Domain report: legalzoom.com

Registration

info

.com generic · GoDaddy Corporate Domains, LLC · expires 2033-06-11

Found

TLD: .com (generic)
ICANN policies apply: yes
Registrar: GoDaddy Corporate Domains, LLC
Registered: 11 June 1999
Last changed: 22 July 2025
Expires: 11 June 2033
Status: client transfer prohibited
Registry nameservers: pdns1.ultradns.net, pdns2.ultradns.net, pdns3.ultradns.org, pdns4.ultradns.org, pdns5.ultradns.info, pdns6.ultradns.co.uk
RDAP server: https://rdap.verisign.com/com/v1/

Checks

i

.com is a generic TLD (gTLD)

Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.

#1
✓ TLD delegated and signed #2

.com is delegated in the root zone and DNSSEC-signed.
✓ Expires on 2033-06-11 #3

The registration is valid until 2033-06-11 (2424 days).
✓ Transfer locked #4

Registry status: client transfer prohibited.
✓ Registry and delegation match #5

The nameservers registered at the registry are the ones published in DNS.

Delegation

info

pdns1.ultradns.net, pdns2.ultradns.net, pdns3.ultradns.org, pdns4.ultradns.org, pdns5.ultradns.info, pdns6.ultradns.co.uk

Found

Parent zone: com
Delegation from: a.gtld-servers.net (192.5.6.30)
NS at the parent: pdns1.ultradns.net, pdns2.ultradns.net, pdns3.ultradns.org, pdns4.ultradns.org, pdns5.ultradns.info, pdns6.ultradns.co.uk
NS in the zone: pdns1.ultradns.net, pdns2.ultradns.net, pdns3.ultradns.org, pdns4.ultradns.org, pdns5.ultradns.info, pdns6.ultradns.co.uk

Nameserver	Addresses	Network (AS)	Glue
pdns1.ultradns.net	204.74.108.1 2001:502:f3ff::1	AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US	-
pdns2.ultradns.net	204.74.109.1 2610:a1:1014::1	AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US	-
pdns3.ultradns.org	199.7.68.1 2610:a1:1015::1	AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US	-
pdns4.ultradns.org	199.7.69.1 2001:502:4612::1	AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US	-
pdns5.ultradns.info	204.74.114.1 2610:a1:1016::1	AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US	-
pdns6.ultradns.co.uk	204.74.115.1 2610:a1:1017::1	AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US	-

Checks

✓ 6 nameservers #6

Delegated to pdns1.ultradns.net, pdns2.ultradns.net, pdns3.ultradns.org, pdns4.ultradns.org, pdns5.ultradns.info, pdns6.ultradns.co.uk.
✓ Parent and zone agree #7

The parent delegation and the zone's NS records list the same nameservers.
✓ No glue needed #8

All nameservers are outside the zone, so no glue records are needed.
✓ All names resolve #9

Every nameserver name has an address and is not an alias.
✓ Nameservers in different networks #10

The nameservers are spread over 6 IPv4 /24s and 6 IPv6 /48s.
i

All nameservers in one AS

All nameserver addresses are announced by one network operator (AS12008 (VERCARA - Vercara, LLC, US): 12 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.

#11
✓ Nameserver names under 4 TLDs #12

Nameserver names use the TLDs .info, .net, .org, .uk.
✓ All reachable over IPv6 #13

Every nameserver has an IPv6 address.

Nameservers

info

12 of 12 addresses answer authoritatively

Found

Nameserver	Answer	Recursion	TCP / EDNS	AXFR	Version
pdns1.ultradns.net 204.74.108.1	NOERROR, 3 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
pdns1.ultradns.net 2001:502:f3ff::1	NOERROR, 4 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
pdns2.ultradns.net 204.74.109.1	NOERROR, 3 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
pdns2.ultradns.net 2610:a1:1014::1	NOERROR, 3 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
pdns3.ultradns.org 199.7.68.1	NOERROR, 4 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
pdns3.ultradns.org 2610:a1:1015::1	NOERROR, 4 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
pdns4.ultradns.org 199.7.69.1	NOERROR, 31 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
pdns4.ultradns.org 2001:502:4612::1	NOERROR, 32 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
pdns5.ultradns.info 204.74.114.1	NOERROR, 3 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
pdns5.ultradns.info 2610:a1:1016::1	NOERROR, 4 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
pdns6.ultradns.co.uk 204.74.115.1	NOERROR, 13 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
pdns6.ultradns.co.uk 2610:a1:1017::1	NOERROR, 13 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver

Checks

✓ All respond #14

All 12 nameserver addresses answered.
✓ All authoritative #15

Every responding nameserver answers authoritatively for the zone.
✓ No recursion #16

The nameservers do not answer recursive queries for other domains.
i

Identifying string disclosed

These nameservers answer version queries with a string that is not a version number: pdns1.ultradns.net: "UltraDNS Nameserver"; pdns2.ultradns.net: "UltraDNS Nameserver"; pdns3.ultradns.org: "UltraDNS Nameserver"; pdns4.ultradns.org: "UltraDNS Nameserver"; pdns5.ultradns.info: "UltraDNS Nameserver"; pdns6.ultradns.co.uk: "UltraDNS Nameserver".

