klarna.com

Checked 22 October 2026, 09:32 UTC · via 8.8.8.8
!Passed with warnings
28 passed 2 warnings 0 failed 1 info

Registration

info

.com generic · CSC Corporate Domains, Inc. · expires 2026-12-12

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
12 December 2008
Last changed
8 December 2025
Expires
12 December 2026
Status
client transfer prohibited
Registry nameservers
a1-74.akam.net, a12-65.akam.net, a20-66.akam.net, a5-64.akam.net, edns7.ultradns.com, edns7.ultradns.org
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2026-12-12 #3
    The registration is valid until 2026-12-12 (51 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

pass

a1-74.akam.net, a12-65.akam.net, a20-66.akam.net, a5-64.akam.net, edns7.ultradns.com, edns7.ultradns.org

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
a1-74.akam.net, a12-65.akam.net, a20-66.akam.net, a5-64.akam.net, edns7.ultradns.com, edns7.ultradns.org
NS in the zone
a1-74.akam.net, a12-65.akam.net, a20-66.akam.net, a5-64.akam.net, edns7.ultradns.com, edns7.ultradns.org
NameserverAddressesNetwork (AS)Glue
a1-74.akam.net193.108.91.74 2600:1401:2::4aAS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a12-65.akam.net184.26.160.65 2600:1480:f000::41AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a20-66.akam.net95.100.175.66 2a02:26f0:67::42AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a5-64.akam.net95.100.168.64 2600:1480:b000::40AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
edns7.ultradns.com204.74.66.7 2001:502:f3ff::207AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US2001:502:f3ff::207 204.74.66.7
edns7.ultradns.org204.74.111.7 2001:502:4612::207AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-

Checks

  • ✓ 6 nameservers #6
    Delegated to a1-74.akam.net, a12-65.akam.net, a20-66.akam.net, a5-64.akam.net, edns7.ultradns.com, edns7.ultradns.org.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 6 IPv4 /24s and 6 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS12008 (VERCARA - Vercara, LLC, US): 4 addresses; AS21342 (AKAMAI-ASN2 - Akamai International B.V., NL): 8 addresses.
  • ✓ Nameserver names under 3 TLDs #12
    Nameserver names use the TLDs .com, .net, .org.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

warn

12 of 12 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
a1-74.akam.net 193.108.91.74NOERROR, 10 ms, authoritativenoyes / yesrefused41824.5
a1-74.akam.net 2600:1401:2::4aNOERROR, 10 ms, authoritativenoyes / yesrefused41824.8
a12-65.akam.net 184.26.160.65NOERROR, 6 ms, authoritativenoyes / yesrefused48878.29
a12-65.akam.net 2600:1480:f000::41NOERROR, 4 ms, authoritativenoyes / yesrefused48878.32
a20-66.akam.net 95.100.175.66NOERROR, 7 ms, authoritativenoyes / yesrefused48878.29
a20-66.akam.net 2a02:26f0:67::42NOERROR, 6 ms, authoritativenoyes / yesrefused48878.30
a5-64.akam.net 95.100.168.64NOERROR, 5 ms, authoritativenoyes / yesrefused41824.9
a5-64.akam.net 2600:1480:b000::40NOERROR, 4 ms, authoritativenoyes / yesrefused41824.9
edns7.ultradns.com 204.74.66.7NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
edns7.ultradns.com 2001:502:f3ff::207NOERROR, 6 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
edns7.ultradns.org 204.74.111.7NOERROR, 13 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
edns7.ultradns.org 2001:502:4612::207NOERROR, 33 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver

Checks

  • ✓ All respond #14
    All 12 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: a1-74.akam.net: "41824.5"; a1-74.akam.net: "41824.8"; a12-65.akam.net: "48878.29"; a12-65.akam.net: "48878.32"; a20-66.akam.net: "48878.29"; a20-66.akam.net: "48878.30"; a5-64.akam.net: "41824.9". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2017073704 · primary a1-74.akam.net

