takungpao.com

vip7.alidns.com, vip8.alidns.com

Found

Parent zone

com

Delegation from

a.gtld-servers.net (192.5.6.30)

NS at the parent

vip7.alidns.com, vip8.alidns.com

NS in the zone

vip7.alidns.com, vip8.alidns.com

Checks

• i

  2 nameservers

  Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: vip7.alidns.com, vip8.alidns.com.

  #6
• ✓ Parent and zone agree #7

  The parent delegation and the zone's NS records list the same nameservers.
• !

  Glue differs from the zone

  The addresses at the parent (glue) differ from the addresses in the zone: vip7.alidns.com (glue 121.40.6.167, 140.205.1.13, 170.33.32.214, 170.33.80.14, 2408:4009:500::7, 39.103.26.216, 47.108.36.167, 47.253.24.27, 47.254.160.176, 47.74.160.227, 47.88.82.208, 8.212.93.7, zone 47.254.160.176, 47.88.82.208, 47.253.24.27, 170.33.80.14, 8.212.93.7, 170.33.32.214, 140.205.1.13, 2408:4009:500::7); vip8.alidns.com (glue 121.40.6.168, 140.205.1.14, 170.33.32.215, 170.33.80.15, 2408:4009:500::8, 39.103.26.217, 47.108.36.168, 47.253.24.28, 47.254.160.177, 47.74.160.228, 47.88.82.209, 8.212.93.8, zone 47.88.82.209, 170.33.32.215, 140.205.1.14, 8.212.93.8, 47.253.24.28, 170.33.80.15, 47.254.160.177, 2408:4009:500::8). Update the glue at your registrar.

  #8
• ✓ All names resolve #9

  Every nameserver name has an address and is not an alias.
• i

  One address family in one network

  all IPv6 addresses are in 2408:4009:500::/48, while the other address family is spread over several networks.

  #10
• ✓ 2 autonomous systems #11

  The nameservers are spread over: AS134963 (ASEPL-AS-AP - Alibaba Cloud (Singapore) Private Limited, SG): 1 address; AS45102 (ALIBABA-CN-NET - Alibaba (US) Technology Co., Ltd., CN): 15 addresses.
• i

  All nameserver names under .com

  All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.

  #12
• ✓ All reachable over IPv6 #13

  Every nameserver has an IPv6 address.

serial 2026081810 · primary vip7.alidns.com

Found

Primary (MNAME)

vip7.alidns.com

Contact (RNAME)

hostmaster.hichina.com

Serial

2026081810

Refresh / retry

3600 s / 1200 s

Expire

86400 s

Negative TTL

600 s

Serial per nameserver

Checks

• !

  Serials differ

  The nameservers serve different versions of the zone: 2025112917 on vip8.alidns.com (2408:4009:500::8); 2026081316 on vip7.alidns.com (8.212.93.7), vip8.alidns.com (47.253.24.28); 2026081710 on vip8.alidns.com (47.88.82.209); 2026081716 on vip7.alidns.com (47.88.82.208), vip7.alidns.com (170.33.80.14), vip8.alidns.com (170.33.32.215), vip8.alidns.com (170.33.80.15); 2026081810 on vip7.alidns.com (47.254.160.176), vip7.alidns.com (47.253.24.27), vip7.alidns.com (170.33.32.214), vip7.alidns.com (2408:4009:500::7), vip8.alidns.com (140.205.1.14), vip8.alidns.com (47.254.160.177); 2026082415 on vip7.alidns.com (140.205.1.13); 2026082516 on vip8.alidns.com (8.212.93.8). This is normal for a few minutes after a change; if it lasts, zone transfers to the secondaries are failing.

  #22
• !

  Unusual SOA timers

  expire 1d is shorter than 7d; secondaries stop answering too soon when the primary is down. Current values: refresh 1h, retry 20m, expire 1d, negative TTL 10m.

  #23
• ✓ Primary is a public nameserver #24

  The primary nameserver vip7.alidns.com is one of the listed nameservers.
• ✓ Contact hostmaster@hichina.com #25

  The SOA RNAME hostmaster.hichina.com means hostmaster@hichina.com.
• ✓ Date-based serial #26

  The serial 2026081810 follows the YYYYMMDDnn convention (2026-08-18).

Not signed

Found

Validated by resolver

no

Checks

• !

  Not signed

  The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.

  #27