visa.com

Checked 22 October 2026, 11:22 UTC · via 8.8.8.8
!Passed with warnings
27 passed 3 warnings 0 failed 1 info

Registration

info

.com generic · MarkMonitor Inc. · expires 2028-03-09

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
MarkMonitor Inc.
Registered
8 March 1994
Last changed
5 February 2026
Expires
9 March 2028
Status
client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
a1-190.akam.net, a10-64.akam.net, a2-65.akam.net, a9-64.akam.net, lloyd.ns.cloudflare.com, melinda.ns.cloudflare.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2028-03-09 #3
    The registration is valid until 2028-03-09 (503 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

pass

a1-190.akam.net, a10-64.akam.net, a2-65.akam.net, a9-64.akam.net, lloyd.ns.cloudflare.com, melinda.ns.cloudflare.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
a1-190.akam.net, a10-64.akam.net, a2-65.akam.net, a9-64.akam.net, lloyd.ns.cloudflare.com, melinda.ns.cloudflare.com
NS in the zone
a1-190.akam.net, a10-64.akam.net, a2-65.akam.net, a9-64.akam.net, lloyd.ns.cloudflare.com, melinda.ns.cloudflare.com
NameserverAddressesNetwork (AS)Glue
a1-190.akam.net193.108.91.190 2600:1401:2::beAS20940 AKAMAI-ASN1 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a10-64.akam.net96.7.50.64 2600:1480:d000::40AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a2-65.akam.net95.100.174.65 2600:1480:7000::41AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
a9-64.akam.net184.85.248.64 2a02:26f0:117::40AS21342 AKAMAI-ASN2 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
lloyd.ns.cloudflare.com173.245.59.197 108.162.193.197 172.64.33.197 2a06:98c1:50::ac40:21c5 2606:4700:58::adf5:3bc5 2803:f800:50::6ca2:c1c5AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US108.162.193.197 172.64.33.197 173.245.59.197 2606:4700:58::adf5:3bc5 2803:f800:50::6ca2:c1c5 2a06:98c1:50::ac40:21c5
melinda.ns.cloudflare.com173.245.58.198 108.162.192.198 172.64.32.198 2a06:98c1:50::ac40:20c6 2803:f800:50::6ca2:c0c6 2606:4700:50::adf5:3ac6AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US108.162.192.198 172.64.32.198 173.245.58.198 2606:4700:50::adf5:3ac6 2803:f800:50::6ca2:c0c6 2a06:98c1:50::ac40:20c6

Checks

  • ✓ 6 nameservers #6
    Delegated to a1-190.akam.net, a10-64.akam.net, a2-65.akam.net, a9-64.akam.net, lloyd.ns.cloudflare.com, melinda.ns.cloudflare.com.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 10 IPv4 /24s and 8 IPv6 /48s.
  • ✓ 3 autonomous systems #11
    The nameservers are spread over: AS13335 (CLOUDFLARENET - Cloudflare, Inc., US): 12 addresses; AS20940 (AKAMAI-ASN1 - Akamai International B.V., NL): 1 address; AS21342 (AKAMAI-ASN2 - Akamai International B.V., NL): 7 addresses.
  • ✓ Nameserver names under 2 TLDs #12
    Nameserver names use the TLDs .com, .net.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

