leafletjs.com

Checked 22 October 2026, 09:34 UTC · via 8.8.8.8
!Passed with warnings
28 passed 1 warning 0 failed 2 info

Registration

info

.com generic · Internet Invest, Ltd. dba Imena.ua · expires 2027-02-21

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
Internet Invest, Ltd. dba Imena.ua
Registered
21 February 2012
Last changed
4 January 2026
Expires
21 February 2027
Status
client transfer prohibited
Registry nameservers
nsa1.srv53.com, nsa2.srv53.net, nsa2.srv53.org, nsb1.srv53.com, nsb2.srv53.net, nsb4.srv53.org, nsc2.srv53.com, nsc2.srv53.net, nsc3.srv53.org, nsd2.srv53.com, nsd2.srv53.org, nsd4.srv53.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-02-21 #3
    The registration is valid until 2027-02-21 (121 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

pass

nsa1.srv53.com, nsa2.srv53.net, nsa2.srv53.org, nsb1.srv53.com, nsb2.srv53.net, nsb4.srv53.org, nsc2.srv53.com, nsc2.srv53.net, nsc3.srv53.org, nsd2.srv53.com, nsd2.srv53.org, nsd4.srv53.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
nsa1.srv53.com, nsa2.srv53.net, nsa2.srv53.org, nsb1.srv53.com, nsb2.srv53.net, nsb4.srv53.org, nsc2.srv53.com, nsc2.srv53.net, nsc3.srv53.org, nsd2.srv53.com, nsd2.srv53.org, nsd4.srv53.net
NS in the zone
nsa1.srv53.com, nsa2.srv53.net, nsa2.srv53.org, nsb1.srv53.com, nsb2.srv53.net, nsb4.srv53.org, nsc2.srv53.com, nsc2.srv53.net, nsc3.srv53.org, nsd2.srv53.com, nsd2.srv53.org, nsd4.srv53.net
NameserverAddressesNetwork (AS)Glue
nsa1.srv53.com178.32.247.7 2001:41d0:203:dee4:178:32:247:7AS16276 OVH - OVH SAS, FR AS16276 OVH - OVH SAS, FR178.32.247.7 2001:41d0:203:dee4:178:32:247:7
nsa2.srv53.net178.32.247.0 2001:41d0:203:dee4:178:32:247:0AS16276 OVH - OVH SAS, FR AS16276 OVH - OVH SAS, FR-
nsa2.srv53.org178.32.247.4 2001:41d0:203:dee4:178:32:247:4AS16276 OVH - OVH SAS, FR AS16276 OVH - OVH SAS, FR-
nsb1.srv53.com135.181.9.147 2a01:4f9:4a:530c:181:9:147:2AS24940 HETZNER-AS - Hetzner Online GmbH, DE AS24940 HETZNER-AS - Hetzner Online GmbH, DE135.181.9.147 2a01:4f9:4a:530c:181:9:147:2
nsb2.srv53.net135.181.9.151 2a01:4f9:4a:530c:181:9:151:2AS24940 HETZNER-AS - Hetzner Online GmbH, DE AS24940 HETZNER-AS - Hetzner Online GmbH, DE-
nsb4.srv53.org135.181.9.158 2a01:4f9:4a:530c:181:9:158:2AS24940 HETZNER-AS - Hetzner Online GmbH, DE AS24940 HETZNER-AS - Hetzner Online GmbH, DE-
nsc2.srv53.com78.27.225.70 2a02:2279:0:1201:78:27:225:70AS25393 MIROHOST - Internet Invest, Ltd., US AS25393 MIROHOST - Internet Invest, Ltd., US2a02:2279:0:1201:78:27:225:70 78.27.225.70
nsc2.srv53.net78.27.225.69 2a02:2279:0:1201:78:27:225:69AS25393 MIROHOST - Internet Invest, Ltd., US AS25393 MIROHOST - Internet Invest, Ltd., US-
nsc3.srv53.org78.27.225.65 2a02:2279:0:1201:78:27:225:65AS25393 MIROHOST - Internet Invest, Ltd., US AS25393 MIROHOST - Internet Invest, Ltd., US-
nsd2.srv53.com89.184.64.108 2a02:2278:70eb:298:89:184:64:108AS28907 MIROHOST - Internet Invest, Ltd., US AS28907 MIROHOST - Internet Invest, Ltd., US2a02:2278:70eb:298:89:184:64:108 89.184.64.108
nsd2.srv53.org89.184.64.95 2a02:2278:70eb:298:89:184:64:95AS28907 MIROHOST - Internet Invest, Ltd., US AS28907 MIROHOST - Internet Invest, Ltd., US-
nsd4.srv53.net89.184.64.88 2a02:2278:70eb:298:89:184:64:88AS28907 MIROHOST - Internet Invest, Ltd., US AS28907 MIROHOST - Internet Invest, Ltd., US-

