mail.com

Checked 22 October 2026, 09:42 UTC · via 8.8.8.8
!Passed with warnings
31 passed 2 warnings 0 failed 2 info

Registration

info

.com generic · World4You Internet Services GmbH · expires 2027-03-25

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
World4You Internet Services GmbH
Registered
24 March 1997
Last changed
26 March 2026
Expires
25 March 2027
Status
client transfer prohibited
Registry nameservers
ns-gmx.ui-dns.biz, ns-gmx.ui-dns.com, ns-gmx.ui-dns.de, ns-gmx.ui-dns.org
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-03-25 #3
    The registration is valid until 2027-03-25 (153 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

ns-gmx.ui-dns.biz, ns-gmx.ui-dns.com, ns-gmx.ui-dns.de, ns-gmx.ui-dns.org

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns-gmx.ui-dns.biz, ns-gmx.ui-dns.com, ns-gmx.ui-dns.de, ns-gmx.ui-dns.org
NS in the zone
ns-gmx.ui-dns.biz, ns-gmx.ui-dns.com, ns-gmx.ui-dns.de, ns-gmx.ui-dns.org
NameserverAddressesNetwork (AS)Glue
ns-gmx.ui-dns.biz185.132.33.199 217.160.81.199 2001:8d8:fe:53:0:d9a0:51c7:100 2607:f1c0:fe:53:185:132:33:199AS15418 IONOS-ANYCAST - Fasthosts Internet Limited, GB AS8560 IONOS-AS - IONOS SE, DE AS8560 IONOS-AS - IONOS SE, DE AS15418 IONOS-ANYCAST - Fasthosts Internet Limited, GB-
ns-gmx.ui-dns.com185.132.34.199 217.160.82.199 2001:8d8:fe:53:0:d9a0:52c7:100 2607:f1c0:fe:53:185:132:34:199AS15418 IONOS-ANYCAST - Fasthosts Internet Limited, GB AS8560 IONOS-AS - IONOS SE, DE AS8560 IONOS-AS - IONOS SE, DE AS15418 IONOS-ANYCAST - Fasthosts Internet Limited, GB217.160.82.199
ns-gmx.ui-dns.de185.132.32.199 217.160.80.199 2001:8d8:fe:53:0:d9a0:50c7:100 2607:f1c0:fe:53:185:132:32:199AS15418 IONOS-ANYCAST - Fasthosts Internet Limited, GB AS8560 IONOS-AS - IONOS SE, DE AS8560 IONOS-AS - IONOS SE, DE AS15418 IONOS-ANYCAST - Fasthosts Internet Limited, GB-
ns-gmx.ui-dns.org217.160.83.199 185.132.35.199 2607:f1c0:fe:53:185:132:35:199 2001:8d8:fe:53:0:d9a0:53c7:100AS8560 IONOS-AS - IONOS SE, DE AS15418 IONOS-ANYCAST - Fasthosts Internet Limited, GB AS15418 IONOS-ANYCAST - Fasthosts Internet Limited, GB AS8560 IONOS-AS - IONOS SE, DE-

Checks

  • ✓ 4 nameservers #6
    Delegated to ns-gmx.ui-dns.biz, ns-gmx.ui-dns.com, ns-gmx.ui-dns.de, ns-gmx.ui-dns.org.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • !
    Glue differs from the zone
    The addresses at the parent (glue) differ from the addresses in the zone: ns-gmx.ui-dns.com (glue 217.160.82.199, zone 185.132.34.199, 217.160.82.199, 2001:8d8:fe:53:0:d9a0:52c7:100, 2607:f1c0:fe:53:185:132:34:199). Update the glue at your registrar.
    #8
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 8 IPv4 /24s and 2 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS15418 (IONOS-ANYCAST - Fasthosts Internet Limited, GB): 8 addresses; AS8560 (IONOS-AS - IONOS SE, DE): 8 addresses.
  • ✓ Nameserver names under 4 TLDs #12
    Nameserver names use the TLDs .biz, .com, .de, .org.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

info

16 of 16 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns-gmx.ui-dns.biz 185.132.33.199NOERROR, 3 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-gmx.ui-dns.biz 217.160.81.199NOERROR, 9 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-gmx.ui-dns.biz 2001:8d8:fe:53:0:d9a0:51c7:100NOERROR, 9 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-gmx.ui-dns.biz 2607:f1c0:fe:53:185:132:33:199NOERROR, 4 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-gmx.ui-dns.com 185.132.34.199NOERROR, 4 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-gmx.ui-dns.com 217.160.82.199NOERROR, 9 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-gmx.ui-dns.com 2001:8d8:fe:53:0:d9a0:52c7:100NOERROR, 10 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-gmx.ui-dns.com 2607:f1c0:fe:53:185:132:34:199NOERROR, 4 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-gmx.ui-dns.de 185.132.32.199NOERROR, 4 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-gmx.ui-dns.de 217.160.80.199NOERROR, 9 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-gmx.ui-dns.de 2001:8d8:fe:53:0:d9a0:50c7:100NOERROR, 10 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-gmx.ui-dns.de 2607:f1c0:fe:53:185:132:32:199NOERROR, 4 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-gmx.ui-dns.org 217.160.83.199NOERROR, 9 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-gmx.ui-dns.org 185.132.35.199NOERROR, 4 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-gmx.ui-dns.org 2607:f1c0:fe:53:185:132:35:199NOERROR, 4 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/
ns-gmx.ui-dns.org 2001:8d8:fe:53:0:d9a0:53c7:100NOERROR, 10 ms, authoritativenoyes / yesrefusedServed by PowerDNS - https://www.powerdns.com/

