skf.com

Checked 22 October 2026, 10:43 UTC · via 8.8.8.8
!Passed with warnings
23 passed 3 warnings 0 failed 5 info

Registration

info

.com generic · CSC Corporate Domains, Inc. · expires 2026-12-02

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
3 December 1996
Last changed
28 November 2025
Expires
2 December 2026
Status
client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
dns01.skf.com, dns02.skf.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2026-12-02 #3
    The registration is valid until 2026-12-02 (40 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

dns01.skf.com, dns02.skf.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
dns01.skf.com, dns02.skf.com
NS in the zone
dns01.skf.com, dns02.skf.com
NameserverAddressesNetwork (AS)Glue
dns01.skf.com57.67.127.194 2a01:ce89:8000:1001:57:67:127:194AS51964 ORANGE-BUSINESS-SERVICES-IPSN-ASN - ORANGE BUSINESS SERVICES U.S. Inc., US AS51964 ORANGE-BUSINESS-SERVICES-IPSN-ASN - ORANGE BUSINESS SERVICES U.S. Inc., US57.67.127.194
dns02.skf.com57.73.127.194 2a01:ce9d:0:1001:57:73:127:194AS51964 ORANGE-BUSINESS-SERVICES-IPSN-ASN - ORANGE BUSINESS SERVICES U.S. Inc., US AS51964 ORANGE-BUSINESS-SERVICES-IPSN-ASN - ORANGE BUSINESS SERVICES U.S. Inc., US57.73.127.194

Checks

  • i
    2 nameservers
    Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: dns01.skf.com, dns02.skf.com.
    #6
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • !
    Glue differs from the zone
    The addresses at the parent (glue) differ from the addresses in the zone: dns01.skf.com (glue 57.67.127.194, zone 57.67.127.194, 2a01:ce89:8000:1001:57:67:127:194); dns02.skf.com (glue 57.73.127.194, zone 57.73.127.194, 2a01:ce9d:0:1001:57:73:127:194). Update the glue at your registrar.
    #8
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 2 IPv4 /24s and 2 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS51964 (ORANGE-BUSINESS-SERVICES-IPSN-ASN - ORANGE BUSINESS SERVICES U.S. Inc., US): 4 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

pass

4 of 4 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
dns01.skf.com 57.67.127.194NOERROR, 14 ms, authoritativenoyes / yesrefused-
dns01.skf.com 2a01:ce89:8000:1001:57:67:127:194NOERROR, 14 ms, authoritativenoyes / yesrefused-
dns02.skf.com 57.73.127.194NOERROR, 162 ms, authoritativenoyes / yesrefused-
dns02.skf.com 2a01:ce9d:0:1001:57:73:127:194NOERROR, 164 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 4 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 2022073424 · primary dns01.skf.com

Found

Primary (MNAME)
dns01.skf.com
Contact (RNAME)
dns\.operations.orange.com
Serial
2022073424
Refresh / retry
1800 s / 3600 s
Expire
2419200 s
Negative TTL
600 s

Serial per nameserver

NameserverSerial
dns01.skf.com (57.67.127.194)2022073424
dns01.skf.com (2a01:ce89:8000:1001:57:67:127:194)2022073424
dns02.skf.com (57.73.127.194)2022073424
dns02.skf.com (2a01:ce9d:0:1001:57:73:127:194)2022073424

Checks

  • ✓ Serial 2022073424 everywhere #22
    All nameservers serve the same version of the zone.
  • !
    Unusual SOA timers
    retry 1h should be shorter than refresh 30m. Current values: refresh 30m, retry 1h, expire 28d, negative TTL 10m.
    #23
  • ✓ Primary is a public nameserver #24
    The primary nameserver dns01.skf.com is one of the listed nameservers.
  • ✓ Contact dns.operations@orange.com #25
    The SOA RNAME dns\.operations.orange.com means dns.operations@orange.com.
  • ✓ Timestamp serial #26
    The serial 2022073424 is a Unix timestamp (2034-01-28 15:03 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

30 records at the apex

Found

Read from
57.67.127.194:53
TypeValueTTL
SOAdns01.skf.com. dns\.operations.orange.com. 2022073424 1800 3600 2419200 60086400
NSdns02.skf.com.3600
NSdns01.skf.com.3600
A20.86.182.893600
MX5 skf-com.mail.protection.outlook.com.3600
MX1 skf-com.mail.protection.outlook.com.3600
MX10 skf-com.mail.protection.outlook.com.3600
TXT"v=DMARC1; p=none; rua=mailto:1b366b67d329107@rep.dmarcanalyzer.com; ruf=mailto:1b366b67d329107@for.dmarcanalyzer.com; fo=1;"3600
TXT"google-site-verification=kgR8tfGeRLrmWzWy_LqmyCaMcnpQeRXu7AZIiWmmGWY"3600
TXT"facebook-domain-verification=6u0xy2nng07p6l8rfx13hkl4vll7ve"3600
TXT"flexera-domain-verification-geuwzvklswerlshu"3600
TXT"uber-domain-verification=b99e5594-4402-47f0-92c7-2a22ab94c2a6"3600
TXT"amazonses:zE4iwURHgPvLqIJNuS21kiO/8HrDEcTsD8MkoflmnfI="3600
TXT"teamviewer-sso-verification=e1c7d81fb7614d19960cbd9280f1e31f"3600
TXT"v=spf1 include:spf.protection.outlook.com include:spf1.skf.com include:spf2.skf.com include:spf3.skf.com include:_spf.google.com include:4611544.spf07.hubspotemail.net include:spf.eu.odmad.quest-on-demand.com ip4:217.77.192.9 ip4:217.77.193.9 -all"3600
TXT"miro-verification=68eec0d88e75209601f6240f2e74c96c57cddb72"3600
TXT"google-site-verification=JbrkbFl-BuOAoxwkRqlyjZG11xyg2zLvMGji9558AE8"3600
TXT"DomainVerification=OEOW5VKXN8XPFRAV8899BJD1TNH8E3X29XHE8PKE1P36AN258F6AN27IMDQAZSNM"3600
TXT"mongodb-site-verification=IpeFNhKMYfPZoWagubug14fofWlBfdO4"3600
TXT"vmware-cloud-verification-374b9805-21a3-4bbf-b074-87a5b60d6d0a"3600
TXT"snowflake-verification=0b0aca62-01a1-1000-8070-0000000003f6"3600
TXT"docusign=bd60fc9e-aa4e-43b3-853e-67e26923a7db"3600
TXT"t5mrm80ovoljpdtsatv7tdk12t"3600
TXT"apple-domain-verification=tnC5wKsLJRF23VXi"3600
TXT"amazonses:ZQGmSn7pjHvvqHSxwDrJa4D0yoMlQoqRKLWQDPc/xTg=\013\010"3600
TXT"NV=dmuyy8lpy34hvbd8"3600
TXT"infor-cloudsuite-domain-verification=JPLUXV2SDW5V6XFA57YM7L4PTYY3T5DEY32ZNETGRSUSHZ64LJSZ54ZVG39TQAGV"3600
TXT"anthropic-domain-verification-cky48c=5TujjSjBqkwssMqR8k4JFUKIF"3600
TXT"docusign=fe900b11-0626-4cf0-afc7-ac50ebfe8157"3600
TXT"docusign=69656caf-3c69-42c3-99a1-8435fc7a3d6a"3600

Checks

  • ✓ TTLs within range #32
    TTLs: A 1h, MX 1h, NS 1h. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35