meijer.com

Checked 22 October 2026, 09:44 UTC · via 8.8.8.8
✗Problems found
22 passed 4 warnings 1 failed 4 info

Registration

info

.com generic · GoDaddy Corporate Domains, LLC · expires 2029-09-19

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
GoDaddy Corporate Domains, LLC
Registered
20 September 1995
Last changed
5 May 2025
Expires
19 September 2029
Status
client transfer prohibited
Registry nameservers
a1-122.akam.net, a12-65.akam.net, a13-66.akam.net, a2-67.akam.net, a4-64.akam.net, a9-65.akam.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2029-09-19 #3
    The registration is valid until 2029-09-19 (1062 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

a1-122.akam.net, a12-65.akam.net, a13-66.akam.net, a2-67.akam.net, a4-64.akam.net, a9-65.akam.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
a1-122.akam.net, a12-65.akam.net, a13-66.akam.net, a2-67.akam.net, a4-64.akam.net, a9-65.akam.net
NS in the zone
a1-122.akam.net, a12-65.akam.net, a13-66.akam.net, a2-67.akam.net, a4-64.akam.net, a9-65.akam.net, ns1.meijer.com, ns2.meijer.com
NameserverAddressesNetwork (AS)Glue
a1-122.akam.net193.108.91.122 2600:1401:2::7aAS20940 AKAMAI-ASN1 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a12-65.akam.net184.26.160.65 2600:1480:f000::41AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a13-66.akam.net2.22.230.66 2600:1480:800::42AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a2-67.akam.net95.100.174.67 2600:1480:7000::43AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a4-64.akam.net72.246.46.64 2600:1480:9000::40AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a9-65.akam.net184.85.248.65 2a02:26f0:117::41AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
ns1.meijer.com (zone only)204.74.192.66AS23068 MEIJERNET - MEIJER, US-
ns2.meijer.com (zone only)204.74.194.66AS23068 MEIJERNET - MEIJER, US-

Checks

  • ✓ 6 nameservers #6
    Delegated to a1-122.akam.net, a12-65.akam.net, a13-66.akam.net, a2-67.akam.net, a4-64.akam.net, a9-65.akam.net.
  • !
    NS sets differ
    The nameservers at the parent and in the zone should be the same. Only in the zone: ns1.meijer.com, ns2.meijer.com. a1-122.akam.net, a12-65.akam.net, a13-66.akam.net, a2-67.akam.net, a4-64.akam.net, a9-65.akam.net, ns1.meijer.com, ns2.meijer.com report NS a1-122.akam.net a12-65.akam.net a13-66.akam.net a2-67.akam.net a4-64.akam.net a9-65.akam.net ns1.meijer.com ns2.meijer.com.
    #7
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 8 IPv4 /24s and 6 IPv6 /48s.
  • ✓ 3 autonomous systems #11
    The nameservers are spread over: AS20940 (AKAMAI-ASN1 - Akamai International B.V., NL): 1 address; AS21342 (AKAMAI-ASN2 - Akamai International B.V., NL): 11 addresses; AS23068 (MEIJERNET - MEIJER, US): 2 addresses.
  • i
    All nameserver names under .net
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • i
    Partly IPv6
    These nameservers have no IPv6 address: ns1.meijer.com, ns2.meijer.com.
    #13

