Domain report: telefonica.com

Registration

info

.com generic · Acens Technologies, S.L.U. · expires 2027-05-04

Found

TLD: .com (generic)
ICANN policies apply: yes
Registrar: Acens Technologies, S.L.U.
Registered: 3 May 1996
Last changed: 23 March 2026
Expires: 4 May 2027
Status: server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers: dns1.movistar.es, dns2.movistar.es
RDAP server: https://rdap.verisign.com/com/v1/

Checks

i

.com is a generic TLD (gTLD)

Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.

#1
✓ TLD delegated and signed #2

.com is delegated in the root zone and DNSSEC-signed.
✓ Expires on 2027-05-04 #3

The registration is valid until 2027-05-04 (193 days).
✓ Transfer locked #4

Registry status: server delete prohibited, server transfer prohibited, server update prohibited.
✓ Registry and delegation match #5

The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

dns1.movistar.es, dns2.movistar.es

Found

Parent zone: com
Delegation from: a.gtld-servers.net (192.5.6.30)
NS at the parent: dns1.movistar.es, dns2.movistar.es
NS in the zone: dns1.movistar.es, dns2.movistar.es

Nameserver	Addresses	Network (AS)	Glue
dns1.movistar.es	81.47.201.19	AS3352 Telefonica_de_EspaNa - TELEFONICA DE ESPANA S.A.U., ES	-
dns2.movistar.es	81.47.201.27	AS3352 Telefonica_de_EspaNa - TELEFONICA DE ESPANA S.A.U., ES	-

Checks

i

2 nameservers

Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: dns1.movistar.es, dns2.movistar.es.

#6
✓ Parent and zone agree #7

The parent delegation and the zone's NS records list the same nameservers.
✓ No glue needed #8

All nameservers are outside the zone, so no glue records are needed.
✓ All names resolve #9

Every nameserver name has an address and is not an alias.
!

Nameservers in one network

all IPv4 addresses are in 81.47.201.0/24. A single network failure takes all nameservers down; RFC 2182 recommends topologically separate networks (anycast setups are an exception).

#10
i

All nameservers in one AS

All nameserver addresses are announced by one network operator (AS3352 (Telefonica_de_EspaNa - TELEFONICA DE ESPANA S.A.U., ES): 2 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.

#11
i

All nameserver names under .es

All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.

#12
!

No IPv6

None of the nameservers has an IPv6 address, so IPv6-only resolvers can't reach them.

#13

Nameservers

pass

2 of 2 addresses answer authoritatively

Found

Nameserver	Answer	Recursion	TCP / EDNS	AXFR	Version
dns1.movistar.es 81.47.201.19	NOERROR, 39 ms, authoritative	no	yes / yes	refused	-
dns2.movistar.es 81.47.201.27	NOERROR, 32 ms, authoritative	no	yes / yes	refused	-

Checks

✓ All respond #14

All 2 nameserver addresses answered.
✓ All authoritative #15

Every responding nameserver answers authoritatively for the zone.
✓ No recursion #16

The nameservers do not answer recursive queries for other domains.
✓ No version disclosed #17

The nameservers don't reveal their software version.
✓ Zone transfers refused #18

No nameserver allows a zone transfer to the public.
✓ TCP supported #19

All nameservers answer over TCP.
✓ EDNS supported #20

All nameservers support EDNS(0).
✓ Public addresses #21

All nameserver addresses are publicly routable.

SOA

pass

serial 2602 · primary dns1.movistar.es

Found

Primary (MNAME): dns1.movistar.es
Contact (RNAME): please_set_email.absolutely.nowhere
Serial: 2602
Refresh / retry: 10800 s / 3600 s
Expire: 2419200 s
Negative TTL: 900 s

Serial per nameserver

Nameserver	Serial
dns1.movistar.es (81.47.201.19)	2602
dns2.movistar.es (81.47.201.27)	2602

Checks

✓ Serial 2602 everywhere #22

All nameservers serve the same version of the zone.
✓ Timers within recommendations #23

SOA refresh 3h, retry 1h, expire 28d, negative TTL 15m.
✓ Primary is a public nameserver #24

The primary nameserver dns1.movistar.es is one of the listed nameservers.
✓ Contact please_set_email@absolutely.nowhere #25

The SOA RNAME please_set_email.absolutely.nowhere means please_set_email@absolutely.nowhere.
✓ Counter serial #26

The serial 2602 is a plain counter.

