ionos.com

Checked 22 October 2026, 09:21 UTC · via 8.8.8.8
!Passed with warnings
31 passed 2 warnings 0 failed 2 info

Registration

info

.com generic · World4You Internet Services GmbH · expires 2029-03-01

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
World4You Internet Services GmbH
Registered
29 February 2000
Last changed
29 June 2026
Expires
1 March 2029
Status
client transfer prohibited
Registry nameservers
ns-1and1.ui-dns.biz, ns-1and1.ui-dns.com, ns-1and1.ui-dns.de, ns-1and1.ui-dns.org
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2029-03-01 #3
    The registration is valid until 2029-03-01 (860 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

ns-1and1.ui-dns.biz, ns-1and1.ui-dns.com, ns-1and1.ui-dns.de, ns-1and1.ui-dns.org

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns-1and1.ui-dns.biz, ns-1and1.ui-dns.com, ns-1and1.ui-dns.de, ns-1and1.ui-dns.org
NS in the zone
ns-1and1.ui-dns.biz, ns-1and1.ui-dns.com, ns-1and1.ui-dns.de, ns-1and1.ui-dns.org
NameserverAddressesNetwork (AS)Glue
ns-1and1.ui-dns.biz217.160.81.200 185.132.33.200 2607:f1c0:fe:53:185:132:33:200 2001:8d8:fe:53:0:d9a0:51c8:100AS8560 IONOS-AS - IONOS SE, DE AS15418 IONOS-ANYCAST - Fasthosts Internet Limited, GB AS15418 IONOS-ANYCAST - Fasthosts Internet Limited, GB AS8560 IONOS-AS - IONOS SE, DE-
ns-1and1.ui-dns.com185.132.34.200 217.160.82.200 2001:8d8:fe:53:0:d9a0:52c8:100 2607:f1c0:fe:53:185:132:34:200AS15418 IONOS-ANYCAST - Fasthosts Internet Limited, GB AS8560 IONOS-AS - IONOS SE, DE AS8560 IONOS-AS - IONOS SE, DE AS15418 IONOS-ANYCAST - Fasthosts Internet Limited, GB217.160.82.200
ns-1and1.ui-dns.de185.132.32.200 217.160.80.200 2001:8d8:fe:53:0:d9a0:50c8:100 2607:f1c0:fe:53:185:132:32:200AS15418 IONOS-ANYCAST - Fasthosts Internet Limited, GB AS8560 IONOS-AS - IONOS SE, DE AS8560 IONOS-AS - IONOS SE, DE AS15418 IONOS-ANYCAST - Fasthosts Internet Limited, GB-
ns-1and1.ui-dns.org217.160.83.200 185.132.35.200 2001:8d8:fe:53:0:d9a0:53c8:100 2607:f1c0:fe:53:185:132:35:200AS8560 IONOS-AS - IONOS SE, DE AS15418 IONOS-ANYCAST - Fasthosts Internet Limited, GB AS8560 IONOS-AS - IONOS SE, DE AS15418 IONOS-ANYCAST - Fasthosts Internet Limited, GB-

Checks

  • ✓ 4 nameservers #6
    Delegated to ns-1and1.ui-dns.biz, ns-1and1.ui-dns.com, ns-1and1.ui-dns.de, ns-1and1.ui-dns.org.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • !
    Glue differs from the zone
    The addresses at the parent (glue) differ from the addresses in the zone: ns-1and1.ui-dns.com (glue 217.160.82.200, zone 185.132.34.200, 217.160.82.200, 2001:8d8:fe:53:0:d9a0:52c8:100, 2607:f1c0:fe:53:185:132:34:200). Update the glue at your registrar.
    #8
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 8 IPv4 /24s and 2 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS15418 (IONOS-ANYCAST - Fasthosts Internet Limited, GB): 8 addresses; AS8560 (IONOS-AS - IONOS SE, DE): 8 addresses.
  • ✓ Nameserver names under 4 TLDs #12
    Nameserver names use the TLDs .biz, .com, .de, .org.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

