payscale.com

Checked 22 October 2026, 10:12 UTC · via 8.8.8.8
!Passed with warnings
25 passed 2 warnings 0 failed 4 info

Registration

info

.com generic · Network Solutions, LLC · expires 2029-02-05

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
Network Solutions, LLC
Registered
5 February 1999
Last changed
8 January 2024
Expires
5 February 2029
Status
client transfer prohibited
Registry nameservers
ns1.zoneedit.com, ns13.zoneedit.com, ns16.zoneedit.com, ns17.zoneedit.com, ns2.zoneedit.com, ns6.zoneedit.co.uk
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2029-02-05 #3
    The registration is valid until 2029-02-05 (836 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

ns1.zoneedit.com, ns13.zoneedit.com, ns16.zoneedit.com, ns17.zoneedit.com, ns2.zoneedit.com, ns6.zoneedit.co.uk

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns1.zoneedit.com, ns13.zoneedit.com, ns16.zoneedit.com, ns17.zoneedit.com, ns2.zoneedit.com, ns6.zoneedit.co.uk
NS in the zone
ns1.zoneedit.com, ns13.zoneedit.com, ns16.zoneedit.com, ns17.zoneedit.com, ns2.zoneedit.com, ns6.zoneedit.co.uk, t2.zoneedit.com
NameserverAddressesNetwork (AS)Glue
ns1.zoneedit.com172.235.133.229 2a01:7e04::f03c:95ff:fe1d:a5b3AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud, SG AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud, SG172.235.133.229 2a01:7e04::f03c:95ff:fe1d:a5b3
ns13.zoneedit.com139.162.157.202 2a01:7e01::f03c:95ff:fe34:b655AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud, SG AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud, SG139.162.157.202 2a01:7e01::f03c:95ff:fe34:b655
ns16.zoneedit.com172.104.173.26 2400:8901::f03c:95ff:fe1d:4623AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud, SG AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud, SG172.104.173.26 2400:8901::f03c:95ff:fe1d:4623
ns17.zoneedit.com167.99.46.58 2a03:b0c0:2:f0::1714:7001AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC, US AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC, US167.99.46.58 2a03:b0c0:2:f0::1714:7001
ns2.zoneedit.com97.107.129.160 2600:3c03::f03c:95ff:fe34:9154AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud, SG AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud, SG2600:3c03::f03c:95ff:fe34:9154 97.107.129.160
ns6.zoneedit.co.uk165.22.116.248 2a03:b0c0:1:e0::1623:2001AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC, US AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC, US-
t2.zoneedit.com (zone only)45.33.33.148 2600:3c01::f03c:95ff:fe1d:a125AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud, SG AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud, SG-

Checks

  • ✓ 6 nameservers #6
    Delegated to ns1.zoneedit.com, ns13.zoneedit.com, ns16.zoneedit.com, ns17.zoneedit.com, ns2.zoneedit.com, ns6.zoneedit.co.uk.
  • !
    NS sets differ
    The nameservers at the parent and in the zone should be the same. Only in the zone: t2.zoneedit.com. ns1.zoneedit.com, ns13.zoneedit.com, ns16.zoneedit.com, ns17.zoneedit.com, ns2.zoneedit.com, ns6.zoneedit.co.uk, t2.zoneedit.com report NS ns1.zoneedit.com ns13.zoneedit.com ns16.zoneedit.com ns17.zoneedit.com ns2.zoneedit.com ns6.zoneedit.co.uk t2.zoneedit.com.
    #7
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 7 IPv4 /24s and 7 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS14061 (DIGITALOCEAN-ASN - DigitalOcean, LLC, US): 4 addresses; AS63949 (AKAMAI-LINODE-AP - Akamai Connected Cloud, SG): 10 addresses.
  • ✓ Nameserver names under 2 TLDs #12
    Nameserver names use the TLDs .com, .uk.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

