Domain report: kaspersky.com

Registration

info

.com generic · Regional Network Information Center, JSC dba RU-CENTER · expires 2027-10-08

Found

TLD: .com (generic)
ICANN policies apply: yes
Registrar: Regional Network Information Center, JSC dba RU-CENTER
Registered: 9 October 1997
Last changed: 7 October 2026
Expires: 8 October 2027
Status: client transfer prohibited
Registry nameservers: ns1.kasperskylabs.net, ns2.kasperskylabs.com, ns3.kasperskylabs.org
RDAP server: https://rdap.verisign.com/com/v1/

Checks

i

.com is a generic TLD (gTLD)

Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.

#1
✓ TLD delegated and signed #2

.com is delegated in the root zone and DNSSEC-signed.
✓ Expires on 2027-10-08 #3

The registration is valid until 2027-10-08 (350 days).
✓ Transfer locked #4

Registry status: client transfer prohibited.
✓ Registry and delegation match #5

The nameservers registered at the registry are the ones published in DNS.

Delegation

pass

ns1.kasperskylabs.net, ns2.kasperskylabs.com, ns3.kasperskylabs.org

Found

Parent zone: com
Delegation from: a.gtld-servers.net (192.5.6.30)
NS at the parent: ns1.kasperskylabs.net, ns2.kasperskylabs.com, ns3.kasperskylabs.org
NS in the zone: ns1.kasperskylabs.net, ns2.kasperskylabs.com, ns3.kasperskylabs.org

Nameserver	Addresses	Network (AS)	Glue
ns1.kasperskylabs.net	82.202.185.166 101.46.136.140 37.203.128.6 2405:f080:1200:ae:9780:e3a4:56c7:a92 2a03:2480:8022::6	AS200107 KL-EXT - Kaspersky Lab Switzerland GmbH, CH AS136907 HWCLOUDS-AS-AP - HUAWEI CLOUDS, HK AS200107 KL-EXT - Kaspersky Lab Switzerland GmbH, CH AS136907 HWCLOUDS-AS-AP - HUAWEI CLOUDS, HK AS200107 KL-EXT - Kaspersky Lab Switzerland GmbH, CH	-
ns2.kasperskylabs.com	101.46.137.92 77.74.183.10 2001:1900:222b::2	AS136907 HWCLOUDS-AS-AP - HUAWEI CLOUDS, HK AS200107 KL-EXT - Kaspersky Lab Switzerland GmbH, CH AS3356 LEVEL3 - Level 3 Parent, LLC, US	101.46.137.92 2001:1900:222b::2 77.74.183.10
ns3.kasperskylabs.org	4.28.136.50 185.201.3.4 2a03:2480:8034::10	AS3356 LEVEL3 - Level 3 Parent, LLC, US AS200107 KL-EXT - Kaspersky Lab Switzerland GmbH, CH AS200107 KL-EXT - Kaspersky Lab Switzerland GmbH, CH	-

Checks

✓ 3 nameservers #6

Delegated to ns1.kasperskylabs.net, ns2.kasperskylabs.com, ns3.kasperskylabs.org.
✓ Parent and zone agree #7

The parent delegation and the zone's NS records list the same nameservers.
✓ No glue needed #8

All nameservers are outside the zone, so no glue records are needed.
✓ All names resolve #9

Every nameserver name has an address and is not an alias.
✓ Nameservers in different networks #10

The nameservers are spread over 7 IPv4 /24s and 4 IPv6 /48s.
✓ 3 autonomous systems #11

The nameservers are spread over: AS136907 (HWCLOUDS-AS-AP - HUAWEI CLOUDS, HK): 3 addresses; AS200107 (KL-EXT - Kaspersky Lab Switzerland GmbH, CH): 6 addresses; AS3356 (LEVEL3 - Level 3 Parent, LLC, US): 2 addresses.
✓ Nameserver names under 3 TLDs #12

Nameserver names use the TLDs .com, .net, .org.
✓ All reachable over IPv6 #13

Every nameserver has an IPv6 address.

