optum.com

Checked 22 October 2026, 10:10 UTC · via 8.8.8.8
!Passed with warnings
29 passed 3 warnings 0 failed 3 info

Registration

info

.com generic · CSC Corporate Domains, Inc. · expires 2027-02-03

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
2 February 1996
Last changed
21 August 2026
Expires
3 February 2027
Status
client transfer prohibited
Registry nameservers
edns4.ultradns.biz, edns4.ultradns.com, edns4.ultradns.net, edns4.ultradns.org, epla1.corpnamesvcs.com, epla2.corpnamesvcs.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-02-03 #3
    The registration is valid until 2027-02-03 (103 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

edns4.ultradns.biz, edns4.ultradns.com, edns4.ultradns.net, edns4.ultradns.org, epla1.corpnamesvcs.com, epla2.corpnamesvcs.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
edns4.ultradns.biz, edns4.ultradns.com, edns4.ultradns.net, edns4.ultradns.org, epla1.corpnamesvcs.com, epla2.corpnamesvcs.com
NS in the zone
epla1.corpnamesvcs.com, epla2.corpnamesvcs.com
NameserverAddressesNetwork (AS)Glue
edns4.ultradns.biz (parent only)204.74.67.4 2610:a1:1015::204AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-
edns4.ultradns.com (parent only)204.74.66.4 2001:502:f3ff::204AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US2001:502:f3ff::204 204.74.66.4
edns4.ultradns.net (parent only)204.74.110.4 2610:a1:1014::204AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-
edns4.ultradns.org (parent only)204.74.111.4 2001:502:4612::204AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-
epla1.corpnamesvcs.com149.111.128.204AS10879 UHC - Unitedhealthcare, US149.111.128.204
epla2.corpnamesvcs.com168.183.36.43AS10879 UHC - Unitedhealthcare, US168.183.36.43

Checks

  • ✓ 6 nameservers #6
    Delegated to edns4.ultradns.biz, edns4.ultradns.com, edns4.ultradns.net, edns4.ultradns.org, epla1.corpnamesvcs.com, epla2.corpnamesvcs.com.
  • !
    NS sets differ
    The nameservers at the parent and in the zone should be the same. Only at the parent: edns4.ultradns.biz, edns4.ultradns.com, edns4.ultradns.net, edns4.ultradns.org. edns4.ultradns.biz, edns4.ultradns.com, edns4.ultradns.net, edns4.ultradns.org, epla1.corpnamesvcs.com, epla2.corpnamesvcs.com report NS epla1.corpnamesvcs.com epla2.corpnamesvcs.com.
    #7
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 6 IPv4 /24s and 4 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS10879 (UHC - Unitedhealthcare, US): 2 addresses; AS12008 (VERCARA - Vercara, LLC, US): 8 addresses.
  • ✓ Nameserver names under 4 TLDs #12
    Nameserver names use the TLDs .biz, .com, .net, .org.
  • i
    Partly IPv6
    These nameservers have no IPv6 address: epla1.corpnamesvcs.com, epla2.corpnamesvcs.com.
    #13

Nameservers

info

10 of 10 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
edns4.ultradns.biz 204.74.67.4NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
edns4.ultradns.biz 2610:a1:1015::204NOERROR, 4 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
edns4.ultradns.com 204.74.66.4NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
edns4.ultradns.com 2001:502:f3ff::204NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
edns4.ultradns.net 204.74.110.4NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
edns4.ultradns.net 2610:a1:1014::204NOERROR, 4 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
edns4.ultradns.org 204.74.111.4NOERROR, 31 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
edns4.ultradns.org 2001:502:4612::204NOERROR, 32 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
epla1.corpnamesvcs.com 149.111.128.204NOERROR, 128 ms, authoritativenoyes / yesrefused-
epla2.corpnamesvcs.com 168.183.36.43NOERROR, 123 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 10 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: edns4.ultradns.biz: "UltraDNS Nameserver"; edns4.ultradns.com: "UltraDNS Nameserver"; edns4.ultradns.net: "UltraDNS Nameserver"; edns4.ultradns.org: "UltraDNS Nameserver".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 2958403 · primary epla1.corpnamesvcs.com