info

14 of 14 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns1.zoneedit.com 172.235.133.229NOERROR, 118 ms, authoritativenoyes / yesrefusedmia1
ns1.zoneedit.com 2a01:7e04::f03c:95ff:fe1d:a5b3NOERROR, 117 ms, authoritativenoyes / yesrefusedmia1
ns13.zoneedit.com 139.162.157.202NOERROR, 4 ms, authoritativenoyes / yesrefusedfra1
ns13.zoneedit.com 2a01:7e01::f03c:95ff:fe34:b655NOERROR, 4 ms, authoritativenoyes / yesrefusedfra1
ns16.zoneedit.com 172.104.173.26NOERROR, 181 ms, authoritativenoyes / yesrefusedsgp1
ns16.zoneedit.com 2400:8901::f03c:95ff:fe1d:4623NOERROR, 264 ms, authoritativenoyes / yesrefusedsgp1
ns17.zoneedit.com 167.99.46.58NOERROR, 10 ms, authoritativenoyes / yesrefusedams1
ns17.zoneedit.com 2a03:b0c0:2:f0::1714:7001NOERROR, 10 ms, authoritativenoyes / yesrefusedams1
ns2.zoneedit.com 97.107.129.160NOERROR, 92 ms, authoritativenoyes / yesrefusednwk1
ns2.zoneedit.com 2600:3c03::f03c:95ff:fe34:9154NOERROR, 85 ms, authoritativenoyes / yesrefusednwk1
ns6.zoneedit.co.uk 165.22.116.248NOERROR, 20 ms, authoritativenoyes / yesrefusedlon1
ns6.zoneedit.co.uk 2a03:b0c0:1:e0::1623:2001NOERROR, 19 ms, authoritativenoyes / yesrefusedlon1
t2.zoneedit.com 45.33.33.148NOERROR, 157 ms, authoritativenoyes / yesrefusedsjc1
t2.zoneedit.com 2600:3c01::f03c:95ff:fe1d:a125NOERROR, 158 ms, authoritativenoyes / yesrefusedsjc1

Checks

  • ✓ All respond #14
    All 14 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: ns1.zoneedit.com: "mia1"; ns13.zoneedit.com: "fra1"; ns16.zoneedit.com: "sgp1"; ns17.zoneedit.com: "ams1"; ns2.zoneedit.com: "nwk1"; ns6.zoneedit.co.uk: "lon1"; t2.zoneedit.com: "sjc1".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

info

serial 1792610618 · primary dns0.zoneedit.com

Found

Primary (MNAME)
dns0.zoneedit.com
Contact (RNAME)
zone.zoneedit.com
Serial
1792610618
Refresh / retry
43200 s / 10800 s
Expire
604800 s
Negative TTL
300 s

Serial per nameserver

NameserverSerial
ns1.zoneedit.com (172.235.133.229)1792610618
ns1.zoneedit.com (2a01:7e04::f03c:95ff:fe1d:a5b3)1792610618
ns13.zoneedit.com (139.162.157.202)1792610618
ns13.zoneedit.com (2a01:7e01::f03c:95ff:fe34:b655)1792610618
ns16.zoneedit.com (172.104.173.26)1792610618
ns16.zoneedit.com (2400:8901::f03c:95ff:fe1d:4623)1792610618
ns17.zoneedit.com (167.99.46.58)1792610618
ns17.zoneedit.com (2a03:b0c0:2:f0::1714:7001)1792610618
ns2.zoneedit.com (97.107.129.160)1792610618
ns2.zoneedit.com (2600:3c03::f03c:95ff:fe34:9154)1792610618
ns6.zoneedit.co.uk (165.22.116.248)1792610618
ns6.zoneedit.co.uk (2a03:b0c0:1:e0::1623:2001)1792610618
t2.zoneedit.com (45.33.33.148)1792610618
t2.zoneedit.com (2600:3c01::f03c:95ff:fe1d:a125)1792610618

