nokia.com

Checked 22 October 2026, 10:03 UTC · via 8.8.8.8
!Passed with warnings
24 passed 2 warnings 0 failed 5 info

Registration

info

.com generic · SafeBrands SAS · expires 2027-07-10

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
SafeBrands SAS
Registered
11 July 1991
Last changed
8 June 2026
Expires
10 July 2027
Status
client transfer prohibited
Registry nameservers
ns.nokia.com, ns2.nokia.com, ns3.nokia.com, ns4.nokia.com, ns5.nokia.com, ns6.nokia.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-07-10 #3
    The registration is valid until 2027-07-10 (260 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

ns.nokia.com, ns2.nokia.com, ns3.nokia.com, ns4.nokia.com, ns5.nokia.com, ns6.nokia.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns.nokia.com, ns2.nokia.com, ns3.nokia.com, ns4.nokia.com, ns5.nokia.com, ns6.nokia.com
NS in the zone
ns.nokia.com, ns2.nokia.com, ns3.nokia.com, ns4.nokia.com, ns5.nokia.com, ns6.nokia.com
NameserverAddressesNetwork (AS)Glue
ns.nokia.com162.159.10.115 2400:cb00:2049:1::a29f:a73AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US162.159.10.115 2400:cb00:2049:1::a29f:a73
ns2.nokia.com173.245.58.11 2400:cb00:2049:1::adf5:3a0bAS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US173.245.58.11 2400:cb00:2049:1::adf5:3a0b
ns3.nokia.com162.159.11.117 2400:cb00:2049:1::a29f:b75AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US162.159.11.117 2400:cb00:2049:1::a29f:b75
ns4.nokia.com162.159.9.98 2400:cb00:2049:1::a29f:962AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US162.159.9.98 2400:cb00:2049:1::a29f:962
ns5.nokia.com198.41.223.186 2400:cb00:2049:1::c629:dfbaAS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US198.41.223.186 2400:cb00:2049:1::c629:dfba
ns6.nokia.com198.41.222.129 2400:cb00:2049:1::c629:de81AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US198.41.222.129 2400:cb00:2049:1::c629:de81

Checks

  • ✓ 6 nameservers #6
    Delegated to ns.nokia.com, ns2.nokia.com, ns3.nokia.com, ns4.nokia.com, ns5.nokia.com, ns6.nokia.com.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ Glue present and correct #8
    Glue is published for the nameservers inside the zone: ns.nokia.com, ns2.nokia.com, ns3.nokia.com, ns4.nokia.com, ns5.nokia.com, ns6.nokia.com.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • i
    One address family in one network
    all IPv6 addresses are in 2400:cb00:2049::/48, while the other address family is spread over several networks.
    #10
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS13335 (CLOUDFLARENET - Cloudflare, Inc., US): 12 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

warn

12 of 12 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns.nokia.com 162.159.10.115NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
ns.nokia.com 2400:cb00:2049:1::a29f:a73NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
ns2.nokia.com 173.245.58.11NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
ns2.nokia.com 2400:cb00:2049:1::adf5:3a0bNOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
ns3.nokia.com 162.159.11.117NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
ns3.nokia.com 2400:cb00:2049:1::a29f:b75NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
ns4.nokia.com 162.159.9.98NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
ns4.nokia.com 2400:cb00:2049:1::a29f:962NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
ns5.nokia.com 198.41.223.186NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
ns5.nokia.com 2400:cb00:2049:1::c629:dfbaNOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
ns6.nokia.com 198.41.222.129NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
ns6.nokia.com 2400:cb00:2049:1::c629:de81NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2

Checks

  • ✓ All respond #14
    All 12 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: ns.nokia.com: "2026.10.2"; ns2.nokia.com: "2026.10.2"; ns3.nokia.com: "2026.10.2"; ns4.nokia.com: "2026.10.2"; ns5.nokia.com: "2026.10.2"; ns6.nokia.com: "2026.10.2". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2418129680 · primary ns2.nokia.com

Found

Primary (MNAME)
ns2.nokia.com
Contact (RNAME)
dns.cloudflare.com
Serial
2418129680
Refresh / retry
10000 s / 2400 s
Expire
604800 s
Negative TTL
1800 s

Serial per nameserver

NameserverSerial
ns.nokia.com (162.159.10.115)2418129680
ns.nokia.com (2400:cb00:2049:1::a29f:a73)2418129680
ns2.nokia.com (173.245.58.11)2418129680
ns2.nokia.com (2400:cb00:2049:1::adf5:3a0b)2418129680
ns3.nokia.com (162.159.11.117)2418129680
ns3.nokia.com (2400:cb00:2049:1::a29f:b75)2418129680
ns4.nokia.com (162.159.9.98)2418129680
ns4.nokia.com (2400:cb00:2049:1::a29f:962)2418129680
ns5.nokia.com (198.41.223.186)2418129680
ns5.nokia.com (2400:cb00:2049:1::c629:dfba)2418129680
ns6.nokia.com (198.41.222.129)2418129680
ns6.nokia.com (2400:cb00:2049:1::c629:de81)2418129680

Checks

  • ✓ Serial 2418129680 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 2h46m40s, retry 40m, expire 7d, negative TTL 30m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns2.nokia.com is one of the listed nameservers.
  • ✓ Contact dns@cloudflare.com #25
    The SOA RNAME dns.cloudflare.com means dns@cloudflare.com.
  • ✓ Timestamp serial #26
    The serial 2418129680 is a Unix timestamp (2046-08-17 14:41 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

