Initializing diagnostics...

⚡ Loaded from cache (2026-09-28 08:19:21 IST). 🔄 Refresh Live
🤖 AI Intelligence Summary

The domain zecoschoolwear.co.uk is registered with 123-Reg Limited t/a 123-reg, first registered on 2009-06-29 and expires on 2031-06-29 (domain age: 17 years, 2 months). It resolves to IP address 92.205.129.9, hosted by Host Europe GmbH. Email delivery is handled by Microsoft 365. SPF authentication is published and valid. DMARC protection is missing or unconfigured. Web traffic is secured with an SSL certificate issued by Starfield Secure Certificate Authority - G2.

Domain Overview: zecoschoolwear.co.uk

Domain Registration 🌐
Active 17 years, 2 months

Expires in 4 years, 9 months · DNSSEC: Unsigned

Email Security 🛡️
SPF: Pass DKIM: Detected DMARC: Missing

Microsoft 365 (1 MX)

SSL Certificate 🔒
Valid Chain 22 Days Left

Issuer: Starfield Secure Certificate Authority - G2 (2 SANs)

Server & Hosting 🖥️
200 Apache

Cologne (Porz, Cologne), North Rhine-Westphalia, Germany (DE)

🌐 Domain & Registration Identity View Full Whois Details →

Domainzecoschoolwear.co.uk
Website TitleFavicon Zeco: Wholesale School Uniform Suppliers
Registered2009-06-29
Expires2031-06-29
Remaining Validity4 years, 9 months
Domain Age17 years, 2 months
Registrar123-Reg Limited t/a 123-reg
Domain Statusclient renew prohibited, client transfer prohibited, client delete prohibited, client update prohibited i
DNSSEC Delegation Unsigned · Zone not signed with DNSSEC keys i
Authoritative Nameservers ns28.domaincontrol.com, ns27.domaincontrol.com i

🛡️ Email Security & Deliverability (SPF, DKIM, DMARC) View Complete Email Security Diagnostics →

Detected Email Provider 📬 Microsoft 365
Primary Mail Server (MX) zecoschoolwear-co-uk.mail.protection.outlook.com (Priority: 0) · 1 MX server configured i
SPF Record (Sender Policy) Pass · 1/10 DNS Lookups · Policy: -all i
v=spf1 include:spf.protection.outlook.com -all
DKIM Authentication Detected · Discovered: cPanel / WHM (default) i
DMARC Policy Missing i
SMTP Port 25 Status Online (378ms) · Inbound mail server handshake response

🖥️ Web Server, Hosting & Network View Full Server & Tech Details →

Web Server Software Apache i
HTTP Status Code 200 i
Server IP (IPv4) 92.205.129.9 View Geo Details →
IPv6 Address (AAAA) Not Configured
Reverse DNS (PTR) 9.129.205.92.host.secureserver.net
Server Location 📍 Cologne (Porz, Cologne), North Rhine-Westphalia, Germany (DE)
ASN Network & ISP AS21499 (Host Europe GmbH)
Hosting Provider Host Europe GmbH i
Control Panel Not Detected i
Technology Stack Apache jQuery Bootstrap Google Fonts Google Analytics
HTTP Security Headers 3 / 6 Active (X-Content, Referrer-Policy, Permissions-Policy) Audit Details →
DNSBL Blacklist Reputation Clean (0/5 lists)

🔒 SSL/TLS Certificate Summary View Full SSL Certificate & Chain →

Primary Hostname (CN) zecoschoolwear.co.uk · Multi-Domain SAN (Covers 2 hostnames)
SSL IssuerStarfield Secure Certificate Authority - G2
SSL Valid Till2026-10-20
Remaining Validity22 Days
Chain Status Valid Trusted Chain
Signature AlgorithmRSA-SHA256

Whois Ownership & Registration for zecoschoolwear.co.uk

📄 View Raw Registry Response ↓

Domain Information i

Domain NameZECOSCHOOLWEAR.CO.UK
Registration Date2009-06-29 09:37:43 Z
Last Changed Date2024-12-20 15:02:14 Z
Expiration Date2031-06-29 09:37:43 Z

Domain Status i

  • client renew prohibited
  • client transfer prohibited
  • client delete prohibited
  • client update prohibited

Registrar Information i

Name123-Reg Limited t/a 123-reg
Abuse Emailabuse@webfusion.com

Registrant Contact i

Emailredacted@nominet.uk

Administrative Contact i

Contact information for this role is not provided by the registry.

