mobil.com

Checked 22 October 2026, 09:52 UTC · via 8.8.8.8
!Passed with warnings
23 passed 3 warnings 0 failed 5 info

Registration

info

.com generic · MarkMonitor Inc. · expires 2028-02-02

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
MarkMonitor Inc.
Registered
1 February 1991
Last changed
1 January 2026
Expires
2 February 2028
Status
client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
a1-116.akam.net, a10-67.akam.net, a13-67.akam.net, a14-65.akam.net, a18-64.akam.net, a3-66.akam.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2028-02-02 #3
    The registration is valid until 2028-02-02 (467 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

a1-116.akam.net, a10-67.akam.net, a13-67.akam.net, a14-65.akam.net, a18-64.akam.net, a3-66.akam.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
a1-116.akam.net, a10-67.akam.net, a13-67.akam.net, a14-65.akam.net, a18-64.akam.net, a3-66.akam.net
NS in the zone
a1-116.akam.net, a10-67.akam.net, a14-65.akam.net, a18-64.akam.net, ns2-67.akam.net, use6.akam.net
NameserverAddressesNetwork (AS)Glue
a1-116.akam.net193.108.91.116 2600:1401:2::74AS20940 AKAMAI-ASN1 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a10-67.akam.net96.7.50.67 2600:1480:d000::43AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a13-67.akam.net (parent only)2.22.230.67 2600:1480:800::43AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a14-65.akam.net184.26.161.65 2600:1480:1800::41AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a18-64.akam.net95.101.36.64 2600:1480:4800::40AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a3-66.akam.net (parent only)96.7.49.66 2600:1408:1c::42AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
ns2-67.akam.net (zone only)2.22.230.67AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
use6.akam.net (zone only)2.16.40.65AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-

Checks

  • ✓ 6 nameservers #6
    Delegated to a1-116.akam.net, a10-67.akam.net, a13-67.akam.net, a14-65.akam.net, a18-64.akam.net, a3-66.akam.net.
  • !
    NS sets differ
    The nameservers at the parent and in the zone should be the same. Only at the parent: a13-67.akam.net, a3-66.akam.net; only in the zone: ns2-67.akam.net, use6.akam.net. a1-116.akam.net, a10-67.akam.net, a13-67.akam.net, a14-65.akam.net, a18-64.akam.net, a3-66.akam.net, ns2-67.akam.net, use6.akam.net report NS a1-116.akam.net a10-67.akam.net a14-65.akam.net a18-64.akam.net ns2-67.akam.net use6.akam.net.
    #7
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 7 IPv4 /24s and 6 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS20940 (AKAMAI-ASN1 - Akamai International B.V., NL): 1 address; AS21342 (AKAMAI-ASN2 - Akamai International B.V., NL): 13 addresses.
  • i
    All nameserver names under .net
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • i
    Partly IPv6
    These nameservers have no IPv6 address: ns2-67.akam.net, use6.akam.net.
    #13

Nameservers

warn

14 of 14 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
a1-116.akam.net 193.108.91.116NOERROR, 3 ms, authoritativenoyes / yesrefused41824.10
a1-116.akam.net 2600:1401:2::74NOERROR, 4 ms, authoritativenoyes / yesrefused41824.4
a10-67.akam.net 96.7.50.67NOERROR, 3 ms, authoritativenoyes / yesrefused48878.32
a10-67.akam.net 2600:1480:d000::43NOERROR, 3 ms, authoritativenoyes / yesrefused48878.27
a13-67.akam.net 2.22.230.67NOERROR, 4 ms, authoritativenoyes / yesrefused41824.7
a13-67.akam.net 2600:1480:800::43NOERROR, 4 ms, authoritativenoyes / yesrefused41824.5
a14-65.akam.net 184.26.161.65NOERROR, 3 ms, authoritativenoyes / yesrefused48878.27
a14-65.akam.net 2600:1480:1800::41NOERROR, 3 ms, authoritativenoyes / yesrefused48878.31
a18-64.akam.net 95.101.36.64NOERROR, 3 ms, authoritativenoyes / yesrefused48878.29
a18-64.akam.net 2600:1480:4800::40NOERROR, 4 ms, authoritativenoyes / yesrefused48878.31
a3-66.akam.net 96.7.49.66NOERROR, 3 ms, authoritativenoyes / yesrefused41824.11
a3-66.akam.net 2600:1408:1c::42NOERROR, 4 ms, authoritativenoyes / yesrefused41824.10
ns2-67.akam.net 2.22.230.67NOERROR, 3 ms, authoritativenoyes / yesrefused41824.11
use6.akam.net 2.16.40.65NOERROR, 3 ms, authoritativenoyes / yesrefused48878.29

