zagat.com

Checked 22 October 2026, 11:42 UTC · via 8.8.8.8
!Passed with warnings
26 passed 2 warnings 0 failed 3 info

Registration

info

.com generic · MarkMonitor Inc. · expires 2028-11-02

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
MarkMonitor Inc.
Registered
3 November 1997
Last changed
23 February 2026
Expires
2 November 2028
Status
client delete prohibited, client transfer prohibited, client update prohibited
Registry nameservers
ns0037.secondary.cloudflare.com, ns0246.secondary.cloudflare.com, ns05.jpmorganchase.com, ns06.jpmorganchase.com, ns1.jpmorganchase.com, ns2.jpmorganchase.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2028-11-02 #3
    The registration is valid until 2028-11-02 (741 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited, client update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

ns0037.secondary.cloudflare.com, ns0246.secondary.cloudflare.com, ns05.jpmorganchase.com, ns06.jpmorganchase.com, ns1.jpmorganchase.com, ns2.jpmorganchase.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns0037.secondary.cloudflare.com, ns0246.secondary.cloudflare.com, ns05.jpmorganchase.com, ns06.jpmorganchase.com, ns1.jpmorganchase.com, ns2.jpmorganchase.com
NS in the zone
ns0037.secondary.cloudflare.com, ns0246.secondary.cloudflare.com, ns05.jpmorganchase.com, ns06.jpmorganchase.com, ns1.jpmorganchase.com, ns2.jpmorganchase.com
NameserverAddressesNetwork (AS)Glue
ns0037.secondary.cloudflare.com162.159.32.38 2606:4700:51::a29f:2026AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US162.159.32.38 2606:4700:51::a29f:2026
ns0246.secondary.cloudflare.com162.159.33.121 2606:4700:59::a29f:2179AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US162.159.33.121 2606:4700:59::a29f:2179
ns05.jpmorganchase.com146.143.195.130AS3486 JPMORGAN-AS3486 - JPMorgan Chase & Co., US146.143.195.130
ns06.jpmorganchase.com146.143.131.130AS3486 JPMORGAN-AS3486 - JPMorgan Chase & Co., US146.143.131.130
ns1.jpmorganchase.com146.143.67.130AS3486 JPMORGAN-AS3486 - JPMorgan Chase & Co., US146.143.67.130
ns2.jpmorganchase.com146.143.3.130AS3486 JPMORGAN-AS3486 - JPMorgan Chase & Co., US146.143.3.130

Checks

  • ✓ 6 nameservers #6
    Delegated to ns0037.secondary.cloudflare.com, ns0246.secondary.cloudflare.com, ns05.jpmorganchase.com, ns06.jpmorganchase.com, ns1.jpmorganchase.com, ns2.jpmorganchase.com.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 6 IPv4 /24s and 2 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS13335 (CLOUDFLARENET - Cloudflare, Inc., US): 4 addresses; AS3486 (JPMORGAN-AS3486 - JPMorgan Chase & Co., US): 4 addresses.
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • i
    Partly IPv6
    These nameservers have no IPv6 address: ns05.jpmorganchase.com, ns06.jpmorganchase.com, ns1.jpmorganchase.com, ns2.jpmorganchase.com.
    #13

Nameservers

warn

8 of 8 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns0037.secondary.cloudflare.com 162.159.32.38NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
ns0037.secondary.cloudflare.com 2606:4700:51::a29f:2026NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
ns0246.secondary.cloudflare.com 162.159.33.121NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
ns0246.secondary.cloudflare.com 2606:4700:59::a29f:2179NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
ns05.jpmorganchase.com 146.143.195.130NOERROR, 95 ms, authoritativenoyes / yesrefused-
ns06.jpmorganchase.com 146.143.131.130NOERROR, 98 ms, authoritativenoyes / yesrefused-
ns1.jpmorganchase.com 146.143.67.130NOERROR, 133 ms, authoritativenoyes / yesrefused-
ns2.jpmorganchase.com 146.143.3.130NOERROR, 130 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 8 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: ns0037.secondary.cloudflare.com: "2026.10.2"; ns0246.secondary.cloudflare.com: "2026.10.2". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 789451156 · primary ns1.jpmorganchase.com