info

16 of 16 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns-1and1.ui-dns.biz 217.160.81.200NOERROR, 9 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-1and1.ui-dns.biz 185.132.33.200NOERROR, 4 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-1and1.ui-dns.biz 2607:f1c0:fe:53:185:132:33:200NOERROR, 5 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-1and1.ui-dns.biz 2001:8d8:fe:53:0:d9a0:51c8:100NOERROR, 10 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-1and1.ui-dns.com 185.132.34.200NOERROR, 5 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-1and1.ui-dns.com 217.160.82.200NOERROR, 9 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-1and1.ui-dns.com 2001:8d8:fe:53:0:d9a0:52c8:100NOERROR, 10 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-1and1.ui-dns.com 2607:f1c0:fe:53:185:132:34:200NOERROR, 5 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-1and1.ui-dns.de 185.132.32.200NOERROR, 4 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-1and1.ui-dns.de 217.160.80.200NOERROR, 9 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-1and1.ui-dns.de 2001:8d8:fe:53:0:d9a0:50c8:100NOERROR, 9 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-1and1.ui-dns.de 2607:f1c0:fe:53:185:132:32:200NOERROR, 4 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-1and1.ui-dns.org 217.160.83.200NOERROR, 9 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-1and1.ui-dns.org 185.132.35.200NOERROR, 3 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-1and1.ui-dns.org 2001:8d8:fe:53:0:d9a0:53c8:100NOERROR, 10 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-1and1.ui-dns.org 2607:f1c0:fe:53:185:132:35:200NOERROR, 4 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/

Checks

  • ✓ All respond #14
    All 16 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: ns-1and1.ui-dns.biz: "Served by PowerDNS - https://www.powerdns.com/"; ns-1and1.ui-dns.com: "Served by PowerDNS - https://www.powerdns.com/"; ns-1and1.ui-dns.de: "Served by PowerDNS - https://www.powerdns.com/"; ns-1and1.ui-dns.org: "Served by PowerDNS - https://www.powerdns.com/".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2018065656 · primary ns-1and1.ui-dns.com

Found

Primary (MNAME)
ns-1and1.ui-dns.com
Contact (RNAME)
dnsadmin.1and1.com
Serial
2018065656
Refresh / retry
14400 s / 3600 s
Expire
605000 s
Negative TTL
600 s

Serial per nameserver

NameserverSerial
ns-1and1.ui-dns.biz (217.160.81.200)2018065656
ns-1and1.ui-dns.biz (185.132.33.200)2018065656
ns-1and1.ui-dns.biz (2607:f1c0:fe:53:185:132:33:200)2018065656
ns-1and1.ui-dns.biz (2001:8d8:fe:53:0:d9a0:51c8:100)2018065656
ns-1and1.ui-dns.com (185.132.34.200)2018065656
ns-1and1.ui-dns.com (217.160.82.200)2018065656
ns-1and1.ui-dns.com (2001:8d8:fe:53:0:d9a0:52c8:100)2018065656
ns-1and1.ui-dns.com (2607:f1c0:fe:53:185:132:34:200)2018065656
ns-1and1.ui-dns.de (185.132.32.200)2018065656
ns-1and1.ui-dns.de (217.160.80.200)2018065656
ns-1and1.ui-dns.de (2001:8d8:fe:53:0:d9a0:50c8:100)2018065656
ns-1and1.ui-dns.de (2607:f1c0:fe:53:185:132:32:200)2018065656
ns-1and1.ui-dns.org (217.160.83.200)2018065656
ns-1and1.ui-dns.org (185.132.35.200)2018065656
ns-1and1.ui-dns.org (2001:8d8:fe:53:0:d9a0:53c8:100)2018065656
ns-1and1.ui-dns.org (2607:f1c0:fe:53:185:132:35:200)2018065656

Checks

  • ✓ Serial 2018065656 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 4h, retry 1h, expire 168h3m20s, negative TTL 10m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns-1and1.ui-dns.com is one of the listed nameservers.
  • ✓ Contact dnsadmin@1and1.com #25
    The SOA RNAME dnsadmin.1and1.com means dnsadmin@1and1.com.
  • ✓ Timestamp serial #26
    The serial 2018065656 is a Unix timestamp (2033-12-13 05:47 UTC).

