infor.com

Checked 22 October 2026, 09:20 UTC · via 8.8.8.8
!Passed with warnings
31 passed 1 warning 0 failed 3 info

Registration

info

.com generic · Key-Systems GmbH · expires 2033-10-20

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
Key-Systems GmbH
Registered
21 October 1993
Last changed
1 December 2025
Expires
20 October 2033
Status
client delete prohibited, client transfer prohibited
Registry nameservers
ns-111.awsdns-13.com, ns-1297.awsdns-34.org, ns-1834.awsdns-37.co.uk, ns-979.awsdns-58.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2033-10-20 #3
    The registration is valid until 2033-10-20 (2554 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

ns-111.awsdns-13.com, ns-1297.awsdns-34.org, ns-1834.awsdns-37.co.uk, ns-979.awsdns-58.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns-111.awsdns-13.com, ns-1297.awsdns-34.org, ns-1834.awsdns-37.co.uk, ns-979.awsdns-58.net
NS in the zone
ns-111.awsdns-13.com, ns-1297.awsdns-34.org, ns-1834.awsdns-37.co.uk, ns-979.awsdns-58.net
NameserverAddressesNetwork (AS)Glue
ns-111.awsdns-13.com205.251.192.111 2600:9000:5300:6f00::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US205.251.192.111 2600:9000:5300:6f00::1
ns-1297.awsdns-34.org205.251.197.17 2600:9000:5305:1100::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-
ns-1834.awsdns-37.co.uk205.251.199.42 2600:9000:5307:2a00::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-
ns-979.awsdns-58.net205.251.195.211 2600:9000:5303:d300::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-

Checks

  • ✓ 4 nameservers #6
    Delegated to ns-111.awsdns-13.com, ns-1297.awsdns-34.org, ns-1834.awsdns-37.co.uk, ns-979.awsdns-58.net.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 4 IPv4 /24s and 4 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS16509 (AMAZON-02 - Amazon.com, Inc., US): 8 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • ✓ Nameserver names under 4 TLDs #12
    Nameserver names use the TLDs .com, .net, .org, .uk.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

pass

8 of 8 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns-111.awsdns-13.com 205.251.192.111NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-111.awsdns-13.com 2600:9000:5300:6f00::1NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-1297.awsdns-34.org 205.251.197.17NOERROR, 3 ms, authoritativenoyes / yesrefused-
ns-1297.awsdns-34.org 2600:9000:5305:1100::1NOERROR, 4 ms, authoritativenoyes / yesrefused-
ns-1834.awsdns-37.co.uk 205.251.199.42NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-1834.awsdns-37.co.uk 2600:9000:5307:2a00::1NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-979.awsdns-58.net 205.251.195.211NOERROR, 4 ms, authoritativenoyes / yesrefused-
ns-979.awsdns-58.net 2600:9000:5303:d300::1NOERROR, 4 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 8 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 1 · primary ns-1834.awsdns-37.co.uk

Found

Primary (MNAME)
ns-1834.awsdns-37.co.uk
Contact (RNAME)
awsdns-hostmaster.amazon.com
Serial
1
Refresh / retry
7200 s / 900 s
Expire
1209600 s
Negative TTL
86400 s

Serial per nameserver

NameserverSerial
ns-111.awsdns-13.com (205.251.192.111)1
ns-111.awsdns-13.com (2600:9000:5300:6f00::1)1
ns-1297.awsdns-34.org (205.251.197.17)1
ns-1297.awsdns-34.org (2600:9000:5305:1100::1)1
ns-1834.awsdns-37.co.uk (205.251.199.42)1
ns-1834.awsdns-37.co.uk (2600:9000:5307:2a00::1)1
ns-979.awsdns-58.net (205.251.195.211)1
ns-979.awsdns-58.net (2600:9000:5303:d300::1)1

Checks

  • ✓ Serial 1 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 2h, retry 15m, expire 14d, negative TTL 1d.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns-1834.awsdns-37.co.uk is one of the listed nameservers.
  • ✓ Contact awsdns-hostmaster@amazon.com #25
    The SOA RNAME awsdns-hostmaster.amazon.com means awsdns-hostmaster@amazon.com.
  • ✓ Counter serial #26
    The serial 1 is a plain counter.

DNSSEC

info

Signed, DS published at parent

Found

Validated by resolver
yes
Denial of existence
NSEC
Signatures valid until
22 October 2026

DS at the parent

Key tagAlgorithmDigestMatches a key
522ECDSAP256SHA256 (13)SHA256 C761DBE93DE69ED5…yes

DNSKEY in the zone

Key tagRoleAlgorithm
54140ZSK (256)ECDSAP256SHA256 (13)
23293ZSK (256)ECDSAP256SHA256 (13)
522KSK (257)ECDSAP256SHA256 (13)
51885KSK (257)ECDSAP256SHA256 (13)

Checks

  • ✓ Signed and validated #27
    The zone is signed, the parent publishes a DS record, and the resolver validates the answers.
  • ✓ DS matches a key #28
    The DS record at the parent matches a key in the zone: key tag 522 (SHA256).
  • ✓ Modern algorithms #29
    Key algorithms: ECDSAP256SHA256 (13).
  • ✓ Short-lived signatures (online signing) #30
    Signatures are valid for 2h0m0s and created on demand; the current one was made at 2026-10-22 08:20 UTC and expires at 2026-10-22 10:35 UTC.
  • i
    NSEC
    The zone uses NSEC, so its full contents can be listed by walking the NSEC chain. That is fine unless the names are sensitive.
    #31

