Domain Intelligence Report for bio.site

⚡ Loaded from cache (2026-10-17 12:13:43 IST). 🔄 Refresh Live

🤖 AI Intelligence Summary

The domain bio.site is registered with MarkMonitor Inc., first registered on 2020-07-20 and expires on 2028-07-20 (domain age: 6 years, 2 months). It resolves to IP address 151.101.194.132, hosted by Fastly, Inc.. Email delivery is handled by Self-hosted or Custom. SPF authentication is published and valid. DMARC policy is published. Web traffic is secured with an SSL certificate issued by YR1.

Domain Overview: bio.site

Domain Registration 🌐

Active 6 years, 2 months

Expires in 1 year, 9 months, 2 days · DNSSEC: Unsigned

Email Security 🛡️

SPF: Pass DKIM: Not Detected DMARC: Reject

Self-hosted or Custom (5 MX)

SSL Certificate 🔒

Valid Chain 48 Days Left

Issuer: YR1 (2 SANs)

Server & Hosting 🖥️

200 N/A

Montreal, Quebec, Canada (CA)

🌐 Domain & Registration Identity View Full Whois Details →

Domain	bio.site
Website Title	N/A
Registered	2020-07-20
Expires	2028-07-20
Remaining Validity	1 year, 9 months, 2 days
Domain Age	6 years, 2 months
Registrar	MarkMonitor Inc.
Domain Status	client update prohibited, client delete prohibited, client transfer prohibited i
DNSSEC Delegation	Unsigned · Zone not signed with DNSSEC keys i
Authoritative Nameservers	`dns1.p02.nsone.net, ns01.squarespacedns.com, dns2.p02.nsone.net, ns02.squarespacedns.com, ns04.squarespacedns.com, dns3.p02.nsone.net, dns4.p02.nsone.net, ns03.squarespacedns.com` i

🛡️ Email Security & Deliverability (SPF, DKIM, DMARC) View Complete Email Security Diagnostics →

Detected Email Provider	📬 Self-hosted or Custom
Primary Mail Server (MX)	`eforward1.registrar-servers.com (Priority: 10)` · 5 MX servers configured i
SPF Record (Sender Policy)	Pass · 1/10 DNS Lookups · Policy: `~all` i `v=spf1 include:spf.efwd.registrar-servers.com ~all`
DKIM Authentication	Not Detected · (No common third-party selector found; custom keys may be configured) i
DMARC Policy	Pass (Reject) i `v=DMARC1; p=reject; pct=100;`
SMTP Port 25 Status	Online (266ms) · Inbound mail server handshake response

🖥️ Web Server, Hosting & Network View Full Server & Tech Details →

Web Server Software	N/A i
HTTP Status Code	200 i
Server IP (IPv4)	151.101.194.132 View Geo Details →
IPv6 Address (AAAA)	`Not Configured`
Reverse DNS (PTR)	`None Detected (No PTR Record)`
Server Location	📍 Montreal, Quebec, Canada (CA)
ASN Network & ISP	`AS54113 (Fastly, Inc.)`
Hosting Provider	Fastly, Inc. i
Control Panel	Not Detected i
Technology Stack	No third-party framework or CMS fingerprints detected
HTTP Security Headers	None Detected (Missing HSTS / CSP) Audit Details →
DNSBL Blacklist Reputation	Clean (0/5 lists)

🔒 SSL/TLS Certificate Summary View Full SSL Certificate & Chain →

Primary Hostname (CN)	bio.site · Multi-Domain SAN (Covers 2 hostnames)
SSL Issuer	YR1
SSL Valid Till	2026-12-05
Remaining Validity	48 Days
Chain Status	Valid Trusted Chain
Signature Algorithm	`RSA-SHA256`

Whois Ownership & Registration for bio.site

📄 View Raw Registry Response ↓

Domain Information i

Domain Name	BIO.SITE
Registration Date	2020-07-20 19:17:52 Z
Expiration Date	2028-07-20 23:59:59 Z
Last Changed Date	2026-06-23 09:20:11 Z

Domain Status i

client update prohibited
client delete prohibited
client transfer prohibited

Registrar Information i

Name	MarkMonitor Inc.
Abuse Email	abusecomplaints@markmonitor.com

Registrant Contact i

Contact information for this role is not provided or redacted.

Administrative Contact i

Contact information for this role is not provided or redacted.

Technical Contact i

Contact information for this role is not provided or redacted.

