otis.com

Checked 22 October 2026, 10:10 UTC · via 8.8.8.8
!Passed with warnings
24 passed 2 warnings 0 failed 5 info

Registration

info

.com generic · CSC Corporate Domains, Inc. · expires 2027-06-02

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
3 June 1994
Last changed
29 May 2026
Expires
2 June 2027
Status
client transfer prohibited
Registry nameservers
pdns1.ultradns.net, pdns2.ultradns.net, pdns3.ultradns.org, pdns4.ultradns.org, pdns5.ultradns.info, pdns6.ultradns.co.uk
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-06-02 #3
    The registration is valid until 2027-06-02 (222 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

pdns1.ultradns.net, pdns2.ultradns.net, pdns3.ultradns.org, pdns4.ultradns.org, pdns5.ultradns.info, pdns6.ultradns.co.uk

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
pdns1.ultradns.net, pdns2.ultradns.net, pdns3.ultradns.org, pdns4.ultradns.org, pdns5.ultradns.info, pdns6.ultradns.co.uk
NS in the zone
pdns1.ultradns.net, pdns2.ultradns.net, pdns3.ultradns.org, pdns4.ultradns.org, pdns5.ultradns.info, pdns6.ultradns.co.uk
NameserverAddressesNetwork (AS)Glue
pdns1.ultradns.net204.74.108.1 2001:502:f3ff::1AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-
pdns2.ultradns.net204.74.109.1 2610:a1:1014::1AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-
pdns3.ultradns.org199.7.68.1 2610:a1:1015::1AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-
pdns4.ultradns.org199.7.69.1 2001:502:4612::1AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-
pdns5.ultradns.info204.74.114.1 2610:a1:1016::1AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-
pdns6.ultradns.co.uk204.74.115.1 2610:a1:1017::1AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-

Checks

  • ✓ 6 nameservers #6
    Delegated to pdns1.ultradns.net, pdns2.ultradns.net, pdns3.ultradns.org, pdns4.ultradns.org, pdns5.ultradns.info, pdns6.ultradns.co.uk.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 6 IPv4 /24s and 6 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS12008 (VERCARA - Vercara, LLC, US): 12 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • ✓ Nameserver names under 4 TLDs #12
    Nameserver names use the TLDs .info, .net, .org, .uk.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

info

12 of 12 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
pdns1.ultradns.net 204.74.108.1NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns1.ultradns.net 2001:502:f3ff::1NOERROR, 7 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns2.ultradns.net 204.74.109.1NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns2.ultradns.net 2610:a1:1014::1NOERROR, 4 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns3.ultradns.org 199.7.68.1NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns3.ultradns.org 2610:a1:1015::1NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns4.ultradns.org 199.7.69.1NOERROR, 32 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns4.ultradns.org 2001:502:4612::1NOERROR, 32 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns5.ultradns.info 204.74.114.1NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns5.ultradns.info 2610:a1:1016::1NOERROR, 4 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns6.ultradns.co.uk 204.74.115.1NOERROR, 32 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
pdns6.ultradns.co.uk 2610:a1:1017::1NOERROR, 32 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver

Checks

  • ✓ All respond #14
    All 12 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: pdns1.ultradns.net: "UltraDNS Nameserver"; pdns2.ultradns.net: "UltraDNS Nameserver"; pdns3.ultradns.org: "UltraDNS Nameserver"; pdns4.ultradns.org: "UltraDNS Nameserver"; pdns5.ultradns.info: "UltraDNS Nameserver"; pdns6.ultradns.co.uk: "UltraDNS Nameserver".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 2020022880 · primary pdns209.ultradns.com

Found

Primary (MNAME)
pdns209.ultradns.com
Contact (RNAME)
administrative\.contact.otis.com
Serial
2020022880
Refresh / retry
21600 s / 3600 s
Expire
86400 s
Negative TTL
21600 s

Serial per nameserver

NameserverSerial
pdns1.ultradns.net (204.74.108.1)2020022880
pdns1.ultradns.net (2001:502:f3ff::1)2020022880
pdns2.ultradns.net (204.74.109.1)2020022880
pdns2.ultradns.net (2610:a1:1014::1)2020022880
pdns3.ultradns.org (199.7.68.1)2020022880
pdns3.ultradns.org (2610:a1:1015::1)2020022880
pdns4.ultradns.org (199.7.69.1)2020022880
pdns4.ultradns.org (2001:502:4612::1)2020022880
pdns5.ultradns.info (204.74.114.1)2020022880
pdns5.ultradns.info (2610:a1:1016::1)2020022880
pdns6.ultradns.co.uk (204.74.115.1)2020022880
pdns6.ultradns.co.uk (2610:a1:1017::1)2020022880

