wella.com

Checked 22 October 2026, 11:30 UTC · via 8.8.8.8
!Passed with warnings
24 passed 2 warnings 0 failed 5 info

Registration

info

.com generic · CSC Corporate Domains, Inc. · expires 2027-01-05

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
6 January 1996
Last changed
1 January 2026
Expires
5 January 2027
Status
client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers
udns1.cscdns.net, udns2.cscdns.uk
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-01-05 #3
    The registration is valid until 2027-01-05 (74 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

udns1.cscdns.net, udns2.cscdns.uk

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
udns1.cscdns.net, udns2.cscdns.uk
NS in the zone
udns1.cscdns.net, udns2.cscdns.uk
NameserverAddressesNetwork (AS)Glue
udns1.cscdns.net204.74.66.1 2001:502:f3ff::201AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-
udns2.cscdns.uk204.74.111.1 2001:502:4612::201AS12008 VERCARA - Vercara, LLC, US AS12008 VERCARA - Vercara, LLC, US-

Checks

  • i
    2 nameservers
    Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: udns1.cscdns.net, udns2.cscdns.uk.
    #6
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 2 IPv4 /24s and 2 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS12008 (VERCARA - Vercara, LLC, US): 4 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • ✓ Nameserver names under 2 TLDs #12
    Nameserver names use the TLDs .net, .uk.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

info

4 of 4 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
udns1.cscdns.net 204.74.66.1NOERROR, 4 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
udns1.cscdns.net 2001:502:f3ff::201NOERROR, 4 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
udns2.cscdns.uk 204.74.111.1NOERROR, 13 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver
udns2.cscdns.uk 2001:502:4612::201NOERROR, 32 ms, authoritativenoyes / yesrefusedUltraDNS Nameserver

Checks

  • ✓ All respond #14
    All 4 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: udns1.cscdns.net: "UltraDNS Nameserver"; udns2.cscdns.uk: "UltraDNS Nameserver".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2019103492 · primary udns1.cscdns.net

Found

Primary (MNAME)
udns1.cscdns.net
Contact (RNAME)
hostmaster.cscdns.net
Serial
2019103492
Refresh / retry
28800 s / 7200 s
Expire
1209600 s
Negative TTL
86400 s

Serial per nameserver

NameserverSerial
udns1.cscdns.net (204.74.66.1)2019103492
udns1.cscdns.net (2001:502:f3ff::201)2019103492
udns2.cscdns.uk (204.74.111.1)2019103492
udns2.cscdns.uk (2001:502:4612::201)2019103492

Checks

  • ✓ Serial 2019103492 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 8h, retry 2h, expire 14d, negative TTL 1d.
  • ✓ Primary is a public nameserver #24
    The primary nameserver udns1.cscdns.net is one of the listed nameservers.
  • ✓ Contact hostmaster@cscdns.net #25
    The SOA RNAME hostmaster.cscdns.net means hostmaster@cscdns.net.
  • ✓ Timestamp serial #26
    The serial 2019103492 is a Unix timestamp (2033-12-25 06:04 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