Nameservers i

dns1.p03.nsone.net
dns2.p03.nsone.net
dns3.p03.nsone.net
dns4.p03.nsone.net
ns01.squarespacedns.com
ns02.squarespacedns.com
ns03.squarespacedns.com
ns04.squarespacedns.com

📄 View Raw Registry Response RDAP (Hybrid)

Domain Name: bio.site
Registry Domain ID: D193926169-CNIC
Registrar WHOIS Server: whois.markmonitor.com
Registrar URL: https://www.markmonitor.com/
Updated Date: 2026-06-23T09:20:11.453Z
Creation Date: 2020-07-20T19:17:52.000Z
Registry Expiry Date: 2028-07-20T23:59:59.000Z
Registrar: MarkMonitor Inc.
Registrar IANA ID: 292
Registrar Abuse Contact Email: abusecomplaints@markmonitor.com
Registrar Abuse Contact Phone: +1.2086851750
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: dns1.p03.nsone.net
Name Server: dns2.p03.nsone.net
Name Server: dns3.p03.nsone.net
Name Server: dns4.p03.nsone.net
Name Server: ns01.squarespacedns.com
Name Server: ns02.squarespacedns.com
Name Server: ns03.squarespacedns.com
Name Server: ns04.squarespacedns.com
DNSSEC: unsigned
URL of the ICANN RDDS Inaccuracy Complaint Form: https://icann.org/wicf

>>> Last update of WHOIS database: 2026-10-17T06:43:40.177Z <<<

For more information on domain status codes, please visit https://icann.org/epp

The WHOIS information provided in this page has been redacted
in compliance with ICANN's Temporary Specification for gTLD
Registration Data.

The data in this record is provided by Tucows Registry for informational
purposes only, and it does not guarantee its accuracy. Tucows Registry is
authoritative for whois information in top-level domains it operates
under contract with the Internet Corporation for Assigned Names and
Numbers. Whois information from other top-level domains is provided by
a third-party under license to Tucows Registry.

This service is intended only for query-based access. By using this
service, you agree that you will use any data presented only for lawful
purposes and that, under no circumstances will you use (a) data
acquired for the purpose of allowing, enabling, or otherwise supporting
the transmission by e-mail, telephone, facsimile or other
communications mechanism of mass  unsolicited, commercial advertising
or solicitations to entities other than your existing  customers; or
(b) this service to enable high volume, automated, electronic processes
that send queries or data to the systems of any Registrar or any
Registry except as reasonably necessary to register domain names or
modify existing domain name registrations.

Tucows Registry reserves the right to modify these terms at any time. By
submitting this query, you agree to abide by this policy. All rights
reserved.

