liebherr.com

Checked 22 October 2026, 09:35 UTC · via 8.8.8.8
!Passed with warnings
26 passed 2 warnings 0 failed 3 info

Registration

info

.com generic · COREhub, S.R.L. · expires 2031-03-06

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
COREhub, S.R.L.
Registered
5 March 1996
Last changed
6 March 2026
Expires
6 March 2031
Status
client delete prohibited, client transfer prohibited
Registry nameservers
lhpns01.liebherr.de, ns3.lemarit.net, ns4.lemarit.de
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2031-03-06 #3
    The registration is valid until 2031-03-06 (1595 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

lhpns01.liebherr.de, ns3.lemarit.net, ns4.lemarit.de

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
lhpns01.liebherr.de, ns3.lemarit.net, ns4.lemarit.de
NS in the zone
lhpns01.liebherr.de, ns3.lemarit.net, ns4.lemarit.de
NameserverAddressesNetwork (AS)Glue
lhpns01.liebherr.de193.27.220.17 2a01:a080:0:11f5:4ad:6982:83f:1ec1AS30915 LIEBHERR - Liebherr-IT Services GmbH, DE AS30915 LIEBHERR - Liebherr-IT Services GmbH, DE-
ns3.lemarit.net81.209.198.2AS24640 BSWS-AS - BS Web Services GmbH, DE-
ns4.lemarit.de176.97.158.101 2001:67c:10b8::101AS1921 RCODEZERO-ANYCAST-SEC1-TLD - ipcom GmbH, AT AS1921 RCODEZERO-ANYCAST-SEC1-TLD - ipcom GmbH, AT-

Checks

  • ✓ 3 nameservers #6
    Delegated to lhpns01.liebherr.de, ns3.lemarit.net, ns4.lemarit.de.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 3 IPv4 /24s and 2 IPv6 /48s.
  • ✓ 3 autonomous systems #11
    The nameservers are spread over: AS1921 (RCODEZERO-ANYCAST-SEC1-TLD - ipcom GmbH, AT): 2 addresses; AS24640 (BSWS-AS - BS Web Services GmbH, DE): 1 address; AS30915 (LIEBHERR - Liebherr-IT Services GmbH, DE): 2 addresses.
  • ✓ Nameserver names under 2 TLDs #12
    Nameserver names use the TLDs .de, .net.
  • i
    Partly IPv6
    These nameservers have no IPv6 address: ns3.lemarit.net.
    #13

Nameservers

warn

5 of 5 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
lhpns01.liebherr.de 193.27.220.17NOERROR, 11 ms, authoritativenoyes / yesrefused-
lhpns01.liebherr.de 2a01:a080:0:11f5:4ad:6982:83f:1ec1NOERROR, 8 ms, authoritativenoyes / yesrefused-
ns3.lemarit.net 81.209.198.2NOERROR, 10 ms, authoritativenoyes / yesrefusedNSD 4.15.2
ns4.lemarit.de 176.97.158.101NOERROR, 12 ms, authoritativenoyes / yesrefusedreg-wie1
ns4.lemarit.de 2001:67c:10b8::101NOERROR, 12 ms, authoritativenoyes / yesrefusedreg-wie1

Checks

  • ✓ All respond #14
    All 5 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: ns3.lemarit.net: "NSD 4.15.2". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2013126865 · primary lhpns01.liebherr.de

Found

Primary (MNAME)
lhpns01.liebherr.de
Contact (RNAME)
dns-admin.liebherr.com
Serial
2013126865
Refresh / retry
28800 s / 1800 s
Expire
2419200 s
Negative TTL
43200 s

Serial per nameserver

NameserverSerial
lhpns01.liebherr.de (193.27.220.17)2013126865
lhpns01.liebherr.de (2a01:a080:0:11f5:4ad:6982:83f:1ec1)2013126865
ns3.lemarit.net (81.209.198.2)2013126865
ns4.lemarit.de (176.97.158.101)2013126865
ns4.lemarit.de (2001:67c:10b8::101)2013126865

Checks

  • ✓ Serial 2013126865 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 8h, retry 30m, expire 28d, negative TTL 12h.
  • ✓ Primary is a public nameserver #24
    The primary nameserver lhpns01.liebherr.de is one of the listed nameservers.
  • ✓ Contact dns-admin@liebherr.com #25
    The SOA RNAME dns-admin.liebherr.com means dns-admin@liebherr.com.
  • ✓ Timestamp serial #26
    The serial 2013126865 is a Unix timestamp (2033-10-17 01:54 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

