Initializing diagnostics...

โšก Live Data: Report generated fresh from authoritative registries. ๐Ÿ”„ Force Refresh
๐Ÿค– AI Intelligence Summary

The domain crescent.education is registered with PDR Ltd. d/b/a PublicDomainRegistry.com, first registered on 2017-12-26 and expires on 2030-12-26 (domain age: 8 years, 10 months). It resolves to IP address 74.225.156.91, hosted by Microsoft Corporation. Email delivery is handled by Google Workspace. SPF authentication is published and valid. DMARC policy is published. Web traffic is secured with an SSL certificate issued by Sectigo Public Server Authentication CA DV R36.

Domain Overview: crescent.education

Domain Registration ๐ŸŒ
Active 8 years, 10 months

Expires in 4 years, 1 month, 26 days ยท DNSSEC: Unsigned

Email Security ๐Ÿ›ก๏ธ
SPF: Pass DKIM: Detected DMARC: None

Google Workspace (6 MX)

SSL Certificate ๐Ÿ”’
Untrusted 37 Days Left

Issuer: Sectigo Public Server Authentication CA DV R36 (2 SANs)

Server & Hosting ๐Ÿ–ฅ๏ธ
N/A N/A

Pune, Maharashtra, India (IN)

๐ŸŒ Domain & Registration Identity View Full Whois Details โ†’

Domaincrescent.education
Website TitleFavicon N/A
Registered2017-12-26
Expires2030-12-26
Remaining Validity4 years, 1 month, 26 days
Domain Age8 years, 10 months
RegistrarPDR Ltd. d/b/a PublicDomainRegistry.com
Domain Statusclient transfer prohibited i
DNSSEC Delegation Unsigned ยท Zone not signed with DNSSEC keys i
Authoritative Nameservers art.ns.cloudflare.com, aliza.ns.cloudflare.com i

๐Ÿ›ก๏ธ Email Security & Deliverability (SPF, DKIM, DMARC) View Complete Email Security Diagnostics โ†’

Detected Email Provider ๐Ÿ“ฌ Google Workspace
Primary Mail Server (MX) aspmx.l.google.com (Priority: 0) ยท 6 MX servers configured i
SPF Record (Sender Policy) Pass ยท 4/10 DNS Lookups ยท Policy: -all i
v=spf1 +a +mx ip4:180.150.156.26 ip4:180.150.156.27 ip4:180.150.140.186 ip4:212.100.237.176 ip4:212.100.237.177 ip4:212.100.237.178 ip4:212.100.237.179 include:_spf.google.com include:amazonses.com -all
DKIM Authentication Detected ยท Discovered: Twilio SendGrid (Key 1) (s1), Twilio SendGrid (Key 2) (s2) i
DMARC Policy Warning (Monitoring None) ยท Reports: mailto:dmarc@crescent.education i
v=DMARC1; p=none; rua=mailto:dmarc@crescent.education
SMTP Port 25 Status Online (8ms) ยท Inbound mail server handshake response

๐Ÿ–ฅ๏ธ Web Server, Hosting & Network View Full Server & Tech Details โ†’

Web Server Software N/A i
HTTP Status Code N/A i
Server IP (IPv4) 74.225.156.91 View Geo Details โ†’
IPv6 Address (AAAA) Not Configured
Reverse DNS (PTR) None Detected (No PTR Record)
Server Location ๐Ÿ“ Pune, Maharashtra, India (IN)
ASN Network & ISP AS8075 (Microsoft Corporation)
Hosting Provider Microsoft Corporation i
Control Panel Not Detected i
Technology Stack No third-party framework or CMS fingerprints detected
HTTP Security Headers None Detected (Missing HSTS / CSP) Audit Details โ†’
DNSBL Blacklist Reputation Clean (0/5 lists)

๐Ÿ”’ SSL/TLS Certificate Summary View Full SSL Certificate & Chain โ†’

Primary Hostname (CN) crescent.education ยท Multi-Domain SAN (Covers 2 hostnames)
SSL IssuerSectigo Public Server Authentication CA DV R36
SSL Valid Till2026-12-05
Remaining Validity37 Days
Chain Status Invalid / Untrusted
Signature AlgorithmRSA-SHA256

Whois Ownership & Registration for crescent.education

๐Ÿ“„ View Raw Registry Response โ†“

Domain Information i

Domain NameCRESCENT.EDUCATION
Expiration Date2030-12-26 07:39:38 Z
Registration Date2017-12-26 07:39:38 Z
Last Changed Date2026-08-12 08:20:09 Z

Domain Status i

  • client transfer prohibited

Registrar Information i

NamePDR Ltd. d/b/a PublicDomainRegistry.com
Abuse Emailabuse@publicdomainregistry.com

Registrant Contact i

Contact information for this role is not provided by the registry.