Found

Primary (MNAME)
a1-74.akam.net
Contact (RNAME)
dns-admin.klarna.com
Serial
2017073704
Refresh / retry
3600 s / 1200 s
Expire
1209600 s
Negative TTL
600 s

Serial per nameserver

NameserverSerial
a1-74.akam.net (193.108.91.74)2017073704
a1-74.akam.net (2600:1401:2::4a)2017073704
a12-65.akam.net (184.26.160.65)2017073704
a12-65.akam.net (2600:1480:f000::41)2017073704
a20-66.akam.net (95.100.175.66)2017073704
a20-66.akam.net (2a02:26f0:67::42)2017073704
a5-64.akam.net (95.100.168.64)2017073704
a5-64.akam.net (2600:1480:b000::40)2017073704
edns7.ultradns.com (204.74.66.7)2017073704
edns7.ultradns.com (2001:502:f3ff::207)2017073704
edns7.ultradns.org (204.74.111.7)2017073704
edns7.ultradns.org (2001:502:4612::207)2017073704

Checks

  • ✓ Serial 2017073704 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 1h, retry 20m, expire 14d, negative TTL 10m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver a1-74.akam.net is one of the listed nameservers.
  • ✓ Contact dns-admin@klarna.com #25
    The SOA RNAME dns-admin.klarna.com means dns-admin@klarna.com.
  • ✓ Timestamp serial #26
    The serial 2017073704 is a Unix timestamp (2033-12-01 18:15 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

