usta.com

Checked 22 October 2026, 11:20 UTC · via 8.8.8.8
✗Problems found
23 passed 4 warnings 1 failed 3 info

Registration

info

.com generic · Network Solutions, LLC · expires 2029-02-09

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
Network Solutions, LLC
Registered
8 February 1995
Last changed
11 December 2025
Expires
9 February 2029
Status
client transfer prohibited
Registry nameservers
ns1.ispnet.net, ns2.ispnet.net, ns3.ispnet.net, ns4.ispnet.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2029-02-09 #3
    The registration is valid until 2029-02-09 (840 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

ns1.ispnet.net, ns2.ispnet.net, ns3.ispnet.net, ns4.ispnet.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns1.ispnet.net, ns2.ispnet.net, ns3.ispnet.net, ns4.ispnet.net
NS in the zone
ns1-adonis.usta.com, ns1.ispnet.net, ns2.ispnet.net, ns3.ispnet.net, ns4.ispnet.net
NameserverAddressesNetwork (AS)Glue
ns1-adonis.usta.com (zone only)216.255.104.36AS6128 CABLE-NET-1 - Cablevision Systems Corp., US-
ns1.ispnet.net199.224.0.146AS22691 ISPNET-1 - ISPnet, Inc., US-
ns2.ispnet.net199.224.0.154AS2914 NTT-DATA-2914 - NTT America, Inc., US-
ns3.ispnet.net204.141.40.135AS22691 ISPNET-1 - ISPnet, Inc., US-
ns4.ispnet.net108.53.29.238AS701 UUNET - Verizon Business, US-

Checks

  • ✓ 4 nameservers #6
    Delegated to ns1.ispnet.net, ns2.ispnet.net, ns3.ispnet.net, ns4.ispnet.net.
  • !
    NS sets differ
    The nameservers at the parent and in the zone should be the same. Only in the zone: ns1-adonis.usta.com. ns1-adonis.usta.com, ns1.ispnet.net, ns2.ispnet.net, ns3.ispnet.net, ns4.ispnet.net report NS ns1-adonis.usta.com ns1.ispnet.net ns2.ispnet.net ns3.ispnet.net ns4.ispnet.net.
    #7
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 4 IPv4 /24s and 0 IPv6 /48s.
  • ✓ 4 autonomous systems #11
    The nameservers are spread over: AS22691 (ISPNET-1 - ISPnet, Inc., US): 2 addresses; AS2914 (NTT-DATA-2914 - NTT America, Inc., US): 1 address; AS6128 (CABLE-NET-1 - Cablevision Systems Corp., US): 1 address; AS701 (UUNET - Verizon Business, US): 1 address.
  • i
    All nameserver names under .net
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • !
    No IPv6
    None of the nameservers has an IPv6 address, so IPv6-only resolvers can't reach them.
    #13

Nameservers

fail

5 of 5 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns1-adonis.usta.com 216.255.104.36NOERROR, 88 ms, authoritativenoyes / yesrefused-
ns1.ispnet.net 199.224.0.146NOERROR, 89 ms, authoritativenoyes / yesALLOWED (2721 records)9.11.37
ns2.ispnet.net 199.224.0.154NOERROR, 88 ms, authoritativenoyes / yesALLOWED (2721 records)9.11.37
ns3.ispnet.net 204.141.40.135NOERROR, 83 ms, authoritativenoyes / yesALLOWED (2721 records)9.11.37
ns4.ispnet.net 108.53.29.238NOERROR, 109 ms, authoritativenoyes / yesALLOWED (2721 records)9.11.37

