Domain report: virginmoney.com

Registration

info

.com generic · Nom-iq Ltd. dba COM LAUDE · expires 2027-08-25

Found

TLD: .com (generic)
ICANN policies apply: yes
Registrar: Nom-iq Ltd. dba COM LAUDE
Registered: 26 August 1998
Last changed: 26 July 2026
Expires: 25 August 2027
Status: client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Registry nameservers: ans1.virginmoney.com, ans2.virginmoney.com
RDAP server: https://rdap.verisign.com/com/v1/

Checks

i

.com is a generic TLD (gTLD)

Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.

#1
✓ TLD delegated and signed #2

.com is delegated in the root zone and DNSSEC-signed.
✓ Expires on 2027-08-25 #3

The registration is valid until 2027-08-25 (306 days).
✓ Transfer locked #4

Registry status: client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited.
✓ Registry and delegation match #5

The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

ans1.virginmoney.com, ans2.virginmoney.com

Found

Parent zone: com
Delegation from: a.gtld-servers.net (192.5.6.30)
NS at the parent: ans1.virginmoney.com, ans2.virginmoney.com
NS in the zone: ans1.virginmoney.com, ans2.virginmoney.com, ans3.virginmoney.com, ans4.virginmoney.com

Nameserver	Addresses	Network (AS)	Glue
ans1.virginmoney.com	193.32.49.7	AS1273 CW - IDDQD-AS, EU	193.32.49.7
ans2.virginmoney.com	193.32.47.7	AS1273 CW - IDDQD-AS, EU	193.32.47.7
ans3.virginmoney.com (zone only)	193.32.48.7	AS2856 BT-UK-AS - British Telecommunications Limited, GB	-
ans4.virginmoney.com (zone only)	193.32.46.7	AS2856 BT-UK-AS - British Telecommunications Limited, GB	-

Checks

i

2 nameservers

Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: ans1.virginmoney.com, ans2.virginmoney.com.

#6
!

NS sets differ

The nameservers at the parent and in the zone should be the same. Only in the zone: ans3.virginmoney.com, ans4.virginmoney.com. ans1.virginmoney.com, ans2.virginmoney.com, ans3.virginmoney.com, ans4.virginmoney.com report NS ans1.virginmoney.com ans2.virginmoney.com ans3.virginmoney.com ans4.virginmoney.com.

#7
✓ Glue present and correct #8

Glue is published for the nameservers inside the zone: ans1.virginmoney.com, ans2.virginmoney.com.
✓ All names resolve #9

Every nameserver name has an address and is not an alias.
✓ Nameservers in different networks #10

The nameservers are spread over 4 IPv4 /24s and 0 IPv6 /48s.
✓ 2 autonomous systems #11

The nameservers are spread over: AS1273 (CW - IDDQD-AS, EU): 2 addresses; AS2856 (BT-UK-AS - British Telecommunications Limited, GB): 2 addresses.
i

All nameserver names under .com

All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.

#12
!

No IPv6

None of the nameservers has an IPv6 address, so IPv6-only resolvers can't reach them.

#13

Nameservers

info

4 of 4 addresses answer authoritatively

Found

Nameserver	Answer	Recursion	TCP / EDNS	AXFR	Version
ans1.virginmoney.com 193.32.49.7	NOERROR, 24 ms, authoritative	no	yes / yes	refused	none
ans2.virginmoney.com 193.32.47.7	NOERROR, 28 ms, authoritative	no	yes / yes	refused	none
ans3.virginmoney.com 193.32.48.7	NOERROR, 27 ms, authoritative	no	yes / yes	refused	none
ans4.virginmoney.com 193.32.46.7	NOERROR, 26 ms, authoritative	no	yes / yes	refused	none

Checks

✓ All respond #14

All 4 nameserver addresses answered.
✓ All authoritative #15

Every responding nameserver answers authoritatively for the zone.
✓ No recursion #16

The nameservers do not answer recursive queries for other domains.
i

Identifying string disclosed

These nameservers answer version queries with a string that is not a version number: ans1.virginmoney.com: "none"; ans2.virginmoney.com: "none"; ans3.virginmoney.com: "none"; ans4.virginmoney.com: "none".

