sweetwater.com

Checked 22 October 2026, 10:53 UTC · via 8.8.8.8
!Passed with warnings
24 passed 3 warnings 0 failed 4 info

Registration

info

.com generic · CSC Corporate Domains, Inc. · expires 2026-12-05

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
6 December 1994
Last changed
1 December 2025
Expires
5 December 2026
Status
client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
dns1.p02.nsone.net, dns2.p02.nsone.net, dns3.p02.nsone.net, dns4.p02.nsone.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2026-12-05 #3
    The registration is valid until 2026-12-05 (43 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

dns1.p02.nsone.net, dns2.p02.nsone.net, dns3.p02.nsone.net, dns4.p02.nsone.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
dns1.p02.nsone.net, dns2.p02.nsone.net, dns3.p02.nsone.net, dns4.p02.nsone.net
NS in the zone
dns1.p03.nsone.net, dns2.p03.nsone.net, dns3.p03.nsone.net, dns4.p03.nsone.net
NameserverAddressesNetwork (AS)Glue
dns1.p02.nsone.net (parent only)198.51.44.2 2620:4d:4000:6259:7:2:0:1AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-
dns1.p03.nsone.net (zone only)198.51.44.3 2620:4d:4000:6259:7:3:0:1AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-
dns2.p02.nsone.net (parent only)198.51.45.2 2a00:edc0:6259:7:2::2AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-
dns2.p03.nsone.net (zone only)198.51.45.3 2a00:edc0:6259:7:3::2AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-
dns3.p02.nsone.net (parent only)198.51.44.66 2620:4d:4000:6259:7:2:0:3AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-
dns3.p03.nsone.net (zone only)198.51.44.67 2620:4d:4000:6259:7:3:0:3AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-
dns4.p02.nsone.net (parent only)198.51.45.66 2a00:edc0:6259:7:2::4AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-
dns4.p03.nsone.net (zone only)198.51.45.67 2a00:edc0:6259:7:3::4AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-

Checks

  • ✓ 4 nameservers #6
    Delegated to dns1.p02.nsone.net, dns2.p02.nsone.net, dns3.p02.nsone.net, dns4.p02.nsone.net.
  • !
    NS sets differ
    The nameservers at the parent and in the zone should be the same. Only at the parent: dns1.p02.nsone.net, dns2.p02.nsone.net, dns3.p02.nsone.net, dns4.p02.nsone.net; only in the zone: dns1.p03.nsone.net, dns2.p03.nsone.net, dns3.p03.nsone.net, dns4.p03.nsone.net. dns1.p02.nsone.net, dns1.p03.nsone.net, dns2.p02.nsone.net, dns2.p03.nsone.net, dns3.p02.nsone.net, dns3.p03.nsone.net, dns4.p02.nsone.net, dns4.p03.nsone.net report NS dns1.p03.nsone.net dns2.p03.nsone.net dns3.p03.nsone.net dns4.p03.nsone.net.
    #7
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 2 IPv4 /24s and 2 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS62597 (NSONE - NSONE Inc, US): 16 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • i
    All nameserver names under .net
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

info

16 of 16 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
dns1.p02.nsone.net 198.51.44.2NOERROR, 6 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns1.p02.nsone.net 2620:4d:4000:6259:7:2:0:1NOERROR, 6 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns1.p03.nsone.net 198.51.44.3NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns1.p03.nsone.net 2620:4d:4000:6259:7:3:0:1NOERROR, 6 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns2.p02.nsone.net 198.51.45.2NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns2.p02.nsone.net 2a00:edc0:6259:7:2::2NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns2.p03.nsone.net 198.51.45.3NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns2.p03.nsone.net 2a00:edc0:6259:7:3::2NOERROR, 3 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns3.p02.nsone.net 198.51.44.66NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns3.p02.nsone.net 2620:4d:4000:6259:7:2:0:3NOERROR, 6 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns3.p03.nsone.net 198.51.44.67NOERROR, 6 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns3.p03.nsone.net 2620:4d:4000:6259:7:3:0:3NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns4.p02.nsone.net 198.51.45.66NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns4.p02.nsone.net 2a00:edc0:6259:7:2::4NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns4.p03.nsone.net 198.51.45.67NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
dns4.p03.nsone.net 2a00:edc0:6259:7:3::4NOERROR, 3 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9