Checks

  • ✓ All respond #14
    All 14 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: a1-116.akam.net: "41824.10"; a1-116.akam.net: "41824.4"; a10-67.akam.net: "48878.32"; a10-67.akam.net: "48878.27"; a13-67.akam.net: "41824.7"; a13-67.akam.net: "41824.5"; a14-65.akam.net: "48878.27"; a14-65.akam.net: "48878.31"; a18-64.akam.net: "48878.29"; a18-64.akam.net: "48878.31"; a3-66.akam.net: "41824.11"; a3-66.akam.net: "41824.10"; ns2-67.akam.net: "41824.11"; use6.akam.net: "48878.29". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

info

serial 20112879 · primary a1-5.akam.net

Found

Primary (MNAME)
a1-5.akam.net
Contact (RNAME)
gsc-emit-ns-core-route53.exxonmobil.com
Serial
20112879
Refresh / retry
3600 s / 1800 s
Expire
604800 s
Negative TTL
300 s

Serial per nameserver

NameserverSerial
a1-116.akam.net (193.108.91.116)20112879
a1-116.akam.net (2600:1401:2::74)20112879
a10-67.akam.net (96.7.50.67)20112879
a10-67.akam.net (2600:1480:d000::43)20112879
a13-67.akam.net (2.22.230.67)20112879
a13-67.akam.net (2600:1480:800::43)20112879
a14-65.akam.net (184.26.161.65)20112879
a14-65.akam.net (2600:1480:1800::41)20112879
a18-64.akam.net (95.101.36.64)20112879
a18-64.akam.net (2600:1480:4800::40)20112879
a3-66.akam.net (96.7.49.66)20112879
a3-66.akam.net (2600:1408:1c::42)20112879
ns2-67.akam.net (2.22.230.67)20112879
use6.akam.net (2.16.40.65)20112879

Checks

  • ✓ Serial 20112879 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 1h, retry 30m, expire 7d, negative TTL 5m.
  • i
    Hidden master
    The primary nameserver a1-5.akam.net is not listed as a nameserver: a hidden master that only feeds the public secondaries. That is a common setup; make sure it is not reachable for zone transfers from outside.
    #24
  • ✓ Contact gsc-emit-ns-core-route53@exxonmobil.com #25
    The SOA RNAME gsc-emit-ns-core-route53.exxonmobil.com means gsc-emit-ns-core-route53@exxonmobil.com.
  • ✓ Counter serial #26
    The serial 20112879 is a plain counter.

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

32 records at the apex

Found

Read from
193.108.91.116:53
TypeValueTTL
SOAa1-5.akam.net. gsc-emit-ns-core-route53.exxonmobil.com. 20112879 3600 1800 604800 3003600
NSa18-64.akam.net.3600
NSa10-67.akam.net.3600
NSa1-116.akam.net.3600
NSa14-65.akam.net.3600
NSuse6.akam.net.3600
NSns2-67.akam.net.3600
A13.64.199.2313600
A172.190.140.103600
TXT"google-site-verification=j8Wo1Da4Cda9OyRP0rCnZ4yKgEDGEk-XSj9Q4BMjtLc"3600
TXT"_13n9avetzhrfl2oz13eh0sy562x1wg0"3600
TXT"_mjllvrflhym08tq6xezts3seeny6gqi"3600
TXT"_3dlgexibmhszb7f6kc3r774n780a2ve"3600
TXT"b3lwcsky7wwcwq2g2xgf9hzcqx5mthy0"3600
TXT"9s6858kkgpxx5d5239tnm6n5g7hmyv3t"3600
TXT"hbvb9gw85wpm97pgt9nq6xwzx3jcyf99"3600
TXT"_5jvd93klkcmor5agj6tg39l0lhpvibe"3600
TXT"_l13y10g1qcf3vekv36zj8kytq84rnqh"3600
TXT"_7ze63fc1lu2dgv1ko85zabs81ciae8o"3600
TXT"vkc1ym2trjfn51khd8pqd1cb1xbqzft6"3600
TXT"google-site-verification=4mC3hvzaXV6mMpKTVnPEsZEng-zdicd0CwXCCQ4Uxk4"3600
TXT"p3wp1hdn0sx7smkndqskr0sxpb9w3wbc"3600
TXT"_dn85i9vlchq8xpq28yd1rlg6x8tzyl1"3600
TXT"_y57hgue345c5ry4jddwbzo8prwv6efk"3600
TXT"google-site-verification=Jn09o5ZWz-e44ib5YwksGdO7RKCo7eK2mB2oFFi8Z0k"3600
TXT"45353BDBC5541D9ADE442CE82E9547B0EE58988EF174A7A2FB0516B7B87A81BC"3600
TXT"_qk6n1cqdlb9zt5czo6zzc1s48hb8w0z"3600
TXT"1w64906trlx0z5w6mx4jrmqz6lq0thjp"3600
TXT"ol5n3prrhk026sk8d9j8e314pj"3600
TXT"_83jed121ybfovia9aw4zeylco9iy85y"3600
TXT"lhhqgk89pn34nn2kjg8ppc58hhr9035l"3600
TXT"_isr5d4v0mzqutjxh43eo3ajllfrpbat"3600

Checks

  • ✓ TTLs within range #32
    TTLs: A 1h, NS 1h. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35