Found

Primary (MNAME)
epla1.corpnamesvcs.com
Contact (RNAME)
hostmaster.uhc.com
Serial
2958403
Refresh / retry
300 s / 30 s
Expire
604800 s
Negative TTL
900 s

Serial per nameserver

NameserverSerial
edns4.ultradns.biz (204.74.67.4)2958403
edns4.ultradns.biz (2610:a1:1015::204)2958403
edns4.ultradns.com (204.74.66.4)2958403
edns4.ultradns.com (2001:502:f3ff::204)2958403
edns4.ultradns.net (204.74.110.4)2958403
edns4.ultradns.net (2610:a1:1014::204)2958403
edns4.ultradns.org (204.74.111.4)2958403
edns4.ultradns.org (2001:502:4612::204)2958403
epla1.corpnamesvcs.com (149.111.128.204)2958406
epla2.corpnamesvcs.com (168.183.36.43)2958406

Checks

  • !
    Serials differ
    The nameservers serve different versions of the zone: 2958403 on edns4.ultradns.biz (204.74.67.4), edns4.ultradns.biz (2610:a1:1015::204), edns4.ultradns.com (204.74.66.4), edns4.ultradns.com (2001:502:f3ff::204), edns4.ultradns.net (204.74.110.4), edns4.ultradns.net (2610:a1:1014::204), edns4.ultradns.org (204.74.111.4), edns4.ultradns.org (2001:502:4612::204); 2958406 on epla1.corpnamesvcs.com (149.111.128.204), epla2.corpnamesvcs.com (168.183.36.43). This is normal for a few minutes after a change; if it lasts, zone transfers to the secondaries are failing.
    #22
  • !
    Unusual SOA timers
    refresh 5m is outside 20m–1d. Current values: refresh 5m, retry 30s, expire 7d, negative TTL 15m.
    #23
  • ✓ Primary is a public nameserver #24
    The primary nameserver epla1.corpnamesvcs.com is one of the listed nameservers.
  • ✓ Contact hostmaster@uhc.com #25
    The SOA RNAME hostmaster.uhc.com means hostmaster@uhc.com.
  • ✓ Counter serial #26
    The serial 2958403 is a plain counter.

DNSSEC

pass

Signed, DS published at parent

Found

Validated by resolver
yes
Denial of existence
NSEC3
NSEC3
0 iterations, 0-byte salt
Signatures valid until
26 October 2026

DS at the parent

Key tagAlgorithmDigestMatches a key
61375RSASHA256 (8)SHA256 F80B6BFF4B7C99D5…yes

DNSKEY in the zone

Key tagRoleAlgorithm
41268ZSK (256)RSASHA256 (8)
108ZSK (256)RSASHA256 (8)
61375KSK (257)RSASHA256 (8)
49085KSK (257)RSASHA256 (8)

Checks

  • ✓ Signed and validated #27
    The zone is signed, the parent publishes a DS record, and the resolver validates the answers.
  • ✓ DS matches a key #28
    The DS record at the parent matches a key in the zone: key tag 61375 (SHA256).
  • ✓ Modern algorithms #29
    Key algorithms: RSASHA256 (8).
  • ✓ Short-lived signatures (online signing) #30
    Signatures are valid for 97h0m0s and created on demand; the current one was made at 2026-10-22 06:30 UTC and expires at 2026-10-26 07:17 UTC.
  • ✓ NSEC3 as recommended #31
    The zone uses NSEC3 with 0 iterations and no salt (RFC 9276).