Records

warn

58 records at the apex

Found

Read from
205.251.192.111:53
TypeValueTTL
SOAns-1834.awsdns-37.co.uk. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400900
NSns-111.awsdns-13.com.172800
NSns-1297.awsdns-34.org.172800
NSns-1834.awsdns-37.co.uk.172800
NSns-979.awsdns-58.net.172800
A3.216.131.24460
MX0 mx1.hc3692-74.iphmx.com.300
MX0 mx2.hc3692-74.iphmx.com.300
MX10 cloudironport.infor.com.300
TXT"+vd6h0Yk5vBtkWo3Y26QLv85oSvOulPxBYtvBVaIEnLq2d3mliMTxqUCB3O4+PJSVd0sCQa6B3LwVkRQ0sBkaw=="3600
TXT"4ZrXYbs7bUKCaJvvgQTzk9U"3600
TXT"MS=ms28887236"3600
TXT"OSSRH-58023"3600
TXT"ZOOM_verify_3nO3g4FER6mMo5VfyEP8tQ"3600
TXT"ZOOM_verify_51HzEZyeQ7-7RuCH56r-ZQ"3600
TXT"adobe-idp-site-verification=ad75e754-8261-40f8-be42-21c399b5b8fd"3600
TXT"amazonses:34wiVAfoxm/mWtOGNA+4r7hfGDiU0DzstKmH1hcdZbM="3600
TXT"amazonses:UXIfQVsdofB8csrzYilROxLG3fap9ZkxCIFuMU2gn0Q=" ""3600
TXT"amazonses:jadFlh9v20v11zmjxXjpzhsahhCJWmbT82H2HxAVjWo=" ""3600
TXT"anthropic-domain-verification-wa3sk7=77Y0vMm4D1Twhcw5EwlgwBmuO"3600
TXT"apple-domain-verification=f9rJt4ZCkhivmrjI"3600
TXT"atlassian-domain-verification=cYYF3oteSlwbhXhdV3PRgGWNLn/T7srNyraQBy2zI1gExGaMl9CL23a5ygw2IhCy"3600
TXT"atlassian-sending-domain-verification=c40a7f0d-5f46-4a9b-a8fb-0f2de10f7e5e"3600
TXT"ca3-b5173f1136854458b7f80d523d015836"3600
TXT"canva-site-verification=ipZh1Rgy6kKo4Ik6e_Uszw"3600
TXT"ciscocidomainverification=45936bdd676f4622cb4040b86144fcd7c178e4550c926062e0e89050659bfe6e"3600
TXT"docker-verification=0b126a7c-1be2-4193-9306-33f0f4bf18c0"3600
TXT"docusign=e75875a0-a664-4862-a8c4-131c7ed1fabf"3600
TXT"facebook-domain-verification=380j9msyhehxyb20ux89wx07jxwa9i"3600
TXT"google-site-verification=h9aj-Xh7InRWWE7snlfDfB-_rBq5_-SiSL8Vf4yszdE"3600
TXT"google-site-verification=mWBCtI2DKcB8lXidIFk-d_F1ZFfEaS1ShxDTgfCl5a4"3600
TXT"google-site-verification=v4GZzWphxvJBF9fO84BO3OU7p1Ley_qRVZQaKOQrrZg"3600
TXT"google-site-verification=zfMLJpluQpXm8qzQSPCj4a95KcHicUaMIOCMUOIu3Yc"3600
TXT"have-i-been-pwned-verification=2bd5d1f0f4b54ff80caf8c58187225e4" ""3600
TXT"infor-cloudsuite-domain-verification=FGGBGPY6UUC7UEGP25NLMCLS46W3ZL4HVDCYC5364QFHWELSR6WTQ9CKD28836LG"3600
TXT"jamf-site-verification=WEd2pWdTxWBJOmcDyCL_Yg"3600
TXT"pardot950892=70d34db5ccde5e8fe58c60907671ee7ff252e4c88a69116e6f14a043ad1e001c"3600
TXT"sending_domain1064382=ab8540b6258066f4e0164f1d9c38ae878185e4efd7e07f8fc531ed1e1c713081"3600
TXT"sitecore-domain-verification=ae07402868c543ebae77b57fe683362d"3600
TXT"smartsheet-gov-site-validation=wukIiYsIqQq4FY06cwh4Wgj2rSMDiJPa"3600
TXT"snowflake-verification=488d1806-01a0-1000-8bc8-000000000420"3600
TXT"teamviewer-sso-verification=3a08a41823fa4338ba08e9346691579f"3600
TXT"twilio-domain-verification=31830950e4f75e8f83a1c0bb02f05471"3600
TXT"v=msv1 t=F5F22873-3F54-475C-9C8D-727C043CDE50"3600
TXT"v=spf1 exists:%{i}.spf.hc3692-74.iphmx.com include:spf.protection.outlook.com include:_spf.salesforce.com ip4:194.149.81.142 ip4:52.41.178.8 ip4:207.54.50.0/23 ip4:207.54.57.0/24 ip4:207.54.58.0/24 -all"3600
TXT"zscaler-verification-145808442-18082025-qmq4gkjugf"3600
CAA0 iodef "mailto:mad@infor.com"300
CAA0 issue "amazon.com"300
CAA0 issue "certainly.com"300
CAA0 issue "comodoca.com"300
CAA0 issue "digicert.com; cansignhttpexchanges=yes"300
CAA0 issue "letsencrypt.org"300
CAA0 issue "sectigo.com"300
CAA0 issuewild "amazon.com"300
CAA0 issuewild "comodoca.com"300
CAA0 issuewild "digicert.com; cansignhttpexchanges=yes"300
CAA0 issuewild "letsencrypt.org"300
CAA0 issuewild "sectigo.com"300

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: A (1m). Low TTLs are useful just before a planned change.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: amazon.com, certainly.com, comodoca.com, digicert.com, letsencrypt.org, sectigo.com.