proxmox.com

Checked 22 October 2026, 10:22 UTC · via 8.8.8.8
!Passed with warnings
26 passed 1 warning 0 failed 4 info

Registration

info

.com generic · eNom, LLC · expires 2027-03-08

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
eNom, LLC
Registered
8 March 2004
Last changed
7 February 2026
Expires
8 March 2027
Status
client transfer prohibited
Registry nameservers
ns1.kapper.net, ns2.kapper.net, ns3.kapper.net, ns4.kapper.net, ns5.kapper.net, ns6.kapper.net, ns7.kapper.net, ns8.kapper.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-03-08 #3
    The registration is valid until 2027-03-08 (136 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

ns1.kapper.net, ns2.kapper.net, ns3.kapper.net, ns4.kapper.net, ns5.kapper.net, ns6.kapper.net, ns7.kapper.net, ns8.kapper.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns1.kapper.net, ns2.kapper.net, ns3.kapper.net, ns4.kapper.net, ns5.kapper.net, ns6.kapper.net, ns7.kapper.net, ns8.kapper.net
NS in the zone
ns1.kapper.net, ns2.kapper.net, ns3.kapper.net, ns4.kapper.net, ns5.kapper.net, ns6.kapper.net, ns7.kapper.net, ns8.kapper.net
NameserverAddressesNetwork (AS)Glue
ns1.kapper.net94.136.1.127 2a02:ab8:4::11AS48943 KAPPERNET - KAPPER NETWORK-COMMUNICATIONS GmbH, AT AS48943 KAPPERNET - KAPPER NETWORK-COMMUNICATIONS GmbH, AT-
ns2.kapper.net94.16.111.51 2a03:4000:51:f2e::51AS197540 netcup-AS - netcup GmbH, DE AS197540 netcup-AS - netcup GmbH, DE-
ns3.kapper.net103.241.67.58AS36007 KAMATERA - Kamatera, Inc., US-
ns4.kapper.net139.99.239.52 2402:1f00:8100:400::14ceAS16276 OVH - OVH SAS, FR AS16276 OVH - OVH SAS, FR-
ns5.kapper.net94.136.22.5 2a02:ab8:4::5AS48943 KAPPERNET - KAPPER NETWORK-COMMUNICATIONS GmbH, AT AS48943 KAPPERNET - KAPPER NETWORK-COMMUNICATIONS GmbH, AT-
ns6.kapper.net97.74.83.192AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC, US-
ns7.kapper.net144.217.92.144 2607:5300:201:3100::4cafAS16276 OVH - OVH SAS, FR AS16276 OVH - OVH SAS, FR-
ns8.kapper.net195.200.6.20 2a02:4780:14:aa53::1AS47583 AS-HOSTINGER - Hostinger International Limited, CY AS47583 AS-HOSTINGER - Hostinger International Limited, CY-

Checks

  • ✓ 8 nameservers #6
    Delegated to ns1.kapper.net, ns2.kapper.net, ns3.kapper.net, ns4.kapper.net, ns5.kapper.net, ns6.kapper.net, ns7.kapper.net, ns8.kapper.net.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 8 IPv4 /24s and 5 IPv6 /48s.
  • ✓ 6 autonomous systems #11
    The nameservers are spread over: AS16276 (OVH - OVH SAS, FR): 4 addresses; AS197540 (netcup-AS - netcup GmbH, DE): 2 addresses; AS26496 (AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC, US): 1 address; AS36007 (KAMATERA - Kamatera, Inc., US): 1 address; AS47583 (AS-HOSTINGER - Hostinger International Limited, CY): 2 addresses; AS48943 (KAPPERNET - KAPPER NETWORK-COMMUNICATIONS GmbH, AT): 4 addresses.
  • i
    All nameserver names under .net
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • i
    Partly IPv6
    These nameservers have no IPv6 address: ns3.kapper.net, ns6.kapper.net.
    #13