46 records at the apex

Found

Read from
162.159.10.115:53
TypeValueTTL
SOAns2.nokia.com. dns.cloudflare.com. 2418129680 10000 2400 604800 18001800
NSns2.nokia.com.86400
NSns3.nokia.com.86400
NSns4.nokia.com.86400
NSns5.nokia.com.86400
NSns6.nokia.com.86400
NSns.nokia.com.86400
A34.107.106.8086400
MX10 nokia-com.mail.protection.outlook.com.3600
TXT"296d1d2e32ff587a3ccf119b5a9be45c52d1a64ee4b52f9af21172d87d16352"3600
TXT"A77206953F2F3DA549924CE747094DCD"3600
TXT"Lo0i7Libuf8OaIqhrFwhv5WDesHWmK/3UnhnR2jIVNExUNcH/5S8eQv3EYWBUldKY+vTEHxDi6xAkP6N3o8LEw=="3600
TXT"MS=ms45694415"3600
TXT"_globalsign-domain-verification=4MWNPfLdnRCjwCTwFn10hdahc5DR1TAn_lS9p_X9pr"3600
TXT"adobe-idp-site-verification=8101089eb7ce5710576f074d88ed81c4a118f22064b487a6f2bfdb96e4358955"3600
TXT"adobe-sign-verification=12369659dfff2f16b901c5cbd43f34f9"3600
TXT"adobe-sign-verification=e37a4a2da4132d32808b04628aef100b"3600
TXT"apple-domain-verification=UrtK1gmTVz5TXjwx"3600
TXT"asv=8186de0caa9973fcce9bbef6d33e5268"3600
TXT"atlassian-domain-verification=3/I54JGD9/Mf8WPoeivb00gyB9VRzlg211UUvub6nOudJxHOQMJRcPmKYBHhqLYj"3600
TXT"atlassian-domain-verification=YtfJswAxDCvpMVcQmHDqn5bwvaC6VfkuSQNf1/HhabAC3uU4MYCs18VF8NpvnZLk"3600
TXT"atlassian-domain-verification=w3zCQOUzSC9gLEpsbSS5ChY8NutzwsU8nMx5GkFOLy3zipAWLmfPA3vlblong2zn"3600
TXT"censys-domain-verification=bOXUpRY13wYe0sEjsYoWxswlESktRj-IbDN2OEUzzuz-"3600
TXT"docker-verification=8cf14e2e-0b9b-481e-93a8-2751d317bdde"3600
TXT"domain-verification=JA4uKgXVz5wkGKj5L0wCUBWdz-u2MSMdeQvqKOE5Sh4"3600
TXT"e54b0e30bb60c816310a0ff4bd1264ab451a519f1ca124017971ff8807885ce"3600
TXT"facebook-domain-verification=7v0aequ238u6w4sh3u6a0hmitvfncj"3600
TXT"facebook-domain-verification=g05pgxs62t30kzpzvth3md9mm1cw4p"3600
TXT"figma-domain-verification=10ec014e31a3dbfa6db5b507bf00f2dc5887c060ceda1a5e86e399463752af4a-1769435291"3600
TXT"figma-domain-verification=e569d0b0069d00432ab74a23794bbb338cff6a4ccea1c86234d5447bd21c83c6-1724867760"3600
TXT"g96g761t4pxn39l3pw0v5cb3z6tp0zb5"3600
TXT"goodnotes-verification=03804f1d-5215-49ee-a0f4-63189565b606"3600
TXT"google-site-verification=R6nRzm9T9Rg74aD-ZMytbK81o1ZtLfaNrVP8mYhErXc"3600
TXT"google-site-verification=jj2qiriEkSdLFdG8qVjnnuBTmENM7Kh8yrK6kdGlO-4"3600
TXT"hpe-greenlake-domain-verification=555145703879594c564e3853592d417259506758456945704a34657473767152"3600
TXT"ip3me4e7s2plhe9ffd7j5grdo7"3600
TXT"mentimeter-c3f9c346-1007-48b5-bbdd-d92ea0edaf11"3600
TXT"onetrust-domain-verification=98fda0b5320a4d69b89357e6d79025b8"3600
TXT"onetrust-domain-verification=e00032ea59e546a6a5cb889515d8612d"3600
TXT"paloaltonetworks-site-verification=57fc9b0faa887861adc16e13abf524b59ad597f81dfd9fe7144985ebe7c8a323"3600
TXT"stripe-verification=4B4E2F9BAD42FBCFC4B487413FC17BE8E7575D3AAF0401F56E2F1FDEE7D930BA"3600
TXT"ukxieAYjJmUTfC+P4LtFPPL6tv+6/Cfe+pJTe9M/M6SkpuKJaXpFWV9V6O0tfd5UlvCqCt9/hRKswUim0ixOew=="3600
TXT"v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all"3600
TXT"webexdomainverification.=a42266f0-37d6-4db8-a06b-e5899225ee1b"3600
TXT"zdahtqLa6PibLJpBQwWhsLWSOUiwtjU/nAxI3jkoTtvzUxIZFr+NXd4053IARw2Nv4GTWb2aZJDTVg/3Sp17bQ=="3600
TXT"zoho-verification=zb96358348.zmverify.zoho.com"3600

Checks

  • ✓ TTLs within range #32
    TTLs: A 1d, MX 1h, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35