Domain report: mayerbrown.com

Registration

info

.com generic · MarkMonitor Inc. · expires 2027-05-27

Found

TLD: .com (generic)
ICANN policies apply: yes
Registrar: MarkMonitor Inc.
Registered: 28 May 1995
Last changed: 8 July 2025
Expires: 27 May 2027
Status: client delete prohibited, client transfer prohibited, client update prohibited
Registry nameservers: ns1.mayerbrown.com, ns2.mayerbrown.com, ns3.mayerbrown.com, ns4.mayerbrown.com, ns5.mayerbrown.com
RDAP server: https://rdap.verisign.com/com/v1/

Checks

i

.com is a generic TLD (gTLD)

Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.

#1
✓ TLD delegated and signed #2

.com is delegated in the root zone and DNSSEC-signed.
✓ Expires on 2027-05-27 #3

The registration is valid until 2027-05-27 (216 days).
✓ Transfer locked #4

Registry status: client delete prohibited, client transfer prohibited, client update prohibited.
✓ Registry and delegation match #5

The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

ns1.mayerbrown.com, ns2.mayerbrown.com, ns3.mayerbrown.com, ns4.mayerbrown.com, ns5.mayerbrown.com

Found

Parent zone: com
Delegation from: a.gtld-servers.net (192.5.6.30)
NS at the parent: ns1.mayerbrown.com, ns2.mayerbrown.com, ns3.mayerbrown.com, ns4.mayerbrown.com, ns5.mayerbrown.com
NS in the zone: ns1.mayerbrown.com, ns2.mayerbrown.com, ns3.mayerbrown.com, ns4.mayerbrown.com, ns5.mayerbrown.com, ns6.mayerbrown.com

Nameserver	Addresses	Network (AS)	Glue
ns1.mayerbrown.com	143.58.1.55	AS19977 MBRML-AS - Mayer Brown LLP, US	143.58.1.55
ns2.mayerbrown.com	143.58.9.55	AS29120 ROWEMAW-AS - Mayer Brown International LLP, GB	143.58.9.55
ns3.mayerbrown.com	143.58.1.55	AS19977 MBRML-AS - Mayer Brown LLP, US	143.58.1.55
ns4.mayerbrown.com	143.58.5.55	AS19977 MBRML-AS - Mayer Brown LLP, US	143.58.5.55
ns5.mayerbrown.com	143.58.13.55	AS29120 ROWEMAW-AS - Mayer Brown International LLP, GB	143.58.13.55
ns6.mayerbrown.com (zone only)	143.58.13.55	AS29120 ROWEMAW-AS - Mayer Brown International LLP, GB	-

Checks

✓ 5 nameservers #6

Delegated to ns1.mayerbrown.com, ns2.mayerbrown.com, ns3.mayerbrown.com, ns4.mayerbrown.com, ns5.mayerbrown.com.
!

NS sets differ

The nameservers at the parent and in the zone should be the same. Only in the zone: ns6.mayerbrown.com. ns1.mayerbrown.com, ns2.mayerbrown.com, ns3.mayerbrown.com, ns4.mayerbrown.com, ns5.mayerbrown.com, ns6.mayerbrown.com report NS ns1.mayerbrown.com ns2.mayerbrown.com ns3.mayerbrown.com ns4.mayerbrown.com ns5.mayerbrown.com ns6.mayerbrown.com.

#7
✓ Glue present and correct #8

Glue is published for the nameservers inside the zone: ns1.mayerbrown.com, ns2.mayerbrown.com, ns3.mayerbrown.com, ns4.mayerbrown.com, ns5.mayerbrown.com.
✓ All names resolve #9

Every nameserver name has an address and is not an alias.
✓ Nameservers in different networks #10

The nameservers are spread over 4 IPv4 /24s and 0 IPv6 /48s.
✓ 2 autonomous systems #11

The nameservers are spread over: AS19977 (MBRML-AS - Mayer Brown LLP, US): 3 addresses; AS29120 (ROWEMAW-AS - Mayer Brown International LLP, GB): 3 addresses.
i

All nameserver names under .com

All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.

#12
!

No IPv6

None of the nameservers has an IPv6 address, so IPv6-only resolvers can't reach them.

#13

Nameservers

pass

6 of 6 addresses answer authoritatively

Found

Nameserver	Answer	Recursion	TCP / EDNS	AXFR	Version
ns1.mayerbrown.com 143.58.1.55	NOERROR, 120 ms, authoritative	no	yes / yes	refused	-
ns2.mayerbrown.com 143.58.9.55	NOERROR, 26 ms, authoritative	no	yes / yes	refused	-
ns3.mayerbrown.com 143.58.1.55	NOERROR, 112 ms, authoritative	no	yes / yes	refused	-
ns4.mayerbrown.com 143.58.5.55	NOERROR, 112 ms, authoritative	no	yes / yes	refused	-
ns5.mayerbrown.com 143.58.13.55	NOERROR, 24 ms, authoritative	no	yes / yes	refused	-
ns6.mayerbrown.com 143.58.13.55	NOERROR, 26 ms, authoritative	no	yes / yes	refused	-

Checks

✓ All respond #14

All 6 nameserver addresses answered.
✓ All authoritative #15

Every responding nameserver answers authoritatively for the zone.
✓ No recursion #16

The nameservers do not answer recursive queries for other domains.
✓ No version disclosed #17

The nameservers don't reveal their software version.
✓ Zone transfers refused #18

No nameserver allows a zone transfer to the public.
✓ TCP supported #19

All nameservers answer over TCP.
✓ EDNS supported #20

All nameservers support EDNS(0).
✓ Public addresses #21

All nameserver addresses are publicly routable.

