ntp.so

Domain report: WHOIS, DNS, hosting, SSL and safety. Checked .

Online · 200Family DNS blockedSSL: 60 days left11 years old

One re-check per domain each UTC day.

55

ntp.so was registered on 29 Mar 2015 via 1API and the registry expiry is 29 Mar 2027. WHOIS data came from a WHOIS query because RDAP is not published for this TLD.

ntp.so publishes 2 nameservers. DNSSEC is not signed.

ntp.so has 2 IPv4 addresses (188.114.96.3, 188.114.97.3) and 2 IPv6 addresses (2a06:98c1:3120::4, 2a06:98c1:3121::4). The geolocation database places 188.114.96.3 in Toronto, Canada.

The TLS certificate from WE1 is valid and has 60 days left (TLS 1.3). The homepage answered HTTP 200.

Tech detection named Cloudflare, Google Analytics, HSTS, LiteSpeed, LiteSpeed Cache and Litespeed Cache. The fingerprints ran on the homepage that was already downloaded.

Domain · RDAP/WHOIS

ntp.so was registered on 29 Mar 2015 via 1API. The registry returned 1 status value and 2 nameservers from whois://whois.nic.so.

Registeredsince 29 Mar 2015
Created29 March 2015
Updated29 March 2026
Expires29 March 2027
Registrar1API
Statusactive
Nameserverskenneth.ns.cloudflare.com, robin.ns.cloudflare.com
DNSSECunknown
Sourcewhois://whois.nic.so

RDAP is not available for .so

Nameserver kenneth.ns.cloudflare.com is published for ntp.so in the registration record from whois://whois.nic.so.

Nameserver robin.ns.cloudflare.com is published for ntp.so in the registration record from whois://whois.nic.so.

DNS

ntp.so has 4 address records, 0 mail exchangers and 2 nameservers, measured at 1.1.1.1:53.

A188.114.96.3, 188.114.97.3
AAAA2a06:98c1:3120::4, 2a06:98c1:3121::4
NSkenneth.ns.cloudflare.com, robin.ns.cloudflare.com
MX—
SPFabsent
DMARCabsent
CAA—
Wildcardoff
DNSSECnot signed
Resolver1.1.1.1:53

IPv4 address 188.114.96.3 answers for ntp.so at resolver 1.1.1.1:53.

IPv4 address 188.114.97.3 answers for ntp.so at resolver 1.1.1.1:53.

IPv6 address 2a06:98c1:3120::4 answers for ntp.so at resolver 1.1.1.1:53.

IPv6 address 2a06:98c1:3121::4 answers for ntp.so at resolver 1.1.1.1:53.

Hosting and geo

ntp.so is placed in Toronto, Canada by the local geolocation database (db-ip).

Address188.114.96.3
CountryCanada
CityToronto
Sourcedb-ip

IP geolocation by DB-IP

SSL/TLS

The certificate for ntp.so is valid, with 60 days left and 2 subject alternative names. Source: tls:443.

IssuerWE1
Subjectntp.so
Valid from2 October 2026
Valid until31 December 2026
Days left60
SAN count2
ProtocolTLS 1.3
Sourcetls:443

Subject alternative names: *.ntp.so, ntp.so.

Tech stack

Tech detection checked the fetched homepage and named 6 products. Source: wappalyzergo.

  • Cloudflare · CDN
  • Google Analytics · Analytics
  • HSTS · Security
  • LiteSpeed · Web servers
  • LiteSpeed Cache · Caching, WordPress plugins
  • Litespeed Cache · Caching, WordPress plugins

Cloudflare is filed under CDN.

Google Analytics is filed under Analytics.

HSTS is filed under Security.

LiteSpeed is filed under Web servers.

LiteSpeed Cache is filed under Caching, WordPress plugins.

Litespeed Cache is filed under Caching, WordPress plugins.

On-page checks

The homepage returned HTTP 200 in 29 ms. The target title is 69 characters and the page has 12 H1 headings.

Status200
TTFB29 ms
Title length69 no
Quoted title"NameThatPorn.com › Find porn stars and source videos. Name that porn!"
Meta description"Porn star identification. Find porn star name or source video you are looking for. Post your porn and our community will try to answer it!" yes
H1 count12
HSTSyes yes
CSPno
X-Frame-Options—
Robots meta—
Canonical—
Languageen
Links234
Images70
Faviconno

The quoted title and meta description are measurements of the other site. They are not this page's title or description.

Security

Family DNS for ntp.so is blocked, and URLhaus is clear. Source: family DNS and local lists.

Family DNSblocked
URLhausclear
UT1—
Web Risknot run
Sourcefamily DNS and local lists
HSTSyes
CSPno

Cloudflare family DNS returned a block for ntp.so. That resolver covers adult and malware names.

Google Web Risk did not run. No API key is configured, and this report does not invent a clean result from that service.

Score breakdown

Availability 25 of 25. DNS answer plus a homepage status in the 2xx or 3xx range.

TLS 20 of 20. A valid certificate, with extra points when it has at least 14 days left.

DNS hygiene 0 of 20. SPF, DMARC, CAA, and DNSSEC are five points each.

Security headers 5 of 15. HSTS, CSP, and X-Frame-Options or CSP frame-ancestors.

Safety lists 0 of 15. Points only when the checks ran and came back clean. Unknown is not clean.

Domain age 5 of 5. Five points at one year, two points at 30 days.

Change history

  • October 2026: dns a changed from 188.114.96.4,188.114.97.4 to 188.114.96.3,188.114.97.3.
  • October 2026: dns aaaa changed from 2a06:98c1:3120::3,2a06:98c1:3121::3 to 2a06:98c1:3120::4,2a06:98c1:3121::4.

Questions

Is ntp.so safe?

Cloudflare family DNS returned a block for ntp.so. That resolver covers adult and malware names.

Who hosts ntp.so?

ntp.so is placed in Toronto, Canada.

When does ntp.so expire?

ntp.so expires on 29 March 2027 according to whois://whois.nic.so.

Who owns ntp.so?

The registry did not return a person or a company for ntp.so. RDAP often redacts the registrant. The registrar on file is 1API.

Sources

  • RDAP source whois://whois.nic.so at 2026-10-30T15:12:11Z
  • DNS source 1.1.1.1:53 at 2026-10-30T15:12:11Z
  • TLS source tls:443 at 2026-10-30T15:12:11Z
  • HTTP source https://ntp.so/ at 2026-10-30T15:12:11Z
  • Tech source wappalyzergo at 2026-10-30T15:12:11Z
  • Geo source db-ip at 2026-10-30T15:12:11Z
  • Safety source family DNS and local lists at 2026-10-30T15:12:11Z

Methodology

Related reports

No other indexable reports share this TLD, host, or registrar yet.

.so 1API

Owner of this site?

Ask for a correction or for the report to be removed from search. Public DNS facts stay on the page. An optional badge is not inserted for you.

Removal policy

How to read this report

The sentences under each heading are filled from the latest snapshot. If a collector had nothing to say, that sentence is left out. The target site's own title and meta description, when shown, are quoted as measurements. They are not this page's title. Change history only lists a difference between two snapshots, so the first check starts the clock and later edits are the history. A malware blocklist is the only reason the homepage body is skipped. That fact stays on the report. It does not by itself drop the page from the sitemap or from related-report links.