR, 15 ms, authoritativenoyes / yesrefusedATLAS
g.gtld-servers.net 2001:503:eea3::30NOERROR, 20 ms, authoritativenoyes / yesrefusedATLAS
h.gtld-servers.net 192.54.112.30NOERROR, 12 ms, authoritativenoyes / yesrefusedATLAS
h.gtld-servers.net 2001:502:8cc::30NOERROR, 20 ms, authoritativenoyes / yesrefusedATLAS
i.gtld-servers.net 192.43.172.30NOERROR, 15 ms, authoritativenoyes / yesrefusedATLAS
i.gtld-servers.net 2001:503:39c1::30NOERROR, 20 ms, authoritativenoyes / yesrefusedATLAS
j.gtld-servers.net 192.48.79.30NOERROR, 4 ms, authoritativenoyes / yesrefusedATLAS
j.gtld-servers.net 2001:502:7094::30NOERROR, 4 ms, authoritativenoyes / yesrefusedATLAS
k.gtld-servers.net 192.52.178.30NOERROR, 4 ms, authoritativenoyes / yesrefusedATLAS
k.gtld-servers.net 2001:503:d2d::30NOERROR, 5 ms, authoritativenoyes / yesrefusedATLAS
l.gtld-servers.net 192.41.162.30NOERROR, 5 ms, authoritativenoyes / yesrefusedATLAS
l.gtld-servers.net 2001:500:d937::30NOERROR, 5 ms, authoritativenoyes / yesrefusedATLAS
m.gtld-servers.net 192.55.83.30NOERROR, 4 ms, authoritativenoyes / yesrefusedATLAS
m.gtld-servers.net 2001:501:b1f9::30NOERROR, 4 ms, authoritativenoyes / yesrefusedATLAS

Checks

  • ✓ All respond #14
    All 26 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: a.gtld-servers.net: "ATLAS"; b.gtld-servers.net: "ATLAS"; c.gtld-servers.net: "ATLAS"; d.gtld-servers.net: "ATLAS"; e.gtld-servers.net: "ATLAS"; f.gtld-servers.net: "ATLAS"; g.gtld-servers.net: "ATLAS"; h.gtld-servers.net: "ATLAS"; i.gtld-servers.net: "ATLAS"; j.gtld-servers.net: "ATLAS"; k.gtld-servers.net: "ATLAS"; l.gtld-servers.net: "ATLAS"; m.gtld-servers.net: "ATLAS".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 1792654401 · primary a.gtld-servers.net

Found

Primary (MNAME)
a.gtld-servers.net
Contact (RNAME)
nstld.verisign-grs.com
Serial
1792654401
Refresh / retry
1800 s / 900 s
Expire
604800 s
Negative TTL
900 s

Serial per nameserver

NameserverSerial
a.gtld-servers.net (192.5.6.30)1792654401
a.gtld-servers.net (2001:503:a83e::2:30)1792654386
b.gtld-servers.net (192.33.14.30)1792654401
b.gtld-servers.net (2001:503:231d::2:30)1792654401
c.gtld-servers.net (192.26.92.30)1792654401
c.gtld-servers.net (2001:503:83eb::30)1792654401
d.gtld-servers.net (192.31.80.30)1792654401
d.gtld-servers.net (2001:500:856e::30)1792654401
e.gtld-servers.net (192.12.94.30)1792654401
e.gtld-servers.net (2001:502:1ca1::30)1792654401
f.gtld-servers.net (192.35.51.30)1792654386
f.gtld-servers.net (2001:503:d414::30)1792654386
g.gtld-servers.net (192.42.93.30)1792654401
g.gtld-servers.net (2001:503:eea3::30)1792654401
h.gtld-servers.net (192.54.112.30)1792654401
h.gtld-servers.net (2001:502:8cc::30)1792654401
i.gtld-servers.net (192.43.172.30)1792654401
i.gtld-servers.net (2001:503:39c1::30)1792654401
j.gtld-servers.net (192.48.79.30)1792654401
j.gtld-servers.net (2001:502:7094::30)1792654401
k.gtld-servers.net (192.52.178.30)1792654401
k.gtld-servers.net (2001:503:d2d::30)1792654401
l.gtld-servers.net (192.41.162.30)1792654401
l.gtld-servers.net (2001:500:d937::30)1792654401
m.gtld-servers.net (192.55.83.30)1792654401
m.gtld-servers.net (2001:501:b1f9::30)1792654401

