tucows.com

Checked 22 October 2026, 11:13 UTC · via 8.8.8.8
!Passed with warnings
26 passed 1 warning 0 failed 4 info

Registration

info

.com generic · Tucows Domains Inc. · expires 2027-09-06

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
Tucows Domains Inc.
Registered
7 September 1995
Last changed
8 August 2026
Expires
6 September 2027
Status
server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
ns1.tucows.com, ns2.tucows.com, ns3.tucows.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-09-06 #3
    The registration is valid until 2027-09-06 (318 days).
  • ✓ Transfer locked #4
    Registry status: server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

ns1.tucows.com, ns2.tucows.com, ns3.tucows.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns1.tucows.com, ns2.tucows.com, ns3.tucows.com
NS in the zone
ns1.tucows.com, ns2.tucows.com, ns3.tucows.com
NameserverAddressesNetwork (AS)Glue
ns1.tucows.com216.40.47.233 2604:4000:0:d:216:40:47:233AS15348 TUCOWS - Tucows.com Co., CA AS15348 TUCOWS - Tucows.com Co., CA216.40.47.233 2604:4000:0:d:216:40:47:233
ns2.tucows.com64.98.148.121 2604:4000:2000:2000:64:98:148:121AS32491 TUCOWS-3 - Tucows.com Co., CA AS32491 TUCOWS-3 - Tucows.com Co., CA2604:4000:2000:2000:64:98:148:121 64.98.148.121
ns3.tucows.com216.40.47.234 2604:4000:0:d:216:40:47:234AS15348 TUCOWS - Tucows.com Co., CA AS15348 TUCOWS - Tucows.com Co., CA216.40.47.234 2604:4000:0:d:216:40:47:234

Checks

  • ✓ 3 nameservers #6
    Delegated to ns1.tucows.com, ns2.tucows.com, ns3.tucows.com.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ Glue present and correct #8
    Glue is published for the nameservers inside the zone: ns1.tucows.com, ns2.tucows.com, ns3.tucows.com.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 2 IPv4 /24s and 2 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS15348 (TUCOWS - Tucows.com Co., CA): 4 addresses; AS32491 (TUCOWS-3 - Tucows.com Co., CA): 2 addresses.
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

info

6 of 6 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns1.tucows.com 216.40.47.233NOERROR, 99 ms, authoritativenoyes / yesrefusedcorp-dns
ns1.tucows.com 2604:4000:0:d:216:40:47:233NOERROR, 94 ms, authoritativenoyes / yesrefusedcorp-dns
ns2.tucows.com 64.98.148.121NOERROR, 121 ms, authoritativenoyes / yesrefusedcorp-dns
ns2.tucows.com 2604:4000:2000:2000:64:98:148:121NOERROR, 121 ms, authoritativenoyes / yesrefusedcorp-dns
ns3.tucows.com 216.40.47.234NOERROR, 99 ms, authoritativenoyes / yesrefusedcorp-dns
ns3.tucows.com 2604:4000:0:d:216:40:47:234NOERROR, 94 ms, authoritativenoyes / yesrefusedcorp-dns

Checks

  • ✓ All respond #14
    All 6 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: ns1.tucows.com: "corp-dns"; ns2.tucows.com: "corp-dns"; ns3.tucows.com: "corp-dns".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 1792627200 · primary ns1.tucows.com

Found

Primary (MNAME)
ns1.tucows.com
Contact (RNAME)
hostmaster.tucows.com
Serial
1792627200
Refresh / retry
3600 s / 1800 s
Expire
2419200 s
Negative TTL
300 s

Serial per nameserver

NameserverSerial
ns1.tucows.com (216.40.47.233)1792627200
ns1.tucows.com (2604:4000:0:d:216:40:47:233)1792627200
ns2.tucows.com (64.98.148.121)1792627200
ns2.tucows.com (2604:4000:2000:2000:64:98:148:121)1792627200
ns3.tucows.com (216.40.47.234)1792627200
ns3.tucows.com (2604:4000:0:d:216:40:47:234)1792627200

Checks

  • ✓ Serial 1792627200 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 1h, retry 30m, expire 28d, negative TTL 5m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns1.tucows.com is one of the listed nameservers.
  • ✓ Contact hostmaster@tucows.com #25
    The SOA RNAME hostmaster.tucows.com means hostmaster@tucows.com.
  • ✓ Timestamp serial #26
    The serial 1792627200 is a Unix timestamp (2026-10-22 00:00 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

21 records at the apex

Found

Read from
216.40.47.233:53
TypeValueTTL
SOAns1.tucows.com. hostmaster.tucows.com. 1792627200 3600 1800 2419200 3007200
NSns1.tucows.com.7200
NSns2.tucows.com.7200
NSns3.tucows.com.7200
A198.202.211.13600
MX0 mx.tucows.com.cust.hostedemail.com.600
TXT"google-site-verification=TcgYS0xZIEjlXVCUPtxRCyHzMZhpNtxHJGN9vKNuySY"3600
TXT"google-site-verification=pEXfzpq8xXE1sMr-tzsJtaxf2k4_JuZrMqqaEq8UzMw"3600
TXT"MS=ms31902717"3600
TXT"atlassian-domain-verification=BL/WGDRfZyvT591DDTYU87janrlmXSAOHrq7wp5Ab4Iw5hflOVnPMU0u0IxNyOac"3600
TXT"atlassian-domain-verification=w5ZSDl1EANsVeGna8vR3N4sVnwiCkcI/eGDKwu/vS92Wa9GLX4vKSwNYo/7GyoVm"3600
TXT"apple-domain-verification=K4ywWcOTGABfDWxF"3600
TXT"C7CF9B16EF"3600
TXT"MS=ms54709270"3600
TXT"postman-domain-verification=328b50b3b6a1453dc1e5722fe84be12ce7e2633c56d12f05c80ccfe40c17c752bcd72b515c56aebce97e1a0e8060a7295619bc94156dc14e8ed625e2dc112dea"3600
TXT"yahoo-verification-key=MPjVTXrMU+WTUqI0cKTXNqnSFUgyI2bD8e04Mvr7dSw="3600
TXT"openai-domain-verification=dv-dtXXtkf7qy3xjFhaua5QwSAA"3600
TXT"anthropic-domain-verification-9qx5bs=nsjHGR0hiLjX2pPZgUKJ7O3h3"3600
TXT"google-site-verification=TBTPSbsbyYA-Poa-bpZFAgH_-wAU_jCju5a8N6lQQcA"3600
TXT"google-site-verification=u8WeZ4EBsp-HY4HVJU4Sxwy94d-pF47_-3zmz194ehE"3600
TXT"v=spf1 ip4:216.40.44.0/24 ip4:216.40.34.9/32 ip4:216.40.42.17/32 ip4:64.99.140.0/24 ip4:34.195.55.186 ip4:216.40.35.66 ip6:2600:1f18:6057:5c01::16 include:_spf.zdsys.com include:mail.zendesk.com include:docebosaas.com include:servers.mcsv.net include:mg-s" "pf.greenhouse.io include:20704235.spf08.hubspotemail.net include:343165382.spf03.hubspotemail.net include:email.freshservice.com ?all"3600

Checks

  • ✓ TTLs within range #32
    TTLs: A 1h, MX 10m, NS 2h. The NS TTL at the parent is 2d and in the zone 2h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35