tractorsupply.com

Checked 22 October 2026, 11:11 UTC · via 8.8.8.8
!Passed with warnings
26 passed 2 warnings 0 failed 3 info

Registration

info

.com generic · SafeNames Ltd. · expires 2027-09-29

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
SafeNames Ltd.
Registered
30 September 1997
Last changed
1 October 2025
Expires
29 September 2027
Status
client delete prohibited, client transfer prohibited, client update prohibited
Registry nameservers
a1-109.akam.net, a12-66.akam.net, a2-67.akam.net, a24-64.akam.net, a5-65.akam.net, a9-66.akam.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-09-29 #3
    The registration is valid until 2027-09-29 (341 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited, client update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

a1-109.akam.net, a12-66.akam.net, a2-67.akam.net, a24-64.akam.net, a5-65.akam.net, a9-66.akam.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
a1-109.akam.net, a12-66.akam.net, a2-67.akam.net, a24-64.akam.net, a5-65.akam.net, a9-66.akam.net
NS in the zone
a1-109.akam.net, a12-66.akam.net, a2-67.akam.net, a24-64.akam.net, a5-65.akam.net, a9-66.akam.net
NameserverAddressesNetwork (AS)Glue
a1-109.akam.net193.108.91.109 2600:1401:2::6dAS20940 AKAMAI-ASN1 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a12-66.akam.net184.26.160.66 2600:1480:f000::42AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a2-67.akam.net95.100.174.67 2600:1480:7000::43AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a24-64.akam.net2.16.130.64 2600:1480:9800::40AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a5-65.akam.net95.100.168.65 2600:1480:b000::41AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a9-66.akam.net184.85.248.66 2a02:26f0:117::42AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-

Checks

  • ✓ 6 nameservers #6
    Delegated to a1-109.akam.net, a12-66.akam.net, a2-67.akam.net, a24-64.akam.net, a5-65.akam.net, a9-66.akam.net.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 6 IPv4 /24s and 6 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS20940 (AKAMAI-ASN1 - Akamai International B.V., NL): 1 address; AS21342 (AKAMAI-ASN2 - Akamai International B.V., NL): 11 addresses.
  • i
    All nameserver names under .net
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

warn

12 of 12 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
a1-109.akam.net 193.108.91.109NOERROR, 4 ms, authoritativenoyes / yesrefused41824.7
a1-109.akam.net 2600:1401:2::6dNOERROR, 4 ms, authoritativenoyes / yesrefused41824.7
a12-66.akam.net 184.26.160.66NOERROR, 4 ms, authoritativenoyes / yesrefused48878.31
a12-66.akam.net 2600:1480:f000::42NOERROR, 4 ms, authoritativenoyes / yesrefused48878.31
a2-67.akam.net 95.100.174.67NOERROR, 5 ms, authoritativenoyes / yesrefused48878.27
a2-67.akam.net 2600:1480:7000::43NOERROR, 5 ms, authoritativenoyes / yesrefused48878.26
a24-64.akam.net 2.16.130.64NOERROR, 5 ms, authoritativenoyes / yesrefused48878.26
a24-64.akam.net 2600:1480:9800::40NOERROR, 4 ms, authoritativenoyes / yesrefused48878.27
a5-65.akam.net 95.100.168.65NOERROR, 5 ms, authoritativenoyes / yesrefused41824.11
a5-65.akam.net 2600:1480:b000::41NOERROR, 4 ms, authoritativenoyes / yesrefused41824.10
a9-66.akam.net 184.85.248.66NOERROR, 3 ms, authoritativenoyes / yesrefused41824.4
a9-66.akam.net 2a02:26f0:117::42NOERROR, 4 ms, authoritativenoyes / yesrefused41824.7

Checks

  • ✓ All respond #14
    All 12 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: a1-109.akam.net: "41824.7"; a12-66.akam.net: "48878.31"; a2-67.akam.net: "48878.27"; a2-67.akam.net: "48878.26"; a24-64.akam.net: "48878.26"; a24-64.akam.net: "48878.27"; a5-65.akam.net: "41824.11"; a5-65.akam.net: "41824.10"; a9-66.akam.net: "41824.4"; a9-66.akam.net: "41824.7". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2021063263 · primary a1-109.akam.net

Found

Primary (MNAME)
a1-109.akam.net
Contact (RNAME)
hostmaster.tractorsupply.com
Serial
2021063263
Refresh / retry
3600 s / 600 s
Expire
604800 s
Negative TTL
300 s

Serial per nameserver

NameserverSerial
a1-109.akam.net (193.108.91.109)2021063263
a1-109.akam.net (2600:1401:2::6d)2021063263
a12-66.akam.net (184.26.160.66)2021063263
a12-66.akam.net (2600:1480:f000::42)2021063263
a2-67.akam.net (95.100.174.67)2021063263
a2-67.akam.net (2600:1480:7000::43)2021063263
a24-64.akam.net (2.16.130.64)2021063263
a24-64.akam.net (2600:1480:9800::40)2021063263
a5-65.akam.net (95.100.168.65)2021063263
a5-65.akam.net (2600:1480:b000::41)2021063263
a9-66.akam.net (184.85.248.66)2021063263
a9-66.akam.net (2a02:26f0:117::42)2021063263

Checks

  • ✓ Serial 2021063263 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 1h, retry 10m, expire 7d, negative TTL 5m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver a1-109.akam.net is one of the listed nameservers.
  • ✓ Contact hostmaster@tractorsupply.com #25
    The SOA RNAME hostmaster.tractorsupply.com means hostmaster@tractorsupply.com.
  • ✓ Timestamp serial #26
    The serial 2021063263 is a Unix timestamp (2034-01-16 22:27 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

