pingidentity.com

Checked 22 October 2026, 10:14 UTC · via 8.8.8.8
!Passed with warnings
25 passed 3 warnings 0 failed 3 info

Registration

info

.com generic · Network Solutions, LLC · expires 2026-12-31

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
Network Solutions, LLC
Registered
31 December 2001
Last changed
1 November 2025
Expires
31 December 2026
Status
client transfer prohibited
Registry nameservers
ns-1362.awsdns-42.org, ns-341.awsdns-42.com, ns-987.awsdns-59.net, ns0.dnsmadeeasy.com, ns1.dnsmadeeasy.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2026-12-31 #3
    The registration is valid until 2026-12-31 (70 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

ns-1362.awsdns-42.org, ns-341.awsdns-42.com, ns-987.awsdns-59.net, ns0.dnsmadeeasy.com, ns1.dnsmadeeasy.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns-1362.awsdns-42.org, ns-341.awsdns-42.com, ns-987.awsdns-59.net, ns0.dnsmadeeasy.com, ns1.dnsmadeeasy.com
NS in the zone
ns-1362.awsdns-42.org, ns-341.awsdns-42.com, ns-987.awsdns-59.net, ns0.dnsmadeeasy.com, ns1.dnsmadeeasy.com, ns2.dnsmadeeasy.com
NameserverAddressesNetwork (AS)Glue
ns-1362.awsdns-42.org205.251.197.82 2600:9000:5305:5200::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-
ns-341.awsdns-42.com205.251.193.85 2600:9000:5301:5500::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US205.251.193.85 2600:9000:5301:5500::1
ns-987.awsdns-59.net205.251.195.219 2600:9000:5303:db00::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-
ns0.dnsmadeeasy.com208.94.148.2 2600:1800::1AS16552 DIGICERT - Tiggee LLC, US AS16552 DIGICERT - Tiggee LLC, US208.94.148.2 2600:1800::1
ns1.dnsmadeeasy.com208.80.124.2 2600:1801:1::1AS16552 DIGICERT - Tiggee LLC, US AS16552 DIGICERT - Tiggee LLC, US208.80.124.2 2600:1801:1::1
ns2.dnsmadeeasy.com (zone only)208.80.126.2 2600:1802:2::1AS16552 DIGICERT - Tiggee LLC, US AS16552 DIGICERT - Tiggee LLC, US-

Checks

  • ✓ 5 nameservers #6
    Delegated to ns-1362.awsdns-42.org, ns-341.awsdns-42.com, ns-987.awsdns-59.net, ns0.dnsmadeeasy.com, ns1.dnsmadeeasy.com.
  • !
    NS sets differ
    The nameservers at the parent and in the zone should be the same. Only in the zone: ns2.dnsmadeeasy.com. ns-1362.awsdns-42.org, ns-341.awsdns-42.com, ns-987.awsdns-59.net, ns0.dnsmadeeasy.com, ns1.dnsmadeeasy.com, ns2.dnsmadeeasy.com report NS ns-1362.awsdns-42.org ns-341.awsdns-42.com ns-987.awsdns-59.net ns0.dnsmadeeasy.com ns1.dnsmadeeasy.com ns2.dnsmadeeasy.com.
    #7
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 6 IPv4 /24s and 6 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS16509 (AMAZON-02 - Amazon.com, Inc., US): 6 addresses; AS16552 (DIGICERT - Tiggee LLC, US): 6 addresses.
  • ✓ Nameserver names under 3 TLDs #12
    Nameserver names use the TLDs .com, .net, .org.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

