salomon.com

Checked 22 October 2026, 10:34 UTC · via 8.8.8.8
!Passed with warnings
27 passed 1 warning 0 failed 3 info

Registration

info

.com generic · Nameshield SAS · expires 2027-01-10

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
Nameshield SAS
Registered
11 January 1995
Last changed
8 January 2026
Expires
10 January 2027
Status
client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
ns2.observatoiredesmarques.fr, ns3.nameshield.net, obs.ns1.fr
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-01-10 #3
    The registration is valid until 2027-01-10 (79 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

pass

ns2.observatoiredesmarques.fr, ns3.nameshield.net, obs.ns1.fr

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns2.observatoiredesmarques.fr, ns3.nameshield.net, obs.ns1.fr
NS in the zone
ns2.observatoiredesmarques.fr, ns3.nameshield.net, obs.ns1.fr
NameserverAddressesNetwork (AS)Glue
ns2.observatoiredesmarques.fr89.222.108.240 169.150.255.43 188.122.87.39 2a00:1630:210:3::39 2a02:6ea0:cf2b::1 2a02:6ea0:c776::43AS60068 CDN77 - Datacamp Limited, GB AS60068 CDN77 - Datacamp Limited, GB AS49544 i3Dnet - i3D.net B.V, NL AS49544 i3Dnet - i3D.net B.V, NL AS60068 CDN77 - Datacamp Limited, GB AS60068 CDN77 - Datacamp Limited, GB-
ns3.nameshield.net45.63.17.113 37.19.207.80 195.181.171.194 2a02:6ea0:e216::1 2001:19f0:5:353:5400:ff:fe37:618f 2a02:6ea0:c140::1AS20473 AS-VULTR - The Constant Company, LLC, US AS60068 CDN77 - Datacamp Limited, GB AS60068 CDN77 - Datacamp Limited, GB AS60068 CDN77 - Datacamp Limited, GB AS20473 AS-VULTR - The Constant Company, LLC, US AS60068 CDN77 - Datacamp Limited, GB-
obs.ns1.fr81.92.91.46 185.65.58.46 2a01:c8:300:111::46 2a01:c8:200:111::46AS20756 NAMESHIELD - NAMESHIELD SAS, FR AS20756 NAMESHIELD - NAMESHIELD SAS, FR AS20756 NAMESHIELD - NAMESHIELD SAS, FR AS20756 NAMESHIELD - NAMESHIELD SAS, FR-

Checks

  • ✓ 3 nameservers #6
    Delegated to ns2.observatoiredesmarques.fr, ns3.nameshield.net, obs.ns1.fr.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 8 IPv4 /24s and 8 IPv6 /48s.
  • ✓ 4 autonomous systems #11
    The nameservers are spread over: AS20473 (AS-VULTR - The Constant Company, LLC, US): 2 addresses; AS20756 (NAMESHIELD - NAMESHIELD SAS, FR): 4 addresses; AS49544 (i3Dnet - i3D.net B.V, NL): 2 addresses; AS60068 (CDN77 - Datacamp Limited, GB): 8 addresses.
  • ✓ Nameserver names under 2 TLDs #12
    Nameserver names use the TLDs .fr, .net.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

info

16 of 16 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns2.observatoiredesmarques.fr 89.222.108.240NOERROR, 4 ms, authoritativenoyes / yesrefusedSecure
ns2.observatoiredesmarques.fr 169.150.255.43NOERROR, 4 ms, authoritativenoyes / yesrefusedSecure
ns2.observatoiredesmarques.fr 188.122.87.39NOERROR, 12 ms, authoritativenoyes / yesrefusedSecure
ns2.observatoiredesmarques.fr 2a00:1630:210:3::39NOERROR, 13 ms, authoritativenoyes / yesrefusedSecure
ns2.observatoiredesmarques.fr 2a02:6ea0:cf2b::1NOERROR, 5 ms, authoritativenoyes / yesrefusedSecure
ns2.observatoiredesmarques.fr 2a02:6ea0:c776::43NOERROR, 4 ms, authoritativenoyes / yesrefusedSecure
ns3.nameshield.net 45.63.17.113NOERROR, 86 ms, authoritativenoyes / yesrefusedSecure
ns3.nameshield.net 37.19.207.80NOERROR, 92 ms, authoritativenoyes / yesrefusedSecure
ns3.nameshield.net 195.181.171.194NOERROR, 106 ms, authoritativenoyes / yesrefusedSecure
ns3.nameshield.net 2a02:6ea0:e216::1NOERROR, 98 ms, authoritativenoyes / yesrefusedSecure
ns3.nameshield.net 2001:19f0:5:353:5400:ff:fe37:618fNOERROR, 86 ms, authoritativenoyes / yesrefusedSecure
ns3.nameshield.net 2a02:6ea0:c140::1NOERROR, 107 ms, authoritativenoyes / yesrefusedSecure
obs.ns1.fr 81.92.91.46NOERROR, 13 ms, authoritativenoyes / yesrefusedSecure
obs.ns1.fr 185.65.58.46NOERROR, 14 ms, authoritativenoyes / yesrefusedSecure
obs.ns1.fr 2a01:c8:300:111::46NOERROR, 16 ms, authoritativenoyes / yesrefusedSecure
obs.ns1.fr 2a01:c8:200:111::46NOERROR, 17 ms, authoritativenoyes / yesrefusedSecure

Checks

  • ✓ All respond #14
    All 16 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: ns2.observatoiredesmarques.fr: "Secure"; ns3.nameshield.net: "Secure"; obs.ns1.fr: "Secure".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2026102006 · primary obs.ns1.fr