Checks

  • ✓ Serial 1792610618 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 12h, retry 3h, expire 7d, negative TTL 5m.
  • i
    Hidden master
    The primary nameserver dns0.zoneedit.com is not listed as a nameserver: a hidden master that only feeds the public secondaries. That is a common setup; make sure it is not reachable for zone transfers from outside.
    #24
  • ✓ Contact zone@zoneedit.com #25
    The SOA RNAME zone.zoneedit.com means zone@zoneedit.com.
  • ✓ Timestamp serial #26
    The serial 1792610618 is a Unix timestamp (2026-10-21 19:23 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

35 records at the apex

Found

Read from
172.235.133.229:53
TypeValueTTL
SOAdns0.zoneedit.com. zone.zoneedit.com. 1792610618 43200 10800 604800 300300
NSns2.zoneedit.com.300
NSns1.zoneedit.com.300
NSns17.zoneedit.com.300
NSns6.zoneedit.co.uk.300
NSns13.zoneedit.com.300
NSns16.zoneedit.com.300
NSt2.zoneedit.com.300
A192.5.11.10300
MX10 mxb-005a3d01.gslb.pphosted.com.300
MX10 mxa-005a3d01.gslb.pphosted.com.300
TXT"google-site-verification=YguBrBK27-oKmYwOthc_laqgqjFgjLk0WpdPElAuqY4"3600
TXT"canva-site-verification=WCbgMceuRiPNB8T_y2W5Tg"3600
TXT"docusign=3726154a-cef7-44e1-bc25-c47021379526"3600
TXT"smartsheet-site-validation=RKMouZr2WddxuKYeaGXqRCkN3Ymi-UpN"3600
TXT"adobe-idp-site-verification=7d067502565f2f6a1e54b8cf5799a157a09171bd7662b04248cd637e972cff68"3600
TXT"mongodb-site-verification=Gwom0fPqaaqiElQHF4AROaDYm6TV1Zae"3600
TXT"proxy-ssl.webflow.com"3600
TXT"onetrust-domain-verification=9bee87c40adf452a816dacbfec7e9151"3600
TXT"qase-82f13aad0c7fb9841f79523ea4803bf98b3d108f"3600
TXT"apple-domain-verification=XAO3PdGwtBzQ7jd4"3600
TXT"v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all"3600
TXT"logmein-verification-code=51c6d30b-ce96-4dae-8b25-c388ba2515ee"3600
TXT"MS=ms57582491"3600
TXT"anthropic-domain-verification-agxj5s=fvBkac6nPXChr37EfFPe3p88E"3600
TXT"_b400jrij79obhb3wybjiwsekq1fffqw"3600
TXT"citrix-verification-code=b602019d-4079-4cbc-ad74-8d30b9336f5a"3600
TXT"docker-verification=85d60bf2-2551-48d8-84a0-3c8b8c089147"3600
TXT"uOhOwn9Tea6biKmAc9CSgpzCcVAEg26Y+7aXZ0IFopmTKJi/BomJra7ZPa08INjympFhuq5/0wvk2NZOESyRHw=="3600
TXT"cursor-domain-verification-4wtkh4=n0P2hGEPXUBFoHifBkv2kT3Hv"3600
TXT"openai-domain-verification=dv-FOMWwDsKz4znV60LzcaCsD7k"3600
TXT"logmein-verification-code=f91dcb5b-8a92-4f15-b7f6-277127e465ac"3600
TXT"sophos-domain-verification=3e937fb9ad28939e143ba5028955eb6cd8cf46825b8e13bc4f0f63049f50e4d7"3600
TXT"drift-domain-verification=200a406eeb99022ade90c1f13839fe89e2942c098306f1054b49cdd9653ba31d"3600
TXT"atlassian-domain-verification=sT8IJJcnO8zgdrVJZSnluKLVhdqPwMx7a9R2BKOCM4PF0SuPenFZNzNpt4Yubqen"3600

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, MX 5m, NS 5m. The NS TTL at the parent is 2d and in the zone 5m; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35