jfrog.com

Checked 22 October 2026, 09:23 UTC · via 8.8.8.8
!Passed with warnings
25 passed 2 warnings 0 failed 4 info

Registration

info

.com generic · DomainSite, Inc. · expires 2027-07-24

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
DomainSite, Inc.
Registered
24 July 2001
Last changed
2 July 2026
Expires
24 July 2027
Status
client transfer prohibited, client update prohibited
Registry nameservers
ns-1274.awsdns-31.org, ns-1999.awsdns-57.co.uk, ns-35.awsdns-04.com, ns-867.awsdns-44.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-07-24 #3
    The registration is valid until 2027-07-24 (275 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited, client update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

ns-1274.awsdns-31.org, ns-1999.awsdns-57.co.uk, ns-35.awsdns-04.com, ns-867.awsdns-44.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns-1274.awsdns-31.org, ns-1999.awsdns-57.co.uk, ns-35.awsdns-04.com, ns-867.awsdns-44.net
NS in the zone
ns-1274.awsdns-31.org, ns-1999.awsdns-57.co.uk, ns-35.awsdns-04.com, ns-867.awsdns-44.net
NameserverAddressesNetwork (AS)Glue
ns-1274.awsdns-31.org205.251.196.250 2600:9000:5304:fa00::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-
ns-1999.awsdns-57.co.uk205.251.199.207 2600:9000:5307:cf00::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-
ns-35.awsdns-04.com205.251.192.35 2600:9000:5300:2300::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US205.251.192.35 2600:9000:5300:2300::1
ns-867.awsdns-44.net205.251.195.99 2600:9000:5303:6300::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-

Checks

  • ✓ 4 nameservers #6
    Delegated to ns-1274.awsdns-31.org, ns-1999.awsdns-57.co.uk, ns-35.awsdns-04.com, ns-867.awsdns-44.net.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 4 IPv4 /24s and 4 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS16509 (AMAZON-02 - Amazon.com, Inc., US): 8 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • ✓ Nameserver names under 4 TLDs #12
    Nameserver names use the TLDs .com, .net, .org, .uk.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

pass

8 of 8 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns-1274.awsdns-31.org 205.251.196.250NOERROR, 4 ms, authoritativenoyes / yesrefused-
ns-1274.awsdns-31.org 2600:9000:5304:fa00::1NOERROR, 4 ms, authoritativenoyes / yesrefused-
ns-1999.awsdns-57.co.uk 205.251.199.207NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-1999.awsdns-57.co.uk 2600:9000:5307:cf00::1NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-35.awsdns-04.com 205.251.192.35NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-35.awsdns-04.com 2600:9000:5300:2300::1NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-867.awsdns-44.net 205.251.195.99NOERROR, 4 ms, authoritativenoyes / yesrefused-
ns-867.awsdns-44.net 2600:9000:5303:6300::1NOERROR, 7 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 8 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 1 · primary ns-867.awsdns-44.net

Found

Primary (MNAME)
ns-867.awsdns-44.net
Contact (RNAME)
awsdns-hostmaster.amazon.com
Serial
1
Refresh / retry
7200 s / 900 s
Expire
1209600 s
Negative TTL
86400 s

Serial per nameserver

NameserverSerial
ns-1274.awsdns-31.org (205.251.196.250)1
ns-1274.awsdns-31.org (2600:9000:5304:fa00::1)1
ns-1999.awsdns-57.co.uk (205.251.199.207)1
ns-1999.awsdns-57.co.uk (2600:9000:5307:cf00::1)1
ns-35.awsdns-04.com (205.251.192.35)1
ns-35.awsdns-04.com (2600:9000:5300:2300::1)1
ns-867.awsdns-44.net (205.251.195.99)1
ns-867.awsdns-44.net (2600:9000:5303:6300::1)1

Checks

  • ✓ Serial 1 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 2h, retry 15m, expire 14d, negative TTL 1d.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns-867.awsdns-44.net is one of the listed nameservers.
  • ✓ Contact awsdns-hostmaster@amazon.com #25
    The SOA RNAME awsdns-hostmaster.amazon.com means awsdns-hostmaster@amazon.com.
  • ✓ Counter serial #26
    The serial 1 is a plain counter.

