illumina.com

Checked 22 October 2026, 09:15 UTC · via 8.8.8.8
✗Problems found
23 passed 3 warnings 2 failed 3 info

Registration

info

.com generic · MarkMonitor Inc. · expires 2027-02-04

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
MarkMonitor Inc.
Registered
4 February 1999
Last changed
3 January 2026
Expires
4 February 2027
Status
client delete prohibited, client transfer prohibited, client update prohibited
Registry nameservers
ns30.ultradns2.com, ns30.ultradns2.org, pdns112.ultradns.biz, pdns112.ultradns.com, pdns112.ultradns.net, pdns112.ultradns.org
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-02-04 #3
    The registration is valid until 2027-02-04 (104 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited, client update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

ns30.ultradns2.com, ns30.ultradns2.org, pdns112.ultradns.biz, pdns112.ultradns.com, pdns112.ultradns.net, pdns112.ultradns.org

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns30.ultradns2.com, ns30.ultradns2.org, pdns112.ultradns.biz, pdns112.ultradns.com, pdns112.ultradns.net, pdns112.ultradns.org
NS in the zone
ns1-dkim.has.pphosted.com, ns2-dkim.has.pphosted.com, ns30.ultradns2.com, ns30.ultradns2.org, pdns112.ultradns.biz, pdns112.ultradns.com, pdns112.ultradns.net, pdns112.ultradns.org
NameserverAddressesNetwork (AS)Glue
ns1-dkim.has.pphosted.com (zone only)76.223.36.144 15.197.219.50AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-
ns2-dkim.has.pphosted.com (zone only)15.197.219.50 76.223.36.144AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-
ns30.ultradns2.com204.74.104.30 2610:a1:311e::53AS399153 SECURITYSERVICES - Vercara, LLC, US AS399155 SECURITYSERVICES - Vercara, LLC, US204.74.104.30 2610:a1:311e::53
ns30.ultradns2.org204.74.106.30 2610:a1:321e::53AS399154 SECURITYSERVICES - Vercara, LLC, US AS399154 SECURITYSERVICES - Vercara, LLC, US-
pdns112.ultradns.biz156.154.66.112 2610:a1:1015::94AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-
pdns112.ultradns.com156.154.64.112 2001:502:f3ff::94AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US156.154.64.112 2001:502:f3ff::94
pdns112.ultradns.net156.154.65.112 2610:a1:1014::94AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-
pdns112.ultradns.org156.154.67.112 2001:502:4612::94AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-

Checks

  • ✓ 6 nameservers #6
    Delegated to ns30.ultradns2.com, ns30.ultradns2.org, pdns112.ultradns.biz, pdns112.ultradns.com, pdns112.ultradns.net, pdns112.ultradns.org.
  • !
    NS sets differ
    The nameservers at the parent and in the zone should be the same. Only in the zone: ns1-dkim.has.pphosted.com, ns2-dkim.has.pphosted.com. ns30.ultradns2.com, ns30.ultradns2.org, pdns112.ultradns.biz, pdns112.ultradns.com, pdns112.ultradns.net, pdns112.ultradns.org report NS ns1-dkim.has.pphosted.com ns2-dkim.has.pphosted.com ns30.ultradns2.com ns30.ultradns2.org pdns112.ultradns.biz pdns112.ultradns.com pdns112.ultradns.net pdns112.ultradns.org.
    #7
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 8 IPv4 /24s and 6 IPv6 /48s.
  • ✓ 5 autonomous systems #11
    The nameservers are spread over: AS12008 (VERCARA - Vercara, LLC, US): 8 addresses; AS16509 (AMAZON-02 - Amazon.com, Inc., US): 4 addresses; AS399153 (SECURITYSERVICES - Vercara, LLC, US): 1 address; AS399154 (SECURITYSERVICES - Vercara, LLC, US): 2 addresses; AS399155 (SECURITYSERVICES - Vercara, LLC, US): 1 address.
  • ✓ Nameserver names under 4 TLDs #12
    Nameserver names use the TLDs .biz, .com, .net, .org.
  • i
    Partly IPv6
    These nameservers have no IPv6 address: ns1-dkim.has.pphosted.com, ns2-dkim.has.pphosted.com.
    #13

