wise.com

Checked 22 October 2026, 11:31 UTC · via 8.8.8.8
!Passed with warnings
24 passed 2 warnings 0 failed 5 info

Registration

info

.com generic · 101domain GRS Limited · expires 2028-03-08

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
101domain GRS Limited
Registered
7 March 1994
Last changed
30 March 2021
Expires
8 March 2028
Status
client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
hope.ns.cloudflare.com, sean.ns.cloudflare.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2028-03-08 #3
    The registration is valid until 2028-03-08 (502 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

hope.ns.cloudflare.com, sean.ns.cloudflare.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
hope.ns.cloudflare.com, sean.ns.cloudflare.com
NS in the zone
hope.ns.cloudflare.com, sean.ns.cloudflare.com
NameserverAddressesNetwork (AS)Glue
hope.ns.cloudflare.com173.245.58.163 108.162.192.163 172.64.32.163 2a06:98c1:50::ac40:20a3 2606:4700:50::adf5:3aa3 2803:f800:50::6ca2:c0a3AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US108.162.192.163 172.64.32.163 173.245.58.163 2606:4700:50::adf5:3aa3 2803:f800:50::6ca2:c0a3 2a06:98c1:50::ac40:20a3
sean.ns.cloudflare.com173.245.59.231 108.162.193.231 172.64.33.231 2803:f800:50::6ca2:c1e7 2a06:98c1:50::ac40:21e7 2606:4700:58::adf5:3be7AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US108.162.193.231 172.64.33.231 173.245.59.231 2606:4700:58::adf5:3be7 2803:f800:50::6ca2:c1e7 2a06:98c1:50::ac40:21e7

Checks

  • i
    2 nameservers
    Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: hope.ns.cloudflare.com, sean.ns.cloudflare.com.
    #6
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 6 IPv4 /24s and 4 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS13335 (CLOUDFLARENET - Cloudflare, Inc., US): 12 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

warn

12 of 12 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
hope.ns.cloudflare.com 173.245.58.163NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
hope.ns.cloudflare.com 108.162.192.163NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
hope.ns.cloudflare.com 172.64.32.163NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
hope.ns.cloudflare.com 2a06:98c1:50::ac40:20a3NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
hope.ns.cloudflare.com 2606:4700:50::adf5:3aa3NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
hope.ns.cloudflare.com 2803:f800:50::6ca2:c0a3NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
sean.ns.cloudflare.com 173.245.59.231NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
sean.ns.cloudflare.com 108.162.193.231NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
sean.ns.cloudflare.com 172.64.33.231NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
sean.ns.cloudflare.com 2803:f800:50::6ca2:c1e7NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
sean.ns.cloudflare.com 2a06:98c1:50::ac40:21e7NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
sean.ns.cloudflare.com 2606:4700:58::adf5:3be7NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2

Checks

  • ✓ All respond #14
    All 12 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: hope.ns.cloudflare.com: "2026.10.2"; sean.ns.cloudflare.com: "2026.10.2". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2418085081 · primary hope.ns.cloudflare.com

Found

Primary (MNAME)
hope.ns.cloudflare.com
Contact (RNAME)
dns.cloudflare.com
Serial
2418085081
Refresh / retry
10000 s / 2400 s
Expire
604800 s
Negative TTL
1800 s

Serial per nameserver

NameserverSerial
hope.ns.cloudflare.com (173.245.58.163)2418085081
hope.ns.cloudflare.com (108.162.192.163)2418085081
hope.ns.cloudflare.com (172.64.32.163)2418085081
hope.ns.cloudflare.com (2a06:98c1:50::ac40:20a3)2418085081
hope.ns.cloudflare.com (2606:4700:50::adf5:3aa3)2418085081
hope.ns.cloudflare.com (2803:f800:50::6ca2:c0a3)2418085081
sean.ns.cloudflare.com (173.245.59.231)2418085081
sean.ns.cloudflare.com (108.162.193.231)2418085081
sean.ns.cloudflare.com (172.64.33.231)2418085081
sean.ns.cloudflare.com (2803:f800:50::6ca2:c1e7)2418085081
sean.ns.cloudflare.com (2a06:98c1:50::ac40:21e7)2418085081
sean.ns.cloudflare.com (2606:4700:58::adf5:3be7)2418085081

Checks

  • ✓ Serial 2418085081 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 2h46m40s, retry 40m, expire 7d, negative TTL 30m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver hope.ns.cloudflare.com is one of the listed nameservers.
  • ✓ Contact dns@cloudflare.com #25
    The SOA RNAME dns.cloudflare.com means dns@cloudflare.com.
  • ✓ Timestamp serial #26
    The serial 2418085081 is a Unix timestamp (2046-08-17 02:18 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

