baike.baidu.com

Zone baidu.com · Checked 22 October 2026, 07:52 UTC · via 8.8.8.8
!Passed with warnings
22 passed 4 warnings 0 failed 5 info

Registration

info

.com generic · MarkMonitor Information Technology (Shanghai) Co., Ltd. · expires 2028-10-11

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
MarkMonitor Information Technology (Shanghai) Co., Ltd.
Registered
11 October 1999
Last changed
17 August 2026
Expires
11 October 2028
Status
client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
ns1.baidu.com, ns2.baidu.com, ns3.baidu.com, ns4.baidu.com, ns7.baidu.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2028-10-11 #3
    The registration is valid until 2028-10-11 (720 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

ns1.baidu.com, ns2.baidu.com, ns3.baidu.com, ns4.baidu.com, ns7.baidu.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns1.baidu.com, ns2.baidu.com, ns3.baidu.com, ns4.baidu.com, ns7.baidu.com
NS in the zone
dns.baidu.com, ns2.baidu.com, ns3.baidu.com, ns4.baidu.com, ns7.baidu.com
NameserverAddressesNetwork (AS)Glue
dns.baidu.com (zone only)110.242.68.134 240e:bf:b801:1002:0:ff:b024:26deAS4837 CHINA169-Backbone - CHINA UNICOM China169 Backbone, CN AS134768 CHINANET-SHAANXI-CLOUD-BASE - CHINANET SHAANXI province Cloud Base network, CN-
ns1.baidu.com (parent only)110.242.68.134 240e:bf:b801:1002:0:ff:b024:26deAS4837 CHINA169-Backbone - CHINA UNICOM China169 Backbone, CN AS134768 CHINANET-SHAANXI-CLOUD-BASE - CHINANET SHAANXI province Cloud Base network, CN110.242.68.134 240e:bf:b801:1002:0:ff:b024:26de
ns2.baidu.com220.181.33.31 240e:940:603:4:0:ff:b01b:589aAS23724 CHINANET-IDC-BJ-AP - IDC, China Telecommunications Corporation, CN AS4134 CHINANET-BACKBONE - No.31,Jin-rong Street, CN220.181.33.31 240e:940:603:4:0:ff:b01b:589a
ns3.baidu.com36.155.132.78 153.3.238.93AS56046 CMNET-Jiangsu-AP - China Mobile communications corporation, CN AS4837 CHINA169-Backbone - CHINA UNICOM China169 Backbone, CN153.3.238.93 36.155.132.78
ns4.baidu.com111.45.3.226 14.215.178.80AS9808 CHINAMOBILE-CN - China Mobile Communications Group Co., Ltd., CN AS4134 CHINANET-BACKBONE - No.31,Jin-rong Street, CN111.45.3.226 14.215.178.80
ns7.baidu.com14.215.178.80 240e:bf:b801:1002:0:ff:b024:26de 240e:940:603:4:0:ff:b01b:589aAS4134 CHINANET-BACKBONE - No.31,Jin-rong Street, CN AS134768 CHINANET-SHAANXI-CLOUD-BASE - CHINANET SHAANXI province Cloud Base network, CN AS4134 CHINANET-BACKBONE - No.31,Jin-rong Street, CN14.215.178.80 240e:940:603:4:0:ff:b01b:589a 240e:bf:b801:1002:0:ff:b024:26de

Checks

  • ✓ 5 nameservers #6
    Delegated to ns1.baidu.com, ns2.baidu.com, ns3.baidu.com, ns4.baidu.com, ns7.baidu.com.
  • !
    NS sets differ
    The nameservers at the parent and in the zone should be the same. Only at the parent: ns1.baidu.com; only in the zone: dns.baidu.com. dns.baidu.com, ns1.baidu.com, ns2.baidu.com, ns3.baidu.com, ns4.baidu.com, ns7.baidu.com report NS dns.baidu.com ns2.baidu.com ns3.baidu.com ns4.baidu.com ns7.baidu.com.
    #7
  • ✓ Glue present and correct #8
    Glue is published for the nameservers inside the zone: ns1.baidu.com, ns2.baidu.com, ns3.baidu.com, ns4.baidu.com, ns7.baidu.com.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 6 IPv4 /24s and 2 IPv6 /48s.
  • ✓ 6 autonomous systems #11
    The nameservers are spread over: AS134768 (CHINANET-SHAANXI-CLOUD-BASE - CHINANET SHAANXI province Cloud Base network, CN): 3 addresses; AS23724 (CHINANET-IDC-BJ-AP - IDC, China Telecommunications Corporation, CN): 1 address; AS4134 (CHINANET-BACKBONE - No.31,Jin-rong Street, CN): 4 addresses; AS4837 (CHINA169-Backbone - CHINA UNICOM China169 Backbone, CN): 3 addresses; AS56046 (CMNET-Jiangsu-AP - China Mobile communications corporation, CN): 1 address; AS9808 (CHINAMOBILE-CN - China Mobile Communications Group Co., Ltd., CN): 1 address.
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • i
    Partly IPv6
    These nameservers have no IPv6 address: ns3.baidu.com, ns4.baidu.com.
    #13