Nameservers

fail

10 of 11 addresses answer authoritatively

Found

Nameserver	Answer	Recursion	TCP / EDNS	AXFR	Version
ns1.kasperskylabs.net 82.202.185.166	NOERROR, 9 ms, authoritative	no	yes / yes	refused	666
ns1.kasperskylabs.net 101.46.136.140	NOERROR, 32 ms, authoritative	no	yes / yes	refused	666
ns1.kasperskylabs.net 37.203.128.6	no response	no	no / no	-	-
ns1.kasperskylabs.net 2405:f080:1200:ae:9780:e3a4:56c7:a92	NOERROR, 24 ms, authoritative	no	yes / yes	refused	666
ns1.kasperskylabs.net 2a03:2480:8022::6	NOERROR, 200 ms, authoritative	no	yes / yes	refused	666
ns2.kasperskylabs.com 101.46.137.92	NOERROR, 33 ms, authoritative	no	yes / yes	refused	666
ns2.kasperskylabs.com 77.74.183.10	NOERROR, 41 ms, authoritative	no	yes / yes	refused	666
ns2.kasperskylabs.com 2001:1900:222b::2	NOERROR, 104 ms, authoritative	no	yes / yes	refused	666
ns3.kasperskylabs.org 4.28.136.50	NOERROR, 110 ms, authoritative	no	yes / yes	refused	666
ns3.kasperskylabs.org 185.201.3.4	NOERROR, 159 ms, authoritative	no	yes / yes	refused	666
ns3.kasperskylabs.org 2a03:2480:8034::10	NOERROR, 44 ms, authoritative	no	yes / yes	refused	666

Checks

✗

Nameservers not responding

These addresses did not answer, so resolvers waste time on timeouts: ns1.kasperskylabs.net (37.203.128.6): read udp 46.225.38.91:34766->37.203.128.6:53: i/o timeout.

#14
✓ All authoritative #15

Every responding nameserver answers authoritatively for the zone.
✓ No recursion #16

The nameservers do not answer recursive queries for other domains.
i

Identifying string disclosed

These nameservers answer version queries with a string that is not a version number: ns1.kasperskylabs.net: "666"; ns2.kasperskylabs.com: "666"; ns3.kasperskylabs.org: "666".

#17
✓ Zone transfers refused #18

No nameserver allows a zone transfer to the public.
✓ TCP supported #19

All nameservers answer over TCP.
✓ EDNS supported #20

All nameservers support EDNS(0).
✓ Public addresses #21

All nameserver addresses are publicly routable.

SOA

info

serial 2026102204 · primary dnsmaster.kasperskylabs.net

Found

Primary (MNAME): dnsmaster.kasperskylabs.net
Contact (RNAME): dnsadmin.kaspersky.com
Serial: 2026102204
Refresh / retry: 7200 s / 3600 s
Expire: 8640000 s
Negative TTL: 3600 s

Serial per nameserver

Nameserver	Serial
ns1.kasperskylabs.net (82.202.185.166)	2026102204
ns1.kasperskylabs.net (101.46.136.140)	2026102204
ns1.kasperskylabs.net (2405:f080:1200:ae:9780:e3a4:56c7:a92)	2026102204
ns1.kasperskylabs.net (2a03:2480:8022::6)	2026102204
ns2.kasperskylabs.com (101.46.137.92)	2026102204
ns2.kasperskylabs.com (77.74.183.10)	2026102204
ns2.kasperskylabs.com (2001:1900:222b::2)	2026102204
ns3.kasperskylabs.org (4.28.136.50)	2026102204
ns3.kasperskylabs.org (185.201.3.4)	2026102204
ns3.kasperskylabs.org (2a03:2480:8034::10)	2026102204

Checks

✓ Serial 2026102204 everywhere #22

All nameservers serve the same version of the zone.
✓ Timers within recommendations #23

SOA refresh 2h, retry 1h, expire 100d, negative TTL 1h.
i

Hidden master

The primary nameserver dnsmaster.kasperskylabs.net is not listed as a nameserver: a hidden master that only feeds the public secondaries. That is a common setup; make sure it is not reachable for zone transfers from outside.

#24
✓ Contact dnsadmin@kaspersky.com #25

The SOA RNAME dnsadmin.kaspersky.com means dnsadmin@kaspersky.com.
✓ Date-based serial #26

The serial 2026102204 follows the YYYYMMDDnn convention (2026-10-22).