#17
✓ Zone transfers refused #18

No nameserver allows a zone transfer to the public.
✓ TCP supported #19

All nameservers answer over TCP.
✓ EDNS supported #20

All nameservers support EDNS(0).
✓ Public addresses #21

All nameserver addresses are publicly routable.

SOA

pass

serial 2026102207 · primary ans1.virginmoney.com

Found

Primary (MNAME): ans1.virginmoney.com
Contact (RNAME): domain_admin.virginmoney.com
Serial: 2026102207
Refresh / retry: 10800 s / 3600 s
Expire: 604800 s
Negative TTL: 900 s

Serial per nameserver

Nameserver	Serial
ans1.virginmoney.com (193.32.49.7)	2026102207
ans2.virginmoney.com (193.32.47.7)	2026102207
ans3.virginmoney.com (193.32.48.7)	2026102207
ans4.virginmoney.com (193.32.46.7)	2026102207

Checks

✓ Serial 2026102207 everywhere #22

All nameservers serve the same version of the zone.
✓ Timers within recommendations #23

SOA refresh 3h, retry 1h, expire 7d, negative TTL 15m.
✓ Primary is a public nameserver #24

The primary nameserver ans1.virginmoney.com is one of the listed nameservers.
✓ Contact domain_admin@virginmoney.com #25

The SOA RNAME domain_admin.virginmoney.com means domain_admin@virginmoney.com.
✓ Date-based serial #26

The serial 2026102207 follows the YYYYMMDDnn convention (2026-10-22).

DNSSEC

warn

Not signed

Found

Validated by resolver: no

Checks

!

Not signed

The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.