Records

pass

83 records at the apex

Found

Read from
204.74.67.4:53
TypeValueTTL
SOAepla1.corpnamesvcs.com. hostmaster.uhc.com. 2958403 300 30 604800 900300
NSepla1.corpnamesvcs.com.300
NSepla2.corpnamesvcs.com.300
A149.111.128.88300
MX5 mxa-0077b904.gslb.pphosted.com.300
MX5 mxb-0077b904.gslb.pphosted.com.300
TXT"MS=ms28375138"300
TXT"MS=ms44155588"300
TXT"MS=ms72840239"300
TXT"MS=ms79006004"300
TXT"JIRA ticket: OSSRH-61503"300
TXT"cc12tvt56082dqp5cah6dav3o"300
TXT"isuh46m2ev1lbupa27irgep01o"300
TXT"s5lsmnsfgldub9dcoggv803ofo"300
TXT"ug4rsmkk66ulqas52pfoakdukn"300
TXT"nintex.66d9bddeb5916d50cec4074c"300
TXT"95cc4afe-68be-4af7-afe1-f376cf96ba82"300
TXT"asv=e8e0b3d366d7be44e0bd0d0ef89cbe3b"300
TXT"apple-domain-verification=iguXCtsfpDjghiML"300
TXT"MS=EF964C60EC2FAE4BFD4F99A9DF0ED1D8BE79CDEF"300
TXT"ibmid= e5f33bf4-c580-422c-b108-81936f343d4a"300
TXT"flexera-domain-verification-yzruuhvmkcfbaiuv"300
TXT"flexera-domain-verification-zeqqvfouqnqivdad"300
TXT"gE/JG8TTOG7fckv4KQ2ClCS4R5oKpq2B2WQSQoPZNYU="300
TXT"SFMC-7WfPftLYCXOox7vbsWegmwKrW4EB_7sDQU9KCa3Q"300
TXT"docusign=1296ccd2-14aa-4098-b101-ae2382c42d59"300
TXT"docusign=3687a3fa-9c1b-4c2f-b9d2-fff40730a1f1"300
TXT"jamf-site-verification=alHDSup5VwXns-oBBXgodA"300
TXT"canva-site-verification=1N3-Z9VCgGe9uMoMBos8EA"300
TXT"15dcb10525bc1626db3b98744f2f4ad78fc1bfe8b3a56b1e41"300
TXT"bitrise-verification=57adf39439083ec0-imLuwoEAjM8j"300
TXT"pendo-domain-verification=_l34bdk60wkLfR7EEZAWCmBNycw"300
TXT"pendo-domain-verification=kveqppXJThuc63mOEbJ0nLz3qzY"300
TXT"airtable-verification=399cd3beff0269114abffd5352d2920c"300
TXT"amazonses:aeJlQXnMCUcSNwQKk2SnN/Ief922a3MMOAMGMLihfb4="300
TXT"openai-domain-verification=dv-vbuQnIJXapBpTb3zLITtvryB"300
TXT"d365mktkey=Ix0iMUwCrlbu6WNLkxoxxRPE2k6qZJzanxBmxWfdMMsx"300
TXT"docker-verification=a87711e0-23d3-4261-918a-3a16a11b3ddc"300
TXT"v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all"300
TXT"cloudflare_dashboard_sso=92a9d84f5e3e7b6009e2c4120c444c7f"300
TXT"miro-verification=5ea04a0c26989ed5656ae2b88aa2e5c474f973ab"300
TXT"impilo-domain-verification-tyhq72=sGOzO9iUYkuaLkz7odKIQzAym"300
TXT"smartsheet-site-validation=kEh8gyt9B7riJjfG5cssFLjX2HlBfbD7"300
TXT"smartsheet-site-validation=kuoruwGxeUs_n8ztYYq6xLPzTLrf7KIA"300
TXT"vercel-domain-verification-6a8jvj=PGR9WYjZL6fzyWq9KOWpdYFgA"300
TXT"vercel-domain-verification-6gedds=fvsXfjSA9kDo9dq4RfZnMUtIv"300
TXT"vercel-domain-verification-8k7spz=C8me93Q9z4WkbmUQ8J1EJWABN"300
TXT"vercel-domain-verification-kqza24=6YwS1vi3Q3a1FZOd3Gs1r4BLg"300
TXT"vercel-domain-verification-q79943=G8uyMnKOkWwWgqWMFtXoqHlni"300
TXT"vercel-domain-verification-t49kcf=zE521wYAFyOqTeYnGtcT1iehN"300
TXT"vercel-domain-verification-vcz3a8=iZDSqDePUvZQBrrQzTqcQjfI7"300
TXT"vercel-domain-verification-x4v22q=qUkZhL10VxYWIMUEiZreuAvbr"300
