mcmaster.com

Checked 22 October 2026, 09:44 UTC · via 8.8.8.8
!Passed with warnings
24 passed 5 warnings 0 failed 2 info

Registration

info

.com generic · Network Solutions, LLC · expires 2028-08-22

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
Network Solutions, LLC
Registered
23 August 1994
Last changed
12 November 2020
Expires
22 August 2028
Status
client transfer prohibited
Registry nameservers
a1-3.akam.net, a20-66.akam.net, a5-67.akam.net, a6-64.akam.net, a8-65.akam.net, a9-66.akam.net, ns1-106.akam.net, ns1-203.akam.net, ns1-25.akam.net, ns1.mcmaster.com, ns2.mcmaster.com, ns3.mcmaster.com, ns4.mcmaster.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2028-08-22 #3
    The registration is valid until 2028-08-22 (669 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

a1-3.akam.net, a20-66.akam.net, a5-67.akam.net, a6-64.akam.net, a8-65.akam.net, a9-66.akam.net, ns1-106.akam.net, ns1-203.akam.net, ns1-25.akam.net, ns1.mcmaster.com, ns2.mcmaster.com, ns3.mcmaster.com, ns4.mcmaster.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
a1-3.akam.net, a20-66.akam.net, a5-67.akam.net, a6-64.akam.net, a8-65.akam.net, a9-66.akam.net, ns1-106.akam.net, ns1-203.akam.net, ns1-25.akam.net, ns1.mcmaster.com, ns2.mcmaster.com, ns3.mcmaster.com, ns4.mcmaster.com
NS in the zone
ns1.mcmaster.com, ns2.mcmaster.com, ns3.mcmaster.com, ns4.mcmaster.com
NameserverAddressesNetwork (AS)Glue
a1-3.akam.net (parent only)193.108.91.3 2600:1401:2::3AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a20-66.akam.net (parent only)95.100.175.66 2a02:26f0:67::42AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a5-67.akam.net (parent only)95.100.168.67 2600:1480:b000::43AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a6-64.akam.net (parent only)23.211.133.64 2600:1401:1::40AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a8-65.akam.net (parent only)2.16.40.65 2600:1403:a::41AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a9-66.akam.net (parent only)184.85.248.66 2a02:26f0:117::42AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
ns1-106.akam.net (parent only)193.108.91.106 2600:1401:2::6aAS20940 AKAMAI-ASN1 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
ns1-203.akam.net (parent only)193.108.91.203 2600:1401:2::cbAS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
ns1-25.akam.net (parent only)193.108.91.25 2600:1401:2::19AS20940 AKAMAI-ASN1 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
ns1.mcmaster.com209.64.25.48AS22034 MCMNET - MCMASTER CARR SUPPLY COMPANY, US209.64.25.48
ns2.mcmaster.com12.203.197.20AS22034 MCMNET - MCMASTER CARR SUPPLY COMPANY, US12.203.197.20
ns3.mcmaster.com209.64.25.47AS22034 MCMNET - MCMASTER CARR SUPPLY COMPANY, US209.64.25.47
ns4.mcmaster.com12.203.197.21AS22034 MCMNET - MCMASTER CARR SUPPLY COMPANY, US12.203.197.21

Checks

  • ✓ 13 nameservers #6
    Delegated to a1-3.akam.net, a20-66.akam.net, a5-67.akam.net, a6-64.akam.net, a8-65.akam.net, a9-66.akam.net, ns1-106.akam.net, ns1-203.akam.net, ns1-25.akam.net, ns1.mcmaster.com, ns2.mcmaster.com, ns3.mcmaster.com, ns4.mcmaster.com.
  • !
    NS sets differ
    The nameservers at the parent and in the zone should be the same. Only at the parent: a1-3.akam.net, a20-66.akam.net, a5-67.akam.net, a6-64.akam.net, a8-65.akam.net, a9-66.akam.net, ns1-106.akam.net, ns1-203.akam.net, ns1-25.akam.net. a1-3.akam.net, a20-66.akam.net, a5-67.akam.net, a6-64.akam.net, a8-65.akam.net, a9-66.akam.net, ns1-106.akam.net, ns1-203.akam.net, ns1-25.akam.net, ns1.mcmaster.com, ns2.mcmaster.com, ns3.mcmaster.com, ns4.mcmaster.com report NS ns1.mcmaster.com ns2.mcmaster.com ns3.mcmaster.com ns4.mcmaster.com.
    #7
  • ✓ Glue present and correct #8
    Glue is published for the nameservers inside the zone: ns1.mcmaster.com, ns2.mcmaster.com, ns3.mcmaster.com, ns4.mcmaster.com.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 8 IPv4 /24s and 6 IPv6 /48s.
  • ✓ 3 autonomous systems #11
    The nameservers are spread over: AS20940 (AKAMAI-ASN1 - Akamai International B.V., NL): 2 addresses; AS21342 (AKAMAI-ASN2 - Akamai International B.V., NL): 16 addresses; AS22034 (MCMNET - MCMASTER CARR SUPPLY COMPANY, US): 4 addresses.
  • ✓ Nameserver names under 2 TLDs #12
    Nameserver names use the TLDs .com, .net.
  • i
    Partly IPv6
    These nameservers have no IPv6 address: ns1.mcmaster.com, ns2.mcmaster.com, ns3.mcmaster.com, ns4.mcmaster.com.
    #13