Nameservers

fail

14 of 14 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
a1-122.akam.net 193.108.91.122NOERROR, 3 ms, authoritativenoyes / yesrefused41824.4
a1-122.akam.net 2600:1401:2::7aNOERROR, 4 ms, authoritativenoyes / yesrefused41824.5
a12-65.akam.net 184.26.160.65NOERROR, 4 ms, authoritativenoyes / yesrefused48878.29
a12-65.akam.net 2600:1480:f000::41NOERROR, 4 ms, authoritativenoyes / yesrefused48878.26
a13-66.akam.net 2.22.230.66NOERROR, 5 ms, authoritativenoyes / yesrefused41824.6
a13-66.akam.net 2600:1480:800::42NOERROR, 5 ms, authoritativenoyes / yesrefused41824.8
a2-67.akam.net 95.100.174.67NOERROR, 6 ms, authoritativenoyes / yesrefused48878.29
a2-67.akam.net 2600:1480:7000::43NOERROR, 5 ms, authoritativenoyes / yesrefused48878.29
a4-64.akam.net 72.246.46.64NOERROR, 5 ms, authoritativenoyes / yesrefused48878.27
a4-64.akam.net 2600:1480:9000::40NOERROR, 5 ms, authoritativenoyes / yesrefused48878.32
a9-65.akam.net 184.85.248.65NOERROR, 5 ms, authoritativenoyes / yesrefused41824.6
a9-65.akam.net 2a02:26f0:117::41NOERROR, 6 ms, authoritativenoyes / yesrefused41824.6
ns1.meijer.com 204.74.192.66NOERROR, 100 ms, authoritativenono / yesrefused-
ns2.meijer.com 204.74.194.66NOERROR, 90 ms, authoritativenono / yesrefused-

Checks

  • ✓ All respond #14
    All 14 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: a1-122.akam.net: "41824.4"; a1-122.akam.net: "41824.5"; a12-65.akam.net: "48878.29"; a12-65.akam.net: "48878.26"; a13-66.akam.net: "41824.6"; a13-66.akam.net: "41824.8"; a2-67.akam.net: "48878.29"; a4-64.akam.net: "48878.27"; a4-64.akam.net: "48878.32"; a9-65.akam.net: "41824.6". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✗
    No DNS over TCP
    DNS over TCP is required (RFC 7766); without it, large answers such as DNSSEC responses fail. Not answering over TCP: ns1.meijer.com (204.74.192.66): dial tcp 204.74.192.66:53: i/o timeout; ns2.meijer.com (204.74.194.66): dial tcp 204.74.194.66:53: i/o timeout.
    #19
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 7323 · primary ns1.meijer.com

Found

Primary (MNAME)
ns1.meijer.com
Contact (RNAME)
root.ns.netop.meijer.com
Serial
7323
Refresh / retry
120 s / 60 s
Expire
1209600 s
Negative TTL
3600 s

Serial per nameserver

NameserverSerial
a1-122.akam.net (193.108.91.122)7323
a1-122.akam.net (2600:1401:2::7a)7323
a12-65.akam.net (184.26.160.65)7323
a12-65.akam.net (2600:1480:f000::41)7323
a13-66.akam.net (2.22.230.66)7323
a13-66.akam.net (2600:1480:800::42)7323
a2-67.akam.net (95.100.174.67)7323
a2-67.akam.net (2600:1480:7000::43)7323
a4-64.akam.net (72.246.46.64)7323
a4-64.akam.net (2600:1480:9000::40)7323
a9-65.akam.net (184.85.248.65)7323
a9-65.akam.net (2a02:26f0:117::41)7323
ns1.meijer.com (204.74.192.66)7323
ns2.meijer.com (204.74.194.66)7323

Checks

  • ✓ Serial 7323 everywhere #22
    All nameservers serve the same version of the zone.
  • !
    Unusual SOA timers
    refresh 2m is outside 20m–1d. Current values: refresh 2m, retry 1m, expire 14d, negative TTL 1h.
    #23
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns1.meijer.com is one of the listed nameservers.
  • ✓ Contact root@ns.netop.meijer.com #25
    The SOA RNAME root.ns.netop.meijer.com means root@ns.netop.meijer.com.
  • ✓ Counter serial #26
    The serial 7323 is a plain counter.