pass

63 records at the apex

Found

Read from
193.108.91.74:53
TypeValueTTL
SOAa1-74.akam.net. dns-admin.klarna.com. 2017073704 3600 1200 1209600 600600
NSedns7.ultradns.com.3600
NSa12-65.akam.net.3600
NSa20-66.akam.net.3600
NSa1-74.akam.net.3600
NSedns7.ultradns.org.3600
NSa5-64.akam.net.3600
A3.173.23.371800
A3.173.21.371800
A3.173.22.371800
MX10 mxz3.klarna.com.3600
MX10 mxz2.klarna.com.3600
MX10 mxz1.klarna.com.3600
MX10 mxz4.klarna.com.3600
TXT"anthropic-domain-verification-zjwwh6=4f79nJP1l04OjYQhOTmuhefC2"3600
TXT"google-site-verification=tSivwC8Gmcgf0MUeFzuF0kkDXhlwUi_KeWqCGfnZtao"3600
TXT"apple-domain-verification=u_R7G9MxjFepIDYHi_Dh_pb1cHP2JDVi3YjHw6BOihw"3600
TXT"docker-verification=04ef223c-b965-41d9-a49a-7ea3fdb19cc9"3600
TXT"mixpanel-domain-verify=9b202fdc-ac1f-4a22-ab31-530379358732"3600
TXT"cursor-domain-verification-fw4z39=YTxxRNgiXUaYUUzKO4plYQJnj"3600
TXT"mixpanel-domain-verify=bc248323-2a3e-4a4d-b594-22069eeacf09"3600
TXT"ms-domain-verification=d1c65262-3b90-4d5d-8c44-f862a882b419"3600
TXT"ibmid=c0cb393f-6a6b-4875-9119-fc1ef607d660"3600
TXT"atlassian-domain-verification=kuCcSLhwSU7SWaSfCXQ0pJR783qYIG3A89aiMJH30Zzxef7QUxYwgBtzlCgagYWn"3600
TXT"google-site-verification=rxTlu7Mi6MqURYuLMviRSrorzH0gYs7nPVtIKEj2MMg"3600
TXT"mixpanel-domain-verify=0d71a59a-746b-4ac5-a9d3-1fd76f0e4aeb"3600
TXT"onetrust-domain-verification=f1cfcf5a17a1443a9840ee7d7d20517b"3600
TXT"MS=AFBE0235AEF59FC78040593B2746870430B60F53"3600
TXT"anthropic-domain-verification-fn3vqe=ycoyzxdAONanZ2sGPIpe8MZt4"3600
TXT"atlassian-sending-domain-verification=338b9828-abdc-47ba-a7cc-ff43879cd676"3600
TXT"stripe-verification=26377af821e53660c46ef45992cb376fcf48b13fec76e30ab132a33d1b28002e"3600
TXT"0ed1fe018a58f0d1fd606946a899401ae0d95bcd20"3600
TXT"paloaltonetworks-site-verification=9fc7984b6999f3550a11c4ae9036973e9c6483762ac61e961845512d27b95dac"3600
TXT"adobe-idp-site-verification=34ebf3613749ecea2f0d07ba91a8c154e6353b68ae1a8176123eda70be748df5"3600
TXT"v=spf1 include:sendgrid.net include:_spf.google.com include:_spf.atlassian.net include:spf-0098b101.pphosted.com ip4:18.159.145.12 ip4:18.156.64.82 ip4:54.77.2.88 ip4:54.72.124.243 -all"3600
TXT"h1-domain-verification=nX5CSVt8BnnqxGYyqqg2HgidsrZtt4sJQyVEm7oVmzyV2CMe"3600
TXT"facebook-domain-verification=kpv70oz0on4y0be27rsk0wqpu0llc9"3600
TXT"google-site-verification=1x1qTESbVdqnmbawTLX6-6Ur6KRsgpoMw8KzgLLxeJM"3600
TXT"_csg9035ikdbiu73g7zsmpudw4q3vyw7"3600
TXT"h1-domain-verification=wdWifkw4XsHWcYgFJZyrGw6ffvhzYkRzkY4pxz4DFMyp4gjE"3600
TXT"amazonses:KykgeBpcrVVB9Zr3IrycvCOP0+7mILa+kqVe5RGn0HM="3600
TXT"openai-domain-verification=dv-Ax6dQektADYw5AWqh5zJQkkz"3600
TXT"docusign=32cd5aff-353b-4525-b6d2-4a13de2e4257"3600
TXT"google-site-verification=5NxGwc5EEmujkfXUtK7b88RuhR6PL72PYKpBKYGfZpk"3600
TXT"loom-verification=4832737805"3600
TXT"twilio-domain-verification=a4d26b83fcbaddd8936c2e1cf73acef9"3600
TXT"stripe-verification=01edf9ebb08304ab10507250cc4ac81d210810a89dbaa31bc81d850b83fe67fe"3600
TXT"stripe-verification=3d6a91bc028dbc33342d46b7ecdaed2d9b852f14f6c7140357eb3ffc42defac7"3600
TXT"jamf-site-verification=8RO43AzgwKpDVzTrxBPzHg"3600
TXT"google-site-verification=6_dY5hOGAcQqUZpqOpBDjDr6JaLuvTbZybZ8R8ukw_E"3600
TXT"h1-domain-verification=SY9BmbpLLmY7DA9pv5ppqWuRxafjboB611VRf4PJp6kSwiZ3"3600
TXT"notion_verify_GyxABFCztKqRR0DncwDUmHw4eNgV36qRwJmsyPbgEWHr310J2eAonkwC0JVexfxagYDqTv"3600
TXT"apple-domain-verification=acfAqA586hLCUcGk"3600
TXT"miro-verification=d95c8724c999fa1af903df65701afb9eaa7be836"3600
TXT"elevenlabs=MZkBXYIn0-sqg1rXGTn9wfspnAVsbTGOZ_bVeCg9N6c"3600
CAA0 issue "amazonaws.com"600
CAA0 issuewild "digicert.com"600
CAA0 issuewild "amazonaws.com"600
CAA0 issue "quovadisglobal.com"600
CAA0 iodef "mailto:dns-admin@klarna.com"600
CAA0 issue "e-szigno.hu"600
CAA0 issue "buypass.no"600
CAA0 issue "digicert.com"600

Checks

  • ✓ TTLs within range #32
    TTLs: A 30m, MX 1h, NS 1h. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: amazonaws.com, digicert.com, quovadisglobal.com, e-szigno.hu, buypass.no.