Nameservers

warn

22 of 22 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
a1-3.akam.net 193.108.91.3NOERROR, 3 ms, authoritativenoyes / yesrefused41824.4
a1-3.akam.net 2600:1401:2::3NOERROR, 4 ms, authoritativenoyes / yesrefused41824.6
a20-66.akam.net 95.100.175.66NOERROR, 3 ms, authoritativenoyes / yesrefused48878.33
a20-66.akam.net 2a02:26f0:67::42NOERROR, 7 ms, authoritativenoyes / yesrefused48878.30
a5-67.akam.net 95.100.168.67NOERROR, 3 ms, authoritativenoyes / yesrefused41824.7
a5-67.akam.net 2600:1480:b000::43NOERROR, 6 ms, authoritativenoyes / yesrefused41824.11
a6-64.akam.net 23.211.133.64NOERROR, 4 ms, authoritativenoyes / yesrefused48878.30
a6-64.akam.net 2600:1401:1::40NOERROR, 4 ms, authoritativenoyes / yesrefused48878.33
a8-65.akam.net 2.16.40.65NOERROR, 4 ms, authoritativenoyes / yesrefused48878.27
a8-65.akam.net 2600:1403:a::41NOERROR, 5 ms, authoritativenoyes / yesrefused48878.27
a9-66.akam.net 184.85.248.66NOERROR, 3 ms, authoritativenoyes / yesrefused41824.8
a9-66.akam.net 2a02:26f0:117::42NOERROR, 7 ms, authoritativenoyes / yesrefused41824.11
ns1-106.akam.net 193.108.91.106NOERROR, 4 ms, authoritativenoyes / yesrefused41824.7
ns1-106.akam.net 2600:1401:2::6aNOERROR, 3 ms, authoritativenoyes / yesrefused41824.7
ns1-203.akam.net 193.108.91.203NOERROR, 3 ms, authoritativenoyes / yesrefused41824.7
ns1-203.akam.net 2600:1401:2::cbNOERROR, 3 ms, authoritativenoyes / yesrefused41824.6
ns1-25.akam.net 193.108.91.25NOERROR, 3 ms, authoritativenoyes / yesrefused41824.9
ns1-25.akam.net 2600:1401:2::19NOERROR, 4 ms, authoritativenoyes / yesrefused41824.6
ns1.mcmaster.com 209.64.25.48NOERROR, 113 ms, authoritativenoyes / yesrefused-
ns2.mcmaster.com 12.203.197.20NOERROR, 110 ms, authoritativenoyes / yesrefused-
ns3.mcmaster.com 209.64.25.47NOERROR, 113 ms, authoritativenoyes / yesrefused-
ns4.mcmaster.com 12.203.197.21NOERROR, 111 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 22 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: a1-3.akam.net: "41824.4"; a1-3.akam.net: "41824.6"; a20-66.akam.net: "48878.33"; a20-66.akam.net: "48878.30"; a5-67.akam.net: "41824.7"; a5-67.akam.net: "41824.11"; a6-64.akam.net: "48878.30"; a6-64.akam.net: "48878.33"; a8-65.akam.net: "48878.27"; a9-66.akam.net: "41824.8"; a9-66.akam.net: "41824.11"; ns1-106.akam.net: "41824.7"; ns1-203.akam.net: "41824.7"; ns1-203.akam.net: "41824.6"; ns1-25.akam.net: "41824.9"; ns1-25.akam.net: "41824.6". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 1783 · primary ns2.mcmaster.com

Found

Primary (MNAME)
ns2.mcmaster.com
Contact (RNAME)
hostmaster.mcmaster.com
Serial
1783
Refresh / retry
60 s / 900 s
Expire
86400 s
Negative TTL
60 s