Technical Contact i

Contact information for this role is not provided by the registry.

Nameservers i

  • ns27.domaincontrol.com.
  • ns28.domaincontrol.com.
📄 View Raw Registry Response RDAP (Hybrid)
{
    "rdapConformance": [
        "redacted",
        "rdap_level_0"
    ],
    "objectClassName": "domain",
    "links": [
        {
            "value": "https://rdap.nominet.uk/uk/domain/zecoschoolwear.co.uk",
            "rel": "self",
            "href": "https://rdap.nominet.uk/uk/domain/zecoschoolwear.co.uk",
            "type": "application/rdap+json"
        }
    ],
    "notices": [
        {
            "title": "Terms of Service",
            "description": [
                "The Registry Operator, offers this Registration Data Access Protocol (RDAP) service and provides access to the records in the RDAP database for information purposes only, to assist you in obtaining information about the registration records of existing domain names. The stored information in the RDAP database is provided as is. We do not guarantee its accuracy or completeness, and cannot be held liable if the stored information in the RDAP database is wrong, incomplete, or inaccurate in any way. By querying the RDAP database in any way, you agree that you will not use this data: (i) to allow, enable or otherwise support the transmission of unsolicited, commercial advertising or other solicitations in any form or by any means; (ii) to enable high volume, automated, electronic processes that query or send data to the Registry Operator or any registrar or registrant; (iii) for target advertising; (iv) to cause nuisance to registrants by sending (by any means) messages to or contacting them; (v) to violate any law, rule, regulation or statute; and/or (vi) in violation of applicable data and privacy protection acts. You are explicitly prohibited from extracting, copying and/or using or re-using in any form and by any means (electronically or not) all or part (quantitatively or qualitatively) of the contents of the RDAP database without prior and explicit permission from the Registry Operator. Any copying or transmission of data for commercial purposes violates this prohibition. You agree that we can take measures to limit the use of the RDAP service to protect the privacy of registrants or the integrity of the database. We reserve the right to make changes to this website, the RDAP service, and these Terms and Conditions at any time without prior notice to you. You should review these Terms and Conditions each time you access or use the RDAP database and the RDAP service to learn of any changes. If you do not agree to the changes we have made, your only remedy is to stop your use of the RDAP database and the RDAP service. By executing a query, in any means whatsoever, you agree to these Terms of Service."
            ],
            "links": [
                {
                    "value": "https://rdap.nominet.uk/uk/domain/zecoschoolwear.co.uk",
                    "rel": "terms-of-service",
                    "href": "https://nominet.uk/rdap-tos",
                    "type": "text/html"
                }
            ]
        },
        {
            "title": "Status Codes",
            "description": [
                "For more information on domain status codes, please visit https://icann.org/epp"
            ],
            "links": [
                {
                    "value": "https://rdap.nominet.uk/uk/domain/zecoschoolwear.co.uk",
                    "rel": "glossary",
                    "href": "https://icann.org/epp",
                    "type": "text/html"
                }
            ]
        },
        {
            "title": "RDDS Inaccuracy Complaint Form",
            "description": [
                "URL of the Nominet WHOIS data complaint process: https://www.nominet.uk/complaints/#complaining-about-incorrect-whois-data"
            ],
            "links": [
                {
                    "value": "https://rdap.nominet.uk/uk/domain/zecoschoolwear.co.uk",
                    "rel": "help",
                    "href": "https://www.nominet.uk/complaints/#complaining-about-incorrect-whois-data",
                    "type": "text/html"
                }
            ]
        }
    ],
    "events": [
        {
            "eventAction": "registration",
            "eventActor": "FASTHOSTS",
            "eventDate": "2009-06-29T09:37:43Z"
        },
        {
            "eventAction": "last changed",
            "eventDate": "2024-12-20T15:02:14Z"
        },
        {
            "eventAction": "expiration",
            "eventDate": "2031-06-29T09:37:43Z"
        },
        {
            "eventAction": "transfer",
            "eventDate": "2024-12-20T14:49:58Z"
        },
        {
            "eventAction": "last update of RDAP database",
            "eventDate": "2026-09-28T02:49:15.761Z"
        }
    ],
    "status": [
        "client renew prohibited",
        "client transfer prohibited",
        "client delete prohibited",
        "client update prohibited"
    ],
    "handle": "D_44875915-UK",
    "ldhName": "zecoschoolwear.co.uk",
    "unicodeName": "zecoschoolwear.co.uk",
    "secureDNS": {
        "delegationSigned": false,
        "maxSigLife": 3024000
    },
    "entities": [
        {
