wbd.com

Checked 22 October 2026, 11:24 UTC · via 8.8.8.8
!Passed with warnings
26 passed 2 warnings 0 failed 3 info

Registration

info

.com generic · MarkMonitor Inc. · expires 2028-06-03

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
MarkMonitor Inc.
Registered
4 June 1998
Last changed
8 July 2025
Expires
3 June 2028
Status
client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
ns-1210.awsdns-23.org, ns-2020.awsdns-60.co.uk, ns-29.awsdns-03.com, ns-826.awsdns-39.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2028-06-03 #3
    The registration is valid until 2028-06-03 (589 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

ns-1210.awsdns-23.org, ns-2020.awsdns-60.co.uk, ns-29.awsdns-03.com, ns-826.awsdns-39.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns-1210.awsdns-23.org, ns-2020.awsdns-60.co.uk, ns-29.awsdns-03.com, ns-826.awsdns-39.net
NS in the zone
ns-1210.awsdns-23.org, ns-2020.awsdns-60.co.uk, ns-29.awsdns-03.com, ns-826.awsdns-39.net
NameserverAddressesNetwork (AS)Glue
ns-1210.awsdns-23.org205.251.196.186 2600:9000:5304:ba00::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-
ns-2020.awsdns-60.co.uk205.251.199.228 2600:9000:5307:e400::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-
ns-29.awsdns-03.com205.251.192.29 2600:9000:5300:1d00::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US205.251.192.29 2600:9000:5300:1d00::1
ns-826.awsdns-39.net205.251.195.58 2600:9000:5303:3a00::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-

Checks

  • ✓ 4 nameservers #6
    Delegated to ns-1210.awsdns-23.org, ns-2020.awsdns-60.co.uk, ns-29.awsdns-03.com, ns-826.awsdns-39.net.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 4 IPv4 /24s and 4 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS16509 (AMAZON-02 - Amazon.com, Inc., US): 8 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • ✓ Nameserver names under 4 TLDs #12
    Nameserver names use the TLDs .com, .net, .org, .uk.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

pass

8 of 8 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns-1210.awsdns-23.org 205.251.196.186NOERROR, 4 ms, authoritativenoyes / yesrefused-
ns-1210.awsdns-23.org 2600:9000:5304:ba00::1NOERROR, 4 ms, authoritativenoyes / yesrefused-
ns-2020.awsdns-60.co.uk 205.251.199.228NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-2020.awsdns-60.co.uk 2600:9000:5307:e400::1NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-29.awsdns-03.com 205.251.192.29NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-29.awsdns-03.com 2600:9000:5300:1d00::1NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-826.awsdns-39.net 205.251.195.58NOERROR, 4 ms, authoritativenoyes / yesrefused-
ns-826.awsdns-39.net 2600:9000:5303:3a00::1NOERROR, 4 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 8 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 1 · primary ns-826.awsdns-39.net

Found

Primary (MNAME)
ns-826.awsdns-39.net
Contact (RNAME)
awsdns-hostmaster.amazon.com
Serial
1
Refresh / retry
7200 s / 900 s
Expire
1209600 s
Negative TTL
86400 s

Serial per nameserver

NameserverSerial
ns-1210.awsdns-23.org (205.251.196.186)1
ns-1210.awsdns-23.org (2600:9000:5304:ba00::1)1
ns-2020.awsdns-60.co.uk (205.251.199.228)1
ns-2020.awsdns-60.co.uk (2600:9000:5307:e400::1)1
ns-29.awsdns-03.com (205.251.192.29)1
ns-29.awsdns-03.com (2600:9000:5300:1d00::1)1
ns-826.awsdns-39.net (205.251.195.58)1
ns-826.awsdns-39.net (2600:9000:5303:3a00::1)1

Checks

  • ✓ Serial 1 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 2h, retry 15m, expire 14d, negative TTL 1d.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns-826.awsdns-39.net is one of the listed nameservers.
  • ✓ Contact awsdns-hostmaster@amazon.com #25
    The SOA RNAME awsdns-hostmaster.amazon.com means awsdns-hostmaster@amazon.com.
  • ✓ Counter serial #26
    The serial 1 is a plain counter.