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

38 records at the apex

Found

Read from
193.108.91.122:53
TypeValueTTL
SOAns1.meijer.com. root.ns.netop.meijer.com. 7323 120 60 1209600 36003600
NSa4-64.akam.net.600
NSa1-122.akam.net.600
NSns1.meijer.com.600
NSa9-65.akam.net.600
NSa12-65.akam.net.600
NSa2-67.akam.net.600
NSns2.meijer.com.600
NSa13-66.akam.net.600
A204.74.167.99600
MX10 mxa-00185501.gslb.pphosted.com.1800
MX10 mxb-00185501.gslb.pphosted.com.1800
TXT"docusign=b73f133a-c05d-4bb5-a20d-a1fcaf696de5"600
TXT"miro-verification=2d65627d3eabf3a48e53d0e4d6835c42bc7c9536"600
TXT"google-site-verification=08U9V0eA12rhbaRVSKrYy-sUKUtPhk1HjL77MUL-8us"600
TXT"lb8drpqhc4v18mnnrl36wgpcg4f6lq5c"600
TXT"launchdarkly-domain-verification=3aa8af8b-e0dc-4f0f-b8d7-3bcb5ee849ff"600
TXT"google-site-verification=0D09dnPbhT6E05ERhZmW6hO2lfDjHCN7U1UvsCTCQ5E"600
TXT"segment-site-verification=rWXtk5NnMD6c0jIRb8dYKZtd9aXCjs3L"600
TXT"autodesk-domain-verification=6pVSR6qqBOrcjm7QxQFo"600
TXT"Dynatrace-site-verification=06505cab-c40d-49de-9e18-da0c8cc83de1__jgjbsgadjootnehd1l3pgur6gd"600
TXT"adobe-idp-site-verification=b367ab6996fc652760184f35f0ca40801f162ac522fceee7afc6a2e8f8f23de3"600
TXT"remarkable-domain-verification=dd49340e-812a-438d-b20e-dd981d0a390e"600
TXT"_8a448r4ub64biewnjvqcbflrzf2y2uu"600
TXT"amazonses:HQcr9bRpCjpft6/JYdO1UpEaCYDw7IorY8G1G0yE7vA="600
TXT"docusign=df7b8c57-1afa-4cc2-9760-f4951b8f73d0"600
TXT"bhf98hmaer210o09j4dsw9mca2dcqtb"600
TXT"sending_domain1030131=544a5010122e15e58fb47ddee5987f7afd90545134669bbc9bb1414c75c1dcb5"600
TXT"mk-org-sso-18dd8146-4f76-41cd-86c5-4b80ff9573ab"600
TXT"v=DKIM1;" "k=rsa;" "p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQClUz0TmhrnQxylkbJ7pH0408oqPNc0QawWZGO0C5Qlzua7BoOeb3qblWgawYTyA+Tq3zOITrcIUjAsp46ON4tZVpQWJ+IiBR1dfkvQ1UyXMoE3iUXe9ixAjCJIJROVkupXKjfzQsPt690A/3r8SF5Iozfzqgxx6YawFYsbR5JakwIDAQAB;" "n=1024,1498407597,1514218797"600
TXT"_a1ivvbj0tiq04qtc44mkgkxy3qryl73"600
TXT"MS=ms82636686"600
TXT" _nrahdxo12dx9rqwkb4uca7hqrk32tvg"600
TXT"apple-domain-verification=EqGZaZfqD4vPzGm7"600
TXT"H+dG0XFuyE0dGdeHVKLvW4uPpU8NunLtP8wGB/hkwPvj+z2MppQGg2y5rpZ1JxcOv/2a3KMJIPp/j5EbRD46Aw=="600
TXT"anthropic-domain-verification-yn9krd=eFvgDTNX9gd58qk76cuUr5JEu"600
TXT"v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com include:plexonline.com ~all"600
TXT"_o9pwrhoop5cb3rcst6mihag0zb153oj"600

Checks

  • ✓ TTLs within range #32
    TTLs: A 10m, MX 30m, NS 10m. The NS TTL at the parent is 2d and in the zone 10m; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35