DNSSEC

warn

Signed, DS published at parent

Found

Validated by resolver
yes
Denial of existence
NSEC3
NSEC3
0 iterations, 0-byte salt
Signatures valid until
29 October 2026

DS at the parent

Key tagAlgorithmDigestMatches a key
62144RSASHA256 (8)SHA256 58447B58DA123C12…yes

DNSKEY in the zone

Key tagRoleAlgorithm
49923ZSK (256)RSASHA256 (8)
62144KSK (257)RSASHA256 (8)

Checks

  • ✓ Signed and validated #27
    The zone is signed, the parent publishes a DS record, and the resolver validates the answers.
  • ✓ DS matches a key #28
    The DS record at the parent matches a key in the zone: key tag 62144 (SHA256).
  • ✓ Modern algorithms #29
    Key algorithms: RSASHA256 (8).
  • !
    Signatures expire soon
    The earliest signature expires at 2026-10-29 06:54 UTC (in 166h0m0s). Check that automatic re-signing works.
    #30
  • ✓ NSEC3 as recommended #31
    The zone uses NSEC3 with 0 iterations and no salt (RFC 9276).

Records

pass

61 records at the apex

Found

Read from
217.160.81.200:53
TypeValueTTL
SOAns-1and1.ui-dns.com. dnsadmin.1and1.com. 2018065656 14400 3600 605000 60086400
NSns-1and1.ui-dns.org.172800
NSns-1and1.ui-dns.com.172800
NSns-1and1.ui-dns.biz.172800
NSns-1and1.ui-dns.de.172800
A74.208.4.76300
A74.208.4.77300
MX10 mxint02.1and1.com.86400
MX10 mxint01.1and1.com.86400
TXT"MS=ms70624413"86400
TXT"MS=ms74588552"3600
TXT"16jqfwnyjzty27xhym9330vd1gghv47j"86400
TXT"_af1ryc9skxe7kzb52bbt67nb6vf27js"86400
TXT"_cy60bt2y80p02hlbtl45v566ji704fz"86400
TXT"_e78lrnimoy89n09s5b28qadihgwpxzt"86400
TXT"_fyixjkbrlv77mu5yfehp4xxv34x617t"86400
TXT"_m23k7icdi3rylo7yk29qsq0k268bnef"86400
TXT"b11x9hk35krgqs2f0k7qmwvg5yn9px9l"86400
TXT"jdwtnsy7h3h8r1b0gctkrcjvg2nq9smk"86400
TXT"lrl3344l5ffgcbmj18nqzq95m1d2xdv9"86400
TXT"mwdv5x11l34w7tj9xlgp4tzddgpcbhnw"86400
TXT"tgyghxbsy1jrdsj63yrrwqyjjxdrpnjc"86400
TXT"v9jysz1dv845wvtyp95rh7w6p7ysjb57"86400
TXT"vyjbz4kfb2x08kjcpncrc9gfmgj861lw"86400
TXT"wpnv3wbbchbnlysjtlmmd1tj0jkm21kw"86400
TXT"xtmjsmgvp2523q5hmg8hc3tfjmj89kc3"86400
TXT"y3tp0zpnksgdn5yywfgpgdmgj45bh0k9"86400
TXT"ztdc3ky6k5km3ybkws238xd45wm85jhr"86400
TXT"v=spf1 redirect=_spf-corporate.ionos.com"3600
TXT"flexera-domain-verification-cirulrgfuoqjowff"86400
TXT"docusign=ae5f3aad-650b-4569-a7ba-0c6b2788049d"86400
TXT"canva-site-verification=Mn1rJGJqRy3NFoReL7Hh_Q"86400
TXT"openai-domain-verification=dv-7zY6w7UZZIx7SY50c3kEOiqV"86400
