news12.com

Checked 22 October 2026, 10:02 UTC · via 8.8.8.8
✗Problems found
20 passed 6 warnings 1 failed 4 info

Registration

info

.com generic · GoDaddy.com, LLC · expires 2027-08-15

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
GoDaddy.com, LLC
Registered
16 August 1995
Last changed
15 August 2026
Expires
15 August 2027
Status
client delete prohibited, client renew prohibited, client transfer prohibited, client update prohibited
Registry nameservers
authns1.alticeusa.com, authns1.alticeusa.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-08-15 #3
    The registration is valid until 2027-08-15 (296 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client renew prohibited, client transfer prohibited, client update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

authns1.alticeusa.com, authns1.alticeusa.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
authns1.alticeusa.com, authns1.alticeusa.net
NS in the zone
authns1.alticeusa.com, authns1.alticeusa.net
NameserverAddressesNetwork (AS)Glue
authns1.alticeusa.com167.206.13.20AS6128 CABLE-NET-1 - Cablevision Systems Corp., US167.206.13.20
authns1.alticeusa.net167.206.12.12AS6128 CABLE-NET-1 - Cablevision Systems Corp., US-

Checks

  • i
    2 nameservers
    Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: authns1.alticeusa.com, authns1.alticeusa.net.
    #6
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 2 IPv4 /24s and 0 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS6128 (CABLE-NET-1 - Cablevision Systems Corp., US): 2 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • ✓ Nameserver names under 2 TLDs #12
    Nameserver names use the TLDs .com, .net.
  • !
    No IPv6
    None of the nameservers has an IPv6 address, so IPv6-only resolvers can't reach them.
    #13

Nameservers

fail

2 of 2 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
authns1.alticeusa.com 167.206.13.20NOERROR, 88 ms, authoritativenoyes / yesALLOWED (418 records)Akamai ANSPremier 5.5.0.1
authns1.alticeusa.net 167.206.12.12NOERROR, 86 ms, authoritativenoyes / yesALLOWED (418 records)Akamai ANSPremier 5.5.0.1

Checks

  • ✓ All respond #14
    All 2 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: authns1.alticeusa.com: "Akamai ANSPremier 5.5.0.1"; authns1.alticeusa.net: "Akamai ANSPremier 5.5.0.1". Hide or replace the version string.
    #17
  • ✗
    Zone transfer allowed
    These nameservers send the complete zone to anyone who asks (AXFR), exposing all host names: authns1.alticeusa.com (167.206.13.20): 418 records; authns1.alticeusa.net (167.206.12.12): 418 records. Restrict zone transfers to your secondary servers.
    #18
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 1792663222 · primary authns1.alticeusa.net

Found

Primary (MNAME)
authns1.alticeusa.net
Contact (RNAME)
postmaster.news12.com
Serial
1792663222
Refresh / retry
300 s / 900 s
Expire
604800 s
Negative TTL
900 s

Serial per nameserver

NameserverSerial
authns1.alticeusa.com (167.206.13.20)1792663222
authns1.alticeusa.net (167.206.12.12)1792663319

Checks

  • !
    Serials differ
    The nameservers serve different versions of the zone: 1792663222 on authns1.alticeusa.com (167.206.13.20); 1792663319 on authns1.alticeusa.net (167.206.12.12). This is normal for a few minutes after a change; if it lasts, zone transfers to the secondaries are failing.
    #22
  • !
    Unusual SOA timers
    refresh 5m is outside 20m–1d; retry 15m should be shorter than refresh 5m. Current values: refresh 5m, retry 15m, expire 7d, negative TTL 15m.
    #23
  • ✓ Primary is a public nameserver #24
    The primary nameserver authns1.alticeusa.net is one of the listed nameservers.
  • ✓ Contact postmaster@news12.com #25
    The SOA RNAME postmaster.news12.com means postmaster@news12.com.
  • ✓ Timestamp serial #26
    The serial 1792663222 is a Unix timestamp (2026-10-22 10:00 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

warn

23 records at the apex

Found

Read from
167.206.13.20:53
TypeValueTTL
SOAauthns1.alticeusa.net. postmaster.news12.com. 1792663208 300 900 604800 900300
NSauthns1.alticeusa.net.300
NSauthns1.alticeusa.com.300
A199.232.90.13260
MX5 news12-com.mail.protection.outlook.com.900
TXT"00D2E000000mzxj=1TBU100000001qY"300
TXT"MS=ms73729254"300
TXT"_globalsign-domain-verification=fsrfW7Xky97daWCU-mDTGZh-Fqns_6wvS3p-DBPbF_"300
TXT"adobe-idp-site-verification=37d331cea75c3ef7d82087776c0210a41721b1f4841e13c09f43780cb0b6f85e"300
TXT"atlassian-domain-verification=sPlYODO/9qyfnAkIXkQTMdQzP3hclGw3EcPjtqufrjSsoOFR335flitqz95iIr/8"300
TXT"canva-site-verification=HKJ7Hzp_mu9bGKZ1zOmGCg"300
TXT"facebook-domain-verification=3nwd6npmd5okm6cbjaa74ai5u5uniu"300
TXT"facebook-domain-verification=663o6f5gstcveh1sfmvtpnza7aqwwu"300
TXT"facebook-domain-verification=7ywzmpgwg48ak9mf33hgg3qqcku1bv"300
TXT"facebook-domain-verification=8ebpt3crxnwcuhgvmqr2rnj6qh5i3t"300
TXT"facebook-domain-verification=d9rvqy7t5gnhw7gksf4vpn4b5hz7rk"300
TXT"facebook-domain-verification=exvhs4o8qzsmv4btfi06o63d0k6s7m"300
TXT"facebook-domain-verification=groaxpbmrvj0lyhnk276gicdeh7ks6"300
TXT"facebook-domain-verification=o5v3oq6soj69wb10nu3thmeex7tr5h"300
TXT"google-site-verification=4KlCXQJj_DPcFDdyHCUoTBZ1EvkFGUZ8KfK4SRTQc9E"300
TXT"google-site-verification=mEsqGuDmSUMhysJ_AA8WFt8eXX7aGqjl5irV1fuh49k"300
TXT"v=spf1 a mx include:spf.protection.outlook.com include:aspmx.sailthru.com ip4:167.206.119.150 ip4:167.206.119.151 ip4:66.76.203.77 ~all"300
TXT"yahoo-verification-key=m1WExfwIDb7wM/O2539k09vyZ/Mb7zSK3uAUbJEdPVo="300

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: A (1m). Low TTLs are useful just before a planned change. The NS TTL at the parent is 2d and in the zone 5m; resolvers may use either.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35