Domain report: jal.com

Registration

info

.com generic · 1API GmbH · expires 2027-01-22

Found

TLD: .com (generic)
ICANN policies apply: yes
Registrar: 1API GmbH
Registered: 21 January 1995
Last changed: 6 January 2026
Expires: 22 January 2027
Status: client transfer prohibited
Registry nameservers: ns019-248anjmhlotnrdqt.2.d-53.info, ns019-248anjmhlotnrdqt.2.d-53.jp, ns019-248anjmhlotnrdqt.2.d-53.org
RDAP server: https://rdap.verisign.com/com/v1/

Checks

i

.com is a generic TLD (gTLD)

Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.

#1
✓ TLD delegated and signed #2

.com is delegated in the root zone and DNSSEC-signed.
✓ Expires on 2027-01-22 #3

The registration is valid until 2027-01-22 (91 days).
✓ Transfer locked #4

Registry status: client transfer prohibited.
✓ Registry and delegation match #5

The nameservers registered at the registry are the ones published in DNS.

Delegation

pass

ns019-248anjmhlotnrdqt.2.d-53.info, ns019-248anjmhlotnrdqt.2.d-53.jp, ns019-248anjmhlotnrdqt.2.d-53.org

Found

Parent zone: com
Delegation from: a.gtld-servers.net (192.5.6.30)
NS at the parent: ns019-248anjmhlotnrdqt.2.d-53.info, ns019-248anjmhlotnrdqt.2.d-53.jp, ns019-248anjmhlotnrdqt.2.d-53.org
NS in the zone: ns019-248anjmhlotnrdqt.2.d-53.info, ns019-248anjmhlotnrdqt.2.d-53.jp, ns019-248anjmhlotnrdqt.2.d-53.org

Nameserver	Addresses	Network (AS)	Glue
ns019-248anjmhlotnrdqt.2.d-53.info	202.32.219.50 2001:240:bb81::28:50	AS2497 IIJ - Internet Initiative Japan Inc., JP AS2497 IIJ - Internet Initiative Japan Inc., JP	-
ns019-248anjmhlotnrdqt.2.d-53.jp	203.180.146.110 162.159.26.140 162.159.27.213 2400:cb00:2049:1::a29f:1a8c 2001:240:bb81::29:1110 2400:cb00:2049:1::a29f:1bd5	AS2497 IIJ - Internet Initiative Japan Inc., JP AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS2497 IIJ - Internet Initiative Japan Inc., JP AS13335 CLOUDFLARENET - Cloudflare, Inc., US	-
ns019-248anjmhlotnrdqt.2.d-53.org	210.138.20.110 2001:240:bb81::29:110	AS2497 IIJ - Internet Initiative Japan Inc., JP AS2497 IIJ - Internet Initiative Japan Inc., JP	-

Checks

✓ 3 nameservers #6

Delegated to ns019-248anjmhlotnrdqt.2.d-53.info, ns019-248anjmhlotnrdqt.2.d-53.jp, ns019-248anjmhlotnrdqt.2.d-53.org.
✓ Parent and zone agree #7

The parent delegation and the zone's NS records list the same nameservers.
✓ No glue needed #8

All nameservers are outside the zone, so no glue records are needed.
✓ All names resolve #9

Every nameserver name has an address and is not an alias.
✓ Nameservers in different networks #10

The nameservers are spread over 5 IPv4 /24s and 2 IPv6 /48s.
✓ 2 autonomous systems #11

The nameservers are spread over: AS13335 (CLOUDFLARENET - Cloudflare, Inc., US): 4 addresses; AS2497 (IIJ - Internet Initiative Japan Inc., JP): 6 addresses.
✓ Nameserver names under 3 TLDs #12

Nameserver names use the TLDs .info, .jp, .org.
✓ All reachable over IPv6 #13

Every nameserver has an IPv6 address.

