verizon.com

Checked 22 October 2026, 11:21 UTC · via 8.8.8.8
!Passed with warnings
24 passed 3 warnings 0 failed 4 info

Registration

info

.com generic · CSC Corporate Domains, Inc. · expires 2027-03-06

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
6 March 2000
Last changed
2 March 2026
Expires
6 March 2027
Status
client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
a1-18.akam.net, a12-65.akam.net, a13-67.akam.net, a24-66.akam.net, a26-67.akam.net, a9-67.akam.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-03-06 #3
    The registration is valid until 2027-03-06 (135 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

a1-18.akam.net, a12-65.akam.net, a13-67.akam.net, a24-66.akam.net, a26-67.akam.net, a9-67.akam.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
a1-18.akam.net, a12-65.akam.net, a13-67.akam.net, a24-66.akam.net, a26-67.akam.net, a9-67.akam.net
NS in the zone
a1-18.akam.net, a12-65.akam.net, a13-67.akam.net, a24-66.akam.net, a26-67.akam.net, a9-67.akam.net
NameserverAddressesNetwork (AS)Glue
a1-18.akam.net193.108.91.18 2600:1401:2::12AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a12-65.akam.net184.26.160.65 2600:1480:f000::41AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a13-67.akam.net2.22.230.67 2600:1480:800::43AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a24-66.akam.net2.16.130.66 2600:1480:9800::42AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a26-67.akam.net23.74.25.67 2600:1480:b800::43AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a9-67.akam.net184.85.248.67 2a02:26f0:117::43AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-

Checks

  • ✓ 6 nameservers #6
    Delegated to a1-18.akam.net, a12-65.akam.net, a13-67.akam.net, a24-66.akam.net, a26-67.akam.net, a9-67.akam.net.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 6 IPv4 /24s and 6 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS21342 (AKAMAI-ASN2 - Akamai International B.V., NL): 12 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • i
    All nameserver names under .net
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

warn

12 of 12 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
a1-18.akam.net 193.108.91.18NOERROR, 3 ms, authoritativenoyes / yesrefused41824.8
a1-18.akam.net 2600:1401:2::12NOERROR, 4 ms, authoritativenoyes / yesrefused41824.10
a12-65.akam.net 184.26.160.65NOERROR, 4 ms, authoritativenoyes / yesrefused48878.31
a12-65.akam.net 2600:1480:f000::41NOERROR, 4 ms, authoritativenoyes / yesrefused48878.29
a13-67.akam.net 2.22.230.67NOERROR, 3 ms, authoritativenoyes / yesrefused41824.11
a13-67.akam.net 2600:1480:800::43NOERROR, 4 ms, authoritativenoyes / yesrefused41824.6
a24-66.akam.net 2.16.130.66NOERROR, 4 ms, authoritativenoyes / yesrefused48878.33
a24-66.akam.net 2600:1480:9800::42NOERROR, 4 ms, authoritativenoyes / yesrefused48878.33
a26-67.akam.net 23.74.25.67NOERROR, 4 ms, authoritativenoyes / yesrefused48878.33
a26-67.akam.net 2600:1480:b800::43NOERROR, 4 ms, authoritativenoyes / yesrefused48878.29
a9-67.akam.net 184.85.248.67NOERROR, 4 ms, authoritativenoyes / yesrefused41824.5
a9-67.akam.net 2a02:26f0:117::43NOERROR, 4 ms, authoritativenoyes / yesrefused41824.6

Checks

  • ✓ All respond #14
    All 12 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: a1-18.akam.net: "41824.8"; a1-18.akam.net: "41824.10"; a12-65.akam.net: "48878.31"; a12-65.akam.net: "48878.29"; a13-67.akam.net: "41824.11"; a13-67.akam.net: "41824.6"; a24-66.akam.net: "48878.33"; a26-67.akam.net: "48878.33"; a26-67.akam.net: "48878.29"; a9-67.akam.net: "41824.5"; a9-67.akam.net: "41824.6". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 5094 · primary ns-tmtr.verizon.com