Checks

  • ✓ 12 nameservers #6
    Delegated to nsa1.srv53.com, nsa2.srv53.net, nsa2.srv53.org, nsb1.srv53.com, nsb2.srv53.net, nsb4.srv53.org, nsc2.srv53.com, nsc2.srv53.net, nsc3.srv53.org, nsd2.srv53.com, nsd2.srv53.org, nsd4.srv53.net.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 4 IPv4 /24s and 4 IPv6 /48s.
  • ✓ 4 autonomous systems #11
    The nameservers are spread over: AS16276 (OVH - OVH SAS, FR): 6 addresses; AS24940 (HETZNER-AS - Hetzner Online GmbH, DE): 6 addresses; AS25393 (MIROHOST - Internet Invest, Ltd., US): 6 addresses; AS28907 (MIROHOST - Internet Invest, Ltd., US): 6 addresses.
  • ✓ Nameserver names under 3 TLDs #12
    Nameserver names use the TLDs .com, .net, .org.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

pass

24 of 24 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
nsa1.srv53.com 178.32.247.7NOERROR, 15 ms, authoritativenoyes / yesrefused-
nsa1.srv53.com 2001:41d0:203:dee4:178:32:247:7NOERROR, 15 ms, authoritativenoyes / yesrefused-
nsa2.srv53.net 178.32.247.0NOERROR, 15 ms, authoritativenoyes / yesrefused-
nsa2.srv53.net 2001:41d0:203:dee4:178:32:247:0NOERROR, 15 ms, authoritativenoyes / yesrefused-
nsa2.srv53.org 178.32.247.4NOERROR, 15 ms, authoritativenoyes / yesrefused-
nsa2.srv53.org 2001:41d0:203:dee4:178:32:247:4NOERROR, 15 ms, authoritativenoyes / yesrefused-
nsb1.srv53.com 135.181.9.147NOERROR, 24 ms, authoritativenoyes / yesrefused-
nsb1.srv53.com 2a01:4f9:4a:530c:181:9:147:2NOERROR, 24 ms, authoritativenoyes / yesrefused-
nsb2.srv53.net 135.181.9.151NOERROR, 23 ms, authoritativenoyes / yesrefused-
nsb2.srv53.net 2a01:4f9:4a:530c:181:9:151:2NOERROR, 24 ms, authoritativenoyes / yesrefused-
nsb4.srv53.org 135.181.9.158NOERROR, 23 ms, authoritativenoyes / yesrefused-
nsb4.srv53.org 2a01:4f9:4a:530c:181:9:158:2NOERROR, 24 ms, authoritativenoyes / yesrefused-
nsc2.srv53.com 78.27.225.70NOERROR, 24 ms, authoritativenoyes / yesrefused-
nsc2.srv53.com 2a02:2279:0:1201:78:27:225:70NOERROR, 21 ms, authoritativenoyes / yesrefused-
nsc2.srv53.net 78.27.225.69NOERROR, 24 ms, authoritativenoyes / yesrefused-
nsc2.srv53.net 2a02:2279:0:1201:78:27:225:69NOERROR, 24 ms, authoritativenoyes / yesrefused-
nsc3.srv53.org 78.27.225.65NOERROR, 25 ms, authoritativenoyes / yesrefused-
nsc3.srv53.org 2a02:2279:0:1201:78:27:225:65NOERROR, 25 ms, authoritativenoyes / yesrefused-
nsd2.srv53.com 89.184.64.108NOERROR, 36 ms, authoritativenoyes / yesrefused-
nsd2.srv53.com 2a02:2278:70eb:298:89:184:64:108NOERROR, 35 ms, authoritativenoyes / yesrefused-
nsd2.srv53.org 89.184.64.95NOERROR, 34 ms, authoritativenoyes / yesrefused-
nsd2.srv53.org 2a02:2278:70eb:298:89:184:64:95NOERROR, 35 ms, authoritativenoyes / yesrefused-
nsd4.srv53.net 89.184.64.88NOERROR, 34 ms, authoritativenoyes / yesrefused-
nsd4.srv53.net 2a02:2278:70eb:298:89:184:64:88NOERROR, 35 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 24 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 1767517864 · primary nsa2.srv53.net