DNSSEC

warn

Not signed

Found

Validated by resolver: no

Checks

!

Not signed

The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.

#27

Records

warn

60 records at the apex

Found

Read from: 81.47.201.19:53

Type	Value	TTL
SOA	dns1.movistar.es. please_set_email.absolutely.nowhere. 2602 10800 3600 2419200 900	300
NS	dns1.movistar.es.	300
NS	dns2.movistar.es.	300
A	141.101.90.97	24
A	141.101.90.99	24
A	141.101.90.96	24
A	141.101.90.98	24
MX	10 telefonicacorp.mail.protection.outlook.com.	300
TXT	"cisco-ci-domain-verification=510ef03dfcf2c63db1b148916dce9c0df7f3df452a7187568fa77f16405bc8ab"	3600
TXT	"MS=ms26661359"	3600
TXT	"v=spf1 include:spf.protection.outlook.com include:_spf.telefonica.com include:_spf.salesforce.com -all"	3600
TXT	"google-site-verification=Ixj2gGouZk6BclvESIgsaC8xi3We-VTmaEtsAYt3oM8"	3600
TXT	"facebook-domain-verification=gdpk00mebqepapr7cyozpoqzmm8sa2"	3600
TXT	"facebook-domain-verification=106038aov5nogh9i0byrp8gdkprlgh"	3600
TXT	"n1Cpo7LHwhJyXTpjia0PKngAL3fZnJlA9p6E1luJi/8="	3600
TXT	"apple-domain-verification=BE9Q490VGlMkXk3C"	3600
TXT	"5guJkSLmRRO+gzN3KM7iqT3nPmgBjRkhrMXfpTEUzEc="	3600
TXT	"Dynatrace-site-verification=271f89e9-8547-4eee-b8af-74df8fa3fc42__n96q00uhusltc6q0cjph06virh"	3600
TXT	"ryzm8075zb9zl7wnysw50mtr4xtjj4c0"	3600
TXT	"docusign=ccf8cd63-a110-47d2-850a-c58d00f77307"	3600
TXT	"adobe-idp-site-verification=1d948877d816d67d236bb565a2751d1ad668a960ca94dcc71e8efee0c283c07d"	3600
TXT	"j7n41qgm1hz1t0h427g3dgh55yr2958x"	3600
TXT	"ca3-fee0bc7b0935406286a2387079525c92"	3600
TXT	"atlassian-domain-verification=rsDW7pl9RJEc3lhddx7NWHtRpRK2vayrLrXRjfQWjoFPlJLoeVKdYyQRoav1RVvZ"	3600
TXT	"ca3-dd59b996d44642cfbb89b249053ba4e8"	3600
TXT	"cisco-ci-domain-verification=43044959dda4aa3b651693507d3bc50f6a4fff1364468afe2147bb1c08752af8"	3600
TXT	"thpkj13k5tf44drmvl3dgjmjn8wqmlnx"	3600
TXT	"asv=ac4e24b22a4ecb6e5083c9c101603ca3"	3600
TXT	"duo_sso_verification=vttmxux8lTuAA9B2rBPuYI8gA1vrlak8DYWWw6Fqa2JqcQ6OOo3b0vKbcTnX9TC9"	3600
TXT	"miro-verification=484df1c42a8e54782fa9c53cfb0ba445b73f8989"	3600
TXT	"5LWSB345TVM11C21H7QPETCIHHKHRFGMHA13UZ2A"	3600
TXT	"autodesk-domain-verification=UY9zZII1FZYOxKti-SEp"	3600
TXT	"atlassian-domain-verification=ing1A7avxPj1F7x9uMFgg4sDsxhBpfcSdNEDaf2fwVA7DKYPv2JiKO4DYkHkk0uA"	3600
TXT	"atlassian-domain-verification=HZT6KStjcrXiLBEKmXaHdloU6T4UrcQefPyY/I8/IhoQiBNtuUM4KzNbWFx2pafK"	3600
TXT	"MS=ms30701934"	3600
TXT	"atlassian-domain-verification=wBGFdxPzRchdfkWQTNCxgo7/4TZst4CbSTdc/xeF1WWAeP39omNDsWME3eglekC6"	3600
TXT	"_av8hpd5yu5hpw57ztum6me5ybtanay9"	3600
