sap.com

.com generic · Network Solutions, LLC · expires 2034-01-19

Found

TLD

.com (generic)

ICANN policies apply

yes

Registrar

Network Solutions, LLC

Registered

18 January 1995

Last changed

16 December 2025

Expires

19 January 2034

Status

client transfer prohibited

Registry nameservers

ns1.sap.net, ns2.sap.de, ns3.sap.com, ns4.sap.asia

RDAP server

https://rdap.verisign.com/com/v1/

Checks

• i

  .com is a generic TLD (gTLD)

  Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.

  #1
• ✓ TLD delegated and signed #2

  .com is delegated in the root zone and DNSSEC-signed.
• ✓ Expires on 2034-01-19 #3

  The registration is valid until 2034-01-19 (2645 days).
• ✓ Transfer locked #4

  Registry status: client transfer prohibited.
• ✓ Registry and delegation match #5

  The nameservers registered at the registry are the ones published in DNS.

ns1.sap.net, ns2.sap.de, ns3.sap.com, ns4.sap.asia

Found

Parent zone

com

Delegation from

a.gtld-servers.net (192.5.6.30)

NS at the parent

ns1.sap.net, ns2.sap.de, ns3.sap.com, ns4.sap.asia

NS in the zone

ns1.sap.net, ns2.sap.de, ns3.sap.com, ns4.sap.asia

Checks

• ✓ 4 nameservers #6

  Delegated to ns1.sap.net, ns2.sap.de, ns3.sap.com, ns4.sap.asia.
• ✓ Parent and zone agree #7

  The parent delegation and the zone's NS records list the same nameservers.
• ✓ Glue present and correct #8

  Glue is published for the nameservers inside the zone: ns3.sap.com.
• ✓ All names resolve #9

  Every nameserver name has an address and is not an alias.
• ✓ Nameservers in different networks #10

  The nameservers are spread over 4 IPv4 /24s and 2 IPv6 /48s.
• ✓ 5 autonomous systems #11

  The nameservers are spread over: AS203993 (GNA-DC1-AS - S.J.M. Steffann, NL): 1 address; AS3271 (SAP_AC - SAP SE, DE): 2 addresses; AS48519 (KNIPP-AMS-AS - Knipp Medien und Kommunikation GmbH, DE): 1 address; AS8038 (6CONNECT - 6connect, Inc., US): 1 address; AS8391 (KNIPP-AS - Knipp Medien und Kommunikation GmbH, DE): 1 address.
• ✓ Nameserver names under 4 TLDs #12

  Nameserver names use the TLDs .asia, .com, .de, .net.
• i

  Partly IPv6

  These nameservers have no IPv6 address: ns1.sap.net, ns4.sap.asia.

  #13

serial 2026102201 · primary ns.sap-ag.de

Found

Primary (MNAME)

ns.sap-ag.de

Contact (RNAME)

dns.sap-ag.de

Serial

2026102201

Refresh / retry

14400 s / 5400 s

Expire

1814400 s

Negative TTL

600 s

Serial per nameserver

Checks

• ✓ Serial 2026102201 everywhere #22

  All nameservers serve the same version of the zone.
• ✓ Timers within recommendations #23

  SOA refresh 4h, retry 90m, expire 21d, negative TTL 10m.
• i

  Hidden master

  The primary nameserver ns.sap-ag.de is not listed as a nameserver: a hidden master that only feeds the public secondaries. That is a common setup; make sure it is not reachable for zone transfers from outside.

  #24
• ✓ Contact dns@sap-ag.de #25

  The SOA RNAME dns.sap-ag.de means dns@sap-ag.de.
• ✓ Date-based serial #26

  The serial 2026102201 follows the YYYYMMDDnn convention (2026-10-22).

50 records at the apex

Found

Read from

193.46.3.53:53

Checks

• ✓ TTLs within range #32

  TTLs: A 4h, MX 15m, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
• ✓ No CNAME at the apex #33

  The zone apex has no CNAME record.
• ✓ No wildcard #34

  Names that don't exist return NXDOMAIN.
• i

  No CAA records

  Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.

  #35