vml.com

Checked 22 October 2026, 11:22 UTC · via 8.8.8.8
✗Problems found
25 passed 2 warnings 1 failed 3 info

Registration

fail

.com generic · CSC Corporate Domains, Inc. · expires 2026-11-01

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
2 November 1994
Last changed
28 October 2025
Expires
1 November 2026
Status
client transfer prohibited
Registry nameservers
gold.foundationdns.com, gold.foundationdns.net, gold.foundationdns.org
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✗
    Expires in 9 days
    The registration expires on 2026-11-01. Renew it now or enable auto-renewal.
    #3
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

gold.foundationdns.com, gold.foundationdns.net, gold.foundationdns.org

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
gold.foundationdns.com, gold.foundationdns.net, gold.foundationdns.org
NS in the zone
gold.foundationdns.com, gold.foundationdns.net, gold.foundationdns.org
NameserverAddressesNetwork (AS)Glue
gold.foundationdns.com172.64.40.2 162.159.60.2 108.162.198.2 2606:4700:57::6ca2:c602 2a06:98c1:56::ac40:2802 2803:f800:52::a29f:3c02AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US108.162.198.2 162.159.60.2 172.64.40.2 2606:4700:57::6ca2:c602 2803:f800:52::a29f:3c02 2a06:98c1:56::ac40:2802
gold.foundationdns.net162.159.60.32 172.64.40.32 108.162.198.32 2803:f800:52::a29f:3c20 2606:4700:57::6ca2:c620 2a06:98c1:56::ac40:2820AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US-
gold.foundationdns.org162.159.60.62 108.162.198.62 172.64.40.62 2a06:98c1:56::ac40:283e 2803:f800:52::a29f:3c3e 2606:4700:57::6ca2:c63eAS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US-

Checks

  • ✓ 3 nameservers #6
    Delegated to gold.foundationdns.com, gold.foundationdns.net, gold.foundationdns.org.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 3 IPv4 /24s and 3 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS13335 (CLOUDFLARENET - Cloudflare, Inc., US): 18 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • ✓ Nameserver names under 3 TLDs #12
    Nameserver names use the TLDs .com, .net, .org.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

warn

18 of 18 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
gold.foundationdns.com 172.64.40.2NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.com 162.159.60.2NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.com 108.162.198.2NOERROR, 11 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.com 2606:4700:57::6ca2:c602NOERROR, 10 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.com 2a06:98c1:56::ac40:2802NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.com 2803:f800:52::a29f:3c02NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.net 162.159.60.32NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.net 172.64.40.32NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.net 108.162.198.32NOERROR, 10 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.net 2803:f800:52::a29f:3c20NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.net 2606:4700:57::6ca2:c620NOERROR, 11 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.net 2a06:98c1:56::ac40:2820NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.org 162.159.60.62NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.org 108.162.198.62NOERROR, 10 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.org 172.64.40.62NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.org 2a06:98c1:56::ac40:283eNOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.org 2803:f800:52::a29f:3c3eNOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.org 2606:4700:57::6ca2:c63eNOERROR, 10 ms, authoritativenoyes / yesrefused2026.10.0

Checks

  • ✓ All respond #14
    All 18 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: gold.foundationdns.com: "2026.10.0"; gold.foundationdns.net: "2026.10.0"; gold.foundationdns.org: "2026.10.0". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2416710867 · primary gold.foundationdns.com

Found

Primary (MNAME)
gold.foundationdns.com
Contact (RNAME)
dns.cloudflare.com
Serial
2416710867
Refresh / retry
10000 s / 2400 s
Expire
604800 s
Negative TTL
1800 s

Serial per nameserver

NameserverSerial
gold.foundationdns.com (172.64.40.2)2416710867
gold.foundationdns.com (162.159.60.2)2416710867
gold.foundationdns.com (108.162.198.2)2416710867
gold.foundationdns.com (2606:4700:57::6ca2:c602)2416710867
gold.foundationdns.com (2a06:98c1:56::ac40:2802)2416710867
gold.foundationdns.com (2803:f800:52::a29f:3c02)2416710867
gold.foundationdns.net (162.159.60.32)2416710867
gold.foundationdns.net (172.64.40.32)2416710867
gold.foundationdns.net (108.162.198.32)2416710867
gold.foundationdns.net (2803:f800:52::a29f:3c20)2416710867
gold.foundationdns.net (2606:4700:57::6ca2:c620)2416710867
gold.foundationdns.net (2a06:98c1:56::ac40:2820)2416710867
gold.foundationdns.org (162.159.60.62)2416710867
gold.foundationdns.org (108.162.198.62)2416710867
gold.foundationdns.org (172.64.40.62)2416710867
gold.foundationdns.org (2a06:98c1:56::ac40:283e)2416710867
gold.foundationdns.org (2803:f800:52::a29f:3c3e)2416710867
gold.foundationdns.org (2606:4700:57::6ca2:c63e)2416710867

Checks

  • ✓ Serial 2416710867 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 2h46m40s, retry 40m, expire 7d, negative TTL 30m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver gold.foundationdns.com is one of the listed nameservers.
  • ✓ Contact dns@cloudflare.com #25
    The SOA RNAME dns.cloudflare.com means dns@cloudflare.com.
  • ✓ Timestamp serial #26
    The serial 2416710867 is a Unix timestamp (2046-08-01 04:34 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