{
    "rdapConformance": [
        "rdap_level_0",
        "icann_rdap_response_profile_1",
        "icann_rdap_technical_implementation_guide_1",
        "redacted"
    ],
    "notices": [
        {
            "title": "Terms of Service",
            "description": [
                "The WHOIS information provided in this page has been redacted",
                "in compliance with ICANN's Temporary Specification for gTLD",
                "Registration Data.",
                "",
                "The data in this record is provided by Tucows Registry for informational",
                "purposes only, and it does not guarantee its accuracy. Tucows Registry is",
                "authoritative for whois information in top-level domains it operates",
                "under contract with the Internet Corporation for Assigned Names and",
                "Numbers. Whois information from other top-level domains is provided by",
                "a third-party under license to Tucows Registry.",
                "",
                "This service is intended only for query-based access. By using this",
                "service, you agree that you will use any data presented only for lawful",
                "purposes and that, under no circumstances will you use (a) data",
                "acquired for the purpose of allowing, enabling, or otherwise supporting",
                "the transmission by e-mail, telephone, facsimile or other",
                "communications mechanism of mass  unsolicited, commercial advertising",
                "or solicitations to entities other than your existing  customers; or",
                "(b) this service to enable high volume, automated, electronic processes",
                "that send queries or data to the systems of any Registrar or any",
                "Registry except as reasonably necessary to register domain names or",
                "modify existing domain name registrations.",
                "",
                "Tucows Registry reserves the right to modify these terms at any time. By",
                "submitting this query, you agree to abide by this policy. All rights",
                "reserved."
            ],
            "links": [
                {
                    "value": "https://rdap.radix.host/rdap/domain/bio.site",
                    "rel": "terms-of-service",
                    "href": "https://rdap.radix.host/",
                    "type": "text/html"
                }
            ]
        },
        {
            "title": "Status Codes",
            "description": [
                "For more information on domain status codes, please visit https://icann.org/epp"
            ],
            "links": [
                {
                    "value": "https://rdap.radix.host/rdap/domain/bio.site",
                    "rel": "glossary",
                    "href": "https://icann.org/epp",
                    "type": "text/html"
                }
            ]
        },
        {
            "title": "RDDS Inaccuracy Complaint Form",
            "description": [
                "URL of the ICANN RDDS Inaccuracy Complaint Form: https://icann.org/wicf"
            ],
            "links": [
                {
                    "value": "https://rdap.radix.host/rdap/domain/bio.site",
                    "rel": "help",
                    "href": "https://icann.org/wicf",
                    "type": "text/html"
                }
            ]
        }
    ],
    "redacted": [
        {
            "name": {
                "type": "Registrant Contact"
            },
            "prePath": "$.entities[?(@.roles[0]=='registrant')]",
            "pathLang": "jsonpath",
            "method": "removal"
        }
    ],
    "objectClassName": "domain",
    "handle": "D193926169-CNIC",
    "ldhName": "bio.site",
    "unicodeName": "bio.site",
    "nameservers": [
        {
            "objectClassName": "nameserver",
            "handle": "H3460868-CNIC",
            "ldhName": "dns1.p03.nsone.net",
            "unicodeName": "dns1.p03.nsone.net",
            "status": [
                "associated"
            ],
            "events": [
                {
                    "eventAction": "last update of RDAP database",
                    "eventDate": "2026-10-17T06:43:39.100Z"
                }
            ]
        },
        {
            "objectClassName": "nameserver",
            "handle": "H3460877-CNIC",
            "ldhName": "dns2.p03.nsone.net",
            "unicodeName": "dns2.p03.nsone.net",
            "status": [
                "associated"
            ],
            "events": [
                {
                    "eventAction": "last update of RDAP database",
                    "eventDate": "2026-10-17T06:43:39.100Z"
                }
            ]
        },
        {
            "objectClassName": "nameserver",
            "handle": "H3460874-CNIC",
            "ldhName": "dns3.p03.nsone.net",
            "unicodeName": "dns3.p03.nsone.net",
            "status": [
                "associated"
            ],
            "events": [
                {
                    "eventAction": "last update of RDAP database",
                    "eventDate": "2026-10-17T06:43:39.100Z"
                }
            ]
        },
        {
            "objectClassName": "nameserver",
            "handle": "H3460871-CNIC",
            "ldhName": "dns4.p03.nsone.net",
            "unicodeName": "dns4.p03.nsone.net",
            "status": [
                "associated"
            ],
            "events": [
                {
                    "eventAction": "last update of RDAP database",
                    "eventDate": "2026-10-17T06:43:39.100Z"
                }
            ]
        },
        {
            "objectClassName": "nameserver",
            "handle": "H16796739-CNIC",
            "ldhName": "ns01.squarespacedns.com",
            "unicodeName": "ns01.squarespacedns.com",
            "status": [
                "associated"
            ],
            "events": [
                {
                    "eventAction": "last update of RDAP database",
                    "eventDate": "2026-10-17T06:43:39.100Z"
                }
            ]
        },
        {
            "objectClassName": "nameserver",
            "handle": "H16796744-CNIC",
            "ldhName": "ns02.squarespacedns.com",
            "unicodeName": "ns02.squarespacedns.com",
            "status": [
                "associated"
            ],
            "events": [
                {
                    "eventAction": "last update of RDAP database",
                    "eventDate": "2026-10-17T06:43:39.100Z"
                }
            ]
        },
        {
            "objectClassName": "nameserver",
            "handle": "H16797259-CNIC",
            "ldhName": "ns03.squarespacedns.com",
            "unicodeName": "ns03.squarespacedns.com",
            "status": [
                "associated"
            ],
            "events": [
                {
                    "eventAction": "last update of RDAP database",