64 records at the apex

Found

Read from
193.27.220.17:53
TypeValueTTL
SOAlhpns01.liebherr.de. dns-admin.liebherr.com. 2013126865 28800 1800 2419200 4320043200
NSns3.lemarit.net.43200
NSlhpns01.liebherr.de.43200
NSns4.lemarit.de.43200
A104.16.191.51800
A104.16.192.51800
AAAA2606:4700::6810:c0051800
AAAA2606:4700::6810:bf051800
MX10 mxa-00701402.gslb.pphosted.com.300
MX10 mxb-00701402.gslb.pphosted.com.300
TXT"mongodb-site-verification=74hRPhKN1bGT39PM8K26S2zf5x7PSzyI"43200
TXT"pinterest-site-verification=fdb9921ed9188669444f3a84dea2bbe8"43200
TXT"autodesk-domain-verification=tuJBgwcMWI8P2jw39jAH"43200
TXT"atlassian-domain-verification=7MSOUc2QaqiFQFTbnR9kC20xrdJnDUvlcmFvlwPwSMHN/jLxD8BIaFM70Ch/FWjD"43200
TXT"lbq637k0w4j72v6t2scp1n7w10lfbmpl"43200
TXT"_niae7muev6jstdlxvelmqq146divrcn"43200
TXT"google-site-verification=QuuKmlionwaSrE6_61Iz1E4eacdeig8swnXNcyUysdA"43200
TXT"google-site-verification=l3cxZEYq2f3siv9V4s3VeOHUrP2fqd0Ae2Bd5aXDVoU"43200
TXT"infor-cloudsuite-domain-verification=ES6CJJGEDLAW8QZSZUE92SU52VVYFFV5PTTRS2KYYVHZ6TQMHZSVNZN7JSPJAYYM"43200
TXT"0fk9klsvvz03x3p6094ynvwryg1v260n"43200
TXT"x3hzt7sgwf89l509x1lw322k9tt1mhyc"43200
TXT"qv8wd2pbr85qclfc8d26d9g4w71rzhkm"43200
TXT"_ku7ovw106ufa2nnhnq7o19ns1xu4uxu"43200
TXT"fc1fcf33-f8cc-46f3-b341-0bef68549a6b"43200
TXT"google-gws-recovery-domain-verification=50945225"43200
TXT"mggh1dx3776g24z6r1bw43v4kf0mkmsh"43200
TXT"v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all"3600
TXT"051rhg62n325gj573xfxjzsnrsm55vtj"43200
TXT"google-site-verification=GcRtkhhPolyhZXecLp3s_uLbBMU38k8iVa9jvdvr_94"43200
TXT"google-site-verification=uDmypn52qyvQwGYVWNb3eaKVgRJSiYQwgpMrkxxnQNw"43200
TXT"pinterest-site-verification=363dd7f7f7c40f88285e02851b0e63e3"43200
TXT"rk2888txh9w2hmwwvmsfmnx8tsn6k7sq"43200
TXT"s0yz7bykyllt6rgz5ljk4j8vsmx0gvl2"43200
TXT"google-site-verification=BqqlF4JapLmSb3_mryU0p8i1cGuo6z2IN9Xhh1lEpN8"43200
TXT"facebook-domain-verification=l14fpau58e5vobfk5x8qev4y4q95pt"43200
TXT"7fa04052-458a-472e-9917-1afe6cf77a04"43200
TXT"0ba14327-883b-4d1f-adf8-ef50d3ff6f43"43200
TXT"google-site-verification=urtzI6RgyUcgMgE5SAjyzbD5ZfxPxHKZvVR0I-iQsBo"43200
TXT"wiz-domain-verification=342e8d3042ae8c390dcb6dc8f34f28343466136b645d77dac097d30b61181cd9"43200
TXT"_wx3ovq3x50ow2hd8vqyxrd5rrh53o9e"43200
TXT"canva-site-verification=euHYBD4oGZeP6GXcvS8Qng"43200
TXT"mindmanager-verification=0796ec2b0039aba266b686b0e92a36a05a1cecc85d2c6f3e497924774d099578"43200
TXT"msfpkey=ddwm663di4l8t3799mlro7s8"3600
TXT"94s0tfzhxkqvqjk957z4sg0prlwt73mq"60
TXT"cisco-ci-domain-verification=968089f341461bdc51c0d09f2dadd5b4cb6411302376b183e83a9530ccbe802"43200
TXT"docusign=a0b7f14a-8ed5-4929-85a0-572a193ab8a7"43200
TXT"yandex-verification: 38a4eff5e7b28d02"43200
TXT"google-site-verification=v_S0p4LYwhUvH4tgB-ueuxevT2IX_EzmdVKlVOomobA" ""43200
TXT"mongodb-site-verification=oOam7dc8eFLX6DBlpUHSe06OlFGByDv1"43200
TXT"lXKmrDaPBLAmKYTCDr7fXyaWfYXq3hyZ"43200
TXT"_ysbzi9zzwinnr1jjcbayg23kyl905uy"43200
TXT"_j7yvtmk715yikkogrzgo1kd67kvelrm"43200
TXT"MS674980"43200
TXT"0s5w8lw66vgp6f9klv3p1t3fs63xz166"43200
TXT"apple-domain-verification=0TdfcUp3QCylJ1z9"43200
TXT"docusign=af7fae30-dd81-4870-a83d-a6eaeb2bc0c9"43200
TXT"b3k1ljng4pvvkrb61qtfpncd4wbfdmjk"43200
TXT"nyhy39rwml1wtmqjsl6qb02jphymf0mn"43200
TXT"swisssign-check=zdlPfHq2mxNtz90Fql1DAh_CXMs"3600
TXT"8a347d06-4c6f-45a3-aa65-9b124986ec2f"43200
TXT"zbkr5xyrs7nkd5jzljdq8z7nbykqw3b6"43200
TXT"nintex.60a24249da11090070948ea2"43200
TXT"google-site-verification=mQoAWve_NTsz2IBEDwA-178xGk9an6F0eqHGO2sKGv8"300
TXT"MS=ms39149994"3600

Checks

  • ✓ TTLs within range #32
    TTLs: A 30m, AAAA 30m, MX 5m, NS 12h. The NS TTL at the parent is 2d and in the zone 12h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35