Nameservers

warn

13 of 13 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
dns.baidu.com 110.242.68.134NOERROR, 195 ms, authoritativenoyes / norefusedbaidu dns
dns.baidu.com 240e:bf:b801:1002:0:ff:b024:26deNOERROR, 159 ms, authoritativenoyes / yesrefusedbaidu dns
ns1.baidu.com 110.242.68.134NOERROR, 198 ms, authoritativenoyes / yesrefused-
ns1.baidu.com 240e:bf:b801:1002:0:ff:b024:26deNOERROR, 170 ms, authoritativenoyes / yesrefusedbaidu dns
ns2.baidu.com 220.181.33.31NOERROR, 199 ms, authoritativenoyes / yesrefusedbaidu dns
ns2.baidu.com 240e:940:603:4:0:ff:b01b:589aNOERROR, 204 ms, authoritativenoyes / yesrefusedbaidu dns
ns3.baidu.com 36.155.132.78NOERROR, 248 ms, authoritativenoyes / yesrefusedbaidu dns
ns3.baidu.com 153.3.238.93NOERROR, 147 ms, authoritativenoyes / yesrefusedbaidu dns
ns4.baidu.com 111.45.3.226NOERROR, 173 ms, authoritativenoyes / yesrefusedbaidu dns
ns4.baidu.com 14.215.178.80NOERROR, 198 ms, authoritativenoyes / yesrefusedbaidu dns
ns7.baidu.com 14.215.178.80NOERROR, 177 ms, authoritativenoyes / yesrefused-
ns7.baidu.com 240e:bf:b801:1002:0:ff:b024:26deNOERROR, 224 ms, authoritativenoyes / yesrefusedbaidu dns
ns7.baidu.com 240e:940:603:4:0:ff:b01b:589aNOERROR, 194 ms, authoritativenoyes / yesrefusedbaidu dns

Checks

  • ✓ All respond #14
    All 13 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: dns.baidu.com: "baidu dns"; ns1.baidu.com: "baidu dns"; ns2.baidu.com: "baidu dns"; ns3.baidu.com: "baidu dns"; ns4.baidu.com: "baidu dns"; ns7.baidu.com: "baidu dns".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • !
    No EDNS
    These nameservers don't support EDNS(0), needed for DNSSEC and answers larger than 512 bytes: dns.baidu.com (110.242.68.134).
    #20
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 2012151583 · primary dns.baidu.com

Found

Primary (MNAME)
dns.baidu.com
Contact (RNAME)
sa.baidu.com
Serial
2012151583
Refresh / retry
300 s / 300 s
Expire
2592000 s
Negative TTL
600 s

Serial per nameserver

NameserverSerial
dns.baidu.com (110.242.68.134)2012151583
dns.baidu.com (240e:bf:b801:1002:0:ff:b024:26de)2012151583
ns1.baidu.com (110.242.68.134)2012151583
ns1.baidu.com (240e:bf:b801:1002:0:ff:b024:26de)2012151583
ns2.baidu.com (220.181.33.31)2012151583
ns2.baidu.com (240e:940:603:4:0:ff:b01b:589a)2012151583
ns3.baidu.com (36.155.132.78)2012151583
ns3.baidu.com (153.3.238.93)2012151583
ns4.baidu.com (111.45.3.226)2012151583
ns4.baidu.com (14.215.178.80)2012151583
ns7.baidu.com (14.215.178.80)2012151583
ns7.baidu.com (240e:bf:b801:1002:0:ff:b024:26de)2012151583
ns7.baidu.com (240e:940:603:4:0:ff:b01b:589a)2012151583

Checks

  • ✓ Serial 2012151583 everywhere #22
    All nameservers serve the same version of the zone.
  • !
    Unusual SOA timers
    refresh 5m is outside 20m–1d; retry 5m should be shorter than refresh 5m. Current values: refresh 5m, retry 5m, expire 30d, negative TTL 10m.
    #23
  • ✓ Primary is a public nameserver #24
    The primary nameserver dns.baidu.com is one of the listed nameservers.
  • ✓ Contact sa@baidu.com #25
    The SOA RNAME sa.baidu.com means sa@baidu.com.
  • ✓ Timestamp serial #26
    The serial 2012151583 is a Unix timestamp (2033-10-05 18:59 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

16 records at the apex

Found

Read from
110.242.68.134:53
TypeValueTTL
SOAdns.baidu.com. sa.baidu.com. 2012151583 300 300 2592000 6007200
NSns3.baidu.com.86400
NSns4.baidu.com.86400
NSns2.baidu.com.86400
NSdns.baidu.com.86400
NSns7.baidu.com.86400
A111.63.65.103600
A124.237.177.164600
A110.242.74.102600
A111.63.65.247600
MX20 mx.baidu.com.600
MX10 mx.maillb.baidu.com.600
TXT"9279nznttl321bxp1j464rd9vpps246v"7200
TXT"google-site-verification=GHb98-6msqyx_qqjGl5eRatD3QTHyVB6-xQ3gJB5UwM"7200
TXT"_globalsign-domain-verification=qjb28W2jJSrWj04NHpB0CvgK9tle5JkOq-EcyWBgnE"7200
TXT"v=spf1 include:spf1.baidu.com include:spf2.baidu.com include:spf3.baidu.com include:spf4.baidu.com -all"7200

Checks

  • ✓ TTLs within range #32
    TTLs: A 10m, MX 10m, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35