virtuozzo.com

Checked 22 October 2026, 11:22 UTC · via 8.8.8.8
!Passed with warnings
30 passed 2 warnings 0 failed 3 info

Registration

info

.com generic · DNC Holdings, Inc. · expires 2027-06-18

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
DNC Holdings, Inc.
Registered
18 June 2001
Last changed
4 May 2026
Expires
18 June 2027
Status
client delete prohibited, client transfer prohibited, client update prohibited
Registry nameservers
dns3.easydns.org, dns4.easydns.info, dns41.cloudns.net, dns42.cloudns.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-06-18 #3
    The registration is valid until 2027-06-18 (238 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited, client update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

dns3.easydns.org, dns4.easydns.info, dns41.cloudns.net, dns42.cloudns.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
dns3.easydns.org, dns4.easydns.info, dns41.cloudns.net, dns42.cloudns.net
NS in the zone
dns4.easydns.info, dns41.cloudns.net, dns42.cloudns.net, dns43.cloudns.net
NameserverAddressesNetwork (AS)Glue
dns3.easydns.org (parent only)64.68.192.10 2620:49:1::10AS16686 EDNS - easyDNS Technologies, Inc., CA AS16686 EDNS - easyDNS Technologies, Inc., CA-
dns4.easydns.info64.68.197.10 2620:49:4::10AS16686 EDNS - easyDNS Technologies, Inc., CA AS16686 EDNS - easyDNS Technologies, Inc., CA-
dns41.cloudns.net185.136.96.200 2a06:fb00:1::1:200AS203391 CLOUDNSNET - Cloud DNS Ltd, BG AS203391 CLOUDNSNET - Cloud DNS Ltd, BG-
dns42.cloudns.net185.136.97.200 2a06:fb00:1::2:200AS203391 CLOUDNSNET - Cloud DNS Ltd, BG AS203391 CLOUDNSNET - Cloud DNS Ltd, BG-
dns43.cloudns.net (zone only)185.136.98.200 2a06:fb00:1::3:200AS203391 CLOUDNSNET - Cloud DNS Ltd, BG AS203391 CLOUDNSNET - Cloud DNS Ltd, BG-

Checks

  • ✓ 4 nameservers #6
    Delegated to dns3.easydns.org, dns4.easydns.info, dns41.cloudns.net, dns42.cloudns.net.
  • !
    NS sets differ
    The nameservers at the parent and in the zone should be the same. Only at the parent: dns3.easydns.org; only in the zone: dns43.cloudns.net. dns3.easydns.org, dns4.easydns.info, dns41.cloudns.net, dns42.cloudns.net, dns43.cloudns.net report NS dns4.easydns.info dns41.cloudns.net dns42.cloudns.net dns43.cloudns.net.
    #7
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 5 IPv4 /24s and 3 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS16686 (EDNS - easyDNS Technologies, Inc., CA): 4 addresses; AS203391 (CLOUDNSNET - Cloud DNS Ltd, BG): 6 addresses.
  • ✓ Nameserver names under 3 TLDs #12
    Nameserver names use the TLDs .info, .net, .org.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

info

10 of 10 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
dns3.easydns.org 64.68.192.10NOERROR, 12 ms, authoritativenoyes / yesrefusedams1
dns3.easydns.org 2620:49:1::10NOERROR, 20 ms, authoritativenoyes / yesrefusedlon1
dns4.easydns.info 64.68.197.10NOERROR, 5 ms, authoritativenoyes / yesrefusedfra4
dns4.easydns.info 2620:49:4::10NOERROR, 5 ms, authoritativenoyes / yesrefusedfra4
dns41.cloudns.net 185.136.96.200NOERROR, 5 ms, authoritativenoyes / yesrefusedde3-14
dns41.cloudns.net 2a06:fb00:1::1:200NOERROR, 5 ms, authoritativenoyes / yesrefusedde3-14
dns42.cloudns.net 185.136.97.200NOERROR, 5 ms, authoritativenoyes / yesrefusedde3-14
dns42.cloudns.net 2a06:fb00:1::2:200NOERROR, 6 ms, authoritativenoyes / yesrefusedde3-14
dns43.cloudns.net 185.136.98.200NOERROR, 4 ms, authoritativenoyes / yesrefusedde3-14
dns43.cloudns.net 2a06:fb00:1::3:200NOERROR, 4 ms, authoritativenoyes / yesrefusedde3-14

