mhi.com

Checked 22 October 2026, 09:50 UTC · via 8.8.8.8
✗Problems found
26 passed 2 warnings 1 failed 2 info

Registration

info

.com generic · CSC Corporate Domains, Inc. · expires 2027-01-05

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
CSC Corporate Domains, Inc.
Registered
6 May 1998
Last changed
1 January 2026
Expires
5 January 2027
Status
client transfer prohibited
Registry nameservers
ns008-45kfhuebe5db0l1q.4.d-53.info, ns008-45kfhuebe5db0l1q.4.d-53.jp, ns008-45kfhuebe5db0l1q.4.d-53.org
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-01-05 #3
    The registration is valid until 2027-01-05 (75 days).
  • ✓ Transfer locked #4
    Registry status: client transfer prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

pass

ns008-45kfhuebe5db0l1q.4.d-53.info, ns008-45kfhuebe5db0l1q.4.d-53.jp, ns008-45kfhuebe5db0l1q.4.d-53.org

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns008-45kfhuebe5db0l1q.4.d-53.info, ns008-45kfhuebe5db0l1q.4.d-53.jp, ns008-45kfhuebe5db0l1q.4.d-53.org
NS in the zone
ns008-45kfhuebe5db0l1q.4.d-53.info, ns008-45kfhuebe5db0l1q.4.d-53.jp, ns008-45kfhuebe5db0l1q.4.d-53.org
NameserverAddressesNetwork (AS)Glue
ns008-45kfhuebe5db0l1q.4.d-53.info202.32.219.39 2001:240:bb81::28:39AS2497 IIJ - Internet Initiative Japan Inc., JP AS2497 IIJ - Internet Initiative Japan Inc., JP-
ns008-45kfhuebe5db0l1q.4.d-53.jp162.159.27.74 203.180.146.99 162.159.26.100 2400:cb00:2049:1::a29f:1a64 2400:cb00:2049:1::a29f:1b4a 2001:240:bb81::29:1099AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS2497 IIJ - Internet Initiative Japan Inc., JP AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS2497 IIJ - Internet Initiative Japan Inc., JP-
ns008-45kfhuebe5db0l1q.4.d-53.org210.138.20.99 2001:240:bb81::29:99AS2497 IIJ - Internet Initiative Japan Inc., JP AS2497 IIJ - Internet Initiative Japan Inc., JP-

Checks

  • ✓ 3 nameservers #6
    Delegated to ns008-45kfhuebe5db0l1q.4.d-53.info, ns008-45kfhuebe5db0l1q.4.d-53.jp, ns008-45kfhuebe5db0l1q.4.d-53.org.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 5 IPv4 /24s and 2 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS13335 (CLOUDFLARENET - Cloudflare, Inc., US): 4 addresses; AS2497 (IIJ - Internet Initiative Japan Inc., JP): 6 addresses.
  • ✓ Nameserver names under 3 TLDs #12
    Nameserver names use the TLDs .info, .jp, .org.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

fail

10 of 10 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns008-45kfhuebe5db0l1q.4.d-53.info 202.32.219.39NOERROR, 207 ms, authoritativenoyes / yesrefused-
ns008-45kfhuebe5db0l1q.4.d-53.info 2001:240:bb81::28:39NOERROR, 251 ms, authoritativenoyes / yesrefused-
ns008-45kfhuebe5db0l1q.4.d-53.jp 162.159.27.74NOERROR, 97 ms, authoritativenoyes / yesrefused2026.10.8
ns008-45kfhuebe5db0l1q.4.d-53.jp 203.180.146.99NOERROR, 15 ms, authoritativenoyes / yesrefusedIIJ_DNS_PLATFORM_SERVICE_K
ns008-45kfhuebe5db0l1q.4.d-53.jp 162.159.26.100NOERROR, 97 ms, authoritativenoyes / yesrefused2026.10.8
ns008-45kfhuebe5db0l1q.4.d-53.jp 2400:cb00:2049:1::a29f:1a64NOERROR, 101 ms, authoritativenoyes / yesrefused2026.10.8
ns008-45kfhuebe5db0l1q.4.d-53.jp 2400:cb00:2049:1::a29f:1b4aNOERROR, 98 ms, authoritativenoyes / yesrefused2026.10.8
ns008-45kfhuebe5db0l1q.4.d-53.jp 2001:240:bb81::29:1099NOERROR, 22 ms, authoritativenono / yesrefusedIIJ_DNS_PLATFORM_SERVICE_K
ns008-45kfhuebe5db0l1q.4.d-53.org 210.138.20.99NOERROR, 15 ms, authoritativenoyes / yesrefusedIIJ_DNS_PLATFORM_SERVICE_K
ns008-45kfhuebe5db0l1q.4.d-53.org 2001:240:bb81::29:99NOERROR, 24 ms, authoritativenono / yesrefusedIIJ_DNS_PLATFORM_SERVICE_K

