mcafee.com

Checked 22 October 2026, 09:44 UTC · via 8.8.8.8
!Passed with warnings
26 passed 2 warnings 0 failed 3 info

Registration

info

.com generic · CSC Corporate Domains, Inc. · expires 2030-08-04

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
5 August 1992
Last changed
10 December 2025
Expires
4 August 2030
Status
client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
a1-44.akam.net, a13-67.akam.net, a14-64.akam.net, a24-65.akam.net, a26-66.akam.net, a3-67.akam.net, dns-a.mcafee.com, dns-b.mcafee.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2030-08-04 #3
    The registration is valid until 2030-08-04 (1381 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

a1-44.akam.net, a13-67.akam.net, a14-64.akam.net, a24-65.akam.net, a26-66.akam.net, a3-67.akam.net, dns-a.mcafee.com, dns-b.mcafee.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
a1-44.akam.net, a13-67.akam.net, a14-64.akam.net, a24-65.akam.net, a26-66.akam.net, a3-67.akam.net, dns-a.mcafee.com, dns-b.mcafee.com
NS in the zone
a1-44.akam.net, a13-67.akam.net, a14-64.akam.net, a24-65.akam.net, a26-66.akam.net, a3-67.akam.net, dns-a.mcafee.com, dns-b.mcafee.com
NameserverAddressesNetwork (AS)Glue
a1-44.akam.net193.108.91.44 2600:1401:2::2cAS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a13-67.akam.net2.22.230.67 2600:1480:800::43AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a14-64.akam.net184.26.161.64 2600:1480:1800::40AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a24-65.akam.net2.16.130.65 2600:1480:9800::41AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a26-66.akam.net23.74.25.66 2600:1480:b800::42AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a3-67.akam.net96.7.49.67 2600:1408:1c::43AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
dns-a.mcafee.com52.41.120.130 161.69.240.248AS16509 AMAZON-02 - Amazon.com, Inc., US AS14618 AMAZON-AES - Amazon.com, Inc., US161.69.240.248 52.41.120.130
dns-b.mcafee.com161.69.240.249 44.230.89.211AS14618 AMAZON-AES - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US161.69.240.249 44.230.89.211

Checks

  • ✓ 8 nameservers #6
    Delegated to a1-44.akam.net, a13-67.akam.net, a14-64.akam.net, a24-65.akam.net, a26-66.akam.net, a3-67.akam.net, dns-a.mcafee.com, dns-b.mcafee.com.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ Glue present and correct #8
    Glue is published for the nameservers inside the zone: dns-a.mcafee.com, dns-b.mcafee.com.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 9 IPv4 /24s and 6 IPv6 /48s.
  • ✓ 3 autonomous systems #11
    The nameservers are spread over: AS14618 (AMAZON-AES - Amazon.com, Inc., US): 2 addresses; AS16509 (AMAZON-02 - Amazon.com, Inc., US): 2 addresses; AS21342 (AKAMAI-ASN2 - Akamai International B.V., NL): 12 addresses.
  • ✓ Nameserver names under 2 TLDs #12
    Nameserver names use the TLDs .com, .net.
  • i
    Partly IPv6
    These nameservers have no IPv6 address: dns-a.mcafee.com, dns-b.mcafee.com.
    #13

