Initializing diagnostics...

⚡ Loaded from cache (2026-11-08 02:20:19 IST). 🔄 Refresh Live
🤖 AI Intelligence Summary

The domain securityheaders.com is registered with Cloudflare, Inc., first registered on 2013-03-10 and expires on 2027-03-10 (domain age: 13 years, 7 months). It resolves to IP address 104.18.24.239, hosted by Cloudflare, Inc.. Email delivery is handled by Google Workspace. SPF authentication is published and valid. DMARC policy is published. Web traffic is secured with an SSL certificate issued by WE1.

Domain Overview: securityheaders.com

Domain Registration 🌐
Active 13 years, 7 months

Expires in 4 months, 1 day · DNSSEC: Signed

Email Security 🛡️
SPF: Pass DKIM: Detected DMARC: Quarantine

Google Workspace (5 MX)

SSL Certificate 🔒
Valid Chain 63 Days Left

Issuer: WE1 (2 SANs)

Server & Hosting 🖥️
200 cloudflare

Toronto, Ontario, Canada (CA)

🌐 Domain & Registration Identity View Full Whois Details →

Domainsecurityheaders.com
Website TitleFavicon Analyse your HTTP response headers
Registered2013-03-10
Expires2027-03-10
Remaining Validity4 months, 1 day
Domain Age13 years, 7 months
RegistrarCloudflare, Inc.
Domain Statusclient transfer prohibited i
DNSSEC Delegation Signed · Cryptographically signed DNS zone i
Authoritative Nameservers adrian.ns.cloudflare.com, karl.ns.cloudflare.com i

🛡️ Email Security & Deliverability (SPF, DKIM, DMARC) View Complete Email Security Diagnostics →

Detected Email Provider 📬 Google Workspace
Primary Mail Server (MX) aspmx.l.google.com (Priority: 1) · 5 MX servers configured i
SPF Record (Sender Policy) Pass · 2/10 DNS Lookups · Policy: ~all i
v=spf1 include:spf.messagingengine.com include:_spf.google.com ~all
DKIM Authentication Detected · Discovered: Google Workspace (google), Twilio SendGrid (Key 1) (s1), Twilio SendGrid (Key 2) (s2) i
DMARC Policy Pass (Quarantine) · Reports: mailto:scotthelme-d@dmarc.report-uri.com i
v=DMARC1; p=quarantine; rua=mailto:scotthelme-d@dmarc.report-uri.com; ruf=mailto:scotthelme-d@dmarc.report-uri.com; aspf=r; adkim=r
SMTP Port 25 Status Online (8ms) · Inbound mail server handshake response

🖥️ Web Server, Hosting & Network View Full Server & Tech Details →

Web Server Software cloudflare i
HTTP Status Code 200 i
Server IP (IPv4) 104.18.24.239 View Geo Details →
IPv6 Address (AAAA) 2606:4700::6812:19ef
Reverse DNS (PTR) None Detected (No PTR Record)
Server Location 📍 Toronto, Ontario, Canada (CA)
ASN Network & ISP AS13335 (Cloudflare, Inc.)
Hosting Provider Cloudflare, Inc. i
Control Panel Not Detected i
Technology Stack Cloudflare PHP jQuery Google Tag Manager
HTTP Security Headers 6 / 6 Active (HSTS, CSP, X-Frame, X-Content, Referrer-Policy, Permissions-Policy) Audit Details →
DNSBL Blacklist Reputation Clean (0/5 lists)

🔒 SSL/TLS Certificate Summary View Full SSL Certificate & Chain →

Primary Hostname (CN) securityheaders.com · Multi-Domain SAN (Covers 2 hostnames)
SSL IssuerWE1
SSL Valid Till2027-01-10
Remaining Validity63 Days
Chain Status Valid Trusted Chain
Signature Algorithmecdsa-with-SHA256

Whois Ownership & Registration for securityheaders.com

📄 View Raw Registry Response ↓

Domain Information i

Domain NameSECURITYHEADERS.COM
Registration Date2013-03-10 22:03:49 Z
Expiration Date2027-03-10 22:03:49 Z
Last Changed Date2024-09-04 07:41:02 Z

Domain Status i

  • client transfer prohibited

Registrar Information i

NameCloudflare, Inc.
Abuse Emailregistrar-abuse@cloudflare.com

Registrant Contact i

Contact information for this role is not provided or redacted.

Administrative Contact i

Contact information for this role is not provided or redacted.

Technical Contact i

Contact information for this role is not provided or redacted.

