nikonusa.com

Checked 22 October 2026, 10:03 UTC · via 8.8.8.8
✗Problems found
22 passed 4 warnings 1 failed 4 info

Registration

info

.com generic · Tucows Domains Inc. · expires 2029-03-01

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
Tucows Domains Inc.
Registered
12 August 1996
Last changed
19 December 2023
Expires
1 March 2029
Status
client transfer prohibited, client update prohibited
Registry nameservers
nikns1.nikonusa.com, nikns2.nikonusa.com, nikns3.nikonusa.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2029-03-01 #3
    The registration is valid until 2029-03-01 (860 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited, client update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

nikns1.nikonusa.com, nikns2.nikonusa.com, nikns3.nikonusa.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
nikns1.nikonusa.com, nikns2.nikonusa.com, nikns3.nikonusa.com
NS in the zone
nikns1.nikonusa.com, nikns2.nikonusa.com, nikns3.nikonusa.com, ns1.nikon.net, ns2.nikon.net, ns3.nikon.net
NameserverAddressesNetwork (AS)Glue
nikns1.nikonusa.com66.11.132.82AS11817 STAFFORDNET - Stafford Associates Computer Specialists, Inc., US66.11.132.82
nikns2.nikonusa.com66.11.132.83AS11817 STAFFORDNET - Stafford Associates Computer Specialists, Inc., US66.11.132.83
nikns3.nikonusa.com66.11.137.197AS11817 STAFFORDNET - Stafford Associates Computer Specialists, Inc., US66.11.137.197
ns1.nikon.net (zone only)66.11.133.20AS23227 NIKON - Nikon, Inc., US-
ns2.nikon.net (zone only)66.11.133.21AS23227 NIKON - Nikon, Inc., US-
ns3.nikon.net (zone only)65.51.14.217AS54004 LIGHTPATH - Cablevision Lightpath LLC, US-

Checks

  • ✓ 3 nameservers #6
    Delegated to nikns1.nikonusa.com, nikns2.nikonusa.com, nikns3.nikonusa.com.
  • !
    NS sets differ
    The nameservers at the parent and in the zone should be the same. Only in the zone: ns1.nikon.net, ns2.nikon.net, ns3.nikon.net. nikns1.nikonusa.com, nikns2.nikonusa.com, nikns3.nikonusa.com report NS nikns1.nikonusa.com nikns2.nikonusa.com nikns3.nikonusa.com ns1.nikon.net ns2.nikon.net ns3.nikon.net.
    #7
  • ✓ Glue present and correct #8
    Glue is published for the nameservers inside the zone: nikns1.nikonusa.com, nikns2.nikonusa.com, nikns3.nikonusa.com.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 4 IPv4 /24s and 0 IPv6 /48s.
  • ✓ 3 autonomous systems #11
    The nameservers are spread over: AS11817 (STAFFORDNET - Stafford Associates Computer Specialists, Inc., US): 3 addresses; AS23227 (NIKON - Nikon, Inc., US): 2 addresses; AS54004 (LIGHTPATH - Cablevision Lightpath LLC, US): 1 address.
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • !
    No IPv6
    None of the nameservers has an IPv6 address, so IPv6-only resolvers can't reach them.
    #13

Nameservers

fail

3 of 6 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
nikns1.nikonusa.com 66.11.132.82NOERROR, 88 ms, authoritativenoyes / yesrefused-
nikns2.nikonusa.com 66.11.132.83NOERROR, 88 ms, authoritativenoyes / yesrefused-
nikns3.nikonusa.com 66.11.137.197NOERROR, 88 ms, authoritativenoyes / yesrefused-
ns1.nikon.net 66.11.133.20no responsenono / no--
ns2.nikon.net 66.11.133.21no responsenono / no--
ns3.nikon.net 65.51.14.217no responsenono / no--

Checks

  • ✗
    Nameservers not responding
    These addresses did not answer, so resolvers waste time on timeouts: ns1.nikon.net (66.11.133.20): read udp 46.225.38.91:58410->66.11.133.20:53: i/o timeout; ns2.nikon.net (66.11.133.21): read udp 46.225.38.91:36039->66.11.133.21:53: i/o timeout; ns3.nikon.net (65.51.14.217): read udp 46.225.38.91:59632->65.51.14.217:53: i/o timeout.
    #14
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 2475 · primary srvdnsext2

Found

Primary (MNAME)
srvdnsext2
Contact (RNAME)
hostmaster.nikonimaging.net
Serial
2475
Refresh / retry
300 s / 60 s
Expire
2419200 s
Negative TTL
300 s

Serial per nameserver

NameserverSerial
nikns1.nikonusa.com (66.11.132.82)2475
nikns2.nikonusa.com (66.11.132.83)2475
nikns3.nikonusa.com (66.11.137.197)2475

Checks

  • ✓ Serial 2475 everywhere #22
    All nameservers serve the same version of the zone.
  • !
    Unusual SOA timers
    refresh 5m is outside 20m–1d. Current values: refresh 5m, retry 1m, expire 28d, negative TTL 5m.
    #23
  • i
    Hidden master (not resolvable)
    The primary nameserver srvdnsext2 is not listed as a nameserver and does not resolve publicly: a hidden master, or a placeholder name. Some tools (e.g. dynamic updates) use MNAME to find the primary.
    #24
  • ✓ Contact hostmaster@nikonimaging.net #25
    The SOA RNAME hostmaster.nikonimaging.net means hostmaster@nikonimaging.net.
  • ✓ Counter serial #26
    The serial 2475 is a plain counter.

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

17 records at the apex

Found

Read from
66.11.132.82:53
TypeValueTTL
SOAsrvdnsext2. hostmaster.nikonimaging.net. 2475 300 60 2419200 300900
NSns2.nikon.net.300
NSnikns2.nikonusa.com.300
NSnikns1.nikonusa.com.300
NSnikns3.nikonusa.com.300
NSns3.nikon.net.300
NSns1.nikon.net.300
A66.11.140.743600
MX10 mxa-00620203.gslb.pphosted.com.300
MX10 mxb-00620203.gslb.pphosted.com.300
TXT"_gxq45gjenz2734i4h8n7wwos6er51us"300
TXT"_g8rpcn3u946ejzehtuxoim07sfu6xox"300
TXT"v=spf1 ip4:66.11.129.40 -all"300
TXT"google-site-verification=xLGwOuTH2nrNgOh4vycsyMipNDkm-WXhRgv8o9HeMDE"300
TXT"892221859-6383260"300
TXT"_qp6obqovm87wqb5lskt9dtncfwula3z"300
TXT"_akyd2niou7jfaj8k4cc2y833bcf9a1j"300

Checks

  • ✓ TTLs within range #32
    TTLs: A 1h, MX 5m, NS 5m. The NS TTL at the parent is 2d and in the zone 5m; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35