info

12 of 12 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns-1362.awsdns-42.org 205.251.197.82NOERROR, 3 ms, authoritativenoyes / yesrefused-
ns-1362.awsdns-42.org 2600:9000:5305:5200::1NOERROR, 4 ms, authoritativenoyes / yesrefused-
ns-341.awsdns-42.com 205.251.193.85NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-341.awsdns-42.com 2600:9000:5301:5500::1NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-987.awsdns-59.net 205.251.195.219NOERROR, 4 ms, authoritativenoyes / yesrefused-
ns-987.awsdns-59.net 2600:9000:5303:db00::1NOERROR, 8 ms, authoritativenoyes / yesrefused-
ns0.dnsmadeeasy.com 208.94.148.2NOERROR, 3 ms, authoritativenoyes / yesrefusedDNS Made Easy Anycast
ns0.dnsmadeeasy.com 2600:1800::1NOERROR, 4 ms, authoritativenoyes / yesrefusedDNS Made Easy Anycast
ns1.dnsmadeeasy.com 208.80.124.2NOERROR, 6 ms, authoritativenoyes / yesrefusedDNS Made Easy Anycast
ns1.dnsmadeeasy.com 2600:1801:1::1NOERROR, 6 ms, authoritativenoyes / yesrefusedDNS Made Easy Anycast
ns2.dnsmadeeasy.com 208.80.126.2NOERROR, 3 ms, authoritativenoyes / yesrefusedDNS Made Easy Anycast
ns2.dnsmadeeasy.com 2600:1802:2::1NOERROR, 3 ms, authoritativenoyes / yesrefusedDNS Made Easy Anycast

Checks

  • ✓ All respond #14
    All 12 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: ns0.dnsmadeeasy.com: "DNS Made Easy Anycast"; ns1.dnsmadeeasy.com: "DNS Made Easy Anycast"; ns2.dnsmadeeasy.com: "DNS Made Easy Anycast".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 2020012001 · primary ns0.dnsmadeeasy.com

Found

Primary (MNAME)
ns0.dnsmadeeasy.com
Contact (RNAME)
hostmaster.pingidentity.com
Serial
2020012001
Refresh / retry
14400 s / 3600 s
Expire
1209600 s
Negative TTL
300 s

Serial per nameserver

NameserverSerial
ns-1362.awsdns-42.org (205.251.197.82)2020012001
ns-1362.awsdns-42.org (2600:9000:5305:5200::1)2020012001
ns-341.awsdns-42.com (205.251.193.85)2020012001
ns-341.awsdns-42.com (2600:9000:5301:5500::1)2020012001
ns-987.awsdns-59.net (205.251.195.219)2020012001
ns-987.awsdns-59.net (2600:9000:5303:db00::1)2020012001
ns0.dnsmadeeasy.com (208.94.148.2)2020015261
ns0.dnsmadeeasy.com (2600:1800::1)2020015261
ns1.dnsmadeeasy.com (208.80.124.2)2020015261
ns1.dnsmadeeasy.com (2600:1801:1::1)2020015261
ns2.dnsmadeeasy.com (208.80.126.2)2020015261
ns2.dnsmadeeasy.com (2600:1802:2::1)2020015261

Checks

  • !
    Serials differ
    The nameservers serve different versions of the zone: 2020012001 on ns-1362.awsdns-42.org (205.251.197.82), ns-1362.awsdns-42.org (2600:9000:5305:5200::1), ns-341.awsdns-42.com (205.251.193.85), ns-341.awsdns-42.com (2600:9000:5301:5500::1), ns-987.awsdns-59.net (205.251.195.219), ns-987.awsdns-59.net (2600:9000:5303:db00::1); 2020015261 on ns0.dnsmadeeasy.com (208.94.148.2), ns0.dnsmadeeasy.com (2600:1800::1), ns1.dnsmadeeasy.com (208.80.124.2), ns1.dnsmadeeasy.com (2600:1801:1::1), ns2.dnsmadeeasy.com (208.80.126.2), ns2.dnsmadeeasy.com (2600:1802:2::1). This is normal for a few minutes after a change; if it lasts, zone transfers to the secondaries are failing.
    #22
  • ✓ Timers within recommendations #23
    SOA refresh 4h, retry 1h, expire 14d, negative TTL 5m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns0.dnsmadeeasy.com is one of the listed nameservers.
  • ✓ Contact hostmaster@pingidentity.com #25
    The SOA RNAME hostmaster.pingidentity.com means hostmaster@pingidentity.com.
  • ✓ Date-based serial #26
    The serial 2020012001 follows the YYYYMMDDnn convention (2020-01-20).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

