The domain kumu.io is registered with 1API GmbH, first registered on 2012-08-21 and expires on 2027-08-21 (domain age: 14 years, 2 months). It resolves to IP address 35.172.255.195, hosted by Amazon.com, Inc.. Email delivery is handled by Google Workspace. SPF authentication is published and valid. DMARC policy is published. Web traffic is secured with an SSL certificate issued by Amazon RSA 2048 M04.
Domain Overview: kumu.io
Expires in 9 months, 12 days · DNSSEC: Signed
Google Workspace (5 MX)
Issuer: Amazon RSA 2048 M04 (2 SANs)
Ashburn, Virginia, United States (US)
🌐 Domain & Registration Identity View Full Whois Details →
| Domain | kumu.io |
|---|---|
| Website Title | |
| Registered | 2012-08-21 |
| Expires | 2027-08-21 |
| Remaining Validity | 9 months, 12 days |
| Domain Age | 14 years, 2 months |
| Registrar | 1API GmbH |
| Domain Status | clientTransferProhibited |
| DNSSEC Delegation | Signed · Cryptographically signed DNS zone |
| Authoritative Nameservers |
ns-612.awsdns-12.net, ns-1798.awsdns-32.co.uk, ns-1499.awsdns-59.org, ns-227.awsdns-28.com
|
🛡️ Email Security & Deliverability (SPF, DKIM, DMARC) View Complete Email Security Diagnostics →
| Detected Email Provider | 📬 Google Workspace |
|---|---|
| Primary Mail Server (MX) |
aspmx.l.google.com (Priority: 1)
· 5 MX servers configured
|
| SPF Record (Sender Policy) |
Pass
· 3/10 DNS Lookups
· Policy: -all
v=spf1 a include:_spf.google.com include:spf.mandrillapp.com -all
|
| DKIM Authentication |
Detected
· Discovered: Mandrill (mandrill)
|
| DMARC Policy |
Warning (Monitoring None)
· Reports: mailto:ryan@kumu.io
v=DMARC1; p=none; rua=mailto:ryan@kumu.io
|
| SMTP Port 25 Status | Online (8ms) · Inbound mail server handshake response |
🖥️ Web Server, Hosting & Network View Full Server & Tech Details →
| Web Server Software | nginx |
|---|---|
| HTTP Status Code | 200 |
| Server IP (IPv4) | 35.172.255.195 View Geo Details → |
| IPv6 Address (AAAA) | Not Configured |
| Reverse DNS (PTR) |
ec2-35-172-255-195.compute-1.amazonaws.com
|
| Server Location | 📍 Ashburn, Virginia, United States (US) |
| ASN Network & ISP | AS14618 (Amazon.com, Inc.) |
| Hosting Provider | Amazon.com, Inc. |
| Control Panel | Not Detected |
| Technology Stack | Nginx Bootstrap Typekit Google Analytics |
| HTTP Security Headers | 4 / 6 Active (HSTS, CSP, X-Frame, X-Content) Audit Details → |
| DNSBL Blacklist Reputation | Clean (0/5 lists) |
🔒 SSL/TLS Certificate Summary View Full SSL Certificate & Chain →
| Primary Hostname (CN) | kumu.io · Multi-Domain SAN (Covers 2 hostnames) |
|---|---|
| SSL Issuer | Amazon RSA 2048 M04 |
| SSL Valid Till | 2027-01-23 |
| Remaining Validity | 75 Days |
| Chain Status | Valid Trusted Chain |
| Signature Algorithm | RSA-SHA256 |
Whois Ownership & Registration for kumu.io
📄 View Raw Registry Response ↓Domain Information
| Domain Name | kumu.io |
| Creation Date | 2012-08-21T18:27:09Z |
| Updated Date | 2026-08-26T04:28:24Z |
| Registry Expiry Date | 2027-08-21T18:27:09Z |
Registrar Information
| Registrar | 1API GmbH |
| Registrar Abuse Contact Email | abuse@1api.net |
| Registrar IANA ID | 1387 |
Registrant Contact
| Registrant Name | Redacted for Privacy |
| Registrant Organization | Kumu Inc. |
| Registrant Country | US |
Administrative Contact
| Admin Name | Redacted for Privacy |
| Admin Organization | Redacted for Privacy |
| Admin Country | Redacted for Privacy |
Technical Contact
| Tech Name | Redacted for Privacy |
| Tech Organization | Redacted for Privacy |
| Tech Country | Redacted for Privacy |
Domain Status
- clientTransferProhibited
Nameservers
- ns-612.awsdns-12.net
- ns-1499.awsdns-59.org
- ns-1798.awsdns-32.co.uk
- ns-227.awsdns-28.com
📄 View Raw Registry Response Legacy Whois (Port 43)
