mancity.com

Checked 22 October 2026, 09:42 UTC · via 8.8.8.8
!Passed with warnings
25 passed 2 warnings 0 failed 4 info

Registration

info

.com generic · Nom-iq Ltd. dba COM LAUDE · expires 2027-10-09

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
Nom-iq Ltd. dba COM LAUDE
Registered
9 October 2000
Last changed
25 August 2026
Expires
9 October 2027
Status
client delete prohibited, client transfer prohibited, client update prohibited
Registry nameservers
ns0.demysdns.net, ns1.demysdns.net, ns2.demysdns.net, ns3.demysdns.net, ns4.demysdns.co.uk, ns5.demysdns.co.uk, ns6.demysdns.co.uk
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-10-09 #3
    The registration is valid until 2027-10-09 (352 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited, client update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

ns0.demysdns.net, ns1.demysdns.net, ns2.demysdns.net, ns3.demysdns.net, ns4.demysdns.co.uk, ns5.demysdns.co.uk, ns6.demysdns.co.uk

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns0.demysdns.net, ns1.demysdns.net, ns2.demysdns.net, ns3.demysdns.net, ns4.demysdns.co.uk, ns5.demysdns.co.uk, ns6.demysdns.co.uk
NS in the zone
ns0.demysdns.net, ns1.demysdns.net, ns2.demysdns.net, ns3.demysdns.net, ns4.demysdns.co.uk, ns5.demysdns.co.uk, ns6.demysdns.co.uk
NameserverAddressesNetwork (AS)Glue
ns0.demysdns.net198.51.44.11 2620:4d:4000:6259:7:11:0:1AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-
ns1.demysdns.net198.51.45.11 2a00:edc0:6259:7:11::2AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-
ns2.demysdns.net198.51.44.75 2620:4d:4000:6259:7:11:0:3AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-
ns3.demysdns.net198.51.45.75 2a00:edc0:6259:7:11::4AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-
ns4.demysdns.co.uk198.51.44.19 2620:4d:4000:6259:7:19:0:1AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-
ns5.demysdns.co.uk198.51.45.19 2a00:edc0:6259:7:19::2AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-
ns6.demysdns.co.uk198.51.44.83 2620:4d:4000:6259:7:19:0:3AS62597 NSONE - NSONE Inc, US AS62597 NSONE - NSONE Inc, US-

Checks

  • ✓ 7 nameservers #6
    Delegated to ns0.demysdns.net, ns1.demysdns.net, ns2.demysdns.net, ns3.demysdns.net, ns4.demysdns.co.uk, ns5.demysdns.co.uk, ns6.demysdns.co.uk.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 2 IPv4 /24s and 2 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS62597 (NSONE - NSONE Inc, US): 14 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • ✓ Nameserver names under 2 TLDs #12
    Nameserver names use the TLDs .net, .uk.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

info

14 of 14 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns0.demysdns.net 198.51.44.11NOERROR, 6 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
ns0.demysdns.net 2620:4d:4000:6259:7:11:0:1NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
ns1.demysdns.net 198.51.45.11NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
ns1.demysdns.net 2a00:edc0:6259:7:11::2NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
ns2.demysdns.net 198.51.44.75NOERROR, 6 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
ns2.demysdns.net 2620:4d:4000:6259:7:11:0:3NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
ns3.demysdns.net 198.51.45.75NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
ns3.demysdns.net 2a00:edc0:6259:7:11::4NOERROR, 5 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
ns4.demysdns.co.uk 198.51.44.19NOERROR, 6 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
ns4.demysdns.co.uk 2620:4d:4000:6259:7:19:0:1NOERROR, 7 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
ns5.demysdns.co.uk 198.51.45.19NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
ns5.demysdns.co.uk 2a00:edc0:6259:7:19::2NOERROR, 5 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
ns6.demysdns.co.uk 198.51.44.83NOERROR, 4 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9
ns6.demysdns.co.uk 2620:4d:4000:6259:7:19:0:3NOERROR, 7 ms, authoritativenoyes / yesrefused19dd46e347df36b70933bf2be8023258586586a9

Checks

  • ✓ All respond #14
    All 14 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: ns0.demysdns.net: "19dd46e347df36b70933bf2be8023258586586a9"; ns1.demysdns.net: "19dd46e347df36b70933bf2be8023258586586a9"; ns2.demysdns.net: "19dd46e347df36b70933bf2be8023258586586a9"; ns3.demysdns.net: "19dd46e347df36b70933bf2be8023258586586a9"; ns4.demysdns.co.uk: "19dd46e347df36b70933bf2be8023258586586a9"; ns5.demysdns.co.uk: "19dd46e347df36b70933bf2be8023258586586a9"; ns6.demysdns.co.uk: "19dd46e347df36b70933bf2be8023258586586a9".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 1664358392 · primary ns0.demysdns.net

Found

Primary (MNAME)
ns0.demysdns.net
Contact (RNAME)
dnstech.comlaude.com
Serial
1664358392
Refresh / retry
43200 s / 7200 s
Expire
1209600 s
Negative TTL
3600 s

