Domain report: visitmexico.com

Registration

info

.com generic · Network Solutions, LLC · expires 2030-04-01

Found

TLD: .com (generic)
ICANN policies apply: yes
Registrar: Network Solutions, LLC
Registered: 31 March 1997
Last changed: 1 October 2025
Expires: 1 April 2030
Status: client transfer prohibited
Registry nameservers: ns3.visitmexico.com, ns4.visitmexico.com, ns5.visitmexico.com, ns6.visitmexico.com
RDAP server: https://rdap.verisign.com/com/v1/

Checks

i

.com is a generic TLD (gTLD)

Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.

#1
✓ TLD delegated and signed #2

.com is delegated in the root zone and DNSSEC-signed.
✓ Expires on 2030-04-01 #3

The registration is valid until 2030-04-01 (1256 days).
✓ Transfer locked #4

Registry status: client transfer prohibited.
✓ Registry and delegation match #5

The nameservers registered at the registry are the ones published in DNS.

Delegation

fail

ns3.visitmexico.com, ns4.visitmexico.com, ns5.visitmexico.com, ns6.visitmexico.com

Found

Parent zone: com
Delegation from: a.gtld-servers.net (192.5.6.30)
NS at the parent: ns3.visitmexico.com, ns4.visitmexico.com, ns5.visitmexico.com, ns6.visitmexico.com
NS in the zone: pdns3.infotec.net.mx, pdns4.infotec.net.mx, pdns5.infotec.net.mx, pdns6.infotec.net.mx

Nameserver	Addresses	Network (AS)	Glue
ns3.visitmexico.com (parent only)	(does not resolve)		207.249.96.44
ns4.visitmexico.com (parent only)	(does not resolve)		35.209.160.235
ns5.visitmexico.com (parent only)	(does not resolve)		35.214.19.139
ns6.visitmexico.com (parent only)	(does not resolve)		207.249.96.157
pdns3.infotec.net.mx (zone only)	35.209.160.235 2600:1900:4001:1186::	AS15169 GOOGLE - Google LLC, US AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC, US	-
pdns4.infotec.net.mx (zone only)	35.214.19.139 2600:1900:40c0:7f46::	AS15169 GOOGLE - Google LLC, US AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC, US	-
pdns5.infotec.net.mx (zone only)	207.249.96.44	AS13579 AS13579 - INFOTEC CENTRO DE INVESTIGACION E INNOVACION EN TECNOLOGIAS DE LA INFORMACION Y COMUNICACION, MX	-
pdns6.infotec.net.mx (zone only)	207.249.96.157	AS13579 AS13579 - INFOTEC CENTRO DE INVESTIGACION E INNOVACION EN TECNOLOGIAS DE LA INFORMACION Y COMUNICACION, MX	-

Checks

✓ 4 nameservers #6

Delegated to ns3.visitmexico.com, ns4.visitmexico.com, ns5.visitmexico.com, ns6.visitmexico.com.
!

NS sets differ

The nameservers at the parent and in the zone should be the same. Only at the parent: ns3.visitmexico.com, ns4.visitmexico.com, ns5.visitmexico.com, ns6.visitmexico.com; only in the zone: pdns3.infotec.net.mx, pdns4.infotec.net.mx, pdns5.infotec.net.mx, pdns6.infotec.net.mx. pdns3.infotec.net.mx, pdns4.infotec.net.mx, pdns5.infotec.net.mx, pdns6.infotec.net.mx report NS pdns3.infotec.net.mx pdns4.infotec.net.mx pdns5.infotec.net.mx pdns6.infotec.net.mx.

#7
✓ Glue present and correct #8

Glue is published for the nameservers inside the zone: ns3.visitmexico.com, ns4.visitmexico.com, ns5.visitmexico.com, ns6.visitmexico.com.
✗

Nameserver names don't resolve

These nameservers have no A or AAAA record, so they can't be reached (lame delegation): ns3.visitmexico.com, ns4.visitmexico.com, ns5.visitmexico.com, ns6.visitmexico.com.

#9
✓ Nameservers in different networks #10

The nameservers are spread over 3 IPv4 /24s and 2 IPv6 /48s.
✓ 3 autonomous systems #11

The nameservers are spread over: AS13579 (AS13579 - INFOTEC CENTRO DE INVESTIGACION E INNOVACION EN TECNOLOGIAS DE LA INFORMACION Y COMUNICACION, MX): 2 addresses; AS15169 (GOOGLE - Google LLC, US): 2 addresses; AS396982 (GOOGLE-CLOUD-PLATFORM - Google LLC, US): 2 addresses.
i

All nameserver names under .com

All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.

#12
i

Partly IPv6

These nameservers have no IPv6 address: pdns5.infotec.net.mx, pdns6.infotec.net.mx.