Nameservers

fail

12 of 16 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns1-dkim.has.pphosted.com 76.223.36.144REFUSED, 23 ms, NOT authoritativenono / yesrefused-
ns1-dkim.has.pphosted.com 15.197.219.50REFUSED, 23 ms, NOT authoritativenono / yesrefused-
ns2-dkim.has.pphosted.com 15.197.219.50REFUSED, 23 ms, NOT authoritativenono / yesrefused-
ns2-dkim.has.pphosted.com 76.223.36.144REFUSED, 23 ms, NOT authoritativenono / yesrefused-
ns30.ultradns2.com 204.74.104.30NOERROR, 4 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
ns30.ultradns2.com 2610:a1:311e::53NOERROR, 4 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
ns30.ultradns2.org 204.74.106.30NOERROR, 13 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
ns30.ultradns2.org 2610:a1:321e::53NOERROR, 13 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns112.ultradns.biz 156.154.66.112NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns112.ultradns.biz 2610:a1:1015::94NOERROR, 7 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns112.ultradns.com 156.154.64.112NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns112.ultradns.com 2001:502:f3ff::94NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns112.ultradns.net 156.154.65.112NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns112.ultradns.net 2610:a1:1014::94NOERROR, 4 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns112.ultradns.org 156.154.67.112NOERROR, 31 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns112.ultradns.org 2001:502:4612::94NOERROR, 32 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver

Checks

  • ✓ All respond #14
    All 16 nameserver addresses answered.
  • ✗
    Lame delegation
    These nameservers don't answer authoritatively for the zone, so resolvers ignore them: ns1-dkim.has.pphosted.com (76.223.36.144): REFUSED, authoritative=false; ns1-dkim.has.pphosted.com (15.197.219.50): REFUSED, authoritative=false; ns2-dkim.has.pphosted.com (15.197.219.50): REFUSED, authoritative=false; ns2-dkim.has.pphosted.com (76.223.36.144): REFUSED, authoritative=false.
    #15
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: ns30.ultradns2.com: "UltraDNS Nameserver"; ns30.ultradns2.org: "UltraDNS Nameserver"; pdns112.ultradns.biz: "UltraDNS Nameserver"; pdns112.ultradns.com: "UltraDNS Nameserver"; pdns112.ultradns.net: "UltraDNS Nameserver"; pdns112.ultradns.org: "UltraDNS Nameserver".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✗
    No DNS over TCP
    DNS over TCP is required (RFC 7766); without it, large answers such as DNSSEC responses fail. Not answering over TCP: ns1-dkim.has.pphosted.com (76.223.36.144): ; ns1-dkim.has.pphosted.com (15.197.219.50): ; ns2-dkim.has.pphosted.com (15.197.219.50): ; ns2-dkim.has.pphosted.com (76.223.36.144): .
    #19
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 2023011946 · primary pdns112.ultradns.com

Found

Primary (MNAME)
pdns112.ultradns.com
Contact (RNAME)
jhwang.illumina.com
Serial
2023011946
Refresh / retry
86400 s / 86400 s
Expire
86400 s
Negative TTL
86400 s

Serial per nameserver

NameserverSerial
ns30.ultradns2.com (204.74.104.30)2023011946
ns30.ultradns2.com (2610:a1:311e::53)2023011946
ns30.ultradns2.org (204.74.106.30)2023011946
ns30.ultradns2.org (2610:a1:321e::53)2023011946
pdns112.ultradns.biz (156.154.66.112)2023011946
pdns112.ultradns.biz (2610:a1:1015::94)2023011946
pdns112.ultradns.com (156.154.64.112)2023011946
pdns112.ultradns.com (2001:502:f3ff::94)2023011946
pdns112.ultradns.net (156.154.65.112)2023011946
pdns112.ultradns.net (2610:a1:1014::94)2023011946
pdns112.ultradns.org (156.154.67.112)2023011946
pdns112.ultradns.org (2001:502:4612::94)2023011946