Administrative Contact i

Contact information for this role is not provided by the registry.

Technical Contact i

Contact information for this role is not provided by the registry.

Nameservers i

  • art.ns.cloudflare.com
  • aliza.ns.cloudflare.com
๐Ÿ“„ View Raw Registry Response RDAP (Hybrid)
{
    "rdapConformance": [
        "rdap_level_0",
        "icann_rdap_response_profile_1",
        "icann_rdap_technical_implementation_guide_1",
        "redacted"
    ],
    "notices": [
        {
            "title": "Terms of Service",
            "description": [
                "Access to RDAP information is provided to assist persons in determining the contents of a domain name registration record in the registry database. The data in this record is provided by Identity Digital or, if the record pertains to a TLD not operated by Identity Digital, then the corresponding primary Registry Operator for informational purposes only, and neither Identity Digital nor the Registry Operator guarantee its accuracy. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to (a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Identity Digital, a Registrar, or Registry Operator except as reasonably necessary to register domain names or modify existing registrations. When using the RDAP service, please consider the following: the RDAP service is not a replacement for standard EPP commands to the SRS service. RDAP is not considered authoritative for registered domain objects. The RDAP service may be scheduled for downtime during production or OT&E maintenance periods. Queries to the RDAP services are throttled. If too many queries are received from a single IP address within a specified time, the service will begin to reject further queries for a period of time to prevent disruption of RDAP service access. Abuse of the RDAP system through data mining is mitigated by detecting and limiting bulk query access from single sources. Where applicable, the presence of a [Non-Public Data] tag indicates that such data is not made publicly available due to applicable data privacy laws or requirements. Should you wish to contact the registrant, please refer to the RDAP records available through the registrar URL listed above. Access to non-public data may be provided, upon request, where it can be reasonably confirmed that the requester holds a specific legitimate interest and a proper legal basis for accessing the withheld data. Access to the data provided by Identity Digital can be requested by submitting a request via the form found at https://www.identity.digital/about/policies/whois-layered-access/ Identity Digital Inc. and, if applicable, the primary Registry Operators reserve the right to modify these terms at any time. By submitting this query, you agree to abide by this policy."
            ],
            "links": [
                {
                    "value": "https://rdap.identitydigital.services/rdap/domain/crescent.education",
                    "rel": "terms-of-service",
                    "href": "https://www.identity.digital/policies/rdds-access-policy",
                    "type": "text/html"
                }
            ]
        },
        {
            "title": "Status Codes",
            "description": [
                "For more information on domain status codes, please visit https://icann.org/epp"
            ],
            "links": [
                {
                    "value": "https://rdap.identitydigital.services/rdap/domain/crescent.education",
                    "rel": "glossary",
                    "href": "https://icann.org/epp",
                    "type": "application/rdap+json"
                }
            ]
        },
        {
            "title": "RDDS Inaccuracy Complaint Form",
            "description": [
                "URL of the ICANN RDDS Inaccuracy Complaint Form: https://icann.org/wicf"
            ],
            "links": [
                {
                    "value": "https://rdap.identitydigital.services/rdap/domain/crescent.education",
                    "rel": "help",
                    "href": "https://icann.org/wicf",
                    "type": "application/rdap+json"
                }
            ]
        }
    ],
    "ldhName": "crescent.education",
    "unicodeName": "crescent.education",
    "nameservers": [
        {
            "ldhName": "art.ns.cloudflare.com",
            "unicodeName": "art.ns.cloudflare.com",
            "objectClassName": "nameserver",
            "handle": "2dab22d43d7a4833947468a20e1d888c-DONUTS",
            "status": [
                "associated"
            ]
        },
        {
            "ldhName": "aliza.ns.cloudflare.com",
            "unicodeName": "aliza.ns.cloudflare.com",
            "objectClassName": "nameserver",
            "handle": "adf2825008a84f4d9363458cf127c8cf-DONUTS",
            "status": [
                "associated"
            ]
        }
    ],
    "secureDNS": {
        "delegationSigned": false,
        "maxSigLife": 1