#13

Nameservers

info

6 of 6 addresses answer authoritatively

Found

Nameserver	Answer	Recursion	TCP / EDNS	AXFR	Version
pdns3.infotec.net.mx 35.209.160.235	NOERROR, 128 ms, authoritative	no	yes / yes	refused	Served by PowerDNS - https://www.powerdns.com/
pdns3.infotec.net.mx 2600:1900:4001:1186::	NOERROR, 115 ms, authoritative	no	yes / yes	refused	Served by PowerDNS - https://www.powerdns.com/
pdns4.infotec.net.mx 35.214.19.139	NOERROR, 20 ms, authoritative	no	yes / yes	refused	Served by PowerDNS - https://www.powerdns.com/
pdns4.infotec.net.mx 2600:1900:40c0:7f46::	NOERROR, 19 ms, authoritative	no	yes / yes	refused	Served by PowerDNS - https://www.powerdns.com/
pdns5.infotec.net.mx 207.249.96.44	NOERROR, 174 ms, authoritative	no	yes / yes	refused	-
pdns6.infotec.net.mx 207.249.96.157	NOERROR, 173 ms, authoritative	no	yes / yes	refused	-

Checks

✓ All respond #14

All 6 nameserver addresses answered.
✓ All authoritative #15

Every responding nameserver answers authoritatively for the zone.
✓ No recursion #16

The nameservers do not answer recursive queries for other domains.
i

Identifying string disclosed

These nameservers answer version queries with a string that is not a version number: pdns3.infotec.net.mx: "Served by PowerDNS - https://www.powerdns.com/"; pdns4.infotec.net.mx: "Served by PowerDNS - https://www.powerdns.com/".

#17
✓ Zone transfers refused #18

No nameserver allows a zone transfer to the public.
✓ TCP supported #19

All nameservers answer over TCP.
✓ EDNS supported #20

All nameservers support EDNS(0).
✓ Public addresses #21

All nameserver addresses are publicly routable.

SOA

pass

serial 2026082606 · primary pdns5.infotec.net.mx

Found

Primary (MNAME): pdns5.infotec.net.mx
Contact (RNAME): postmaster.visitmexico.com
Serial: 2026082606
Refresh / retry: 43200 s / 7200 s
Expire: 1209600 s
Negative TTL: 86400 s

Serial per nameserver

Nameserver	Serial
pdns3.infotec.net.mx (35.209.160.235)	2026082606
pdns3.infotec.net.mx (2600:1900:4001:1186::)	2026082606
pdns4.infotec.net.mx (35.214.19.139)	2026082606
pdns4.infotec.net.mx (2600:1900:40c0:7f46::)	2026082606
pdns5.infotec.net.mx (207.249.96.44)	2026082606
pdns6.infotec.net.mx (207.249.96.157)	2026082606

Checks

✓ Serial 2026082606 everywhere #22

All nameservers serve the same version of the zone.
✓ Timers within recommendations #23

SOA refresh 12h, retry 2h, expire 14d, negative TTL 1d.
✓ Primary is a public nameserver #24

The primary nameserver pdns5.infotec.net.mx is one of the listed nameservers.
✓ Contact postmaster@visitmexico.com #25

The SOA RNAME postmaster.visitmexico.com means postmaster@visitmexico.com.
✓ Date-based serial #26

The serial 2026082606 follows the YYYYMMDDnn convention (2026-08-26).

DNSSEC

warn

Not signed

Found

Validated by resolver: no

Checks

!

Not signed

The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.

#27

Records

warn

9 records at the apex

Found

Read from: 35.209.160.235:53

Type	Value	TTL
SOA	pdns5.infotec.net.mx. postmaster.visitmexico.com. 2026082606 43200 7200 1209600 86400	60
NS	pdns6.infotec.net.mx.	60
NS	pdns3.infotec.net.mx.	60
NS	pdns4.infotec.net.mx.	60
NS	pdns5.infotec.net.mx.	60
A	45.60.51.229	60
A	45.60.45.229	60
TXT	"globalsign-domain-verification=4C4E7CC41228A384C145F4E6399B38B3"	60
TXT	"globalsign-domain-verification=D1E26B16227DD3A113F9113C86AE42AD"	60

Checks

!

Very low TTLs

These records have a TTL below 5m, causing extra queries and slower lookups: A (1m), NS (1m). Low TTLs are useful just before a planned change. The NS TTL at the parent is 2d and in the zone 1m; resolvers may use either.

#32
✓ No CNAME at the apex #33

The zone apex has no CNAME record.
✓ No wildcard #34

Names that don't exist return NXDOMAIN.
i

No CAA records

Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.

#35