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

warn

80 records at the apex

Found

Read from
205.251.196.250:53
TypeValueTTL
SOAns-867.awsdns-44.net. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400900
NSns-1274.awsdns-31.org.172800
NSns-1999.awsdns-57.co.uk.172800
NSns-35.awsdns-04.com.172800
NSns-867.awsdns-44.net.172800
A18.244.18.3760
A18.244.18.9360
A18.244.18.8260
A18.244.18.3660
MX10 aspmx.l.google.com.1800
MX20 alt1.aspmx.l.google.com.1800
MX20 alt2.aspmx.l.google.com.1800
MX30 aspmx2.googlemail.com.1800
MX30 aspmx3.googlemail.com.1800
MX30 aspmx4.googlemail.com.1800
MX30 aspmx5.googlemail.com.1800
TXT"0zjf862w1mcqn5t5s8rk1494pl4rr66x"60
TXT"9b75t1rn7hlyvtrckjl2glm539136xg5"60
TXT"AVALARA-SAML-DOMAIN=DDB4028740A5BBB89F3098926BB56576139CBBA1CF966CC0CCA08CB4A012"60
TXT"DirectFedAuthUrl=https://jfrog.okta.com/app/jfrog_azurestaging_1/exkgob3clvSEAeAQ85d7/sso/saml"60
TXT"_0cucgetsb0bqwlbyjh6yone4eilogok"60
TXT"_5chvbi8ocvsva0n5mttk7whskx4jjzx"60
TXT"_5wvzjwls663rjxi17nz69m51ktjku5y"60
TXT"_62n0zwa517zye9ei21xed2rd4ws9ypl"60
TXT"_agqyrb7lio1m09pljb9c6380u4zxp3t"60
TXT"_h7riaazdlnon6x7eibqpef1w2vzidq3"60
TXT"_k9t85vcod1x2k1qk5k11vz6eedzysgt"60
TXT"_mmbctqw3xrc0g427glwu1dwu85q5gff"60
TXT"_rgmu73ihcqjb5a17wmv8e6dmz9xckxf"60
TXT"_uxwomykmrzi4gnzimzngr53lkyfqpjt"60
TXT"_xt4yq59s31g6hkge7osaeq2zasiiip2"60
TXT"_yafxnn3nvea582fh564dwr1u98wdtkc"60
TXT"_yrpdr07dx4o4zjc6rdy3m6ltkjav1yd"60
TXT"_z6kkki7458qqwk0vbrbg3cwi39xizy2"60
TXT"airtable-verification=b51f617f63a5652305de77e613ad3201"60
TXT"anthropic-domain-verification-rwv172=6PZohoMklgm6NBCBLS3Wemdp3"60
TXT"apple-domain-verification=GgC9MA2wW9uywX7c"60
TXT"atlassian-domain-verification=7wUEfxU1ZKZhil6NxA73AjEYEkpI5KW/c2Jz2ztyDsNGHYud3aKxtXLIn5L8C86y"60
TXT"atlassian-domain-verification=E1nQMxXSe5UOBs6PeoZ2JwtYqAFZkRD132TCo/QOaVMqkn40efZa8uCsuXmDT39v"60
TXT"atlassian-domain-verification=KCEA2yBVhnNdu9z7EYts/8CSVvDnPsmsfg+ATMhwsoeHE8trffYlWv03hpfIAlmx"60
TXT"cloudhealth=21170755-b2e0-438a-855e-150a668d9cad"60
TXT"cursor-domain-verification-p0307j=TmUMfr0lzwanb4moubv9HeuqP"60
TXT"docker-verification=e25f3c44-d1c3-4aa6-9c86-707e791d694e"60
TXT"docusign=0e79ac20-dc2e-4158-af3f-5ba5ea35847a"60
TXT"docusign=ba2b6736-6880-4775-ae37-6f970f2aa69a"60
TXT"drift-domain-verification=16c37cc4e28866e8a146bbbaaac4b4d7dca6726b138144f002583e2c43114162"60
TXT"dzfwyt6lnhp2d3b9v5nf3n0x6zc4zyw9"60
TXT"facebook-domain-verification=sy0jhhhzzxzsx113fpak6a105jvbed"60
TXT"fnh4yg6fw0y8zjlbrc2j3px7ttx88ynt"60
TXT"gc-ai-domain-verification-wa59dy=XAIe1I9pIXW1JNWbX69glXMnx"60