            "objectClassName": "entity",
            "links": [
                {
                    "value": "https://rdap.nominet.uk/uk/entity/123-REG",
                    "rel": "self",
                    "href": "https://rdap.nominet.uk/uk/entity/123-REG",
                    "type": "application/rdap+json"
                }
            ],
            "handle": "123-REG",
            "vcardArray": [
                "vcard",
                [
                    [
                        "version",
                        [],
                        "text",
                        "4.0"
                    ],
                    [
                        "fn",
                        [],
                        "text",
                        "123-Reg Limited t/a 123-reg"
                    ],
                    [
                        "adr",
                        [],
                        "text",
                        [
                            "",
                            "",
                            "5th Floor, The Shipping Building, Old Vinyl Factory, 252-254 Blyth Road, Hayes, Middlesex, UB3 1HA ",
                            "",
                            "",
                            "",
                            ""
                        ]
                    ],
                    [
                        "tel",
                        {
                            "type": "voice"
                        },
                        "text",
                        "0345-450-2310-or-0330-221-1007"
                    ],
                    [
                        "tel",
                        {
                            "type": "fax"
                        },
                        "text",
                        "0870-165-0437"
                    ],
                    [
                        "url",
                        [],
                        "uri",
                        "https://www.123-reg.co.uk/"
                    ]
                ]
            ],
            "roles": [
                "registrar"
            ],
            "publicIds": [
                {
                    "type": "Registry Identifier",
                    "identifier": "123-REG"
                }
            ],
            "entities": [
                {
                    "objectClassName": "entity",
                    "vcardArray": [
                        "vcard",
                        [
                            [
                                "version",
                                [],
                                "text",
                                "4.0"
                            ],
                            [
                                "fn",
                                [],
                                "text",
                                "Abuse contact"
                            ],
                            [
                                "email",
                                [],
                                "text",
                                "abuse@webfusion.com"
                            ]
                        ]
                    ],
                    "roles": [
                        "abuse"
                    ]
                }
            ]
        },
        {
            "objectClassName": "entity",
            "remarks": [
                {
                    "title": "REDACTED FOR PRIVACY",
                    "type": "object redacted due to authorization",
                    "description": [
                        "Some of the data in this object has been removed"
                    ]
                },
                {
                    "title": "EMAIL REDACTED FOR PRIVACY",
                    "type": "object redacted due to authorization",
                    "description": [
                        "This data is not generally available, if you have legitimate reason to request access please review Nominets data release process."
                    ]
                },
                {
                    "title": "Data Quality",
                    "description": [
                        "Name validated.",
                        "Address validated.",
                        "Nominet responsible for validation."
                    ]
                }
            ],
            "events": [
                {
                    "eventAction": "registration",
                    "eventDate": "2024-12-20T15:02:13Z"
                }
            ],
            "status": [
                "validated"
            ],
            "vcardArray": [
                "vcard",
                [
                    [
                        "version",
                        [],
                        "text",
                        "4.0"
                    ],
                    [
                        "fn",
                        [],
                        "text",
                        ""
                    ],
                    [
                        "email",
                        [],
                        "text",
                        "redacted@nominet.uk"
                    ]
                ]
            ],
            "roles": [
                "registrant"
            ]