warn

20 of 20 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
a1-190.akam.net 193.108.91.190NOERROR, 4 ms, authoritativenoyes / yesrefused41824.8
a1-190.akam.net 2600:1401:2::beNOERROR, 4 ms, authoritativenoyes / yesrefused41824.4
a10-64.akam.net 96.7.50.64NOERROR, 3 ms, authoritativenoyes / yesrefused48878.27
a10-64.akam.net 2600:1480:d000::40NOERROR, 4 ms, authoritativenoyes / yesrefused48878.26
a2-65.akam.net 95.100.174.65NOERROR, 4 ms, authoritativenoyes / yesrefused48878.26
a2-65.akam.net 2600:1480:7000::41NOERROR, 5 ms, authoritativenoyes / yesrefused48878.31
a9-64.akam.net 184.85.248.64NOERROR, 5 ms, authoritativenoyes / yesrefused41824.9
a9-64.akam.net 2a02:26f0:117::40NOERROR, 5 ms, authoritativenoyes / yesrefused41824.11
lloyd.ns.cloudflare.com 173.245.59.197NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
lloyd.ns.cloudflare.com 108.162.193.197NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
lloyd.ns.cloudflare.com 172.64.33.197NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
lloyd.ns.cloudflare.com 2a06:98c1:50::ac40:21c5NOERROR, 16 ms, authoritativenoyes / yesrefused2026.10.2
lloyd.ns.cloudflare.com 2606:4700:58::adf5:3bc5NOERROR, 16 ms, authoritativenoyes / yesrefused2026.10.2
lloyd.ns.cloudflare.com 2803:f800:50::6ca2:c1c5NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
melinda.ns.cloudflare.com 173.245.58.198NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
melinda.ns.cloudflare.com 108.162.192.198NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
melinda.ns.cloudflare.com 172.64.32.198NOERROR, 16 ms, authoritativenoyes / yesrefused2026.10.2
melinda.ns.cloudflare.com 2a06:98c1:50::ac40:20c6NOERROR, 16 ms, authoritativenoyes / yesrefused2026.10.2
melinda.ns.cloudflare.com 2803:f800:50::6ca2:c0c6NOERROR, 16 ms, authoritativenoyes / yesrefused2026.10.2
melinda.ns.cloudflare.com 2606:4700:50::adf5:3ac6NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2

Checks

  • ✓ All respond #14
    All 20 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: a1-190.akam.net: "41824.8"; a1-190.akam.net: "41824.4"; a10-64.akam.net: "48878.27"; a10-64.akam.net: "48878.26"; a2-65.akam.net: "48878.26"; a2-65.akam.net: "48878.31"; a9-64.akam.net: "41824.9"; a9-64.akam.net: "41824.11"; lloyd.ns.cloudflare.com: "2026.10.2"; melinda.ns.cloudflare.com: "2026.10.2". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 2019112733 · primary lloyd.ns.cloudflare.com

Found

Primary (MNAME)
lloyd.ns.cloudflare.com
Contact (RNAME)
dns.cloudflare.com
Serial
2019112733
Refresh / retry
10000 s / 2400 s
Expire
604800 s
Negative TTL
3600 s

Serial per nameserver

NameserverSerial
a1-190.akam.net (193.108.91.190)2019112733
a1-190.akam.net (2600:1401:2::be)2019112733
a10-64.akam.net (96.7.50.64)2019112733
a10-64.akam.net (2600:1480:d000::40)2019112733
a2-65.akam.net (95.100.174.65)2019112733
a2-65.akam.net (2600:1480:7000::41)2019112733
a9-64.akam.net (184.85.248.64)2019112733
a9-64.akam.net (2a02:26f0:117::40)2019112733
lloyd.ns.cloudflare.com (173.245.59.197)2418147659
lloyd.ns.cloudflare.com (108.162.193.197)2418147659
lloyd.ns.cloudflare.com (172.64.33.197)2418147659
lloyd.ns.cloudflare.com (2a06:98c1:50::ac40:21c5)2418147659
lloyd.ns.cloudflare.com (2606:4700:58::adf5:3bc5)2418147659
lloyd.ns.cloudflare.com (2803:f800:50::6ca2:c1c5)2418147659
melinda.ns.cloudflare.com (173.245.58.198)2418147659
melinda.ns.cloudflare.com (108.162.192.198)2418147659
melinda.ns.cloudflare.com (172.64.32.198)2418147659
melinda.ns.cloudflare.com (2a06:98c1:50::ac40:20c6)2418147659
melinda.ns.cloudflare.com (2803:f800:50::6ca2:c0c6)2418147659
melinda.ns.cloudflare.com (2606:4700:50::adf5:3ac6)2418147659