Serial per nameserver

NameserverSerial
a1-3.akam.net (193.108.91.3)1783
a1-3.akam.net (2600:1401:2::3)1783
a20-66.akam.net (95.100.175.66)1783
a20-66.akam.net (2a02:26f0:67::42)1783
a5-67.akam.net (95.100.168.67)1783
a5-67.akam.net (2600:1480:b000::43)1783
a6-64.akam.net (23.211.133.64)1783
a6-64.akam.net (2600:1401:1::40)1783
a8-65.akam.net (2.16.40.65)1783
a8-65.akam.net (2600:1403:a::41)1783
a9-66.akam.net (184.85.248.66)1783
a9-66.akam.net (2a02:26f0:117::42)1783
ns1-106.akam.net (193.108.91.106)1783
ns1-106.akam.net (2600:1401:2::6a)1783
ns1-203.akam.net (193.108.91.203)1783
ns1-203.akam.net (2600:1401:2::cb)1783
ns1-25.akam.net (193.108.91.25)1783
ns1-25.akam.net (2600:1401:2::19)1783
ns1.mcmaster.com (209.64.25.48)1783
ns2.mcmaster.com (12.203.197.20)1783
ns3.mcmaster.com (209.64.25.47)1783
ns4.mcmaster.com (12.203.197.21)1783

Checks

  • ✓ Serial 1783 everywhere #22
    All nameservers serve the same version of the zone.
  • !
    Unusual SOA timers
    refresh 1m is outside 20m–1d; retry 15m should be shorter than refresh 1m; expire 1d is shorter than 7d; secondaries stop answering too soon when the primary is down; negative caching TTL (minimum) 1m is outside 5m–1d (RFC 2308 recommends 1–3 hours). Current values: refresh 1m, retry 15m, expire 1d, negative TTL 1m.
    #23
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns2.mcmaster.com is one of the listed nameservers.
  • ✓ Contact hostmaster@mcmaster.com #25
    The SOA RNAME hostmaster.mcmaster.com means hostmaster@mcmaster.com.
  • ✓ Counter serial #26
    The serial 1783 is a plain counter.

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

warn

23 records at the apex

Found

Read from
193.108.91.3:53
TypeValueTTL
SOAns2.mcmaster.com. hostmaster.mcmaster.com. 1783 60 900 86400 6060
NSns4.mcmaster.com.60
NSns2.mcmaster.com.60
NSns1.mcmaster.com.60
NSns3.mcmaster.com.60
A209.64.25.14960
MX0 mx0a-00570c01.pphosted.com.60
MX0 mx0b-00570c01.pphosted.com.60
TXT"_00e3btp7pnzoy6pqegfm7fsjjp0x9uw"60
TXT"anthropic-domain-verification-18mq8v=LcuVZynEW19BWYIbz7j3ntQMp"60
TXT"_kxi5f2699317hnmzrd20oc6kknc7myl"60
TXT"apple-domain-verification=TTiWjZN11fZHZBQi"60
TXT"docusign=e7d2700e-0abc-46de-9ae4-ec25ed45fdb7"60
TXT"google-site-verification=yEN1-3qH9KxX3WSAoE2HiMMy4H9TTJoMcGUY8i7hEpI"60
TXT"miro-verification=f4e0eeb30859fc7ba1f97fa4226ca3e283c9c863"60
TXT"twilio-domain-verification=e479f5ca90dfdbf8f06152e28adbb4f8"60
TXT"atlassian-domain-verification=GNSv9wabNT5xNCz0qSb/2LU6iZpUAc1Za56wsU1hJhgLeSTuIVYcajabmy9s1Bbf"60
TXT"notion-domain-verification=hk4fClpkyNxaDpYRpNMju4LWhDtHC9IfPqji2fvE7LU"60
TXT"Docusign=fddb2627-4a16-4d5e-82e7-258220484b8d"60
TXT"MS=ms15831590"60
TXT"MS=E150D2B549DCBD0EB9D652EE4B78C88D8E94B1F0"60
TXT"v=spf1 ip4:209.64.25.245 ip4:209.64.25.246 ip4:209.64.25.247 ip4:209.64.25.248 ip4:12.203.197.22 ip4:12.203.197.23 ip4:12.203.197.24 ip4:12.203.197.25 ip4:44.203.112.2 include:_spfprod.ngpvan.com ~all "60
CAA0 issue "digicert.com"60

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: A (1m), MX (1m), NS (1m). Low TTLs are useful just before a planned change. The NS TTL at the parent is 2d and in the zone 1m; resolvers may use either.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: digicert.com.