Nameservers i

  • ADRIAN.NS.CLOUDFLARE.COM
  • KARL.NS.CLOUDFLARE.COM
📄 View Raw Registry Response RDAP (Hybrid)
Domain Name: SECURITYHEADERS.COM
   Registry Domain ID: 1785535307_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.cloudflare.com
   Registrar URL: http://www.cloudflare.com
   Updated Date: 2024-09-04T07:41:02Z
   Creation Date: 2013-03-10T22:03:49Z
   Registry Expiry Date: 2027-03-10T22:03:49Z
   Registrar: Cloudflare, Inc.
   Registrar IANA ID: 1910
   Registrar Abuse Contact Email: registrar-abuse@cloudflare.com
   Registrar Abuse Contact Phone: +1.6503198930
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Name Server: ADRIAN.NS.CLOUDFLARE.COM
   Name Server: KARL.NS.CLOUDFLARE.COM
   DNSSEC: signedDelegation
   DNSSEC DS Data: 2371 13 2 03BC0F45BA9153CF1A79202367642C4541779A01F130F72F7A6546F9AB30D04D
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2026-11-07T20:50:08Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

DNS Records for securityheaders.com

NS Records i

NameDataCopy
securityheaders.com. adrian.ns.cloudflare.com.
securityheaders.com. karl.ns.cloudflare.com.

A Records i

NameDataCopy
securityheaders.com. 104.18.24.239
securityheaders.com. 104.18.25.239

AAAA Records i

NameDataCopy
securityheaders.com. 2606:4700::6812:19ef
securityheaders.com. 2606:4700::6812:18ef

WWW Records (www.securityheaders.com) i

TypeHostValueCopy
A www.securityheaders.com. 104.18.25.239
A www.securityheaders.com. 104.18.24.239

MX Records i

PriorityMail Server TargetCopy
10 alt3.aspmx.l.google.com.
5 alt2.aspmx.l.google.com.
1 aspmx.l.google.com.
5 alt1.aspmx.l.google.com.
10 alt4.aspmx.l.google.com.

TXT Records i

NameValueCopy
securityheaders.com. v=spf1 include:spf.messagingengine.com include:_spf.google.com ~all
securityheaders.com. google-site-verification=w251X-tI6DaKlmxSXZWRCAAlWl1czVeRt1mHvZ24HZw
securityheaders.com. brave-ledger-verification=5b485ba5c292f45f7f9eed9ff6e8d4a57970c4ae4744472900f4f1f4832637a6
securityheaders.com. stripe-verification=6b65f329c2a4ed126677d883d21b637b2c8a52c3e6a64ac48d1b76d943099abc
securityheaders.com. keybase-site-verification=A02HdX9eUIIgkej7_ytW-tyWDQSKJil2mlg2OlawkEA
securityheaders.com. h1-domain-verification=kdXQcEm5T5gzmr38FxWHjNAWnHaDsvLUmoKEfegAJoRGLTXM
securityheaders.com. google-site-verification=UCEy6mriyH9IDqq7R172wW0GafxRDrYE9hgd18OFIHw

Email Security (MX, SPF, DKIM, DMARC, SMTP) for securityheaders.com

Detected Email Provider
📬 Google Workspace
✓ Active MX Routing (5 Servers)

Mail Exchange (MX) Routing Records i

Priority Mail Server Hostname Copy
1 aspmx.l.google.com
5 alt2.aspmx.l.google.com
5 alt1.aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com

SPF Record Validation i

v=spf1 include:spf.messagingengine.com include:_spf.google.com ~all

Record Breakdown

PrefixMechanismValueDescription
+ v spf1 The SPF record version.
+ include spf.messagingengine.com The specified domain is searched for a match.
+ include _spf.google.com The specified domain is searched for a match.
~ all Always matches. This should be the last mechanism.

Validation Summary

SPF Record Published Pass An SPF record was found.
Multiple SPF Records Pass Only one SPF record was found.
Included Lookups Pass The number of DNS lookups (2) is within the limit of 10.
Type PTR Check Pass The deprecated PTR mechanism was not found.
Characters After ALL Pass No mechanisms were found after the "all" mechanism.