Checks

  • ✓ All respond #14
    All 16 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: ns-gmx.ui-dns.biz: "Served by PowerDNS - https://www.powerdns.com/"; ns-gmx.ui-dns.com: "Served by PowerDNS - https://www.powerdns.com/"; ns-gmx.ui-dns.de: "Served by PowerDNS - https://www.powerdns.com/"; ns-gmx.ui-dns.org: "Served by PowerDNS - https://www.powerdns.com/".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2013096961 · primary ns-gmx.ui-dns.com

Found

Primary (MNAME)
ns-gmx.ui-dns.com
Contact (RNAME)
hostmaster.gmx.net
Serial
2013096961
Refresh / retry
14400 s / 3600 s
Expire
605000 s
Negative TTL
600 s

Serial per nameserver

NameserverSerial
ns-gmx.ui-dns.biz (185.132.33.199)2013096961
ns-gmx.ui-dns.biz (217.160.81.199)2013096961
ns-gmx.ui-dns.biz (2001:8d8:fe:53:0:d9a0:51c7:100)2013096961
ns-gmx.ui-dns.biz (2607:f1c0:fe:53:185:132:33:199)2013096961
ns-gmx.ui-dns.com (185.132.34.199)2013096961
ns-gmx.ui-dns.com (217.160.82.199)2013096961
ns-gmx.ui-dns.com (2001:8d8:fe:53:0:d9a0:52c7:100)2013096961
ns-gmx.ui-dns.com (2607:f1c0:fe:53:185:132:34:199)2013096961
ns-gmx.ui-dns.de (185.132.32.199)2013096961
ns-gmx.ui-dns.de (217.160.80.199)2013096961
ns-gmx.ui-dns.de (2001:8d8:fe:53:0:d9a0:50c7:100)2013096961
ns-gmx.ui-dns.de (2607:f1c0:fe:53:185:132:32:199)2013096961
ns-gmx.ui-dns.org (217.160.83.199)2013096961
ns-gmx.ui-dns.org (185.132.35.199)2013096961
ns-gmx.ui-dns.org (2607:f1c0:fe:53:185:132:35:199)2013096961
ns-gmx.ui-dns.org (2001:8d8:fe:53:0:d9a0:53c7:100)2013096961

Checks

  • ✓ Serial 2013096961 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 4h, retry 1h, expire 168h3m20s, negative TTL 10m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns-gmx.ui-dns.com is one of the listed nameservers.
  • ✓ Contact hostmaster@gmx.net #25
    The SOA RNAME hostmaster.gmx.net means hostmaster@gmx.net.
  • ✓ Timestamp serial #26
    The serial 2013096961 is a Unix timestamp (2033-10-16 17:36 UTC).

DNSSEC

warn

Signed, DS published at parent

Found

Validated by resolver
yes
Denial of existence
NSEC3
NSEC3
27 iterations, 8-byte salt
Signatures valid until
4 November 2026

DS at the parent

Key tagAlgorithmDigestMatches a key
55057RSASHA256 (8)SHA256 AD94C93CADAB1664…yes

DNSKEY in the zone

Key tagRoleAlgorithm
55057KSK (257)RSASHA256 (8)
44628ZSK (256)RSASHA256 (8)

Checks

  • ✓ Signed and validated #27
    The zone is signed, the parent publishes a DS record, and the resolver validates the answers.
  • ✓ DS matches a key #28
    The DS record at the parent matches a key in the zone: key tag 55057 (SHA256).
  • ✓ Modern algorithms #29
    Key algorithms: RSASHA256 (8).
  • ✓ Signatures valid until 2026-11-04 #30
    The earliest DNSKEY/SOA signature expires at 2026-11-04 06:53 UTC.
  • !
    NSEC3 with extra iterations or salt
    NSEC3 uses 27 iterations and a 8-byte salt. RFC 9276 recommends 0 iterations and no salt: extra iterations cost resolvers CPU and add no real protection, and some validators treat high counts as insecure.
    #31

Records

pass

25 records at the apex

Found

Read from
185.132.33.199:53
TypeValueTTL
SOAns-gmx.ui-dns.com. hostmaster.gmx.net. 2013096961 14400 3600 605000 60086400
NSns-gmx.ui-dns.biz.86400
NSns-gmx.ui-dns.de.86400
NSns-gmx.ui-dns.org.86400
NSns-gmx.ui-dns.com.86400
A217.72.199.108300
A217.72.199.107300
MX10 mx01.mail.com.900
MX10 mx00.mail.com.900
TXT"facebook-domain-verification=1tfo5yk9c82lmx9liuspqxjs4pflqh"300
TXT"_kgq2gak9z4xcvprqzb5cish8ayg4e2j"300
TXT"v=spf1 redirect=_spf.mail.com"3600
TXT"6l6jlm3slqmj6p36q5ml3klr3y26fdf8"300
TXT"tpverification20190725"300
TXT"google-site-verification=uKluyr2DCMEw-x6xj83XKnu0IKR3AqUJ1qZcWyAZRDk"86400
TXT"google-site-verification=q1HG15Gz1NxldgaHm8L0IMUI1rx-lcr7b3GdhzQD38M"86400
TXT"google-site-verification=Kf3yXNbla6wH4iBd4VLGWn_8tSmFpAVTsDakfLRx5fI"86400
TXT"google-site-verification=YymMa2Q1A1HdQ6ZSXlCEjvK-0cm9pYYHyK9jLlaZO_Q"3600
TXT"plnw801jhnynl9yjq06byqmfhjw58vh2"300
CAA0 issue "telesec.de"86400
CAA0 issuewild "sectigo.com"86400
CAA0 issue "Digicert.com"86400
CAA0 issue "sectigo.com"86400
CAA0 issuewild "digicert.com"86400
CAA0 issuewild "telesec.de"86400

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, MX 15m, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: telesec.de, sectigo.com, Digicert.com, digicert.com.