kingspan.com

Checked 22 October 2026, 09:31 UTC · via 8.8.8.8
!Passed with warnings
25 passed 3 warnings 0 failed 3 info

Registration

info

.com generic · TLDS L.L.C. d/b/a SRSPlus · expires 2027-09-30

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
TLDS L.L.C. d/b/a SRSPlus
Registered
1 October 1996
Last changed
1 October 2026
Expires
30 September 2027
Status
client transfer prohibited
Registry nameservers
ns1.ie.topsec.com, ns2.ie.topsec.com, ns3.ca.topsec.com, ns4.eu.topsec.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-09-30 #3
    The registration is valid until 2027-09-30 (342 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

ns1.ie.topsec.com, ns2.ie.topsec.com, ns3.ca.topsec.com, ns4.eu.topsec.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns1.ie.topsec.com, ns2.ie.topsec.com, ns3.ca.topsec.com, ns4.eu.topsec.com
NS in the zone
ns1.ie.topsec.com, ns2.ie.topsec.com, ns3.ca.topsec.com, ns4.eu.topsec.com
NameserverAddressesNetwork (AS)Glue
ns1.ie.topsec.com3.251.73.93AS16509 AMAZON-02 - Amazon.com, Inc., US3.251.73.93
ns2.ie.topsec.com54.194.181.89AS16509 AMAZON-02 - Amazon.com, Inc., US54.194.181.89
ns3.ca.topsec.com35.215.15.148AS15169 GOOGLE - Google LLC, US35.215.15.148
ns4.eu.topsec.com78.46.147.245AS24940 HETZNER-AS - Hetzner Online GmbH, DE78.46.147.245

Checks

  • ✓ 4 nameservers #6
    Delegated to ns1.ie.topsec.com, ns2.ie.topsec.com, ns3.ca.topsec.com, ns4.eu.topsec.com.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 4 IPv4 /24s and 0 IPv6 /48s.
  • ✓ 3 autonomous systems #11
    The nameservers are spread over: AS15169 (GOOGLE - Google LLC, US): 1 address; AS16509 (AMAZON-02 - Amazon.com, Inc., US): 2 addresses; AS24940 (HETZNER-AS - Hetzner Online GmbH, DE): 1 address.
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • !
    No IPv6
    None of the nameservers has an IPv6 address, so IPv6-only resolvers can't reach them.
    #13

Nameservers

warn

4 of 4 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns1.ie.topsec.com 3.251.73.93NOERROR, 23 ms, authoritativenoyes / yesrefusedPowerDNS Authoritative Server 4.2.3 (built Sep 22 2020 15:14:34 by root@83d21071b350)
ns2.ie.topsec.com 54.194.181.89NOERROR, 23 ms, authoritativenoyes / yesrefusedPowerDNS Authoritative Server 4.2.3 (built Sep 22 2020 15:14:34 by root@83d21071b350)
ns3.ca.topsec.com 35.215.15.148NOERROR, 95 ms, authoritativenoyes / yesrefusedPowerDNS Authoritative Server 4.2.3 (built Sep 22 2020 15:14:34 by root@83d21071b350)
ns4.eu.topsec.com 78.46.147.245NOERROR, 4 ms, authoritativenoyes / yesrefusedPowerDNS Authoritative Server 4.4.1

Checks

  • ✓ All respond #14
    All 4 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: ns1.ie.topsec.com: "PowerDNS Authoritative Server 4.2.3 (built Sep 22 2020 15:14:34 by root@83d21071b350)"; ns2.ie.topsec.com: "PowerDNS Authoritative Server 4.2.3 (built Sep 22 2020 15:14:34 by root@83d21071b350)"; ns3.ca.topsec.com: "PowerDNS Authoritative Server 4.2.3 (built Sep 22 2020 15:14:34 by root@83d21071b350)"; ns4.eu.topsec.com: "PowerDNS Authoritative Server 4.4.1". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2026102201 · primary ns1.ie.topsec.com

Found

Primary (MNAME)
ns1.ie.topsec.com
Contact (RNAME)
support.topsec.com
Serial
2026102201
Refresh / retry
10800 s / 3600 s
Expire
604800 s
Negative TTL
3600 s

Serial per nameserver

NameserverSerial
ns1.ie.topsec.com (3.251.73.93)2026102201
ns2.ie.topsec.com (54.194.181.89)2026102201
ns3.ca.topsec.com (35.215.15.148)2026102201
ns4.eu.topsec.com (78.46.147.245)2026102201

