mailjet.com

Checked 22 October 2026, 09:42 UTC · via 8.8.8.8
!Passed with warnings
27 passed 4 warnings 0 failed 4 info

Registration

warn

.com generic · OVH sas · expires 2026-11-08

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
OVH sas
Registered
8 November 2006
Last changed
23 September 2026
Expires
8 November 2026
Status
client delete prohibited, client transfer prohibited
Registry nameservers
ns0.mljt.tech, ns1.mljt.tech, ns2.mljt.tech
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • !
    Expires in 17 days
    The registration expires on 2026-11-08. Make sure it is renewed.
    #3
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

ns0.mljt.tech, ns1.mljt.tech, ns2.mljt.tech

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns0.mljt.tech, ns1.mljt.tech, ns2.mljt.tech
NS in the zone
ns0.mljt.tech, ns1.mljt.tech, ns2.mljt.tech
NameserverAddressesNetwork (AS)Glue
ns0.mljt.tech104.199.73.221AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC, US-
ns1.mljt.tech35.238.164.182AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC, US-
ns2.mljt.tech212.47.237.20AS12876 AS12876 - Scaleway SAS, FR-

Checks

  • ✓ 3 nameservers #6
    Delegated to ns0.mljt.tech, ns1.mljt.tech, ns2.mljt.tech.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 3 IPv4 /24s and 0 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS12876 (AS12876 - Scaleway SAS, FR): 1 address; AS396982 (GOOGLE-CLOUD-PLATFORM - Google LLC, US): 2 addresses.
  • i
    All nameserver names under .tech
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • !
    No IPv6
    None of the nameservers has an IPv6 address, so IPv6-only resolvers can't reach them.
    #13

Nameservers

pass

3 of 3 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns0.mljt.tech 104.199.73.221NOERROR, 13 ms, authoritativenoyes / yesrefused-
ns1.mljt.tech 35.238.164.182NOERROR, 113 ms, authoritativenoyes / yesrefused-
ns2.mljt.tech 212.47.237.20NOERROR, 15 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 3 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 2019357714 · primary ns0.mljt.tech

Found

Primary (MNAME)
ns0.mljt.tech
Contact (RNAME)
abuse.mailjet.com
Serial
2019357714
Refresh / retry
14400 s / 900 s
Expire
604800 s
Negative TTL
180 s

Serial per nameserver

NameserverSerial
ns0.mljt.tech (104.199.73.221)2019357714
ns1.mljt.tech (35.238.164.182)2019357714
ns2.mljt.tech (212.47.237.20)2019357714

Checks

  • ✓ Serial 2019357714 everywhere #22
    All nameservers serve the same version of the zone.
  • !
    Unusual SOA timers
    negative caching TTL (minimum) 3m is outside 5m–1d (RFC 2308 recommends 1–3 hours). Current values: refresh 4h, retry 15m, expire 7d, negative TTL 3m.
    #23
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns0.mljt.tech is one of the listed nameservers.
  • ✓ Contact abuse@mailjet.com #25
    The SOA RNAME abuse.mailjet.com means abuse@mailjet.com.
  • ✓ Timestamp serial #26
    The serial 2019357714 is a Unix timestamp (2033-12-28 04:41 UTC).

DNSSEC

info

Signed, DS published at parent

Found

Validated by resolver
yes
Denial of existence
NSEC
Signatures valid until
1 November 2026

DS at the parent

Key tagAlgorithmDigestMatches a key
23526ECDSAP256SHA256 (13)SHA256 35D331D1227FB394…yes

DNSKEY in the zone

Key tagRoleAlgorithm
46562ZSK (256)ECDSAP256SHA256 (13)
23526KSK (257)ECDSAP256SHA256 (13)

Checks

  • ✓ Signed and validated #27
    The zone is signed, the parent publishes a DS record, and the resolver validates the answers.
  • ✓ DS matches a key #28
    The DS record at the parent matches a key in the zone: key tag 23526 (SHA256).
  • ✓ Modern algorithms #29
    Key algorithms: ECDSAP256SHA256 (13).
  • ✓ Signatures valid until 2026-11-01 #30
    The earliest DNSKEY/SOA signature expires at 2026-11-01 19:45 UTC.
  • i
    NSEC
    The zone uses NSEC, so its full contents can be listed by walking the NSEC chain. That is fine unless the names are sensitive.
    #31

Records

warn

29 records at the apex

Found

Read from
104.199.73.221:53
TypeValueTTL
SOAns0.mljt.tech. abuse.mailjet.com. 2019357714 14400 900 604800 1807200
NSns0.mljt.tech.7200
NSns1.mljt.tech.7200
NSns2.mljt.tech.7200
A141.193.213.107200
A141.193.213.117200
MX0 mailjet-com.mail.protection.outlook.com.60
TXT"A92908FF8D"7200
TXT"MS=ms67111241"7200
TXT"MS=ms78882229"7200
TXT"MS=ms90249674"7200
TXT"38r6l3fxh9zg2rn2fxmn6jdnz46p33my"7200
TXT"_rxla9bon31ul7v3d7giuzcpk3m1vmjg"7200
TXT"_woqrfcvxusfyyjwqzxgqp18q5bhet1b"7200
TXT"b1wvgkfvl4xsdsksh97lcj7c3j3vx3rc"7200
TXT"jjbq97v741t054z5d8mmypwfwvjpy5sq"7200
TXT"detectify-verification=58ab2ecefd6a8fced3ea405f3513cadf"7200
TXT"google-site-verification=JYc849ZiuN8hDIOVfNHpILrj4YHHdRodeoEHpTdznDo"7200
TXT"google-site-verification=NIwZYjCk3zPRJWXOoCOaNgGCRDIszz_e7vrDtl0bHtg"7200
TXT"google-site-verification=TBOvw7EGxhIf59OmIiWPa9S0V1PG4B-1TCrEYS1iSvQ"7200
TXT"google-site-verification=TYUL0nXfz8-kNX2DchqUZtaCBfbYNazyFbw2M-WS4SA"7200
TXT"google-site-verification=cOcuVXOqzRUJRxZ5Rr3wITXgaJqVXfQP_pwwWrs1QeQ"7200
TXT"google-site-verification=eOA4KDa6flW9B2s9_P_Fbn2N0nUkDn3hnrvbW88tsWU"7200
TXT"google-site-verification=fH820-W_oo2SOX5A-noteq0XsKFKvtOzNUZxUn28oYQ"7200
TXT"mgverify=7e50634a833722533888024ae60ce1fb2f6bf7e8b3e68dea174e8a078803a268"7200
TXT"mgverify=c2b25f5241de4cb58eaca68b4674bf6188a4bfd3d63511aad66350f48cf9057d"7200
TXT"pardot830283=160f36035bfbba957664c7476bfd671b41ad6be534e9aeafd49ae3c5ee68dcfa"7200
TXT"v=spf1 include:spf.mailjet.com include:aspmx.pardot.com include:mailgun.org include:spf.protection.outlook.com -all"7200
TXT"v=DMARC1; p=reject; sp=reject; pct=100; fo=1; adkim=r; aspf=r; rua=mailto:mailjet@dmarc.mailjet.tech; ruf=mailto:mailjet@dmarc.mailjet.tech"7200

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: MX (1m). Low TTLs are useful just before a planned change. The NS TTL at the parent is 2d and in the zone 2h; resolvers may use either.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35