Checks

  • !
    Serials differ
    The nameservers serve different versions of the zone: 2019112733 on a1-190.akam.net (193.108.91.190), a1-190.akam.net (2600:1401:2::be), a10-64.akam.net (96.7.50.64), a10-64.akam.net (2600:1480:d000::40), a2-65.akam.net (95.100.174.65), a2-65.akam.net (2600:1480:7000::41), a9-64.akam.net (184.85.248.64), a9-64.akam.net (2a02:26f0:117::40); 2418147659 on lloyd.ns.cloudflare.com (173.245.59.197), lloyd.ns.cloudflare.com (108.162.193.197), lloyd.ns.cloudflare.com (172.64.33.197), lloyd.ns.cloudflare.com (2a06:98c1:50::ac40:21c5), lloyd.ns.cloudflare.com (2606:4700:58::adf5:3bc5), lloyd.ns.cloudflare.com (2803:f800:50::6ca2:c1c5), melinda.ns.cloudflare.com (173.245.58.198), melinda.ns.cloudflare.com (108.162.192.198), melinda.ns.cloudflare.com (172.64.32.198), melinda.ns.cloudflare.com (2a06:98c1:50::ac40:20c6), melinda.ns.cloudflare.com (2803:f800:50::6ca2:c0c6), melinda.ns.cloudflare.com (2606:4700:50::adf5:3ac6). This is normal for a few minutes after a change; if it lasts, zone transfers to the secondaries are failing.
    #22
  • ✓ Timers within recommendations #23
    SOA refresh 2h46m40s, retry 40m, expire 7d, negative TTL 1h.
  • ✓ Primary is a public nameserver #24
    The primary nameserver lloyd.ns.cloudflare.com is one of the listed nameservers.
  • ✓ Contact dns@cloudflare.com #25
    The SOA RNAME dns.cloudflare.com means dns@cloudflare.com.
  • ✓ Date-based serial #26
    The serial 2019112733 follows the YYYYMMDDnn convention (2019-11-27).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

