owenscorning.com

Checked 22 October 2026, 10:11 UTC · via 8.8.8.8
✗Problems found
22 passed 4 warnings 1 failed 4 info

Registration

info

.com generic · CSC Corporate Domains, Inc. · expires 2027-02-09

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
8 February 1996
Last changed
5 February 2026
Expires
9 February 2027
Status
client transfer prohibited
Registry nameservers
ns1.owenscorning.com, ns2.owenscorning.com, ns3.owenscorning.com, ns4.owenscorning.com, ns5.owenscorning.com, ns6.owenscorning.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-02-09 #3
    The registration is valid until 2027-02-09 (109 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

ns1.owenscorning.com, ns2.owenscorning.com, ns3.owenscorning.com, ns4.owenscorning.com, ns5.owenscorning.com, ns6.owenscorning.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns1.owenscorning.com, ns2.owenscorning.com, ns3.owenscorning.com, ns4.owenscorning.com, ns5.owenscorning.com, ns6.owenscorning.com
NS in the zone
ns1.owenscorning.com, ns2.owenscorning.com, ns3.owenscorning.com, ns4.owenscorning.com, ns5.owenscorning.com, ns6.owenscorning.com
NameserverAddressesNetwork (AS)Glue
ns1.owenscorning.com205.204.1.147AS36490 OWENSCORNING - Owens-Corning, US205.204.1.147
ns2.owenscorning.com205.204.2.143AS53710 OWENS-CORNING - Owens-Corning, US205.204.2.143
ns3.owenscorning.com185.223.55.48AS212198 Owens-Corning-EU - OWENS CORNING FRANCE SAS, FR205.204.12.21
ns4.owenscorning.com208.94.148.13AS16552 DIGICERT - Tiggee LLC, US208.94.148.13
ns5.owenscorning.com208.80.124.13AS16552 DIGICERT - Tiggee LLC, US208.80.124.13
ns6.owenscorning.com208.80.126.13AS16552 DIGICERT - Tiggee LLC, US208.80.126.13

Checks

  • ✓ 6 nameservers #6
    Delegated to ns1.owenscorning.com, ns2.owenscorning.com, ns3.owenscorning.com, ns4.owenscorning.com, ns5.owenscorning.com, ns6.owenscorning.com.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • !
    Glue differs from the zone
    The addresses at the parent (glue) differ from the addresses in the zone: ns3.owenscorning.com (glue 205.204.12.21, zone 185.223.55.48). Update the glue at your registrar.
    #8
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 6 IPv4 /24s and 0 IPv6 /48s.
  • ✓ 4 autonomous systems #11
    The nameservers are spread over: AS16552 (DIGICERT - Tiggee LLC, US): 3 addresses; AS212198 (Owens-Corning-EU - OWENS CORNING FRANCE SAS, FR): 1 address; AS36490 (OWENSCORNING - Owens-Corning, US): 1 address; AS53710 (OWENS-CORNING - Owens-Corning, US): 1 address.
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • !
    No IPv6
    None of the nameservers has an IPv6 address, so IPv6-only resolvers can't reach them.
    #13

Nameservers

info

6 of 6 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns1.owenscorning.com 205.204.1.147NOERROR, 121 ms, authoritativenoyes / yesrefused-
ns2.owenscorning.com 205.204.2.143NOERROR, 117 ms, authoritativenoyes / yesrefused-
ns3.owenscorning.com 185.223.55.48NOERROR, 21 ms, authoritativenoyes / yesrefused-
ns4.owenscorning.com 208.94.148.13NOERROR, 3 ms, authoritativenoyes / yesrefusedDNS Made Easy Anycast
ns5.owenscorning.com 208.80.124.13NOERROR, 3 ms, authoritativenoyes / yesrefusedDNS Made Easy Anycast
ns6.owenscorning.com 208.80.126.13NOERROR, 3 ms, authoritativenoyes / yesrefusedDNS Made Easy Anycast

Checks

  • ✓ All respond #14
    All 6 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: ns4.owenscorning.com: "DNS Made Easy Anycast"; ns5.owenscorning.com: "DNS Made Easy Anycast"; ns6.owenscorning.com: "DNS Made Easy Anycast".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

fail

serial 2014112681 · primary ns1.owenscorning.com

Found

Primary (MNAME)
ns1.owenscorning.com
Contact (RNAME)
hostmaster\@owenscorning.com
Serial
2014112681
Refresh / retry
3600 s / 600 s
Expire
86400 s
Negative TTL
3600 s

Serial per nameserver

NameserverSerial
ns1.owenscorning.com (205.204.1.147)2014112681
ns2.owenscorning.com (205.204.2.143)2014112681
ns3.owenscorning.com (185.223.55.48)2014112681
ns4.owenscorning.com (208.94.148.13)2014112681
ns5.owenscorning.com (208.80.124.13)2014112681
ns6.owenscorning.com (208.80.126.13)2014112681

Checks

  • ✓ Serial 2014112681 everywhere #22
    All nameservers serve the same version of the zone.
  • !
    Unusual SOA timers
    expire 1d is shorter than 7d; secondaries stop answering too soon when the primary is down. Current values: refresh 1h, retry 10m, expire 1d, negative TTL 1h.
    #23
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns1.owenscorning.com is one of the listed nameservers.
  • ✗
    Invalid contact address
    The SOA RNAME "hostmaster\\@owenscorning.com" contains an @; it must be written with a dot instead (hostmaster.example.com).
    #25
  • ✓ Date-based serial #26
    The serial 2014112681 follows the YYYYMMDDnn convention (2014-11-26).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