                    "eventDate": "2026-10-17T06:43:39.100Z"
                }
            ]
        },
        {
            "objectClassName": "nameserver",
            "handle": "H16797264-CNIC",
            "ldhName": "ns04.squarespacedns.com",
            "unicodeName": "ns04.squarespacedns.com",
            "status": [
                "associated"
            ],
            "events": [
                {
                    "eventAction": "last update of RDAP database",
                    "eventDate": "2026-10-17T06:43:39.100Z"
                }
            ]
        }
    ],
    "secureDNS": {
        "delegationSigned": false
    },
    "entities": [
        {
            "objectClassName": "entity",
            "handle": "292",
            "vcardArray": [
                "vcard",
                [
                    [
                        "version",
                        [],
                        "text",
                        "4.0"
                    ],
                    [
                        "fn",
                        [],
                        "text",
                        "MarkMonitor Inc."
                    ],
                    [
                        "adr",
                        {
                            "cc": "US"
                        },
                        "text",
                        [
                            "",
                            "",
                            "1120 S. Rackham Way Suite 300 ",
                            "Meridian",
                            "Idaho",
                            "83642",
                            ""
                        ]
                    ],
                    [
                        "tel",
                        {
                            "type": "voice"
                        },
                        "uri",
                        "tel:+1.2086851750"
                    ],
                    [
                        "tel",
                        {
                            "type": "fax"
                        },
                        "uri",
                        "tel:+1.2083895771"
                    ],
                    [
                        "email",
                        [],
                        "text",
                        "registry.admin@markmonitor.com"
                    ]
                ]
            ],
            "roles": [
                "registrar"
            ],
            "publicIds": [
                {
                    "type": "IANA Registrar ID",
                    "identifier": "292"
                }
            ],
            "entities": [
                {
                    "objectClassName": "entity",
                    "handle": "CO_f71a2d1439e0b6e79d11fb2ea9234e3c-RADIX",
                    "vcardArray": [
                        "vcard",
                        [
                            [
                                "version",
                                [],
                                "text",
                                "4.0"
                            ],
                            [
                                "fn",
                                [],
                                "text",
                                "Markmonitor Abuse"
                            ],
                            [
                                "org",
                                [],
                                "text",
                                "MarkMonitor Inc."
                            ],
                            [
                                "adr",
                                {
                                    "cc": "US"
                                },
                                "text",
                                [
                                    "",
                                    "",
                                    [
                                        "1120 S. Rackham Way",
                                        "Suite 300",
                                        ""
                                    ],
                                    "Meridian",
                                    "Idaho",
                                    "83642",
                                    ""
                                ]
                            ],
                            [
                                "tel",
                                {
                                    "type": "voice"
                                },
                                "uri",
                                "tel:+1.2086851750"
                            ],
                            [
                                "email",
                                [],
                                "text",
                                "abusecomplaints@markmonitor.com"
                            ]
                        ]
                    ],
                    "roles": [
                        "abuse"
                    ],
                    "events": [
                        {
                            "eventAction": "last update of RDAP database",
                            "eventDate": "2026-10-17T06:43:39.100Z"
                        }
                    ]
                }
            ],
            "links": [
                {
                    "value": "https://rdap.markmonitor.com/rdap/",
                    "rel": "about",
                    "href": "https://rdap.radix.host/rdap/entity/292",
                    "type": "application/rdap+json"
                }
            ],
            "events": [
                {
                    "eventAction": "last update of RDAP database",
                    "eventDate": "2026-10-17T06:43:39.100Z"
                }
            ]
        }
    ],
    "status": [
        "client update prohibited",
        "client delete prohibited",
        "client transfer prohibited"
    ],
    "links": [
        {
            "value": "https://rdap.radix.host/rdap/domain/bio.site",
            "rel": "related",
            "href": "https://rdap.markmonitor.com/rdap/domain/bio.site",
            "type": "application/rdap+json"
        },
        {
            "value": "https://rdap.radix.host/rdap/domain/bio.site",
            "rel": "self",
            "href": "https://rdap.radix.host/rdap/domain/bio.site",
            "type": "application/rdap+json"
        }
    ],
    "events": [
        {
            "eventAction": "registration",
            "eventActor": "namecheap",
            "eventDate": "2020-07-20T19:17:52.000Z"
        },
        {
            "eventAction": "expiration",
            "eventDate": "2028-07-20T23:59:59.000Z"
        },
        {
            "eventAction": "last changed",
            "eventDate": "2026-06-23T09:20:11.453Z"
        },
        {
            "eventAction": "last update of RDAP database",
            "eventDate": "2026-10-17T06:43:39.100Z"
        }
    ]
}

