svb.com

Checked 22 October 2026, 10:53 UTC · via 8.8.8.8
!Passed with warnings
26 passed 2 warnings 0 failed 7 info

Registration

info

.com generic · CSC Corporate Domains, Inc. · expires 2027-04-03

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
4 April 1998
Last changed
30 March 2026
Expires
3 April 2027
Status
client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
dns1.p03.nsone.net, dns2.p03.nsone.net, dns3.p03.nsone.net, dns4.p03.nsone.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-04-03 #3
    The registration is valid until 2027-04-03 (162 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

dns1.p03.nsone.net, dns2.p03.nsone.net, dns3.p03.nsone.net, dns4.p03.nsone.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
dns1.p03.nsone.net, dns2.p03.nsone.net, dns3.p03.nsone.net, dns4.p03.nsone.net
NS in the zone
dns1.p03.nsone.net, dns2.p03.nsone.net, dns3.p03.nsone.net, dns4.p03.nsone.net
NameserverAddressesNetwork (AS)Glue
dns1.p03.nsone.net198.51.44.3 2620:4d:4000:6259:7:3:0:1AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-
dns2.p03.nsone.net198.51.45.3 2a00:edc0:6259:7:3::2AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-
dns3.p03.nsone.net198.51.44.67 2620:4d:4000:6259:7:3:0:3AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-
dns4.p03.nsone.net198.51.45.67 2a00:edc0:6259:7:3::4AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-

Checks

  • ✓ 4 nameservers #6
    Delegated to dns1.p03.nsone.net, dns2.p03.nsone.net, dns3.p03.nsone.net, dns4.p03.nsone.net.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 2 IPv4 /24s and 2 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS62597 (NSONE - NSONE Inc, US): 8 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • i
    All nameserver names under .net
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

info

8 of 8 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
dns1.p03.nsone.net 198.51.44.3NOERROR, 5 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns1.p03.nsone.net 2620:4d:4000:6259:7:3:0:1NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns2.p03.nsone.net 198.51.45.3NOERROR, 6 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns2.p03.nsone.net 2a00:edc0:6259:7:3::2NOERROR, 6 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns3.p03.nsone.net 198.51.44.67NOERROR, 9 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns3.p03.nsone.net 2620:4d:4000:6259:7:3:0:3NOERROR, 7 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns4.p03.nsone.net 198.51.45.67NOERROR, 6 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns4.p03.nsone.net 2a00:edc0:6259:7:3::4NOERROR, 6 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9

Checks

  • ✓ All respond #14
    All 8 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: dns1.p03.nsone.net: "19dd46e347df36b70933bf2be8023258586586a9"; dns2.p03.nsone.net: "19dd46e347df36b70933bf2be8023258586586a9"; dns3.p03.nsone.net: "19dd46e347df36b70933bf2be8023258586586a9"; dns4.p03.nsone.net: "19dd46e347df36b70933bf2be8023258586586a9".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 1732229972 · primary dns1.p03.nsone.net

Found

Primary (MNAME)
dns1.p03.nsone.net
Contact (RNAME)
dnsadmin.svbank.com
Serial
1732229972
Refresh / retry
3600 s / 600 s
Expire
604800 s
Negative TTL
60 s

Serial per nameserver

NameserverSerial
dns1.p03.nsone.net (198.51.44.3)1732229972
dns1.p03.nsone.net (2620:4d:4000:6259:7:3:0:1)1732229972
dns2.p03.nsone.net (198.51.45.3)1732229972
dns2.p03.nsone.net (2a00:edc0:6259:7:3::2)1732229972
dns3.p03.nsone.net (198.51.44.67)1732229972
dns3.p03.nsone.net (2620:4d:4000:6259:7:3:0:3)1732229972
dns4.p03.nsone.net (198.51.45.67)1732229972
dns4.p03.nsone.net (2a00:edc0:6259:7:3::4)1732229972

Checks

  • ✓ Serial 1732229972 everywhere #22
    All nameservers serve the same version of the zone.
  • !
    Unusual SOA timers
    negative caching TTL (minimum) 1m is outside 5m–1d (RFC 2308 recommends 1–3 hours). Current values: refresh 1h, retry 10m, expire 7d, negative TTL 1m.
    #23
  • ✓ Primary is a public nameserver #24
    The primary nameserver dns1.p03.nsone.net is one of the listed nameservers.
  • ✓ Contact dnsadmin@svbank.com #25
    The SOA RNAME dnsadmin.svbank.com means dnsadmin@svbank.com.
  • ✓ Timestamp serial #26
    The serial 1732229972 is a Unix timestamp (2024-11-21 22:59 UTC).

