web.com

Checked 22 October 2026, 11:24 UTC · via 8.8.8.8
!Passed with warnings
24 passed 2 warnings 0 failed 5 info

Registration

info

.com generic · Register.com - Network Solutions, LLC · expires 2033-07-01

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
Register.com - Network Solutions, LLC
Registered
2 July 1996
Last changed
8 November 2024
Expires
1 July 2033
Status
client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
ian.ns.cloudflare.com, nia.ns.cloudflare.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2033-07-01 #3
    The registration is valid until 2033-07-01 (2443 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

ian.ns.cloudflare.com, nia.ns.cloudflare.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ian.ns.cloudflare.com, nia.ns.cloudflare.com
NS in the zone
ian.ns.cloudflare.com, nia.ns.cloudflare.com
NameserverAddressesNetwork (AS)Glue
ian.ns.cloudflare.com108.162.193.118 172.64.33.118 173.245.59.118 2606:4700:58::adf5:3b76 2803:f800:50::6ca2:c176 2a06:98c1:50::ac40:2176AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US108.162.193.118 172.64.33.118 173.245.59.118 2606:4700:58::adf5:3b76 2803:f800:50::6ca2:c176 2a06:98c1:50::ac40:2176
nia.ns.cloudflare.com172.64.32.210 108.162.192.210 173.245.58.210 2803:f800:50::6ca2:c0d2 2606:4700:50::adf5:3ad2 2a06:98c1:50::ac40:20d2AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US108.162.192.210 172.64.32.210 173.245.58.210 2606:4700:50::adf5:3ad2 2803:f800:50::6ca2:c0d2 2a06:98c1:50::ac40:20d2

Checks

  • i
    2 nameservers
    Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: ian.ns.cloudflare.com, nia.ns.cloudflare.com.
    #6
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 6 IPv4 /24s and 4 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS13335 (CLOUDFLARENET - Cloudflare, Inc., US): 12 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

warn

12 of 12 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ian.ns.cloudflare.com 108.162.193.118NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
ian.ns.cloudflare.com 172.64.33.118NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
ian.ns.cloudflare.com 173.245.59.118NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
ian.ns.cloudflare.com 2606:4700:58::adf5:3b76NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
ian.ns.cloudflare.com 2803:f800:50::6ca2:c176NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
ian.ns.cloudflare.com 2a06:98c1:50::ac40:2176NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
nia.ns.cloudflare.com 172.64.32.210NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
nia.ns.cloudflare.com 108.162.192.210NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
nia.ns.cloudflare.com 173.245.58.210NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
nia.ns.cloudflare.com 2803:f800:50::6ca2:c0d2NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
nia.ns.cloudflare.com 2606:4700:50::adf5:3ad2NOERROR, 16 ms, authoritativenoyes / yesrefused2026.10.2
nia.ns.cloudflare.com 2a06:98c1:50::ac40:20d2NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2

Checks

  • ✓ All respond #14
    All 12 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: ian.ns.cloudflare.com: "2026.10.2"; nia.ns.cloudflare.com: "2026.10.2". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2417695436 · primary ian.ns.cloudflare.com

Found

Primary (MNAME)
ian.ns.cloudflare.com
Contact (RNAME)
dns.cloudflare.com
Serial
2417695436
Refresh / retry
10000 s / 2400 s
Expire
604800 s
Negative TTL
1800 s

Serial per nameserver

NameserverSerial
ian.ns.cloudflare.com (108.162.193.118)2417695436
ian.ns.cloudflare.com (172.64.33.118)2417695436
ian.ns.cloudflare.com (173.245.59.118)2417695436
ian.ns.cloudflare.com (2606:4700:58::adf5:3b76)2417695436
ian.ns.cloudflare.com (2803:f800:50::6ca2:c176)2417695436
ian.ns.cloudflare.com (2a06:98c1:50::ac40:2176)2417695436
nia.ns.cloudflare.com (172.64.32.210)2417695436
nia.ns.cloudflare.com (108.162.192.210)2417695436
nia.ns.cloudflare.com (173.245.58.210)2417695436
nia.ns.cloudflare.com (2803:f800:50::6ca2:c0d2)2417695436
nia.ns.cloudflare.com (2606:4700:50::adf5:3ad2)2417695436
nia.ns.cloudflare.com (2a06:98c1:50::ac40:20d2)2417695436

