thehartford.com

Checked 22 October 2026, 11:02 UTC · via 8.8.8.8
!Passed with warnings
22 passed 5 warnings 0 failed 4 info

Registration

info

.com generic · CSC Corporate Domains, Inc. · expires 2027-06-10

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
11 June 1995
Last changed
6 June 2026
Expires
10 June 2027
Status
client transfer prohibited
Registry nameservers
ns1.thehartford.com, ns2.thehartford.com, ns3.thehartford.com, ns4.thehartford.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-06-10 #3
    The registration is valid until 2027-06-10 (230 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

ns1.thehartford.com, ns2.thehartford.com, ns3.thehartford.com, ns4.thehartford.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns1.thehartford.com, ns2.thehartford.com, ns3.thehartford.com, ns4.thehartford.com
NS in the zone
hfdns3.thehartford.com, hfdns4.thehartford.com, ns1.thehartford.com, ns2.thehartford.com, ns3.thehartford.com, ns4.thehartford.com, simns3.thehartford.com, simns4.thehartford.com
NameserverAddressesNetwork (AS)Glue
hfdns3.thehartford.com (zone only)162.136.188.3AS13882 HFI-18-13882 - HARTFORD FIRE INSURANCE COMPANY, US-
hfdns4.thehartford.com (zone only)162.136.188.4AS13882 HFI-18-13882 - HARTFORD FIRE INSURANCE COMPANY, US-
ns1.thehartford.com162.136.188.1AS13882 HFI-18-13882 - HARTFORD FIRE INSURANCE COMPANY, US162.136.188.1
ns2.thehartford.com162.136.190.1AS13882 HFI-18-13882 - HARTFORD FIRE INSURANCE COMPANY, US162.136.190.1
ns3.thehartford.com162.136.196.8AS13882 HFI-18-13882 - HARTFORD FIRE INSURANCE COMPANY, US162.136.196.8
ns4.thehartford.com162.136.198.8AS13882 HFI-18-13882 - HARTFORD FIRE INSURANCE COMPANY, US162.136.198.8
simns3.thehartford.com (zone only)162.136.190.3AS13882 HFI-18-13882 - HARTFORD FIRE INSURANCE COMPANY, US-
simns4.thehartford.com (zone only)162.136.190.4AS13882 HFI-18-13882 - HARTFORD FIRE INSURANCE COMPANY, US-

Checks

  • ✓ 4 nameservers #6
    Delegated to ns1.thehartford.com, ns2.thehartford.com, ns3.thehartford.com, ns4.thehartford.com.
  • !
    NS sets differ
    The nameservers at the parent and in the zone should be the same. Only in the zone: hfdns3.thehartford.com, hfdns4.thehartford.com, simns3.thehartford.com, simns4.thehartford.com. hfdns3.thehartford.com, hfdns4.thehartford.com, ns1.thehartford.com, ns2.thehartford.com, ns3.thehartford.com, ns4.thehartford.com, simns3.thehartford.com, simns4.thehartford.com report NS hfdns3.thehartford.com hfdns4.thehartford.com ns1.thehartford.com ns2.thehartford.com ns3.thehartford.com ns4.thehartford.com simns3.thehartford.com simns4.thehartford.com.
    #7
  • ✓ Glue present and correct #8
    Glue is published for the nameservers inside the zone: ns1.thehartford.com, ns2.thehartford.com, ns3.thehartford.com, ns4.thehartford.com.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 4 IPv4 /24s and 0 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS13882 (HFI-18-13882 - HARTFORD FIRE INSURANCE COMPANY, US): 8 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • !
    No IPv6
    None of the nameservers has an IPv6 address, so IPv6-only resolvers can't reach them.
    #13

