ncr.com

Checked 22 October 2026, 10:01 UTC · via 8.8.8.8
✗Problems found
24 passed 2 warnings 1 failed 4 info

Registration

info

.com generic · Network Solutions, LLC · expires 2027-05-01

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
Network Solutions, LLC
Registered
30 April 1987
Last changed
2 March 2022
Expires
1 May 2027
Status
client transfer prohibited
Registry nameservers
dbru.br.ns.els-gms.att.net, dmtu.mt.ns.els-gms.att.net, ncrns1.ncr.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-05-01 #3
    The registration is valid until 2027-05-01 (190 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

dbru.br.ns.els-gms.att.net, dmtu.mt.ns.els-gms.att.net, ncrns1.ncr.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
dbru.br.ns.els-gms.att.net, dmtu.mt.ns.els-gms.att.net, ncrns1.ncr.com
NS in the zone
dbru.br.ns.els-gms.att.net, dmtu.mt.ns.els-gms.att.net, ncrns1.ncr.com, ncrns11.ncr.com
NameserverAddressesNetwork (AS)Glue
dbru.br.ns.els-gms.att.net68.94.156.134 2001:1890:1ff:9f0:68:94:156:134AS7018 ATT-INTERNET4 - AT&T Enterprises, LLC, US AS7018 ATT-INTERNET4 - AT&T Enterprises, LLC, US-
dmtu.mt.ns.els-gms.att.net99.99.99.134 2001:1890:1ff:9f1:99:99:99:134AS7018 ATT-INTERNET4 - AT&T Enterprises, LLC, US AS7018 ATT-INTERNET4 - AT&T Enterprises, LLC, US-
ncrns1.ncr.com192.127.252.2AS14962 NCR-252 - NCR Voyix Corporation, US192.127.252.2
ncrns11.ncr.com (zone only)192.127.252.8AS14962 NCR-252 - NCR Voyix Corporation, US-

Checks

  • ✓ 3 nameservers #6
    Delegated to dbru.br.ns.els-gms.att.net, dmtu.mt.ns.els-gms.att.net, ncrns1.ncr.com.
  • !
    NS sets differ
    The nameservers at the parent and in the zone should be the same. Only in the zone: ncrns11.ncr.com. dbru.br.ns.els-gms.att.net, dmtu.mt.ns.els-gms.att.net, ncrns1.ncr.com, ncrns11.ncr.com report NS dbru.br.ns.els-gms.att.net dmtu.mt.ns.els-gms.att.net ncrns1.ncr.com ncrns11.ncr.com.
    #7
  • ✓ Glue present and correct #8
    Glue is published for the nameservers inside the zone: ncrns1.ncr.com.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • i
    One address family in one network
    all IPv6 addresses are in 2001:1890:1ff::/48, while the other address family is spread over several networks.
    #10
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS14962 (NCR-252 - NCR Voyix Corporation, US): 2 addresses; AS7018 (ATT-INTERNET4 - AT&T Enterprises, LLC, US): 4 addresses.
  • ✓ Nameserver names under 2 TLDs #12
    Nameserver names use the TLDs .com, .net.
  • i
    Partly IPv6
    These nameservers have no IPv6 address: ncrns1.ncr.com, ncrns11.ncr.com.
    #13

Nameservers

fail

6 of 6 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
dbru.br.ns.els-gms.att.net 68.94.156.134NOERROR, 144 ms, authoritativenoyes / yesrefused-
dbru.br.ns.els-gms.att.net 2001:1890:1ff:9f0:68:94:156:134NOERROR, 122 ms, authoritativenono / yesrefused-
dmtu.mt.ns.els-gms.att.net 99.99.99.134NOERROR, 131 ms, authoritativenoyes / yesrefused-
dmtu.mt.ns.els-gms.att.net 2001:1890:1ff:9f1:99:99:99:134NOERROR, 108 ms, authoritativenono / yesrefused-
ncrns1.ncr.com 192.127.252.2NOERROR, 117 ms, authoritativenoyes / yesrefused-
ncrns11.ncr.com 192.127.252.8NOERROR, 126 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 6 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✗
    No DNS over TCP
    DNS over TCP is required (RFC 7766); without it, large answers such as DNSSEC responses fail. Not answering over TCP: dbru.br.ns.els-gms.att.net (2001:1890:1ff:9f0:68:94:156:134): read tcp [2a01:4f8:1c1c:eebf::1]:36498->[2001:1890:1ff:9f0:68:94:156:134]:53: read: connection reset by peer; dmtu.mt.ns.els-gms.att.net (2001:1890:1ff:9f1:99:99:99:134): read tcp [2a01:4f8:1c1c:eebf::1]:56690->[2001:1890:1ff:9f1:99:99:99:134]:53: read: connection reset by peer.
    #19
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2010104991 · primary ncrns1.ncr.com

Found

Primary (MNAME)
ncrns1.ncr.com
Contact (RNAME)
ncrdomains.ncrvoyix.com
Serial
2010104991
Refresh / retry
10800 s / 3600 s
Expire
2592000 s
Negative TTL
900 s

Serial per nameserver

NameserverSerial
dbru.br.ns.els-gms.att.net (68.94.156.134)2010104991
dbru.br.ns.els-gms.att.net (2001:1890:1ff:9f0:68:94:156:134)2010104991
dmtu.mt.ns.els-gms.att.net (99.99.99.134)2010104991
dmtu.mt.ns.els-gms.att.net (2001:1890:1ff:9f1:99:99:99:134)2010104991
ncrns1.ncr.com (192.127.252.2)2010104991
ncrns11.ncr.com (192.127.252.8)2010104991

