purina.com

Checked 22 October 2026, 10:22 UTC · via 8.8.8.8
!Passed with warnings
25 passed 1 warning 0 failed 5 info

Registration

info

.com generic · Nom-iq Ltd. dba COM LAUDE · expires 2027-01-01

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
Nom-iq Ltd. dba COM LAUDE
Registered
2 January 1996
Last changed
2 December 2025
Expires
1 January 2027
Status
client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
amsdns1.nestle.com, aoadns1.nestle.com, ctrdns1.nestle.com, eurdns1.nestle.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-01-01 #3
    The registration is valid until 2027-01-01 (70 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

amsdns1.nestle.com, aoadns1.nestle.com, ctrdns1.nestle.com, eurdns1.nestle.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
amsdns1.nestle.com, aoadns1.nestle.com, ctrdns1.nestle.com, eurdns1.nestle.com
NS in the zone
amsdns1.nestle.com, aoadns1.nestle.com, ctrdns1.nestle.com, eurdns1.nestle.com
NameserverAddressesNetwork (AS)Glue
amsdns1.nestle.com204.74.66.154 2001:502:f3ff::29aAS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US2001:502:f3ff::29a 204.74.66.154
aoadns1.nestle.com204.74.67.154 2610:a1:1015::29aAS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US204.74.67.154 2610:a1:1015::29a
ctrdns1.nestle.com204.74.110.154 2610:a1:1014::29aAS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US204.74.110.154 2610:a1:1014::29a
eurdns1.nestle.com204.74.111.154 2001:502:4612::29aAS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US2001:502:4612::29a 204.74.111.154

Checks

  • ✓ 4 nameservers #6
    Delegated to amsdns1.nestle.com, aoadns1.nestle.com, ctrdns1.nestle.com, eurdns1.nestle.com.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 4 IPv4 /24s and 4 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS12008 (VERCARA - Vercara, LLC, US): 8 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

info

8 of 8 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
amsdns1.nestle.com 204.74.66.154NOERROR, 4 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
amsdns1.nestle.com 2001:502:f3ff::29aNOERROR, 5 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
aoadns1.nestle.com 204.74.67.154NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
aoadns1.nestle.com 2610:a1:1015::29aNOERROR, 5 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
ctrdns1.nestle.com 204.74.110.154NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
ctrdns1.nestle.com 2610:a1:1014::29aNOERROR, 7 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
eurdns1.nestle.com 204.74.111.154NOERROR, 31 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
eurdns1.nestle.com 2001:502:4612::29aNOERROR, 32 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver

Checks

  • ✓ All respond #14
    All 8 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: amsdns1.nestle.com: "UltraDNS Nameserver"; aoadns1.nestle.com: "UltraDNS Nameserver"; ctrdns1.nestle.com: "UltraDNS Nameserver"; eurdns1.nestle.com: "UltraDNS Nameserver".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2015014009 · primary ctrdns1.nestle.com

Found

Primary (MNAME)
ctrdns1.nestle.com
Contact (RNAME)
nestlednsadmin.nestle.com
Serial
2015014009
Refresh / retry
7200 s / 900 s
Expire
1209600 s
Negative TTL
3600 s

Serial per nameserver

NameserverSerial
amsdns1.nestle.com (204.74.66.154)2015014009
amsdns1.nestle.com (2001:502:f3ff::29a)2015014009
aoadns1.nestle.com (204.74.67.154)2015014009
aoadns1.nestle.com (2610:a1:1015::29a)2015014009
ctrdns1.nestle.com (204.74.110.154)2015014009
ctrdns1.nestle.com (2610:a1:1014::29a)2015014009
eurdns1.nestle.com (204.74.111.154)2015014009
eurdns1.nestle.com (2001:502:4612::29a)2015014009

Checks

  • ✓ Serial 2015014009 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 2h, retry 15m, expire 14d, negative TTL 1h.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ctrdns1.nestle.com is one of the listed nameservers.
  • ✓ Contact nestlednsadmin@nestle.com #25
    The SOA RNAME nestlednsadmin.nestle.com means nestlednsadmin@nestle.com.
  • ✓ Timestamp serial #26
    The serial 2015014009 is a Unix timestamp (2033-11-07 22:06 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

27 records at the apex

Found

Read from
204.74.66.154:53
TypeValueTTL
SOActrdns1.nestle.com. nestlednsadmin.nestle.com. 2015014009 7200 900 1209600 36003600
NSamsdns1.nestle.com.3600
NSaoadns1.nestle.com.3600
NSctrdns1.nestle.com.3600
NSeurdns1.nestle.com.3600
A99.83.129.683600
A75.2.65.1693600
MX10 purina-com.mail.protection.outlook.com.3600
TXT"938e61b51554445ea7891b5a7d2ee393"3600
TXT"_cg4z3fj2h5mr3o0isftpzzbtsciz3zq"3600
TXT"_sti7rx58rpoo8ckstcmwsrmaidr74pd"3600
TXT"nqfmdpydr835ryhflb0cthcms7f8zb08"3600
TXT"swl77wvmdgbn0xy8dwb8v46y36nb72gd"3600
TXT"yhygl3pqx47s696c8w3bhpfpwm9skwth"3600
TXT"v=msv1 t=BABB199A-B233-4AD6-8B23-1E93E2B6246C"3600
TXT"mentimeter-3c17cb1e-42d6-46d1-a05c-a924bf2f04f4"3600
TXT"sectigo.com; accounturi=acct:41662911832@sectigo.com"3600
TXT"facebook-domain-verification=g4p6pmo4n6rsimmokpgbnhmoq6j13n"3600
TXT"v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all"3600
TXT"egG55CbvDjnU60qMw5Qd_uHY6oH77bdCMLrvKjLSfVaTJB7YBEN4X83T26vyVHw"3600
TXT"google-site-verification=9IV098qdhMB76u9vRvwxgY7WOAxCo5DY4WJ3NcX6_eI"3600
TXT"google-site-verification=U2AsBv7BbQBx-USh_mfmieg_rwJ3fYvBY-zo-QVcdhU"3600
TXT"google-site-verification=j7P7PlL7CFKQhPzBY8CzRGPu8vHuxaaikztQfloD7MI"3600
TXT"google-site-verification=vgBXhsy41MtS0nSYa6CU4VlzyPUEFRojD5fpsUewEAE"3600
TXT"apple-domain-verification=YVCF6yZo_6EjQuGdHrZG1qjXgwp-X3V6034sij1lGOM"3600
TXT"scnv-verification=82bc9364603396f86bcfdc904999470e:324bf3e563658d173824ec70f3e3757b:81ae59ffb3a54032ae1a992fea0b6693"3600
TXT"scnv-verification=82bc9364603396f86bcfdc904999470e:4e96dff11debb60545d0125fa95470b3:497a4afdddd64b8fab617c960de95b0f"3600

Checks

  • ✓ TTLs within range #32
    TTLs: A 1h, MX 1h, NS 1h. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35