zawya.com

Checked 22 October 2026, 11:42 UTC · via 8.8.8.8
!Passed with warnings
26 passed 2 warnings 0 failed 3 info

Registration

info

.com generic · MarkMonitor Inc. · expires 2027-08-24

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
MarkMonitor Inc.
Registered
24 August 1999
Last changed
1 August 2026
Expires
24 August 2027
Status
client delete prohibited, client transfer prohibited, client update prohibited
Registry nameservers
gold.foundationdns.com, gold.foundationdns.net, gold.foundationdns.org, ns1.p202.dns.oraclecloud.net, ns2.p202.dns.oraclecloud.net, ns3.p202.dns.oraclecloud.net, ns4.p202.dns.oraclecloud.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-08-24 #3
    The registration is valid until 2027-08-24 (306 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited, client update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

pass

gold.foundationdns.com, gold.foundationdns.net, gold.foundationdns.org, ns1.p202.dns.oraclecloud.net, ns2.p202.dns.oraclecloud.net, ns3.p202.dns.oraclecloud.net, ns4.p202.dns.oraclecloud.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
gold.foundationdns.com, gold.foundationdns.net, gold.foundationdns.org, ns1.p202.dns.oraclecloud.net, ns2.p202.dns.oraclecloud.net, ns3.p202.dns.oraclecloud.net, ns4.p202.dns.oraclecloud.net
NS in the zone
gold.foundationdns.com, gold.foundationdns.net, gold.foundationdns.org, ns1.p202.dns.oraclecloud.net, ns2.p202.dns.oraclecloud.net, ns3.p202.dns.oraclecloud.net, ns4.p202.dns.oraclecloud.net
NameserverAddressesNetwork (AS)Glue
gold.foundationdns.com172.64.40.2 162.159.60.2 108.162.198.2 2803:f800:52::a29f:3c02 2a06:98c1:56::ac40:2802 2606:4700:57::6ca2:c602AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US108.162.198.2 162.159.60.2 172.64.40.2 2606:4700:57::6ca2:c602 2803:f800:52::a29f:3c02 2a06:98c1:56::ac40:2802
gold.foundationdns.net162.159.60.32 172.64.40.32 108.162.198.32 2606:4700:57::6ca2:c620 2a06:98c1:56::ac40:2820 2803:f800:52::a29f:3c20AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US-
gold.foundationdns.org108.162.198.62 172.64.40.62 162.159.60.62 2a06:98c1:56::ac40:283e 2606:4700:57::6ca2:c63e 2803:f800:52::a29f:3c3eAS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US-
ns1.p202.dns.oraclecloud.net108.59.166.202 2600:2000:2100::caAS31898 ORACLE-BMC-31898 - Oracle Corporation, US AS31898 ORACLE-BMC-31898 - Oracle Corporation, US-
ns2.p202.dns.oraclecloud.net108.59.168.202 2600:2000:2110::caAS31898 ORACLE-BMC-31898 - Oracle Corporation, US AS31898 ORACLE-BMC-31898 - Oracle Corporation, US-
ns3.p202.dns.oraclecloud.net108.59.170.202 2600:2000:2120::caAS31898 ORACLE-BMC-31898 - Oracle Corporation, US AS31898 ORACLE-BMC-31898 - Oracle Corporation, US-
ns4.p202.dns.oraclecloud.net108.59.172.202 2600:2000:2130::caAS31898 ORACLE-BMC-31898 - Oracle Corporation, US AS31898 ORACLE-BMC-31898 - Oracle Corporation, US-

Checks

  • ✓ 7 nameservers #6
    Delegated to gold.foundationdns.com, gold.foundationdns.net, gold.foundationdns.org, ns1.p202.dns.oraclecloud.net, ns2.p202.dns.oraclecloud.net, ns3.p202.dns.oraclecloud.net, ns4.p202.dns.oraclecloud.net.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 7 IPv4 /24s and 7 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS13335 (CLOUDFLARENET - Cloudflare, Inc., US): 18 addresses; AS31898 (ORACLE-BMC-31898 - Oracle Corporation, US): 8 addresses.
  • ✓ Nameserver names under 3 TLDs #12
    Nameserver names use the TLDs .com, .net, .org.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

