pge.com

Checked 22 October 2026, 10:13 UTC · via 8.8.8.8
!Passed with warnings
24 passed 3 warnings 0 failed 4 info

Registration

info

.com generic · Network Solutions, LLC · expires 2028-03-08

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
Network Solutions, LLC
Registered
7 March 1991
Last changed
15 October 2024
Expires
8 March 2028
Status
client transfer prohibited
Registry nameservers
a1-61.akam.net, a11-64.akam.net, a12-65.akam.net, a14-66.akam.net, a24-67.akam.net, a3-64.akam.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2028-03-08 #3
    The registration is valid until 2028-03-08 (502 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

a1-61.akam.net, a11-64.akam.net, a12-65.akam.net, a14-66.akam.net, a24-67.akam.net, a3-64.akam.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
a1-61.akam.net, a11-64.akam.net, a12-65.akam.net, a14-66.akam.net, a24-67.akam.net, a3-64.akam.net
NS in the zone
a1-61.akam.net, a11-64.akam.net, a12-65.akam.net, a14-66.akam.net, a24-67.akam.net, a3-64.akam.net
NameserverAddressesNetwork (AS)Glue
a1-61.akam.net193.108.91.61 2600:1401:2::3dAS20940 AKAMAI-ASN1 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a11-64.akam.net84.53.139.64 2600:1480:1::40AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a12-65.akam.net184.26.160.65 2600:1480:f000::41AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a14-66.akam.net184.26.161.66 2600:1480:1800::42AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a24-67.akam.net2.16.130.67 2600:1480:9800::43AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a3-64.akam.net96.7.49.64 2600:1408:1c::40AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-

Checks

  • ✓ 6 nameservers #6
    Delegated to a1-61.akam.net, a11-64.akam.net, a12-65.akam.net, a14-66.akam.net, a24-67.akam.net, a3-64.akam.net.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 6 IPv4 /24s and 6 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS20940 (AKAMAI-ASN1 - Akamai International B.V., NL): 1 address; AS21342 (AKAMAI-ASN2 - Akamai International B.V., NL): 11 addresses.
  • i
    All nameserver names under .net
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

warn

12 of 12 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
a1-61.akam.net 193.108.91.61NOERROR, 4 ms, authoritativenoyes / yesrefused41824.8
a1-61.akam.net 2600:1401:2::3dNOERROR, 4 ms, authoritativenoyes / yesrefused41824.9
a11-64.akam.net 84.53.139.64NOERROR, 4 ms, authoritativenoyes / yesrefused41824.8
a11-64.akam.net 2600:1480:1::40NOERROR, 4 ms, authoritativenoyes / yesrefused41824.5
a12-65.akam.net 184.26.160.65NOERROR, 4 ms, authoritativenoyes / yesrefused48878.30
a12-65.akam.net 2600:1480:f000::41NOERROR, 4 ms, authoritativenoyes / yesrefused48878.31
a14-66.akam.net 184.26.161.66NOERROR, 3 ms, authoritativenoyes / yesrefused48878.32
a14-66.akam.net 2600:1480:1800::42NOERROR, 4 ms, authoritativenoyes / yesrefused48878.26
a24-67.akam.net 2.16.130.67NOERROR, 3 ms, authoritativenoyes / yesrefused48878.32
a24-67.akam.net 2600:1480:9800::43NOERROR, 4 ms, authoritativenoyes / yesrefused48878.33
a3-64.akam.net 96.7.49.64NOERROR, 3 ms, authoritativenoyes / yesrefused41824.11
a3-64.akam.net 2600:1408:1c::40NOERROR, 4 ms, authoritativenoyes / yesrefused41824.6

Checks

  • ✓ All respond #14
    All 12 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: a1-61.akam.net: "41824.8"; a1-61.akam.net: "41824.9"; a11-64.akam.net: "41824.8"; a11-64.akam.net: "41824.5"; a12-65.akam.net: "48878.30"; a12-65.akam.net: "48878.31"; a14-66.akam.net: "48878.32"; a14-66.akam.net: "48878.26"; a24-67.akam.net: "48878.32"; a24-67.akam.net: "48878.33"; a3-64.akam.net: "41824.11"; a3-64.akam.net: "41824.6". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

info

serial 93610 · primary ns0.pge.com

Found

Primary (MNAME)
ns0.pge.com
Contact (RNAME)
ibadmin.pge.com
Serial
93610
Refresh / retry
3600 s / 300 s
Expire
1814400 s
Negative TTL
900 s

Serial per nameserver

NameserverSerial
a1-61.akam.net (193.108.91.61)93610
a1-61.akam.net (2600:1401:2::3d)93610
a11-64.akam.net (84.53.139.64)93610
a11-64.akam.net (2600:1480:1::40)93610
a12-65.akam.net (184.26.160.65)93610
a12-65.akam.net (2600:1480:f000::41)93610
a14-66.akam.net (184.26.161.66)93610
a14-66.akam.net (2600:1480:1800::42)93610
a24-67.akam.net (2.16.130.67)93610
a24-67.akam.net (2600:1480:9800::43)93610
a3-64.akam.net (96.7.49.64)93610
a3-64.akam.net (2600:1408:1c::40)93610

Checks

  • ✓ Serial 93610 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 1h, retry 5m, expire 21d, negative TTL 15m.
  • i
    Hidden master
    The primary nameserver ns0.pge.com is not listed as a nameserver: a hidden master that only feeds the public secondaries. That is a common setup; make sure it is not reachable for zone transfers from outside.
    #24
  • ✓ Contact ibadmin@pge.com #25
    The SOA RNAME ibadmin.pge.com means ibadmin@pge.com.
  • ✓ Counter serial #26
    The serial 93610 is a plain counter.

