latam.com

Checked 22 October 2026, 09:34 UTC · via 8.8.8.8
!Passed with warnings
24 passed 4 warnings 0 failed 3 info

Registration

info

.com generic · Nom-iq Ltd. dba COM LAUDE · expires 2028-06-01

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
Nom-iq Ltd. dba COM LAUDE
Registered
1 June 2001
Last changed
14 May 2026
Expires
1 June 2028
Status
client delete prohibited, client transfer prohibited, client update prohibited
Registry nameservers
bill.ns.cloudflare.com, ns-cloud-e1.googledomains.com, ns-cloud-e2.googledomains.com, ns-cloud-e3.googledomains.com, ns-cloud-e4.googledomains.com, rachel.ns.cloudflare.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2028-06-01 #3
    The registration is valid until 2028-06-01 (588 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited, client update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

bill.ns.cloudflare.com, ns-cloud-e1.googledomains.com, ns-cloud-e2.googledomains.com, ns-cloud-e3.googledomains.com, ns-cloud-e4.googledomains.com, rachel.ns.cloudflare.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
bill.ns.cloudflare.com, ns-cloud-e1.googledomains.com, ns-cloud-e2.googledomains.com, ns-cloud-e3.googledomains.com, ns-cloud-e4.googledomains.com, rachel.ns.cloudflare.com
NS in the zone
bill.ns.cloudflare.com, ns-cloud-e1.googledomains.com, ns-cloud-e2.googledomains.com, ns-cloud-e3.googledomains.com, ns-cloud-e4.googledomains.com, rachel.ns.cloudflare.com
NameserverAddressesNetwork (AS)Glue
bill.ns.cloudflare.com173.245.59.74 172.64.33.74 108.162.193.74 2803:f800:50::6ca2:c14a 2606:4700:58::adf5:3b4a 2a06:98c1:50::ac40:214aAS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US108.162.193.74 172.64.33.74 173.245.59.74 2606:4700:58::adf5:3b4a 2803:f800:50::6ca2:c14a 2a06:98c1:50::ac40:214a
ns-cloud-e1.googledomains.com216.239.32.110 2001:4860:4802:32::6eAS15169 GOOGLE - Google LLC, US AS15169 GOOGLE - Google LLC, US2001:4860:4802:32::6e 216.239.32.110
ns-cloud-e2.googledomains.com216.239.34.110 2001:4860:4802:34::6eAS15169 GOOGLE - Google LLC, US AS15169 GOOGLE - Google LLC, US2001:4860:4802:34::6e 216.239.34.110
ns-cloud-e3.googledomains.com216.239.36.110 2001:4860:4802:36::6eAS15169 GOOGLE - Google LLC, US AS15169 GOOGLE - Google LLC, US2001:4860:4802:36::6e 216.239.36.110
ns-cloud-e4.googledomains.com216.239.38.110 2001:4860:4802:38::6eAS15169 GOOGLE - Google LLC, US AS15169 GOOGLE - Google LLC, US2001:4860:4802:38::6e 216.239.38.110
rachel.ns.cloudflare.com172.64.32.215 108.162.192.215 173.245.58.215 2a06:98c1:50::ac40:20d7 2606:4700:50::adf5:3ad7 2803:f800:50::6ca2:c0d7AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US108.162.192.215 172.64.32.215 173.245.58.215 2606:4700:50::adf5:3ad7 2803:f800:50::6ca2:c0d7 2a06:98c1:50::ac40:20d7

Checks

  • ✓ 6 nameservers #6
    Delegated to bill.ns.cloudflare.com, ns-cloud-e1.googledomains.com, ns-cloud-e2.googledomains.com, ns-cloud-e3.googledomains.com, ns-cloud-e4.googledomains.com, rachel.ns.cloudflare.com.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 10 IPv4 /24s and 5 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS13335 (CLOUDFLARENET - Cloudflare, Inc., US): 12 addresses; AS15169 (GOOGLE - Google LLC, US): 8 addresses.
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