Found

Primary (MNAME)
ns-tmtr.verizon.com
Contact (RNAME)
sysmgr.verizon.com
Serial
5094
Refresh / retry
900 s / 600 s
Expire
4838400 s
Negative TTL
900 s

Serial per nameserver

NameserverSerial
a1-18.akam.net (193.108.91.18)5094
a1-18.akam.net (2600:1401:2::12)5094
a12-65.akam.net (184.26.160.65)5094
a12-65.akam.net (2600:1480:f000::41)5094
a13-67.akam.net (2.22.230.67)5094
a13-67.akam.net (2600:1480:800::43)5094
a24-66.akam.net (2.16.130.66)5094
a24-66.akam.net (2600:1480:9800::42)5094
a26-67.akam.net (23.74.25.67)5094
a26-67.akam.net (2600:1480:b800::43)5094
a9-67.akam.net (184.85.248.67)5094
a9-67.akam.net (2a02:26f0:117::43)5094

Checks

  • ✓ Serial 5094 everywhere #22
    All nameservers serve the same version of the zone.
  • !
    Unusual SOA timers
    refresh 15m is outside 20m–1d. Current values: refresh 15m, retry 10m, expire 56d, negative TTL 15m.
    #23
  • i
    Hidden master
    The primary nameserver ns-tmtr.verizon.com is not listed as a nameserver: a hidden master that only feeds the public secondaries. That is a common setup; make sure it is not reachable for zone transfers from outside.
    #24
  • ✓ Contact sysmgr@verizon.com #25
    The SOA RNAME sysmgr.verizon.com means sysmgr@verizon.com.
  • ✓ Counter serial #26
    The serial 5094 is a plain counter.