TXT"google-site-verification=8HQm3zFnsK0-65FAZhdeyiKVkVf3Rk-6K2i8bxUl6a0"60
TXT"google-site-verification=9MW1vmYgTLCOxvJQfbTJrvBTVMc4fFxgRKxNomCjiV4"60
TXT"google-site-verification=M5QekOe4oVea7gGV9fS0WrXhUDqLCDc-SZdXBcU3d6Q"60
TXT"google-site-verification=utqEY-0B2RDHumEn67LseN_6OwqgZAF2EYxUXY6oNS4"60
TXT"gqwm5rnz5740thbcs8mcp2grq023fk73"60
TXT"h1-domain-verification=ATwMZf3CjSLojLNbpPA6rWQNDK4URLMrren2W5kYYvwoKF3r"60
TXT"include:sendgrid.net ip4:149.72.251.202 ip4:149.72.63.221"60
TXT"jamf-site-verification=U3j1r_dnXxKcaHWDLprEhg"60
TXT"jgx3n95sd7yfyd5kzkgrmhwb4y08q0s7"60
TXT"kiro-site-verification=57aff9a4-b66b-4d52-87d0-0f3348923dee"60
TXT"kyn27xqsr4kln0dghgrmdgp1xj4p97d5"60
TXT"lovable_verification=LM3EIiLGGpVlHQ9AGVqY"60
TXT"mgverify=cca69417cc41cb63ba0eb543b192238e81abd2c10755344aff42d8f3a24260c4"60
TXT"miro-verification=06043a2cab7e16bc0d9f4f04e518f7e1d2030b60"60
TXT"mongodb-site-verification=KOskdjKE4ReX5tFS4sYG0S6TrX29WuHe"60
TXT"mongodb-site-verification=UcRNjHKAyxl40ZsnEE4imjk9PSYaEO2j"60
TXT"mongodb-site-verification=kHQL5iywP2EQ2twEyeQAmIOWzZ4Ygtch"60
TXT"mongodb-site-verification=rGeh1F1Ny8pjwFY2Ucmx8TKt3bchUFjo"60
TXT"n3h0qjljh62fd1d9y9t516djnjbzczx5"60
TXT"n936k4558tvw47qbzwkk5bwbhq5yxs6c"60
TXT"postman-domain-verification=b1d6b926c2c04a0e28cb00d07a9103501e220a530a59feeb2ca3cc096288935e0aa406d0fc502068ace0386af6dece684668df46607472effe666903219414e5"60
TXT"profound-domain-verification-0e1wrx=oeP51k6ifN6RW6inAuXNVVaHF"60
TXT"r8wrq828jf3481mtbvf51dl4wtq5z10v"60
TXT"slack-domain-verification=40ewoRGAASDdAU1swDzMfDeLFmZwhSbvWBMk0FNI"60
TXT"stripe-verification=802144cb857b8e8514344809c064546df2fc240a0fe9ce4539b1ac7e86e95afa"60
TXT"tdcqdkznjm9kzp3lsv63cyp6zr9w0nht"60
TXT"v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all"60
TXT"wiz-domain-verification=f8a7923748b5aec55624a8638920c1ce68152e6e821ce3b0aa2605b1e7a198cf"60
TXT"wrike-verification=MjE3Nzg3MzpiM2FlY2E3ODgzYWMzOTI3ZTg3ZDNjOThhNDg0ZWE2NGY0YTdhNTJkZmVmMGViNmU4ZmIwMjI1MTk2NzczMDQ3"60
TXT"zapier-domain-verification-challenge=e0fa94e1-f56f-47be-91be-a7c5f7cad973"60

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: A (1m). Low TTLs are useful just before a planned change.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • i
    Wildcard record
    A random name under the zone resolves, so there is a wildcard (*) record. Typos and non-existent hosts resolve too, which can confuse mail and certificate checks.
    #34
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35