invesco.com

Checked 22 October 2026, 09:21 UTC · via 8.8.8.8
!Passed with warnings
27 passed 1 warning 0 failed 3 info

Registration

info

.com generic · Amazon Registrar, Inc. · expires 2027-01-03

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
Amazon Registrar, Inc.
Registered
4 January 1995
Last changed
14 May 2026
Expires
3 January 2027
Status
client transfer prohibited
Registry nameservers
ns-1336.awsdns-39.org, ns-1566.awsdns-03.co.uk, ns-45.awsdns-05.com, ns-740.awsdns-28.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-01-03 #3
    The registration is valid until 2027-01-03 (72 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

ns-1336.awsdns-39.org, ns-1566.awsdns-03.co.uk, ns-45.awsdns-05.com, ns-740.awsdns-28.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns-1336.awsdns-39.org, ns-1566.awsdns-03.co.uk, ns-45.awsdns-05.com, ns-740.awsdns-28.net
NS in the zone
ns-1336.awsdns-39.org, ns-1566.awsdns-03.co.uk, ns-45.awsdns-05.com, ns-740.awsdns-28.net
NameserverAddressesNetwork (AS)Glue
ns-1336.awsdns-39.org205.251.197.56 2600:9000:5305:3800::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-
ns-1566.awsdns-03.co.uk205.251.198.30 2600:9000:5306:1e00::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-
ns-45.awsdns-05.com205.251.192.45 2600:9000:5300:2d00::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US205.251.192.45 2600:9000:5300:2d00::1
ns-740.awsdns-28.net205.251.194.228 2600:9000:5302:e400::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-

Checks

  • ✓ 4 nameservers #6
    Delegated to ns-1336.awsdns-39.org, ns-1566.awsdns-03.co.uk, ns-45.awsdns-05.com, ns-740.awsdns-28.net.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 4 IPv4 /24s and 4 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS16509 (AMAZON-02 - Amazon.com, Inc., US): 8 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • ✓ Nameserver names under 4 TLDs #12
    Nameserver names use the TLDs .com, .net, .org, .uk.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

pass

8 of 8 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns-1336.awsdns-39.org 205.251.197.56NOERROR, 3 ms, authoritativenoyes / yesrefused-
ns-1336.awsdns-39.org 2600:9000:5305:3800::1NOERROR, 5 ms, authoritativenoyes / yesrefused-
ns-1566.awsdns-03.co.uk 205.251.198.30NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-1566.awsdns-03.co.uk 2600:9000:5306:1e00::1NOERROR, 12 ms, authoritativenoyes / yesrefused-
ns-45.awsdns-05.com 205.251.192.45NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-45.awsdns-05.com 2600:9000:5300:2d00::1NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-740.awsdns-28.net 205.251.194.228NOERROR, 3 ms, authoritativenoyes / yesrefused-
ns-740.awsdns-28.net 2600:9000:5302:e400::1NOERROR, 7 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 8 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2021082003 · primary ns-740.awsdns-28.net

Found

Primary (MNAME)
ns-740.awsdns-28.net
Contact (RNAME)
root.invesco.com
Serial
2021082003
Refresh / retry
3600 s / 600 s
Expire
1209600 s
Negative TTL
3600 s

Serial per nameserver

NameserverSerial
ns-1336.awsdns-39.org (205.251.197.56)2021082003
ns-1336.awsdns-39.org (2600:9000:5305:3800::1)2021082003
ns-1566.awsdns-03.co.uk (205.251.198.30)2021082003
ns-1566.awsdns-03.co.uk (2600:9000:5306:1e00::1)2021082003
ns-45.awsdns-05.com (205.251.192.45)2021082003
ns-45.awsdns-05.com (2600:9000:5300:2d00::1)2021082003
ns-740.awsdns-28.net (205.251.194.228)2021082003
ns-740.awsdns-28.net (2600:9000:5302:e400::1)2021082003

Checks

  • ✓ Serial 2021082003 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 1h, retry 10m, expire 14d, negative TTL 1h.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns-740.awsdns-28.net is one of the listed nameservers.
  • ✓ Contact root@invesco.com #25
    The SOA RNAME root.invesco.com means root@invesco.com.
  • ✓ Date-based serial #26
    The serial 2021082003 follows the YYYYMMDDnn convention (2021-08-20).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

