Domain report: tuvsud.com

Registration

info

.com generic · CSC Corporate Domains, Inc. · expires 2027-10-11

Found

TLD: .com (generic)
ICANN policies apply: yes
Registrar: CSC Corporate Domains, Inc.
Registered: 11 October 2001
Last changed: 7 October 2026
Expires: 11 October 2027
Status: client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers: dns1.cscdns.net, dns2.cscdns.net
RDAP server: https://rdap.verisign.com/com/v1/

Checks

i

.com is a generic TLD (gTLD)

Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.

#1
✓ TLD delegated and signed #2

.com is delegated in the root zone and DNSSEC-signed.
✓ Expires on 2027-10-11 #3

The registration is valid until 2027-10-11 (354 days).
✓ Transfer locked #4

Registry status: client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
✓ Registry and delegation match #5

The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

dns1.cscdns.net, dns2.cscdns.net

Found

Parent zone: com
Delegation from: a.gtld-servers.net (192.5.6.30)
NS at the parent: dns1.cscdns.net, dns2.cscdns.net
NS in the zone: pdns1.cscdns.net, pdns2.cscdns.net

Nameserver	Addresses	Network (AS)	Glue
dns1.cscdns.net (parent only)	156.154.130.100 2610:a1:1022::100	AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US	-
dns2.cscdns.net (parent only)	156.154.131.100 2610:a1:1023::100	AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US	-
pdns1.cscdns.net (zone only)	156.154.130.100 2610:a1:1022::100	AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US	-
pdns2.cscdns.net (zone only)	156.154.131.100 2610:a1:1023::100	AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US	-

Checks

i

2 nameservers

Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: dns1.cscdns.net, dns2.cscdns.net.

#6
!

NS sets differ

The nameservers at the parent and in the zone should be the same. Only at the parent: dns1.cscdns.net, dns2.cscdns.net; only in the zone: pdns1.cscdns.net, pdns2.cscdns.net. dns1.cscdns.net, dns2.cscdns.net, pdns1.cscdns.net, pdns2.cscdns.net report NS pdns1.cscdns.net pdns2.cscdns.net.

#7
✓ No glue needed #8

All nameservers are outside the zone, so no glue records are needed.
✓ All names resolve #9

Every nameserver name has an address and is not an alias.
✓ Nameservers in different networks #10

The nameservers are spread over 2 IPv4 /24s and 2 IPv6 /48s.
i

All nameservers in one AS

All nameserver addresses are announced by one network operator (AS12008 (VERCARA - Vercara, LLC, US): 8 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.

#11
i

All nameserver names under .net

All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.

#12
✓ All reachable over IPv6 #13

Every nameserver has an IPv6 address.

Nameservers

fail

6 of 8 addresses answer authoritatively

Found

Nameserver	Answer	Recursion	TCP / EDNS	AXFR	Version
dns1.cscdns.net 156.154.130.100	NOERROR, 37 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
dns1.cscdns.net 2610:a1:1022::100	no response	no	no / no	-	-
dns2.cscdns.net 156.154.131.100	NOERROR, 9 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
dns2.cscdns.net 2610:a1:1023::100	NOERROR, 9 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
pdns1.cscdns.net 156.154.130.100	NOERROR, 37 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
pdns1.cscdns.net 2610:a1:1022::100	no response	no	no / no	-	-
pdns2.cscdns.net 156.154.131.100	NOERROR, 9 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver
pdns2.cscdns.net 2610:a1:1023::100	NOERROR, 9 ms, authoritative	no	yes / yes	refused	UltraDNS Nameserver

Checks

✗

Nameservers not responding

These addresses did not answer, so resolvers waste time on timeouts: dns1.cscdns.net (2610:a1:1022::100): read udp [2a01:4f8:1c1c:eebf::1]:35916->[2610:a1:1022::100]:53: i/o timeout; pdns1.cscdns.net (2610:a1:1022::100): read udp [2a01:4f8:1c1c:eebf::1]:49821->[2610:a1:1022::100]:53: i/o timeout.

#14
✓ All authoritative #15

Every responding nameserver answers authoritatively for the zone.
✓ No recursion #16

The nameservers do not answer recursive queries for other domains.
i

Identifying string disclosed

These nameservers answer version queries with a string that is not a version number: dns1.cscdns.net: "UltraDNS Nameserver"; dns2.cscdns.net: "UltraDNS Nameserver"; pdns1.cscdns.net: "UltraDNS Nameserver"; pdns2.cscdns.net: "UltraDNS Nameserver".