Nameservers

warn

16 of 16 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
a1-44.akam.net 193.108.91.44NOERROR, 4 ms, authoritativenoyes / yesrefused41824.7
a1-44.akam.net 2600:1401:2::2cNOERROR, 4 ms, authoritativenoyes / yesrefused41824.9
a13-67.akam.net 2.22.230.67NOERROR, 10 ms, authoritativenoyes / yesrefused41824.11
a13-67.akam.net 2600:1480:800::43NOERROR, 10 ms, authoritativenoyes / yesrefused41824.7
a14-64.akam.net 184.26.161.64NOERROR, 10 ms, authoritativenoyes / yesrefused48878.33
a14-64.akam.net 2600:1480:1800::40NOERROR, 9 ms, authoritativenoyes / yesrefused48878.26
a24-65.akam.net 2.16.130.65NOERROR, 4 ms, authoritativenoyes / yesrefused48878.30
a24-65.akam.net 2600:1480:9800::41NOERROR, 4 ms, authoritativenoyes / yesrefused48878.27
a26-66.akam.net 23.74.25.66NOERROR, 3 ms, authoritativenoyes / yesrefused48878.33
a26-66.akam.net 2600:1480:b800::42NOERROR, 4 ms, authoritativenoyes / yesrefused48878.26
a3-67.akam.net 96.7.49.67NOERROR, 3 ms, authoritativenoyes / yesrefused41824.7
a3-67.akam.net 2600:1408:1c::43NOERROR, 4 ms, authoritativenoyes / yesrefused41824.11
dns-a.mcafee.com 52.41.120.130NOERROR, 171 ms, authoritativenoyes / yesrefusednot currently available
dns-a.mcafee.com 161.69.240.248NOERROR, 102 ms, authoritativenoyes / yesrefusednot currently available
dns-b.mcafee.com 161.69.240.249NOERROR, 102 ms, authoritativenoyes / yesrefusednot currently available
dns-b.mcafee.com 44.230.89.211NOERROR, 166 ms, authoritativenoyes / yesrefusednot currently available

Checks

  • ✓ All respond #14
    All 16 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: a1-44.akam.net: "41824.7"; a1-44.akam.net: "41824.9"; a13-67.akam.net: "41824.11"; a13-67.akam.net: "41824.7"; a14-64.akam.net: "48878.33"; a14-64.akam.net: "48878.26"; a24-65.akam.net: "48878.30"; a24-65.akam.net: "48878.27"; a26-66.akam.net: "48878.33"; a26-66.akam.net: "48878.26"; a3-67.akam.net: "41824.7"; a3-67.akam.net: "41824.11". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2026102103 · primary dns-a.mcafee.com

Found

Primary (MNAME)
dns-a.mcafee.com
Contact (RNAME)
hostmaster.mcafee.com
Serial
2026102103
Refresh / retry
7200 s / 3600 s
Expire
1209600 s
Negative TTL
300 s

Serial per nameserver

NameserverSerial
a1-44.akam.net (193.108.91.44)2026102103
a1-44.akam.net (2600:1401:2::2c)2026102103
a13-67.akam.net (2.22.230.67)2026102103
a13-67.akam.net (2600:1480:800::43)2026102103
a14-64.akam.net (184.26.161.64)2026102103
a14-64.akam.net (2600:1480:1800::40)2026102103
a24-65.akam.net (2.16.130.65)2026102103
a24-65.akam.net (2600:1480:9800::41)2026102103
a26-66.akam.net (23.74.25.66)2026102103
a26-66.akam.net (2600:1480:b800::42)2026102103
a3-67.akam.net (96.7.49.67)2026102103
a3-67.akam.net (2600:1408:1c::43)2026102103
dns-a.mcafee.com (52.41.120.130)2026102103
dns-a.mcafee.com (161.69.240.248)2026102103
dns-b.mcafee.com (161.69.240.249)2026102103
dns-b.mcafee.com (44.230.89.211)2026102103

Checks

  • ✓ Serial 2026102103 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 2h, retry 1h, expire 14d, negative TTL 5m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver dns-a.mcafee.com is one of the listed nameservers.
  • ✓ Contact hostmaster@mcafee.com #25
    The SOA RNAME hostmaster.mcafee.com means hostmaster@mcafee.com.
  • ✓ Date-based serial #26
    The serial 2026102103 follows the YYYYMMDDnn convention (2026-10-21).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