Checks

  • !
    Serials differ
    The nameservers serve different versions of the zone: 1792654386 on a.gtld-servers.net (2001:503:a83e::2:30), f.gtld-servers.net (192.35.51.30), f.gtld-servers.net (2001:503:d414::30); 1792654401 on a.gtld-servers.net (192.5.6.30), b.gtld-servers.net (192.33.14.30), b.gtld-servers.net (2001:503:231d::2:30), c.gtld-servers.net (192.26.92.30), c.gtld-servers.net (2001:503:83eb::30), d.gtld-servers.net (192.31.80.30), d.gtld-servers.net (2001:500:856e::30), e.gtld-servers.net (192.12.94.30), e.gtld-servers.net (2001:502:1ca1::30), g.gtld-servers.net (192.42.93.30), g.gtld-servers.net (2001:503:eea3::30), h.gtld-servers.net (192.54.112.30), h.gtld-servers.net (2001:502:8cc::30), i.gtld-servers.net (192.43.172.30), i.gtld-servers.net (2001:503:39c1::30), j.gtld-servers.net (192.48.79.30), j.gtld-servers.net (2001:502:7094::30), k.gtld-servers.net (192.52.178.30), k.gtld-servers.net (2001:503:d2d::30), l.gtld-servers.net (192.41.162.30), l.gtld-servers.net (2001:500:d937::30), m.gtld-servers.net (192.55.83.30), m.gtld-servers.net (2001:501:b1f9::30). This is normal for a few minutes after a change; if it lasts, zone transfers to the secondaries are failing.
    #22
  • ✓ Timers within recommendations #23
    SOA refresh 30m, retry 15m, expire 7d, negative TTL 15m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver a.gtld-servers.net is one of the listed nameservers.
  • ✓ Contact nstld@verisign-grs.com #25
    The SOA RNAME nstld.verisign-grs.com means nstld@verisign-grs.com.
  • ✓ Timestamp serial #26
    The serial 1792654401 is a Unix timestamp (2026-10-22 07:33 UTC).

DNSSEC

warn

Signed, DS published at parent

Found

Validated by resolver
yes
Denial of existence
NSEC3
NSEC3
0 iterations, 0-byte salt
Signatures valid until
29 October 2026

DS at the parent

Key tagAlgorithmDigestMatches a key
19718ECDSAP256SHA256 (13)SHA256 8ACBB0CD28F41250…yes

DNSKEY in the zone

Key tagRoleAlgorithm
65344ZSK (256)ECDSAP256SHA256 (13)
19718KSK (257)ECDSAP256SHA256 (13)

Checks

  • ✓ Signed and validated #27
    The zone is signed, the parent publishes a DS record, and the resolver validates the answers.
  • ✓ DS matches a key #28
    The DS record at the parent matches a key in the zone: key tag 19718 (SHA256).
  • ✓ Modern algorithms #29
    Key algorithms: ECDSAP256SHA256 (13).
  • !
    Signatures expire soon
    The earliest signature expires at 2026-10-29 07:33 UTC (in 168h0m0s). Check that automatic re-signing works.
    #30
  • ✓ NSEC3 as recommended #31
    The zone uses NSEC3 with 0 iterations and no salt (RFC 9276).

Records

info

14 records at the apex

Found

Read from
192.5.6.30:53
TypeValueTTL
SOAa.gtld-servers.net. nstld.verisign-grs.com. 1792654401 1800 900 604800 900900
NSg.gtld-servers.net.172800
NSj.gtld-servers.net.172800
NSl.gtld-servers.net.172800
NSa.gtld-servers.net.172800
NSh.gtld-servers.net.172800
NSf.gtld-servers.net.172800
NSe.gtld-servers.net.172800
NSm.gtld-servers.net.172800
NSi.gtld-servers.net.172800
NSd.gtld-servers.net.172800
NSc.gtld-servers.net.172800
NSb.gtld-servers.net.172800
NSk.gtld-servers.net.172800

Checks

  • ✓ TTLs within range #32
    TTLs: NS 2d.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35