warn

61 records at the apex

Found

Read from
204.74.66.1:53
TypeValueTTL
SOAudns1.cscdns.net. hostmaster.cscdns.net. 2019103492 28800 7200 1209600 8640086400
NSudns1.cscdns.net.86400
NSudns2.cscdns.uk.86400
A108.138.7.3260
A108.138.7.7260
A108.138.7.760
A108.138.7.11660
AAAA2600:9000:2490:3000:1b:de1e:1100:93a15
AAAA2600:9000:2490:1c00:1b:de1e:1100:93a15
AAAA2600:9000:2490:be00:1b:de1e:1100:93a15
AAAA2600:9000:2490:9c00:1b:de1e:1100:93a15
AAAA2600:9000:2490:1a00:1b:de1e:1100:93a15
AAAA2600:9000:2490:800:1b:de1e:1100:93a15
AAAA2600:9000:2490:200:1b:de1e:1100:93a15
AAAA2600:9000:2490:6600:1b:de1e:1100:93a15
MX10 wella-com.mail.protection.outlook.com.86400
TXT"MS=ms45357150"86400
TXT"nintex.698de5754c6c0a44bc9f67f5"86400
TXT"yandex-verification: 73c3d2e822724faf"86400
TXT"apple-domain-verification=5DKkIo4f7Nipiih1"86400
TXT"K/q0TDTqUefFrWWcG+qmMdF8E4uqg7Mj4KDwP9hqhSM="86400
TXT"flexera-domain-verification-wgijpaolyehrjrlz"86400
TXT"docusign=95d1c26f-e4c6-43f5-aae7-65c4069d5ffc"86400
TXT"docusign=991eeeed-d067-4403-a180-d8c04b4b275d"86400
TXT"sprout-social-6fbe1fb2-0ad0-4477-a9a9-0ebf6eeed7fe"86400
TXT"shopify-verification-code=PBGTLLcn89HhlGRyZw2fvQLl1iZfgO"86400
TXT"shopify-verification-code=vuvCTGkreKWXufan4aB87zr0uipltq"86400
TXT"miro-verification=f3983a02dd6c402a2bed15b87d5a1b38cfe765e6"86400
TXT"domain-verification-394150=2cc594d2ef5410e07cfdee6e341b1874"86400
TXT"facebook-domain-verification=iveh6ivh36l5la7g4hhk7ogapjwafj"86400
TXT"facebook-domain-verification=qny2ydzmb6ovegealhu582zq780qz7"86400
TXT"onetrust-domain-verification=da2496d50a164770a35c7a2253bfdacf"86400
TXT"globalsign-domain-verification=1A96C83D6FF0E520FE165950239ACED9"86400
TXT"globalsign-domain-verification=507CB20C84FCF1B89651BD36AB8ECA4C"86400
TXT"globalsign-domain-verification=721F204155A9C5AA3CFB15DABCCF87A6"86400
TXT"globalsign-domain-verification=A1E47D9AC07A708B7E700B5926A550D1"86400
TXT"globalsign-domain-verification=E66E30A64F40BB70AB82F9FB18BC1ABE"86400
TXT"globalsign-domain-verification=E8D7FD5DAC3634F426446B0BDB577426"86400
TXT"globalsign-domain-verification=acec981dd01d89ae7ace68f47077f5dd"86400
TXT"globalsign-domain-verification=628A1CB95BA970A1C98EF53A8880174F."86400
TXT"globalsign-domain-verification=B7DC2C05BC63BEC42047AE48272F684D."86400
TXT"google-site-verification=5XvG6bVUXG9fLRrpiTE6-RcjHiLbf4ysvftn2Ssw3rQ"86400
TXT"google-site-verification=9TxHDw15HCx7Wm_86VSiTNhLkOFK-njD9hF993xcy8E"86400
TXT"google-site-verification=HYUFUC2nLKWp-pEraF0nqdaz7rhGXQ55KQgFY8-zflc"86400
TXT"google-site-verification=POQUgop_W_bt0ADbgR0dV43UVW4SF8suiLEiayA_c_E"86400
TXT"google-site-verification=WKI6l8SUetwjCMWPTFSANnP42q9peV4XIlmLz_vU4JU"86400
TXT"google-site-verification=_mw0I8TnlF0qgD9OZq5kfpIwTMKjYrVWRa7L8pHKH3Y"86400
TXT"google-site-verification=ahh7QdKuRTEKQd5mEweS_EAqYSfbaFvYAA4eLMJ8P9o"86400
TXT"google-site-verification=u2SGnwas2wn4UOLQqzUw5sLDffmYnvr__PwuDLMoQdE"86400
TXT"google-site-verification=umMjqLPiyOikFmwNCwvNqZrrlFlD9_VOUIA5U0BS5ZA"86400
TXT"globalsign-domain-verification=K9ZBZYNiNsNNOiaY2Tbjn-Bfe0dWwAwpstKoOOVJWO"86400
TXT"globalsign-domain-verification=S5sT68OBACJ_9CvrzRsz8-5yhYGkz7zbctTR8vnC7B"86400
TXT"_globalsign-domain-verification=KeZgChgTjpOuapyuB61TrjLtaBNRT3wuws5CsNOsLQ"86400
TXT"_globalsign-domain-verification=QaQYl8b02G-zoGdEvbe3nRntBqiSAAhuMYfZYmMnA9"86400
TXT"_globalsign-domain-verification=UyxZnT6xW0HDaWCdVK5UzLTPG4jssfzbiGpwnK5CSF"86400
TXT"_globalsign-domain-verification=wBLWlrecNbufx3SooV84iaRaDLa_NMtj2Fjp1VySNO"86400
TXT"bv-domain-verification=717d574001300db83adf614a6b350dac07c017ab123515044cc4ff6019443a88"86400
TXT"adobe-idp-site-verification=b09e5eaa17a4aca8faf53f1bd9140b1d2ae7c323df0e930f5ab13d1de853e62a"86400
TXT"atlassian-domain-verification=AsDgmKQFL10h5RcxmSngEP7C2jZ12IZ87YMELRG19scmKWiAruCXJzykdVwOzPxn"86400
TXT"successfactors-site-verification=YmM2MDc1ZWMyZWY4OWMzMDUzMDE0ZjZkMGJlZmFlMjk0MmRmY2EzM2UzOTllYjE3ZTg1NGIwNjU1MGY4YWJjNw=="86400
TXT"v=spf1 ip4:198.203.169.10 ip4:92.103.63.132 ip4:208.84.65.221 ip4:208.86.201.177 ip4:92.103.63.133 ip4:194.15.48.173 ip4:194.15.48.141 ip4:172.210.94.127 ip4:52.190.47.198 ip4:35.242.247.107 ip4:34.107.8.58 ip4:168.245.98.23" " include:spf.protection.outlook.com include:_spf.timeforstorm.com include:_spf.timeforstorm.eu include:_spf.connectstorm.jp include:_spf-dc55.sapsf.eu ~all"86400

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: A (1m), AAAA (5s). Low TTLs are useful just before a planned change. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35