Domain Name: kumu.io Registry Domain ID: REDACTED Registrar WHOIS Server: whois.1api.net Registrar URL: http://www.1api.net Updated Date: 2026-08-26T04:28:24Z Creation Date: 2012-08-21T18:27:09Z Registry Expiry Date: 2027-08-21T18:27:09Z Registrar: 1API GmbH Registrar IANA ID: 1387 Registrar Abuse Contact Email: abuse@1api.net Registrar Abuse Contact Phone: +49.68949396850 Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Registry Registrant ID: REDACTED Registrant Name: REDACTED Registrant Organization: Kumu Inc. Registrant Street: REDACTED Registrant City: REDACTED Registrant State/Province: CA Registrant Postal Code: REDACTED Registrant Country: US Registrant Phone: REDACTED Registrant Phone Ext: REDACTED Registrant Fax: REDACTED Registrant Fax Ext: REDACTED Registrant Email: REDACTED Registry Admin ID: REDACTED Admin Name: REDACTED Admin Organization: REDACTED Admin Street: REDACTED Admin City: REDACTED Admin State/Province: REDACTED Admin Postal Code: REDACTED Admin Country: REDACTED Admin Phone: REDACTED Admin Phone Ext: REDACTED Admin Fax: REDACTED Admin Fax Ext: REDACTED Admin Email: REDACTED Registry Tech ID: REDACTED Tech Name: REDACTED Tech Organization: REDACTED Tech Street: REDACTED Tech City: REDACTED Tech State/Province: REDACTED Tech Postal Code: REDACTED Tech Country: REDACTED Tech Phone: REDACTED Tech Phone Ext: REDACTED Tech Fax: REDACTED Tech Fax Ext: REDACTED Tech Email: REDACTED Name Server: ns-612.awsdns-12.net Name Server: ns-1499.awsdns-59.org Name Server: ns-1798.awsdns-32.co.uk Name Server: ns-227.awsdns-28.com DNSSEC: signedDelegation URL of the ICANN Whois Inaccuracy Complaint Form: https://icann.org/wicf/ >>> Last update of WHOIS database: 2026-11-08T08:05:18Z <<< For more information on Whois status codes, please visit https://icann.org/epp Terms of Use: Access to WHOIS information is provided to assist persons in determining the contents of a domain name registration record in the registry database. The data in this record is provided by Identity Digital or the Registry Operator for informational purposes only, and accuracy is not guaranteed. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to (a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Registry Operator, a Registrar, or Identity Digital except as reasonably necessary to register domain names or modify existing registrations. When using the Whois service, please consider the following: The Whois service is not a replacement for standard EPP commands to the SRS service. Whois is not considered authoritative for registered domain objects. The Whois service may be scheduled for downtime during production or OT&E maintenance periods. Queries to the Whois services are throttled. If too many queries are received from a single IP address within a specified time, the service will begin to reject further queries for a period of time to prevent disruption of Whois service access. Abuse of the Whois system through data mining is mitigated by detecting and limiting bulk query access from single sources. Where applicable, the presence of a [Non-Public Data] tag indicates that such data is not made publicly available due to applicable data privacy laws or requirements. Should you wish to contact the registrant, please refer to the Whois records available through the registrar URL listed above. Access to non-public data may be provided, upon request, where it can be reasonably confirmed that the requester holds a specific legitimate interest and a proper legal basis for accessing the withheld data. Access to this data provided by Identity Digital can be requested by submitting a request via the form found at https://www.identity.digital/about/policies/whois-layered-access/. The Registrar of Record identified in this output may have an RDDS service that can be queried for additional information on how to contact the Registrant, Admin, or Tech contact of the queried domain name. Identity Digital Inc. and Registry Operator reserve the right to modify these terms at any time. By submitting this query, you agree to abide by this policy.
