sumup.com

Checked 22 October 2026, 10:52 UTC · via 8.8.8.8
!Passed with warnings
27 passed 1 warning 0 failed 3 info

Registration

info

.com generic · united-domains GmbH · expires 2027-02-11

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
united-domains GmbH
Registered
11 February 2004
Last changed
19 September 2026
Expires
11 February 2027
Status
client transfer prohibited
Registry nameservers
ns-1472.awsdns-56.org, ns-169.awsdns-21.com, ns-1782.awsdns-30.co.uk, ns-728.awsdns-27.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-02-11 #3
    The registration is valid until 2027-02-11 (112 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

ns-1472.awsdns-56.org, ns-169.awsdns-21.com, ns-1782.awsdns-30.co.uk, ns-728.awsdns-27.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns-1472.awsdns-56.org, ns-169.awsdns-21.com, ns-1782.awsdns-30.co.uk, ns-728.awsdns-27.net
NS in the zone
ns-1472.awsdns-56.org, ns-169.awsdns-21.com, ns-1782.awsdns-30.co.uk, ns-728.awsdns-27.net
NameserverAddressesNetwork (AS)Glue
ns-1472.awsdns-56.org205.251.197.192 2600:9000:5305:c000::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-
ns-169.awsdns-21.com205.251.192.169 2600:9000:5300:a900::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US205.251.192.169 2600:9000:5300:a900::1
ns-1782.awsdns-30.co.uk205.251.198.246 2600:9000:5306:f600::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-
ns-728.awsdns-27.net205.251.194.216 2600:9000:5302:d800::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-

Checks

  • ✓ 4 nameservers #6
    Delegated to ns-1472.awsdns-56.org, ns-169.awsdns-21.com, ns-1782.awsdns-30.co.uk, ns-728.awsdns-27.net.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 4 IPv4 /24s and 4 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS16509 (AMAZON-02 - Amazon.com, Inc., US): 8 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • ✓ Nameserver names under 4 TLDs #12
    Nameserver names use the TLDs .com, .net, .org, .uk.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

pass

8 of 8 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns-1472.awsdns-56.org 205.251.197.192NOERROR, 3 ms, authoritativenoyes / yesrefused-
ns-1472.awsdns-56.org 2600:9000:5305:c000::1NOERROR, 7 ms, authoritativenoyes / yesrefused-
ns-169.awsdns-21.com 205.251.192.169NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-169.awsdns-21.com 2600:9000:5300:a900::1NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-1782.awsdns-30.co.uk 205.251.198.246NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-1782.awsdns-30.co.uk 2600:9000:5306:f600::1NOERROR, 12 ms, authoritativenoyes / yesrefused-
ns-728.awsdns-27.net 205.251.194.216NOERROR, 3 ms, authoritativenoyes / yesrefused-
ns-728.awsdns-27.net 2600:9000:5302:d800::1NOERROR, 4 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 8 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 1 · primary ns-1472.awsdns-56.org

Found

Primary (MNAME)
ns-1472.awsdns-56.org
Contact (RNAME)
administrator.sumup.com
Serial
1
Refresh / retry
7200 s / 900 s
Expire
1209600 s
Negative TTL
300 s

Serial per nameserver

NameserverSerial
ns-1472.awsdns-56.org (205.251.197.192)1
ns-1472.awsdns-56.org (2600:9000:5305:c000::1)1
ns-169.awsdns-21.com (205.251.192.169)1
ns-169.awsdns-21.com (2600:9000:5300:a900::1)1
ns-1782.awsdns-30.co.uk (205.251.198.246)1
ns-1782.awsdns-30.co.uk (2600:9000:5306:f600::1)1
ns-728.awsdns-27.net (205.251.194.216)1
ns-728.awsdns-27.net (2600:9000:5302:d800::1)1

Checks

  • ✓ Serial 1 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 2h, retry 15m, expire 14d, negative TTL 5m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns-1472.awsdns-56.org is one of the listed nameservers.
  • ✓ Contact administrator@sumup.com #25
    The SOA RNAME administrator.sumup.com means administrator@sumup.com.
  • ✓ Counter serial #26
    The serial 1 is a plain counter.