Checks

  • ✓ All respond #14
    All 10 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: ns008-45kfhuebe5db0l1q.4.d-53.jp: "2026.10.8". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✗
    No DNS over TCP
    DNS over TCP is required (RFC 7766); without it, large answers such as DNSSEC responses fail. Not answering over TCP: ns008-45kfhuebe5db0l1q.4.d-53.jp (2001:240:bb81::29:1099): read tcp [2a01:4f8:1c1c:eebf::1]:48708->[2001:240:bb81::29:1099]:53: read: connection reset by peer; ns008-45kfhuebe5db0l1q.4.d-53.org (2001:240:bb81::29:99): read tcp [2a01:4f8:1c1c:eebf::1]:56630->[2001:240:bb81::29:99]:53: read: connection reset by peer.
    #19
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2026102101 · primary ns008-45kfhuebe5db0l1q.4.d-53.jp

Found

Primary (MNAME)
ns008-45kfhuebe5db0l1q.4.d-53.jp
Contact (RNAME)
postmaster.mhi.co.jp
Serial
2026102101
Refresh / retry
7200 s / 1800 s
Expire
1209600 s
Negative TTL
10800 s

Serial per nameserver

NameserverSerial
ns008-45kfhuebe5db0l1q.4.d-53.info (202.32.219.39)2026102101
ns008-45kfhuebe5db0l1q.4.d-53.info (2001:240:bb81::28:39)2026102101
ns008-45kfhuebe5db0l1q.4.d-53.jp (162.159.27.74)2026102101
ns008-45kfhuebe5db0l1q.4.d-53.jp (203.180.146.99)2026102101
ns008-45kfhuebe5db0l1q.4.d-53.jp (162.159.26.100)2026102101
ns008-45kfhuebe5db0l1q.4.d-53.jp (2400:cb00:2049:1::a29f:1a64)2026102101
ns008-45kfhuebe5db0l1q.4.d-53.jp (2400:cb00:2049:1::a29f:1b4a)2026102101
ns008-45kfhuebe5db0l1q.4.d-53.jp (2001:240:bb81::29:1099)2026102101
ns008-45kfhuebe5db0l1q.4.d-53.org (210.138.20.99)2026102101
ns008-45kfhuebe5db0l1q.4.d-53.org (2001:240:bb81::29:99)2026102101

Checks

  • ✓ Serial 2026102101 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 2h, retry 30m, expire 14d, negative TTL 3h.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns008-45kfhuebe5db0l1q.4.d-53.jp is one of the listed nameservers.
  • ✓ Contact postmaster@mhi.co.jp #25
    The SOA RNAME postmaster.mhi.co.jp means postmaster@mhi.co.jp.
  • ✓ Date-based serial #26
    The serial 2026102101 follows the YYYYMMDDnn convention (2026-10-21).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