DNSSEC

info

Signed, DS published at parent

Found

Validated by resolver
yes
Denial of existence
NSEC
Signatures valid until
23 October 2026

DS at the parent

Key tagAlgorithmDigestMatches a key
36241RSASHA1 (5)SHA256 D674F1F1BF89D102…NO
48553ECDSAP256SHA256 (13)SHA256 9A4D79BB7D0302A2…yes

DNSKEY in the zone

Key tagRoleAlgorithm
48553KSK (257)ECDSAP256SHA256 (13)
12196ZSK (256)ECDSAP256SHA256 (13)

Checks

  • ✓ Signed and validated #27
    The zone is signed, the parent publishes a DS record, and the resolver validates the answers.
  • i
    Unused DS records
    These DS records match no key in the zone: key tag 36241 (SHA256). That is normal during a key rollover; otherwise remove them.
    #28
  • ✓ Modern algorithms #29
    Key algorithms: ECDSAP256SHA256 (13).
  • ✓ Short-lived signatures (online signing) #30
    Signatures are valid for 26h0m0s and created on demand; the current one was made at 2026-10-22 09:53 UTC and expires at 2026-10-23 11:53 UTC.
  • i
    NSEC
    The zone uses NSEC, so its full contents can be listed by walking the NSEC chain. That is fine unless the names are sensitive.
    #31

Records

warn

39 records at the apex

Found

Read from
198.51.44.3:53
TypeValueTTL
SOAdns1.p03.nsone.net. dnsadmin.svbank.com. 1732229972 3600 600 604800 603600
NSdns1.p03.nsone.net.3600
NSdns2.p03.nsone.net.3600
NSdns3.p03.nsone.net.3600
NSdns4.p03.nsone.net.3600
A184.86.103.20820
A184.86.103.21120
AAAA2a02:26f0:1700:11::b856:678c20
AAAA2a02:26f0:1700:11::b856:679720
MX10 mxb-00176601.gslb.pphosted.com.300
MX10 mxa-00176601.gslb.pphosted.com.300
MX20 mx0a-00176601.pphosted.com.300
MX20 mx0b-00176601.pphosted.com.300
TXT"QuoVadis=786c35b0-c1af-4527-9223-432abdf1c710"3600
TXT"YFrNxBzecdgdARZyTs0pUnDItFX5khmGtc5l/6qcIHXuMZ3W6JlfSiNHjKebx3xvvwrQ6HYaRpFHffyqPRwX4g=="3600
TXT"adobe-idp-site-verification=45d9b7a747f1e6e56e417687e90d2811ba3ee36da24368ba42011607cf855e78"3600
TXT"cisco-ci-domain-verification=396dbe3ad83098d1fb8944c6b2c447ad2e3fd35e0d2d257567c26d2ed33d4d37"3600
TXT"cloudhealth=7af495a9-4e19-4a16-90c6-51a1e518c3a2"3600
TXT"cn42mgrjkjfvqwnft474f6gjh3kzr31s"3600
TXT"google-site-verification=jK8VVtW9o7vVPnWh2rR4-yfDyzHOtfhvrUHu6TCjcCM"3600
TXT"h1-domain-verification=YjaAeuW9MvFQuwaWHEri3eupC6aRvUxLLqSQHkG43sUg5Yug"3600
TXT"mongodb-site-verification=MxGnlcDcA6CIqtOelxkys8RDwygpnxm5"3600
TXT"onetrust-domain-verification=01c43281bb9a4b8b92db101a290f9c51"3600
TXT"onetrust-domain-verification=cd2cac2064aa4036a20ed627f3866350"3600
TXT"pardot219482=12974e04f73398a81cc0d9a5cdb05ab2a138745562e82b51064b343989a1f822"3600
TXT"v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all"3600
TXT"intersight=24d5a1c1bfcbe28dbb47deae27e63b4233fed2551d4659ab1bbbb60449e9f032"3600
TXT"postman-domain-verification=8d0ac7f9e6d4776e05baf0393b8c2238b0dd165eb653cc0ce9c303d5952d1326b65584f9183757393712596947a4e53be455b30ae434d914a5cfebcd736b9e5e"3600
TXT"0ed1fe018a01d87d9b2e324bdfb52acfbda2c52f02"3600
TXT"box-domain-verification=4a0c81af8743e2281bbda4a481ca0fb2687d39ef5a1956ce829c0ea861ba1818"3600
TXT"docusign=dcc4138f-a7b0-47e4-84c7-1763b43c11cb"3600
TXT"_y1c2hgh0o8itcdh9shewy9nmyk5uxdp"3600
TXT"96523149-6a13-4eff-9d19-2615bc93a9ac"3600
TXT"atlassian-domain-verification=mXKucVDecUfNAfXWQI3k6znNSuvhmEBaIYqEeRn/cS09GryfV6b0ubFkPQC0dvgf"3600
TXT"MS=ms90124420"3600
TXT"_tppw0qksa1yt4vp5jogd3tyfkx4g0d0"3600
TXT"OPE0060803"3600
TXT"_zf30hblwuvm85nd7d8yz2g6occmn32h"3600
TXT"_1ahfcno22qa96rka7l71asbnm5z9une"3600

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: A (20s), AAAA (20s). Low TTLs are useful just before a planned change. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35