Nameservers

fail

10 of 10 addresses answer authoritatively

Found

Nameserver	Answer	Recursion	TCP / EDNS	AXFR	Version
ns019-248anjmhlotnrdqt.2.d-53.info 202.32.219.50	NOERROR, 207 ms, authoritative	no	yes / yes	refused	-
ns019-248anjmhlotnrdqt.2.d-53.info 2001:240:bb81::28:50	NOERROR, 240 ms, authoritative	no	yes / yes	refused	-
ns019-248anjmhlotnrdqt.2.d-53.jp 203.180.146.110	NOERROR, 17 ms, authoritative	no	yes / yes	refused	IIJ_DNS_PLATFORM_SERVICE_K
ns019-248anjmhlotnrdqt.2.d-53.jp 162.159.26.140	NOERROR, 98 ms, authoritative	no	yes / yes	refused	2026.10.8
ns019-248anjmhlotnrdqt.2.d-53.jp 162.159.27.213	NOERROR, 95 ms, authoritative	no	yes / yes	refused	2026.10.8
ns019-248anjmhlotnrdqt.2.d-53.jp 2400:cb00:2049:1::a29f:1a8c	NOERROR, 94 ms, authoritative	no	yes / yes	refused	2026.10.8
ns019-248anjmhlotnrdqt.2.d-53.jp 2001:240:bb81::29:1110	NOERROR, 22 ms, authoritative	no	no / yes	refused	IIJ_DNS_PLATFORM_SERVICE_K
ns019-248anjmhlotnrdqt.2.d-53.jp 2400:cb00:2049:1::a29f:1bd5	NOERROR, 100 ms, authoritative	no	yes / yes	refused	2026.10.8
ns019-248anjmhlotnrdqt.2.d-53.org 210.138.20.110	NOERROR, 21 ms, authoritative	no	yes / yes	refused	IIJ_DNS_PLATFORM_SERVICE_K
ns019-248anjmhlotnrdqt.2.d-53.org 2001:240:bb81::29:110	NOERROR, 22 ms, authoritative	no	no / yes	refused	IIJ_DNS_PLATFORM_SERVICE_K

Checks

✓ All respond #14

All 10 nameserver addresses answered.
✓ All authoritative #15

Every responding nameserver answers authoritatively for the zone.
✓ No recursion #16

The nameservers do not answer recursive queries for other domains.
!

Software version disclosed

These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: ns019-248anjmhlotnrdqt.2.d-53.jp: "2026.10.8". Hide or replace the version string.

#17
✓ Zone transfers refused #18

No nameserver allows a zone transfer to the public.
✗

No DNS over TCP

DNS over TCP is required (RFC 7766); without it, large answers such as DNSSEC responses fail. Not answering over TCP: ns019-248anjmhlotnrdqt.2.d-53.jp (2001:240:bb81::29:1110): read tcp [2a01:4f8:1c1c:eebf::1]:51258->[2001:240:bb81::29:1110]:53: read: connection reset by peer; ns019-248anjmhlotnrdqt.2.d-53.org (2001:240:bb81::29:110): read tcp [2a01:4f8:1c1c:eebf::1]:60212->[2001:240:bb81::29:110]:53: read: connection reset by peer.

#19
✓ EDNS supported #20

All nameservers support EDNS(0).
✓ Public addresses #21

All nameserver addresses are publicly routable.

SOA

info

serial 2026100600 · primary ns000.d-53.net

Found

Primary (MNAME): ns000.d-53.net
Contact (RNAME): dns-managers.iij.ad.jp
Serial: 2026100600
Refresh / retry: 10800 s / 3600 s
Expire: 604800 s
Negative TTL: 86400 s

Serial per nameserver

Nameserver	Serial
ns019-248anjmhlotnrdqt.2.d-53.info (202.32.219.50)	2026100600
ns019-248anjmhlotnrdqt.2.d-53.info (2001:240:bb81::28:50)	2026100600
ns019-248anjmhlotnrdqt.2.d-53.jp (203.180.146.110)	2026100600
ns019-248anjmhlotnrdqt.2.d-53.jp (162.159.26.140)	2026100600
ns019-248anjmhlotnrdqt.2.d-53.jp (162.159.27.213)	2026100600
ns019-248anjmhlotnrdqt.2.d-53.jp (2400:cb00:2049:1::a29f:1a8c)	2026100600
ns019-248anjmhlotnrdqt.2.d-53.jp (2001:240:bb81::29:1110)	2026100600
ns019-248anjmhlotnrdqt.2.d-53.jp (2400:cb00:2049:1::a29f:1bd5)	2026100600
ns019-248anjmhlotnrdqt.2.d-53.org (210.138.20.110)	2026100600
ns019-248anjmhlotnrdqt.2.d-53.org (2001:240:bb81::29:110)	2026100600

