service-now.com

Checked 22 October 2026, 10:40 UTC · via 8.8.8.8
!Passed with warnings
29 passed 4 warnings 0 failed 2 info

Registration

info

.com generic · CSC Corporate Domains, Inc. · expires 2027-07-04

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
4 July 2001
Last changed
12 November 2025
Expires
4 July 2027
Status
client transfer prohibited
Registry nameservers
aus1.akam.net, edns140.ultradns.biz, edns140.ultradns.com, edns140.ultradns.net, edns140.ultradns.org, eur6.akam.net, ns1-234.akam.net, ns1-98.akam.net, usc4.akam.net, use1.akam.net, use3.akam.net, usw1.akam.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-07-04 #3
    The registration is valid until 2027-07-04 (255 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

aus1.akam.net, edns140.ultradns.biz, edns140.ultradns.com, edns140.ultradns.net, edns140.ultradns.org, eur6.akam.net, ns1-234.akam.net, ns1-98.akam.net, usc4.akam.net, use1.akam.net, use3.akam.net, usw1.akam.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
aus1.akam.net, edns140.ultradns.biz, edns140.ultradns.com, edns140.ultradns.net, edns140.ultradns.org, eur6.akam.net, ns1-234.akam.net, ns1-98.akam.net, usc4.akam.net, use1.akam.net, use3.akam.net, usw1.akam.net
NS in the zone
aus1.akam.net, edns140.ultradns.biz, edns140.ultradns.com, edns140.ultradns.net, edns140.ultradns.org, eur6.akam.net, ns1-234.akam.net, ns1-98.akam.net, usc4.akam.net, use1.akam.net, use3.akam.net, usw1.akam.net
NameserverAddressesNetwork (AS)Glue
aus1.akam.net184.85.248.65AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
edns140.ultradns.biz204.74.67.140 2610:a1:1015::28cAS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-
edns140.ultradns.com204.74.66.140 2001:502:f3ff::28cAS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US2001:502:f3ff::28c 204.74.66.140
edns140.ultradns.net204.74.110.140 2610:a1:1014::28cAS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-
edns140.ultradns.org204.74.111.140 2001:502:4612::28cAS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-
eur6.akam.net2.22.230.64AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
ns1-234.akam.net193.108.91.234 2600:1401:2::eaAS20940 AKAMAI-ASN1 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
ns1-98.akam.net193.108.91.98 2600:1401:2::62AS20940 AKAMAI-ASN1 - Akamai International B.V., NL AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
usc4.akam.net184.26.160.65AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
use1.akam.net72.246.46.64AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
use3.akam.net96.7.49.65AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-
usw1.akam.net23.61.199.66AS21342 AKAMAI-ASN2 - Akamai International B.V., NL-

Checks

  • ✓ 12 nameservers #6
    Delegated to aus1.akam.net, edns140.ultradns.biz, edns140.ultradns.com, edns140.ultradns.net, edns140.ultradns.org, eur6.akam.net, ns1-234.akam.net, ns1-98.akam.net, usc4.akam.net, use1.akam.net, use3.akam.net, usw1.akam.net.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 11 IPv4 /24s and 5 IPv6 /48s.
  • ✓ 3 autonomous systems #11
    The nameservers are spread over: AS12008 (VERCARA - Vercara, LLC, US): 8 addresses; AS20940 (AKAMAI-ASN1 - Akamai International B.V., NL): 2 addresses; AS21342 (AKAMAI-ASN2 - Akamai International B.V., NL): 8 addresses.
  • ✓ Nameserver names under 4 TLDs #12
    Nameserver names use the TLDs .biz, .com, .net, .org.
  • i
    Partly IPv6
    These nameservers have no IPv6 address: aus1.akam.net, eur6.akam.net, usc4.akam.net, use1.akam.net, use3.akam.net, usw1.akam.net.
    #13