51 records at the apex

Found

Read from
172.64.40.2:53
TypeValueTTL
SOAgold.foundationdns.com. dns.cloudflare.com. 2416710867 10000 2400 604800 18001800
NSgold.foundationdns.org.86400
NSgold.foundationdns.com.86400
NSgold.foundationdns.net.86400
A104.18.36.123300
A172.64.151.133300
AAAA2606:4700:440a::ac40:9785300
AAAA2a06:98c1:310a::6812:247b300
MX10 mxa-0059cf01.gslb.pphosted.com.900
MX10 mxb-0059cf01.gslb.pphosted.com.900
MX20 mx0a-0059cf01.pphosted.com.900
MX20 mx0b-0059cf01.pphosted.com.900
TXT"2Rp+bOgh6EDSmngRydT51ju/TqaXX6rcKlkJLONM0ah1uaXWAj1Tp+olpKOWtSeOBZdqigZ9D2xBK5y6EYMPrg=="300
TXT"MS=ms50447523"300
TXT"SFMC-ziOujRTLtNUPfrEtPJl18imFVPi2DaqRhGoP4-Lm"300
TXT"WB=T6EgERD2L0ugJXg62WQy7Q"300
TXT"WB=dKHNE70rPU2YB8gb+nbG/A"300
TXT"ZOOM_verify_L1V5XzQF30inBYTO8zUfA3"300
TXT"ZOOM_verify_yESIlOikR2WzDhrxMrpZ5g"300
TXT"_globalsign-domain-verification=fcf9e7305908995af3f5c2bab8719679"300
TXT"adobe-idp-site-verification=eb01cc2022e2f7c166495faa83193bdea113af9146bea3fdb273065edac3cca7"300
TXT"adobe-idp-site-verification=fd9b0693-534a-4265-abe3-f6289668cbf2"300
TXT"adobe-sign-verification=a23fb287d5328e986f5d967c703adacf"300
TXT"atlassian-domain-verification=srl2cvrxmrDiLdUrDjPwDedty1LyjLhY0YJaaWXrSRlKWoQKrxGeanEmbfrdFG2I"300
TXT"box-domain-verification=59b71917baddbc8b8426986cd928d599567152523300bc6e87cddc9706304546"300
TXT"ca3-86b6041484f94f2a86fb753ef43dd6ce"300
TXT"canva-site-verification=OUfMBrfJf0A979tEqVzP_Q"300
TXT"cisco-ci-domain-verification=58d02fedeb6fce117e729c518efa313c3b21354778ed5531ab6f4c6bf5ec9aa8"300
TXT"dell-technologies-domain-verification=vml.com_773971fa-59e9-4b1a-8cfe-9710fea2ee62_1761302931"300
TXT"docker-verification=b3fb3585-c879-4e41-83f2-102b4f34b6eb"300
TXT"extensis-domain-verification=afed3680-c7f7-4617-bc84-157d0be6d2ed"300
TXT"figma-domain-verification=d2c8162ff211d2d2760f3c52ff2fabb104158ff2a9aecedba86c04ce7637efef-1746400248"300
TXT"figma-domain-verification=dfabe2974c77e9d85a3dc955b2dfc3bc7f0450b0999d4ff55066c160f1ffc603-1779975767"300
TXT"globalsign-domain-verification=fcf9e7305908995af3f5c2bab8719679"300
TXT"google-site-verification=KQ2sWBOAIpU9TctM_bZQryfj_w5-qRlkt6uMTnwOKDo"300
TXT"google-site-verification=fjmo1ps4udU2LL9aMgYqd3T7QhkdWYgfwMDoE3czCWs"300
TXT"google-site-verification=iJjH3VgQ6J6Uwy-W2HgyR_eWVG0AGF3ruzlMy8VUfEM"300
TXT"google-site-verification=pc20Km031EaoUJzQ7sqBkf2IoysLShaYjDhlS0yEdv4"300
TXT"hj-ownership=xnFhzfzzq79xLdfu8ttn"300
TXT"knowbe4-site-verification=4b957d2e85c916514b64ba3d155d3d26"300
TXT"miro-verification=1c6eba2a1332c26f33bb7294308e77384f194390"300
TXT"monday-com-verification=62J4mjqEO-wG4GrsiRzI4dHHWVUZfF_wfqPHyWIRJ4U"300
TXT"monday-com-verification=sK1AAIbOWl6anl5Q5EMpDBCJsAuEaJFowVR3xKUmq0I"300
TXT"onetrust-domain-verification=61244df0f74145bd85e808cd692a32e0"300
TXT"smartsheet-site-validation=kMZGYgmtsK0yPRyEO--3V29nUQRt7HW2"300
TXT"smartsheet-site-validation=zWIpt_DZqVX-yYAlyYKpdCktZ1m5BMCD"300
TXT"v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all"300
TXT"vmlyrredirect.azurewebsites.net"300
TXT"wiz-domain-verification=5704f1c2aca36bffc39a874c8c37a56918f1f5a3bfcbeb44b4cf0911c42c1d1d"300
TXT"wiz-domain-verification=98ab4b0b3a10fe5d4a64b669fb613921f629f9c0c8ab69ec9731a41351805437"300
TXT"wrike-verification=MzEyODg4Mzo5OWRmMmZkY2IwOTdjZDdjNGIxYTAyMzZmYzRiMGNiNDlhZmRlMTQ4ZmQ2MTU4YzU2YTM1ODI4ZjM2ZDBhMTYx"300

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, AAAA 5m, MX 15m, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35