TXT"vercel-domain-verification-xx89hj=H48g8rQhURGT97RJBqjqXlI5P"300
TXT" miro-verification=5ea04a0c26989ed5656ae2b88aa2e5c474f973ab "300
TXT"onetrust-domain-verification=d48cf8d8841543fc9ed36b162f44bce7"300
TXT"anthropic-domain-verification-qrjcxb=EsaIBNgGKwDg1C3G5zZ0a9hTS"300
TXT"new-relic-domain-verification=44e2fab0d7ea48c3bb5713884cfa5239"300
TXT"cleverchain-domain-verification-264a5b=MJqL9fmnZA3tC0PDeCUJsnv39"300
TXT"google-site-verification=1LYqptpAIooI1IatBOU-QkWVHc0xTla2SxgThJgVoCM"300
TXT"google-site-verification=K9G07TBOw3kT55o2kQfqhKOy8-bTvVvGcDNV1O0SfRw"300
TXT"google-site-verification=LmXHPchrMmtMtXvEoiKROwM90eKbmUFLxmKoBOEVdBc"300
TXT"google-site-verification=MLQRCoeojpoCn90x9VYzWv4pBJhZ4384sjunGJnJAOU"300
TXT"google-site-verification=MRYu6FCFgjFFUUyR006EPXDPte7qabDsXcRgf9VjDkA"300
TXT"google-site-verification=qdt3epgf2yohz7x7yt6lk8mrvdwpcst-nsecfhuc5n0"300
TXT"google-site-verification=yiOfJDxUH6nsznMllMlxIBcVJYjgQnwpLMGo0JyEyNs"300
TXT"quickbase-site-verification- 36291150ae2fb5f93e929dc0b875d36918d755fb"300
TXT"pexip-ms-tenant-domain-verification=8cb813ca-9291-4356-b51c-141ee5617ba1"300
TXT"insomnia-validation=26ea585f9b5d4104b7b89d8e456e2559de82b22414395e7aab226898c8a3d81f"300
TXT"insomnia-validation=638846f996b945d381b7ffa9339663688a46a8f149fe5d50a64d651fb7672f3c"300
TXT"insomnia-validation=7a45fc3dfaa0457197925a3a974160c4820112b9e7a55e599b9b22e04201ad51"300
TXT"stripe-verification=51224bbc433316f2b8f71438e1a8de5c7b3c42e709833613518cf1a9f07a449e"300
TXT"stripe-verification=b148f8c88b1d3b715fd66b7a580e01ee36ae2057d8cd0dcc4e8b84f572f3a459"300
TXT"stripe-verification=f5ffe2615f5c33e916600d69ee3e77719049cd8778d5d0d8480d3abd696d9790"300
TXT"stripe-verification=f737f340fb2bf98b02348769d27132bdfbe9b1d056d08d6079da88cc15d3972d"300
TXT"Dynatrace-site-verification=212a521c-834f-402a-a634-cb2c62fc1ba8__ol0859ui998bp60r59a7kl9bms"300
TXT"Dynatrace-site-verification=2863e488-a58b-48d4-960d-29f6444e2bf8__jtfm10h2fdft871108addk4l6r"300
TXT"Dynatrace-site-verification=5477fcdf-05d8-4f26-ba9f-cfdf2801244a__l3rbchfv942rgejmm3kagrrf9n"300
TXT"Dynatrace-site-verification=cd523869-a58e-49b7-9115-18ef93824d88__h7hh7hak7eqcsb00sv3qn2un2h"300
TXT"adobe-idp-site-verification=9a5c47599b4f379d5e29ede339f3da7f9e1689f8e16709c98e397c86a1c68122"300
TXT"atlassian-domain-verification=Ak5GBLix8t8r5DnxQD8I/d4LS1oVxIWH1LYuO8PK5cFB1nzlVDZvhJQ1G4Bzwadv"300
TXT"atlassian-domain-verification=M18MUh7bldpRZBJi5bLUJq0LIiKcrnhOL2W/yN8eV5btqomByRfjpbkAaUHjwNHp"300
TXT"atlassian-domain-verification=aHkaA/GuZVmeC5MViA/CmGHZXzzsl1aXWPgKyQwslaFIp68VaVuRL2eS7vD33POK"300
CAA0 issuemail "sectigo.com"3600

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, MX 5m, NS 5m. The NS TTL at the parent is 2d and in the zone 5m; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: .