43 records at the apex

Found

Read from
205.204.1.147:53
TypeValueTTL
SOAns1.owenscorning.com. hostmaster\@owenscorning.com. 2014112681 3600 600 86400 36003600
NSns1.owenscorning.com.3600
NSns2.owenscorning.com.3600
NSns3.owenscorning.com.3600
NSns4.owenscorning.com.3600
NSns6.owenscorning.com.3600
NSns5.owenscorning.com.3600
A15.197.134.1203600
A3.33.157.2053600
MX0 owenscorning-com.mail.protection.outlook.com.3600
TXT"vercel-domain-verification-y5esaq=l1SstuCojsvmiV25EBzU2ujix"3600
TXT"MS=ms35955307"3600
TXT"_h5er91o97k0zeva56wf3cr3c3u9jy1b"3600
TXT"_ql657rhusoipbru8l106ophcdr8ndpy"3600
TXT"d365mktkey=veAxuyBzNxLlxt0rVZb8nxDSxlIW2qtDInuqhAgr6I4x"3600
TXT"O8+j8EwcJHH2cYUIvsb9JJJxUK91hK5i3m1KEXcmmlJbKkjTu4cW06eUdLn7w1oZHOJ6rvX7o4fAGqUhw5Txgw=="3600
TXT"d365mktkey=Zr0SRhv3MEWpLER8hA2WQJG2zeEVIkVQXsDXq1QhnBgx"3600
TXT"docusign=e902d4a0-f52d-4324-956b-4182cf4cf6cc"3600
TXT"SFMC-__7pUFPZU-ObGBJN5Ym6lloZ-9qU_kdPvUId8z_q"3600
TXT"3128e290-a7a3-4f22-a5ed-2bde1980ad8f"3600
TXT"twilio-domain-verification=80b5d9a6ee350b8878bcb67c498f8e01"3600
TXT"facebook-domain-verification=9plnpcq5uah0a249wakfmhtk0vlcce"3600
TXT"atlassian-domain-verification=MnZac6vT5dGG4qFEr2SyjI+YNJuSAo0eBDR3rdhjLbDKMPeo/G+KpBm6BI/3VVXF"3600
TXT"paloaltonetworks-site-verification=2f3e4464e33525c19cb8254319f495ecd6eba68c3afd89ae7c07b5a7e9abdeff"3600
TXT"adobe-idp-site-verification=018e3390ef85821036c109b7bf9859d6ec152f13e67c754f20759149bb6d1bff"3600
TXT"docusign=1f12d7e0-9a4c-4222-9ff6-2d8bee0283fc"3600
TXT"jamf-site-verification=kYBy7FcUrmYDFJyYFZiqWQ"3600
TXT"miro-verification=0133322d6dfc4c3604b161def3fee6c8723bba4d"3600
TXT"google-site-verification=abSyS_E3ZYBIeLhNtoCng-JTP3i14A4o-GWP1fwbPws"3600
TXT"google-site-verification=27U93COZfgHqa_nglr1IrUeqHJMGytTLTiq5jLapLF8"3600
TXT"work-accounts-domain-verification=Hz1aG6HiUeEEWgVsSscmG1FbyR9fm4"3600
TXT"bv-domain-verification=1008dd588df04056e5ca43001ae123d317a72a60dd968f76429948b9a60a7843"3600
TXT"wiz-domain-verification=2096c0acddc2c69129d222527046a94b71946d86fab69addfbe3ad4e284335e7"3600
TXT"d365mktkey=OcJSRn56tIYRJOqS7Z3IhfN0NVOEjhtTE9OvLEpSaHox"3600
TXT"apple-domain-verification=xvkXoEO9LBqLEOvK"3600
TXT"sitecore-domain-verification=26d94c886bf3498fb674a1aba99a8b35"3600
TXT"v=spf1 ip4:205.204.2.2 ip4:205.204.1.64 include:spf.protection.outlook.com include:_spf-dc8.sapsf.com include:spf1.owenscorning.com include:ipreomail.com ip4:216.74.162.13 ip4:216.74.162.14 ip4:205.204.2.21 ip4:205.204.1.75 -all"60
TXT"onetrust-domain-verification=7667e84e5c524a5e857c9134a3ee42a7"3600
TXT"facebook-domain-verification=txtmaefz8wel9acrpem5sus4y8o7zq"3600
TXT"vertexinc-cloud-f5ae970f-3f6e-4e24-9015-6f3c7daea9c8"3600
TXT"anthropic-domain-verification-74e5ad=9S9k0Vj5Hdv60GQnFM5be5pfK"3600
TXT"cisco-ci-domain-verification=1306cb0ab0266a7e6a317598d983829856094d5d47b2b0379ea21efc53b4ead"3600
TXT"smartsheet-site-validation=ARw3CgvVCRSIBtBgGus2kUH2_sMZPhwH"3600

Checks

  • ✓ TTLs within range #32
    TTLs: A 1h, MX 1h, NS 1h. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35