keysight.com

Checked 22 October 2026, 09:31 UTC · via 8.8.8.8
✗Problems found
24 passed 2 warnings 1 failed 4 info

Registration

info

.com generic · CSC Corporate Domains, Inc. · expires 2027-08-04

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
4 August 2012
Last changed
31 July 2026
Expires
4 August 2027
Status
client transfer prohibited
Registry nameservers
pdns111.ultradns.biz, pdns111.ultradns.com, pdns111.ultradns.net, pdns111.ultradns.org
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-08-04 #3
    The registration is valid until 2027-08-04 (286 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

pdns111.ultradns.biz, pdns111.ultradns.com, pdns111.ultradns.net, pdns111.ultradns.org

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
pdns111.ultradns.biz, pdns111.ultradns.com, pdns111.ultradns.net, pdns111.ultradns.org
NS in the zone
ns3.keysight.com, pdns111.ultradns.biz, pdns111.ultradns.com, pdns111.ultradns.net, pdns111.ultradns.org
NameserverAddressesNetwork (AS)Glue
ns3.keysight.com (zone only)192.25.21.142AS395266 KEYSIGHT-TECHNOLOGIES - Keysight Technologies, Inc, US-
pdns111.ultradns.biz156.154.66.111 2610:a1:1015::93AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-
pdns111.ultradns.com156.154.64.111 2001:502:f3ff::93AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US156.154.64.111 2001:502:f3ff::93
pdns111.ultradns.net156.154.65.111 2610:a1:1014::93AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-
pdns111.ultradns.org156.154.67.111 2001:502:4612::93AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-

Checks

  • ✓ 4 nameservers #6
    Delegated to pdns111.ultradns.biz, pdns111.ultradns.com, pdns111.ultradns.net, pdns111.ultradns.org.
  • !
    NS sets differ
    The nameservers at the parent and in the zone should be the same. Only in the zone: ns3.keysight.com. pdns111.ultradns.biz, pdns111.ultradns.com, pdns111.ultradns.net, pdns111.ultradns.org report NS ns3.keysight.com pdns111.ultradns.biz pdns111.ultradns.com pdns111.ultradns.net pdns111.ultradns.org.
    #7
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 5 IPv4 /24s and 4 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS12008 (VERCARA - Vercara, LLC, US): 8 addresses; AS395266 (KEYSIGHT-TECHNOLOGIES - Keysight Technologies, Inc, US): 1 address.
  • ✓ Nameserver names under 4 TLDs #12
    Nameserver names use the TLDs .biz, .com, .net, .org.
  • i
    Partly IPv6
    These nameservers have no IPv6 address: ns3.keysight.com.
    #13

Nameservers

fail

8 of 9 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns3.keysight.com 192.25.21.142no responsenono / no--
pdns111.ultradns.biz 156.154.66.111NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns111.ultradns.biz 2610:a1:1015::93NOERROR, 5 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns111.ultradns.com 156.154.64.111NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns111.ultradns.com 2001:502:f3ff::93NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns111.ultradns.net 156.154.65.111NOERROR, 4 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns111.ultradns.net 2610:a1:1014::93NOERROR, 4 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns111.ultradns.org 156.154.67.111NOERROR, 31 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns111.ultradns.org 2001:502:4612::93NOERROR, 32 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver

Checks

  • ✗
    Nameservers not responding
    These addresses did not answer, so resolvers waste time on timeouts: ns3.keysight.com (192.25.21.142): read udp 46.225.38.91:38012->192.25.21.142:53: i/o timeout.
    #14
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: pdns111.ultradns.biz: "UltraDNS Nameserver"; pdns111.ultradns.com: "UltraDNS Nameserver"; pdns111.ultradns.net: "UltraDNS Nameserver"; pdns111.ultradns.org: "UltraDNS Nameserver".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 481566075 · primary pdns111.ultradns.com

Found

Primary (MNAME)
pdns111.ultradns.com
Contact (RNAME)
hostmaster.keysight.com
Serial
481566075
Refresh / retry
2700 s / 180 s
Expire
1209600 s
Negative TTL
300 s

Serial per nameserver

NameserverSerial
pdns111.ultradns.biz (156.154.66.111)481566075
pdns111.ultradns.biz (2610:a1:1015::93)481566075
pdns111.ultradns.com (156.154.64.111)481566075
pdns111.ultradns.com (2001:502:f3ff::93)481566075
pdns111.ultradns.net (156.154.65.111)481566075
pdns111.ultradns.net (2610:a1:1014::93)481566075
pdns111.ultradns.org (156.154.67.111)481566075
pdns111.ultradns.org (2001:502:4612::93)481566075

Checks

  • ✓ Serial 481566075 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 45m, retry 3m, expire 14d, negative TTL 5m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver pdns111.ultradns.com is one of the listed nameservers.
  • ✓ Contact hostmaster@keysight.com #25
    The SOA RNAME hostmaster.keysight.com means hostmaster@keysight.com.
  • ✓ Counter serial #26
    The serial 481566075 is a plain counter.

