ukg.com

Checked 22 October 2026, 11:15 UTC · via 8.8.8.8
!Passed with warnings
24 passed 2 warnings 0 failed 5 info

Registration

info

.com generic · CSC Corporate Domains, Inc. · expires 2027-11-06

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
6 November 1999
Last changed
25 September 2026
Expires
6 November 2027
Status
client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
gabriel.ns.cloudflare.com, kimora.ns.cloudflare.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-11-06 #3
    The registration is valid until 2027-11-06 (380 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

gabriel.ns.cloudflare.com, kimora.ns.cloudflare.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
gabriel.ns.cloudflare.com, kimora.ns.cloudflare.com
NS in the zone
gabriel.ns.cloudflare.com, kimora.ns.cloudflare.com
NameserverAddressesNetwork (AS)Glue
gabriel.ns.cloudflare.com172.64.35.244 108.162.195.244 162.159.44.244 2606:4700:58::a29f:2cf4 2803:f800:50::6ca2:c3f4 2a06:98c1:50::ac40:23f4AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US108.162.195.244 162.159.44.244 172.64.35.244 2606:4700:58::a29f:2cf4 2803:f800:50::6ca2:c3f4 2a06:98c1:50::ac40:23f4
kimora.ns.cloudflare.com172.64.34.243 108.162.194.243 162.159.38.243 2803:f800:50::6ca2:c2f3 2606:4700:50::a29f:26f3 2a06:98c1:50::ac40:22f3AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US108.162.194.243 162.159.38.243 172.64.34.243 2606:4700:50::a29f:26f3 2803:f800:50::6ca2:c2f3 2a06:98c1:50::ac40:22f3

Checks

  • i
    2 nameservers
    Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: gabriel.ns.cloudflare.com, kimora.ns.cloudflare.com.
    #6
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 6 IPv4 /24s and 4 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS13335 (CLOUDFLARENET - Cloudflare, Inc., US): 12 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

warn

12 of 12 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
gabriel.ns.cloudflare.com 172.64.35.244NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
gabriel.ns.cloudflare.com 108.162.195.244NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
gabriel.ns.cloudflare.com 162.159.44.244NOERROR, 32 ms, authoritativenoyes / yesrefused2026.10.2
gabriel.ns.cloudflare.com 2606:4700:58::a29f:2cf4NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
gabriel.ns.cloudflare.com 2803:f800:50::6ca2:c3f4NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
gabriel.ns.cloudflare.com 2a06:98c1:50::ac40:23f4NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
kimora.ns.cloudflare.com 172.64.34.243NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
kimora.ns.cloudflare.com 108.162.194.243NOERROR, 14 ms, authoritativenoyes / yesrefused2026.10.2
kimora.ns.cloudflare.com 162.159.38.243NOERROR, 32 ms, authoritativenoyes / yesrefused2026.10.2
kimora.ns.cloudflare.com 2803:f800:50::6ca2:c2f3NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
kimora.ns.cloudflare.com 2606:4700:50::a29f:26f3NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2
kimora.ns.cloudflare.com 2a06:98c1:50::ac40:22f3NOERROR, 15 ms, authoritativenoyes / yesrefused2026.10.2

Checks

  • ✓ All respond #14
    All 12 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: gabriel.ns.cloudflare.com: "2026.10.2"; kimora.ns.cloudflare.com: "2026.10.2". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2418021656 · primary gabriel.ns.cloudflare.com

Found

Primary (MNAME)
gabriel.ns.cloudflare.com
Contact (RNAME)
dns.cloudflare.com
Serial
2418021656
Refresh / retry
10000 s / 2400 s
Expire
604800 s
Negative TTL
1800 s

Serial per nameserver

NameserverSerial
gabriel.ns.cloudflare.com (172.64.35.244)2418021656
gabriel.ns.cloudflare.com (108.162.195.244)2418021656
gabriel.ns.cloudflare.com (162.159.44.244)2418021656
gabriel.ns.cloudflare.com (2606:4700:58::a29f:2cf4)2418021656
gabriel.ns.cloudflare.com (2803:f800:50::6ca2:c3f4)2418021656
gabriel.ns.cloudflare.com (2a06:98c1:50::ac40:23f4)2418021656
kimora.ns.cloudflare.com (172.64.34.243)2418021656
kimora.ns.cloudflare.com (108.162.194.243)2418021656
kimora.ns.cloudflare.com (162.159.38.243)2418021656
kimora.ns.cloudflare.com (2803:f800:50::6ca2:c2f3)2418021656
kimora.ns.cloudflare.com (2606:4700:50::a29f:26f3)2418021656
kimora.ns.cloudflare.com (2a06:98c1:50::ac40:22f3)2418021656

Checks

  • ✓ Serial 2418021656 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 2h46m40s, retry 40m, expire 7d, negative TTL 30m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver gabriel.ns.cloudflare.com is one of the listed nameservers.
  • ✓ Contact dns@cloudflare.com #25
    The SOA RNAME dns.cloudflare.com means dns@cloudflare.com.
  • ✓ Timestamp serial #26
    The serial 2418021656 is a Unix timestamp (2046-08-16 08:40 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