Nameservers

info

8 of 8 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
hfdns3.thehartford.com 162.136.188.3NOERROR, 122 ms, authoritativenoyes / yesrefusednot currently available
hfdns4.thehartford.com 162.136.188.4NOERROR, 123 ms, authoritativenoyes / yesrefusednot currently available
ns1.thehartford.com 162.136.188.1NOERROR, 121 ms, authoritativenoyes / yesrefusednot currently available
ns2.thehartford.com 162.136.190.1NOERROR, 121 ms, authoritativenoyes / yesrefusednot currently available
ns3.thehartford.com 162.136.196.8NOERROR, 102 ms, authoritativenoyes / yesrefusednot currently available
ns4.thehartford.com 162.136.198.8NOERROR, 102 ms, authoritativenoyes / yesrefusednot currently available
simns3.thehartford.com 162.136.190.3NOERROR, 121 ms, authoritativenoyes / yesrefusednot currently available
simns4.thehartford.com 162.136.190.4NOERROR, 120 ms, authoritativenoyes / yesrefusednot currently available

Checks

  • ✓ All respond #14
    All 8 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: hfdns3.thehartford.com: "not currently available"; hfdns4.thehartford.com: "not currently available"; ns1.thehartford.com: "not currently available"; ns2.thehartford.com: "not currently available"; ns3.thehartford.com: "not currently available"; ns4.thehartford.com: "not currently available"; simns3.thehartford.com: "not currently available"; simns4.thehartford.com: "not currently available".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 2026102102 · primary hfdns3.thehartford.com

Found

Primary (MNAME)
hfdns3.thehartford.com
Contact (RNAME)
root.hfdns3.thehartford.com
Serial
2026102102
Refresh / retry
1800 s / 900 s
Expire
604800 s
Negative TTL
120 s

Serial per nameserver

NameserverSerial
hfdns3.thehartford.com (162.136.188.3)2026102102
hfdns4.thehartford.com (162.136.188.4)2026102102
ns1.thehartford.com (162.136.188.1)2026102102
ns2.thehartford.com (162.136.190.1)2026102102
ns3.thehartford.com (162.136.196.8)2026102102
ns4.thehartford.com (162.136.198.8)2026102102
simns3.thehartford.com (162.136.190.3)2026102102
simns4.thehartford.com (162.136.190.4)2026102102

Checks

  • ✓ Serial 2026102102 everywhere #22
    All nameservers serve the same version of the zone.
  • !
    Unusual SOA timers
    negative caching TTL (minimum) 2m is outside 5m–1d (RFC 2308 recommends 1–3 hours). Current values: refresh 30m, retry 15m, expire 7d, negative TTL 2m.
    #23
  • ✓ Primary is a public nameserver #24
    The primary nameserver hfdns3.thehartford.com is one of the listed nameservers.
  • ✓ Contact root@hfdns3.thehartford.com #25
    The SOA RNAME root.hfdns3.thehartford.com means root@hfdns3.thehartford.com.
  • ✓ Date-based serial #26
    The serial 2026102102 follows the YYYYMMDDnn convention (2026-10-21).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

