oreillyauto.com

Checked 22 October 2026, 10:10 UTC · via 8.8.8.8
!Passed with warnings
24 passed 4 warnings 0 failed 3 info

Registration

info

.com generic · GoDaddy.com, LLC · expires 2028-02-05

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
GoDaddy.com, LLC
Registered
4 February 1996
Last changed
6 February 2026
Expires
5 February 2028
Status
client delete prohibited, client renew prohibited, client transfer prohibited, client update prohibited
Registry nameservers
a1-49.akam.net, a2-66.akam.net, a22-67.akam.net, a24-64.akam.net, a3-65.akam.net, a5-66.akam.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2028-02-05 #3
    The registration is valid until 2028-02-05 (470 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client renew prohibited, client transfer prohibited, client update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

a1-49.akam.net, a2-66.akam.net, a22-67.akam.net, a24-64.akam.net, a3-65.akam.net, a5-66.akam.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
a1-49.akam.net, a2-66.akam.net, a22-67.akam.net, a24-64.akam.net, a3-65.akam.net, a5-66.akam.net
NS in the zone
n2-a1.aka-ns.net, n2-a2.aka-ns.net, n2-a22.aka-ns.net, n2-a24.aka-ns.net, n2-a3.aka-ns.net, n2-a5.aka-ns.net
NameserverAddressesNetwork (AS)Glue
a1-49.akam.net (parent only)193.108.91.49 2600:1401:2::31AS20940 AKAMAI-ASN1 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a2-66.akam.net (parent only)95.100.174.66 2600:1480:7000::42AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a22-67.akam.net (parent only)23.211.61.67 2600:1480:7800::43AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a24-64.akam.net (parent only)2.16.130.64 2600:1480:9800::40AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a3-65.akam.net (parent only)96.7.49.65 2600:1408:1c::41AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a5-66.akam.net (parent only)95.100.168.66 2600:1480:b000::42AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
n2-a1.aka-ns.net (zone only)23.2.10.2 2600:1405:4800::2AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
n2-a2.aka-ns.net (zone only)23.2.11.2 2600:1405:5800::2AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
n2-a22.aka-ns.net (zone only)184.29.155.2 2600:1405:2c00::2AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
n2-a24.aka-ns.net (zone only)184.29.156.2 2600:1405:3400::2AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
n2-a3.aka-ns.net (zone only)23.2.19.2 2600:1405:6800::2AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
n2-a5.aka-ns.net (zone only)23.193.22.2 2600:1405:8800::2AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-

Checks

  • ✓ 6 nameservers #6
    Delegated to a1-49.akam.net, a2-66.akam.net, a22-67.akam.net, a24-64.akam.net, a3-65.akam.net, a5-66.akam.net.
  • !
    NS sets differ
    The nameservers at the parent and in the zone should be the same. Only at the parent: a1-49.akam.net, a2-66.akam.net, a22-67.akam.net, a24-64.akam.net, a3-65.akam.net, a5-66.akam.net; only in the zone: n2-a1.aka-ns.net, n2-a2.aka-ns.net, n2-a22.aka-ns.net, n2-a24.aka-ns.net, n2-a3.aka-ns.net, n2-a5.aka-ns.net. a1-49.akam.net, a2-66.akam.net, a22-67.akam.net, a24-64.akam.net, a3-65.akam.net, a5-66.akam.net, n2-a1.aka-ns.net, n2-a2.aka-ns.net, n2-a22.aka-ns.net, n2-a24.aka-ns.net, n2-a3.aka-ns.net, n2-a5.aka-ns.net report NS n2-a1.aka-ns.net n2-a2.aka-ns.net n2-a22.aka-ns.net n2-a24.aka-ns.net n2-a3.aka-ns.net n2-a5.aka-ns.net.
    #7
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 12 IPv4 /24s and 12 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS20940 (AKAMAI-ASN1 - Akamai International B.V., NL): 1 address; AS21342 (AKAMAI-ASN2 - Akamai International B.V., NL): 23 addresses.
  • i
    All nameserver names under .net
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