50 records at the apex

Found

Read from
172.64.35.244:53
TypeValueTTL
SOAgabriel.ns.cloudflare.com. dns.cloudflare.com. 2418021656 10000 2400 604800 18001800
NSgabriel.ns.cloudflare.com.86400
NSkimora.ns.cloudflare.com.86400
A104.18.36.251300
A172.64.151.5300
AAAA2606:4700:4407::6812:24fb300
AAAA2606:4700:4402::ac40:9705300
MX10 us-smtp-inbound-1.mimecast.com.1800
MX10 us-smtp-inbound-2.mimecast.com.1800
TXT"6y6j6lpgw3hd2lpsn71qwhqrpqnd05p8"30
TXT"MS=ms49460739"30
TXT"Target:" "0ed1fe018aa9239c01ca4f4978be51118de0655ac4"30
TXT"ZOOM_verify_N0vUMOW-QZO1qpd4sjXOFA"30
TXT"_5m4dimgbx314sq3xe2k8ebl9lyilhod"30
TXT"_fc04jd707f98bxg9ia0k69ywnbrpal9"30
TXT"_igrx6n24tigdzpg52p6am8k1da8fkua"30
TXT"adobe-idp-site-verification=cf8554e54915314af34ac450cda45da80f4091b8b98900df36095a3368a3a9a7"30
TXT"anthropic-domain-verification-atg8hp=ZwZOnI0YYH9aLbsAKZvzsReVD"30
TXT"apple-domain-verification=42FF4HbdVG8HjiPAcUiVx-6rQCuhZz0PfdY-69cl-SM"30
TXT"atlassian-domain-verification=GAIf3/FW7WTP01BmOXqonvxs5SFTgzg8UtHvsXFTMGtRT7pZFxx35EefnhEu4lCT"30
TXT"atlassian-domain-verification=Ip1uOwOpMUwvk9mg/PPYiqdvC/zBkKkKus0dORspna6G5PjitPNofSZ5wAv2/QnJ"30
TXT"atlassian-domain-verification=T4/wpWLOq5gMMrEnKmlExRW52qn2RTatj8lQspC125uaCulYGcQTPXYM/iyR2btn"30
TXT"atlassian-domain-verification=dtmLiO0M2zIO03SAwhTKPJtFA6JEaj1JTtdWZOd3/aTmiPCox7q1/v7690EiWdh2"30
TXT"atlassian-sending-domain-verification=06e6acdc-307d-4f69-9cd3-160ef3ec9fea"30
TXT"cisco-ci-domain-verification=6455bca0f2cbae6081b80a1b0d81775c72336629a59fc752cc92fdf878602b64"30
TXT"dell-technologies-domain-verification=ukg.com_f9aa1953-1ef5-48d0-a452-484233fc0f58_1706885142"30
TXT"docker-verification=cfbf9f96-5532-4c9b-88e7-4ab5e8a93da6"30
TXT"docusign=0703a9a2-7529-4688-9961-faac0a577d4f"30
TXT"docusign=99a670bb-8a22-4b4d-97f9-b124518a4d03"30
TXT"elevenlabs=95itGqKPyVCVFwBDsLMldF4MWiQ__TMahOP1MGr1qaA"30
TXT"facebook-domain-verification=1e7pmapc2yeo5vxabcfl2k96ahydt9"30
TXT"google-site-verification=6GKawEeMuEqv2e5ntfi8GgbWClfW5XfFXRb31FOkPD0"30
TXT"google-site-verification=stJIq1rAdgnombFno2kfgoQcght1EGL4q8JJ-TfJJvQ"30
TXT"h1-domain-verification=dy7zfanw4Wahub7zk62FS3QtqKBCLQPk8q2ha3D5jgAUk9pd"30
TXT"hpe-greenlake-domain-verification=4262556a7847755a4c5970365834756c324c514264753557515065444a4d515a"30
TXT"jamf-site-verification=CEEIk_6jLKJ4rJWQRz2jRQ"30
TXT"lgs61cgh9lrgtlcb77wf6htm6c7m9l25"30
TXT"logmein-verification-code=f06712e9-f47b-4924-849d-6b4e2eb5a4a3"30
TXT"mgverify=700141d2d7d78ca3d6660d80848a86c2ddb10fdc501f0c40b35831cd5187e1b0"30
TXT"miro-verification=aec3d204d5a48ad76a1c0f73f616879e355e0187"30
TXT"mongodb-site-verification=EmSUblSuDL2H3cMsevIr8DZpFJbriszr"30
TXT"mongodb-site-verification=xeGGCgvLsL1yrzPXEJ5uii3bIsmgfy0t"30
TXT"openai-domain-verification=dv-a59fcf82qlU60yh4lCaH2NA6"30
TXT"parallels-domain-verification=73b181e26d69415d91c648dd7670b5fde3bbf71b3ac741d18a6edf79d9afe7c8"30
TXT"pendo-domain-verification=3V2VXMv5Q2Gy5-ENYTv4VhnsJw0"30
TXT"pendo-domain-verification=fNe2_SdcZIzAiYaCHMz9lJmNkbc"30
TXT"postman-domain-verification=3e366d6d22cfd0a4218fda95ebf9c2ca038f77024dccc30359fc8561bddc6dfcbc096827ddfe462ec7aa40539b209e1c9895797a034149f6183fd9f3027fb5b6"30
TXT"slack-domain-verification=aqJGO0SvZb0czq0ckj8yEC6XYf1ZgT0HdItQ8OrG"30
TXT"smartsheet-site-validation=a7EKGPg1nJnc48GD1m5tZHp6TZ2-B5fy"30
TXT"v=spf1 include:us._netblocks.mimecast.com include:_netblocks.eloqua.com -all"30

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, AAAA 5m, MX 30m, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35