aaa.com

Checked 22 October 2026, 07:34 UTC · via 8.8.8.8
!Passed with warnings
27 passed 1 warning 0 failed 3 info

Registration

info

.com generic · MarkMonitor Inc. · expires 2030-08-02

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
MarkMonitor Inc.
Registered
3 August 1990
Last changed
13 January 2023
Expires
2 August 2030
Status
client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
ns-101.awsdns-12.com, ns-1419.awsdns-49.org, ns-1804.awsdns-33.co.uk, ns-869.awsdns-44.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2030-08-02 #3
    The registration is valid until 2030-08-02 (1379 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

ns-101.awsdns-12.com, ns-1419.awsdns-49.org, ns-1804.awsdns-33.co.uk, ns-869.awsdns-44.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns-101.awsdns-12.com, ns-1419.awsdns-49.org, ns-1804.awsdns-33.co.uk, ns-869.awsdns-44.net
NS in the zone
ns-101.awsdns-12.com, ns-1419.awsdns-49.org, ns-1804.awsdns-33.co.uk, ns-869.awsdns-44.net
NameserverAddressesNetwork (AS)Glue
ns-101.awsdns-12.com205.251.192.101 2600:9000:5300:6500::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US205.251.192.101 2600:9000:5300:6500::1
ns-1419.awsdns-49.org205.251.197.139 2600:9000:5305:8b00::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-
ns-1804.awsdns-33.co.uk205.251.199.12 2600:9000:5307:c00::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-
ns-869.awsdns-44.net205.251.195.101 2600:9000:5303:6500::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-

Checks

  • ✓ 4 nameservers #6
    Delegated to ns-101.awsdns-12.com, ns-1419.awsdns-49.org, ns-1804.awsdns-33.co.uk, ns-869.awsdns-44.net.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 4 IPv4 /24s and 4 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS16509 (AMAZON-02 - Amazon.com, Inc., US): 8 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • ✓ Nameserver names under 4 TLDs #12
    Nameserver names use the TLDs .com, .net, .org, .uk.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

pass

8 of 8 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns-101.awsdns-12.com 205.251.192.101NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-101.awsdns-12.com 2600:9000:5300:6500::1NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-1419.awsdns-49.org 205.251.197.139NOERROR, 3 ms, authoritativenoyes / yesrefused-
ns-1419.awsdns-49.org 2600:9000:5305:8b00::1NOERROR, 4 ms, authoritativenoyes / yesrefused-
ns-1804.awsdns-33.co.uk 205.251.199.12NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-1804.awsdns-33.co.uk 2600:9000:5307:c00::1NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-869.awsdns-44.net 205.251.195.101NOERROR, 4 ms, authoritativenoyes / yesrefused-
ns-869.awsdns-44.net 2600:9000:5303:6500::1NOERROR, 4 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 8 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 1 · primary ns-869.awsdns-44.net

Found

Primary (MNAME)
ns-869.awsdns-44.net
Contact (RNAME)
awsdns-hostmaster.amazon.com
Serial
1
Refresh / retry
7200 s / 900 s
Expire
1209600 s
Negative TTL
86400 s

Serial per nameserver

NameserverSerial
ns-101.awsdns-12.com (205.251.192.101)1
ns-101.awsdns-12.com (2600:9000:5300:6500::1)1
ns-1419.awsdns-49.org (205.251.197.139)1
ns-1419.awsdns-49.org (2600:9000:5305:8b00::1)1
ns-1804.awsdns-33.co.uk (205.251.199.12)1
ns-1804.awsdns-33.co.uk (2600:9000:5307:c00::1)1
ns-869.awsdns-44.net (205.251.195.101)1
ns-869.awsdns-44.net (2600:9000:5303:6500::1)1

Checks

  • ✓ Serial 1 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 2h, retry 15m, expire 14d, negative TTL 1d.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns-869.awsdns-44.net is one of the listed nameservers.
  • ✓ Contact awsdns-hostmaster@amazon.com #25
    The SOA RNAME awsdns-hostmaster.amazon.com means awsdns-hostmaster@amazon.com.
  • ✓ Counter serial #26
    The serial 1 is a plain counter.

