natwest.com

Checked 22 October 2026, 10:00 UTC · via 8.8.8.8
!Passed with warnings
25 passed 2 warnings 0 failed 4 info

Registration

info

.com generic · CSC Corporate Domains, Inc. · expires 2027-02-12

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
11 February 1997
Last changed
8 February 2026
Expires
12 February 2027
Status
client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
udns1.cscdns.net, udns2.cscdns.uk
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-02-12 #3
    The registration is valid until 2027-02-12 (112 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

udns1.cscdns.net, udns2.cscdns.uk

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
udns1.cscdns.net, udns2.cscdns.uk
NS in the zone
udns1.cscdns.net, udns2.cscdns.uk
NameserverAddressesNetwork (AS)Glue
udns1.cscdns.net204.74.66.1 2001:502:f3ff::201AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-
udns2.cscdns.uk204.74.111.1 2001:502:4612::201AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-

Checks

  • i
    2 nameservers
    Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: udns1.cscdns.net, udns2.cscdns.uk.
    #6
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 2 IPv4 /24s and 2 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS12008 (VERCARA - Vercara, LLC, US): 4 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • ✓ Nameserver names under 2 TLDs #12
    Nameserver names use the TLDs .net, .uk.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

info

4 of 4 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
udns1.cscdns.net 204.74.66.1NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
udns1.cscdns.net 2001:502:f3ff::201NOERROR, 4 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
udns2.cscdns.uk 204.74.111.1NOERROR, 13 ms, authoritativenoyes / yesrefused-
udns2.cscdns.uk 2001:502:4612::201NOERROR, 31 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver

Checks

  • ✓ All respond #14
    All 4 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: udns1.cscdns.net: "UltraDNS Nameserver"; udns2.cscdns.uk: "UltraDNS Nameserver".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2019116739 · primary udns1.cscdns.net

Found

Primary (MNAME)
udns1.cscdns.net
Contact (RNAME)
premiumdns.support.neustar
Serial
2019116739
Refresh / retry
3600 s / 600 s
Expire
604800 s
Negative TTL
86400 s

Serial per nameserver

NameserverSerial
udns1.cscdns.net (204.74.66.1)2019116739
udns1.cscdns.net (2001:502:f3ff::201)2019116739
udns2.cscdns.uk (204.74.111.1)2019116739
udns2.cscdns.uk (2001:502:4612::201)2019116739

Checks

  • ✓ Serial 2019116739 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 1h, retry 10m, expire 7d, negative TTL 1d.
  • ✓ Primary is a public nameserver #24
    The primary nameserver udns1.cscdns.net is one of the listed nameservers.
  • ✓ Contact premiumdns@support.neustar #25
    The SOA RNAME premiumdns.support.neustar means premiumdns@support.neustar.
  • ✓ Timestamp serial #26
    The serial 2019116739 is a Unix timestamp (2033-12-25 09:45 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

