ntfybzlyfw.com

Checked 22 October 2026, 10:04 UTC · via 8.8.8.8
!Passed with warnings
24 passed 2 warnings 0 failed 5 info

Registration

info

.com generic · West263 International Limited · expires 2027-09-02

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
West263 International Limited
Registered
2 September 2024
Last changed
16 October 2026
Expires
2 September 2027
Status
active
Registry nameservers
s1.dnsns5.com, s2.dnsns5.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-09-02 #3
    The registration is valid until 2027-09-02 (314 days).
  • i
    No transfer lock
    The domain has no transfer lock (status: active). A registrar lock protects against unauthorized transfers.
    #4
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

s1.dnsns5.com, s2.dnsns5.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
s1.dnsns5.com, s2.dnsns5.com
NS in the zone
s1.dnsns5.com, s2.dnsns5.com
NameserverAddressesNetwork (AS)Glue
s1.dnsns5.com111.6.96.28 122.114.39.6 38.89.70.107 117.50.200.252 218.95.37.77 113.137.46.32 240e:cf:9000:13::17 240e:bf:b800:4300:0:2:1:8 2408:8621:0:42:e401:813:0:24 2409:8c44:1b00:601:1:1110:609:6028AS9808 CHINAMOBILE-CN - China Mobile Communications Group Co., Ltd., CN AS4837 CHINA169-Backbone - CHINA UNICOM China169 Backbone, CN AS63023 AS-GLOBALTELEHOST - GTHost, US AS23724 CHINANET-IDC-BJ-AP - IDC, China Telecommunications Corporation, CN AS139201 CHINANET-Jiangxi-Jiujiang-IDC - Jiangxi Jiujiang IDC, CN AS134768 CHINANET-SHAANXI-CLOUD-BASE - CHINANET SHAANXI province Cloud Base network, CN AS139201 CHINANET-Jiangxi-Jiujiang-IDC - Jiangxi Jiujiang IDC, CN AS134768 CHINANET-SHAANXI-CLOUD-BASE - CHINANET SHAANXI province Cloud Base network, CN AS4837 CHINA169-Backbone - CHINA UNICOM China169 Backbone, CN AS9808 CHINAMOBILE-CN - China Mobile Communications Group Co., Ltd., CN111.6.96.28 113.137.46.32 117.50.200.252 122.114.39.6 218.95.37.77 2408:8621:0:42:e401:813:0:24 2409:8c44:1b00:601:1:1110:609:6028 240e:bf:b800:4300:0:2:1:8 240e:cf:9000:13::17 38.89.70.107
s2.dnsns5.com42.240.163.164 61.163.30.167 169.197.142.81 42.236.74.175 210.16.160.201 2408:8722:1801:10:4:611:6303:167 2408:8720:806:204::24 240e:95d:3020:1e::52AS58466 CT-Guangzhou-IDC - CHINANET Guangdong province network, CN AS4837 CHINA169-Backbone - CHINA UNICOM China169 Backbone, CN AS63023 AS-GLOBALTELEHOST - GTHost, US AS4837 CHINA169-Backbone - CHINA UNICOM China169 Backbone, CN AS146817 FXNET - Hubei Feixun Network Co., Ltd, CN AS4837 CHINA169-Backbone - CHINA UNICOM China169 Backbone, CN AS4837 CHINA169-Backbone - CHINA UNICOM China169 Backbone, CN AS4134 CHINANET-BACKBONE - No.31,Jin-rong Street, CN169.197.142.81 210.16.160.201 2408:8720:806:204::24 2408:8722:1801:10:4:611:6303:167 240e:95d:3020:1e::52 42.236.74.175 42.240.163.164 61.163.30.167

Checks

  • i
    2 nameservers
    Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: s1.dnsns5.com, s2.dnsns5.com.
    #6
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 11 IPv4 /24s and 7 IPv6 /48s.
  • ✓ 9 autonomous systems #11
    The nameservers are spread over: AS134768 (CHINANET-SHAANXI-CLOUD-BASE - CHINANET SHAANXI province Cloud Base network, CN): 2 addresses; AS139201 (CHINANET-Jiangxi-Jiujiang-IDC - Jiangxi Jiujiang IDC, CN): 2 addresses; AS146817 (FXNET - Hubei Feixun Network Co., Ltd, CN): 1 address; AS23724 (CHINANET-IDC-BJ-AP - IDC, China Telecommunications Corporation, CN): 1 address; AS4134 (CHINANET-BACKBONE - No.31,Jin-rong Street, CN): 1 address; AS4837 (CHINA169-Backbone - CHINA UNICOM China169 Backbone, CN): 6 addresses; AS58466 (CT-Guangzhou-IDC - CHINANET Guangdong province network, CN): 1 address; AS63023 (AS-GLOBALTELEHOST - GTHost, US): 2 addresses; AS9808 (CHINAMOBILE-CN - China Mobile Communications Group Co., Ltd., CN): 2 addresses.
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