Found

Primary (MNAME)
nsa2.srv53.net
Contact (RNAME)
support.dnshosting.org
Serial
1767517864
Refresh / retry
1800 s / 600 s
Expire
2419200 s
Negative TTL
1800 s

Serial per nameserver

NameserverSerial
nsa1.srv53.com (178.32.247.7)1767517864
nsa1.srv53.com (2001:41d0:203:dee4:178:32:247:7)1767517864
nsa2.srv53.net (178.32.247.0)1767517864
nsa2.srv53.net (2001:41d0:203:dee4:178:32:247:0)1767517864
nsa2.srv53.org (178.32.247.4)1767517864
nsa2.srv53.org (2001:41d0:203:dee4:178:32:247:4)1767517864
nsb1.srv53.com (135.181.9.147)1767517864
nsb1.srv53.com (2a01:4f9:4a:530c:181:9:147:2)1767517864
nsb2.srv53.net (135.181.9.151)1767517864
nsb2.srv53.net (2a01:4f9:4a:530c:181:9:151:2)1767517864
nsb4.srv53.org (135.181.9.158)1767517864
nsb4.srv53.org (2a01:4f9:4a:530c:181:9:158:2)1767517864
nsc2.srv53.com (78.27.225.70)1767517864
nsc2.srv53.com (2a02:2279:0:1201:78:27:225:70)1767517864
nsc2.srv53.net (78.27.225.69)1767517864
nsc2.srv53.net (2a02:2279:0:1201:78:27:225:69)1767517864
nsc3.srv53.org (78.27.225.65)1767517864
nsc3.srv53.org (2a02:2279:0:1201:78:27:225:65)1767517864
nsd2.srv53.com (89.184.64.108)1767517864
nsd2.srv53.com (2a02:2278:70eb:298:89:184:64:108)1767517864
nsd2.srv53.org (89.184.64.95)1767517864
nsd2.srv53.org (2a02:2278:70eb:298:89:184:64:95)1767517864
nsd4.srv53.net (89.184.64.88)1767517864
nsd4.srv53.net (2a02:2278:70eb:298:89:184:64:88)1767517864

Checks

  • ✓ Serial 1767517864 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 30m, retry 10m, expire 28d, negative TTL 30m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver nsa2.srv53.net is one of the listed nameservers.
  • ✓ Contact support@dnshosting.org #25
    The SOA RNAME support.dnshosting.org means support@dnshosting.org.
  • ✓ Timestamp serial #26
    The serial 1767517864 is a Unix timestamp (2026-01-04 09:11 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

14 records at the apex

Found

Read from
178.32.247.7:53
TypeValueTTL
SOAnsa2.srv53.net. support.dnshosting.org. 1767517864 1800 600 2419200 18003600
NSnsb2.srv53.net.3600
NSnsc3.srv53.org.3600
NSnsa1.srv53.com.3600
NSnsd2.srv53.org.3600
NSnsa2.srv53.org.3600
NSnsc2.srv53.net.3600
NSnsb1.srv53.com.3600
NSnsd2.srv53.com.3600
NSnsa2.srv53.net.3600
NSnsc2.srv53.com.3600
NSnsb4.srv53.org.3600
NSnsd4.srv53.net.3600
A185.199.108.1533600

Checks

  • ✓ TTLs within range #32
    TTLs: A 1h, NS 1h. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35