47 records at the apex

Found

Read from
205.251.197.82:53
TypeValueTTL
SOAns0.dnsmadeeasy.com. hostmaster.pingidentity.com. 2020012001 14400 3600 1209600 300900
NSns-1362.awsdns-42.org.1800
NSns-341.awsdns-42.com.1800
NSns-987.awsdns-59.net.1800
NSns0.dnsmadeeasy.com.1800
NSns1.dnsmadeeasy.com.1800
NSns2.dnsmadeeasy.com.1800
A3.148.100.1091800
A18.217.171.651800
A18.188.35.1541800
MX10 aspmx.l.google.com.86400
MX20 alt1.aspmx.l.google.com.86400
MX20 alt2.aspmx.l.google.com.86400
MX30 alt3.aspmx.l.google.com.86400
MX30 alt4.aspmx.l.google.com.86400
TXT"00D300000000BLD=1TBVN00000009w9"3600
TXT"698212250636d664f31a4c043d050ad982cd06971436636c2f2b5ce5670e008a"3600
TXT"968435711-4334434"3600
TXT"TAILSCALE-hEERQa4O6sQgSUXYaEgC"3600
TXT"ZOOM_verify_SNQe7k4GSvGFRbp1d_AQ6A"3600
TXT"_y8ypqomej36jvmqjor4n5sy9546d7j7"3600
TXT"adobe-idp-site-verification=6ea1a4919c5329fda56909e1b9d9efbd7a579a32236cedc196d8f4bb458b375b"3600
TXT"ahrefs-site-verification_7a666fbad2a037960da55dd005a3322ab1da466da9b963a1ac63ba22a7788503"3600
TXT"anthropic-domain-verification-6ryeaz=UTsVDfoXIwdcru0OZqV97zIq2"3600
TXT"apple-domain-verification=CJ4DXRlbvPo89gZ4"3600
TXT"asv=bf8e8abb03b999b6995bca30484e7b1f"3600
TXT"atlassian-domain-verification=fbpX1BMC38lP4OICJMed2oux9eTqqGQhhvl8iIkAKyktfg4/lYPk8qa9PtoyLeLV"3600
TXT"atlassian-domain-verification=g/mvk/eeVPLkyoKJ9YK1E9iRAiJKks3a8yf9WbTPF0qk5oQaxsVxGVMrfFhyTytz"3600
TXT"d9b783a330b944659c5e417a7028ce1e"3600
TXT"docker-verification=d946c22c-5642-427d-8f7b-eb806d4fbd95"3600
TXT"docusign=1bcefe8a-e05d-45a0-a921-d0a18f640f9b"3600
TXT"drift-domain-verification=cba5fde71fb9943354dd050580d7bb1c24f2bd9c312aa4792940fc02fa5a64ac"3600
TXT"ecostruxure-it-verification=98bc0a02-78fc-4802-b648-ddfd76720fd5"3600
TXT"fastly-domain-delegation-K7Jksw1vHtRDUQzBonmO"3600
TXT"google-site-verification=TDdFiEWYhzN64wdbTthCOowzNDJUGGnoEvm8pO1C57Y"3600
TXT"google-site-verification=Za5ieUCHZO2-XCC6dupOnPnhaWfSx1azbmwlJHMMbjI"3600
TXT"google-site-verification=p8KDlaI8yCwJxmuni3s1HrWDdzjMpER2dhpuHV5yQmY"3600
TXT"jamf-site-verification=LHy7QTrFU5Pq496rubXo4Q"3600
TXT"mongodb-site-verification=OUbU6Q5SIHkZbGOGBP33rzOxYuyxtcnU"3600
TXT"onetrust-domain-verification=748a38dd08c44a2ca370bb277f179344"3600
TXT"openai-domain-verification=dv-QVf4LND2CqrCPbFYYxQ1ccxO"3600
TXT"pendo-domain-verification=63eca9c2-6121-4cf7-80f8-cfb08afcc66b"3600
TXT"sophos-domain-verification=e33ca917c0f047227eb41e20fb3d20bd67e4f420c1c45264b9e8556d7f1143b9"3600
TXT"status-page-domain-verification=4743169cznmw"3600
TXT"twilio-domain-verification=df09a25f63b5edef746924c145bc3f4f"3600
TXT"v=spf1 include:_netblocks.pingidentity.com include:_spf.google.com include:stspg-customer.com include:mktomail.com include:amazonses.com include:_spf.salesforce.com ip4:192.174.90.242 ~all"3600
TXT"zapier-domain-verification-challenge=3bf4b071-30df-45da-a7bc-a87515a17be8"3600

Checks

  • ✓ TTLs within range #32
    TTLs: A 30m, MX 1d, NS 30m. The NS TTL at the parent is 2d and in the zone 30m; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35