TXT	"openai-domain-verification=dv-PVfG7IRMzHwKIMEz1bdNZiEX"	3600
TXT	"apple-domain-verification=elRx56yvUDDxiaen"	3600
TXT	"cisco-ci-domain-verification=6a0eeda077e9c5dc4b195a1d9944656b341ca1af2f0c1b70f18eb77dfc9e8aa9"	3600
TXT	"atlassian-domain-verification=2uJDK1oObkfRks1kHM/QFTloCJDhEIEcG1LGU0gsUkucLniQaRXnt56/QPzRsDBg"	3600
TXT	"atlassian-domain-verification=txJpxQRbTHhiVHDJzl3Wxria9kGurMvab8WJkpn2ovqOxKkJPVehkBSMnRqt65tk"	3600
TXT	"atlassian-domain-verification=sp6D1zlcKCiAkNKsfv0aivW5utnVlSfgJIVbcxAYKAW/Rmz1yjT4JdRaggsla8dF"	3600
TXT	"atlassian-domain-verification=SYdWlOJS8oMoAKaLuLxd7o4NxoO7Own2w/5FLAUQk7i5CSxbfPPD0RrNLpa6E2ic"	3600
TXT	"atlassian-domain-verification=5wo/XLtK99u8OaB0hGqXtjNusJE1JtsOgI56SMLzAjvTjCi3mPDGJEu0xyZhFcXW"	3600
TXT	"atlassian-domain-verification=3DDzinEW3bIThoGzeqxlrn1xQfDRRiU3UXaJU3bnrcej3eKGivvacQCHNG2KMkTc"	3600
TXT	"atlassian-domain-verification=TaXHrZ9ELLhQ0fwycQYXA/oc5AabCy3HmQENgiquvaCzBymvHDiVV3skzwDqOaId"	3600
TXT	"acumbamail-domain-verification=9d9ec1b2-f774-11f0-b915-005056bd5094"	3600
TXT	"atlassian-domain-verification=nbENbKClUA5rRV3v31USEtLnFu7t4GfJhFbXHN04uocAa5WFMj5j/sPLURRKu4/G"	3600
TXT	"atlassian-domain-verification=f3u5zXKWzNLW1sTJcTlfH/8eLvSOVrxyDd7PC/CFmMFygxrmzuinfwPBioW2mi87"	3600
TXT	"anthropic-domain-verification-9c107v=6u9Jx6EyzHRlFOQJQoYHyopsJ"	3600
TXT	"_62n2cni01q0l7250hb5xxmpz7znthz4"	3600
TXT	"omnissa-connect-verification-6c5dd7d9-d09c-4947-aded-9d3f17b33a09"	3600
TXT	"00D7Z000000AFn3=1TB9M00000003sL;00D3O0000008n2g=1TB9M00000003tx;00D9b00000CvY2r=1TB9b00000008qP;00DWz000001bup3=1TBdr00000000T3;00D09000002XUw9=1TBSc000000116v;00D7Q000001NuSb=1TBTy00000000WH;00D7Z0000004ugu=1TB9Q0000000CIv"	3600
TXT	"anthropic-domain-verification-a5kx5q=hy2snxL74oFqtTDjzw8IPQ5AF"	3600
TXT	"00D0Y000002HdDe=1TBW7000000028X"	3600
TXT	"anthropic-domain-verification-w3wncn=KzxZbw4AUz3QnPIWyBMn6YTvH"	3600
TXT	"figma-domain-verification=edd78b5c4c3b2575b3283f35fa0920e7a3ad2be0292f4a56b97e1f4392c0fc1d-1786010626"	3600
TXT	"anthropic-domain-verification-4x1skf=EwGIW1A7WYKs95eTewdg6msbI"	3600
TXT	"airtable-verification=351c162c0a691506323e0deedb55def4"	3600

Checks

!

Very low TTLs

These records have a TTL below 5m, causing extra queries and slower lookups: A (24s). Low TTLs are useful just before a planned change. The NS TTL at the parent is 2d and in the zone 5m; resolvers may use either.

#32
✓ No CNAME at the apex #33

The zone apex has no CNAME record.
✓ No wildcard #34

Names that don't exist return NXDOMAIN.
i

No CAA records

Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.

#35