Checks

  • ✓ Serial 2020022880 everywhere #22
    All nameservers serve the same version of the zone.
  • !
    Unusual SOA timers
    expire 1d is shorter than 7d; secondaries stop answering too soon when the primary is down. Current values: refresh 6h, retry 1h, expire 1d, negative TTL 6h.
    #23
  • i
    Hidden master
    The primary nameserver pdns209.ultradns.com is not listed as a nameserver: a hidden master that only feeds the public secondaries. That is a common setup; make sure it is not reachable for zone transfers from outside.
    #24
  • ✓ Contact administrative.contact@otis.com #25
    The SOA RNAME administrative\.contact.otis.com means administrative.contact@otis.com.
  • ✓ Date-based serial #26
    The serial 2020022880 follows the YYYYMMDDnn convention (2020-02-28).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

42 records at the apex

Found

Read from
204.74.108.1:53
TypeValueTTL
SOApdns209.ultradns.com. administrative\.contact.otis.com. 2020022880 21600 3600 86400 2160086400
NSpdns1.ultradns.net.86400
NSpdns2.ultradns.net.86400
NSpdns3.ultradns.org.86400
NSpdns4.ultradns.org.86400
NSpdns5.ultradns.info.86400
NSpdns6.ultradns.co.uk.86400
A34.8.129.241300
MX10 mxa-005a8301.gslb.pphosted.com.86400
MX10 mxb-005a8301.gslb.pphosted.com.86400
TXT"MS=ms30252495"86400
TXT"MS=ms82433825"86400
TXT"ms=20.10.2023"86400
TXT"nintex.6737d69a1d82a43d19c72505"86400
TXT"msfpkey=6j6wh22ot6alrfeuo8b17jmpu"86400
TXT"d365mktkey=1lc0giqmkgn7j9rxgo2l4zh74"86400
TXT"d365mktkey=3flcjjkbxa5oap4w3xseft6j1"86400
TXT"d365mktkey=3vx38ga6pg7v3k69aaw2qcn14"86400
TXT"d365mktkey=4yo8yk3b1sz31j2najja97c8n"86400
TXT"d365mktkey=692cjhtpnfa7c4qmbmuwo0khl"86400
TXT"d365mktkey=78eqs6du9jh7fn4clfun8a2pc"86400
TXT"11BE-40F5-FE17-737D-9713-1C91-9F01-971C"86400
TXT"apple-domain-verification=4QK8yiFA4jldKnMP"86400
TXT"apple-domain-verification=Y6sV8NfbQb53y9MT"86400
TXT"apple-domain-verification=dKgKa1DQRnzRlwVu"86400
TXT"SFMC-a9Gd_f9uV5FbHgecu2sygP0jaDLTKXQVmzebTswt"86400
TXT"docusign=2562d253-0f32-4960-b02d-2edcedec5ec4"86400
TXT"docusign=ec672a63-9249-48b9-a62c-02bd5b7d16f3"86400
TXT"jamf-site-verification=UhkpwT_N7NV8LJul39CICw"86400
TXT"miro-verification=7be7d9a2abb6ce3b4b5699fd1122d02add69e80d"86400
TXT"facebook-domain-verification=ic6ryer8atc7g8rs4kax70tk0j2gmb"86400
TXT"smartsheet-site-validation=7gVAppSQIVeNJUdPDE7poaBKyOLpYHUz"86400
TXT"onetrust-domain-verification=96f9b3253cb04d668ef25682c21c0736"86400
TXT"onetrust-domain-verification=e4ba3ffbf5e446d3839350b0a38e019e"86400
TXT"google-site-verification=YNDcX9g4QCkdeJfKT6wYxBhiEN1IyW5E9Azl5D05Z5o"86400
TXT"google-site-verification=tDzeN4ybTrErqSQ5Q_DFCjw06WxkDOb3UQIVgEyTOTo"86400
TXT"pYNW2kd5A3q0kU/LTp9JvCgbgvIT2pdnjl5VrMJNOh2iZjZOkbaVtmU4vN6vOd5zZGIehqEhfpNyTtfE2WZHnQ=="86400
TXT"Dynatrace-site-verification=ab5c64f5-e91c-44f3-ab87-a0d1031642c2__gbco9h6os7mgc08jithnn9i3vv"86400
TXT"cisco-ci-domain-verification=6bf51b0ec1605d9350fecad082a47720bb85b38468744ef2e8455c24c9ce8787"86400
TXT"webexdomainverification.4eff9c89ee4637cfe0536d15fe0a793b=7d342264-9e46-4b99-8fc5-312042f9095f"86400
TXT"atlassian-domain-verification=/D/2hjuOeQS/Gxyj1CtW6h5dCXqutsnmoCNKfdUc41S2I3yTRZaTiODxlVaZuyRz"86400
TXT"v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com include:7816017.spf10.hubspotemail.net ~all"86400

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, MX 1d, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35