67 records at the apex

Found

Read from
202.32.219.39:53
TypeValueTTL
SOAns008-45kfhuebe5db0l1q.4.d-53.jp. postmaster.mhi.co.jp. 2026102101 7200 1800 1209600 1080086400
NSns008-45kfhuebe5db0l1q.4.d-53.info.86400
NSns008-45kfhuebe5db0l1q.4.d-53.jp.86400
NSns008-45kfhuebe5db0l1q.4.d-53.org.86400
A52.198.220.165600
MX20 mx2.hc1076-52.ap.iphmx.com.300
MX10 mx1.hc1076-52.ap.iphmx.com.300
TXT"_usc1hixbqss36tpsil93gpg5f6amuse"86400
TXT"apple-domain-verification=z65XM44dbUsN1Wuq"86400
TXT"brevo-code:58b12e023a6bc0acf7dbda7bc99a7eeb"86400
TXT"sTdXFTM2wVF0KAbRdZtEIX9krX2WOwEvwsIgWqYG7DA="86400
TXT"docusign=17a5be9c-76e6-4188-aa97-d4fc52d71688"86400
TXT"docusign=8d957b9a-504b-4d48-bf3f-186d4da1b011"86400
TXT"d365mktkey=FTGlyP27bG2LCVFYLp4jVEQxCgyGs2xeOxt6wbV7bo0x"86400
TXT"docker-verification=852b0862-b66e-4153-b78b-da7b73ae4c67"86400
TXT"miro-verification=401a755318d570149e6cbc5a9ca0ccfe3710ca92"86400
TXT"facebook-domain-verification=ibucsfvibz63fzvm4zlz49fhfreg5r"86400
TXT"facebook-domain-verification=la1y9pdvczqlm6ul9digfi9np1vgs7"86400
TXT"smartsheet-site-validation=6UCXJGj2GIJ1RKYGLG-xV-EFeA6-hw2J"86400
TXT"anthropic-domain-verification-rxzxhv=9ssPKbPohUlqFCXrliXLAhWLv"86400
TXT"google-site-verification=RwRVsc1FqZAhR2zDEjQQXQ66Ha_x1-ga7k7OYiwj-4Q"86400
TXT"google-site-verification=pJAXQpXlnPpoBJHU2oCE-ccvBjn1Bn8RJ81svynuznE"86400
TXT"google-site-verification=uPLdZ5Qn1_PMMGK4ArEuJ2U6mYxRgaHBYmfNNy7FWBQ"86400
TXT"notion-domain-verification=cqeedBOpv5lHK0NFyaBRnDKCTvoRyir4Nws3BeLHpYk"86400
TXT"globalsign-domain-verification=2APNIhPp9LcApUUK9QljOBPUezrsYXQdzcoPdvq8PF"86400
TXT"globalsign-domain-verification=En_ASUJYN5BrPyFC0iVhXY2ilZb8cnFFtDplrF2Gwt"86400
TXT"globalsign-domain-verification=MKooEGZibJwyJ5IfTiblJoNqIlR8kUwcGRGl8cp1BV"86400
TXT"globalsign-domain-verification=SrQkq_M8NXYYxUg4G6U3ZiWtJuyMrJDWZ_TcAh8DGd"86400
TXT"globalsign-domain-verification=UrnZ_ES4DlE_smAV89LEsFpW6CRpFOHRkhshfwNCeO"86400
TXT"globalsign-domain-verification=_l8m4q9wad9SFx_1BWiXcT-CHsJS9XmeyZFHNOksBJ"86400
TXT"78r6N0sBuLaH25PxfVOFJPMxLvX37Du5z7orio8fFLjtHiepeNIfZ23xMPQTHR1ETVd45zRr3RirCcFqhEV/0Q=="86400
TXT"Mrmb/TYcgprA1J0L9mAAEa2XEi11m2pqxQv8nyBmgH5j9/Wa5Jv1vUW5fRpOaszSy8k4/9PmqSIlLjQ+FwdgZQ=="86400
TXT"box-domain-verification=410c72f756310b8ad1de6fc19ebcf8200b916ba138dc632a3534c18478d09677"86400
TXT"box-domain-verification=6eb4d815553d257df3bef062270ff6e34e7f6db4f611ec49c177d459e395c1d9"86400
TXT"box-domain-verification=a49cf68b209d17b37a984f0a683be2836c77c18f5bcac98c0d6eb7fefd59280c"86400
TXT"box-domain-verification=be3cd252ff94e4488f3f24cf81652687ba593300e61075c330bc8810f975759b"86400
TXT"Dynatrace-site-verification=cbefd810-6535-4291-94b5-0ea53dcbd295__l8c7aakqteet4ivduovmhkc311"86400
TXT"adobe-idp-site-verification=e7af8bef6d3d26aaf3e9c1609d3339f7e07bd4b048deee07602714c3276817a9"86400
TXT"DirectFedAuthUrl=https://login.microsoftonline.com/50528b4c-efba-4fff-b242-2a939652cd3e/saml2"86400
TXT"v=DMARC1; p=quarantine; rua=mailto:dmarc@ma.mhi.com; ruf=mailto:dmarc@ma.mhi.com; sp=quarantine; adkim=r; aspf=r; "86400
TXT"v=spf1 include:spf6.mhi.com include:spf.protection.outlook.com include:webcas.net exists:%{i}.spf.hc1076-52.ap.iphmx.com include:mktomail.com include:_spf.mlsend.com ip4:130.214.244.131 ip4:130.214.243.238 ip4:130.214.145.34 ip4:104.41.183.137 -all"86400
TXT"M0I1T10073"86400
TXT"MS=ms37198486"86400
TXT"2fu1ldn375em9km3nof8lc647n"86400
TXT"50cm68fs682ov4b6cav6rgk958"86400
TXT"5t2nop1i9efmk2oi1vfmuafrgt"86400
TXT"6004sf5p524ohvg1l9rspsetmk"86400
TXT"6viogqkm1ea6uetbcsfiop698p"86400
TXT"8v8070pvpqsldclmvtnc8s0jg0"86400
TXT"98p8b7kqvgt9cgaj68uqia9487"86400
TXT"ai7u56om5f3ilcg6bf6hapjmih"86400
TXT"c9chko47icd4ksi5arvv4elkjv"86400
TXT"g8s76lrtnirhg66edgnrpt47bh"86400
TXT"i992rr9ja0c7jfmdo2ot0n2j34"86400
TXT"k8c8v7062gil7aaobpehq2c3tv"86400
TXT"m4qmlijd1rekt7efrtmf56dhlh"86400
TXT"n47rmaui6no6k2fnumsoj1c9f6"86400
TXT"n48mbu7t6or5g5h5h4pm0ld7gi"86400
TXT"n6akf6hs0plgovg31s6ati7and"86400
TXT"oirnv606nals1uk51pcqmt68qh"86400
TXT"r4bmkl5u1d6qqgrlrge8996u7k"86400
TXT"vjhskuvpo1i3rhloj4g6igvlt0"86400
TXT"00DIm000000H0eN=1TBBI00000001aS"86400
TXT"_2ur1xw11guz1w7kk1s53d21kodyeh2p"86400
TXT"_gqbt7rxnz6zgoosio9lu5epmonipq4n"86400
TXT"_h1hhm5esneubv3wlvx5tyzoaasri2b1"86400
TXT"_ni6wkdbd1c5gr9ojw4d8liispyfht5n"86400

Checks

  • ✓ TTLs within range #32
    TTLs: A 10m, MX 5m, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35