warn

57 records at the apex

Found

Read from
204.74.66.1:53
TypeValueTTL
SOAudns1.cscdns.net. premiumdns.support.neustar. 2019116739 3600 600 604800 8640086400
NSudns1.cscdns.net.86400
NSudns2.cscdns.uk.86400
A150.171.109.1068
AAAA2603:1061:14:63::110
MX10 mail01.rbs.com.86400
MX10 mail02.rbs.com.86400
MX10 mail03.rbs.com.86400
MX10 mail04.rbs.com.86400
MX10 mail13.rbs.com.86400
MX10 mail14.rbs.com.86400
MX10 mail15.rbs.com.86400
MX10 mail16.rbs.com.86400
TXT"MS=ms82743154"86400
TXT"dc877d15-6af2-44d6-88f0-bc17059300ba"86400
TXT"apple-domain-verification=IqXcrZfN7rjbjn9g"86400
TXT"flexera-domain-verification-bnpliwdvjtzqqtjp"86400
TXT"flexera-domain-verification-gqlthyqyxzftximq"86400
TXT"jamf-site-verification=vMbdEdMBkAIKuOR1hDTeWw"86400
TXT"amazonses:Sg6m6akLDWABsjpzrzr7pUogQTqEWT0M7pfdrwP5bjs="86400
TXT"adobe-sign-verification=a8c27034c1cd39851b67d5d68276dcd6"86400
TXT"mongodb-site-verification=T0NwD4yuhh81Or9GwaLxjrG8On2lI48i"86400
TXT"facebook-domain-verification=pm28mp1iyyit8ndzk9syde2lbo7sf3"86400
TXT"smartsheet-site-validation=M_PCaY4fbTcNDJuYR4NOwafPzt8T4dvM"86400
TXT"twilio-domain-verification=acbe70f92d5a4aef2b80c928ecfc2f19"86400
TXT"onetrust-domain-verification=19de748a2f884c84928562a9b69e96ac"86400
TXT"dtm-domain-verification=i2jvBQJK08uT_i4KWgsbVCx-Z6cnGZiMqHGRKmkHiiM"86400
TXT"google-site-verification=TcUnRdI0f2nLsJH24Wl5eer6XTTYq2bREFBStt6nsTA"86400
TXT"google-site-verification=k1rgRZEsZdrUjWUuva53F0tv-0JuTQs5aK9Oobxknrk"86400
TXT"google-site-verification=zQZVZfWOg-1f5LxPoceTDWXde5_5DZbRe7P5XxXlq6U"86400
TXT"apple-domain-verification=0x7XCbJmA_cX17EzsF-NA5fj6kfju6wwJaqFiMu45Os"86400
TXT"pexip-portal-domain-verification=5b44155a-b3af-4ff2-afb6-16562cbb8540"86400
TXT"pexip-ms-tenant-domain-verification=5b44155a-b3af-4ff2-afb6-16562cbb8540"86400
TXT"neat-pulse-domain-verification-1nNVB7N=b93a5fbe-7d16-43a1-b541-87476dd74c01"86400
TXT"Yn5wRXwsSo/zzcEu5AgquIu135Bt864lYgHlPFK+XTdkPdtzolNAY4oUGdCAJvNR2OLPPUTceFwp5OA/jtZsrA=="86400
TXT"hcp-domain-verification=10cebe53ac6a032497cf67ca6e857fe9902b9e1844bbab189aded51432075cf2"86400
TXT"hcp-domain-verification=15bb2b571cbf61eb11972a1a7ea4d6b3b0bd6604c171c45e6726165609b2b8c9"86400
TXT"hcp-domain-verification=17967ea65f35f46b995726e587d90573ccac6aaf23e3a8f28282b224d23e9b60"86400
TXT"hcp-domain-verification=497e4d1940aab483a1cf8bd4ca26ea8e37bb2521d6b4ea0e4f6f163d0fa16c6a"86400
TXT"hcp-domain-verification=550d75fe9c7804780b08133b69728475969e92093740d822ccced90ad4722d5d"86400
TXT"hcp-domain-verification=60ca223d005299e20f4933cdd5b6a27393b4641cef4d564e8a861893a17d2eb4"86400
TXT"hcp-domain-verification=60e716a60d925c6c12aeea9c8ae5738cabe3b1aa9f00362e54ccd754d569adb5"86400
TXT"hcp-domain-verification=74869860450b7ce46a6658639511f428ec5bbb64eb4b177e7f4eda268e01ac50"86400
TXT"hcp-domain-verification=7c7a2fdf65b44b4887d8d0986f694d303c3b71453d0d8872cbce8b18c2b9edcf"86400
TXT"hcp-domain-verification=b1e2282560488a8bf14b8952781a9ff1ca7b234697820554f9ebd5aa9f54c5ba"86400
TXT"hcp-domain-verification=b4330a5d7c182c65b9eb6c85ce04f5c9886d1bed696dda30664c0029efb3fc15"86400
TXT"hcp-domain-verification=de797d3000d1f851719d4ede8b7d4110f4f921a58ccb5362cbdafe5286440841"86400
TXT"hcp-domain-verification=e566b1812b659c3390743ac24872a39415b91e0c6fd93b92016a9fa52677fbb2"86400
TXT"hcp-domain-verification=e5befca56b8cdc255fac8d33bcccdfcf400a9febacce2dd9b35d04551793e3a3"86400
TXT"hcp-domain-verification=f28ba6d6d02efe319be4de3f47ebfe827b80963ad3fc269bb7abea3c6142ac63"86400
TXT"adobe-idp-site-verification=641792395842e9c7dfd8d65c821ed7a9e09eb29ce1e518d34ca193bdf66fa4ec"86400
TXT"atlassian-domain-verification=flnamO4dwq3z3g3lqA/2XdN9LE4I1BgfZstm/2YLjis1uhLVSkkDPyxeC197djVo"86400
TXT"v=spf1 ip4:155.136.80.0/24 ip4:80.75.73.242 ip4:81.145.55.71 ip4:82.144.239.194 ip4:195.3.184.231 ip4:195.3.184.230 ip4:195.225.218.101 ip4:195.184.243.2 ip4:155.136.18.0/24 ip4:155.136.59.66 ip4:155.136.63.66 -all"86400
CAA0 iodef "mailto:RBS.Group.PKI.Certificates@rbs.co.uk"21600
CAA0 issue "digicert.com"21600
CAA0 issue "quovadisglobal.com"21600
CAA0 issue "sectigo.com"21600

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: A (8s), AAAA (10s). Low TTLs are useful just before a planned change. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: digicert.com, quovadisglobal.com, sectigo.com.