Checks

  • ✓ All respond #14
    All 16 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: dns1.p02.nsone.net: "19dd46e347df36b70933bf2be8023258586586a9"; dns1.p03.nsone.net: "19dd46e347df36b70933bf2be8023258586586a9"; dns2.p02.nsone.net: "19dd46e347df36b70933bf2be8023258586586a9"; dns2.p03.nsone.net: "19dd46e347df36b70933bf2be8023258586586a9"; dns3.p02.nsone.net: "19dd46e347df36b70933bf2be8023258586586a9"; dns3.p03.nsone.net: "19dd46e347df36b70933bf2be8023258586586a9"; dns4.p02.nsone.net: "19dd46e347df36b70933bf2be8023258586586a9"; dns4.p03.nsone.net: "19dd46e347df36b70933bf2be8023258586586a9".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 1752156774 · primary dns1.p03.nsone.net

Found

Primary (MNAME)
dns1.p03.nsone.net
Contact (RNAME)
hostmaster.nsone.net
Serial
1752156774
Refresh / retry
7200 s / 600 s
Expire
1800 s
Negative TTL
7200 s

Serial per nameserver

NameserverSerial
dns1.p02.nsone.net (198.51.44.2)1752156774
dns1.p02.nsone.net (2620:4d:4000:6259:7:2:0:1)1752156774
dns1.p03.nsone.net (198.51.44.3)1752156774
dns1.p03.nsone.net (2620:4d:4000:6259:7:3:0:1)1752156774
dns2.p02.nsone.net (198.51.45.2)1752156774
dns2.p02.nsone.net (2a00:edc0:6259:7:2::2)1752156774
dns2.p03.nsone.net (198.51.45.3)1752156774
dns2.p03.nsone.net (2a00:edc0:6259:7:3::2)1752156774
dns3.p02.nsone.net (198.51.44.66)1752156774
dns3.p02.nsone.net (2620:4d:4000:6259:7:2:0:3)1752156774
dns3.p03.nsone.net (198.51.44.67)1752156774
dns3.p03.nsone.net (2620:4d:4000:6259:7:3:0:3)1752156774
dns4.p02.nsone.net (198.51.45.66)1752156774
dns4.p02.nsone.net (2a00:edc0:6259:7:2::4)1752156774
dns4.p03.nsone.net (198.51.45.67)1752156774
dns4.p03.nsone.net (2a00:edc0:6259:7:3::4)1752156774

Checks

  • ✓ Serial 1752156774 everywhere #22
    All nameservers serve the same version of the zone.
  • !
    Unusual SOA timers
    expire 30m is shorter than 7d; secondaries stop answering too soon when the primary is down; expire 30m must be longer than refresh + retry. Current values: refresh 2h, retry 10m, expire 30m, negative TTL 2h.
    #23
  • ✓ Primary is a public nameserver #24
    The primary nameserver dns1.p03.nsone.net is one of the listed nameservers.
  • ✓ Contact hostmaster@nsone.net #25
    The SOA RNAME hostmaster.nsone.net means hostmaster@nsone.net.
  • ✓ Timestamp serial #26
    The serial 1752156774 is a Unix timestamp (2025-07-10 14:12 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