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

39 records at the apex

Found

Read from
156.154.66.111:53
TypeValueTTL
SOApdns111.ultradns.com. hostmaster.keysight.com. 481566075 2700 180 1209600 3003600
NSns3.keysight.com.3600
NSpdns111.ultradns.biz.3600
NSpdns111.ultradns.com.3600
NSpdns111.ultradns.net.3600
NSpdns111.ultradns.org.3600
A52.27.67.2003600
A35.84.52.2553600
MX10 mxa-003cac01.gslb.pphosted.com.3600
MX10 mxb-003cac01.gslb.pphosted.com.3600
TXT"MS=ms13448721"3600
TXT"MS=ms22695472"3600
TXT"MS=ms74425658"3600
TXT"MS=ms75418395"3600
TXT"MS=ms93691955"3600
TXT"matillion:keysight-com-sso"3600
TXT"855f4579-c145-44c9-aba6-e7f348313f2c"3600
TXT"apple-domain-verification=ELoDVs9vbXXP199x"3600
TXT"google-gws-recovery-domain-verification=57468945"3600
TXT"amazonses:fqYcsLMBB7uXbWf2li+zPHhlKHvwYusVv1weGcOxb5U="3600
TXT"openai-domain-verification=dv-3NZmsuxJV5DdY5gFNM9LubOj"3600
TXT"adobe-sign-verification=70d890733fd83f916971623a7d24b79"3600
TXT"adobe-sign-verification=ec426ad795f23c2aea176e633561ab8"3600
TXT"cursor-domain-verification-gr8bt2=gRt3NvnSbdPIawBW7eUjcFiTn"3600
TXT"smartsheet-site-validation=yBV7GQJcHv9l2P41xObWNEIs-H1j4ZI8"3600
TXT"teamviewer-sso-verification=d117f49c45d04cc18af1211ba7580bd9"3600
TXT"anthropic-domain-verification-b5gvk3=OlkFb8HVfTU5A332wMpIFjdQS"3600
TXT"gitlab-pages-verification-code=e339c91ac8b05ea35b7bc74f378e0f95"3600
TXT"google-site-verification=revPDyva9oPIdsxYVRQZ2D-BO7EORp1fLB4i-cvJDA8"3600
TXT"WReU/11y4qCdOlF76HR5ex31LYLUtO6zzIlolbcnZg+WvqLiKBcpZ45IDFA2CO8SXBGhSeuVIfpt2XnM/0fwug=="3600
TXT"ciscocidomainverification=4d0f15d232a422bbd1a559d676eed62a0115a1ea774c10478cc31599362fb26"3600
TXT"infoblox-domain-mastery=b533d19df0c61b133f276fcf038522a29a6a3afa781e016eab4c9d3e3a46066d05"3600
TXT"cisco-ci-domain-verification=44abc3e8f9d675c913b6104d15eb2c8097427fa53dcae4d215ce8d342b71ddd1"3600
TXT"atlassian-domain-verification=AGiDFptwa/OUoEDrGU08jejEUsHm7/m5WFaG8l5no8AL9mWFhHLCHWI7VCrrIGkm"3600
TXT"atlassian-domain-verification=DFuXazCAA8Fn3e0Hj8A6b6uRTmbiI8leK5wsNjiVWnNIaGaD8S3y4dDYmcdhgBXy"3600
TXT"atlassian-domain-verification=ik5bWbd2FTDgjL8zl75T9S/Rj5CgkVuO2uEmczNv98bpBirVvG9/sfGa24WDzZzx"3600
TXT"atlassian-domain-verification=tgnIXfKjDjq4HDIfXEHOkfHQt9ncNp2DN60DzGLi0CS6d9TFaAr7uJT9rENB4smB"3600
TXT"_gitlab-pages-verification-code.keysight.com=gitlab-pages-verification-code=803565d0fe066afa3b679c0ed2721b8a"3600
TXT"v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com include:_spf.salesforce.com include:spf_c.oraclecloud.com include:_spf.concurcompleat.com include:mail.zendesk.com ip4:72.249.160.11 ip4:72.249.160.12 ip4:124.251.39.112 ip4:74.91.87.142 ip4:74.91.87.143" " ip4:85.90.243.194 ip4:205.220.161.93 ip4:205.220.173.93 ip4:72.142.145.120 ip4:72.142.145.122/31 ip4:3.213.113.143 ip4:3.216.209.198/31 ip4:54.190.231.54/31 ip4:192.25.5.26 ip4:192.25.5.28 ip4:192.25.5.27 ip4:192.25.5.18 ip4:23.251.224.0/19 ip4:192.25.21" ".159 ip4:192.25.21.162 ip4:192.25.21.164 ip4:205.219.85.0/24 ip4:192.40.160.0/19 ip4:69.12.214.194 ip4:74.217.219.32 ip4:206.127.27.11 ip4:188.172.128.0/20 ip4:216.198.0.0/18 ip4:165.72.200.0/24 ip4:199.40.206.0/26 ip4:72.3.205.12 ip4:64.238.211.94 ip4:17" "3.236.20.0/24 ip4:192.92.97.0/24 ip4:52.128.40.0/21 ip4:217.8.118.0/24 ip4:103.229.233.0/24 include:spf.protection.outlook.com include:docebosaas.com ~all"3600

Checks

  • ✓ TTLs within range #32
    TTLs: A 1h, MX 1h, NS 1h. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35