Checks

  • ✓ Serial 2023011946 everywhere #22
    All nameservers serve the same version of the zone.
  • !
    Unusual SOA timers
    retry 1d should be shorter than refresh 1d; expire 1d is shorter than 7d; secondaries stop answering too soon when the primary is down; expire 1d must be longer than refresh + retry. Current values: refresh 1d, retry 1d, expire 1d, negative TTL 1d.
    #23
  • ✓ Primary is a public nameserver #24
    The primary nameserver pdns112.ultradns.com is one of the listed nameservers.
  • ✓ Contact jhwang@illumina.com #25
    The SOA RNAME jhwang.illumina.com means jhwang@illumina.com.
  • ✓ Date-based serial #26
    The serial 2023011946 follows the YYYYMMDDnn convention (2023-01-19).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

pass

61 records at the apex

Found

Read from
204.74.104.30:53
TypeValueTTL
SOApdns112.ultradns.com. jhwang.illumina.com. 2023011946 86400 86400 86400 8640086400
NSns30.ultradns2.com.86400
NSns30.ultradns2.org.86400
NSpdns112.ultradns.biz.86400
NSpdns112.ultradns.com.86400
NSpdns112.ultradns.net.86400
NSpdns112.ultradns.org.86400
NSns1-dkim.has.pphosted.com.86400
NSns2-dkim.has.pphosted.com.86400
A204.74.99.100300
MX10 mxa-001ff201.gslb.pphosted.com.43200
MX10 mxb-001ff201.gslb.pphosted.com.43200
TXT"MS=ms68089493"600
TXT"00e1d8944a684c2d840192f19baf7ebe"600
TXT"ZOOM_verify_mV-PVTm1RRK6WtugeVNjAw"600
TXT"apple-domain-verification=JVplSEq83vVfyGBW"600
TXT"status-page-domain-verification=qzn9sfx13n69"600
TXT"QuoVadis=591b76e7-ac74-44fe-8796-23001d3e23a3"600
TXT"docusign=93ba5ab0-6421-416e-a09b-cefa1d40ac1d"600
TXT"amazonses:ApWxoJDZf/NoFXnDtVMYbgBuhy8TeB0ID+oubFHlmo4="600
TXT"amazonses:EIlOjDU+u4eTLZhOTT5wH+gGW+m9eBnaTVWYmwiu98Y="600
TXT"amazonses:K/uAfqacevzYbCn/ZZfBg+johN+QIdW4ii4o+wZfYOs="600
TXT"amazonses:QRkgGsGxCs6LL9IiLnxY7Xk659rQUDGBlPisOW3VIbs="600
TXT"amazonses:RxKVI/CLcLydIzh8q/RfiDqCQ/tgb9TNtruSaThSeLw="600
TXT"amazonses:llBAzbAzA/LAbxWGM2q3yBEg72qLseaWaJ5TlDgIS8I="600
TXT"amazonses:m0ByXenOMmrmI/V92cEfe5V1u9lCKFRcj0o/cPjNS48="600
TXT"openai-domain-verification=dv-jXV8sPn4cd6qogMN8x5AaPB8"600
TXT"adobe-sign-verification=89373a1a320e2d86a6b2ae24e83a82b3"600
TXT"miro-verification=0ddb652d88dcdccce585c3065190ef0d817e42a9"600
TXT"cursor-domain-verification-ewncre=LOnYanvsryeRO3grjQ9Q9K6Bz"600
TXT"smartsheet-site-validation=fvfZdrj3DZ_vhfoL6Cpv80zaUpweu_K0"600