DNSSEC

warn

Not signed

Found

Validated by resolver: no

Checks

!

Not signed

The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.

#27

Records

info

36 records at the apex

Found

Read from: 82.202.185.166:53

Type	Value	TTL
SOA	dnsmaster.kasperskylabs.net. dnsadmin.kaspersky.com. 2026102204 7200 3600 8640000 3600	3600
NS	ns2.kasperskylabs.com.	86400
NS	ns3.kasperskylabs.org.	86400
NS	ns1.kasperskylabs.net.	86400
A	185.85.15.46	3600
MX	10 mx13.kaspersky-labs.com.	3600
MX	10 mx15.kaspersky-labs.com.	3600
MX	10 mx12.kaspersky-labs.com.	3600
MX	10 mx14.kaspersky-labs.com.	3600
MX	10 mx16.kaspersky-labs.com.	3600
TXT	"58wgdlm2jdsm9ngvy7nkjykrtpm944zn"	3600
TXT	"google-site-verification=geaob3FW3kWbD4GOuWvvnIr6DdMCk-iztUNHfDXsjZw"	3600
TXT	"asap-site-verification-10df2a0b-bc79-4490-8744-4b0d7aded221"	3600
TXT	"v=spf1 include:_spf1.kaspersky.com include:_spf2.kaspersky.com include:_spf3.kaspersky.com include:_spf4.kaspersky.com -all"	3600
TXT	"OSSRH-51398"	3600
TXT	"MS=ms46209404"	3600
TXT	"HARICA-zjOgGHqoE2E2zIYossu"	3600
TXT	"Bm+dQwu+u4EWDmvvW25oQ2SoOjxFlFGqpX9leEWzO1U="	3600
TXT	"google-site-verification=OLBvaPDKYfdEIBIiJXCymrIyqYKlkRy42lSNjhuKuIg"	3600
TXT	"_ifwes8zkomws36uyoka6ua8vz9bm1ot"	3600
TXT	"MS=ms35645165"	3600
TXT	"docusign=bb1dd25e-cca1-4512-b170-2dca34aedd78"	3600
TXT	"zoho-verification=zb22959436.zmverify.zoho.eu"	3600
TXT	"samsung-domain-verification=3c4930b9-661f-4619-ab6e-7daa8739f5b0"	3600
TXT	"gradle-verification=DM91VVUEK70R6HG86NOOGSMSE5LGT"	3600
TXT	"asap-site-verification-7825d720-a31b-4bb7-bbbf-2e720e30498a"	3600
TXT	"asap-site-verification-3571af96-ec91-4f83-817d-375fefc9f797"	3600
TXT	"779eeabc-fc97-4739-9ce2-e761cd2a1e51"	3600
TXT	"google-site-verification=rWrOiumE7oP-K4v1grTIJNNCYHTqJYeF-yw3FzLhoxw"	3600
TXT	"asap-site-verification-6e19c2d7-0382-4a68-bc2c-068a778c7703"	3600
TXT	"webexdomainverification.=5f4c1131-bad6-4890-9c8d-7fcd1696c2a6"	3600
TXT	"OSSRH-65954"	3600
TXT	"docusign=f75708ee-9d70-4f4d-893c-1ee40ff118f0"	3600
TXT	"google-site-verification=vCElIgNX22UwW8HNwG3n-C6G2esSf64VCR-7786kf5o"	3600
TXT	"wegopro-domain-verification=69328e546c4b7fc95d1edb012b9de2e4d1746afdda298f389f93815b2d8b6709"	3600
TXT	"wegopro-domain-verification=8f26d1139bf38dd46e818b5c8d66251b33b5e83bae42f722af4bf84d9df2a642"	3600

Checks

✓ TTLs within range #32

TTLs: A 1h, MX 1h, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
✓ No CNAME at the apex #33

The zone apex has no CNAME record.
i

Wildcard record

A random name under the zone resolves, so there is a wildcard (*) record. Typos and non-existent hosts resolve too, which can confuse mail and certificate checks.

#34
i

No CAA records

Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.

#35