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

pass

72 records at the apex

Found

Read from
193.108.91.18:53
TypeValueTTL
SOAns-tmtr.verizon.com. sysmgr.verizon.com. 5094 900 600 4838400 900900
NSa26-67.akam.net.300
NSa1-18.akam.net.300
NSa9-67.akam.net.300
NSa12-65.akam.net.300
NSa13-67.akam.net.300
NSa24-66.akam.net.300
A23.206.62.107300
A23.206.60.108300
A23.53.5.117300
A23.206.61.108300
A23.40.244.108300
A23.206.63.107300
A23.206.57.108300
A23.206.59.110300
A23.206.56.116300
A23.206.58.110300
MX15 mxb-0024a201.gslb.pphosted.com.600
MX15 mxa-0024a201.gslb.pphosted.com.600
TXT"docker-verification=e63249f1-5c89-419c-8b2a-928c81b87800"900
TXT"Dynatrace-site-verification=9b5e8c85-ffc6-4ee3-80a4-01c14607d287__pdi80imbksqp54emrr20d3gph8"900
TXT"q5c6fp9dz62p3yxbgjrfsmr9d0wm705p"900
TXT"_lva6pf2y06r966zjnmczto8aoqtyhsj"900
TXT"5bldj12kt4tpxl03yr7wcq4999ldkl6c"900
TXT"_87362fr0avm39qsoglpth1t9iocx3h0"900
TXT"2emAY6c1D+CgmANq0s7xHidy8qnyE6WStN33LPNuG/hd0aBm9xBLt6ZeIl7bfQR1VIMPYtYt3FlRkIcNWId/+A=="900
TXT"_v5t56ssq25ktk2khlhxdq84ct19wha1"900
TXT"facebook-domain-verification=jzt3ysrggr1qi89a0c46h6hnmtu0l4"900
TXT"_60467rwxiajhlol2lvhpvkdp6849tto"900
TXT"Precisely-domain-verification"900
TXT"g0s1gq156v9thvrtvmg4smn6fhgcxqnl"900
TXT"airtable-verification=72cbbd275f6f706ba31aaca8586b013f"900
TXT"v=spf1 include:verizonwireless.com ~all"900
TXT"airtable-verification=c7ec519ab4f7b83da45d01617d013506"900
TXT"EFrYNbG8uzynGvptGZk9HtN4Lm3prlj/zxlKEuFuGuCT614NJoj7M8m3YoFYzfpafIrQATFeKoHKqZOCDzKt/w=="900
TXT"b8fwzdt99dt8btdysj12gnnjpkz146y3"900
TXT"docusign=4a19cd69-5db5-4663-b70e-6600f177dae2"900
TXT"Dynatrace-site-verification=6219e2d6-0d4c-42b0-aa3f-bf137c76e0ef__lc47bag6133ot2qms6uqkhqmkg"900
TXT"00DWH000005xk2L=1TBWH0000000M3l"900
TXT"0gydk8ylzblmdk89rrh71z6vq8csbd4j"900
TXT"google-site-verification=Y3Q2T99tU_-XF206jqXW_UugVEHCvpzvPnIk5hYL2Bk"900
TXT"smartsheet-gov-site-validation=wO9Aq-yUnfO-HMmw3WBsMSiP212HgHB4"900
TXT"omnissa-connect-verification-29fbcf23-d90b-4dc2-9a7d-3ad94fadd543"900
TXT"mongodb-site-verification=6vBJxn6M8ujjAATlYkC5bRNXjD4sUiRf"900
TXT"atlassian-domain-verification=aj1ES5iXBorxgboMWU4jPaWG8ufdkUqPAZ98L4Z4FxPtlETrOSCwWPopYp326Boi"900
TXT"google-site-verification=KC5CJC5e0rzcxlINJHJcTM5U4b5Pr211cGU8diogsKI"900
TXT"ct55qq4v9hkbzvr613bg3nj4zqs82410"900
TXT"docker-verification=f22a41ee-7281-4719-a023-ff82e56fd556"900
TXT"google-site-verification=tZDve57pSHTO7eOO90j3R3wUIdpqq9pCrPCCauMcfbc"900
TXT"zv5q0hfc968n8pzr19b9vzqk5w75dcr2"900
TXT"VaI7HAA7sB1/Nj9AfhmIpdfZyiwqm7N7pf9UApsrhO0="900
TXT"00Dfn00000BO1uH=1TBaJ00000008Yf"900
TXT"MS=ms87778762"900
TXT"adobe-sign-verification=5c72a7e0c328f6774716059ec6fb7da6049813116d899e3483577d0896e7544c"900
TXT"_w6n6znye04ehtb3ugsmxtzhvkvu4h66"900
TXT"00DWH000005k5zV=1TBWH0000000M29"900
TXT"zfk8y8l5fh15lrg8dsk27ks1j51869tw"900
TXT"70nhs2k6yktgpq4blv65k8416dwfwtds"900
TXT"quickbase-site-verification-922ae18c23918d07de301f714e7747cabad0e6ce"900
TXT"hpe-greenlake-domain-verification=3571596b4878766d77676479514571517876467a537974492d50464663743858"900
TXT"dwpv611b3xgfp7ymnj2yd18kvdfc93lm"900
TXT"anthropic-domain-verification-dh9nvq=MZi3jVJdupvG2ZzJKBbuDIzF8"900
TXT"flexera-domain-verification-kqnfpwapzjwcdtjl"900
TXT"miro-verification=cb4542e8a7b94284a46cef7263ff93a0a8981ccc"900
TXT"flexera-domain-verification-bpuabamsmujihlzs"900
TXT"_xbcq1ksf5g26csqvs958k3ig1ovtwtt"900
TXT"flexera-domain-verification-ffgblppxwzuqqveo"900
TXT"docusign=9f9bf7a4-31a7-42bd-989d-b177ae520342"900
TXT"_q8n9oay9918jw5gr4o497lxper8vgf9"900
CAA0 issue "letsencrypt.org"900
CAA0 issue "digicert.com"900
CAA0 issue "amazon.com"900

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, MX 10m, NS 5m. The NS TTL at the parent is 2d and in the zone 5m; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: letsencrypt.org, digicert.com, amazon.com.