DNS Records for bio.site

NS Records i

Name	Data	Copy
bio.site.	`dns1.p02.nsone.net.`
bio.site.	`ns01.squarespacedns.com.`
bio.site.	`dns2.p02.nsone.net.`
bio.site.	`ns02.squarespacedns.com.`
bio.site.	`ns04.squarespacedns.com.`
bio.site.	`dns3.p02.nsone.net.`
bio.site.	`dns4.p02.nsone.net.`
bio.site.	`ns03.squarespacedns.com.`

A Records i

Name	Data	Copy
bio.site.	`151.101.194.132`
bio.site.	`151.101.66.132`
bio.site.	`151.101.2.132`
bio.site.	`151.101.130.132`

AAAA Records i

No AAAA records found.

WWW Records (www.bio.site) i

Type	Host	Value
CNAME	www.bio.site.	`j.sni.global.fastly.net.`
A	www.bio.site.	`j.sni.global.fastly.net.`
A	j.sni.global.fastly.net.	`151.101.66.132`
A	j.sni.global.fastly.net.	`151.101.130.132`
A	j.sni.global.fastly.net.	`151.101.2.132`
A	j.sni.global.fastly.net.	`151.101.194.132`

MX Records i

Priority	Mail Server Target	Copy
15	`eforward4.registrar-servers.com.`
10	`eforward1.registrar-servers.com.`
10	`eforward3.registrar-servers.com.`
10	`eforward2.registrar-servers.com.`
20	`eforward5.registrar-servers.com.`

TXT Records i

Name	Value	Copy
bio.site.	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
bio.site.	`google-site-verification=y-fN-brSF4T5hh4x600-U0BMABQy1Ad5iKY8t2Qg-84`

Email Security (MX, SPF, DKIM, DMARC, SMTP) for bio.site

Detected Email Provider

📬 Self-hosted or Custom

✓ Active MX Routing (5 Servers)

Mail Exchange (MX) Routing Records i

Priority	Mail Server Hostname	Copy
10	`eforward1.registrar-servers.com`
10	`eforward3.registrar-servers.com`
10	`eforward2.registrar-servers.com`
15	`eforward4.registrar-servers.com`
20	`eforward5.registrar-servers.com`

SPF Record Validation i

v=spf1 include:spf.efwd.registrar-servers.com ~all

Record Breakdown

Prefix	Mechanism	Value	Description
+	`v`	spf1	The SPF record version.
+	`include`	spf.efwd.registrar-servers.com	The specified domain is searched for a match.
~	`all`		Always matches. This should be the last mechanism.

Validation Summary

SPF Record Published	Pass An SPF record was found.
Multiple SPF Records	Pass Only one SPF record was found.
Included Lookups	Pass The number of DNS lookups (1) is within the limit of 10.
Type PTR Check	Pass The deprecated PTR mechanism was not found.
Characters After ALL	Pass No mechanisms were found after the "all" mechanism.

Common DKIM Selectors i

No common third-party DKIM selectors found. Custom selectors may be configured.

🔍 Query Custom DKIM Selector

Live DNS Lookup

Using a custom or date-based selector (e.g. crm, newsletter, 2024)? Query its public key live on bio.site:

DMARC Policy Validation i

v=DMARC1; p=reject; pct=100;

Tag Breakdown

Tag	Value	Description
`v`	DMARC1	Version: Must be "DMARC1".
`p`	reject	Policy: The action to take for failed emails (none, quarantine, reject).
`pct`	100	Percentage: The percentage of emails to apply the policy to.

Validation Summary

DMARC Record Published	Pass A DMARC record was found.
Syntax Check	Pass The record has a valid version tag.
Policy Enforcement	Pass The policy is "p=reject", which provides the strongest protection against spoofing.
Aggregate Reporting	Warning No "rua" tag was found. You will not receive summary reports.

Optimization Suggestions

It is highly recommended to add an "rua" tag (e.g., "rua=mailto:dmarc-reports@yourdomain.com") to monitor email traffic and ensure legitimate emails are not failing checks.

SMTP Connectivity Test (Port 25)

Mail Server	Status	Latency	Banner / Handshake Response
eforward1.registrar-servers.com	Success	266ms	`220-asp-relay.et.namecheap.tech ESMTP Postfix`

Server IP Blacklist Check (151.101.194.132)

Spamhaus ZEN: Clean

SpamCop: Clean

Barracuda: Clean

GBUdb Truncate: Clean

DroneBL: Clean

SSL/TLS Certificate Details for bio.site

Issuer: YR1
Expires In: 48 Days
Chain Status: Valid Chain

🔒 SSL / TLS Protocol Support

Excellent

TLS protocol versions

TLS 1.3	Enabled
TLS 1.2	Enabled
TLS 1.1 (deprecated)	Disabled
TLS 1.0 (deprecated)	Disabled