warn

20 of 20 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
bill.ns.cloudflare.com 173.245.59.74NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
bill.ns.cloudflare.com 172.64.33.74NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
bill.ns.cloudflare.com 108.162.193.74NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
bill.ns.cloudflare.com 2803:f800:50::6ca2:c14aNOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
bill.ns.cloudflare.com 2606:4700:58::adf5:3b4aNOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
bill.ns.cloudflare.com 2a06:98c1:50::ac40:214aNOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
ns-cloud-e1.googledomains.com 216.239.32.110NOERROR, 14 ms, authoritativenoyes / yesrefused-
ns-cloud-e1.googledomains.com 2001:4860:4802:32::6eNOERROR, 14 ms, authoritativenoyes / yesrefused-
ns-cloud-e2.googledomains.com 216.239.34.110NOERROR, 12 ms, authoritativenoyes / yesrefused-
ns-cloud-e2.googledomains.com 2001:4860:4802:34::6eNOERROR, 10 ms, authoritativenoyes / yesrefused-
ns-cloud-e3.googledomains.com 216.239.36.110NOERROR, 41 ms, authoritativenoyes / yesrefused-
ns-cloud-e3.googledomains.com 2001:4860:4802:36::6eNOERROR, 42 ms, authoritativenoyes / yesrefused-
ns-cloud-e4.googledomains.com 216.239.38.110NOERROR, 11 ms, authoritativenoyes / yesrefused-
ns-cloud-e4.googledomains.com 2001:4860:4802:38::6eNOERROR, 12 ms, authoritativenoyes / yesrefused-
rachel.ns.cloudflare.com 172.64.32.215NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
rachel.ns.cloudflare.com 108.162.192.215NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
rachel.ns.cloudflare.com 173.245.58.215NOERROR, 16 ms, authoritativenoyes / yesrefused2026.10.2
rachel.ns.cloudflare.com 2a06:98c1:50::ac40:20d7NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
rachel.ns.cloudflare.com 2606:4700:50::adf5:3ad7NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
rachel.ns.cloudflare.com 2803:f800:50::6ca2:c0d7NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2

Checks

  • ✓ All respond #14
    All 20 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: bill.ns.cloudflare.com: "2026.10.2"; rachel.ns.cloudflare.com: "2026.10.2". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 2417890293 · primary bill.ns.cloudflare.com

Found

Primary (MNAME)
bill.ns.cloudflare.com
Contact (RNAME)
dns.cloudflare.com
Serial
2417890293
Refresh / retry
10000 s / 2400 s
Expire
604800 s
Negative TTL
1800 s

Serial per nameserver

NameserverSerial
bill.ns.cloudflare.com (173.245.59.74)2417890293
bill.ns.cloudflare.com (172.64.33.74)2417890293
bill.ns.cloudflare.com (108.162.193.74)2417890293
bill.ns.cloudflare.com (2803:f800:50::6ca2:c14a)2417890293
bill.ns.cloudflare.com (2606:4700:58::adf5:3b4a)2417890293
bill.ns.cloudflare.com (2a06:98c1:50::ac40:214a)2417890293
ns-cloud-e1.googledomains.com (216.239.32.110)1
ns-cloud-e1.googledomains.com (2001:4860:4802:32::6e)1
ns-cloud-e2.googledomains.com (216.239.34.110)1
ns-cloud-e2.googledomains.com (2001:4860:4802:34::6e)1
ns-cloud-e3.googledomains.com (216.239.36.110)1
ns-cloud-e3.googledomains.com (2001:4860:4802:36::6e)1
ns-cloud-e4.googledomains.com (216.239.38.110)1
ns-cloud-e4.googledomains.com (2001:4860:4802:38::6e)1
rachel.ns.cloudflare.com (172.64.32.215)2417890293
rachel.ns.cloudflare.com (108.162.192.215)2417890293
rachel.ns.cloudflare.com (173.245.58.215)2417890293
rachel.ns.cloudflare.com (2a06:98c1:50::ac40:20d7)2417890293
rachel.ns.cloudflare.com (2606:4700:50::adf5:3ad7)2417890293
rachel.ns.cloudflare.com (2803:f800:50::6ca2:c0d7)2417890293