Checks

  • ✓ All respond #14
    All 10 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: dns3.easydns.org: "ams1"; dns3.easydns.org: "lon1"; dns4.easydns.info: "fra4"; dns41.cloudns.net: "de3-14"; dns42.cloudns.net: "de3-14"; dns43.cloudns.net: "de3-14".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2026102215 · primary dns41.cloudns.net

Found

Primary (MNAME)
dns41.cloudns.net
Contact (RNAME)
noc.virtuozzo.com
Serial
2026102215
Refresh / retry
7200 s / 1800 s
Expire
1209600 s
Negative TTL
3600 s

Serial per nameserver

NameserverSerial
dns3.easydns.org (64.68.192.10)2026102215
dns3.easydns.org (2620:49:1::10)2026102215
dns4.easydns.info (64.68.197.10)2026102215
dns4.easydns.info (2620:49:4::10)2026102215
dns41.cloudns.net (185.136.96.200)2026102215
dns41.cloudns.net (2a06:fb00:1::1:200)2026102215
dns42.cloudns.net (185.136.97.200)2026102215
dns42.cloudns.net (2a06:fb00:1::2:200)2026102215
dns43.cloudns.net (185.136.98.200)2026102215
dns43.cloudns.net (2a06:fb00:1::3:200)2026102215

Checks

  • ✓ Serial 2026102215 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 2h, retry 30m, expire 14d, negative TTL 1h.
  • ✓ Primary is a public nameserver #24
    The primary nameserver dns41.cloudns.net is one of the listed nameservers.
  • ✓ Contact noc@virtuozzo.com #25
    The SOA RNAME noc.virtuozzo.com means noc@virtuozzo.com.
  • ✓ Date-based serial #26
    The serial 2026102215 follows the YYYYMMDDnn convention (2026-10-22).

DNSSEC

pass

Signed, DS published at parent

Found

Validated by resolver
yes
Denial of existence
NSEC3
NSEC3
0 iterations, 0-byte salt
Signatures valid until
21 November 2026

DS at the parent

Key tagAlgorithmDigestMatches a key
30515ECDSAP256SHA256 (13)SHA256 FED9ECB7C16A7C74…yes

DNSKEY in the zone

Key tagRoleAlgorithm
30515KSK (257)ECDSAP256SHA256 (13)
33544ZSK (256)ECDSAP256SHA256 (13)

Checks

  • ✓ Signed and validated #27
    The zone is signed, the parent publishes a DS record, and the resolver validates the answers.
  • ✓ DS matches a key #28
    The DS record at the parent matches a key in the zone: key tag 30515 (SHA256).
  • ✓ Modern algorithms #29
    Key algorithms: ECDSAP256SHA256 (13).
  • ✓ Signatures valid until 2026-11-21 #30
    The earliest DNSKEY/SOA signature expires at 2026-11-21 10:16 UTC.
  • ✓ NSEC3 as recommended #31
    The zone uses NSEC3 with 0 iterations and no salt (RFC 9276).