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

112 records at the apex

Found

Read from
205.251.192.101:53
TypeValueTTL
SOAns-869.awsdns-44.net. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400900
NSns-101.awsdns-12.com.172800
NSns-1419.awsdns-49.org.172800
NSns-1804.awsdns-33.co.uk.172800
NSns-869.awsdns-44.net.172800
A45.60.62.121300
A45.60.107.121300
TXT"150728"300
TXT"1hnl1iu1l42qeatttltda7ss9p"300
TXT"247j5tj5v903f1x20v89rggfdhwpgv75"300
TXT"2AD6-6EAE-E938-0DDC-09B5-1B13-7270-65FE"300
TXT"3i37j35k04dlke4189evt2nird"300
TXT"44D1-08A4-B4FB-B689-D5DC-E966-CBC2-30FE"300
TXT"4me2mkom8pdsuu32ln7qk1uld"300
TXT"4q666jpvpvqzzzcc6nzd4fsx67hlyqlj"300
TXT"66lv5gxvd8xmk6rw81lwgb9kfxf9j7nl"300
TXT"6gsgegs476iviuqa9r6uupf3ou"300
TXT"6p8sc7wr41wbbw73d3ljqry0x5pph1hs"300
TXT"6urjouvfrdi6ph2fjftr8ek67e"300
TXT"8p7amcv4i9ksacqnmpn89desv4"300
TXT"9o54qj4fm74ig2jdntiqabqbg6"300
TXT"9xj7k916bqtwy74zjs2q4bz2dnt94wrl"300
TXT"D39B-6EDE-D147-F843-551C-3F44-3579-8D1F"300
TXT"FA38-6E17-227C-1BC1-5A14-B8D7-B0EB-3AE5"300
TXT"Probely=d29279f1-ac8b-415f-a6e1-f10422f3f104"300
TXT"_1zzk2uuiyxhlehwepmqjv1aded69msa"300
TXT"_2anvbln3dm65rhswca0u9j2sjablzvl"300
TXT"_2fyzblq0kuuopng1jjid812n6fvlkws"300
TXT"_2j871yc4531neszv94e0vibgou94xui"300
TXT"_4zi1d16h05wgvuj1iy6zfwcwhnbj0ir"300
TXT"_5p9bawuh1canl3wilv6jq2ws0diadmx"300
TXT"_694xgi88d7hjll4nfhcssko7oj21kqk"300
TXT"_6uxkxuo7y5pg5tkdekey69cwarjllhs"300
TXT"_7991b7sklpb1xxhbmceqcigvpbgmhtj"300
TXT"_7s6txocg34ar7mn77crguq3z1yi9tzm"300
TXT"_9iigm039ajwgnm8nufkvsgcw833njoy"300
TXT"_bm1xp2bkquetsbl6t32iamqo4s3rsan"300
TXT"_cvtc4y65c07l0ocw0m3k1fb451a6wox"300
TXT"_dy8qlhkk1x8k9eike8jj0hapef3m2ps"300
TXT"_ecrd2haar9p4l1ju99d80g0bb2ee6if"300
TXT"_fd2w4ldtj9qp9sf7yx0po5ehvcwctsd"300
TXT"_ijy4yoqjzzbxkiwitbcbsizx8rm29jm"300
TXT"_kkidwrjf8vbef7sg0rx49rlhmdsb0sa"300
TXT"_lw7kb3cizh27m29ycon3f9bvfu136ia"300
TXT"_mar3kjnwam2nwdc7k8brf2c25k41w5y"300
TXT"_nzcjdzvkykcp3g14tkik9je883ixt1z"300
TXT"_qhdc659jevhj9smp4hvv2hcbih3psss"300
TXT"_refx100r9e8dfv2jwhqni8pwyulel72"300
TXT"_rt90shaltf93icykr0tl0bbif7lk634.dcv.digicert.com"300
TXT"_uhflfmq9p24lh4g8ny4s3nrh95eiq4g"300
TXT"_vj4mrlppcbgu25uopwy8la6smnwctae"300
TXT"_vsbg4qprw1qy50breoqbs6b9g7mp07m"300
TXT"_vtesmahxs5x1ho5ba1uf80nchnmp2ud"300
TXT"_wxbqm8bxlci7wldoynia4pl3u6r0dsp"300
TXT"_xfhu50tn45j4q811znt9rgdpu22ua3q"300
TXT"_y2xw1wbr4ed0uw9wpp03w5jwzrvdtka"300
TXT"_yzin11c5ohiq57qfp3f80sc1lcupgl6"300
TXT"apple-domain-verification=eTs6_6qi7-ojZijObIhbxo8ISMz4ELuwAEELFO_ynF4"300
TXT"apq4t1i0612g9pc69b4pkj2s2r"300
TXT"btqoob4ppn4g5rqapic2hlkhfv"300
TXT"cfeq5hfk1por6ljt48705ei6lm"300
TXT"d4mrr8v45be5suh8qit6bm0c2j"300
TXT"d9b6pe36c6lnudlcaijo6s7nqk"300
TXT"ekcv6rc9d44ttqocfehvr3m8vr"300
TXT"eqf9c3ovro1sldh3cm6urvfbqt"300