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

warn

86 records at the apex

Found

Read from
205.251.196.186:53
TypeValueTTL
SOAns-826.awsdns-39.net. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400900
NSns-1210.awsdns-23.org.172800
NSns-2020.awsdns-60.co.uk.172800
NSns-29.awsdns-03.com.172800
NSns-826.awsdns-39.net.172800
A3.232.53.9860
A52.72.59.10160
MX10 wbd-com.mail.protection.outlook.com.300
TXT"00D26000000HuIs=1TBUD00000003HI"300
TXT"00D5e000002HS5V=1TBPf00000003UA"300
TXT"00DRR00000Nbz7h=1TBRR00000001NV"300
TXT"0ed1fe018a1ea81e753d724443ae81f1a2854d0c82"300
TXT"253f7b5d921338af34da817c00f42753"300
TXT"MS=ms59367971"300
TXT"MS=ms73701267"300
TXT"ZOOM_verify_KkT7IDaFhV4MPJdg6mpwQN"300
TXT"_globalsign-domain-verification=Pna4BjNHUogeGGpj39NjCTb5sPeIKiWhj4vIRKP77y"300
TXT"a47e551d-a6be-4f1a-8b70-0c6dd29d4492"300
TXT"adobe-idp-site-verification=003cd0c432030a9a5a9308b23ecea4550c281bd93db131788aa03436a5e470bb"300
TXT"adobe-sign-verification=55a65e89d141717e30e740789b947d2f"300
TXT"airtable-verification=a25145d3eda40e20c06f53d3d8b4e4ce"300
TXT"anthropic-domain-verification-smznr4=l2zYSmxcVFRfXxEsqWFxe1Sms"300
TXT"apple-domain-verification=oHISBQgvEAXudBA0"300
TXT"atlassian-domain-verification=joqe6L8dNi+aisGbB1XHQa0pDc53V2l0GQQRUtLEcr2997x0+rtrAA5Zw+UgQw3u"300
TXT"atlassian-sending-domain-verification=202afff9-d665-4cfc-8578-8c6c8c3c6ce1"300
TXT"autodesk-domain-verification=KMWu_ZeQoPfHbCkKihEc"300
TXT"box-domain-verification=3fcde8dc7783ab649df9a9ce29e28729cc4ff182a6f06dad9cd88a885ab994b8"300
TXT"box-domain-verification=ce364e47095cee4d3a029ee7d9ad393b6e0b69ac6c48f1785c14e961d566a7fb"300
TXT"box-domain-verification=cf9273e86033878cb30e213dd8289d6670f066187252d26ba7cfc939041c40f7"300
TXT"box-domain-verification=da519c9809a27eaf0be7efc6c2332bb729f79a03b7c4107e05e71fa3f355068c"300
TXT"box-domain-verification=da9d8d478f8f49d48d7a8fca4b4239d03800e2de7f0abd630cc5529ead42f859"300
TXT"canva-site-verification=aEX193lqk0FeohHMN56IfA"300
TXT"cloudhealth=bcf1a16b-ef7b-46e7-9295-4ea16383a2a2"300
TXT"dell-technologies-domain-verification=wbd.com_1fdf340c-f50e-496c-a015-8dcf1019947c_1722009369"300
TXT"docker-verification=90c815b7-3924-4a12-953d-76bc72e17740"300
TXT"docusign=8810e19a-d267-4139-9275-c16d9463a480"300
TXT"dropbox-domain-verification=53vqwwamimjl"300
TXT"extensis-domain-verification=79d2b9bb-7b5f-4ae2-a930-373e740a7fc4"300
TXT"flexera-domain-verification-kygfmppalacuwkpu"300
TXT"flexera-domain-verification-nqetsdhsvvipewrw"300
TXT"globalsign-domain-verification=1576426D596DBCBA4E6245AFF64553EF"300
TXT"globalsign-domain-verification=3756DC1177BE1ED5DCD0DB930F4593D0"300
TXT"google-site-verification=7Qi2aE7fG6nkEPNrW5OvBJ6LXTqg40O8OhEa9JwQngc"300
TXT"google-site-verification=HmJiCKO7h3-mQNlak7wB9iZH6Ye_L8cse_9ZmQ3FmBg"300
TXT"google-site-verification=Ss9xeoFtMieOzWozIzUjrAmzEyXx61NUkwsJ0fWsXvU"300
TXT"google-site-verification=ZYdJclKowDfa-J2P6nZvyBXAnaGnX_xXch-wVm4qsWs"300
TXT"hpe-greenlake-domain-verification=465830776246765332592d517079684639535538765843465662714948356264"300