Nameservers

warn

18 of 18 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
aus1.akam.net 184.85.248.65NOERROR, 6 ms, authoritativenoyes / yesrefused41824.8
edns140.ultradns.biz 204.74.67.140NOERROR, 6 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
edns140.ultradns.biz 2610:a1:1015::28cNOERROR, 6 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
edns140.ultradns.com 204.74.66.140NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
edns140.ultradns.com 2001:502:f3ff::28cNOERROR, 5 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
edns140.ultradns.net 204.74.110.140NOERROR, 3 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
edns140.ultradns.net 2610:a1:1014::28cNOERROR, 5 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
edns140.ultradns.org 204.74.111.140NOERROR, 34 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
edns140.ultradns.org 2001:502:4612::28cNOERROR, 34 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
eur6.akam.net 2.22.230.64NOERROR, 5 ms, authoritativenoyes / yesrefused41824.7
ns1-234.akam.net 193.108.91.234NOERROR, 3 ms, authoritativenoyes / yesrefused41824.9
ns1-234.akam.net 2600:1401:2::eaNOERROR, 4 ms, authoritativenoyes / yesrefused41824.10
ns1-98.akam.net 193.108.91.98NOERROR, 4 ms, authoritativenoyes / yesrefused41824.11
ns1-98.akam.net 2600:1401:2::62NOERROR, 4 ms, authoritativenoyes / yesrefused41824.5
usc4.akam.net 184.26.160.65NOERROR, 5 ms, authoritativenoyes / yesrefused48878.30
use1.akam.net 72.246.46.64NOERROR, 5 ms, authoritativenoyes / yesrefused48878.29
use3.akam.net 96.7.49.65NOERROR, 3 ms, authoritativenoyes / yesrefused41824.7
usw1.akam.net 23.61.199.66NOERROR, 4 ms, authoritativenoyes / yesrefused41824.7

Checks

  • ✓ All respond #14
    All 18 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: aus1.akam.net: "41824.8"; eur6.akam.net: "41824.7"; ns1-234.akam.net: "41824.9"; ns1-234.akam.net: "41824.10"; ns1-98.akam.net: "41824.11"; ns1-98.akam.net: "41824.5"; usc4.akam.net: "48878.30"; use1.akam.net: "48878.29"; use3.akam.net: "41824.7"; usw1.akam.net: "41824.7". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 6348579 · primary edns140.ultradns.com

Found

Primary (MNAME)
edns140.ultradns.com
Contact (RNAME)
root.service-now.com
Serial
6348579
Refresh / retry
900 s / 1800 s
Expire
31536000 s
Negative TTL
3600 s

Serial per nameserver

NameserverSerial
aus1.akam.net (184.85.248.65)6348579
edns140.ultradns.biz (204.74.67.140)6348582
edns140.ultradns.biz (2610:a1:1015::28c)6348582
edns140.ultradns.com (204.74.66.140)6348582
edns140.ultradns.com (2001:502:f3ff::28c)6348582
edns140.ultradns.net (204.74.110.140)6348582
edns140.ultradns.net (2610:a1:1014::28c)6348582
edns140.ultradns.org (204.74.111.140)6348582
edns140.ultradns.org (2001:502:4612::28c)6348582
eur6.akam.net (2.22.230.64)6348579
ns1-234.akam.net (193.108.91.234)6348579
ns1-234.akam.net (2600:1401:2::ea)6348579
ns1-98.akam.net (193.108.91.98)6348579
ns1-98.akam.net (2600:1401:2::62)6348579
usc4.akam.net (184.26.160.65)6348581
use1.akam.net (72.246.46.64)6348581
use3.akam.net (96.7.49.65)6348579
usw1.akam.net (23.61.199.66)6348579

