webthing.com

Checked 22 October 2026, 11:25 UTC · via 8.8.8.8
!Passed with warnings
25 passed 2 warnings 0 failed 4 info

Registration

info

.com generic · Name SRS AB · expires 2027-04-11

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
Name SRS AB
Registered
10 April 1997
Last changed
4 April 2026
Expires
11 April 2027
Status
active
Registry nameservers
freedns1.registrar-servers.com, freedns2.registrar-servers.com, freedns3.registrar-servers.com, freedns4.registrar-servers.com, freedns5.registrar-servers.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-04-11 #3
    The registration is valid until 2027-04-11 (170 days).
  • i
    No transfer lock
    The domain has no transfer lock (status: active). A registrar lock protects against unauthorized transfers.
    #4
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

freedns1.registrar-servers.com, freedns2.registrar-servers.com, freedns3.registrar-servers.com, freedns4.registrar-servers.com, freedns5.registrar-servers.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
freedns1.registrar-servers.com, freedns2.registrar-servers.com, freedns3.registrar-servers.com, freedns4.registrar-servers.com, freedns5.registrar-servers.com
NS in the zone
freedns1.registrar-servers.com, freedns2.registrar-servers.com, freedns3.registrar-servers.com, freedns4.registrar-servers.com, freedns5.registrar-servers.com
NameserverAddressesNetwork (AS)Glue
freedns1.registrar-servers.com45.58.122.83 2605:9880:300:1400:101:1650:5e2:54AS23470 RELIABLESITE - ReliableSite.Net LLC, US AS23470 RELIABLESITE - ReliableSite.Net LLC, US2605:9880:300:1400:101:1650:5e2:54 45.58.122.83
freedns2.registrar-servers.com199.119.202.76 2604:6600:0:1b::2AS40676 AS40676 - Psychz Networks, US AS40676 AS40676 - Psychz Networks, US199.119.202.75 2604:6600:0:1b::2
freedns3.registrar-servers.com195.154.94.174 2001:bc8:6006:4000:8218:44ff:feef:d720AS12876 AS12876 - Scaleway SAS, FR AS12876 AS12876 - Scaleway SAS, FR195.154.94.174 2001:bc8:6006:4000:8218:44ff:feef:d720
freedns4.registrar-servers.com95.141.37.127 2a02:29e0:1:103:103::1AS49367 ASSEFLOW - Seflow s.r.l., IT AS49367 ASSEFLOW - Seflow s.r.l., IT2a02:29e0:1:103:103::1 95.141.37.127
freedns5.registrar-servers.com54.36.109.15 2001:41d0:700:120f::1AS16276 OVH - OVH SAS, FR AS16276 OVH - OVH SAS, FR2001:41d0:700:120f::1 54.36.109.15

Checks

  • ✓ 5 nameservers #6
    Delegated to freedns1.registrar-servers.com, freedns2.registrar-servers.com, freedns3.registrar-servers.com, freedns4.registrar-servers.com, freedns5.registrar-servers.com.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • !
    Glue differs from the zone
    The addresses at the parent (glue) differ from the addresses in the zone: freedns2.registrar-servers.com (glue 199.119.202.75, 2604:6600:0:1b::2, zone 199.119.202.76, 2604:6600:0:1b::2). Update the glue at your registrar.
    #8
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 5 IPv4 /24s and 5 IPv6 /48s.
  • ✓ 5 autonomous systems #11
    The nameservers are spread over: AS12876 (AS12876 - Scaleway SAS, FR): 2 addresses; AS16276 (OVH - OVH SAS, FR): 2 addresses; AS23470 (RELIABLESITE - ReliableSite.Net LLC, US): 2 addresses; AS40676 (AS40676 - Psychz Networks, US): 2 addresses; AS49367 (ASSEFLOW - Seflow s.r.l., IT): 2 addresses.
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

pass

10 of 10 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
freedns1.registrar-servers.com 45.58.122.83NOERROR, 88 ms, authoritativenoyes / yesrefused-
freedns1.registrar-servers.com 2605:9880:300:1400:101:1650:5e2:54NOERROR, 92 ms, authoritativenoyes / yesrefused-
freedns2.registrar-servers.com 199.119.202.76NOERROR, 142 ms, authoritativenoyes / yesrefused-
freedns2.registrar-servers.com 2604:6600:0:1b::2NOERROR, 138 ms, authoritativenoyes / yesrefused-
freedns3.registrar-servers.com 195.154.94.174NOERROR, 13 ms, authoritativenoyes / yesrefused-
freedns3.registrar-servers.com 2001:bc8:6006:4000:8218:44ff:feef:d720NOERROR, 19 ms, authoritativenoyes / yesrefused-
freedns4.registrar-servers.com 95.141.37.127NOERROR, 21 ms, authoritativenoyes / yesrefused-
freedns4.registrar-servers.com 2a02:29e0:1:103:103::1NOERROR, 20 ms, authoritativenoyes / yesrefused-
freedns5.registrar-servers.com 54.36.109.15NOERROR, 5 ms, authoritativenoyes / yesrefused-
freedns5.registrar-servers.com 2001:41d0:700:120f::1NOERROR, 5 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 10 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 1580224509 · primary freedns1.registrar-servers.com

Found

Primary (MNAME)
freedns1.registrar-servers.com
Contact (RNAME)
hostmaster.registrar-servers.com
Serial
1580224509
Refresh / retry
43200 s / 3600 s
Expire
604800 s
Negative TTL
3601 s

Serial per nameserver

NameserverSerial
freedns1.registrar-servers.com (45.58.122.83)1580224509
freedns1.registrar-servers.com (2605:9880:300:1400:101:1650:5e2:54)1580224509
freedns2.registrar-servers.com (199.119.202.76)1580224509
freedns2.registrar-servers.com (2604:6600:0:1b::2)1580224509
freedns3.registrar-servers.com (195.154.94.174)1580224509
freedns3.registrar-servers.com (2001:bc8:6006:4000:8218:44ff:feef:d720)1580224509
freedns4.registrar-servers.com (95.141.37.127)1580224509
freedns4.registrar-servers.com (2a02:29e0:1:103:103::1)1580224509
freedns5.registrar-servers.com (54.36.109.15)1580224509
freedns5.registrar-servers.com (2001:41d0:700:120f::1)1580224509

Checks

  • ✓ Serial 1580224509 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 12h, retry 1h, expire 7d, negative TTL 1h0m1s.
  • ✓ Primary is a public nameserver #24
    The primary nameserver freedns1.registrar-servers.com is one of the listed nameservers.
  • ✓ Contact hostmaster@registrar-servers.com #25
    The SOA RNAME hostmaster.registrar-servers.com means hostmaster@registrar-servers.com.
  • ✓ Timestamp serial #26
    The serial 1580224509 is a Unix timestamp (2020-01-28 15:15 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

8 records at the apex

Found

Read from
45.58.122.83:53
TypeValueTTL
SOAfreedns1.registrar-servers.com. hostmaster.registrar-servers.com. 1580224509 43200 3600 604800 36013601
NSfreedns3.registrar-servers.com.1800
NSfreedns5.registrar-servers.com.1800
NSfreedns2.registrar-servers.com.1800
NSfreedns4.registrar-servers.com.1800
NSfreedns1.registrar-servers.com.1800
A209.20.83.521799
MX10 mail.webthing.com.1800

Checks

  • ✓ TTLs within range #32
    TTLs: A 29m59s, MX 30m, NS 30m. The NS TTL at the parent is 2d and in the zone 30m; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35