pass

53 records at the apex

Found

Read from
193.108.91.190:53
TypeValueTTL
SOAlloyd.ns.cloudflare.com. dns.cloudflare.com. 2019112733 10000 2400 604800 3600300
NSa2-65.akam.net.86400
NSa9-64.akam.net.86400
NSlloyd.ns.cloudflare.com.86400
NSa1-190.akam.net.86400
NSa10-64.akam.net.86400
NSmelinda.ns.cloudflare.com.86400
A162.159.152.2300
A162.159.153.2300
MX10 portal4i.visa.com.300
MX10 portal3i.visa.com.300
MX10 portal1i.visa.com.300
MX10 portal2i.visa.com.300
TXT"pendo-domain-verification=e6d7c929-b00e-4ae6-b735-887c0140aac7"3600
TXT"ZOOM_verify_7BUaGiZgQwal26U_iC4SsA"3600
TXT"shopify-verification-code=4EcI1NaBD6RvEzb3cc8LCOkHB7ugdr"3600
TXT"google-site-verification=-JaYZik_MGBFoW1N_G_bXiSVDZfOk4WY-VTihaYmcvM"3600
TXT"applause-verification:450573e4-24a6-44ee-9d2a-07dfacb7af96"3600
TXT"axios-domain-verification-ws7kt1=LxuAft0qnf4Gak8Yht7Cgianb"3600
TXT"reftab-domain-verification=791713d815b7b07479c448d8e0fdfbf6"3600
TXT"6t2slkf8uuqtucpt0goe8sbn8a"3600
TXT"ciscocidomainverification=73baf9f547b8c3d245f6977cae332dd81280a6609fb0336c5d3747917421c0"3600
TXT"miro-verification=ae369c317a61dee2c9074a9b4939298c23fc821c"3600
TXT"l1edkcthe07gbvrvp32p1h54be" "gs3ctetm0rq9spn0r6utnfqgs7"3600
TXT"atlassian-domain-verification=HayM3UDHtHmDyfgxN4mOpNxSsB4Wcw7vsijQo4amFRmJ4XcvkYbhjBZkAK0bH4if"3600
TXT"pexip-ms-tenant-domain-verification=598cf152-df41-47e7-ba4d-a7d3deef9d16"3600
TXT"pigeonholelive-site-verification=4639ede809730bca0e52c45cd165dbe7"3600
TXT"google-site-verification=_QB_AQpQJwqEb6SFmz9t40ON4OIyL98OjKp6sWpgk6I"3600
TXT"anthropic-domain-verification-ztq038=zYgHaF7HhlfwR4zeTlaOwSL4j"3600
TXT"c33f8ds7v87st2j5lhwjy85t89gl8g57"3600
TXT"facebook-domain-verification=bkt7djhno98ijvg9fh8e4ohjq0k9tc"3600
TXT"atlassian-domain-verification=/PlCzjmee+i8uVopeuSsU7ob7JACJeZ/nhiCKfzTXPT7kqStx5DVBlU2+CGDdwOw"3600
TXT"prttljx8jt0cndm8h4r8zk561y9zpqhd"3600
TXT"ca3-475f15e992de4b01858f158660feee46"3600
TXT"docusign=83b99b90-8588-47c0-8a39-f45650959019"3600
TXT"docusign=c28711b5-a692-43dd-be6a-6995c5b18557"3600
TXT"iamplMiZSKnXGuzVnt+Iapluyr+Lhol93c20YOmmcGFCWT9W1VdLRNQGNRto8nqgmTx5QodeW7cMP1BJHTicNQ=="3600
TXT"adobe-idp-site-verification=9412b2b713f814b868784d5dd88e8ccc0be77857884c1328659531291ad169a4"3600
TXT"onetrust-domain-verification=a3ac6f032e624cec9263d8e27844602d"3600
TXT"atlassian-domain-verification=a0ZlgUYBsYkEDk57K0B/3LjHNN4enn9XLFryUZ5N0l8QdXtHw16hx7ePmsWPUAsh"3600
TXT"397c4xs320y27dbx7m8vvp5st057046y"3600
TXT"MS=ms43679998"3600
TXT"v=spf1 ip4:198.241.162.0/24 ip4:198.241.168.0/24 ip4:198.241.159.0/24 ip4:72.46.234.0/24 ip4:66.185.181.0/24 ip4:198.241.174.0/24 ip4:74.116.91.0/24 ip4:198.80.42.3 ip4:69.20.125.232 ip4:198.241.175.106 ip4:216.251.253.98 ip4:67.208.216.61 ip4:198.247.174" ".175 ip4:67.220.120.24 ip4:66.185.186.2 ip4:198.241.171.12 ip4:204.75.142.27 ip4:66.165.175.189 ip4:67.192.139.34 ip4:67.192.157.83 ip4:174.143.100.191 ip4:198.241.158.43 ip4:198.241.207.0/24 ip4:198.241.206.0/24 exists:%{i}.spf.hc3429" "-92.iphmx.com exists:%{i}.spf.hc5864-50.iphmx.com ~all"3600
TXT"0 contactemail hostmaster@visa.com"3600
TXT"jamf-site-verification=XmGZNq15YNhXrfc7i9pmpw"3600
TXT"perplexity-ai-domain-verification-w446vz=wrySuZC5Z1LoXIsAetcIRD1ze"3600
TXT"wrike-verification=NDI5NTgzNDphYjQ1MWNkYTQ0YjI1YzhlMThjNzNjOWQwNjE1MDUyZDY5NjA1N2ZlNDdjY2M5MzI0ZDgwODYxYTFiNDA5MzY0"3600
TXT"apple-domain-verification=OllinA0hXqDzZa6E"3600
TXT"onetrust-domain-verification=824570fb233a4a509fc6025568860c01"3600
TXT"atlassian-domain-verification=7zr/X7MYe1RLzdXboOQfgkBfeb6kAB892u84YHeyPVkhkgUC8bT6jdsVl5ihIPli"3600
TXT"wrike-verification=MjE3MzIxNjpmYzExNDY5MTQyZjQxMzFhYmM1NjA4NzRjZGIyODIwMmYyMDAwODgyN2M2YzM2NmJhMDhjNzM2MzA1ODViYTJl"3600
TXT"miro-verification=09958a3210ba4a37e940cddffd4f6d0cae827010"3600
CAA0 iodef "mailto:hostmaster@visa.com"3600

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, MX 5m, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: .