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

warn

52 records at the apex

Found

Read from
193.108.91.61:53
TypeValueTTL
SOAns0.pge.com. ibadmin.pge.com. 93610 3600 300 1814400 9003600
NSa12-65.akam.net.3600
NSa3-64.akam.net.3600
NSa11-64.akam.net.3600
NSa24-67.akam.net.3600
NSa1-61.akam.net.3600
NSa14-66.akam.net.3600
A2.16.204.2320
A2.16.204.1920
AAAA2a02:26f0:b700:4::210:cc5220
AAAA2a02:26f0:b700:4::210:cc5720
MX5000 pge.mail.protection.outlook.com.3600
TXT"ktuprhmrkjoxvqhz"3600
TXT"cisco-ci-domain-verification=35bd1562a9617c9aa75d7174baae517dd35c829520fb04564b056d07408f1c85"3600
TXT"cisco-ci-domain-verification=8e39e2cc44a07a2fc8400308123a919edfc953590b4d60a72f821875bedac14"3600
TXT"apple-domain-verification=MGCpX0fzWvSjvMiD"3600
TXT"google-gws-recovery-domain-verification=70720562"3600
TXT"airtable-verification=53f6e0000df8eca8e14a916533292d0d"3600
TXT"atlassian-domain-verification=96jahJq1Kj6GE1cqiQeGbPDlhDBTF1SIFfI9Nk3gy0wtrC1dWV74lipVIRfbtEHk"3600
TXT"docusign=7de60584-278d-4ee4-a0d2-61072828f595"3600
TXT"dukcmifminlfof9327s3d42nea"3600
TXT"jamf-site-verification=3tEi918myd7vcJQffwCdDg"3600
TXT"flexera-domain-verification-ktuprhmrkjoxvqhz"3600
TXT"docusign=888fcccf-516d-41b9-924d-2a2f05f17e1d"3600
TXT"fnd6p42gbuppr676r6djlfp4vj"3600
TXT"google-site-verification=V9_lGMgZSDZvUgcLJUNxeZDzp9JDK0ObW2tBS6G2qng"3600
TXT"onetrust-domain-verification=728dbeb14c514f71b8896e6437d20054"3600
TXT"ESES6P2TIGY3HQ0IJ3UZ77IYIQPM29ZBJOJB169TX"3600
TXT"zx7swyvCZZsKoOY3ZZhM0rL7G67VUrr+g22lDCZJ9SIf0zHIWQGjstZ0TqN+ftaQr3noz+qyK5jW7q8fVW528w=="3600
TXT"onetrust-domain-verification=951664164a85476a8eaf6648f7a533d4"3600
TXT"v=spf1 ip4:70.42.227.151/32 ip4:70.42.227.152/32 include:spf.protection.outlook.com -all"3600
TXT"cisco-ci-domain-verification=64a2a470a10322fe154761104c02a241c60c378419ec262ba2b393b2e47c57a5"3600
TXT"atlassian-domain-verification=SMZxbmG5WaWonXstDqgDBFq2OKiYM7jTbJK3tanqoUVNrPWlmxjX4pra3LPO3lKE"3600
TXT"webexdomainverification.FGXN=4a807683-c94b-42c2-bb64-1d75f62ee70f"3600
TXT"flexera-domain-verification-jhamephzjnqtqynd"3600
TXT"google-site-verification=5s7_BJ8zG64HB2VQh43Mwoi7amP9UVOHFSvzWibbfRc"3600
TXT"Dynatrace-site-verification=98abb546-9d7c-4ee3-ba66-93ab91af1932__pkdqvq20h1hit66816laj299d0"3600
TXT"zxEMQGcROp3U5W3nPDNRhO3Nea8o8YpvM8LXWxaSUCfABAPdzBjNstb0Xwd0SIOazjuDdcWZBmmWdjtqJPYfSA"3600
TXT"google-gws-recovery-domain-verification=69983151"3600
TXT"B4AA-B8B0-04D9-CE74-E91F-61DB-3E5B-E455"3600
TXT"00d6g000000easseao"3600
TXT"adobe-aem-verification=preview-dev.pge.com/55603/382305/b1ad2d25-ecf3-4c89-a423-cf5dd877b8eb"3600
TXT"9DAB-6ED0-EE7C-6855-E4A2-6221-4A9B-8EBE"3600
TXT"knowbe4-site-verification=1308e8799a2c9b5a04c23224200b2fad"3600
TXT"google-site-verification=HSHJtmbLb3FDs7dXkcCpz4XIu0yIbbdNL8zaVyqKhhs"3600
TXT"THIS" "IS" "A" "TXT" "RECORD"3600
TXT"apple-domain-verification=bQWKrTFCop0Mxkhj"3600
TXT"F9C0-9448-A899-CD73-08E8-1464-8A77-9BC3"3600
TXT"adobe-idp-site-verification=a3f04b06ed70e900ccc45c5544ce6872c477b8cb3b86d208813ae6670d197334"3600
TXT"smartsheet-site-validation=oY4fLTP4tTx0PnAZGj46X9JARyeO_NjD"3600
TXT"google-site-verification=R9xeEGgiJH9odEizr2WsCfO4sPg67YHuC5DAYJMq-I0"3600
TXT"DC4 - 70.42.227.151 / 70.42.227.152 or _spf-dc4.successfactors.com"3600

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: A (20s), AAAA (20s). Low TTLs are useful just before a planned change. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35