pass

41 records at the apex

Found

Read from
198.51.44.2:53
TypeValueTTL
SOAdns1.p03.nsone.net. hostmaster.nsone.net. 1752156774 7200 600 1800 72003600
NSdns1.p03.nsone.net.7200
NSdns2.p03.nsone.net.7200
NSdns3.p03.nsone.net.7200
NSdns4.p03.nsone.net.7200
A151.101.2.1337200
A151.101.66.1337200
A151.101.130.1337200
A151.101.194.1337200
MX5 us-smtp-inbound-1.mimecast.com.900
MX5 us-smtp-inbound-2.mimecast.com.900
TXT"v=spf1 include:spf.protection.outlook.com include:us._netblocks.mimecast.com ip4:206.71.152.0/23 ip4:66.249.253.0/24 ip4:66.249.254.0/24 ip4:199.115.76.18 ip4:199.115.76.26 ip4:192.40.173.196 ip4:18.208.102.98 include:spf.mandrillapp.com include:_spf.atl" "assian.net include:docebosaas.com -all"7200
TXT"MS=ms63505712"7200
TXT"_globalsign-domain-verification=-dLoamn_W8k1SJs3XuoC2JQZYSqmsrjSq07J0B0nq9"7200
TXT"atlassian-domain-verification=y1mkctDu9M5lyrVx11gE91kpU6c5ea8V9P9uqvztUeTwLEt8xby8eFmMyxhWOs8H"7200
TXT"apple-domain-verification=nubN2cNjt2cHnStu"7200
TXT"docker-verification=de95489c-7d39-4147-a233-b457d3c45159"7200
TXT"1password-site-verification=4NFML5TUDVFKJBKTSI5Q3WHL6U"7200
TXT"atlassian-sending-domain-verification=71196a67-62f3-4893-841d-6198de65ebcc"7200
TXT"onetrust-domain-verification=8fb8b3c21c4e4f18b37de912b79a32e1"7200
TXT"google-site-verification=XHt4aZB3-ZprgBNuIUTEt0A0OWp7defUrVP9V5zcGfg"7200
TXT"twilio-domain-verification=f97e1e335bf4b0fa5c60cec1acc48c9c"7200
TXT"google-site-verification=Cdpr1psujYLxVp5GwjSrvMvOrBFOw0MGftPq_RZV13A"7200
TXT"google-site-verification=2mT1PTrd_ro8TtaCoQHnrhkWMrDFCZmQIQZYJY-OhhE"7200
TXT"google-site-verification=wwlMm-6a85Ei4fUfHESjX-KDgdf76TCCpCuW2q3j6Ik"7200
TXT"cursor-domain-verification-p6t6k3=3dkUqMKvcMembUzo48i8do2pC"7200
TXT"anthropic-domain-verification-dan011=Fpiy6BVe7UwxtLNHAUnKgz9gj"7200
TXT"jamf-site-verification=RsTA6hY6AlfgmUyI5mvvKA"7200
TXT"stripe-verification=158EE19AACCF24C79858B4735F5F679C229EAC8C0D04BD137C43281273577B9E"7200
TXT"apple-domain-verification=nYCbO3LKkBIsVDB9eAU80q09X2CttqH62o2IkDb2LQI"7200
TXT"figma-domain-verification=0c60ffbcd51937f71e517cec96651f2a7c606159164b0e8a822eb28673b7b5b1-1782146938"7200
TXT"docusign=78818539-d0e1-4c09-b30a-8805bb93c510"7200
TXT"stripe-verification=C00AFB3442DDAAD97997B2C893C6768B42FD4B4FA84D8E7FC035C3A6EA15A139"7200
TXT"_hghk8fe6c279kigce6f4yw31pjtha2e"7200
TXT"adobe-idp-site-verification=43c5b4d600db4d407ffbcff15872d1260b3b2b63654d61b09d6cf0f25130bb17"7200
CAA0 issue "digicert.com"300
CAA0 issue "globalsign.com"300
CAA0 issue "amazon.com"300
CAA0 issue "pki.goog"300
CAA0 issue "letsencrypt.org"300
CAA0 issue "certainly.com"300

Checks

  • ✓ TTLs within range #32
    TTLs: A 2h, MX 15m, NS 2h. The NS TTL at the parent is 2d and in the zone 2h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: digicert.com, globalsign.com, amazon.com, pki.goog, letsencrypt.org, certainly.com.