Checks

  • !
    Serials differ
    The nameservers serve different versions of the zone: 6348579 on aus1.akam.net (184.85.248.65), eur6.akam.net (2.22.230.64), ns1-234.akam.net (193.108.91.234), ns1-234.akam.net (2600:1401:2::ea), ns1-98.akam.net (193.108.91.98), ns1-98.akam.net (2600:1401:2::62), use3.akam.net (96.7.49.65), usw1.akam.net (23.61.199.66); 6348581 on usc4.akam.net (184.26.160.65), use1.akam.net (72.246.46.64); 6348582 on edns140.ultradns.biz (204.74.67.140), edns140.ultradns.biz (2610:a1:1015::28c), edns140.ultradns.com (204.74.66.140), edns140.ultradns.com (2001:502:f3ff::28c), edns140.ultradns.net (204.74.110.140), edns140.ultradns.net (2610:a1:1014::28c), edns140.ultradns.org (204.74.111.140), edns140.ultradns.org (2001:502:4612::28c). This is normal for a few minutes after a change; if it lasts, zone transfers to the secondaries are failing.
    #22
  • !
    Unusual SOA timers
    refresh 15m is outside 20m–1d; retry 30m should be shorter than refresh 15m. Current values: refresh 15m, retry 30m, expire 365d, negative TTL 1h.
    #23
  • ✓ Primary is a public nameserver #24
    The primary nameserver edns140.ultradns.com is one of the listed nameservers.
  • ✓ Contact root@service-now.com #25
    The SOA RNAME root.service-now.com means root@service-now.com.
  • ✓ Counter serial #26
    The serial 6348579 is a plain counter.

DNSSEC

pass

Signed, DS published at parent

Found

Validated by resolver
yes
Denial of existence
NSEC3
NSEC3
0 iterations, 0-byte salt
Signatures valid until
5 November 2026

DS at the parent

Key tagAlgorithmDigestMatches a key
5874ECDSAP256SHA256 (13)SHA256 671CEB62476C6009…yes

DNSKEY in the zone

Key tagRoleAlgorithm
61409ZSK (256)ECDSAP256SHA256 (13)
5874KSK (257)ECDSAP256SHA256 (13)

Checks

  • ✓ Signed and validated #27
    The zone is signed, the parent publishes a DS record, and the resolver validates the answers.
  • ✓ DS matches a key #28
    The DS record at the parent matches a key in the zone: key tag 5874 (SHA256).
  • ✓ Modern algorithms #29
    Key algorithms: ECDSAP256SHA256 (13).
  • ✓ Signatures valid until 2026-11-05 #30
    The earliest DNSKEY/SOA signature expires at 2026-11-05 00:00 UTC.
  • ✓ NSEC3 as recommended #31
    The zone uses NSEC3 with 0 iterations and no salt (RFC 9276).

Records

warn

31 records at the apex

Found

Read from
184.85.248.65:53
TypeValueTTL
SOAedns140.ultradns.com. root.service-now.com. 6348579 900 1800 31536000 360060
NSedns140.ultradns.com.3600
NSedns140.ultradns.biz.3600
NSns1-234.akam.net.3600
NSns1-98.akam.net.3600
NSedns140.ultradns.net.3600
NSuse1.akam.net.3600
NSusc4.akam.net.3600
NSusw1.akam.net.3600
NSeur6.akam.net.3600
NSedns140.ultradns.org.3600
NSuse3.akam.net.3600
NSaus1.akam.net.3600
A148.139.193.12560
A148.139.192.12560
MX10 mx01.service-now.com.60
MX10 mx03.service-now.com.60
MX10 mx04.service-now.com.60
MX10 mx02.service-now.com.60
TXT"google-site-verification=Ja_kX8vmbMKl2RJlbiMDTDqoINbRsWCwlD514pybTNE"3600
TXT"yahoo-verification-key=tSCs3azHZcA2PXH8v2diOdAsBfA1ILu6jXrugBSnkbs="3600
TXT"_eqc5fmc6a19if8n4zuakknuit8r0eus"3600
TXT"v=spf1 exists:%{ir}.spf.mail.service-now.com ~all"3600
TXT"MS=ms74154376"3600
TXT"_wsu85ta6scogskj0cf00qirrzisonqq"3600
TXT"_xln3eyqm0jwi0ufk1f8urbsrrjikhba"3600
TXT"google-site-verification=aV0otFtAFf8E4oVgu6ETAkBM2rtsy1kb-B60OotOnUQ"3600
CAA0 issue "letsencrypt.org"60
CAA0 issue "entrust.net"60
CAA0 issue "digicert.com"60
CAA0 iodef "mailto:domains-infrastructure@servicenow.com"60

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: A (1m), MX (1m). Low TTLs are useful just before a planned change. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: letsencrypt.org, entrust.net, digicert.com.