Domain report: mazafakas.com

Registration

info

.com generic · Registrar of Domain Names REG.RU LLC · expires 2028-04-23

i

.com is a generic TLD (gTLD)

Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.

#1
✓ TLD delegated and signed #2

.com is delegated in the root zone and DNSSEC-signed.
✓ Expires on 2028-04-23 #3

The registration is valid until 2028-04-23 (548 days).
✓ Transfer locked #4

Registry status: client transfer prohibited.
✓ Registry and delegation match #5

The nameservers registered at the registry are the ones published in DNS.

warn

ns5.hosting.reg.ru, ns6.hosting.reg.ru

Nameserver	Addresses	Network (AS)	Glue
ns5.hosting.reg.ru	31.31.194.32	AS197695 AS-REGRU - _Domain names registrar REG.RU_, Ltd, RU	-
ns6.hosting.reg.ru	31.31.196.15	AS197695 AS-REGRU - _Domain names registrar REG.RU_, Ltd, RU	-

i

2 nameservers

Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: ns5.hosting.reg.ru, ns6.hosting.reg.ru.

#6
✓ Parent and zone agree #7

The parent delegation and the zone's NS records list the same nameservers.
✓ No glue needed #8

All nameservers are outside the zone, so no glue records are needed.
✓ All names resolve #9

Every nameserver name has an address and is not an alias.
✓ Nameservers in different networks #10

The nameservers are spread over 2 IPv4 /24s and 0 IPv6 /48s.
i

All nameservers in one AS

All nameserver addresses are announced by one network operator (AS197695 (AS-REGRU - _Domain names registrar REG.RU_, Ltd, RU): 2 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.

#11
i

All nameserver names under .ru

All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.

#12
!

No IPv6

None of the nameservers has an IPv6 address, so IPv6-only resolvers can't reach them.

#13

warn

2 of 2 addresses answer authoritatively

Nameserver	Answer	Recursion	TCP / EDNS	AXFR	Version
ns5.hosting.reg.ru 31.31.194.32	NOERROR, 43 ms, authoritative	no	yes / yes	refused	PowerDNS Authoritative Server 5.0.7 (built Aug 6 2026 00:00:00 by mockbuild@localhost)
ns6.hosting.reg.ru 31.31.196.15	NOERROR, 43 ms, authoritative	no	yes / yes	refused	PowerDNS Authoritative Server 5.0.7 (built Aug 6 2026 00:00:00 by mockbuild@localhost)

✓ All respond #14

All 2 nameserver addresses answered.
✓ All authoritative #15

Every responding nameserver answers authoritatively for the zone.
✓ No recursion #16

The nameservers do not answer recursive queries for other domains.
!

Software version disclosed

These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: ns5.hosting.reg.ru: "PowerDNS Authoritative Server 5.0.7 (built Aug 6 2026 00:00:00 by mockbuild@localhost)"; ns6.hosting.reg.ru: "PowerDNS Authoritative Server 5.0.7 (built Aug 6 2026 00:00:00 by mockbuild@localhost)". Hide or replace the version string.

#17
✓ Zone transfers refused #18

No nameserver allows a zone transfer to the public.
✓ TCP supported #19

All nameservers answer over TCP.
✓ EDNS supported #20

All nameservers support EDNS(0).
✓ Public addresses #21

All nameserver addresses are publicly routable.

info

serial 2026072202 · primary cv7676215.novalocal

Nameserver	Serial
ns5.hosting.reg.ru (31.31.194.32)	2026072202
ns6.hosting.reg.ru (31.31.196.15)	2026072202

✓ Serial 2026072202 everywhere #22

All nameservers serve the same version of the zone.
✓ Timers within recommendations #23

SOA refresh 3h, retry 1h, expire 7d, negative TTL 1d.
i

Hidden master (not resolvable)

The primary nameserver cv7676215.novalocal is not listed as a nameserver and does not resolve publicly: a hidden master, or a placeholder name. Some tools (e.g. dynamic updates) use MNAME to find the primary.

#24
✓ Contact root@example.com #25

The SOA RNAME root.example.com means root@example.com.
✓ Date-based serial #26

The serial 2026072202 follows the YYYYMMDDnn convention (2026-07-22).

warn

Not signed

info

6 records at the apex

Type	Value	TTL
SOA	cv7676215.novalocal. root.example.com. 2026072202 10800 3600 604800 86400	3600
NS	ns6.hosting.reg.ru.	3600
NS	ns5.hosting.reg.ru.	3600
A	80.78.245.242	3600
MX	10 mail.mazafakas.com.	3600
TXT	"v=spf1 ip4:80.78.245.242 a mx ~all"	3600

✓ TTLs within range #32

TTLs: A 1h, MX 1h, NS 1h. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
✓ No CNAME at the apex #33

The zone apex has no CNAME record.
✓ No wildcard #34

Names that don't exist return NXDOMAIN.
i

No CAA records

Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.

#35