Checks

✓ Serial 2026100600 everywhere #22

All nameservers serve the same version of the zone.
✓ Timers within recommendations #23

SOA refresh 3h, retry 1h, expire 7d, negative TTL 1d.
i

Hidden master (not resolvable)

The primary nameserver ns000.d-53.net is not listed as a nameserver and does not resolve publicly: a hidden master, or a placeholder name. Some tools (e.g. dynamic updates) use MNAME to find the primary.

#24
✓ Contact dns-managers@iij.ad.jp #25

The SOA RNAME dns-managers.iij.ad.jp means dns-managers@iij.ad.jp.
✓ Date-based serial #26

The serial 2026100600 follows the YYYYMMDDnn convention (2026-10-06).

DNSSEC

warn

Not signed

Found

Validated by resolver: no

Checks

!

Not signed

The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.

#27

Records

info

20 records at the apex

Found

Read from: 202.32.219.50:53

Type	Value	TTL
SOA	ns000.d-53.net. dns-managers.iij.ad.jp. 2026100600 10800 3600 604800 86400	86400
NS	ns019-248anjmhlotnrdqt.2.d-53.info.	86400
NS	ns019-248anjmhlotnrdqt.2.d-53.jp.	86400
NS	ns019-248anjmhlotnrdqt.2.d-53.org.	86400
A	163.211.251.51	86400
MX	1 aspmx.l.google.com.	900
MX	10 alt1.aspmx.l.google.com.	900
MX	10 alt2.aspmx.l.google.com.	900
MX	20 alt3.aspmx.l.google.com.	900
MX	20 alt4.aspmx.l.google.com.	900
TXT	"box-domain-verification=3474782"	900
TXT	"gitlab-pages-verification-code=b8aeda149aafa79e38ef0e7d44ab0794"	900
TXT	"google-site-verification=LuHJb20O-a_OdPCl3Xp92ziJ6XJ9MYNWRoMAQELJ7kw"	900
TXT	"arcules-domain-verification=CJ2kutdz95XNLXW235w3YJbtBcgjUigKKyRvVzN05rC"	900
TXT	"Dynatrace-site-verification=d6f906b5-7f44-44f3-86dc-50def4228647__n8bf9i0pn5ci8lb3anoj0cmdin"	900
TXT	"adobe-idp-site-verification=b209c4ab7b7aae158eb6a14bae465cf452283701df3f352541e0ff8e98de1e3b"	900
TXT	"atlassian-domain-verification=+EdnDtj/LlOVox8/C3umrJmYILCbabAK967GFxXslKmxoJjoh0dA55pbhdtUwuBE"	900
TXT	"atlassian-domain-verification=zDHV2zIm+tLcKqMi6fGkTYUB1ipaWvUe8pR8ePvtzwk3Z9FHMOVXJlvM/obUgkUR"	900
TXT	"v=spf1 +ip4:202.219.37.2 +ip4:163.211.248.0/21 +ip4:163.211.224.0/21 +ip4:119.75.234.64/27 +ip4:203.191.234.0/25 +ip4:180.148.163.128/25 " "+ip4:54.238.58.248 +ip4:202.32.114.11 +ip4:202.32.114.12 +ip4:27.112.105.122 +ip4:27.112.105.27 +ip4:163.211.240.0/24 " "include:_spf.google.com include:_spf.activegate-ss.jp include:spf1.jal.com include:spf2.jal.com include:spf.mailyl.jal.com include:_relay.amadeus.com ~all"	900
TXT	"v=verifydomain MS=ms13324345"	900

Checks

✓ TTLs within range #32

TTLs: A 1d, MX 15m, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
✓ No CNAME at the apex #33

The zone apex has no CNAME record.
✓ No wildcard #34

Names that don't exist return NXDOMAIN.
i

No CAA records

Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.

#35