DNS Records for kumu.io
NS Records
| Name | Data | Copy |
|---|---|---|
| kumu.io. | ns-612.awsdns-12.net. |
|
| kumu.io. | ns-1798.awsdns-32.co.uk. |
|
| kumu.io. | ns-1499.awsdns-59.org. |
|
| kumu.io. | ns-227.awsdns-28.com. |
A Records
| Name | Data | Copy |
|---|---|---|
| kumu.io. | 35.172.255.195 |
|
| kumu.io. | 44.218.105.211 |
AAAA Records
No AAAA records found.
WWW Records (www.kumu.io)
| Type | Host | Value | Copy |
|---|---|---|---|
| A | www.kumu.io. | 44.218.105.211 |
|
| A | www.kumu.io. | 35.172.255.195 |
MX Records
| Priority | Mail Server Target | Copy |
|---|---|---|
| 5 | alt2.aspmx.l.google.com. |
|
| 5 | alt1.aspmx.l.google.com. |
|
| 1 | aspmx.l.google.com. |
|
| 10 | alt3.aspmx.l.google.com. |
|
| 10 | alt4.aspmx.l.google.com. |
TXT Records
| Name | Value | Copy |
|---|---|---|
| kumu.io. | google-site-verification=ohGrcLXEfii187B-cXycshu7BkOAMQZX1AIKqoCZLW4 |
|
| kumu.io. | v=spf1 a include:_spf.google.com include:spf.mandrillapp.com -all |
Email Security (MX, SPF, DKIM, DMARC, SMTP) for kumu.io
Mail Exchange (MX) Routing Records
SPF Record Validation
v=spf1 a include:_spf.google.com include:spf.mandrillapp.com -all
Record Breakdown
| Prefix | Mechanism | Value | Description |
|---|---|---|---|
| + | v |
spf1 | The SPF record version. |
| + | a |
Match if the sender's IP is one of the domain's A records. | |
| + | include |
_spf.google.com | The specified domain is searched for a match. |
| + | include |
spf.mandrillapp.com | The specified domain is searched for a match. |
| - | all |
Always matches. This should be the last mechanism. |
Validation Summary
| SPF Record Published | Pass An SPF record was found. |
| Multiple SPF Records | Pass Only one SPF record was found. |
| Included Lookups | Pass The number of DNS lookups (3) is within the limit of 10. |
| Type PTR Check | Pass The deprecated PTR mechanism was not found. |
| Characters After ALL | Pass No mechanisms were found after the "all" mechanism. |
Common DKIM Selectors
Mandrill (mandrill)
| Name | Data | Copy |
|---|---|---|
| mandrill._domainkey.kumu.io. | v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y78dHZj1YeRXXVvWob2OaKynO8/lQIDAQAB; |
🔍 Query Custom DKIM Selector
Live DNS Lookup
Using a custom or date-based selector (e.g. crm, newsletter, 2024)? Query its public key live on kumu.io:
DMARC Policy Validation
v=DMARC1; p=none; rua=mailto:ryan@kumu.io
Tag Breakdown
| Tag | Value | Description |
|---|---|---|
v |
DMARC1 | Version: Must be "DMARC1". |
p |
none | Policy: The action to take for failed emails (none, quarantine, reject). |
rua |
mailto:ryan@kumu.io | Aggregate Reports: Email address(es) to send summary reports. |
Validation Summary
| DMARC Record Published | Pass A DMARC record was found. |
| Syntax Check | Pass The record has a valid version tag. |
| Policy Enforcement | Warning The policy is "p=none", which is for monitoring only and does not protect against spoofing. |
| Aggregate Reporting | Pass An address for aggregate reports was found. |
Optimization Suggestions
After monitoring your aggregate reports to ensure legitimate email sources are aligned, you should move to a "p=quarantine" or "p=reject" policy to protect your domain.