#17
✓ Zone transfers refused #18

No nameserver allows a zone transfer to the public.
✓ TCP supported #19

All nameservers answer over TCP.
✓ EDNS supported #20

All nameservers support EDNS(0).
✓ Public addresses #21

All nameserver addresses are publicly routable.

SOA

pass

serial 2020082101 · primary pdns1.ultradns.net

Found

Primary (MNAME): pdns1.ultradns.net
Contact (RNAME): serverops.legalzoom.com
Serial: 2020082101
Refresh / retry: 1200 s / 180 s
Expire: 2419200 s
Negative TTL: 86400 s

Serial per nameserver

Nameserver	Serial
pdns1.ultradns.net (204.74.108.1)	2020082101
pdns1.ultradns.net (2001:502:f3ff::1)	2020082101
pdns2.ultradns.net (204.74.109.1)	2020082101
pdns2.ultradns.net (2610:a1:1014::1)	2020082101
pdns3.ultradns.org (199.7.68.1)	2020082101
pdns3.ultradns.org (2610:a1:1015::1)	2020082101
pdns4.ultradns.org (199.7.69.1)	2020082101
pdns4.ultradns.org (2001:502:4612::1)	2020082101
pdns5.ultradns.info (204.74.114.1)	2020082101
pdns5.ultradns.info (2610:a1:1016::1)	2020082101
pdns6.ultradns.co.uk (204.74.115.1)	2020082101
pdns6.ultradns.co.uk (2610:a1:1017::1)	2020082101

Checks

✓ Serial 2020082101 everywhere #22

All nameservers serve the same version of the zone.
✓ Timers within recommendations #23

SOA refresh 20m, retry 3m, expire 28d, negative TTL 1d.
✓ Primary is a public nameserver #24

The primary nameserver pdns1.ultradns.net is one of the listed nameservers.
✓ Contact serverops@legalzoom.com #25

The SOA RNAME serverops.legalzoom.com means serverops@legalzoom.com.
✓ Date-based serial #26

The serial 2020082101 follows the YYYYMMDDnn convention (2020-08-21).

DNSSEC

warn

Not signed

Found

Validated by resolver: no

Checks

!

Not signed

The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.