Checks

  • !
    Serials differ
    The nameservers serve different versions of the zone: 1 on ns-cloud-e1.googledomains.com (216.239.32.110), ns-cloud-e1.googledomains.com (2001:4860:4802:32::6e), ns-cloud-e2.googledomains.com (216.239.34.110), ns-cloud-e2.googledomains.com (2001:4860:4802:34::6e), ns-cloud-e3.googledomains.com (216.239.36.110), ns-cloud-e3.googledomains.com (2001:4860:4802:36::6e), ns-cloud-e4.googledomains.com (216.239.38.110), ns-cloud-e4.googledomains.com (2001:4860:4802:38::6e); 2417890293 on bill.ns.cloudflare.com (173.245.59.74), bill.ns.cloudflare.com (172.64.33.74), bill.ns.cloudflare.com (108.162.193.74), bill.ns.cloudflare.com (2803:f800:50::6ca2:c14a), bill.ns.cloudflare.com (2606:4700:58::adf5:3b4a), bill.ns.cloudflare.com (2a06:98c1:50::ac40:214a), rachel.ns.cloudflare.com (172.64.32.215), rachel.ns.cloudflare.com (108.162.192.215), rachel.ns.cloudflare.com (173.245.58.215), rachel.ns.cloudflare.com (2a06:98c1:50::ac40:20d7), rachel.ns.cloudflare.com (2606:4700:50::adf5:3ad7), rachel.ns.cloudflare.com (2803:f800:50::6ca2:c0d7). This is normal for a few minutes after a change; if it lasts, zone transfers to the secondaries are failing.
    #22
  • ✓ Timers within recommendations #23
    SOA refresh 2h46m40s, retry 40m, expire 7d, negative TTL 30m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver bill.ns.cloudflare.com is one of the listed nameservers.
  • ✓ Contact dns@cloudflare.com #25
    The SOA RNAME dns.cloudflare.com means dns@cloudflare.com.
  • ✓ Timestamp serial #26
    The serial 2417890293 is a Unix timestamp (2046-08-14 20:11 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