        }
    ],
    "publicIds": [
        {
            "type": "Registry Identifier",
            "identifier": "D_44875915-UK"
        }
    ],
    "nameservers": [
        {
            "objectClassName": "nameserver",
            "links": [
                {
                    "value": "https://rdap.nominet.uk/uk/nameserver/ns27.domaincontrol.com.",
                    "rel": "self",
                    "href": "https://rdap.nominet.uk/uk/nameserver/ns27.domaincontrol.com.",
                    "type": "application/rdap+json"
                }
            ],
            "status": [
                "active",
                "associated"
            ],
            "handle": "H_886728-UK",
            "ldhName": "ns27.domaincontrol.com.",
            "unicodeName": "ns27.domaincontrol.com."
        },
        {
            "objectClassName": "nameserver",
            "links": [
                {
                    "value": "https://rdap.nominet.uk/uk/nameserver/ns28.domaincontrol.com.",
                    "rel": "self",
                    "href": "https://rdap.nominet.uk/uk/nameserver/ns28.domaincontrol.com.",
                    "type": "application/rdap+json"
                }
            ],
            "status": [
                "active",
                "associated"
            ],
            "handle": "H_11245-UK",
            "ldhName": "ns28.domaincontrol.com.",
            "unicodeName": "ns28.domaincontrol.com."
        }
    ],
    "redacted": [
        {
            "name": {
                "type": "Registrant Name"
            },
            "reason": {
                "description": "Server policy"
            },
            "postPath": "$.entities[?(@.roles[0]=='registrant')].vcardArray[1][?(@[0]=='fn')][3]",
            "pathLang": "jsonpath",
            "method": "emptyValue"
        },
        {
            "name": {
                "type": "Registrant Organization"
            },
            "reason": {
                "description": "Server policy"
            },
            "prePath": "$.entities[?(@.roles[0]=='registrant')].vcardArray[1][?(@[0]=='org')]",
            "pathLang": "jsonpath",
            "method": "removal"
        },
        {
            "name": {
                "description": "Registrant Organisation Type"
            },
            "reason": {
                "description": "Server policy"
            },
            "method": "removal"
        },
        {
            "name": {
                "description": "Registrant Identifier Label"
            },
            "reason": {
                "description": "Server policy"
            },
            "method": "removal"
        },
        {
            "name": {
                "description": "Registrant Organisation Identifier"
            },
            "reason": {
                "description": "Server policy"
            },
            "method": "removal"
        },
        {
            "name": {
                "type": "Registrant Street"
            },
            "reason": {
                "description": "Server policy"
            },
            "postPath": "$.entities[?(@.roles[0]=='registrant')].vcardArray[1][?(@[0]=='adr')][3][:3]",
            "pathLang": "jsonpath",
            "method": "emptyValue"
        },
        {
            "name": {
                "type": "Registrant Postal Code"
            },
            "reason": {
                "description": "Server policy"
            },
            "postPath": "$.entities[?(@.roles[0]=='registrant')].vcardArray[1][?(@[0]=='adr')][3][5]",
            "pathLang": "jsonpath",
            "method": "emptyValue"
        },
        {
            "name": {
                "type": "Registrant City"
            },
            "reason": {
                "description": "Server policy"
            },
            "postPath": "$.entities[?(@.roles[0]=='registrant')].vcardArray[1][?(@[0]=='adr')][3][3]",
            "pathLang": "jsonpath",
            "method": "emptyValue"
        },
        {
            "name": {
                "description": "Registrant Country"
            },
            "reason": {
                "description": "Server policy"
            },
            "method": "emptyValue"
        },
        {
            "name": {
                "description": "Registrant Region"
            },
            "reason": {
                "description": "Server policy"
            },
            "method": "emptyValue"
        },
        {
            "name": {
                "type": "Registrant Email"
            },
            "reason": {
                "description": "Server policy"
            },
            "prePath": "$.entities[?(@.roles[0]=='registrant')].vcardArray[1][?(@[0]=='email')]",
            "replacementPath": "$.entities[?(@.roles[0]=='registrant')].vcardArray[1][?(@[0]=='email')][3]",
            "pathLang": "jsonpath",
            "method": "replacementValue"
        },
        {
            "name": {
                "type": "Registrant Phone"
            },
            "reason": {
                "description": "Server policy"
            },
            "prePath": "$.entities[?(@.roles[0]=='registrant')].vcardArray[1][?(@[1].type=='voice')]",
            "pathLang": "jsonpath",
            "method": "removal"
        }
    ]
}