Common DKIM Selectors i

Google Workspace (google)

NameDataCopy
google._domainkey.securityheaders.com.v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg2Wucr8bM9HtkpXAaNGXtErYTc2qy6hOspAQjL68F4MOLYbcmoXeKQpL17tc/OXw/LApmSOsxXEB78wPSx3pcTPzIqm3EPl2DyxlFZuIn83yfuOmQMP3g7TA7vxMK4jn4YbyyOO1SLKxqIJ9YyUM5Vm8khPWtRavH8hMEnn8riLh/RKcQLOudmH9lsWRFFDA+IAKypk5Y86K8L7F0H8w0CZuC6IuRU5rMaq/4COGSNeQJDbRqEbGORQFkIe6olW019j4tKzlxFEFjKgh+0/lZSfaGgZ+mTOroNefWzOMZ8biaUM2YVHbz0EnsMnX81ElCMu8vueLdsBp2lDaj1VlQIDAQAB

Twilio SendGrid (Key 1) (s1)

NameDataCopy
s1._domainkey.securityheaders.com.s1.domainkey.u6215048.wl049.sendgrid.net.
s1.domainkey.u6215048.wl049.sendgrid.net.k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu6P7sFPUk55hzTYlt2YeBfimkU2miYT/6ra9mJJt2kmP2JlM9NoHTg9Ftrw4obyL9s4mzfL94udF9B8cgVfDz4obIQYnTsidCZJGRFbO4KWIASut37GZYKSngD+EvG0/3p2h+9wlbneOEMQhcsl3/KosdyQmUlX9Q3I7ugCZc5K0qmd/4/DEG85HR6ZRYcS3nopu8djlTYVzjnlTbTJfHpJ9CDpTICuDXseA7qlBC4R1rmwYD9lX/XM/ZpODrlWxhWXc6UgcGIlcMkyUUDejgsWrP1UmXG7eaNJ49C/VmRjQMfkzENut6+vXSBXHKL3u6mcoUDLezC8/CF/ed6wBwIDAQAB

Twilio SendGrid (Key 2) (s2)

NameDataCopy
s2._domainkey.securityheaders.com.s2.domainkey.u6215048.wl049.sendgrid.net.
s2.domainkey.u6215048.wl049.sendgrid.net.k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDFps6fA+ziUhf/QkvKdtec3v3gpwBJ8aDb1s9KjusFMHZqQHkmN3QvkPSUS/CMCIdEVCgsYUGsi+uQ1iHTvdvBQIediBco6WaqebLGwf9s6GztkzGJao+mU5jpVD+pNEPOZmXY0fEk7Ej+NofCMJO7eB8lk7M2ReOw5UoqtWgA8wIDAQAB

🔍 Query Custom DKIM Selector

Live DNS Lookup

Using a custom or date-based selector (e.g. crm, newsletter, 2024)? Query its public key live on securityheaders.com:

DMARC Policy Validation i

v=DMARC1; p=quarantine; rua=mailto:scotthelme-d@dmarc.report-uri.com; ruf=mailto:scotthelme-d@dmarc.report-uri.com; aspf=r; adkim=r

Tag Breakdown

TagValueDescription
v DMARC1 Version: Must be "DMARC1".
p quarantine Policy: The action to take for failed emails (none, quarantine, reject).
rua mailto:scotthelme-d@dmarc.report-uri.com Aggregate Reports: Email address(es) to send summary reports.
ruf mailto:scotthelme-d@dmarc.report-uri.com Forensic Reports: Email address(es) to send detailed failure reports.
aspf r SPF Alignment: Specifies strict (s) or relaxed (r) alignment for SPF.
adkim r DKIM Alignment: Specifies strict (s) or relaxed (r) alignment for DKIM.

Validation Summary

DMARC Record Published Pass A DMARC record was found.
Syntax Check Pass The record has a valid version tag.
Policy Enforcement Pass The policy is "p=quarantine", which sends failing emails to spam.
Aggregate Reporting Pass An address for aggregate reports was found.

Optimization Suggestions

This is a good step. Continue monitoring reports and consider moving to "p=reject" for the highest level of protection.

SMTP Connectivity Test (Port 25)

Mail ServerStatusLatencyBanner / Handshake Response
aspmx.l.google.com Success 8ms 220 mx.google.com ESMTP a92af1059eb24-1b377406239si848264c88.98 - gsmtp

Server IP Blacklist Check (104.18.24.239)

  • Spamhaus ZEN: Clean
  • SpamCop: Clean
  • Barracuda: Clean
  • GBUdb Truncate: Clean
  • DroneBL: Clean
  • SSL/TLS Certificate Details for securityheaders.com

    • Issuer: WE1
    • Expires In: 63 Days
    • Chain Status: Valid Chain

    🔒 SSL / TLS Protocol Support

    Excellent
    TLS protocol versions
    TLS 1.3 Enabled
    TLS 1.2 Enabled
    TLS 1.1 (deprecated) Disabled
    TLS 1.0 (deprecated) Disabled
    SSL protocol versions
    SSLv3 (deprecated) Disabled
    SSLv2 (deprecated) Disabled