Checks

  • ✓ Serial 2026102201 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 3h, retry 1h, expire 7d, negative TTL 1h.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns1.ie.topsec.com is one of the listed nameservers.
  • ✓ Contact support@topsec.com #25
    The SOA RNAME support.topsec.com means support@topsec.com.
  • ✓ Date-based serial #26
    The serial 2026102201 follows the YYYYMMDDnn convention (2026-10-22).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

39 records at the apex

Found

Read from
3.251.73.93:53
TypeValueTTL
SOAns1.ie.topsec.com. support.topsec.com. 2026102201 10800 3600 604800 36003600
NSns3.ca.topsec.com.86400
NSns4.eu.topsec.com.86400
NSns2.ie.topsec.com.86400
NSns1.ie.topsec.com.86400
A87.238.164.42300
MX10 eu-smtp-inbound-1.mimecast.com.10800
MX20 eu-smtp-inbound-2.mimecast.com.10800
TXT"MS=ms60060028"3600
TXT"TPVERIFICATION20190603"3600
TXT"_globalsign-domain-verification=rFayBAAZ88UhqW2VDOMQIYGzv1fucNKnl0RbYFe68e"3600
TXT"_msradc.rdweb.wvd.microsoft.com/arm/webclient/index.html"3600
TXT"access-domain-verification=0ba01a9823a12b42d74eebbdd14718689db7e606dfc29fc914f8d4343c409422"3600
TXT"adobe-sign-verification=b31e31713f43172aabd7b6f7358fbdda"3600
TXT"apple-domain-verification=9OLa4Esku9NhUUZI"3600
TXT"apple-domain-verification=aZ4yVTZGNPTB5tTu"3600
TXT"asv=d1deb07a33ae8d77bd4dcc39edb72a2f"3600
TXT"autodesk-domain-verification=gvXXz2jN21tVvwPgpToo"3600
TXT"c9n7d34pskrnpxcbxw7lf6zrxvzp8h8n"3600
TXT"cisco-ci-domain-verification=6e88357df1553f75368bb8f8097a316aecc5c020edc64f066288641349a42db3"3600
TXT"facebook-domain-verification=syrxxkayh8rgtqiicjwm6m4q3iipwy"3600
TXT"fastly-domain-delegation-fLkjrEiejf-588659-2023-03-20"3600
TXT"google-gws-recovery-domain-verification=52790693"3600
TXT"google-gws-recovery-domain-verification=53410496"3600
TXT"google-gws-recovery-domain-verification=54344470"3600
TXT"google-site-verification=3iuABHk-dyye6cwWUaIR4LIFOLHH_3nhepOYkjcgdB8"3600
TXT"google-site-verification=X7nyKYQB8sgIPuC4wDEcr0RkpHLAENPuF5MZD_9YoQU"3600
TXT"google-site-verification=pGFOeeb2z6IP9xE5-NW929OsDAYcvrlw70wxnLV7AkE"3600
TXT"jjxn35c43ss44jrjmvn1tcq1zyp03403"3600
TXT"klaviyo-site-verification=SHm3bV"3600
TXT"kyc5sq71rh0482jqs6bmwq40tqxzmv7k"3600
TXT"lime-domain-verification=8763A00587C7E3C"3600
TXT"ms-domain-verification=c27fa953-84b9-4650-b42b-362c4d024e28"3600
TXT"qxt48OD86EVhW3W8lG39ib5lEMa6Z3y1Ejljmok5QsEEeLwiD8z+lzKDCtLARnBiGg8keuYYX9SO8WjVOlfz0A=="3600
TXT"smartsheet-site-validation=2szqsBWY8-yzBvU54WaXgbh84tkU8Gkt"3600
TXT"smartsheet-site-validation=5YNK9ZhIDhTc2VNZ1m7DAonUJ93ZXJBz"3600
TXT"v=spf1 include:spf.kingspan.com include:spf.ultipro.com ip4:91.126.183.83 ~all"3600
TXT"xoifrGL/+ozNYBDgQXalId0d88oxJ6eXVDC1Y9gjcVVMvnZf3Xt16Y69DpigalM4LeIKvthbDX/aLV7Ep8IpcA=="3600
TXT"yandex-verification: 78350be2571c75ec"3600

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, MX 3h, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35