DNS Records for zecoschoolwear.co.uk

NS Records i

NameDataCopy
zecoschoolwear.co.uk. ns28.domaincontrol.com.
zecoschoolwear.co.uk. ns27.domaincontrol.com.

A Records i

NameDataCopy
zecoschoolwear.co.uk. 92.205.129.9

AAAA Records i

No AAAA records found.

WWW Records (www.zecoschoolwear.co.uk) i

TypeHostValueCopy
CNAME www.zecoschoolwear.co.uk. zecoschoolwear.co.uk.
A www.zecoschoolwear.co.uk. zecoschoolwear.co.uk.
A zecoschoolwear.co.uk. 92.205.129.9

MX Records i

PriorityMail Server TargetCopy
0 zecoschoolwear-co-uk.mail.protection.outlook.com.

TXT Records i

NameValueCopy
zecoschoolwear.co.uk. v=spf1 include:spf.protection.outlook.com -all
zecoschoolwear.co.uk. v2n0ume4mhvpcq4q4ll4nerteo
zecoschoolwear.co.uk. MS=ms63713269

Email Security (MX, SPF, DKIM, DMARC, SMTP) for zecoschoolwear.co.uk

Detected Email Provider
📬 Microsoft 365
✓ Active MX Routing (1 Server)

Mail Exchange (MX) Routing Records i

Priority Mail Server Hostname Copy
0 zecoschoolwear-co-uk.mail.protection.outlook.com

SPF Record Validation i

v=spf1 include:spf.protection.outlook.com -all

Record Breakdown

PrefixMechanismValueDescription
+ v spf1 The SPF record version.
+ include spf.protection.outlook.com The specified domain is searched for a match.
- all Always matches. This should be the last mechanism.

Validation Summary

SPF Record Published Pass An SPF record was found.
Multiple SPF Records Pass Only one SPF record was found.
Included Lookups Pass The number of DNS lookups (1) is within the limit of 10.
Type PTR Check Pass The deprecated PTR mechanism was not found.
Characters After ALL Pass No mechanisms were found after the "all" mechanism.

Common DKIM Selectors i

cPanel / WHM (default)

NameDataCopy
default._domainkey.zecoschoolwear.co.uk.v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDp6I0KVd5At2EsokV24+igTD42Q7Yk7/ZwEmdB0auMJ/fTqsRXGLlQx0JjmkfMKP7DoT25yBt7RMMQnRIxsvDvvCBqkJ60XAMnm3Lj4tc1WdMrv+sxEkXLeuqxPePttDfRaXgSu+sCyuq6IenHF/gOPdo0N9HaBBgqA8wnPzFKtwIDAQAB;

🔍 Query Custom DKIM Selector

Live DNS Lookup

Using a custom or date-based selector (e.g. crm, newsletter, 2024)? Query its public key live on zecoschoolwear.co.uk:

DMARC Policy Validation i

No DMARC record found to validate.

Validation Summary

DMARC Record Published Fail No DMARC record was found.

Optimization Suggestions

A DMARC record is essential for email security. It tells receiving servers what to do with emails that fail SPF and DKIM checks, protecting your domain from spoofing.

SMTP Connectivity Test (Port 25)

Mail ServerStatusLatencyBanner / Handshake Response
zecoschoolwear-co-uk.mail.protection.outlook.com Success 378ms 220 LO1PEPF000022FC.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Mon, 28 Sep 2026 02:49:21 +0000 [08DF1C532A6D5653]

Server IP Blacklist Check (92.205.129.9)

  • Spamhaus ZEN: Clean
  • SpamCop: Clean
  • Barracuda: Clean
  • GBUdb Truncate: Clean
  • DroneBL: Clean
  • SSL/TLS Certificate Details for zecoschoolwear.co.uk

    • Issuer: Starfield Secure Certificate Authority - G2
    • Expires In: 22 Days
    • Chain Status: Valid Chain

    🔒 SSL / TLS Protocol Support

    Excellent
    TLS protocol versions
    TLS 1.3 Enabled
    TLS 1.2 Enabled
    TLS 1.1 (deprecated) Disabled
    TLS 1.0 (deprecated) Disabled
    SSL protocol versions
    SSLv3 (deprecated) Disabled
    SSLv2 (deprecated) Disabled

    Main Leaf Certificate

    • Common Name: zecoschoolwear.co.uk
    • SANs: DNS:zecoschoolwear.co.uk, DNS:www.zecoschoolwear.co.uk
    • Organization: N/A
    • Validity: Sep 18, 2025 to Oct 20, 2026
    • Algorithm: RSA-SHA256
    ↓ Intermediate CA Certificate ↓
    • Common Name: Starfield Secure Certificate Authority - G2
    • Organization: Starfield Technologies, Inc.
    • Valid Till: May 03, 2031
    • Issuer: Starfield Root Certificate Authority - G2

    Website & Server Intelligence for zecoschoolwear.co.uk

    Website Identity

    TitleFavicon Zeco: Wholesale School Uniform Suppliers
    Meta DescriptionSchoolwear you can trust. Leading UK based independent suppliers of British school uniform & sportswear. Est 1976.