TXT"teamviewer-sso-verification=e1fd06ea0cac4edf89e9d02be7d893f1"600
TXT"anthropic-domain-verification-c800yz=sMaJhTmiVVZLt0U04d1azPMBB"600
TXT"identrust_validate=1VRp4rOkapIzIDk9oGDkfb+JP05pfJe94Dc8nshU2Qnh"600
TXT"identrust_validate=IZwKmsM8ddKV1AM15lV2ezfY2p7ZPAa6fQ81Hi/LdWUl"600
TXT"identrust_validate=JTI6ofFrGw11w7vQJDoTYPNGrfxbP8bdb+HeDNvDkYrc"600
TXT"identrust_validate=Kkb4/3eXTmBhDK00ujUtKZUOoY7tWPncfKtXoZFclKL7"600
TXT"identrust_validate=rW19VtiwhCZ40FweXntJJdf1DH7+VZepl0C5ZpI0Is7M"600
TXT"adobe-idp-site-verification=9ec79f45-efbd-4bdd-af3c-a1e5bff67e61"600
TXT"google-site-verification=-nk4B1jypRJFEaqEFFqhIkxKDc2nFLeXPDCoEq2t9ns"600
TXT"google-site-verification=9X7fJvLFSZ9Eckt1A6YYbvXmTJj_Kl8mJbnP7u24Dzs"600
TXT"google-site-verification=WHrIdtYANLrL1BTzKVTmC0Q5otr7yufYACZM-0ZsjBU"600
TXT"google-site-verification=q31G9nSLfsZz_3sXsLn4nnYFeltJFu5NOKlR4TfNpbI"600
TXT"pardot551052=c1e9e0b9329103913434c8cc2e4e10989d2c94ffbf9d90ff55fe40312def7218"600
TXT"pardot946173=cd80f81cd58c62aea2e531f805d87d717e53a76f6360c05d494ffaa7a9337626"600
TXT"pardot960392=55f780f495d8ad1df9a2c0f1074d671f07dc4753e5a1e18f1146e1aec0ee8da1"600
TXT"pardot1083721=2e34c3bedf94df971a1293f07f2a6fd1553fb7f7dbccd3f4596c88d1ef17f4a2"600
TXT"v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com include:aspmx.pardot.com -all"600
TXT"Lo89uoUDbeYq9LnuCZv6l9GMa2uNb537A2bUxpYMexWmaW+N3ov/LjtsgLQTJJ5wTUe6FjEjKEYh6H3zX9eZqw=="600
TXT"box-domain-verification=07db0dbdee7048348673762b5f8bbd11e679c5258eb0b8d5476de8b7b5032e13"600
TXT"n1SD9rMCGlWVSM51ELzrdwvvyAXuGMmCpKPTxVGtAMnqJT8jyMdWlHS7unggstCFj9QQr+w5i4BrsF63lESlDA=="600
TXT"cisco-ci-domain-verification=893a37b34b31844db17918761e08d5ff332761cdfa520b2dfc06849af05b631"600
TXT"atlassian-domain-verification=GZAsbnhE94Acz17hjoAr6nbAR5hPBy+YKntnlt2J8ph3Io58oDE9NoZYM2wKcNLT"600
TXT"postman-domain-verification=4f547f808763d40b6a755c357e923c8164a86ab8bd66e5c5235193c9a70942416768eae75c2b9fe89ca71b8bf1ac4129274326fdb72a160eb38cf4c112dcac69"600
CAA0 iodef "mailto:security@illumina.com"3600
CAA0 issue "amazon.com"3600
CAA0 issue "digicert.com"3600
CAA0 issue "googledomains.com"3600
CAA0 issue "identrust.com"3600
CAA0 issue "letsencrypt.org"3600
CAA0 issue "quovadisglobal.com"3600

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, MX 12h, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: amazon.com, digicert.com, googledomains.com, identrust.com, letsencrypt.org, quovadisglobal.com.