jfy-jewelry.com

Checked 22 October 2026, 09:23 UTC · via 8.8.8.8
✗Problems found
24 passed 1 warning 2 failed 4 info

Registration

info

.com generic · eName Technology Co., Ltd. · expires 2027-01-06

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
eName Technology Co., Ltd.
Registered
6 January 2023
Last changed
9 May 2025
Expires
6 January 2027
Status
client delete prohibited, client transfer prohibited
Registry nameservers
ns1.ename.net, ns2.ename.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-01-06 #3
    The registration is valid until 2027-01-06 (75 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

ns1.ename.net, ns2.ename.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns1.ename.net, ns2.ename.net
NS in the zone
ns1.ename.net, ns2.ename.net
NameserverAddressesNetwork (AS)Glue
ns1.ename.net61.158.128.31 218.98.111.173 2001:df2:f080:1::8AS4837 CHINA169-Backbone - CHINA UNICOM China169 Backbone, CN AS133775 CHINATELECOM-Fujian-Xiamen-IDC1 - Xiamen, CN AS140227 HKCICL-AS-AP - Hong Kong Communications International Co., Limited, HK-
ns2.ename.net183.253.57.199 211.99.99.52 1.193.216.198 240e:97d:10:1402:0:1:0:1005AS9808 CHINAMOBILE-CN - China Mobile Communications Group Co., Ltd., CN AS134763 CT-DongGuan-IDC - CHINANET Guangdong province network, CN AS4134 CHINANET-BACKBONE - No.31,Jin-rong Street, CN AS134763 CT-DongGuan-IDC - CHINANET Guangdong province network, CN-

Checks

  • i
    2 nameservers
    Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: ns1.ename.net, ns2.ename.net.
    #6
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 5 IPv4 /24s and 2 IPv6 /48s.
  • ✓ 6 autonomous systems #11
    The nameservers are spread over: AS133775 (CHINATELECOM-Fujian-Xiamen-IDC1 - Xiamen, CN): 1 address; AS134763 (CT-DongGuan-IDC - CHINANET Guangdong province network, CN): 2 addresses; AS140227 (HKCICL-AS-AP - Hong Kong Communications International Co., Limited, HK): 1 address; AS4134 (CHINANET-BACKBONE - No.31,Jin-rong Street, CN): 1 address; AS4837 (CHINA169-Backbone - CHINA UNICOM China169 Backbone, CN): 1 address; AS9808 (CHINAMOBILE-CN - China Mobile Communications Group Co., Ltd., CN): 1 address.
  • i
    All nameserver names under .net
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

fail

6 of 7 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns1.ename.net 61.158.128.31NOERROR, 193 ms, authoritativenoyes / yesrefused-
ns1.ename.net 218.98.111.173NOERROR, 194 ms, authoritativenoyes / yesrefused-
ns1.ename.net 2001:df2:f080:1::8no responsenono / no--
ns2.ename.net 183.253.57.199NOERROR, 188 ms, authoritativenoyes / yesrefused-
ns2.ename.net 211.99.99.52NOERROR, 209 ms, authoritativenoyes / yesrefused-
ns2.ename.net 1.193.216.198NOERROR, 208 ms, authoritativenoyes / yesrefused-
ns2.ename.net 240e:97d:10:1402:0:1:0:1005NOERROR, 217 ms, authoritativenoyes / yesrefused-

Checks

  • ✗
    Nameservers not responding
    These addresses did not answer, so resolvers waste time on timeouts: ns1.ename.net (2001:df2:f080:1::8): read udp [2a01:4f8:1c1c:eebf::1]:52038->[2001:df2:f080:1::8]:53: i/o timeout.
    #14
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 1773819696 · primary ns1.ename.net

Found

Primary (MNAME)
ns1.ename.net
Contact (RNAME)
admin.ename.net
Serial
1773819696
Refresh / retry
3600 s / 300 s
Expire
1209600 s
Negative TTL
1800 s

Serial per nameserver

NameserverSerial
ns1.ename.net (61.158.128.31)1773819696
ns1.ename.net (218.98.111.173)1773819696
ns2.ename.net (183.253.57.199)1773819696
ns2.ename.net (211.99.99.52)1773819696
ns2.ename.net (1.193.216.198)1773819696
ns2.ename.net (240e:97d:10:1402:0:1:0:1005)1773819696

Checks

  • ✓ Serial 1773819696 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 1h, retry 5m, expire 14d, negative TTL 30m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns1.ename.net is one of the listed nameservers.
  • ✓ Contact admin@ename.net #25
    The SOA RNAME admin.ename.net means admin@ename.net.
  • ✓ Timestamp serial #26
    The serial 1773819696 is a Unix timestamp (2026-03-18 07:41 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

fail

3 records at the apex

Found

Read from
61.158.128.31:53
TypeValueTTL
SOAns1.ename.net. admin.ename.net. 1773819696 3600 300 1209600 1800600
NSns1.ename.net.86400
NSns2.ename.net.86400

Checks

  • ✓ TTLs within range #32
    TTLs: NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
  • ✗
    CNAME at the apex
    The zone apex is a CNAME to www.jfy-jewelry.com. A CNAME can't coexist with the SOA and NS records (RFC 1034); use your provider's ALIAS/flattening feature instead.
    #33
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35