#27

Records

warn

72 records at the apex

Found

Read from: 204.74.108.1:53

Type	Value	TTL
SOA	pdns1.ultradns.net. serverops.legalzoom.com. 2020082101 1200 180 2419200 86400	86400
NS	pdns1.ultradns.net.	300
NS	pdns2.ultradns.net.	300
NS	pdns3.ultradns.org.	300
NS	pdns4.ultradns.org.	300
NS	pdns5.ultradns.info.	300
NS	pdns6.ultradns.co.uk.	300
A	18.245.31.12	60
A	18.245.31.70	60
A	18.245.31.82	60
A	18.245.31.84	60
MX	1 aspmx.l.google.com.	3600
MX	5 alt1.aspmx.l.google.com.	3600
MX	5 alt2.aspmx.l.google.com.	3600
MX	10 alt3.aspmx.l.google.com.	3600
MX	10 alt4.aspmx.l.google.com.	3600
TXT	"HJS-8J9-6H4"	300
TXT	"MS=ms47245407"	300
TXT	"MS=ms73140311"	300
TXT	"8n0XF-SDbl11iPgGCdjk6tjezMlO"	300
TXT	"7y9syq59n4bpv6j75dk91kxplgpbbtqs"	300
TXT	"9nj2cw11g01y7mn8tdj5mfkc2g3xwtvg"	300
TXT	"_9nheyhelhevfziw5cm9hdfgtn52cvm6"	300
TXT	"_bnzdlzxysglos1pa8yut29fme6ier93"	300
TXT	"_qdjvy8ohqxopaeovhqhsc2qbbjb97j1"	300
TXT	"lovable_verification=YS24lnAFZLsttAAyCMw3"	300
TXT	"apple-domain-verification=1KQbMCVyfdcklLT6"	300
TXT	"SFMC-8PwJd8afyNWSLNS7vR7GlIeJNyKzdapciDpGNnfz"	300
TXT	"SFMC-GQzcy1oicvNrP3bPcENPjsOfNshxRotFtOpgS_Yn"	300
TXT	"SFMC-pSVqtZ7X7splYcJkhhc3wunbUr0rQvvF8W7YT3th"	300
TXT	"docusign=ba750583-cb86-4ac0-a679-14ad91b88a0b"	300
TXT	"jamf-site-verification=4L8NeIvmy7Xr0ciMGzN_xw"	300
TXT	"\"v=msv1 t=21B3BAC3-B4CA-46A7-925A-D1455747ED86\" "	300
TXT	"autodesk-domain-verification=09TgKkm6I_-4mvjAwS8t"	300
TXT	"citrix-verification-code=5ce52c3b-cfe0-42da-8303-9f66"	300
TXT	"openai-domain-verification=dv-EkWEjWUWcwZ1W2F0YgUNy7gg"	300
TXT	"openai-domain-verification=dv-T16ZOqyUKwR1gsv3skiCPSo5"	300
TXT	"docker-verification=853aa61b-e132-44af-b8a7-52db0ceedc00"	300
TXT	"mongodb-site-verification=UTo14k9rely0ARLvjFToy4yTzQvlGzBu"	300
TXT	"segment-site-verification=npb6MAeOZ2Lzwc1KVutx2PlnSlBMW2Tz"	300
TXT	"cursor-domain-verification-f51arz=Ev0MjwxL1MUbqPrZTq2GHRJbB"	300
TXT	"teamviewer-sso-verification=299edd3dcc7342b9aa3a04edc61bf8ec"	300
TXT	"workplace-domain-verification=OBdkdjRF1PsyTUzURljTYIW90UwjZi"	300
TXT	"onetrust-domain-verification=1bf9adffa182489abe533eb03afaa5a3"	300
TXT	"uber-domain-verification=4fce58d7-d0a7-49b3-9ceb-832dca6f8c22"	300
TXT	"anthropic-domain-verification-f8yn4t=UeP45haigUfajKK89jCAtCjlf"	300
TXT	"gather-domain-verification=97836bd6-5e53-4999-8ac2-27dba12b2c96"	300
TXT	"spycloud-domain-verification=03cd16c5-ad4e-4fda-a3ae-79d282fb9ae5"	300
TXT	"slack-domain-verification=7UTARBH7QQizlB0Gu0I1yQjPrkPNo92o4li6UHDw"	300
TXT	"_twilio=twilio-domain-verification=6ff3228404d9c3e2c910a9ed6dd531ad"	300
TXT	"google-site-verification=2HUGs09o0JM-TT5lJsrBc_fZc5AD7jKZcOudyDY2mng"	300
TXT	"google-site-verification=2qreLc83cf_3WIfOKwt7qaphMXKbUBc56mFY0OPA1-w"	300
TXT	"google-site-verification=RxJXueSI4e1lyS44411up9UACc1_FNWFpwbuG0zb0VE"	300
TXT	"sign-in-app-verification=ZWbf6UQWCPKNVNeqsEmo_s6SIHm0tcF5BPAD0rp3SR8"	300
TXT	"browserstack-domain-verification=3d4e0953-0fed-4020-b90f-8134dfde4db2"	300
TXT	"launchdarkly-domain-verification=05156146-2b11-4344-bf7c-858af56ae041"	300
TXT	"mgverify=f141aead99573a463dd4b8c351fd04373fda28b82f859196af82cb99601f6a49"	300
TXT	"aEphFcbI7lOV9Uqs82fXaZt5oATzmYgpkh2ZuFk1FyogG3gqeukuEeDv5Sgxqx8Sauix/bMsT5uRJw4qgbnJpA=="	300
TXT	"adobe-idp-site-verification=4ac1f0927f278f95fa474157944df8c049f3aa2e31013d991ad734cec4db1441"	300
TXT	"atlassian-domain-verification=ZeWGUIweG611+8Ok7GKk1ZAJFp+kTRD6UBOP+Gc5ymO4SsDv2zectOh4MV7Rr6O8"	300
TXT	"k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O2J9N14hRprzByFwfQW76yojh54Xu3uSbQ3JP0A7k8o8GutRF8zbFUA8n0ZH2y0cIEjMliXY4W4LwPA7m4q0ObmvSjhd63O9d8z1XkUBwIDAQAB"	300
TXT	"v=spf1 ip4:23.21.109.197 ip4:23.21.109.212 ip4:147.160.167.0/26 include:cust-spf.exacttarget.com include:_spf.salesforce.com include:spf.mandrillapp.com include:helpscoutemail.com include:_aspf.spf01.hubspotemail.net include:_spf.google.com -all"	300
CAA	0 iodef "mailto:security@legalzoom.com"	86400
CAA	0 issue "amazonaws.com"	86400
CAA	0 issue "digicert.com"	86400
CAA	0 issue "entrust.net"	86400
CAA	0 issue "godaddy.com"	86400
CAA	0 issue "letsencrypt.org"	86400
CAA	0 issue "pki.goog"	86400
CAA	0 issue "sectigo.com"	86400
CAA	0 issue "trustwave.com"	86400
CAA	0 issuewild ";"	86400

Checks

!

Very low TTLs

These records have a TTL below 5m, causing extra queries and slower lookups: A (1m). Low TTLs are useful just before a planned change. The NS TTL at the parent is 2d and in the zone 5m; resolvers may use either.

#32
✓ No CNAME at the apex #33

The zone apex has no CNAME record.
✓ No wildcard #34

Names that don't exist return NXDOMAIN.
✓ CAA restricts issuance #35

Certificates may be issued by: amazonaws.com, digicert.com, entrust.net, godaddy.com, letsencrypt.org, pki.goog, sectigo.com, trustwave.com, none (issuance forbidden).