#17
✓ Zone transfers refused #18

No nameserver allows a zone transfer to the public.
✓ TCP supported #19

All nameservers answer over TCP.
✓ EDNS supported #20

All nameservers support EDNS(0).
✓ Public addresses #21

All nameserver addresses are publicly routable.

SOA

pass

serial 2013123496 · primary dns1.cscdns.net

Found

Primary (MNAME): dns1.cscdns.net
Contact (RNAME): hostmaster.cscdns.net
Serial: 2013123496
Refresh / retry: 28800 s / 7200 s
Expire: 1209600 s
Negative TTL: 300 s

Serial per nameserver

Nameserver	Serial
dns1.cscdns.net (156.154.130.100)	2013123496
dns2.cscdns.net (156.154.131.100)	2013123496
dns2.cscdns.net (2610:a1:1023::100)	2013123496
pdns1.cscdns.net (156.154.130.100)	2013123496
pdns2.cscdns.net (156.154.131.100)	2013123496
pdns2.cscdns.net (2610:a1:1023::100)	2013123496

Checks

✓ Serial 2013123496 everywhere #22

All nameservers serve the same version of the zone.
✓ Timers within recommendations #23

SOA refresh 8h, retry 2h, expire 14d, negative TTL 5m.
✓ Primary is a public nameserver #24

The primary nameserver dns1.cscdns.net is one of the listed nameservers.
✓ Contact hostmaster@cscdns.net #25

The SOA RNAME hostmaster.cscdns.net means hostmaster@cscdns.net.
✓ Timestamp serial #26

The serial 2013123496 is a Unix timestamp (2033-10-17 00:58 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver: no

Checks

!

Not signed

The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.