TXT"fdveja64jlfcs0hv13i9pd34kq"300
TXT"gh2mosm9fi3b9f96eltjuvf622"300
TXT"glc9ujvhvs94hr6oj2id094qu3"300
TXT"globalsign-domain-verification=019B51DB81549AB5B136CA895694A228"300
TXT"globalsign-domain-verification=0E35B95A68BF8FCC953DF6B8F1A059DC"300
TXT"globalsign-domain-verification=4505B6176711A82ADC8D60B4363D8F3E"300
TXT"globalsign-domain-verification=48973C890E7BD907458E4E0592AC20C9"300
TXT"globalsign-domain-verification=71CD84CCBC933FEF6161FE6A2B6019EA"300
TXT"globalsign-domain-verification=A5045ABFB443F72B01DE0BD1DD62FEFF"300
TXT"globalsign-domain-verification=AB9215594777E3E32FCA222DDBDD081E"300
TXT"globalsign-domain-verification=B7C096A9898CF04CB962AC858D3E5FE7"300
TXT"globalsign-domain-verification=C28CC827BEED534A45F396CCB8D89FF7"300
TXT"globalsign-domain-verification=C96EE28932126E05C0111FFC9BEAB6E2"300
TXT"globalsign-domain-verification=F5A29A8B70FF844C08B614F2A660A3FC"300
TXT"globalsign-domain-verification=f1074ed7a09f78f15fcca26f83c3f9fc"300
TXT"gn2s6dcc7n4nm3089p8s3hbjlq401nnf"300
TXT"goj6fbge09am2lis5gufb5bt3f"300
TXT"google-gws-recovery-domain-verification=62088695"300
TXT"google-site-verification=4Xoi8EfC8puTbWE5GnOLIvt4wux4vSXv5sNYtm13i8k"300
TXT"google-site-verification=OXZwE8L4XGZTwueJC7sz2D23npDVx3QhlUxS0DY7QRs"300
TXT"google-site-verification=bkLaSD15dzk-m2Mu3hbs76P1s9_LkLG_Hf9hPUJi1kQ"300
TXT"google-site-verification=dY3jMjQv0p6B_62uSI8kwXUHZ4YOGlqVB4kwzeCpHZw"300
TXT"google-site-verification=nid6eJqErYGyq5YSiKuVUSWGaDXUdVmAaaDLKLxrzTc"300
TXT"google-site-verification=nxm7rcXKT1VfSxCnCFVQ9j-CrM-huAQCJJhJf5-Jc7g"300
TXT"google-site-verification=vnsvEx6eHqPU8yeJYitByKHKwGHxjifIHBZEDTWp1DY"300
TXT"i6tfto0br3dphasqcb0p2hpqau"300
TXT"iqju6lv9evd473jgftem71anvb"300
TXT"khj670qif50j8omlecjbbgdv1d"300
TXT"l01ra88of48f21tbbq65s1ubvc"300
TXT"l8g4g54j6m65d8ffnn6jvacnk7"300
TXT"lmvin4nlenn01arknb6brnajun"300
TXT"mag53fiu406847ffp1cev373bq"300
TXT"mlnt15nn383ntijc460iqim97a"300
TXT"nibameu803d8nvsfi0e8rt1kb2"300
TXT"p5scwcz5tw0ctsr01n2yt22yxc2jb2fh"300
TXT"pmssebmo51tnjt478lggsg9tp7"300
TXT"rbf8wq0dhvpb2mchwdqcgs6x9g4626z1"300
TXT"t1ypxdg8bg3r7r71mqfn2g5p968sy1fm"300
TXT"v8hr8l054k3cqzqck40cr0ljm37zkst3"300
TXT"vc-domain-verify=dev.southjersey.aaa.com,500e7e9dee3c778d3d33"300
TXT"vc-domain-verify=membership.southjersey.aaa.com,e2d1f31eea92601ec57c"300
TXT"vc-domain-verify=test.southjersey.aaa.com,8c6c51f0b9aecff2091e"300
TXT"vnsvEx6eHqPU8yeJYitByKHKwGHxjifIHBZEDTWp1DY"300
TXT"vovhb3qkr9kmbjq4o82ulpghkh"300
TXT"wz1rkpvpvvfzh1f9f4z8rg4sztwdywfj"300
TXT"xpzkvf98mkw4mtsbjm188cs76fdlvwrq"300
TXT"zscaler-verification-134272523-11062025-K#7B310NR"300

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, NS 2d.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35