timeweb.com

Checked 22 October 2026, 11:05 UTC · via 8.8.8.8
✗Problems found
27 passed 2 warnings 1 failed 1 info

Registration

info

.com generic · PDR Ltd. d/b/a PublicDomainRegistry.com · expires 2033-06-09

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
PDR Ltd. d/b/a PublicDomainRegistry.com
Registered
9 June 2002
Last changed
10 December 2025
Expires
9 June 2033
Status
client transfer prohibited
Registry nameservers
ns1.timeweb.ru, ns2.timeweb.ru, ns3.timeweb.org, ns4.timeweb.org
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2033-06-09 #3
    The registration is valid until 2033-06-09 (2422 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

pass

ns1.timeweb.ru, ns2.timeweb.ru, ns3.timeweb.org, ns4.timeweb.org

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns1.timeweb.ru, ns2.timeweb.ru, ns3.timeweb.org, ns4.timeweb.org
NS in the zone
ns1.timeweb.ru, ns2.timeweb.ru, ns3.timeweb.org, ns4.timeweb.org
NameserverAddressesNetwork (AS)Glue
ns1.timeweb.ru85.193.93.93 2a03:6f04:dead:bee::1AS9123 TimeWeb-AS - JSC _TIMEWEB_, RU AS9123 TimeWeb-AS - JSC _TIMEWEB_, RU-
ns2.timeweb.ru85.193.93.85 2a03:6f04:dead:bee::2AS9123 TimeWeb-AS - JSC _TIMEWEB_, RU AS9123 TimeWeb-AS - JSC _TIMEWEB_, RU-
ns3.timeweb.org217.78.234.130 2a03:6f07:4::2AS9123 TimeWeb-AS - JSC _TIMEWEB_, RU AS9123 TimeWeb-AS - JSC _TIMEWEB_, RU-
ns4.timeweb.org139.45.249.139 2a00:65e0:6:5:232a::2AS57304 RETNRU-AS - JSC _RetnNet_, RU AS198947 RETNRU-SPB-AS - JSC _RetnNet_, RU-

Checks

  • ✓ 4 nameservers #6
    Delegated to ns1.timeweb.ru, ns2.timeweb.ru, ns3.timeweb.org, ns4.timeweb.org.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 3 IPv4 /24s and 3 IPv6 /48s.
  • ✓ 3 autonomous systems #11
    The nameservers are spread over: AS198947 (RETNRU-SPB-AS - JSC _RetnNet_, RU): 1 address; AS57304 (RETNRU-AS - JSC _RetnNet_, RU): 1 address; AS9123 (TimeWeb-AS - JSC _TIMEWEB_, RU): 6 addresses.
  • ✓ Nameserver names under 2 TLDs #12
    Nameserver names use the TLDs .org, .ru.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

fail

7 of 8 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns1.timeweb.ru 85.193.93.93NOERROR, 48 ms, authoritativenoyes / yesrefused-
ns1.timeweb.ru 2a03:6f04:dead:bee::1NOERROR, 43 ms, authoritativenoyes / yesrefused-
ns2.timeweb.ru 85.193.93.85NOERROR, 48 ms, authoritativenoyes / yesrefused-
ns2.timeweb.ru 2a03:6f04:dead:bee::2NOERROR, 43 ms, authoritativenoyes / yesrefused-
ns3.timeweb.org 217.78.234.130NOERROR, 42 ms, authoritativenoyes / yesrefused-
ns3.timeweb.org 2a03:6f07:4::2NOERROR, 47 ms, authoritativenoyes / yesrefused-
ns4.timeweb.org 139.45.249.139no responsenono / no--
ns4.timeweb.org 2a00:65e0:6:5:232a::2NOERROR, 46 ms, authoritativenoyes / yesrefused-

Checks

  • ✗
    Nameservers not responding
    These addresses did not answer, so resolvers waste time on timeouts: ns4.timeweb.org (139.45.249.139): read udp 46.225.38.91:44573->139.45.249.139:53: i/o timeout.
    #14
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 2026083105 · primary ns1.timeweb.ru

Found

Primary (MNAME)
ns1.timeweb.ru
Contact (RNAME)
dns.timeweb.ru
Serial
2026083105
Refresh / retry
28800 s / 7200 s
Expire
259200 s
Negative TTL
300 s

Serial per nameserver

NameserverSerial
ns1.timeweb.ru (85.193.93.93)2026083105
ns1.timeweb.ru (2a03:6f04:dead:bee::1)2026083105
ns2.timeweb.ru (85.193.93.85)2026083105
ns2.timeweb.ru (2a03:6f04:dead:bee::2)2026083105
ns3.timeweb.org (217.78.234.130)2026083105
ns3.timeweb.org (2a03:6f07:4::2)2026083105
ns4.timeweb.org (2a00:65e0:6:5:232a::2)2026083105

Checks

  • ✓ Serial 2026083105 everywhere #22
    All nameservers serve the same version of the zone.
  • !
    Unusual SOA timers
    expire 3d is shorter than 7d; secondaries stop answering too soon when the primary is down. Current values: refresh 8h, retry 2h, expire 3d, negative TTL 5m.
    #23
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns1.timeweb.ru is one of the listed nameservers.
  • ✓ Contact dns@timeweb.ru #25
    The SOA RNAME dns.timeweb.ru means dns@timeweb.ru.
  • ✓ Date-based serial #26
    The serial 2026083105 follows the YYYYMMDDnn convention (2026-08-31).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

pass

17 records at the apex

Found

Read from
85.193.93.93:53
TypeValueTTL
SOAns1.timeweb.ru. dns.timeweb.ru. 2026083105 28800 7200 259200 300600
NSns3.timeweb.org.600
NSns4.timeweb.org.600
NSns1.timeweb.ru.600
NSns2.timeweb.ru.600
A185.65.148.89600
MX10 mx1.timeweb.ru.600
MX20 mx2.timeweb.ru.600
TXT"google-site-verification=23NLbPU6-1DbhOP5AMAx3QNk_At0Q6BtnkOLdlSebN4"600
TXT"google-site-verification=ARBbAgLdiVZ842eIN6tR0i-kAgJpeHtSwXckkZL_diU"600
TXT"_globalsign-domain-verification=AeDj5YeApzymknWATZK3juUC6JHPw53X7nQwxv9IUa"600
TXT"spf2.0/pra include:_spf.timeweb.ru include:spf.unisender.com include:spf.aksend.net ~all"600
TXT"_globalsign-domain-verification=HynrfT7H9az124YA7MLQFv0PVY7H0lrffKPZ4swkpF"600
TXT"v=spf1 ip4:92.53.116.0/24 ip4:176.57.223.0/24 ip4:193.164.152.0/24 ip4:45.149.128.0/24 ip4:185.251.20.0/24 ip4:195.206.243.0/24 ip4:80.90.180.0/24 include:spf.unisender.com include:spf.aksend.net include:_spf.cheapsender.email -all"600
TXT"mailru-verification: 66203ab12cb5440a"600
CAA0 iodef "mailto:abuse@timeweb.com"600
CAA0 issue "globalsign.com"600

Checks

  • ✓ TTLs within range #32
    TTLs: A 10m, MX 10m, NS 10m. The NS TTL at the parent is 2d and in the zone 10m; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: globalsign.com.