pass

18 of 18 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
s1.dnsns5.com 111.6.96.28NOERROR, 193 ms, authoritativenoyes / yesrefused-
s1.dnsns5.com 122.114.39.6NOERROR, 254 ms, authoritativenoyes / yesrefused-
s1.dnsns5.com 38.89.70.107NOERROR, 151 ms, authoritativenoyes / yesrefused-
s1.dnsns5.com 117.50.200.252NOERROR, 161 ms, authoritativenoyes / yesrefused-
s1.dnsns5.com 218.95.37.77NOERROR, 205 ms, authoritativenoyes / yesrefused-
s1.dnsns5.com 113.137.46.32NOERROR, 151 ms, authoritativenoyes / yesrefused-
s1.dnsns5.com 240e:cf:9000:13::17NOERROR, 235 ms, authoritativenoyes / yesrefused-
s1.dnsns5.com 240e:bf:b800:4300:0:2:1:8NOERROR, 167 ms, authoritativenoyes / yesrefused-
s1.dnsns5.com 2408:8621:0:42:e401:813:0:24NOERROR, 143 ms, authoritativenoyes / yesrefused-
s1.dnsns5.com 2409:8c44:1b00:601:1:1110:609:6028NOERROR, 253 ms, authoritativenoyes / yesrefused-
s2.dnsns5.com 42.240.163.164NOERROR, 185 ms, authoritativenoyes / yesrefused-
s2.dnsns5.com 61.163.30.167NOERROR, 204 ms, authoritativenoyes / yesrefused-
s2.dnsns5.com 169.197.142.81NOERROR, 146 ms, authoritativenoyes / yesrefused-
s2.dnsns5.com 42.236.74.175NOERROR, 140 ms, authoritativenoyes / yesrefused-
s2.dnsns5.com 210.16.160.201NOERROR, 206 ms, authoritativenoyes / yesrefused-
s2.dnsns5.com 2408:8722:1801:10:4:611:6303:167NOERROR, 242 ms, authoritativenoyes / yesrefused-
s2.dnsns5.com 2408:8720:806:204::24NOERROR, 198 ms, authoritativenoyes / yesrefused-
s2.dnsns5.com 240e:95d:3020:1e::52NOERROR, 236 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 18 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

warn

serial 437896 · primary s1.dnsns5.com

Found

Primary (MNAME)
s1.dnsns5.com
Contact (RNAME)
nsadmin.dnsns5.com
Serial
437896
Refresh / retry
3600 s / 600 s
Expire
86400 s
Negative TTL
600 s

Serial per nameserver

NameserverSerial
s1.dnsns5.com (111.6.96.28)437896
s1.dnsns5.com (122.114.39.6)437896
s1.dnsns5.com (38.89.70.107)437896
s1.dnsns5.com (117.50.200.252)437896
s1.dnsns5.com (218.95.37.77)437896
s1.dnsns5.com (113.137.46.32)437896
s1.dnsns5.com (240e:cf:9000:13::17)437896
s1.dnsns5.com (240e:bf:b800:4300:0:2:1:8)437896
s1.dnsns5.com (2408:8621:0:42:e401:813:0:24)437896
s1.dnsns5.com (2409:8c44:1b00:601:1:1110:609:6028)437896
s2.dnsns5.com (42.240.163.164)437896
s2.dnsns5.com (61.163.30.167)437896
s2.dnsns5.com (169.197.142.81)437896
s2.dnsns5.com (42.236.74.175)437896
s2.dnsns5.com (210.16.160.201)437896
s2.dnsns5.com (2408:8722:1801:10:4:611:6303:167)437896
s2.dnsns5.com (2408:8720:806:204::24)437896
s2.dnsns5.com (240e:95d:3020:1e::52)437896

Checks

  • ✓ Serial 437896 everywhere #22
    All nameservers serve the same version of the zone.
  • !
    Unusual SOA timers
    expire 1d is shorter than 7d; secondaries stop answering too soon when the primary is down. Current values: refresh 1h, retry 10m, expire 1d, negative TTL 10m.
    #23
  • ✓ Primary is a public nameserver #24
    The primary nameserver s1.dnsns5.com is one of the listed nameservers.
  • ✓ Contact nsadmin@dnsns5.com #25
    The SOA RNAME nsadmin.dnsns5.com means nsadmin@dnsns5.com.
  • ✓ Counter serial #26
    The serial 437896 is a plain counter.

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

3 records at the apex

Found

Read from
111.6.96.28:53
TypeValueTTL
SOAs1.dnsns5.com. nsadmin.dnsns5.com. 437896 3600 600 86400 6007200
NSs1.dnsns5.com.7200
NSs2.dnsns5.com.7200

Checks

  • ✓ TTLs within range #32
    TTLs: NS 2h. The NS TTL at the parent is 2d and in the zone 2h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35