warn

50 records at the apex

Found

Read from
173.245.59.74:53
TypeValueTTL
SOAbill.ns.cloudflare.com. dns.cloudflare.com. 2417890293 10000 2400 604800 18001800
NSbill.ns.cloudflare.com.86400
NSrachel.ns.cloudflare.com.86400
NSns-cloud-e1.googledomains.com.86400
NSns-cloud-e2.googledomains.com.86400
NSns-cloud-e3.googledomains.com.86400
NSns-cloud-e4.googledomains.com.86400
A34.117.126.145120
MX10 aspmx.l.google.com.86400
MX20 alt1.aspmx.l.google.com.86400
MX20 alt2.aspmx.l.google.com.86400
MX30 alt3.aspmx.l.google.com.86400
MX30 alt4.aspmx.l.google.com.86400
TXT"Dynatrace-site-verification=0c176c7f-cfee-4adf-8315-84c4f49b8292__ssptlvslb0ofub27lupa6r53rk"120
TXT"Dynatrace-site-verification=21fe46b5-d608-4a94-adbd-d30d006d2848__dqa15evcs3bue8cmt7640at5rf"120
TXT"MS=68DEDA9E2604B6E212934E8ED3208B4588F4EDD8"120
TXT"MS=ms14805170"120
TXT"_46l7zh62th2yj4ere2e914jxfh9nmiu"120
TXT"_gitlab-pages-verification-code.latam.com=gitlab-pages-verification-code=9e89848a057b9df432501aeb3df93b3f"120
TXT"_globalsign-domain-verification=NANLXf9jy8-PRIbMd9JTQi4mqXrlY2ND0zZI6I9J9B"120
TXT"_ujdt85g9nbnkcvlimyf1e76ofus1fz2"120
TXT"_xvloiff4aukpqnhe62v0q52cho3fa28"120
TXT"apple-domain-verification=gcOFVrTGjg8Nlh5f"120
TXT"atlassian-domain-verification=AaMBv/X7YyxWvpAc/SOc2tTHbVr3ehVvX8QoeORAXIeacQhVO0MdYf0N4KEXyOfS"120
TXT"cisco-ci-domain-verification=1318b7dc89ba04d0689ddc8f0a9d1751a3c2e0f15586ace706e2801a7fe1d95f"120
TXT"cisco-ci-domain-verification=2de0d985cdecb1a59ce0fbea90ea98ea9fe1b70b62468712e8dba9ae3dae1bf4"120
TXT"cursor-domain-verification-gbxzqw=89oA2abw1xtI9ltDecKee4qcd"120
TXT"docusign=c5654723-2d38-42a4-9ba5-b2050e3888d0"120
TXT"dtm-domain-verification=c5hmkzX-Zvm1zNY0U60NkDU2luBov3cAaw626jJNERs"120
TXT"duo_sso_verification=IuxFiGgNc4a27tbGm6AeL8MRqfCCTxMtW3uaASKO3TObx6L49LCUWLRhyBvJ2Hyv"120
TXT"facebook-domain-verification=gqhfjss962jwmur0zfeb09otveumf0"120
TXT"gdv=f44d5dc2"120
TXT"globalsign-domain-verification=KaParXxs1OHDy7o8CMbPpHBN-2m_mzwdPqKMMQ66a6"120
TXT"globalsign-domain-verification=c1195e77950435205002e8ab9f35f90d"120
TXT"google-site-verification=2f1zVm_SkgKY1I9aXbBxMs0b1HLz83fIQsPOw6ahyMQ"120
TXT"google-site-verification=7QUYTs8XOwTEum73TQB3ih9zCvdxEm_tS1OqJZGGBIQ"120
TXT"google-site-verification=JJ18ogWdvkDxsVLzjRINf30d_DtDmB3U4uGy94z5wQI"120
TXT"google-site-verification=L7-MwH499KbUK_-GatT85thEpGdaHDWl0KCAAgJMvNo"120
TXT"google-site-verification=VilOAcXA8eGKw6T3J2QjQYnjL4C7dTwou9MzdUALMRs"120
TXT"google-site-verification=kitM0bn9CiRRI1m5cvC40x-Y5sU_5gxiMLKGcAGxs9o"120
TXT"google-site-verification=pu5aNb-LCZerr_c9HvwhCxitKWv16A043CKEJPH90s8"120
TXT"google-site-verification=rwCuZdDj_nW_Yem5PCjkdHUq69zr6EJDSf3SLDRQqFM"120
TXT"google-site-verification=syFXLvFuLDRLdTav1xfCq9mSKRpi4IwTgK0z9Ti7kbI"120
TXT"h1-domain-verification=CRpUdUANqHck9mPeCwKKqN63rv69eEExd8cacddcntrsW2yR"120
TXT"hlmhou19ellvv1s6vah3a31p30"120
TXT"ibmid=bd6e621e-ff89-4a62-9bd2-f01c56a2f6e8"120
TXT"miro-verification=659022aaeea5dea3db4ad9d927833643d81152ea"120
TXT"onetrust-domain-verification=6e33179823464a008348c846f102cbd0"120
TXT"openai-domain-verification=dv-DpkGmIBJlXeQumrSiZGrR2sx"120
TXT"v=spf1 ip4:93.174.64.0/22 ip4:93.174.68.0/23 ip4:93.174.70.0/24 ip4:158.58.140.0/24 ip4:34.86.27.72 ip4:34.85.160.37 ip4:34.94.182.24 ip4:200.14.104.0/24 ip4:200.14.106.0/24 ip4:46.31.48.0/21 ip6:2a02:23e8::/32 ip4:85.158.136.0/21 ip4:193.109.254.0/23 ip4" ":194.106.220.0/23 ip4:195.245.230.0/23 ip4:95.131.104.0/21 ip4:46.226.48.0/21 ip4:216.82.240.0/20 ip4:67.219.240.0/20 ip4:117.120.16.0/21 ip4:103.9.96.0/22 ip4:212.95.215.112/32 ip4:64.76.235.112/32 ip4:20.74.13.48/32 ip4:89.6.237.112/32 ip4:8.23.18.112/3" "2 ip4:103.151.192.0/23 ip4:185.12.80.0/22 ip4:188.172.128.0/20 ip4:192.161.144.0/20 ip4:216.198.0.0/18 ip4:198.2.128.0/24 ip4:198.2.132.0/22 ip4:198.2.136.0/23 ip4:198.2.145.0/24 ip4:198.2.186.0/23 ip4:205.201.131.128/25 ip4:205.201.134.128/25 ip4:205.201" ".136.0/23 ip4:205.201.139.0/24 ip4:198.2.177.0/24 ip4:198.2.178.0/23 ip4:198.2.180.0/24 include:_spf.google.com include:sendgrid.net include:_spf.embluemail.com include:cust-spf.exacttarget.com include:spf.sabre.com -all"120

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: A (2m). Low TTLs are useful just before a planned change. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35