Checks

  • ✓ Serial 2010104991 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 3h, retry 1h, expire 30d, negative TTL 15m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ncrns1.ncr.com is one of the listed nameservers.
  • ✓ Contact ncrdomains@ncrvoyix.com #25
    The SOA RNAME ncrdomains.ncrvoyix.com means ncrdomains@ncrvoyix.com.
  • ✓ Timestamp serial #26
    The serial 2010104991 is a Unix timestamp (2033-09-12 02:29 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

43 records at the apex

Found

Read from
68.94.156.134:53
TypeValueTTL
SOAncrns1.ncr.com. ncrdomains.ncrvoyix.com. 2010104991 10800 3600 2592000 900300
NSdbru.br.ns.els-gms.att.net.300
NSncrns11.ncr.com.300
NSncrns1.ncr.com.300
NSdmtu.mt.ns.els-gms.att.net.300
A192.127.202.60300
MX10 mxb-00209e01.gslb.pphosted.com.300
MX10 mxa-00209e01.gslb.pphosted.com.300
TXT"cnb5q272ao83043mq5410ccq3h"300
TXT"cisco-ci-domain-verification=5e265df5025db2c69c62da783cf04312feb26cc38e25723c04fd2400770f8186"300
TXT"fj2ddpom60d69usiuujgmsppl6"300
TXT"atlassian-domain-verification=yVT4yhK55eJl2mViplTxQep2Nq4QN2Sd70yO/mhJ1sEGNqCoQj1WtG91hyvoY63q"300
TXT"adobe-sign-verification=33d6f19ffe8472b1b2a0cca1c6cd9abd"300
TXT"apple-domain-verification=gpC7wRvdnOkjz7Nr"300
TXT"google-site-verification=Ba9nLbRuqSf-ROxj3JDsOKkyR6LC7TS6A-Rl4JB-hig"300
TXT"google-site-verification=nq6Dhy8LnYnyDmUVTCN2PUyM66-I4lZ4qf3p8Fw_K8U"300
TXT"qd6thzx94c40y1px19071kr1jlzs4qn1"300
TXT"intersight=3b0676f0ffd2df5be85edffc16389cc17501f40ef7fe3b76ee536325157391ac"300
TXT"Dynatrace-site-verification=681755c6-5246-4339-98ed-2c279e10d4c8__ueaqbafsam687q7c0d67kuu4cb"300
TXT"google-site-verification=_PJgubcOuttUc6Tk9vj6Ej0XwhEILLBzmTBT6qWOoms"300
TXT"teamviewer-sso-verification=435ffd69c3ef4fdea51bc0fbc5526dc2"300
TXT"google-site-verification=-hgI6AXYWGeZP34DLXB_Gh7HIbxBnYLeDvbChr4T5z8"300
TXT"smartsheet-site-validation=zhESBHGVz13LxKE8pBtefw9wcL326Sle"300
TXT"google-site-verification=6-NhuqaETOd63oIz7k8uMJJy7K-dfLFlbP5bMettSqY"300
TXT"google-site-verification=JWMMOhLqL-xS53X3Bbtjvvy4d3oUu8Xp2uCGq3Ic6JY"300
TXT"v=spf1 include:spf.ncr.com include:spf1.ncr.com include:spf2.ncr.com include:spf-00209e01.pphosted.com include:spf.protection.outlook.com include:part1.digitalinsight.com" " include:_spf.salesforce.com include:_spf.safewebservices.com include:zgateway.zuora.com ~all"300
TXT"Dynatrace-site-verification=6db68f8f-2c80-445c-99fd-a4be628a59fc__db1b3ufr3oti35726pmvd21sd8"300
TXT"mongodb-site-verification=PpPFoK7ocWVGyeLq9lp8vBPAJlhR2CaD"300
TXT"mongodb-site-verification=OJqqExPOSuwVwJsArMXM9miRXbsg4gEJ"300
TXT"Dynatrace-site-verification=cbc184bc-a6b4-49dc-ae9c-c82b898580e1__ucrlu4a1q1oh1pbamf6i8hb6se"300
TXT"Dynatrace-site-verification=54ebc0d5-0e48-42cc-b713-6bd9f2ffdb68__tr6pq40knupamleso52l3jnqrv"300
TXT"atlassian-domain-verification=6KoUK1SOR2aNkgUAtyvzWDlTpYLvOmaV2Mwh39lCKUPmrfcJXaJ8yuga7iosXOaH"300
TXT"_mdlhpoteyu5t5enaq6ttz1n6gdwk3to"300
TXT"atlassian-domain-verification=Qt5oj0hV5hu2GRx016ezmVwaCvokDuj4tqUD61Xq86GMQFK2P4RCZeOcdCxDWFE8"300
TXT"mongodb-site-verification=W3rstcDVxmpnS2LXkJCmnnmLJgSSISXn"300
TXT"miro-verification=4de678bdfcc0fc45b29bb2e74b6836668e9ec796"300
TXT"_3we75l05sm8nigpkpg96yaxcs2andul"300
TXT"MS=ms49075009"300
TXT"6fLAwBJ4rEHbBcIgZ+qc0ugIsuUR5f8ayJ+39U6PF9fPPzU/WZJ3C2lbaerrARWKOhhGtoYfbyqyrnvkmWRrbw=="300
TXT"adobe-sign-verification=46e751586cb9aca630ecc4e660b94b8a"300
TXT"amazonses:D+AHtTAm9ITT4QfO50AELETc2gg4g11QEHirc3CiesE="300
TXT"pardot48052=c89e0558a660faf3bdf8c0f609806361e4049de0cfd5578f6d6231087bc024b3"300
TXT"webexdomainverification.CKPB=a6b46aa0-5944-4ebb-8799-f2318e207cf3"300

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, MX 5m, NS 5m. The NS TTL at the parent is 2d and in the zone 5m; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35