virginmoneygiving.com

Checked 22 October 2026, 11:22 UTC · via 8.8.8.8
!Passed with warnings
23 passed 4 warnings 0 failed 4 info

Registration

info

.com generic · Nom-iq Ltd. dba COM LAUDE · expires 2027-10-03

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
Nom-iq Ltd. dba COM LAUDE
Registered
3 October 2008
Last changed
3 September 2026
Expires
3 October 2027
Status
client delete prohibited, client transfer prohibited, client update prohibited
Registry nameservers
ans1.virginmoney.com, ans2.virginmoney.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-10-03 #3
    The registration is valid until 2027-10-03 (346 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited, client update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

warn

ans1.virginmoney.com, ans2.virginmoney.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ans1.virginmoney.com, ans2.virginmoney.com
NS in the zone
ans1.virginmoney.com, ans2.virginmoney.com, ans3.virginmoney.com, ans4.virginmoney.com
NameserverAddressesNetwork (AS)Glue
ans1.virginmoney.com193.32.49.7AS1273 CW - IDDQD-AS, EU193.32.49.7
ans2.virginmoney.com193.32.47.7AS1273 CW - IDDQD-AS, EU193.32.47.7
ans3.virginmoney.com (zone only)193.32.48.7AS2856 BT-UK-AS - British Telecommunications Limited, GB-
ans4.virginmoney.com (zone only)193.32.46.7AS2856 BT-UK-AS - British Telecommunications Limited, GB-

Checks

  • i
    2 nameservers
    Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: ans1.virginmoney.com, ans2.virginmoney.com.
    #6
  • !
    NS sets differ
    The nameservers at the parent and in the zone should be the same. Only in the zone: ans3.virginmoney.com, ans4.virginmoney.com. ans1.virginmoney.com, ans2.virginmoney.com, ans3.virginmoney.com, ans4.virginmoney.com report NS ans1.virginmoney.com ans2.virginmoney.com ans3.virginmoney.com ans4.virginmoney.com.
    #7
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 4 IPv4 /24s and 0 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS1273 (CW - IDDQD-AS, EU): 2 addresses; AS2856 (BT-UK-AS - British Telecommunications Limited, GB): 2 addresses.
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • !
    No IPv6
    None of the nameservers has an IPv6 address, so IPv6-only resolvers can't reach them.
    #13

Nameservers

info

4 of 4 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ans1.virginmoney.com 193.32.49.7NOERROR, 24 ms, authoritativenoyes / yesrefusednone
ans2.virginmoney.com 193.32.47.7NOERROR, 28 ms, authoritativenoyes / yesrefusednone
ans3.virginmoney.com 193.32.48.7NOERROR, 25 ms, authoritativenoyes / yesrefusednone
ans4.virginmoney.com 193.32.46.7NOERROR, 27 ms, authoritativenoyes / yesrefusednone

Checks

  • ✓ All respond #14
    All 4 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: ans1.virginmoney.com: "none"; ans2.virginmoney.com: "none"; ans3.virginmoney.com: "none"; ans4.virginmoney.com: "none".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2275125755 · primary ans1.virginmoney.com

Found

Primary (MNAME)
ans1.virginmoney.com
Contact (RNAME)
domain_admin.virginmoney.com
Serial
2275125755
Refresh / retry
10800 s / 3600 s
Expire
604800 s
Negative TTL
900 s

Serial per nameserver

NameserverSerial
ans1.virginmoney.com (193.32.49.7)2275125755
ans2.virginmoney.com (193.32.47.7)2275125755
ans3.virginmoney.com (193.32.48.7)2275125755
ans4.virginmoney.com (193.32.46.7)2275125755

Checks

  • ✓ Serial 2275125755 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 3h, retry 1h, expire 7d, negative TTL 15m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ans1.virginmoney.com is one of the listed nameservers.
  • ✓ Contact domain_admin@virginmoney.com #25
    The SOA RNAME domain_admin.virginmoney.com means domain_admin@virginmoney.com.
  • ✓ Timestamp serial #26
    The serial 2275125755 is a Unix timestamp (2042-02-04 11:22 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

warn

34 records at the apex

Found

Read from
193.32.49.7:53
TypeValueTTL
SOAans1.virginmoney.com. domain_admin.virginmoney.com. 2275125755 10800 3600 604800 9003600
NSans1.virginmoney.com.3600
NSans2.virginmoney.com.3600
NSans3.virginmoney.com.3600
NSans4.virginmoney.com.3600
A193.32.47.4730
MX20 cluster3a.eu.messagelabs.com.14400
MX10 cluster3.eu.messagelabs.com.14400
TXT"_g91fjtpljw0leyfaw0uw24tngkg3flw"3600
TXT"facebook-domain-verification=5oyzzgn6ntdffue73gkjgq0kn91rgc"3600
TXT"sgvqvwp40ygbt3f0bkmrgyrsstf8v23w"3600
TXT"v0jhwmtrz7tvq5g7fd3wxyt97g9ydgg7"3600
TXT"v=spf1 a include:email.freshdesk.com include:spf.protection.outlook.com ip4:81.128.241.85 ip4:213.120.244.69 ip4:193.32.46.48 ip4:193.32.48.48 -all"3600
TXT"MS=ms54056461"3600
TXT"35c6y4dlgvmcg3f8hq31k32r617r9fn2"3600
TXT"_3r1ws4h9d5d918whkur865zidvet7bb"3600
TXT"_pkv8s9iwr0iyyjizjnljvo8xopr7sae"3600
TXT"_d77y4v9357dhq4lnkht61z5lm6maape"3600
TXT"MS=ms43243734"3600
TXT"_y80nmt7vgsddatif20pk57462dc5mhg"3600
TXT"crjt9z7212tx2nh7jhyq7lnd9s21clww"3600
TXT"RhH7mfMF32qp8g94"3600
TXT"MS=ms89840425"3600
TXT"b/SZq/My6k4MdnMjTXMUtmESeLvNiR24xJ5STTpYnKuRY3x7KfHBAeuFEGbRvYLxb0W6zEPXEU5x8IgfQ2wxvA=="3600
TXT"B524-DBA0-433B-C50E-22F6-DF00-48FE-61A3"3600
CAA0 issue "entrust.net"300
CAA0 issuewild ";"300
CAA0 iodef "mailto:iodef.report@cybg.com"300
CAA0 issue "digicert.com"300
CAA0 issuewild "entrust.net"300
CAA0 issuewild "sectigo.com"300
CAA0 issue "sectigo.com"300
CAA0 issue "globalsign.com"300
CAA0 issue "letsencrypt.org"300

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: A (30s). Low TTLs are useful just before a planned change. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: entrust.net, none (issuance forbidden), digicert.com, sectigo.com, globalsign.com, letsencrypt.org.