Records

warn

49 records at the apex

Found

Read from
64.68.192.10:53
TypeValueTTL
SOAdns41.cloudns.net. noc.virtuozzo.com. 2026102215 7200 1800 1209600 36003600
NSdns41.cloudns.net.3600
NSdns42.cloudns.net.3600
NSdns43.cloudns.net.3600
NSdns4.easydns.info.3600
A18.66.102.8760
A18.66.102.10260
A18.66.102.760
A18.66.102.6960
AAAA2600:9000:223c:cc00:9:5660:6d40:93a160
AAAA2600:9000:223c:d000:9:5660:6d40:93a160
AAAA2600:9000:223c:2800:9:5660:6d40:93a160
AAAA2600:9000:223c:7800:9:5660:6d40:93a160
AAAA2600:9000:223c:7600:9:5660:6d40:93a160
AAAA2600:9000:223c:a000:9:5660:6d40:93a160
AAAA2600:9000:223c:f200:9:5660:6d40:93a160
AAAA2600:9000:223c:5000:9:5660:6d40:93a160
MX5 virtuozzo-com.mail.protection.outlook.com.300
TXT"amazonses:+tV421iSRNaYmVWrlpRV2s3TJlesfoSGvooGjpmAtZY="300
TXT"atlassian-domain-verification=NC2kNCqvCfW7831iOGT0q1Tb24BJ6jLdSnRF/ELOtzbSaMxmeHPe/RNzzfZbLPMn"300
TXT"MS=ms17916355"300
TXT"0rtp9t7m2q2q6vjmlm6n1rrq6rwk4176"300
TXT"x1qhhrwcb0fqc063vhygjc8pxvq5xpfl"300
TXT"chsp6gyzts5hx1x18txfjp7vpknrrn9z"300
TXT"cursor-domain-verification-z0tqst=cziiy3Gadyl4yxWvb1qMoZGdi"300
TXT"8bwtcb6xz4jf18777dgck4mg4hxkvkxn"300
TXT"openai-domain-verification=dv-KdvO89aak0zOTQNj3r4SBTlQ"300
TXT"google-site-verification=bHEyUGagPCc6AwXiLw4Q_vSNBoPmt-Q7wRAcxtF0jSg"300
TXT"_s4ys5kynrg26bolu0lniw6f0xfrawhl"300
TXT"r0q7yxnzyc1g4brsv3td6wchm4qn7blr"300
TXT"v=spf1 include:_spf.salesforce.com include:spf.protection.outlook.com include:aspmx.pardot.com include:_spf.psm.knowbe4.com include:mail.zendesk.com include:_spf.atlassian.net ip4:130.117.225.0/24 -all"300
TXT"_b8lvbutysf9xybcm4x8kidpj1wxveww"300
TXT"pardot148051=7c6806a9c72c92561e52a8205627628d39ff6178cd97faca92c473cb361525ea"300
TXT"apple-domain-verification=Y0SP3odewdQP3wRw"300
TXT"4318070B7B"300
TXT"jtfx3k3669fnyj1by8kbsz8gn3mxcs3l"300
TXT"anthropic-domain-verification-7de88r=eqy4e0xsb8TtuGQtYkqjCG8an"300
TXT"cloudflare_dashboard_sso=ebc313507acb416e30660fa22751269a"300
TXT"nd4r5f6321qmjkc1q1wv5dwdrqm504dx"300
TXT"c7083zbvgyfpsd1xtjt9qh7c6lh7hdn2"300
TXT"google-site-verification=NBL44T8R-4FrX4NDrEoNi5qNjLH7WX5trxT_urE1ZeI"300
TXT"google-site-verification=R5oL6ySIWHOnE3ExOrDARGdQhimCIsxhhkTCtpB31Og"300
TXT"knowbe4-site-verification=f218b28f3d359cec02258a9149015e5d"300
TXT"atlassian-sending-domain-verification=b27398ed-5ceb-4cf4-b4bb-9e750f6a6b8b"300
TXT"docusign=54c5b340-7d64-404d-8536-62b5f3caef5e"300
TXT"pardot148051=d87707efab4f16e72cbc6a996fe432f887cf0c1914af24960174c724a007cb92"300
TXT"pardot_148051_*=fc3cbf99830ae9b74a2ec45b3e44f60044fc97e84d5230cb3f74802c89bf0043"300
TXT"eFlpD9YlVSHbxeZpM1vUIbc3e0xP7JNEjcUUwAkT4UO1Lv8RzHJojoi/N51hrx/Ky8GVtWGfebL9BTfpk/n9LA=="300
TXT"ZOOM_verify_sXRRXmxYMSQNNdXRv5aGEH"300

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: A (1m), AAAA (1m). Low TTLs are useful just before a planned change. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35