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

41 records at the apex

Found

Read from
205.251.197.192:53
TypeValueTTL
SOAns-1472.awsdns-56.org. administrator.sumup.com. 1 7200 900 1209600 300900
NSns-1472.awsdns-56.org.172800
NSns-169.awsdns-21.com.172800
NSns-1782.awsdns-30.co.uk.172800
NSns-728.awsdns-27.net.172800
A76.76.21.21300
MX1 aspmx.l.google.com.300
MX10 aspmx2.googlemail.com.300
MX10 aspmx3.googlemail.com.300
MX5 alt1.aspmx.l.google.com.300
MX5 alt2.aspmx.l.google.com.300
TXT"21rsv1l7wbd44c1hfk9wy874t42lplff"300
TXT"MS=ms26940357"300
TXT"_l59g8agvbwteg3dw5nm3lhgq11eub3a"300
TXT"_osd5bqxxmuczlhplzzy7qqg171gvx6r"300
TXT"_swj2rhio0f7kgy9lwjhxeq9fqy5whpo"300
TXT"_vdgdzzjjv0xyfbyh14ma9wm5q6xlrwv"300
TXT"_vo5uqg9ax8pznfg0dnr4xe089a7xaqm"300
TXT"_yhyn7188gfoyfy59n73q26gt1rv7qbl"300
TXT"apple-domain-verification=1xlQvwaNlj4N0gBp"300
TXT"apple-domain-verification=xHfMbYhYQ0eLs7tD"300
TXT"cursor-domain-verification-8cw5ra=QnXz2O2M4EVtiWiBVjf8ExgGa"300
TXT"docker-verification=5e109c69-2f74-4a43-a26b-ba0d50d07adc"300
TXT"docusign=0c34a98b-3486-43f2-9008-eefa98842387"300
TXT"facebook-domain-verification=fzjs9brez6ia3ppk9l20gcwiagw27r"300
TXT"google-site-verification=J8mn1CzEu_jQjy9SxwvjSQ4C_b7CXPovXytQODs7_fA"300
TXT"google-site-verification=PwJNdVnu04rLGdt4AadUo4n1SpSQpOOKqX8ZoQkv0ik"300
TXT"google-site-verification=ljEJA4_DuTQFyr_jBCF0kICk78oPwervSSZC1RcuID4"300
TXT"h1-domain-verification=seRiHTX9jHsRxNHwtKiPTUNUA1qE6M2V8u1buc3uJjHJXwPc"300
TXT"l5qs2w07ww3h8zr5s5rfpdl427mwcdkv"300
TXT"miro-verification=aa481b38b965ee2bc5b75a78e0551094e50f86dd"300
TXT"mixpanel-domain-verify=8234c236-0623-4738-8187-48b60221966c"300
TXT"mongodb-site-verification=QlqjjdPYRHbKU145SzWY84gv30Iu5YF1"300
TXT"mpqbq0mrpy"300
TXT"notion-domain-verification=MXO8h3Wkni7BZ0TTaPtHOnAw5OZFC8e8XYZgEUacObe"300
TXT"openai-domain-verification=dv-OPv2cWTKQebPlNzQymGZncwn"300
TXT"parallels-domain-verification=c41b71526a0e4f93b6b141507b7c53cf5c1f6a1fa1db4a87b3cfa182e063f164"300
TXT"uber-domain-verification=cb533dde-d052-4d45-bb7d-e1a46b65bfda"300
TXT"unbounce=617758"300
TXT"v=spf1 ip4:52.211.74.234 ip4:52.214.148.172 include:_spf.google.com include:_spf.salesforce.com include:sendgrid.net include:amazonses.com include:_spf.iriscrm.com -all"300
TXT"work-accounts-domain-verification=0P8k4NZlNGUOIIj42sktLyhLNjRMfn"300

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, MX 5m, NS 2d.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35