Nameservers

pass

14 of 14 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns1.kapper.net 94.136.1.127NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns1.kapper.net 2a02:ab8:4::11NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns2.kapper.net 94.16.111.51NOERROR, 1 ms, authoritativenoyes / yesrefused-
ns2.kapper.net 2a03:4000:51:f2e::51NOERROR, 1 ms, authoritativenoyes / yesrefused-
ns3.kapper.net 103.241.67.58NOERROR, 27 ms, authoritativenoyes / yesrefused-
ns4.kapper.net 139.99.239.52NOERROR, 310 ms, authoritativenoyes / yesrefused-
ns4.kapper.net 2402:1f00:8100:400::14ceNOERROR, 307 ms, authoritativenoyes / yesrefused-
ns5.kapper.net 94.136.22.5NOERROR, 12 ms, authoritativenoyes / yesrefused-
ns5.kapper.net 2a02:ab8:4::5NOERROR, 12 ms, authoritativenoyes / yesrefused-
ns6.kapper.net 97.74.83.192NOERROR, 157 ms, authoritativenoyes / yesrefused-
ns7.kapper.net 144.217.92.144NOERROR, 97 ms, authoritativenoyes / yesrefused-
ns7.kapper.net 2607:5300:201:3100::4cafNOERROR, 97 ms, authoritativenoyes / yesrefused-
ns8.kapper.net 195.200.6.20NOERROR, 196 ms, authoritativenoyes / yesrefused-
ns8.kapper.net 2a02:4780:14:aa53::1NOERROR, 219 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 14 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2026102010 · primary ns5.kapper.net

Found

Primary (MNAME)
ns5.kapper.net
Contact (RNAME)
dns.kapper.net
Serial
2026102010
Refresh / retry
10800 s / 3600 s
Expire
604800 s
Negative TTL
3600 s

Serial per nameserver

NameserverSerial
ns1.kapper.net (94.136.1.127)2026102010
ns1.kapper.net (2a02:ab8:4::11)2026102010
ns2.kapper.net (94.16.111.51)2026102010
ns2.kapper.net (2a03:4000:51:f2e::51)2026102010
ns3.kapper.net (103.241.67.58)2026102010
ns4.kapper.net (139.99.239.52)2026102010
ns4.kapper.net (2402:1f00:8100:400::14ce)2026102010
ns5.kapper.net (94.136.22.5)2026102010
ns5.kapper.net (2a02:ab8:4::5)2026102010
ns6.kapper.net (97.74.83.192)2026102010
ns7.kapper.net (144.217.92.144)2026102010
ns7.kapper.net (2607:5300:201:3100::4caf)2026102010
ns8.kapper.net (195.200.6.20)2026102010
ns8.kapper.net (2a02:4780:14:aa53::1)2026102010

Checks

  • ✓ Serial 2026102010 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 3h, retry 1h, expire 7d, negative TTL 1h.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns5.kapper.net is one of the listed nameservers.
  • ✓ Contact dns@kapper.net #25
    The SOA RNAME dns.kapper.net means dns@kapper.net.
  • ✓ Date-based serial #26
    The serial 2026102010 follows the YYYYMMDDnn convention (2026-10-20).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

15 records at the apex

Found

Read from
94.136.1.127:53
TypeValueTTL
SOAns5.kapper.net. dns.kapper.net. 2026102010 10800 3600 604800 36003600
NSns2.kapper.net.86400
NSns3.kapper.net.86400
NSns6.kapper.net.86400
NSns7.kapper.net.86400
NSns4.kapper.net.86400
NSns8.kapper.net.86400
NSns5.kapper.net.86400
NSns1.kapper.net.86400
A45.144.208.39900
AAAA2a0f:8001:1:32::39900
MX10 mail.proxmox.com.900
TXT"linkedin-site-verification=e67431e2-0049-4a87-9f51-0aebf7d7cf33"900
TXT"v=spf1 a mx ptr ip4:79.133.36.241/28 ip4:212.224.123.65/29 ip4:212.186.127.178/28 ip4:51.91.38.32/27 ip4:66.70.154.80/29 ip4:94.136.29.234/30 ip4:94.136.29.96/27 ip4:45.144.208.32/27 ip6:2a01:7e0:0:424::/64 ip6:2a02:ab8:308::/48 ip6:2a0f:8001:1:32::/64 ~a" "ll"900
TXT"google-site-verification=RplCC4SRTfBgMPUzg1h1_oGD_zd1_tL0T7ZwjeLUIBk"900

Checks

  • ✓ TTLs within range #32
    TTLs: A 15m, AAAA 15m, MX 15m, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35