warn

92 records at the apex

Found

Read from
162.136.188.3:53
TypeValueTTL
SOAhfdns3.thehartford.com. root.hfdns3.thehartford.com. 2026102102 1800 900 604800 120120
NSns1.thehartford.com.120
NSsimns4.thehartford.com.120
NShfdns3.thehartford.com.120
NSsimns3.thehartford.com.120
NShfdns4.thehartford.com.120
NSns2.thehartford.com.120
NSns4.thehartford.com.120
NSns3.thehartford.com.120
A162.136.188.192120
A162.136.190.192120
MX5 mx0b-001bde01.pphosted.com.3600
MX5 mx0a-001bde01.pphosted.com.3600
MX32767 ms29530564.msv1.invalid.3600
MX32767 ms46086885.msv1.invalid.3600
TXT"_e3m63pxbmppfxenda36cy5o2ktd4uta"600
TXT"apple-domain-verification=OY54qF6wVqDasZRY"600
TXT"_orvh7kgxbkb2e94bg34ru9v2kxqj25m"600
TXT"SFMC-SgjZdTyngTDSEMGUZGFdrcmCWkn2NZzYcKz2HfT9"600
TXT"facebook-domain-verification=b8fywtamp9ruspajvwabtrn1r4kg0n "600
TXT"SFMC-kG2tNVk29r1q_W2DuYNcbD3xJZuvp1tMHOjADtgY"600
TXT"SFMC-l_weXwOArWaOB-TmATBJpiAJYZ_OaaEC6tnxhnOW"600
TXT"SFMC-4AHPbYsCNlPoVCpCBrhY3fUTeTdBevLWqxdXBJbt"600
TXT"SFMC-6PSaUWB95dP3UIjxMVXyyXAKe4VI42FuNJXsv0Z_"600
TXT"SFMC-7T17Ls-ZsRsIkpsIDps3Kli29D2AnPKIZOV9DFZh"600
TXT"SFMC-Uc1z66zyc0Qd7bbW1hqHCUkv6HBECmwwaKDxFmIo"600
TXT"identrust_validate=jQ5ula48tjKGMHBChkczW4hX+I1pcVmi+jDCZW4s0f1O"600
TXT"SFMC-B-vMOFZHvgMqU7IqLsZae58g6HEFExEEZQS-z5Cl"600
TXT"_is4s22jre99a6pkxa6fq0nt79scixv8"600
TXT"SFMC-Ctr-d1WpKXdfkvbDs328vZWTcEpFszSjr2Q9C_bg"600
TXT"Dynatrace-site-verification=2254f218-cc30-4da1-aae6-2c8131a036a6__r4os5r4e4g0geuo27mcoi2v4q4"600
TXT"SFMC-NA0X-4wWYNZ4zlIwxpA4ojyQo-K0-8C1OGUmDcUj"600
TXT"facebook-domain-verification=8g1d3b7zq0skagtjhjo9xgxkgo0ous"600
TXT"google-site-verification=3kFNJdW1UNkDo2z8UTI-iFqmgdPp_ncGveXelf9a0Ro"600
TXT"SFMC-T4zGYtSiaa0YmjRu6R4-DT9EtXXmS9DxnBXO9AEQ"600
TXT"SFMC-S4O4jgmuQyTm_NlF1pWRFzXIwP2jNKy6RBuspD7e"600
TXT"MS=ms94272765"600
TXT"identrust_validation=jXKOp+A845RA5fSdSqcA/6LacQVdjZHfxvLnCcLMW97x"600
TXT"SFMC-lwK3OjXq4uc10VQrZBqUEUE9OkvONKc7awRrUv82"600
TXT"MS=ms29530564"600
TXT"_cbtv5d96cvyjqt27w9mtxi3a6jql7s9"600
TXT" jamf-site-verification=52mlflxwn_lh98y8OrduMw"600
TXT"SFMC-ZEiWgB2TXYRRolgSkPNLVgbwqI-OgvNbZirsbJuX"600
TXT"_2t939omw5mp9jvzscp30gewtvuz7768"600
TXT"ecostruxure-it-verification=141f4ca6-7dda-4c3b-8eea-73f57c99c3a0"600
TXT"SFMC-dsvt66XbusppiNwAVduzvuuqycNqCPQWlULxpasn"600
TXT"_globalsign-domain-verification=C-SoIgc_KMnsUG-DjaMBQKb3NMdlj7P-1OxGqKJVV3"600
TXT"SFMC-hXLkvH7L43iQwAsxBoXlpoJ-eMHfIZgZ0JrAt88u"600
TXT"SFMC-ikB5y9ccN0uOtMKFLdAtHbbtxv-UBgAJmMGxakLA"600
TXT"SFMC-OOXvj55_RST0iDxOXMlwufTsHjIWVPsbjGA_qsVk"600
TXT"docusign=d5f65f04-cad5-4a3a-a24e-87ffe77bd37f"600
TXT"MS=ms29219941"600