Found

Primary (MNAME)
obs.ns1.fr
Contact (RNAME)
technical.nameshield.net
Serial
2026102006
Refresh / retry
28800 s / 7200 s
Expire
604800 s
Negative TTL
7200 s

Serial per nameserver

NameserverSerial
ns2.observatoiredesmarques.fr (89.222.108.240)2026102006
ns2.observatoiredesmarques.fr (169.150.255.43)2026102006
ns2.observatoiredesmarques.fr (188.122.87.39)2026102006
ns2.observatoiredesmarques.fr (2a00:1630:210:3::39)2026102006
ns2.observatoiredesmarques.fr (2a02:6ea0:cf2b::1)2026102006
ns2.observatoiredesmarques.fr (2a02:6ea0:c776::43)2026102006
ns3.nameshield.net (45.63.17.113)2026102006
ns3.nameshield.net (37.19.207.80)2026102006
ns3.nameshield.net (195.181.171.194)2026102006
ns3.nameshield.net (2a02:6ea0:e216::1)2026102006
ns3.nameshield.net (2001:19f0:5:353:5400:ff:fe37:618f)2026102006
ns3.nameshield.net (2a02:6ea0:c140::1)2026102006
obs.ns1.fr (81.92.91.46)2026102006
obs.ns1.fr (185.65.58.46)2026102006
obs.ns1.fr (2a01:c8:300:111::46)2026102006
obs.ns1.fr (2a01:c8:200:111::46)2026102006

Checks

  • ✓ Serial 2026102006 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 8h, retry 2h, expire 7d, negative TTL 2h.
  • ✓ Primary is a public nameserver #24
    The primary nameserver obs.ns1.fr is one of the listed nameservers.
  • ✓ Contact technical@nameshield.net #25
    The SOA RNAME technical.nameshield.net means technical@nameshield.net.
  • ✓ Date-based serial #26
    The serial 2026102006 follows the YYYYMMDDnn convention (2026-10-20).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

36 records at the apex

Found

Read from
89.222.108.240:53
TypeValueTTL
SOAobs.ns1.fr. technical.nameshield.net. 2026102006 28800 7200 604800 7200300
NSobs.ns1.fr.86400
NSns2.observatoiredesmarques.fr.86400
NSns3.nameshield.net.86400
A64.239.109.186400
MX10 mxb-00153e01.gslb.pphosted.com.300
MX10 mxa-00153e01.gslb.pphosted.com.300
MX20 mx08-00153e01.pphosted.com.300
MX20 mx07-00153e01.pphosted.com.300
TXT"bv-domain-verification=44f8d1f561d14d33a87ad29b3a162484b03140e2dc50e23da293a50b64b368f5"300
TXT"sending_domain1170741=d9dbb9eeb65c501ddff19041805f3df70b03cc2e0fe0fdf32a0510a2c92fe75c"300
TXT"shopify-verification-code=pJ4k78f8ySrFytrQCQOa5UTGUwCDLR"300
TXT"google-site-verification=rP4Sma4yhS6V3NHFo6K-HEvZt3IfrnX7Ezfk2Qh7ShI"300
TXT"google-site-verification=r6aSaTcDJKiILHC0GN3q6AX0BPJjY_wR6FbGcd6-2NE"300
TXT"ly47p34mrdxlx0fdcjj3f5wcfk29dlyg"300
TXT"amazonses:6HY/m315D4PDxBHGjBxA6rNGFdp0E1/Xfwp6WgN06Co="300
TXT"Sendinblue-code:1053380cc57598709e769165d8d30244"300
TXT"7r2x2cg3cnjym0lx1pyj31629qgv16by"300
TXT"MS=ms48606081"300
TXT"google-site-verification=jWoiR5gcO-RDlb-RBagbtDyeyVGG5nsKK8ccg9_jnRY"300
TXT"tmcx87mpm5gd8w3lf0yycshnsp690cyv"300
TXT"adobe-idp-site-verification=dbf90d36-4723-471f-8e25-fdff8441d25e"300
TXT"google-site-verification=zClkpRqJyn_GrvkdkZQIUmj2eAiL288ex6l8sVpTxt8"300
TXT"facebook-domain-verification=ylgod6jjdsvbn4g7pwpljqdj229ce1"300
TXT"_globalsign-domain-verification=fniHNrOzjG1tSWFwGOW1WnS3SQLCd4kNCdNSRrfvpT"300
TXT"zbp8hp2x8cz2dnn29dkqqyxbjkcydvn7"300
TXT"v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com include:%{l}._spf.%{d} -all exp=error._spf.amersports.com"300
TXT"docker-verification=7d62a052-d268-4c12-8012-b996787d5d4e"300
TXT"figma-domain-verification=f40c21582905d0fa691b30d3cc99d75ecfe5cecc35b6c7b09a324db11b5e838f-1727965717"300
TXT"miro-verification=2936ade66773852d05032a2f9b77d7e891a822a2"300
TXT"fastly-domain-delegation-naviebou3bbt3b-20251008"300
TXT"pmk8c1pl7wbr4cf93rly0psx66r82wsp"300
TXT"anthropic-domain-verification-xzjq2r=BjLUtCFrgvuhwcPxzSz8QhrMh"300
TXT"amazonses:hGUaAUV6gH1B2pOs3i0Pc1wRPX9Yl04vjotVGXhb5A4="300
TXT"apple-domain-verification=BxanffEpRu5K8ZtG"300
TXT"loom-site-verification=769570b9190e4337bd1ebe64b8671e4d"300

Checks

  • ✓ TTLs within range #32
    TTLs: A 1d, MX 5m, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35