SMTP Connectivity Test (Port 25)
| Mail Server | Status | Latency | Banner / Handshake Response |
|---|---|---|---|
| aspmx.l.google.com | Success | 8ms | 220 mx.google.com ESMTP 5a478bee46e88-3726571208asi4316594eec.25 - gsmtp |
Server IP Blacklist Check (35.172.255.195)
SSL/TLS Certificate Details for kumu.io
- Issuer: Amazon RSA 2048 M04
- Expires In: 75 Days
- Chain Status: Valid Chain
Main Leaf Certificate
- Common Name:
kumu.io - SANs: DNS:kumu.io, DNS:*.kumu.io
- Organization: N/A
- Validity: Dec 24, 2025 to Jan 23, 2027
- Algorithm: RSA-SHA256
- Common Name: Amazon RSA 2048 M04
- Organization: Amazon
- Valid Till: Aug 24, 2030
- Issuer: Amazon Root CA 1
- Common Name: Amazon Root CA 1
- Organization: Amazon
- Valid Till: Dec 31, 2037
- Issuer: Starfield Services Root Certificate Authority - G2
Website & Server Intelligence for kumu.io
Website Identity
| Title | |
|---|---|
| Meta Description | N/A |
Hosting & Server Network
| IP Address | 35.172.255.195 |
|---|---|
| HTTP Status | 200 |
| Hosting Provider | Amazon.com, Inc. |
| Web Server | nginx |
| Control Panel | Not Detected |
Technology Profile
- Nginx
- Bootstrap
- Typekit
- Google Analytics
HTTP Security Headers
| Strict-Transport-Security | Present |
| Content-Security-Policy | Present |
| X-Frame-Options | Present |
| X-Content-Type-Options | Present |
| Referrer-Policy | Missing |
| Permissions-Policy | Missing |
IP Details & Geolocation
| IP Address | 35.172.255.195 |
|---|---|
| Reverse DNS (PTR) |
ec2-35-172-255-195.compute-1.amazonaws.com
|
| Country | United States (US) |
| Region | Virginia |
| City | Ashburn |
| ZIP Code | N/A |
| ASN | 14618 |
| Organization / ISP | Amazon.com, Inc. |
Understanding Diagnostic Terms for kumu.io
Domain Status (EPP)
EPP status codes (e.g., clientTransferProhibited, active) indicating if a domain is locked against unauthorized transfer, pending renewal, or active.
Registrar Information
The authorized or accredited organization managing the domain reservation and authoritative registry delegation.
Nameservers (NS)
Authoritative servers that translate domain names into IP addresses and direct web visitors and mail traffic globally.
A & AAAA Records
Primary address records mapping your domain name directly to standard IPv4 (e.g., 192.0.2.1) and newer IPv6 server network addresses.
MX (Mail Exchange)
Priority-ranked records pointing inbound emails to designated mail server hosts (e.g., Google Workspace, Microsoft 365, Zoho).
SPF & DMARC Security
Email authentication standards that verify authorized sender IPs (SPF) and instruct receiving servers how to enforce security policies (DMARC).
DKIM Signatures
Cryptographic public key in DNS used by receiving mail servers to verify digital signatures on your emails, ensuring messages were not tampered with.
SSL Certificate & Chain
Establishes encrypted HTTPS connections and authenticates domain ownership via an intermediate certificate authority chain.
Hosting Provider & ASN
The physical server infrastructure where website files reside and the autonomous system network (ASN) routing global traffic.
Reverse DNS (PTR)
Pointer (PTR) records that map a server's IP address back to its canonical hostname, verifying server identity and preventing email spam rejection.
HTTP Security Headers
Directives like HSTS, CSP, and X-Frame-Options instructed by the server to protect browser visitors against XSS, clickjacking, and packet sniffing.
⚠️ Report Limitations & Data Sources
- Data Currency: This report uses cached registry and DNS data (freshened within 4 hours) for high-speed resolution. Click "🔄 Refresh Live" to query directly against authoritative registries.
- DNS Resolution & Propagation: Records are queried via Google Public DNS-over-HTTPS. Global DNS propagation may take up to 24–48 hours across different regional ISP resolvers during recent DNS record changes.
- Completeness & Scope: This diagnostic tool analyzes standard authoritative records (A, AAAA, MX, NS, TXT, CNAME, SOA). It does not perform invasive brute-force subdomain scans or unauthenticated DNS zone transfers.
- Email Deliverability & Reputation: The security analysis (SPF, DKIM, DMARC, and Port 25 SMTP handshake) reflects public DNS policies and inbound connection states. Recipient spam filters evaluate internal headers that cannot be checked from outside.
- Reverse Proxies & CDNs: If a website is behind Cloudflare, Fastly, or another CDN/reverse proxy, the detected IP, web server software, and SSL edge certificate reflect the proxy tier.