51 records at the apex

Found

Read from
205.251.197.56:53
TypeValueTTL
SOAns-740.awsdns-28.net. root.invesco.com. 2021082003 3600 600 1209600 36003600
NSns-1336.awsdns-39.org.172800
NSns-1566.awsdns-03.co.uk.172800
NSns-45.awsdns-05.com.172800
NSns-740.awsdns-28.net.172800
A151.101.66.2033600
A151.101.194.2033600
A151.101.2.2033600
A151.101.130.2033600
MX5 mxa-00192c01.gslb.pphosted.com.3600
MX5 mxb-00192c01.gslb.pphosted.com.3600
TXT"0ed1fe018a0887dbd012f4417abd1ed0fc6ac3bc15"3600
TXT"B0D0-3BFC-957F-4120-9174-EB1F-B04B-4747"3600
TXT"MS=ms73814536"3600
TXT"Yt32kZEe3w8lG57oMDhw"3600
TXT"ZOOM_verify_LOK_-FPSTTSNEcfEQpFH5w?"3600
TXT"_582toizn09dciyw4ub0ivf3z0fbfuom"3600
TXT"_eix3bo5geoon4rhronn7gu0xisktm9m"3600
TXT"_h17c819j8z80qs7i8ohe2gyiunoqwjd"3600
TXT"access-domain-verification=d71737fb529ce5c7553c72fd3d3b643ef0e007acd95acc31a7169ad498ad88a9"3600
TXT"adobe-idp-site-verification=49fc5095970baaf3a829b9a020d9cbbac487855833149cd45dfa086e4bcff797"3600
TXT"anthropic-domain-verification-40vxct=111cg6CTYoZ11VJtCE3wADM9f"3600
TXT"apple-domain-verification=qiFe74GDj9lcq5QQ"3600
TXT"atlassian-domain-verification=9UDAdvBO5oH5pzX2C3zoDWK5LBQzGrN5INpfygwHh2SYVsyi96Y5zNglqetSa5TR"3600
TXT"box-domain-verification=0df9aa37eeb547e75d8827e90542fbb59606d26dbaa7037f998e4a92c90f0f53"3600
TXT"ciscocidomainverification=1c50acf6def3d63a04024503f3b2133d936b815c4ff59e240990fb1559aae8c7"3600
TXT"docusign=06d87594-cb01-4433-a4f5-fc801aa7e954"3600
TXT"docusign=edb27d3a-dfe3-4007-bc36-6b281975146d"3600
TXT"fastly-domain-delegation-FhTy65JBH>-311997-20201112"3600
TXT"fastly-domain-delegation-hgjhh67ifxddsesr-14052020"3600
TXT"fastly-domain-delegation-mkfifhhh7-196823-2019-12-16"3600
TXT"fastly-domain-delegation-ydgvxl3-206786-2020-01-01"3600
TXT"google-site-verification=B6aDoh4fKTGPUmP95xqijr2iuqXHnVmVJI66pxU3-hE"3600
TXT"google-site-verification=OS0RXKKjTuRw8_v_dBw28kK3ZNNlXaH2xteZCuv1OB8"3600
TXT"google-site-verification=RlSD97ZtIk2UxiGw4UzILgi6pk3Wv6gOQI48FGjaBww"3600
TXT"google-site-verification=hsq3TSSFAvQJ2JWqcQ0yj0ZrJjCSMAhKqiC-lz5ndq8"3600
TXT"infoblox-domain-mastery=89610b9b7dbab27da78074c25659690631ce2a161a08d988e2e94bf5385c204e9e"3600
TXT"jamf-site-verification=osSek21Kmq2lajOrxz0ztA"3600
TXT"mf0t0kcgvd7w8413xhxh0ftmp7b9yb5l"3600
TXT"miro-verification=161de9815222b3d8d331ed397e4a0e549440c22e"3600
TXT"oTdo4ejT6+B2GJceCdgcThARVlcf9MfSmV8EKNXIIEKzWVusz7nqpQKOtMPkNVFitxGFmbKsJ5umNOewWLsWcQ=="3600
TXT"onetrust-domain-verification=65039e38e15a4880b34aadc522807812"3600
TXT"onetrust-domain-verification=93590e165fdd4c3e849f3dd6f2d527a8"3600
TXT"pardot481331=ecc4a7c1eb7b8e74a76d3fb409800213a4ba0d67eeb0023fd98bbafd26d0315a"3600
TXT"pardot804743=7672af2a8ae95b771562d3fe67406b2d12fa237993cecf57d6c92fba030ead7c"3600
TXT"poppulo-domain-verification=00a89dc4-b8fa-4027-ab19-536148e2a17b"3600
TXT"remarkable-domain-verification=4d557bb5-c6ab-4c61-8e58-1218de9089a1"3600
TXT"sending_domain804743=ea288518335abc6366fc7fc3714acc39f39e78d32d1b8d7b4cd2e573691e7178"3600
TXT"snowflake-verification=be55348a-01a0-1000-834c-0000000003f7"3600
TXT"v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all"3600
TXT"wdNdcmW9iuAToMYvYlhF5WsF7amLI/8+9wRB56SSr3jktDVpuPWAwTRLxx2umlenpSuQyApiJqkg4MOITj/fAA=="3600

Checks

  • ✓ TTLs within range #32
    TTLs: A 1h, MX 1h, NS 2d.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35