    Main Leaf Certificate

    • Common Name: securityheaders.com
    • SANs: DNS:securityheaders.com, DNS:*.securityheaders.com
    • Organization: N/A
    • Validity: Oct 12, 2026 to Jan 10, 2027
    • Algorithm: ecdsa-with-SHA256
    ↓ Intermediate CA Certificate ↓
    • Common Name: WE1
    • Organization: Google Trust Services
    • Valid Till: Feb 20, 2029
    • Issuer: GTS Root R4
    ↓ Intermediate CA Certificate ↓
    • Common Name: GTS Root R4
    • Organization: Google Trust Services LLC
    • Valid Till: Jan 28, 2028
    • Issuer: GlobalSign Root CA

    Website & Server Intelligence for securityheaders.com

    Website Identity

    TitleFavicon Analyse your HTTP response headers
    Meta DescriptionQuickly and easily assess the security of your HTTP response headers

    Hosting & Server Network

    IP Address104.18.24.239
    HTTP Status200 i
    Hosting ProviderCloudflare, Inc. i
    Web Servercloudflare i
    Control Panel Not Detected i

    Technology Profile

    • Cloudflare
    • PHP
    • jQuery
    • Google Tag Manager

    HTTP Security Headers

    Strict-Transport-Security Present
    Content-Security-Policy Present
    X-Frame-Options Present
    X-Content-Type-Options Present
    Referrer-Policy Present
    Permissions-Policy Present

    IP Details & Geolocation

    IP Address 104.18.24.239
    Reverse DNS (PTR) None Detected (No PTR Record)
    CountryCanada (CA)
    RegionOntario
    CityToronto
    ZIP CodeN/A
    ASN13335
    Organization / ISPCloudflare, Inc.

    Understanding Diagnostic Terms for securityheaders.com

    Domain Status (EPP)

    EPP status codes (e.g., clientTransferProhibited, active) indicating if a domain is locked against unauthorized transfer, pending renewal, or active.

    Registrar Information

    The authorized or accredited organization managing the domain reservation and authoritative registry delegation.

    Nameservers (NS)

    Authoritative servers that translate domain names into IP addresses and direct web visitors and mail traffic globally.

    A & AAAA Records

    Primary address records mapping your domain name directly to standard IPv4 (e.g., 192.0.2.1) and newer IPv6 server network addresses.

    MX (Mail Exchange)

    Priority-ranked records pointing inbound emails to designated mail server hosts (e.g., Google Workspace, Microsoft 365, Zoho).

    SPF & DMARC Security

    Email authentication standards that verify authorized sender IPs (SPF) and instruct receiving servers how to enforce security policies (DMARC).

    DKIM Signatures

    Cryptographic public key in DNS used by receiving mail servers to verify digital signatures on your emails, ensuring messages were not tampered with.

    SSL Certificate & Chain

    Establishes encrypted HTTPS connections and authenticates domain ownership via an intermediate certificate authority chain.

    Hosting Provider & ASN

    The physical server infrastructure where website files reside and the autonomous system network (ASN) routing global traffic.

    Reverse DNS (PTR)

    Pointer (PTR) records that map a server's IP address back to its canonical hostname, verifying server identity and preventing email spam rejection.

    HTTP Security Headers

    Directives like HSTS, CSP, and X-Frame-Options instructed by the server to protect browser visitors against XSS, clickjacking, and packet sniffing.

    ⚠️ Report Limitations & Data Sources

    • Data Currency: This report uses cached registry and DNS data (freshened within 4 hours) for high-speed resolution. Click "🔄 Refresh Live" to query directly against authoritative registries.
    • DNS Resolution & Propagation: Records are queried via Google Public DNS-over-HTTPS. Global DNS propagation may take up to 24–48 hours across different regional ISP resolvers during recent DNS record changes.
    • Completeness & Scope: This diagnostic tool analyzes standard authoritative records (A, AAAA, MX, NS, TXT, CNAME, SOA). It does not perform invasive brute-force subdomain scans or unauthenticated DNS zone transfers.
    • Email Deliverability & Reputation: The security analysis (SPF, DKIM, DMARC, and Port 25 SMTP handshake) reflects public DNS policies and inbound connection states. Recipient spam filters evaluate internal headers that cannot be checked from outside.
    • Reverse Proxies & CDNs: If a website is behind Cloudflare, Fastly, or another CDN/reverse proxy, the detected IP, web server software, and SSL edge certificate reflect the proxy tier.