Checks

  • ✓ Serial 2417695436 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 2h46m40s, retry 40m, expire 7d, negative TTL 30m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ian.ns.cloudflare.com is one of the listed nameservers.
  • ✓ Contact dns@cloudflare.com #25
    The SOA RNAME dns.cloudflare.com means dns@cloudflare.com.
  • ✓ Timestamp serial #26
    The serial 2417695436 is a Unix timestamp (2046-08-12 14:03 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

28 records at the apex

Found

Read from
108.162.193.118:53
TypeValueTTL
SOAian.ns.cloudflare.com. dns.cloudflare.com. 2417695436 10000 2400 604800 18001800
NSian.ns.cloudflare.com.86400
NSnia.ns.cloudflare.com.86400
A162.159.130.36300
A162.159.133.36300
MX0 web-com.mail.eo.outlook.com.3600
TXT"4lgg7ys12rc7q6yl42vhgqlm4rg5h6d9"300
TXT"MS=600DF9693921AF3A04CC76FF9942189182FF527F"300
TXT"MS=ms30410167"300
TXT"MS=ms50850440"300
TXT"MS=ms55571995"300
TXT"UeJOb8ocrhEuohPeeOn7SM9igoHjmr0i1ZDh0WBJ2QBI7FU2olKEbvGXrLI2GWPO6bYK7lbgq17YgmRHlhEIzA=="300
TXT"amazonses:WFFtvo347tC4zdYadN0md50t2EVwoA69Zm93VJOfqQw="300
TXT"atlassian-domain-verification=7/BeLl3ajDcwk0RtYA3m0KFXa/Kp13FMEL1n2d9Nx3fUYMaUjbjmEyQS6oQlvlZV"300
TXT"bugcrowd-verification=bc5588068f16b3101c360e1b8d8945f8"300
TXT"eurlMBTiwoAvhWZpd9udECVe8TFYeY+/SzBQasmQnQpWYE7JsAcS6ONfbz0onG67WTucHMulmC3qzlJ+eTffaA=="300
TXT"facebook-domain-verification=w8i3ixssp4jmyncl77l1lvcpfuxhfe"300
TXT"google-site-verification=-g1p_lQPy9MkhtZnHV2bAXid6nHzzAr40uSmjtXppVA"300
TXT"google-site-verification=4jKqi9Db06UhL1aqXh1SV7vYCYvQYcgaYVzSzf05zLM"300
TXT"google-site-verification=TjUzlBirCb5TgLU2w1wCPevP4EJnJb2x4ZYU_T5kj9Q"300
TXT"google-site-verification=_TEXMAm-uZpkJjVhtmmIqanY-9jQBotyl-_Pyge8NsE"300
TXT"google-site-verification=lMWH7kTpIgKDGMTPiD2Z2e86Gp9KopM55BiQkdXaFAA"300
TXT"mandrill_verify.Yjc2fGOjBPp7zEjLzhjDRw"300
TXT"postman-domain-verification=cb155f2cb7f78cdf8138461ce20fb39db670d68a3f854943b48cd24598f10db2366a792e4cadda84e091f107de5629f0e11d7b1cc44f11ebd8cad67859db2452"300
TXT"smartsheet-site-validation=9nFkPPAqZhtpeQeNHrjJ-NmsliXYXFYI"300
TXT"status-page-domain-verification=dzsrx1fskzh7"300
TXT"v=spf1 ip4:209.17.115.103 ip4:209.17.115.104 ip4:209.17.115.105 ip4:72.22.75.0/24 ip4:66.235.215.0/24 include:spf.protection.outlook.com include:spf1.web.com include:spf2.web.com include:mktomail.com include:u6631589.wl090.sendgrid.net include:spf.website" "welcome.com include:notifications._spf.ds.network -all"300
TXT"zoom-domain-verification=ZOOM_verify_83f39d632c77433bae5340d35db7b70c"300

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, MX 1h, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35