Checks

  • ✓ All respond #14
    All 5 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: ns1.ispnet.net: "9.11.37"; ns2.ispnet.net: "9.11.37"; ns3.ispnet.net: "9.11.37"; ns4.ispnet.net: "9.11.37". Hide or replace the version string.
    #17
  • ✗
    Zone transfer allowed
    These nameservers send the complete zone to anyone who asks (AXFR), exposing all host names: ns1.ispnet.net (199.224.0.146): 2721 records; ns2.ispnet.net (199.224.0.154): 2721 records; ns3.ispnet.net (204.141.40.135): 2721 records; ns4.ispnet.net (108.53.29.238): 2721 records. Restrict zone transfers to your secondary servers.
    #18
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 583587987 · primary ns1-adonis.usta.com

Found

Primary (MNAME)
ns1-adonis.usta.com
Contact (RNAME)
admin.usta.com
Serial
583587987
Refresh / retry
10800 s / 3600 s
Expire
1209600 s
Negative TTL
86400 s

Serial per nameserver

NameserverSerial
ns1-adonis.usta.com (216.255.104.36)583587987
ns1.ispnet.net (199.224.0.146)583587987
ns2.ispnet.net (199.224.0.154)583587987
ns3.ispnet.net (204.141.40.135)583587987
ns4.ispnet.net (108.53.29.238)583587987

Checks

  • ✓ Serial 583587987 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 3h, retry 1h, expire 14d, negative TTL 1d.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns1-adonis.usta.com is one of the listed nameservers.
  • ✓ Contact admin@usta.com #25
    The SOA RNAME admin.usta.com means admin@usta.com.
  • ✓ Counter serial #26
    The serial 583587987 is a plain counter.

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

27 records at the apex

Found

Read from
216.255.104.36:53
TypeValueTTL
SOAns1-adonis.usta.com. admin.usta.com. 583587987 10800 3600 1209600 864003600
NSns3.ispnet.net.3600
NSns1.ispnet.net.3600
NSns1-adonis.usta.com.3600
NSns2.ispnet.net.3600
NSns4.ispnet.net.3600
A13.248.160.1373600
A76.223.34.1243600
MX1 ASPMX.L.GOOGLE.COM.3600
MX5 ALT2.ASPMX.L.GOOGLE.COM.3600
MX5 ALT1.ASPMX.L.GOOGLE.COM.3600
MX10 ALT3.ASPMX.L.GOOGLE.COM.3600
TXT"google-site-verification=v7G_VD_N22XaMDHa5O_wE4k73leY0m-TFtP0q6zF_5o"3600
TXT"anthropic-domain-verification-br06j4=bELihvsD5VXILKqPakwtkspEJ"3600
TXT"nf9nxxrqw1rmbg0c5hysf79421nhl8f1"3600
TXT"_ks0qles6q4mtqg99o1bht0ceih0sck6"3600
TXT"google-site-verification=62dBoa8xv74NFSvX4cyKGqHV7vFIsGp3xbqgO5I1MkA"3600
TXT"iContact1296006"3600
TXT"google-site-verification=ey3cwa_un9bNh-2rm23OhACD7iXukCr1cPpypL2iY8g"3600
TXT"google-site-verification=SLgQopfEoKmmgl79ndXAMLkGzZiNhFKpBJQJH6cnCFE"3600
TXT"google-site-verification=_pwoPvvqqjfUl0Pe-YUO4fL4qr0XjT-jqQgN4Pfdlfc"3600
TXT"facebook-domain-verification=hf79on8tt9a5lyjzdqp7z3whssyvqu"3600
TXT"google-site-verification=sRdss3IGGpXZhiI6QZTUOVr7TSY_mSoCfQK6wOL4yBE"3600
TXT"v=spf1 ip4:216.255.104.32/28 ip4:216.189.221.96/27 ip4:38.133.153.128/26 include:_spf.google.com include:servers.mcsv.net include:mail.zendesk.com ?all"3600
TXT"iContact783713"3600
TXT"MS=165FC168E0BEE366BF64CD5C733ECBC1131D6BCF"3600
TXT"_5w5m8clhbkf0nsempjd1dkhqi9seyv2"3600

Checks

  • ✓ TTLs within range #32
    TTLs: A 1h, MX 1h, NS 1h. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35