#27

Records

info

62 records at the apex

Found

Read from: 156.154.130.100:53

Type	Value	TTL
SOA	dns1.cscdns.net. hostmaster.cscdns.net. 2013123496 28800 7200 1209600 300	86400
NS	pdns1.cscdns.net.	86400
NS	pdns2.cscdns.net.	86400
A	104.16.160.227	300
MX	20 tuvsud-com.mail.protection.outlook.com.	3600
TXT	"MS=ms88002962"	300
TXT	"MS=ms88985827"	300
TXT	"D-TRUST=RLKV759OSZRMERQ"	300
TXT	"blmils0pq4io691d0e6rojau00"	300
TXT	"gi7gacindkr7nhsolsjum9v29h"	300
TXT	"ilofuatmfrqkvc0kjjbca7ukvn"	300
TXT	"D-TRUST=2GFGMSMNJ8B84ZYRNADBLKC"	300
TXT	"D-TRUST=2GJ3X2A339KO6FABQ3IY8GQ"	300
TXT	"D-TRUST=2VSZXD8YLC4HK8Q2PIHH349"	300
TXT	"D-TRUST=44DCJJNHMHKSBD8M3H94CWF"	300
TXT	"D-TRUST=4L36CZ7IOBJZ2T4L8MZIO6S"	300
TXT	"D-TRUST=5EWPNIEAQN4IX56IS8XHBRK"	300
TXT	"D-TRUST=5P8XB2W3GSEC6XTAXRUIHCT"	300
TXT	"D-TRUST=5U7LX6SK7BJJI3EKEILDCW4"	300
TXT	"D-TRUST=8UFG2G8EXMATXVIBTBX6ITD"	300
TXT	"D-TRUST=AZXGFF6BOFXPHUPYCKGQD5A"	300
TXT	"D-TRUST=CU9U23G5UYMQ3NA6FAYSEVT"	300
TXT	"D-TRUST=EA4Y8XXPX8HNQ6Z3IYZIBNV"	300
TXT	"D-TRUST=HPKX5DORQPVIS3RJWCORGU8"	300
TXT	"D-TRUST=HR6RYSK29DDPKMHN9SXNU5G"	300
TXT	"D-TRUST=IO4X72RWTRD2RVDPIBRN8MM"	300
TXT	"D-TRUST=JXX3XW2JJ7I6ZXWBTPQZ5DG"	300
TXT	"D-TRUST=KG5JP25DP2U6PA5QCVHTDGX"	300
TXT	"D-TRUST=LYGBGT3GZCKI8P2A8N9WLR5"	300
TXT	"D-TRUST=MHHPPJ48GEKMMO6ML6FYJ7J"	300
TXT	"D-TRUST=NIGLWCD3X753D9PKDCV7O88"	300
TXT	"D-TRUST=NL226QJBNHV5ZQ6D5TZLCIM"	300
TXT	"D-TRUST=NUC4NGKVQ3O738VXCNG9Q4H"	300
TXT	"D-TRUST=POOOXSXKYS4ESKKQJMR8BB9"	300
TXT	"D-TRUST=Q24OJMO6SN9QLQNHOOZ5WDA"	300
TXT	"D-TRUST=SLFZC72N42VCHBD8Q5QB2AE"	300
TXT	"D-TRUST=SSO5UORUSIIA3POPQXHUNS6"	300
TXT	"D-TRUST=TPDPZJ4SZ6MFP3JJ7K5JSX6"	300
TXT	"D-TRUST=ULDZZ9KMYHV2ARWMXQ3CLQE"	300
TXT	"D-TRUST=WH4WWNL6MCA8LT5JBKTMR5C"	300
TXT	"D-TRUST=WTKP8KKL99IO64WNWYW5WEN"	300
TXT	"D-TRUST=ZSQBWN7MWT5IR9RCIRJDCUJ"	300
TXT	"\010D-TRUST=9BQHXWRSDUSQIZ9OQNOANWV"	300
TXT	"pk3skbeiri5pd6wlbrkqaer6unoiienm"	300
TXT	"asv=69f2afeef3fcad87fa3da23aeba7c611"	300
TXT	"apple-domain-verification=gJJEO4UDgxaLYdTY"	300
TXT	"v=spf1 include:spf.protection.outlook.com " "include:spfc.tuvsud.com include:spfn.tuvsud.com " "ip4:52.57.65.8 " "ip4:195.154.139.184 ip4:83.167.51.229 ip4:67.69.227.51 " "ip4:185.14.244.9 ip4:185.14.246.9 ip4:185.14.245.9 ip4:185.14.247.9 " "ip4:185.168.122.75 ip4:185.168.122.76 " "ip4:108.143.211.207 " "ip4:133.186.50.168 " "ip4:18.197.43.76 " "include:spf.mailjet.com " "include:spf.sendinblue.com " "include:spf.tuevsurvey.com " "-all"	300
TXT	"QuoVadis=538a10b4-ebd6-4844-9625-8fd660ed6fef"	300
TXT	"QuoVadis=8b6d39e9-023d-4c32-810e-5607e814ed09"	300
TXT	"Sendinblue-code:cb71ce41df6894f433cbfb7f200a4ed6"	300
TXT	"weu-rsg-xp3-prd-2746adbf683f-cd.azurewebsites.net"	300
TXT	"ms-domain-verification=0bb13390-1b34-410d-b560-0f6cea0714cc"	300
TXT	"onetrust-domain-verification=c87b0201b65f4740aae99398362d3423\010"	300
TXT	"google-site-verification=8DZpmN30U9UOnhW1tQsqkf-y1S97d8fwu53Y7uz2r3w"	300
TXT	"google-site-verification=HyZ9vgQYF_IqhpY87ayMJPYedNow5pHSH5wUIt1M2cU"	300
TXT	"google-site-verification=rLHmsdy1EhxJ5n4tkUU4hln15erBQWMI2Mf8kOiOeGQ"	300
TXT	"1JB6t9MhLxYvG/t39qfhlxVB9XVbizu1jUMdJlXV/n2u4BncJi8R7K8fwjAns3S3oImGqIbJrujpNMId6eQDGQ=="	300
TXT	"adobe-idp-site-verification=611e43df38778310d0b41356a5b99105531093452d1df52b7e959f9397cf9865"	300
TXT	"cisco-ci-domain-verification=cd8e937e08a1d7c6b4ac5dd40bd9c248df3c65826139adea73e6b960a3716f7"	300
TXT	"openatts a=dns-did; p=did:ethr:0x0cD2d0Fe0CFc4Afa69959766e1cbb4b3c926050b#controller; v=1.0;"	300
TXT	"amazon-business-verification=86d3daf2123116433e9db20a819e9fea80fe2e5cb3ba241406579865f7f6b42d"	300
TXT	"k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z+FApQ6ra2VsXfbJP3HE6wAO0YTVEJt1TmeczhEd2Jiz/fcabIISgXEdSpTYJhb0ct0VJRxcg4c8c7wIDAQAB"	300

Checks

✓ TTLs within range #32

TTLs: A 5m, MX 1h, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
✓ No CNAME at the apex #33

The zone apex has no CNAME record.
✓ No wildcard #34

Names that don't exist return NXDOMAIN.
i

No CAA records

Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.

#35