warn

24 of 24 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
a1-49.akam.net 193.108.91.49NOERROR, 3 ms, authoritativenoyes / yesrefused41824.5
a1-49.akam.net 2600:1401:2::31NOERROR, 3 ms, authoritativenoyes / yesrefused41824.5
a2-66.akam.net 95.100.174.66NOERROR, 3 ms, authoritativenoyes / yesrefused48878.31
a2-66.akam.net 2600:1480:7000::42NOERROR, 4 ms, authoritativenoyes / yesrefused48878.33
a22-67.akam.net 23.211.61.67NOERROR, 3 ms, authoritativenoyes / yesrefused48878.32
a22-67.akam.net 2600:1480:7800::43NOERROR, 4 ms, authoritativenoyes / yesrefused48878.30
a24-64.akam.net 2.16.130.64NOERROR, 4 ms, authoritativenoyes / yesrefused48878.29
a24-64.akam.net 2600:1480:9800::40NOERROR, 4 ms, authoritativenoyes / yesrefused48878.29
a3-65.akam.net 96.7.49.65NOERROR, 3 ms, authoritativenoyes / yesrefused41824.4
a3-65.akam.net 2600:1408:1c::41NOERROR, 4 ms, authoritativenoyes / yesrefused41824.10
a5-66.akam.net 95.100.168.66NOERROR, 3 ms, authoritativenoyes / yesrefused41824.8
a5-66.akam.net 2600:1480:b000::42NOERROR, 4 ms, authoritativenoyes / yesrefused41824.11
n2-a1.aka-ns.net 23.2.10.2NOERROR, 4 ms, authoritativenoyes / yesrefused41824.9
n2-a1.aka-ns.net 2600:1405:4800::2NOERROR, 4 ms, authoritativenoyes / yesrefused41824.8
n2-a2.aka-ns.net 23.2.11.2NOERROR, 3 ms, authoritativenoyes / yesrefused48878.32
n2-a2.aka-ns.net 2600:1405:5800::2NOERROR, 7 ms, authoritativenoyes / yesrefused48878.33
n2-a22.aka-ns.net 184.29.155.2NOERROR, 3 ms, authoritativenoyes / yesrefused48878.29
n2-a22.aka-ns.net 2600:1405:2c00::2NOERROR, 4 ms, authoritativenoyes / yesrefused48878.30
n2-a24.aka-ns.net 184.29.156.2NOERROR, 3 ms, authoritativenoyes / yesrefused48878.30
n2-a24.aka-ns.net 2600:1405:3400::2NOERROR, 8 ms, authoritativenoyes / yesrefused48878.27
n2-a3.aka-ns.net 23.2.19.2NOERROR, 3 ms, authoritativenoyes / yesrefused41824.9
n2-a3.aka-ns.net 2600:1405:6800::2NOERROR, 7 ms, authoritativenoyes / yesrefused41824.11
n2-a5.aka-ns.net 23.193.22.2NOERROR, 3 ms, authoritativenoyes / yesrefused41824.11
n2-a5.aka-ns.net 2600:1405:8800::2NOERROR, 3 ms, authoritativenoyes / yesrefused41824.8

Checks

  • ✓ All respond #14
    All 24 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: a1-49.akam.net: "41824.5"; a2-66.akam.net: "48878.31"; a2-66.akam.net: "48878.33"; a22-67.akam.net: "48878.32"; a22-67.akam.net: "48878.30"; a24-64.akam.net: "48878.29"; a3-65.akam.net: "41824.4"; a3-65.akam.net: "41824.10"; a5-66.akam.net: "41824.8"; a5-66.akam.net: "41824.11"; n2-a1.aka-ns.net: "41824.9"; n2-a1.aka-ns.net: "41824.8"; n2-a2.aka-ns.net: "48878.32"; n2-a2.aka-ns.net: "48878.33"; n2-a22.aka-ns.net: "48878.29"; n2-a22.aka-ns.net: "48878.30"; n2-a24.aka-ns.net: "48878.30"; n2-a24.aka-ns.net: "48878.27"; n2-a3.aka-ns.net: "41824.9"; n2-a3.aka-ns.net: "41824.11"; n2-a5.aka-ns.net: "41824.11"; n2-a5.aka-ns.net: "41824.8". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2017082297 · primary a1-49.akam.net

Found

Primary (MNAME)
a1-49.akam.net
Contact (RNAME)
hostmaster.ns1.oreillyauto.com
Serial
2017082297
Refresh / retry
10800 s / 3600 s
Expire
604800 s
Negative TTL
3600 s

Serial per nameserver

NameserverSerial
a1-49.akam.net (193.108.91.49)2017082297
a1-49.akam.net (2600:1401:2::31)2017082297
a2-66.akam.net (95.100.174.66)2017082297
a2-66.akam.net (2600:1480:7000::42)2017082297
a22-67.akam.net (23.211.61.67)2017082297
a22-67.akam.net (2600:1480:7800::43)2017082297
a24-64.akam.net (2.16.130.64)2017082297
a24-64.akam.net (2600:1480:9800::40)2017082297
a3-65.akam.net (96.7.49.65)2017082297
a3-65.akam.net (2600:1408:1c::41)2017082297
a5-66.akam.net (95.100.168.66)2017082297
a5-66.akam.net (2600:1480:b000::42)2017082297
n2-a1.aka-ns.net (23.2.10.2)2017082297
n2-a1.aka-ns.net (2600:1405:4800::2)2017082297
n2-a2.aka-ns.net (23.2.11.2)2017082297
n2-a2.aka-ns.net (2600:1405:5800::2)2017082297
n2-a22.aka-ns.net (184.29.155.2)2017082297
n2-a22.aka-ns.net (2600:1405:2c00::2)2017082297
n2-a24.aka-ns.net (184.29.156.2)2017082297
n2-a24.aka-ns.net (2600:1405:3400::2)2017082297
n2-a3.aka-ns.net (23.2.19.2)2017082297
n2-a3.aka-ns.net (2600:1405:6800::2)2017082297
n2-a5.aka-ns.net (23.193.22.2)2017082297
n2-a5.aka-ns.net (2600:1405:8800::2)2017082297