TXT"SFMC-L8olmD9ivq2gKY_TTxiKk2zQ3ySI-9U4QjQEKm5F"600
TXT"SFMC-BLgxjWfARuv6VTfPCa5onY9OFkpn7juQ2nh5HsTr"600
TXT"SFMC-b4hs-KtieqfsG_CV_cnOx9kA_m6Sam3TeUz-sVyt"600
TXT"SFMC-qBTEBX0c35-QPcKC06Ua2wqbwMSS--37cgIKN36d"600
TXT"google-site-verification=f9GgfP0P91J-rXdO3ObEN7ukCQ30NziS7LEs74Ci2fw"600
TXT"docusign=a906662a-cbcd-4f46-a4d2-e7f8308b52d6"600
TXT"SFMC-QLAQC5D9fZc2kHtIcpAbYOf8xm-2yokp72luIXPJ"600
TXT"SFMC-P4SVG9R8DnWqmoi7rnJDgth2w_KQFGwJym6ctJF_"600
TXT"SFMC-8Kji4FTEBY5LNpUdtKI0_r0yWDhMyy1L33PpeuV6"600
TXT"v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all"600
TXT"SFMC-1liNUebq_9KYgmOYTD7wqY-qA8al-Q2wJdPLw4lF"600
TXT"SFMC-9rBE93qqyW9NlC585KNWMhGop5pZktq5hXnOnbfY"600
TXT"SFMC-gTL6A-doTpJIlXgVIwTXYR1ASZW1YxnXnvxob85u"600
TXT"hcp-domain-verification=421bab0546230a4d20a0db50454873f81170158aa2df93d8e33240f6876d88a0"600
TXT"MS=ms46086885"600
TXT"SFMC-pxjKMZwNdw5wEBggLFxAHgM6Gnq-VCLS9yKtaTyo"600
TXT"SFMC-Z96E6XBfYDaVcTw_Tyad6I37QBwr-tzgp7GGifbr"600
TXT"SFMC-d5DbzSJ6x7QB2BOYiQaGHUlv58Sh_5LWcny26yw7"600
TXT"1CoNzXFOoQ"600
TXT"liveramp-site-verification=Xzop_N8sqeDuQ4XfV4Nb5j3gEzJ_E7i0Zb21eHTfDQA"600
TXT"SFMC-U3gSMtysMsU0s7CMdoJqoYO6yBj-Y4bnJTau2-wJ"600
TXT"SFMC-kD3eglvy8HV5v4LR9sHdbGzLRz_wBg5yksB8kFyX"600
TXT"ciscocidomainverification=170cb6e911c8636da96b86ae160b80848ea0181044d9c98cf41bfbf85be6706e"600
TXT"zoho-verification=zb15084652.zmverify.zoho.com"600
TXT"fadv=5c31031f904a474c90bbf859722f2751"600
TXT"figma-domain-verification=fe16de0a3be9a35494f070ba10f584cd7683457c75955d6b36099d8f25ca9819-1786392987"600
TXT"paloaltonetworks-site-verification=377204011b10f97966678d6496705754f866cc762c3f33554ce0a53afc512966"600
TXT"SFMC-1j1eG8TGDeG-eoMH4BhvhEPv4vWStSZ__PfdfP57"600
TXT"multiverse-domain-verification=3e7e7acf-12cc-4934-a23a-b8c0127fb091"600
TXT"SFMC-rEvHhePoiQ8r2ZtizHTVY5qsm5Tq35BwEyhUZB5K"600
TXT"SFMC-mXT2ZzH9vsoyP4Od70I-Fq7hJ2iYHeYbsjk-7SVo"600
TXT"onetrust-domain-verification=7ea0e687e1f94aabad78b029ed473c66"600
TXT"SFMC-VyXepvEhrDV-C4sSUAxi5S_SZBz1_xUH_EZz6jA_"600
TXT"dGhlaGFydGZvcmRjb20="600
TXT"cisco-ci-domain-verification=170cb6e911c8636da96b86ae160b80848ea0181044d9c98cf41bfbf85be6706e"600
CAA0 issue "identrust.com"600
CAA0 issue "digicert.com"600
CAA0 issuewild "identrust.com"600
CAA0 iodef "mailto:certnotification@thehartford.com"600
CAA0 issuewild "digicert.com"600

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: A (2m), NS (2m). Low TTLs are useful just before a planned change. The NS TTL at the parent is 2d and in the zone 2m; resolvers may use either.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: identrust.com, digicert.com.