TXT"docker-verification=35a6b6c2-d734-4c9a-bb4d-06aa17a200c2"86400
TXT"_digicert-domain-validation_fyixjkbrlv77mu5yfehp4xxv34x617t"86400
TXT"cursor-domain-verification-d1n5yf=w2r1ZcAKmOE1LGVfF35tOrP2J"86400
TXT"facebook-domain-verification=b3w01jklxzo2sgze380kki78rwjulw"86400
TXT"anthropic-domain-verification-q686va=63OyRCIjDzlpOJyunsqnZbzQZ"86400
TXT"globalsign-domain-verification=75CF0B9D35A5C0889E80EB664D71FC07"900
TXT"google-site-verification=7id4gRISGXuz1RUhyLwoP_ncZF__hnDd3091L59Zd5Q"86400
TXT"google-site-verification=BWZwAm23uhDORmKCFef9BGOloahl2OQp7KKKaBC9mBE"86400
TXT"google-site-verification=Ppm1wKD3IMF3PXA_B1Sd6pOP3ph0zTw8jqGs0rB2ggA"86400
TXT"google-site-verification=xGX9Zq6QAsl8aJNYJp4d3giTg0Ol78ol9FOYjw7qxAA"86400
TXT"browserstack-domain-verification=295b3a4b-fd77-4fdd-b60e-2826eb73e21c"86400
TXT"pardot420932=5748908f75ee14541f04593acddce2ce132f9b051f849be3ce865d8cf448e9fa"86400
TXT"sending_domain420932=d1b745ca1571640e1ab0b72bb5a902cd132ba7e11b4b04a2942410b51b48abd0"86400
TXT"cDfR2ST6H5gj+ScY8crTs/Dxl832YhRnLkG4TNN7HFqX/e/KA0u9kQy3jnakfN082WY/bg8rf4JS8ZDrqf4uRg=="86400
TXT"kkxiJXqSJtWUZ2/o3eK8DwCBVO9ylNRrevp0TRnhTkjiLoHgAbayf2mjofvur8eHJT6wQA1rx+qzXXGWAhqnCg=="120
TXT"mindmanager-verification=1ea2fdbe5379cc0f8cfe95fa5ecfdc1ff943a7bd015aed8afb5717dad146adac"86400
TXT"adobe-idp-site-verification=544e1c199daf0cfa42a1fa60cc497471e9b14f4254769aae17f4d0fda9db275f"86400
TXT"atlassian-domain-verification=KAEkvhtoErKIDdiyb7e0wzavuISNOteHVzuoJX6M4VNN5REeLHY0BhBUYNFjFEt9"86400
TXT"figma-domain-verification=bf994688b54b476ea25cff12b37502eef47a3bad935472aa4fbafa862e2c3c14-1750658762"86400
TXT"k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDGoQCNwAQdJBy23MrShs1EuHqK/dtDC33QrTqgWd9CJmtM3CK2ZiTYugkhcxnkEtGbzg+IJqcDRNkZHyoRezTf6QbinBB2dbyANEuwKI5DVRBFowQOj9zvM3IvxAEboMlb0szUjAoML94HOkKuGuCkdZ1gbVEi3GcVwrIQphal1QIDAQAB;"86400
CAA0 issuewild "digicert.com"86400
CAA0 issue "amazontrust.com"86400
CAA0 issuewild "amazontrust.com"86400
CAA0 issuewild "sectigo.com"86400
CAA0 issue "sectigo.com"86400
CAA0 issue "letsencrypt.org"86400
CAA0 issuewild "letsencrypt.org"86400
CAA0 issue "digicert.com"86400

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, MX 1d, NS 2d.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: digicert.com, amazontrust.com, sectigo.com, letsencrypt.org.