Checks

  • ✓ Serial 2017082297 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 3h, retry 1h, expire 7d, negative TTL 1h.
  • ✓ Primary is a public nameserver #24
    The primary nameserver a1-49.akam.net is one of the listed nameservers.
  • ✓ Contact hostmaster@ns1.oreillyauto.com #25
    The SOA RNAME hostmaster.ns1.oreillyauto.com means hostmaster@ns1.oreillyauto.com.
  • ✓ Date-based serial #26
    The serial 2017082297 follows the YYYYMMDDnn convention (2017-08-22).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

warn

30 records at the apex

Found

Read from
193.108.91.49:53
TypeValueTTL
SOAa1-49.akam.net. hostmaster.ns1.oreillyauto.com. 2017082297 10800 3600 604800 36003600
NSn2-a24.aka-ns.net.3600
NSn2-a22.aka-ns.net.3600
NSn2-a5.aka-ns.net.3600
NSn2-a3.aka-ns.net.3600
NSn2-a1.aka-ns.net.3600
NSn2-a2.aka-ns.net.3600
A104.102.45.12020
MX10 mxb-00700601.gslb.pphosted.com.600
MX10 mxa-00700601.gslb.pphosted.com.600
TXT"c9K4XoENKpgggwPXEldZhZeWvGzIWorMAVACSDLhNcae59I8EDbhLtTljKtwMm7gfV/cC7/iwYynCgFqXDhOqw== "3600
TXT"hpe-greenlake-domain-verification=476c6f4345537579455a2d4c6a67624643306d484b55744a4649324131477070"3600
TXT"adobe-idp-site-verification=5a4d80016a406fd720d63ec628d95054f165416b0e32098796110f9612f748dc"3600
TXT"kEBOiQJf/z6ax4VLmtETRx4ZEupf5VyKSi+sA/ofSDzSN1OqqMfekZO30brbuGgMU/XpUPkLTMWSs9QKj7v7RQ=="3600
TXT"v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all"3600
TXT"postman-domain-verification=53cea00b3d4abd22ffc2eef4d5479496edf7c2693180a151d069355d574d9000761a232491d87a855626290c805e3c377c23aea727ed89c70a745f2961999cce"3600
TXT"zscaler-verification-167757009-5142026-NEJZeL"3600
TXT"MS=ms75924758"3600
TXT"figma-domain-verification=dad277caedfc43a8dedd972c9edb3130ee3e443bc2be5789c64ab3ba40366793-1725977629"3600
TXT"google-site-verification=1N-hnheXC-Wuxu0WwZNbBHMfCKhAlecmxMJx_WMWx4g"3600
TXT"vertexinc-cloud-d0ebc8df-0a0d-47a1-b326-a8c04d47cd55"3600
TXT"google-site-verification=G31AVd_OZmCMpxsElXWvZn8AEc-VvuUNbbNN3-tsdYQ"3600
TXT"bed412d0-70ff-4082-b74f-6a6af6eae18a"3600
TXT"9+k/hOMAFFJgKFnueESiG3YDkacAINxvKXi6L955E="3600
TXT"2aeiMJ0Ovx72rEk9i74M0D2B33tE+Wu24gTRVOFmB88AEmrpJcEvFGTb/3+kS/r1hZDpAZwVu+wuJ5bh7gWiKg=="3600
TXT"atlassian-domain-verification=zkFECjNOoaFtbLJ0Ep3YmanaxICComYOoeod1xdi258rILf2wKdNA5aDkrRfnFYF"3600
TXT"8uLy8cqDbCNLxI9I4a9tOOzBCvuUpD3w26JWtaye/m9nV1Ke2bRFNoEAG1Ss3ZYm15IsI5ogGa6FliDTAoMXBw=="3600
TXT"cursor-domain-verification-yr4j08=RED9tHgulgJrIKpkVrzcjgeXf"3600
TXT"rMbuLlVpHJ4udzCwDvWAdPaXacJHUw86DWwQQnPx5v9XCFuCIfXNlO8IMY1AFxczWCSQaTNW1ej4dP4rhPwvug=="3600
TXT"k8VgbQ3FI8VvB0NrBjSlzXwyC1rBtE4TuB7Mij90IfIFLh0uwL2wBcoVNEYYllyr1LbTe7KsahFhUy5H7oLENA=="3600

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: A (20s). Low TTLs are useful just before a planned change. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35