47 records at the apex

Found

Read from
193.108.91.109:53
TypeValueTTL
SOAa1-109.akam.net. hostmaster.tractorsupply.com. 2021063263 3600 600 604800 30086400
NSa24-64.akam.net.86400
NSa2-67.akam.net.86400
NSa5-65.akam.net.86400
NSa12-66.akam.net.86400
NSa1-109.akam.net.86400
NSa9-66.akam.net.86400
A198.140.189.1586400
MX10 mxb-0022f601.gslb.pphosted.com.86400
MX10 mxa-0022f601.gslb.pphosted.com.86400
TXT"_5nhw0xb032ws2fr37d3c1jglz7jigli"86400
TXT"_d44d93i50z1r9qych5n1t1pz50nq6vk"86400
TXT"apple-domain-verification=bTH8izL0PyexNbTA"86400
TXT"paloaltonetworks-site-verification=7e48ff32ca187fd29015ae45c3d64c6fd87d79682b4f5c69ee499587c74e8124"86400
TXT"amazonses:2CD0nsKIvGfaUb57fkxbB+Cg4JE5t7QlyYOyFjcmWI0="86400
TXT"onx=f83ea721-6731-4b66-be8e-28a1c814ccfc"86400
TXT"atlassian-domain-verification=WxJbeJv72FKpI/DdriCDSEBHfaZH9t/QyBzlRS8EvILEKnawp7CoPUk9opH4IBxM"86400
TXT"apple-domain-verification=zRrpjtyxiRLF08KZ"86400
TXT"google-site-verification=7D1nO7OMaLZ97LpdDXRHLZfVGkveii7U672aSesDSe0"86400
TXT"mongodb-site-verification=nTEnQLFRlHUWFgGH2fezvJU6S5Fo5lze"86400
TXT"_dqojiz1nb040htkj04m6x11hd13d49n"86400
TXT"google-gws-recovery-domain-verification=73751561"86400
TXT"facebook-domain-verification=qqhsdl782bnkx0gbw3ckuvtcuo1ez9"86400
TXT"browserstack-domain-verification=ea53e687-2128-469a-91c9-19b9d85d75d3"86400
TXT"ibmid=9e1d3295-5eb7-4d96-a47f-d53717262081"86400
TXT"onx=a8de63fb-d90e-447d-acf3-b649f372a5dd"86400
TXT"apple-domain-verification=fibkDWSMm3GXd7H87v5PURbPgGFXwlyR_KH5Q_VleZg"86400
TXT"perplexity-ai-domain-verification-mynk3c=ctq0Sxo7uCicJ1fsr0P1gukya"86400
TXT"_9zppwqb4mnv1o1xx6txt1pi9itqzqrt"86400
TXT"91nj43CFu45AAeKO0NSjzzCXv43ckAhbT8ka+UIjx3a1FMN7Zzg/93cLOZO4S+7n23mNYmGUyTPb75EJA+1alQ=="86400
TXT"cisco-ci-domain-verification=69222d1b6f3a291bdc0336253cc660ca0060b5074d575807f5af66f5ae238812"86400
TXT"asv=89e077c5748aba909a6d9734a3be903a"86400
TXT"google-site-verification=BWffWxdDbqypW3UVYB_zJgO4BJ8q_P5p7u4xUK_21MA"86400
TXT"hcp-domain-verification=b2a30c568abff96e96b5f45110b1c0e06fa1008a6e5bcd8511f24c5bde28753b"86400
TXT"asuid-domain-verification=ed941b47269f2a1582863fbb61dde74ee0e9569e4b69dd83bb3582fd31722055"86400
TXT"_udp19doo18yvrdrdt3kjyzci8sxyykc"86400
TXT"google-site-verification=rW8qPq4l3w5ex3S_mfgu7e0B3Ho7kjEH98wkaqVhdDU"86400
TXT"h1-domain-verification=3AQG2D79fF9GdfPxzZS6BPkvTSWU8hasfLYUcPN571EwfK5S"86400
TXT"_mcle9g7zbt40630opleex2hlm4n3ilg"86400
TXT"_tf0xk0vj71ncu03sopjiy7e3zpx4pvo"86400
TXT"apple-domain-verification=8UXSZ5IWdaL1CBA7"86400
TXT"jamf-site-verification=BR2rMU9hQ3wfkoCcmFvFAg"86400
TXT"v=spf1 ip4:198.140.189.43 ip4:146.88.151.20 ip4:146.88.151.47 ip4:74.209.251.23 ip4:148.163.158.10 ip4:148.163.156.21 ip4:13.58.86.183 ip4:34.209.181.84 ip4:35.161.82.137" " ip4:52.14.70.114 ip4:52.15.230.220 ip4:54.71.252.65 ip4:174.129.15.10 ip4:66.179.179.203" " ip4:66.179.33.65 ip4:67.20.184.130 ip4:198.140.189.250 ip4:107.20.210.250 ip4:52.1.14.157 include:spf.protection.outlook.com include:_spf-dc4.sapsf.com include:_spf01.mykronos.com include:_spf.qualtrics.com include:spf.mailjet.com ~all"86400
TXT"onetrust-domain-verification=5400a449694e44188b921361541cd02d"86400
TXT"adobe-idp-site-verification=60dc0e172f5bb9eadfdbf0ca9fb4b0ba9e549403d6364c182a715ee448ae0d26"86400
TXT"autodesk-domain-verification=yVe4nwRT4N56J45ieUXo"86400
TXT"adobe-idp-site-verification=3c931f6136ed2db6ec800cf42eb34de9ac508e9094763b8eec284cc2defc3289"86400

Checks

  • ✓ TTLs within range #32
    TTLs: A 1d, MX 1d, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35