peterlang.com

Checked 22 October 2026, 10:13 UTC · via 8.8.8.8
!Passed with warnings
28 passed 1 warning 0 failed 6 info

Registration

info

.com generic · GoDaddy.com, LLC · expires 2030-06-16

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
GoDaddy.com, LLC
Registered
11 January 1996
Last changed
9 January 2026
Expires
16 June 2030
Status
client delete prohibited, client renew prohibited, client transfer prohibited, client update prohibited
Registry nameservers
pdns09.domaincontrol.com, pdns10.domaincontrol.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2030-06-16 #3
    The registration is valid until 2030-06-16 (1333 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client renew prohibited, client transfer prohibited, client update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

pdns09.domaincontrol.com, pdns10.domaincontrol.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
pdns09.domaincontrol.com, pdns10.domaincontrol.com
NS in the zone
pdns09.domaincontrol.com, pdns10.domaincontrol.com
NameserverAddressesNetwork (AS)Glue
pdns09.domaincontrol.com97.74.110.54 2603:5:21e2::36AS44273 GODADDY-DNS - Host Europe GmbH, DE AS44273 GODADDY-DNS - Host Europe GmbH, DE2603:5:21e2::36 97.74.110.54
pdns10.domaincontrol.com173.201.78.54 2603:5:22e2::36AS44273 GODADDY-DNS - Host Europe GmbH, DE AS44273 GODADDY-DNS - Host Europe GmbH, DE173.201.78.54 2603:5:22e2::36

Checks

  • i
    2 nameservers
    Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: pdns09.domaincontrol.com, pdns10.domaincontrol.com.
    #6
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 2 IPv4 /24s and 2 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS44273 (GODADDY-DNS - Host Europe GmbH, DE): 4 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

pass

4 of 4 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
pdns09.domaincontrol.com 97.74.110.54NOERROR, 3 ms, authoritativenoyes / yesrefused-
pdns09.domaincontrol.com 2603:5:21e2::36NOERROR, 4 ms, authoritativenoyes / yesrefused-
pdns10.domaincontrol.com 173.201.78.54NOERROR, 3 ms, authoritativenoyes / yesrefused-
pdns10.domaincontrol.com 2603:5:22e2::36NOERROR, 4 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 4 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2026081705 · primary pdns09.domaincontrol.com

Found

Primary (MNAME)
pdns09.domaincontrol.com
Contact (RNAME)
dns.jomax.net
Serial
2026081705
Refresh / retry
28800 s / 7200 s
Expire
604800 s
Negative TTL
600 s

Serial per nameserver

NameserverSerial
pdns09.domaincontrol.com (97.74.110.54)2026081705
pdns09.domaincontrol.com (2603:5:21e2::36)2026081705
pdns10.domaincontrol.com (173.201.78.54)2026081705
pdns10.domaincontrol.com (2603:5:22e2::36)2026081705

Checks

  • ✓ Serial 2026081705 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 8h, retry 2h, expire 7d, negative TTL 10m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver pdns09.domaincontrol.com is one of the listed nameservers.
  • ✓ Contact dns@jomax.net #25
    The SOA RNAME dns.jomax.net means dns@jomax.net.
  • ✓ Date-based serial #26
    The serial 2026081705 follows the YYYYMMDDnn convention (2026-08-17).

DNSSEC

warn

Signed, DS published at parent

Found

Validated by resolver
yes
Denial of existence
NSEC
Signatures valid until
26 October 2026

DS at the parent

Key tagAlgorithmDigestMatches a key
51951ECDSAP256SHA256 (13)SHA256 E508AD0B91FD255E…yes
56067ECDSAP256SHA256 (13)SHA256 37B94820CE5B12B1…yes

DNSKEY in the zone

Key tagRoleAlgorithm
56067KSK (257)ECDSAP256SHA256 (13)
51951KSK (257)ECDSAP256SHA256 (13)
56802ZSK (256)ECDSAP256SHA256 (13)
16144ZSK (256)ECDSAP256SHA256 (13)

Checks

  • ✓ Signed and validated #27
    The zone is signed, the parent publishes a DS record, and the resolver validates the answers.
  • ✓ DS matches a key #28
    The DS record at the parent matches a key in the zone: key tag 51951 (SHA256), key tag 56067 (SHA256).
  • ✓ Modern algorithms #29
    Key algorithms: ECDSAP256SHA256 (13).
  • !
    Signatures expire soon
    The earliest signature expires at 2026-10-26 16:29 UTC (in 102h0m0s). Check that automatic re-signing works.
    #30
  • i
    NSEC
    The zone uses NSEC, so its full contents can be listed by walking the NSEC chain. That is fine unless the names are sensitive.
    #31

Records

info

18 records at the apex

Found

Read from
97.74.110.54:53
TypeValueTTL
SOApdns09.domaincontrol.com. dns.jomax.net. 2026081705 28800 7200 604800 600600
NSpdns09.domaincontrol.com.3600
NSpdns10.domaincontrol.com.3600
A212.18.11.52600
MX0 peterlang-com.mail.protection.outlook.com.3600
MX1 aspmx.l.google.com.3600
MX5 alt1.aspmx.l.google.com.3600
MX5 alt2.aspmx.l.google.com.3600
MX10 alt3.aspmx.l.google.com.3600
MX10 alt4.aspmx.l.google.com.3600
TXT"v=spf1 include:spf.protection.outlook.com include:_spf.google.com ip4:212.18.11.33/27 ip4:167.114.73.155/32 include:mailgun.org ip4:80.82.205.232 ip4:213.164.70.57 include:5381528.spf05.hubspotemail.net ip4:67.228.101.200 include:amazonses.com -all"600
TXT"google-site-verification=5eFHFTAfCS4fYWu7OlwgTKCMIqxyZrppH8JDwhHUM6o"600
TXT"google-site-verification=iSwXI5etjTKT6ahYU0Phpl68imoMQr_U-_G94wjLEks"600
TXT"google-site-verification=Ilu63J6OKUa2bpCcWwH0DbkU_3a8T9Um-OmnL0cPVDc"600
TXT"google-gws-recovery-domain-verification=68541763"600
TXT"google-gws-recovery-domain-verification=68567637"600
TXT"zoho-verification=zb60008375.zmverify.zoho.in "600
TXT" zoho-verification=zb60008375.zmverify.zoho.in"600

Checks

  • ✓ TTLs within range #32
    TTLs: A 10m, MX 1h, NS 1h. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35