SSL protocol versions

SSLv3 (deprecated)	Disabled
SSLv2 (deprecated)	Disabled

Main Leaf Certificate

Common Name: bio.site
SANs: DNS:*.bio.site, DNS:bio.site
Organization: N/A
Validity: Sep 06, 2026 to Dec 05, 2026
Algorithm: RSA-SHA256

↓ Intermediate CA Certificate ↓

Common Name: YR1
Organization: Let's Encrypt
Valid Till: Sep 03, 2028
Issuer: Root YR

↓ Intermediate CA Certificate ↓

Common Name: Root YR
Organization: ISRG
Valid Till: Sep 03, 2032
Issuer: ISRG Root X1

Website & Server Intelligence for bio.site

Website Identity

Title	N/A
Meta Description	Create a free link in bio with Bio Sites by Squarespace. Showcase your links, earn money, and grow your brand online, all with one link

Hosting & Server Network

IP Address	151.101.194.132
HTTP Status	200 i
Hosting Provider	Fastly, Inc. i
Web Server	N/A i
Control Panel	Not Detected i

Technology Profile

No specific third-party frameworks or CMS fingerprints detected.

HTTP Security Headers

Strict-Transport-Security	Missing
Content-Security-Policy	Missing
X-Frame-Options	Missing
X-Content-Type-Options	Missing
Referrer-Policy	Missing
Permissions-Policy	Missing

IP Details & Geolocation

IP Address	151.101.194.132
Reverse DNS (PTR)	`None Detected (No PTR Record)`
Country	Canada (CA)
Region	Quebec
City	Montreal
ZIP Code	N/A
ASN	54113
Organization / ISP	Fastly, Inc.

Understanding Diagnostic Terms for bio.site

Domain Status (EPP)

EPP status codes (e.g., clientTransferProhibited, active) indicating if a domain is locked against unauthorized transfer, pending renewal, or active.

Registrar Information

The authorized or accredited organization managing the domain reservation and authoritative registry delegation.

Nameservers (NS)

Authoritative servers that translate domain names into IP addresses and direct web visitors and mail traffic globally.

A & AAAA Records

Primary address records mapping your domain name directly to standard IPv4 (e.g., 192.0.2.1) and newer IPv6 server network addresses.

MX (Mail Exchange)

Priority-ranked records pointing inbound emails to designated mail server hosts (e.g., Google Workspace, Microsoft 365, Zoho).

SPF & DMARC Security

Email authentication standards that verify authorized sender IPs (SPF) and instruct receiving servers how to enforce security policies (DMARC).

DKIM Signatures

Cryptographic public key in DNS used by receiving mail servers to verify digital signatures on your emails, ensuring messages were not tampered with.

SSL Certificate & Chain

Establishes encrypted HTTPS connections and authenticates domain ownership via an intermediate certificate authority chain.

Hosting Provider & ASN

The physical server infrastructure where website files reside and the autonomous system network (ASN) routing global traffic.

Reverse DNS (PTR)

Pointer (PTR) records that map a server's IP address back to its canonical hostname, verifying server identity and preventing email spam rejection.

HTTP Security Headers

Directives like HSTS, CSP, and X-Frame-Options instructed by the server to protect browser visitors against XSS, clickjacking, and packet sniffing.

⚠️ Report Limitations & Data Sources

Data Currency: This report uses cached registry and DNS data (freshened within 4 hours) for high-speed resolution. Click "🔄 Refresh Live" to query directly against authoritative registries.
DNS Resolution & Propagation: Records are queried via Google Public DNS-over-HTTPS. Global DNS propagation may take up to 24–48 hours across different regional ISP resolvers during recent DNS record changes.
Completeness & Scope: This diagnostic tool analyzes standard authoritative records (A, AAAA, MX, NS, TXT, CNAME, SOA). It does not perform invasive brute-force subdomain scans or unauthenticated DNS zone transfers.
Email Deliverability & Reputation: The security analysis (SPF, DKIM, DMARC, and Port 25 SMTP handshake) reflects public DNS policies and inbound connection states. Recipient spam filters evaluate internal headers that cannot be checked from outside.
Reverse Proxies & CDNs: If a website is behind Cloudflare, Fastly, or another CDN/reverse proxy, the detected IP, web server software, and SSL edge certificate reflect the proxy tier.