TXT"intersight=1b05dc517196ae21bb4c5ad9f35d2ba91d5a10ea975df5341b7330e4b0d09ede"300
TXT"jamf-site-verification=WgWxm_gyI1tkHZyG0Pktuw"300
TXT"k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDpTIRKxiJsdoVT3eZwo1d/NuqZcMAxYl9sGtWFLaJE9JPFd5/E4R3op22h+t8WGdOEgTUyN9GYttU74wbqv5FuqglD6GHQt8GdCihdHGcHAx9ntrNr5/CYFWAI0QXcB4MfzhElnVdWOOybUn4JNYSiVCa/bMKTVsm4l/fiwmCRWwIDAQAB"300
TXT"knowbe4-site-verification=f251065c5cdcb6b256997c84ddd2e7ea"300
TXT"lucid-verification=buX5hl#V8fUHRs%c"300
TXT"lucidlink-verification=V1WK8KHS7V79WDQ0RD46Q382EM"300
TXT"lucidlink-verification=V6C30SVC49XSP2VPNM21WGJ68R"300
TXT"lucidlink-verification=WVETECAHN0ST2G1QZ78P6F8AVM"300
TXT"masv=LGNgkKnQaDEFDIweKHXdnYnBgdDXnjyE"300
TXT"miro-verification=1e01f8da769be1241fceefd9abf2c317dcd68323"300
TXT"mongodb-site-verification=GAi2kpTvuN13SpJSYHMbOIpUVkTDToSR"300
TXT"mongodb-site-verification=MUmFNWFuPv8ho3BqdVgaUHP5dMm5Gl6A"300
TXT"mongodb-site-verification=Pb9Lk2t2f1ioZuqgcqgmIwqFI54tOln9"300
TXT"nathan.sloan@wbd.com"300
TXT"onx=009c1257-29e9-4d8d-aa4e-1ad1c079c051"300
TXT"onx=28916138-b710-42a8-a882-ec67e0eaa4b0"300
TXT"onx=348ba962-5ddc-4a34-a840-a05730bb01cd"300
TXT"onx=bd26a07c-5e3b-4af8-86f9-6a9bf1340eed"300
TXT"openai-domain-verification=dv-N7yusnSfCrWbpYYHnvjUGL3N"300
TXT"playbook-domain-verification=206ce778-7e72-45e6-8f1b-636445636c10"300
TXT"postman-domain-verification=2a61ed95b0b207ded275284e999cb3cf56fca4fda8812b4a8c13eeab3de1c67dbcc58a50d52d0ff5280a005daad2592aa7488636a10318ed0368a6e61c1ddccf"300
TXT"segment-site-verification=K9E7uhZauoAjdipF3szuTKIVhH7KKnJs"300
TXT"shopify-verification-code=I1PgmEa5YTRn8kvBYhM3MpSBhDII9V"300
TXT"smartsheet-site-validation=1lDoI1p2j6Lvk3XlXIK9SSXFjaRI_UJl"300
TXT"smartsheet-site-validation=dqjlSPARXQ6Zir3jkjJz5HpsqVoR8_wi"300
TXT"smartsheet-site-validation=ll3cG-GoPh9Lrcl8hUDRUoRLn4Wrsep9"300
TXT"stripe-verification=2E3647A3860F24550094A3660220B2D2E4C1CE6ADA80E5A80AB8C0886E32245B"300
TXT"stripe-verification=5705C1CB5F470095EFDA347C4BD7E59D82F408EF93277EC71895BAB61904FB9D"300
TXT"stripe-verification=6DBE864DB069BD66B1119A3E03E352DEC76B3157BA89C55252DEC55597285189"300
TXT"stripe-verification=6F3E06A583ADC4F9A11010E22BA9D37032A23D1E14B424EC372150E3AE10176F"300
TXT"stripe-verification=84DA531704F438FC639E937FC70844CA1D829CD9F2723E9AB7F0B04D90BD0DAB"300
TXT"stripe-verification=8869358DC49358383ABD9DE4A1317898A7975BB39BD820AA121A7BF238247C14"300
TXT"stripe-verification=b5de3121ae6026db6af650fa5abe9b8fc2af27dc960b11d90c7ff638d1213dfd"300
TXT"v=DMARC1; p=none;"300
TXT"v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all"300
TXT"ventrata-domain-verification-aehdfp=CdL88oH5GYwIRPG3sCnoZPBgB"300
TXT"wiz-domain-verification=f169b3087fa1100232f46d958e368d3fe5cf9fec6285c6a12b9d1693b7ca272f"300
TXT"workplace-domain-verification=0bJMCWYLaWF4jcpb3yRARG9373wNN4"300
TXT"wrike-verification=MjA3NDAxMDo2OWU0YWNhOTU4NTQzYjY3YzI3YmZkMGQ4MTU1ZGI4OTY2YjFjNDA4MjZkYzU4YmZjMzQ0YzAzOWIzOGRjOWY2"300

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: A (1m). Low TTLs are useful just before a planned change.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35