    Hosting & Server Network

    IP Address92.205.129.9
    HTTP Status200 i
    Hosting ProviderHost Europe GmbH i
    Web ServerApache i
    Control Panel Not Detected i

    Technology Profile

    • Apache
    • jQuery
    • Bootstrap
    • Google Fonts
    • Google Analytics

    HTTP Security Headers

    Strict-Transport-Security Missing
    Content-Security-Policy Missing
    X-Frame-Options Missing
    X-Content-Type-Options Present
    Referrer-Policy Present
    Permissions-Policy Present

    IP Details & Geolocation

    IP Address 92.205.129.9
    Reverse DNS (PTR) 9.129.205.92.host.secureserver.net
    CountryGermany (DE)
    RegionNorth Rhine-Westphalia
    CityCologne (Porz, Cologne)
    ZIP CodeN/A
    ASN21499
    Organization / ISPHost Europe GmbH

    Understanding Diagnostic Terms for zecoschoolwear.co.uk

    Domain Status (EPP)

    EPP status codes (e.g., clientTransferProhibited, active) indicating if a domain is locked against unauthorized transfer, pending renewal, or active.

    Registrar Information

    The authorized or accredited organization managing the domain reservation and authoritative registry delegation.

    Nameservers (NS)

    Authoritative servers that translate domain names into IP addresses and direct web visitors and mail traffic globally.

    A & AAAA Records

    Primary address records mapping your domain name directly to standard IPv4 (e.g., 192.0.2.1) and newer IPv6 server network addresses.

    MX (Mail Exchange)

    Priority-ranked records pointing inbound emails to designated mail server hosts (e.g., Google Workspace, Microsoft 365, Zoho).

    SPF & DMARC Security

    Email authentication standards that verify authorized sender IPs (SPF) and instruct receiving servers how to enforce security policies (DMARC).

    DKIM Signatures

    Cryptographic public key in DNS used by receiving mail servers to verify digital signatures on your emails, ensuring messages were not tampered with.

    SSL Certificate & Chain

    Establishes encrypted HTTPS connections and authenticates domain ownership via an intermediate certificate authority chain.

    Hosting Provider & ASN

    The physical server infrastructure where website files reside and the autonomous system network (ASN) routing global traffic.

    Reverse DNS (PTR)

    Pointer (PTR) records that map a server's IP address back to its canonical hostname, verifying server identity and preventing email spam rejection.

    HTTP Security Headers

    Directives like HSTS, CSP, and X-Frame-Options instructed by the server to protect browser visitors against XSS, clickjacking, and packet sniffing.

    ⚠️ Report Limitations & Data Sources

    • Data Currency: This report uses cached registry and DNS data (freshened within 4 hours) for high-speed resolution. Click "🔄 Refresh Live" to query directly against authoritative registries.
    • DNS Resolution & Propagation: Records are queried via Google Public DNS-over-HTTPS. Global DNS propagation may take up to 24–48 hours across different regional ISP resolvers during recent DNS record changes.
    • Completeness & Scope: This diagnostic tool analyzes standard authoritative records (A, AAAA, MX, NS, TXT, CNAME, SOA). It does not perform invasive brute-force subdomain scans or unauthenticated DNS zone transfers.
    • Email Deliverability & Reputation: The security analysis (SPF, DKIM, DMARC, and Port 25 SMTP handshake) reflects public DNS policies and inbound connection states. Recipient spam filters evaluate internal headers that cannot be checked from outside.
    • Reverse Proxies & CDNs: If a website is behind Cloudflare, Fastly, or another CDN/reverse proxy, the detected IP, web server software, and SSL edge certificate reflect the proxy tier.