Found

Primary (MNAME)
ns1.jpmorganchase.com
Contact (RNAME)
hostmaster.jpmchase.com
Serial
789451156
Refresh / retry
10800 s / 1800 s
Expire
1209600 s
Negative TTL
3600 s

Serial per nameserver

NameserverSerial
ns0037.secondary.cloudflare.com (162.159.32.38)789451156
ns0037.secondary.cloudflare.com (2606:4700:51::a29f:2026)789451156
ns0246.secondary.cloudflare.com (162.159.33.121)789451156
ns0246.secondary.cloudflare.com (2606:4700:59::a29f:2179)789451156
ns05.jpmorganchase.com (146.143.195.130)789451156
ns06.jpmorganchase.com (146.143.131.130)789451156
ns1.jpmorganchase.com (146.143.67.130)789451156
ns2.jpmorganchase.com (146.143.3.130)789451156

Checks

  • ✓ Serial 789451156 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 3h, retry 30m, expire 14d, negative TTL 1h.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns1.jpmorganchase.com is one of the listed nameservers.
  • ✓ Contact hostmaster@jpmchase.com #25
    The SOA RNAME hostmaster.jpmchase.com means hostmaster@jpmchase.com.
  • ✓ Counter serial #26
    The serial 789451156 is a plain counter.

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

pass

25 records at the apex

Found

Read from
162.159.32.38:53
TypeValueTTL
SOAns1.jpmorganchase.com. hostmaster.jpmchase.com. 789451156 10800 1800 1209600 36003600
NSns06.jpmorganchase.com.3600
NSns2.jpmorganchase.com.3600
NSns05.jpmorganchase.com.3600
NSns1.jpmorganchase.com.3600
NSns0037.secondary.cloudflare.com.3600
NSns0246.secondary.cloudflare.com.3600
MX1 aspmx.l.google.com.3600
MX10 aspmx2.googlemail.com.3600
MX10 aspmx3.googlemail.com.3600
MX5 alt1.aspmx.l.google.com.3600
MX5 alt2.aspmx.l.google.com.3600
TXT"293xg0wqmz0hzw4k5w8z19vxgzkt33qx"3600
TXT"facebook-domain-verification=tljv6monmatq2igqeocba5rc9lk3zm"3600
TXT"firebase=zoolander-195215"3600
TXT"google-site-verification=-vLYY0Fpb8ey-3y-ZvqWojamO7pxv2roW4u-yCki5Og"3600
TXT"google-site-verification=8JKCVbFWvz4Tt2F7EE1obXyoPsN88MGf3SJm68mbY-E"3600
TXT"google-site-verification=8Z1MjJvMkJH429Up3asZTifCI7CkLhR1pE_rj_EY3fc"3600
TXT"google-site-verification=FmYBWOQvPQ-2FvL9b5O460mzgUxKCt3_DT5kdU_U35Q"3600
TXT"google-site-verification=QjUfM5HMpUxINgfjH5s4SHOHzI-kdfNRPzxFlc11mUk"3600
TXT"google-site-verification=XWlhB7M5foZXxP88SKUgdNrVfywMroQNxtHRTyPuLEI"3600
TXT"google-site-verification=pMv-PmLVhRbCgnayMHkG_kIEv5HT2JDE9YfuN7nyn_4"3600
TXT"v=spf1 include:_spf.firebasemail.com ip4:4.79.249.66 ip4:4.79.249.67 ip4:216.244.123.14 ~all"3600
CAA0 issue "digicert.com"3600
CAA0 issue "entrust.net"3600

Checks

  • ✓ TTLs within range #32
    TTLs: MX 1h, NS 1h. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: digicert.com, entrust.net.