49 records at the apex

Found

Read from
193.108.91.44:53
TypeValueTTL
SOAdns-a.mcafee.com. hostmaster.mcafee.com. 2026102103 7200 3600 1209600 30086400
NSa26-66.akam.net.900
NSdns-a.mcafee.com.900
NSa24-65.akam.net.900
NSdns-b.mcafee.com.900
NSa1-44.akam.net.900
NSa3-67.akam.net.900
NSa14-64.akam.net.900
NSa13-67.akam.net.900
A100.20.214.93300
MX10 mcafee-com.mail.protection.outlook.com.900
TXT"anthropic-domain-verification-59dd9m=Y1Aw3Cdeurx2UShLU0vQbeebd"900
TXT"atlassian-domain-verification=YQTMzt2iNJl/cxsaxZpJp7IQg9aqhA/Cty6aNTr1WEmIx9Zsj21ExKa0XGVTclEA"900
TXT"zoho-verification=zb10983962.zmverify.zoho.com."900
TXT"docusign=d1e4d3fb-31f1-4826-8a9d-362bf8cecce1"900
TXT"openai-domain-verification=dv-SPuCf1UU5R15I1LtNOcDqYFb"900
TXT"flexera-domain-verification-acrumaatpukdirbp"900
TXT"_38geb8hagm423zpn5tx6gktaw1d00hu"900
TXT"_jzyrgw3it7x0l0q28nxc65sokob5tif"900
TXT"cursor-domain-verification-8dvh5q=bdS64BiITEMl3eoye5SANvi7a"900
TXT"zwGBphgWKY+BMz0gP3/dX8S1eJLSMIUpTY/7lKdKG99TwB5iB3QYXofZAbGB4B1bo+SxJlj1e4dAKgW2hYhg/A=="900
TXT"MS=ms41254757"900
TXT"liveramp-site-verification=wGgFZ6AeDCiMaHWJ64YDGVM7Y2JnY5m_vvkkx_dylZc"900
TXT"dell-technologies-domain-verification=mcafee.com_862aed7d-48e7-4d1e-989e-0a7abdf9c602_1763132634"900
TXT"postman-domain-verification=db763afdcb9ed9dee6ba59acab352a468a206f69082a2637ac0e8ce624995c30"900
TXT"adobe-idp-site-verification=ac33bf7e-1f11-49a0-b558-46c5111ba132"900
TXT"atlassian-domain-verification=NFJN+Kp881GEWHZQ3yeKr86c4x4rbxztqXniwQkaEdBm/j5LDstXNrNhd00udRPs"900
TXT"google-site-verification=Ih72UDvVcu4HPf-uzj2qhCdoiS3d8--729Dp3P-FSQY"900
TXT"jamf-site-verification=Wlc39a4TFcmDg8rj8j3Ftw"900
TXT"tiktok-developers-site-verification=IhgkHcfVMfjMtIjOkwTEGGE23iXDhtB7"900
TXT"miro-verification=c9cb8e2ec61088ced8749d937d8d273bafdea3d3"900
TXT"configcat-domain-verification=08dddf33-81e5-410d-8d0e-370226e96189"900
TXT"prove-verify=f0c1a936ff529d18be99c744b44c31cb"900
TXT"stripe-verification=48DA25A69AD3767A634F45831E4C418250E68AC0751476BC99ECCEF5981EB3B3"900
TXT"WV+a0N7l5Gnb1FsM4luQIyRvpC6ev7fPIVT2kaH02mYT38QK0rge/ilr70NMIdK3JP010Rc77GQZqnwmn71ezQ=="900
TXT"amazonses:JZmaxVTYk7N27uVOEuYyXBLjk5RU0iK1xsuBigzQ9OA="900
TXT"00ddn000004nspqmao"900
TXT"google-site-verification=CZp7ICYz74WfZqrDur7p53aeU2meanZZBt0zx6qKBZ8"900
TXT"sprout-social-e50da09b-2971-4080-b45f-d822f5d63de4"900
TXT"amazonses:uZSCBsiaeb+WcSQ+8aVzIB28qF6BXXVrmwCGx6QjjNA="900
TXT"parallels-domain-verification=f64bee84b08044319aeee5d6d1a3cbe68eaa9d1be1b14ddd82931747f8c1457b"900
TXT"mgverify=6da57309b8a79baeb8b37948768222c1c3c836398081e6f1ac2958e36d082359"900
TXT"facebook-domain-verification=9srjteoss5lcetnynkzjzr589br2kl"900
TXT"smartsheet-site-validation=eU6McoW9TqUPBQfcW1j-UJByjKOifLS6"900
TXT"amazonses:DY5W03b233riSM+26J4Z3xoDD70hRISO+XHgiV8vfHE="900
TXT"vmware-cloud-verification-21276266-2d4c-4f7f-a68f-ba24af954c92"900
TXT"amazonses:vE0WgJj/2i742h7tpSw9U913Vi4nNrp/hzJCBZ6isqY="900
TXT"v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email -all"900
TXT"flexera-domain-verification-zbivyffvxqvnzpml"900

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, MX 15m, NS 15m. The NS TTL at the parent is 2d and in the zone 15m; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35