SOA

pass

serial 2026102101 · primary ns1.mayerbrown.com

Found

Primary (MNAME): ns1.mayerbrown.com
Contact (RNAME): admin.mayerbrown.com
Serial: 2026102101
Refresh / retry: 43200 s / 600 s
Expire: 1209600 s
Negative TTL: 3600 s

Serial per nameserver

Nameserver	Serial
ns1.mayerbrown.com (143.58.1.55)	2026102101
ns2.mayerbrown.com (143.58.9.55)	2026102101
ns3.mayerbrown.com (143.58.1.55)	2026102101
ns4.mayerbrown.com (143.58.5.55)	2026102101
ns5.mayerbrown.com (143.58.13.55)	2026102101
ns6.mayerbrown.com (143.58.13.55)	2026102101

Checks

✓ Serial 2026102101 everywhere #22

All nameservers serve the same version of the zone.
✓ Timers within recommendations #23

SOA refresh 12h, retry 10m, expire 14d, negative TTL 1h.
✓ Primary is a public nameserver #24

The primary nameserver ns1.mayerbrown.com is one of the listed nameservers.
✓ Contact admin@mayerbrown.com #25

The SOA RNAME admin.mayerbrown.com means admin@mayerbrown.com.
✓ Date-based serial #26

The serial 2026102101 follows the YYYYMMDDnn convention (2026-10-21).

DNSSEC

warn

Not signed

Found

Validated by resolver: no

Checks

!

Not signed

The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.

#27

Records

pass

35 records at the apex

Found

Read from: 143.58.1.55:53

Type	Value	TTL
SOA	ns1.mayerbrown.com. admin.mayerbrown.com. 2026102101 43200 600 1209600 3600	3600
NS	ns6.mayerbrown.com.	172800
NS	ns2.mayerbrown.com.	172800
NS	ns4.mayerbrown.com.	172800
NS	ns3.mayerbrown.com.	172800
NS	ns5.mayerbrown.com.	172800
NS	ns1.mayerbrown.com.	172800
A	23.100.43.208	3600
MX	2 mayerbrown-com.mail.protection.outlook.com.	3600
TXT	"intersight=fa311ac3bcb02cdeadfd0bb59e8ba0f6c20a9b9778d4c8fa26cd566dbf971a5c"	3600
TXT	"_544avomg1pruqvcd3pmvbyt0ldjiv5w"	3600
TXT	"miro-verification=0772165b846e4d2474e5e676489ff7d94455864a"	3600
TXT	"google-site-verification=tQcPkz2kw4SPOvx-Cn-n6dVckPifdtViI7jIwBtd9d4"	3600
TXT	"google-site-verification=kiS5rlx1gmEvCuTYSAmSkGbvCUiIw9fjxqWePKyni6M"	3600
TXT	"apple-domain-verification=wiigKoOnTXAzjUCa"	3600
TXT	"anthropic-domain-verification-w3d2t1=bZnzI9FRov2kLZ9qdl0uCABVw"	3600
TXT	"docusign=a243ab19-3d46-4ec3-94fd-2d5da017e321"	3600
TXT	"cisco-ci-domain-verification=14d45740d581c3724734ec4fcef6c1a523a8866ab7f9b429713e22d581a2424f"	3600
TXT	"openai-domain-verification=dv-pwvIGENwxzOEET83TNRsNQyf"	3600
TXT	"MS=ms14764917"	3600
TXT	"apple-domain-verification=5P7COqX0gZU20FE7"	3600
TXT	"vmware-cloud-verification-8edfb4c3-35a5-49e8-9393-805fc2b3255c"	3600
TXT	"webexdomainverification.=42e6a038-e82e-4c75-9bef-0aeefa096f67"	3600
TXT	"google-site-verification=oVIiQDQQ3Ce-cPUBumZHSE3Y8jy4IKH7cAVrHqJF1sQ"	3600
TXT	"canva-site-verification=wV-gXFNeKSzhHX2kGQSFjg"	3600
TXT	"perplexity-ai-domain-verification-7rjynn=69BYZ6CW6pJK0110YrwHT8Nqj"	3600
TXT	"v=spf1 include:spf.protection.outlook.com include:us._netblocks.mimecast.com include:egress.mayerbrown.com -all"	3600
TXT	"google-site-verification=E0MCr_Ezg2PDCtcdvN_gxCluJNNGJxKnpDFCrQxtNuE"	3600
CAA	0 issue "digicert.com"	3600
CAA	0 issue "awstrust.com"	3600
CAA	0 issue "letsencrypt.org"	3600
CAA	0 issue "sectigo.com"	3600
CAA	0 issue "amazon.com"	3600
CAA	0 issue "amazontrust.com"	3600
CAA	0 issue "amazonaws.com"	3600

Checks

✓ TTLs within range #32

TTLs: A 1h, MX 1h, NS 2d.
✓ No CNAME at the apex #33

The zone apex has no CNAME record.
✓ No wildcard #34

Names that don't exist return NXDOMAIN.
✓ CAA restricts issuance #35

Certificates may be issued by: digicert.com, awstrust.com, letsencrypt.org, sectigo.com, amazon.com, amazontrust.com, amazonaws.com.