Serial per nameserver

NameserverSerial
ns0.demysdns.net (198.51.44.11)1664358392
ns0.demysdns.net (2620:4d:4000:6259:7:11:0:1)1664358392
ns1.demysdns.net (198.51.45.11)1664358392
ns1.demysdns.net (2a00:edc0:6259:7:11::2)1664358392
ns2.demysdns.net (198.51.44.75)1664358392
ns2.demysdns.net (2620:4d:4000:6259:7:11:0:3)1664358392
ns3.demysdns.net (198.51.45.75)1664358392
ns3.demysdns.net (2a00:edc0:6259:7:11::4)1664358392
ns4.demysdns.co.uk (198.51.44.19)1664358392
ns4.demysdns.co.uk (2620:4d:4000:6259:7:19:0:1)1664358392
ns5.demysdns.co.uk (198.51.45.19)1664358392
ns5.demysdns.co.uk (2a00:edc0:6259:7:19::2)1664358392
ns6.demysdns.co.uk (198.51.44.83)1664358392
ns6.demysdns.co.uk (2620:4d:4000:6259:7:19:0:3)1664358392

Checks

  • ✓ Serial 1664358392 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 12h, retry 2h, expire 14d, negative TTL 1h.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns0.demysdns.net is one of the listed nameservers.
  • ✓ Contact dnstech@comlaude.com #25
    The SOA RNAME dnstech.comlaude.com means dnstech@comlaude.com.
  • ✓ Timestamp serial #26
    The serial 1664358392 is a Unix timestamp (2022-09-28 09:46 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

warn

46 records at the apex

Found

Read from
198.51.44.11:53
TypeValueTTL
SOAns0.demysdns.net. dnstech.comlaude.com. 1664358392 43200 7200 1209600 36003600
NSns0.demysdns.net.3600
NSns1.demysdns.net.3600
NSns2.demysdns.net.3600
NSns3.demysdns.net.3600
NSns4.demysdns.co.uk.3600
NSns5.demysdns.co.uk.3600
NSns6.demysdns.co.uk.3600
A104.18.33.218126
A172.64.154.38126
AAAA2606:4700:4408::ac40:9a26300
AAAA2606:4700:4408::6812:21da300
MX10 eu-smtp-inbound-1.mimecast.com.3600
MX10 eu-smtp-inbound-2.mimecast.com.3600
TXT"00d20000000nyspeac"3600
TXT"0ed1fe018a60b810e9cf634453bf1651ffe4f5162f"3600
TXT"amazonses:EWcks925/p9uFABhGjMKKuij4AETwzFzVwj51Aq8J54="3600
TXT"apple-domain-verification=S8PQBaqROvwnoYOT"3600
TXT"atlassian-domain-verification=2uUT+UHhSSSEE/DPj6u6vu/HLLThfYleOgef0UTNdWXchoRLYwWmZXV56wfdw4rY"3600
TXT"atlassian-domain-verification=ll9JN9oOQri3UQFDW7DOL97cCGDvoqneLdh2MORHPT/1kDjZNvdqHTeY4FN333Cx"3600
TXT"ca3-a82145ac22c04a87b7e7c9facb809d9b"3600
TXT"cisco-ci-domain-verification=ce7ad11ed97158af49f2d742c53e9cf79644d440bf3ac019c69a665adabcb51"3600
TXT"docusign=95399787-62ec-4aa7-8c32-2e6f01e64fc7"3600
TXT"facebook-domain-verification=gn3uqyxh5fx88fh3b05my2cq0fegvw"3600
TXT"mancity-paas-prod-cd.azurewebsites.net"3600
TXT"meltwater_sso_20212605_TRITON-27062"3600
TXT"MS=ms84659336"3600
TXT"google-site-verification=qNCS-YttxNmvIdkkX-RsM8mcxwQ4tXrZdD8nSPjhTqs"3600
TXT"ca3-cc8010ad9e504b85ab696619077b34e8"3600
TXT"amazonses:pb2vwSX1SoG7vpwT+ejyRuc5soS7Qd/9SOX3DjOSP8I="3600
TXT"klaviyo-site-verification=VREd7c"3600
TXT"sophos-domain-verification=a8ac3c36ee8309417bb210a25bd41e11de034264813d59ce4b47bebcc21e06b9"3600
TXT"v=spf1 include:_u.mancity.com._spf.dmarcly.com include:mail.zendesk.com include:spf.mandrillapp.com -all"3600
TXT"google-site-verification=vDT584iWaNQ3_Eda9O0JqlKDjZstdvC-hTjZyn2FSuQ"3600
TXT"google-site-verification=vDT584iWaNQ3_Eda9O0JqIKDjZstdvC-hTjZyn2FSuQ"3600
TXT"openai-domain-verification=dv-6rIE64MF8p7fFtUMSDecAQOl"3600
TXT"miro-verification=8417f9645cdfefa3f08f5eb6b6959d19b8fbbbfe"3600
TXT"google-site-verification=nEWlsjUVwDor5MiRxSqigLanWv35mARZHhCUZ0jZdLc"3600
TXT"google-gws-recovery-domain-verification=51988428"3600
TXT"google-site-verification=dc-Ctrn4SxDmvOYo1udBpAwS4GKwzxDrmAt3BoWGrnE"3600
TXT"jamf-site-verification=lorijB80gGAjzrZHoi3qHw"3600
TXT"zb96450806.zmverify.zoho.eu"3600
TXT"_npd7njkpmqy2x8yl9tx77njpn4za4hr"3600
TXT"lucidlink-verification=E3SHHKD0GDE6MZMNYKAEKX95X8"3600
TXT"base44-domain-verification-693ace=g8GqSuBZvOEWMKTsXqypfAy9VxJlt6zBSB-fxcZQjtE"3600
TXT"google-site-verification=ZzHAm3d7uxRNu4f6g3aJKEBag0pxomHO_9Gz6l4u-xUucpv2huuu36x"3600

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: A (2m6s). Low TTLs are useful just before a planned change. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35