55 records at the apex

Found

Read from
173.245.58.163:53
TypeValueTTL
SOAhope.ns.cloudflare.com. dns.cloudflare.com. 2418085081 10000 2400 604800 18001800
NShope.ns.cloudflare.com.86400
NSsean.ns.cloudflare.com.86400
A104.18.39.116300
A172.64.148.140300
MX1 aspmx.l.google.com.300
MX10 aspmx2.googlemail.com.300
MX10 aspmx3.googlemail.com.300
MX5 alt1.aspmx.l.google.com.300
MX5 alt2.aspmx.l.google.com.300
TXT"-s1BbtIYreC4lq4dgfRT5GiU7a1dedI"300
TXT"35d1fe29-18b5-4a82-9b9b-be0cf038a9fc"300
TXT"4b6e772e-2b35-4013-ada0-5deafb388db0"300
TXT"504C2B4451"300
TXT"CKO=cli_fztkqxrqrzzedau6rmhytbnvxy"300
TXT"MS=ms87976825"300
TXT"TAILSCALE-MWFuimZ6EgLLQsEp9Ce4"300
TXT"ZOOM_verify_tdC0oyKB1A8JIXpFnfvqiW"300
TXT"adobe-idp-site-verification=26cc6fb9bff4354c104fe5703b8f8f20af7423753f4cd0fc8e88dd67ea5090a8"300
TXT"airtable-verification=43b4da625c19f94364ea602d71c12874"300
TXT"amazonses:ZbyYbBrEgq1b5BQhFZyzugyScAWwParCk0FNOs4c1C4="300
TXT"apple-domain-verification=EWgLjCOD6s5vRQpA"300
TXT"apple-domain-verification=EoxFyqztnsAhEI_OFWCMIlhf-CieE0yOnIlGtTUYXrs"300
TXT"atlassian-domain-verification=+2Nij6zJOZt/wzpQ5s7lKmLYhD820qTcJK9wPSNma1QwebXwOUuN6A4imbi2udtv"300
TXT"canva-site-verification=-BHC7eXPpFBe-lJI1WCr3Q"300
TXT"coast-domain-verification-14vgyj=ETq04ZN61ix179qCFQ1k5Xm2K"300
TXT"docusign=f8aba945-9e3c-4bf8-8172-8221f8e40893"300
TXT"dtm-domain-verification=lU6YSxN8y3Sq-IJ7sXRIvpCCFiIygeGRYR1JzopAT00"300
TXT"facebook-domain-verification=0dgkqibai68mvjkgbeafcplopqobhi"300
TXT"google-site-verification=8IYPoYLbR1M_8AUF-AYwHlmkq4glsYIcIrPDAFMe2FI"300
TXT"google-site-verification=BZRnlHMfEx2ui0Nz0qLqj97ffb57s4dPqIAunP6_G2o"300
TXT"google-site-verification=TQkL0o9TcjZFYEZeEgcYSfVteQHm9QbhXnrh6T4HQJ0"300
TXT"google-site-verification=UpYJNM7_HuxnDUKPlGHSw7-5X5dkFFR2a5IzyP117-k"300
TXT"google-site-verification=XWsmJWKMs8gYWrc9sc_KdeAl0OrRkDHPLljhjfGjoYI"300
TXT"hj-ownership=qEgZz25Gsd"300
TXT"hubspot-domain-verification=NDEwMWExZTUtYWY0NC00YzdkLWIxN2EtODRhZDc3NmVjNjYw"300
TXT"jumio-up-idp-domain-verification=588a1bde-aa5b-4cb2-8e11-61b7ad8208b8"300
TXT"lucid-verification=6y5frg9862a61at0vcgs"300
TXT"mentimeter-956b3a98-7613-4703-980c-dcf475777f1c"300
TXT"miro-verification=42df5b4be7dfaaba3388761226de9f96d3fb7ecf"300
TXT"mixpanel-domain-verify=cd262321-20a1-40a6-9148-c06050396ae7"300
TXT"monday-com-verification=jSX0p2eyNCM9dpKhV47GAq_9-ARzsYd6Fwubqzo-58w"300
TXT"mongodb-site-verification=totL7uRTcG47pGWx15UM8VPtkBRJTKIW"300
TXT"mzy5b7qr8t79dxq0jnwm4b05gylv0rcb"300
TXT"onetrust-domain-verification=c2a93902121749aeaf62878141c01855"300
TXT"openai-domain-verification=dv-gIvdfwZiPw2toJZZgQP3mEhp"300
TXT"pinterest-site-verification=8f041ebbad2f75c42efd6b45f32c44aa"300
TXT"postman-domain-verification=5f654029cae82a7d6f543f1fe8f3427f1737bc17e4fd63ab3350b23c2eeee913be17a23c32d8384fd863010454cb6c3bd8e47a479e53036fbc4453e340f509ed"300
TXT"slack-domain-verification=2AwdExVveDlH69b6JiYv9YtOFmihbhR6PJUGxe7h"300
TXT"uber-domain-verification=30e05ddc-a14e-4a75-9a2f-776e4923c55d"300
TXT"uber-domain-verification=6d246047-fc8d-408c-853a-e98fe8b98dd1"300
TXT"v=spf1 include:_u.wise.com._spf.smart.ondmarc.com ~all"300
TXT"verification_token=hBrdxWusT4zbTXDQW2pomYmOV"300
TXT"work-accounts-domain-verification=UaaXxuTaKFvymmnBG0o4EiJ7Asjtuh"300
TXT"yandex-verification: e7e5f414e82d5677"300

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, MX 5m, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35