warn

26 of 26 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
gold.foundationdns.com 172.64.40.2NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.com 162.159.60.2NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.com 108.162.198.2NOERROR, 10 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.com 2803:f800:52::a29f:3c02NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.com 2a06:98c1:56::ac40:2802NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.com 2606:4700:57::6ca2:c602NOERROR, 16 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.net 162.159.60.32NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.net 172.64.40.32NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.net 108.162.198.32NOERROR, 10 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.net 2606:4700:57::6ca2:c620NOERROR, 11 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.net 2a06:98c1:56::ac40:2820NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.net 2803:f800:52::a29f:3c20NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.org 108.162.198.62NOERROR, 11 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.org 172.64.40.62NOERROR, 16 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.org 162.159.60.62NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.org 2a06:98c1:56::ac40:283eNOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.org 2606:4700:57::6ca2:c63eNOERROR, 12 ms, authoritativenoyes / yesrefused2026.10.0
gold.foundationdns.org 2803:f800:52::a29f:3c3eNOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.0
ns1.p202.dns.oraclecloud.net 108.59.166.202NOERROR, 65 ms, authoritativenoyes / yesrefused-
ns1.p202.dns.oraclecloud.net 2600:2000:2100::caNOERROR, 179 ms, authoritativenoyes / yesrefused-
ns2.p202.dns.oraclecloud.net 108.59.168.202NOERROR, 66 ms, authoritativenoyes / yesrefused-
ns2.p202.dns.oraclecloud.net 2600:2000:2110::caNOERROR, 168 ms, authoritativenoyes / yesrefused-
ns3.p202.dns.oraclecloud.net 108.59.170.202NOERROR, 66 ms, authoritativenoyes / yesrefused-
ns3.p202.dns.oraclecloud.net 2600:2000:2120::caNOERROR, 70 ms, authoritativenoyes / yesrefused-
ns4.p202.dns.oraclecloud.net 108.59.172.202NOERROR, 4 ms, authoritativenoyes / yesrefused-
ns4.p202.dns.oraclecloud.net 2600:2000:2130::caNOERROR, 164 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 26 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: gold.foundationdns.com: "2026.10.0"; gold.foundationdns.net: "2026.10.0"; gold.foundationdns.org: "2026.10.0". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

info

serial 225 · primary ehp-eu.int.inf0.net

Found

Primary (MNAME)
ehp-eu.int.inf0.net
Contact (RNAME)
hostmaster.refinitiv.com
Serial
225
Refresh / retry
10800 s / 3600 s
Expire
2419200 s
Negative TTL
900 s

Serial per nameserver

NameserverSerial
gold.foundationdns.com (172.64.40.2)225
gold.foundationdns.com (162.159.60.2)225
gold.foundationdns.com (108.162.198.2)225
gold.foundationdns.com (2803:f800:52::a29f:3c02)225
gold.foundationdns.com (2a06:98c1:56::ac40:2802)225
gold.foundationdns.com (2606:4700:57::6ca2:c602)225
gold.foundationdns.net (162.159.60.32)225
gold.foundationdns.net (172.64.40.32)225
gold.foundationdns.net (108.162.198.32)225
gold.foundationdns.net (2606:4700:57::6ca2:c620)225
gold.foundationdns.net (2a06:98c1:56::ac40:2820)225
gold.foundationdns.net (2803:f800:52::a29f:3c20)225
gold.foundationdns.org (108.162.198.62)225
gold.foundationdns.org (172.64.40.62)225
gold.foundationdns.org (162.159.60.62)225
gold.foundationdns.org (2a06:98c1:56::ac40:283e)225
gold.foundationdns.org (2606:4700:57::6ca2:c63e)225
gold.foundationdns.org (2803:f800:52::a29f:3c3e)225
ns1.p202.dns.oraclecloud.net (108.59.166.202)225
ns1.p202.dns.oraclecloud.net (2600:2000:2100::ca)225
ns2.p202.dns.oraclecloud.net (108.59.168.202)225
ns2.p202.dns.oraclecloud.net (2600:2000:2110::ca)225
ns3.p202.dns.oraclecloud.net (108.59.170.202)225
ns3.p202.dns.oraclecloud.net (2600:2000:2120::ca)225
ns4.p202.dns.oraclecloud.net (108.59.172.202)225
ns4.p202.dns.oraclecloud.net (2600:2000:2130::ca)225

Checks

  • ✓ Serial 225 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 3h, retry 1h, expire 28d, negative TTL 15m.
  • i
    Hidden master (not resolvable)
    The primary nameserver ehp-eu.int.inf0.net is not listed as a nameserver and does not resolve publicly: a hidden master, or a placeholder name. Some tools (e.g. dynamic updates) use MNAME to find the primary.
    #24
  • ✓ Contact hostmaster@refinitiv.com #25
    The SOA RNAME hostmaster.refinitiv.com means hostmaster@refinitiv.com.
  • ✓ Counter serial #26
    The serial 225 is a plain counter.

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

15 records at the apex

Found

Read from
172.64.40.2:53
TypeValueTTL
SOAehp-eu.int.inf0.net. hostmaster.refinitiv.com. 225 10800 3600 2419200 900300
NSns4.p202.dns.oraclecloud.net.300
NSns2.p202.dns.oraclecloud.net.300
NSns1.p202.dns.oraclecloud.net.300
NSns3.p202.dns.oraclecloud.net.300
NSgold.foundationdns.com.300
NSgold.foundationdns.net.300
NSgold.foundationdns.org.300
A3.33.203.179300
A13.248.169.37300
MX1 aspmx.l.google.com.300
MX10 alt1.aspmx.l.google.com.300
MX20 alt2.aspmx.l.google.com.300
MX30 alt3.aspmx.l.google.com.300
TXT"v=spf1 ip4:45.75.204.18/27 ip4:45.75.204.3/27 ip4:80.227.48.52/25 include:_spf.google.com include:spf.mandrillapp.com ~all"300

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, MX 5m, NS 5m. The NS TTL at the parent is 2d and in the zone 5m; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35