#27

Records

warn

55 records at the apex

Found

Read from: 193.32.49.7:53

Type	Value	TTL
SOA	ans1.virginmoney.com. domain_admin.virginmoney.com. 2026102207 10800 3600 604800 900	3600
NS	ans1.virginmoney.com.	3600
NS	ans3.virginmoney.com.	3600
NS	ans4.virginmoney.com.	3600
NS	ans2.virginmoney.com.	3600
A	193.32.47.47	30
MX	20 cluster3a.eu.messagelabs.com.	3600
MX	10 cluster3.eu.messagelabs.com.	3600
TXT	"lq393tnfrsb207mgny1plm2xwn1c2pd5"	360
TXT	"_rq2k66agos7njfuobb4lxfzt1odvcx8"	360
TXT	"_hgz62glupuasxxa78d4y3ky08sqo6sr"	360
TXT	"RhH7mfMF32qp8g94"	360
TXT	"airtable-verification=2607c736d28b1c56690dd86e3a203e3b"	360
TXT	"qmlhnmf3wt50jyf10vk8n75y7cxcx40t"	360
TXT	"MS=ms20559646"	360
TXT	"onetrust-domain-verification=0ed38e9fa78b4717851c723941a8c60a"	360
TXT	"_57rbipf5p16ko18mjjulnrbejnpfmwr"	360
TXT	"MS=ms60403660"	360
TXT	"MS=A99936F09997DA9312803F2EEB056C537AAB0AF4"	360
TXT	"glcw7kpwqw19kqxv99rqh41rtfft95l4"	360
TXT	"adobe-idp-site-verification=f537c21ca08bbc40c0cdfcacf16a418cf373a2f49ba7697d080f950aa1451837"	360
TXT	"apple-domain-verification=ssJUlXaBnG78eQQ7"	360
TXT	"v=spf1 include:spf.messagelabs.com include:spf.protection.outlook.com include:_spf.salesforce.com a:mx.tsyseurope.com ip4:80.244.181.180 ip4:80.169.167.27 include:sendgrid.net ip4:209.61.151.0/24 ip4:166.78.68.0/22 ip4:198.61.254.0/23 ip4:192.237.158.0/2" "3" " ip4:23.253.182.0/23 ip4:104.130.96.0/28 ip4:146.20.113.0/24 ip4:146.20.191.0/24 ip4:159.135.224.0/20 ip4:69.72.32.0/20 ip4:141.193.32.0/23 ip4:159.135.140.80/29 ip4:159.135.132.128/25 ip4:161.38.204.0/22 ip4:87.253.232.0/21 ip4:185.189.236.0/22 ip4:1" "85.2" "11.120.0/22 ip4:185.250.236.0/22 ip4:143.55.236.0/22 ip4:198.244.60.0/22 ip4:168.245.8.67 ip4:149.72.132.11 ip4:149.72.208.47 ip4:149.72.237.97 ip4:193.32.46.48 ip4:193.32.48.48 ip4:199.255.192.0/22 ip4:199.127.232.0/22 ip4:54.240.0.0/18 ip4:69.169" ".224.0/" "20 ip4:23.249.208.0/20 ip4:23.251.224.0/19 ip4:76.223.176.0/20 ip4:54.240.64.0/19 ip4:54.240.96.0/19 ip4:52.82.172.0/22 ip4:76.223.128.0/19 ip4:147.253.211.147 ip4:62.172.139.91 ip4:62.172.139.92 ip4:213.120.244.91 ip4:149.72.213.47 ip4:168.245." "38.49 include:amazonses.com ip4:88.211.24.174 ip4:88.211.26.174 ~all"	360
TXT	"docusign=47460367-eb30-43de-b39d-8ae5364bf614"	360
TXT	"_8sboikt5gdtag8xwo2vrrp5dve3lj13"	360
TXT	"onetrust-domain-verification=fb1e0519775e4514b2cf442fb14d9db4"	360
TXT	"m8p95jjlsplwk8hzq99x5vjn3njfcpnk"	360
TXT	"google-site-verification=RqWdJHUIS6ebCOdIhhguHG3pekfEZf7IaIhOVDajFoI"	360
TXT	"MS=ms91207684"	360
TXT	"Dynatrace-site-verification=fddf6a88-1a9e-4112-ab0f-ddc4e7a79c9f__n8t58qvnbdc1il4tjn4heh3hei"	360
TXT	"docusign=d4a8701a-2e8b-48ae-91d1-d22d8ee6797c"	360
TXT	"facebook-domain-verification=fgi2c0quw5a394a4100ka2nche2deu"	360
TXT	"have-i-been-pwned-verification=a3ac8a4f5d14e14bbe2183e437e9b166"	360
TXT	"jamf-site-verification=Z5JTTNUn4ecL2lU6qI8mQg"	360
TXT	"knowbe4-site-verification=4b0aa18c892d03b54aede8188eae1ded"	360
TXT	"_m0fc09fx9sdv43soz1ctvh7lnuy22wm"	360
TXT	"pjQEe8yxEkFMf6793e9Ph+U/N7yJLvFqi0xqoXGMYIgQCld4VAYDM12NFO18/BS8IpL3IuLml63SLb7/4QQn6g=="	360
TXT	"atlassian-domain-verification=ieXMFIGkPNftaR47tQenc14axxTcruAMt2QS3Pq1m/mxePAJpzv/Q63670ywKrYb"	360
TXT	"figma-domain-verification=6e0fc5af287fc6b8dc93f04766556af716416dfd5a55f810ea6e2bf65ab0aa16-1790763821"	360
TXT	"atlassian-domain-verification=3ZdQ+O7tTCDgS0gub90U4OjSGfjSyHS4g3BUNgJCJRVLY1cKYm158xiXLZufjN3l"	360
CAA	0 issue "comodoca.com"	300
CAA	0 issuewild "comodoca.com"	300
CAA	0 issue "entrust.net"	300
CAA	0 issuewild "digicert.com"	300
CAA	0 iodef "mailto:iodef.report@cybg.com"	300
CAA	0 issue "globalsign.com"	300
CAA	0 issue "digicert.com"	300
CAA	0 issuewild "entrust.net"	300
CAA	0 issue "letsencrypt.org"	300
CAA	0 issuewild "letsencrypt.org"	300
CAA	0 issuewild "amazon.com"	300
CAA	0 issue "sectigo.com"	300
CAA	0 issue "amazon.com"	300
CAA	0 issuewild "globalsign.com"	300
CAA	0 issuewild "sectigo.com"	300

Checks

!

Very low TTLs

These records have a TTL below 5m, causing extra queries and slower lookups: A (30s). Low TTLs are useful just before a planned change. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.

#32
✓ No CNAME at the apex #33

The zone apex has no CNAME record.
✓ No wildcard #34

Names that don't exist return NXDOMAIN.
✓ CAA restricts issuance #35

Certificates may be issued by: comodoca.com, entrust.net, digicert.com, globalsign.com, letsencrypt.org, amazon.com, sectigo.com.