    },
    "redacted": [
        {
            "name": {
                "type": "Registry Domain ID"
            },
            "prePath": "$.handle",
            "pathLang": "jsonpath",
            "method": "removal"
        }
    ],
    "objectClassName": "domain",
    "status": [
        "client transfer prohibited"
    ],
    "events": [
        {
            "eventAction": "expiration",
            "eventDate": "2030-12-26T07:39:38.983Z"
        },
        {
            "eventAction": "registration",
            "eventDate": "2017-12-26T07:39:38.983Z"
        },
        {
            "eventAction": "last changed",
            "eventDate": "2026-08-12T08:20:09.62Z"
        },
        {
            "eventAction": "last update of RDAP database",
            "eventDate": "2026-10-28T21:28:11.764Z"
        }
    ],
    "entities": [
        {
            "vcardArray": [
                "vcard",
                [
                    [
                        "version",
                        [],
                        "text",
                        "4.0"
                    ],
                    [
                        "fn",
                        [],
                        "text",
                        "PDR Ltd. d/b/a PublicDomainRegistry.com"
                    ]
                ]
            ],
            "roles": [
                "registrar"
            ],
            "publicIds": [
                {
                    "type": "IANA Registrar ID",
                    "identifier": "303"
                }
            ],
            "objectClassName": "entity",
            "handle": "303",
            "entities": [
                {
                    "vcardArray": [
                        "vcard",
                        [
                            [
                                "version",
                                [],
                                "text",
                                "4.0"
                            ],
                            [
                                "fn",
                                [],
                                "text",
                                ""
                            ],
                            [
                                "tel",
                                {
                                    "type": "voice"
                                },
                                "uri",
                                "tel:+91.2230797500"
                            ],
                            [
                                "email",
                                [],
                                "text",
                                "abuse@publicdomainregistry.com"
                            ]
                        ]
                    ],
                    "roles": [
                        "abuse"
                    ],
                    "objectClassName": "entity"
                }
            ],
            "links": [
                {
                    "value": "https://rdap.identitydigital.services/rdap/entity/303",
                    "rel": "self",
                    "href": "https://rdap.identitydigital.services/rdap/entity/303",
                    "type": "application/rdap+json"
                },
                {
                    "value": "https://rdapserver.net/",
                    "rel": "about",
                    "href": "https://rdapserver.net/",
                    "type": "application/rdap+json"
                }
            ]
        }
    ],
    "links": [
        {
            "value": "https://rdap.identitydigital.services/rdap/domain/crescent.education",
            "rel": "related",
            "href": "https://rdapserver.net/domain/crescent.education",
            "type": "application/rdap+json"
        },
        {
            "value": "https://rdap.identitydigital.services/rdap/domain/crescent.education",
            "rel": "self",
            "href": "https://rdap.identitydigital.services/rdap/domain/crescent.education",
            "type": "application/rdap+json"
        }
    ]
}

DNS Records for crescent.education

NS Records i

NameDataCopy
crescent.education. art.ns.cloudflare.com.
crescent.education. aliza.ns.cloudflare.com.

A Records i

NameDataCopy
crescent.education. 74.225.156.91

AAAA Records i

No AAAA records found.

WWW Records (www.crescent.education) i

TypeHostValueCopy
CNAME www.crescent.education. crescent.education.
A www.crescent.education. crescent.education.
A crescent.education. 74.225.156.91

MX Records i

PriorityMail Server TargetCopy
10 alt3.aspmx.l.google.com.
0 aspmx.l.google.com.
10 alt4.aspmx.l.google.com.
5 alt1.aspmx.l.google.com.
10 feedback-smtp.us-east-1.amazonses.com.
5 alt2.aspmx.l.google.com.

TXT Records i

NameValueCopy
crescent.education. google-site-verification=-tWE1efVSkWXSodFrAOH7KL6B6aL-p43_WRqbJOb8F4
crescent.education. google-site-verification=fnDLe8n3SLvBx8NZNEV2S-xr2teuNAJfN1PdNzcSMKQ
crescent.education. MS=B8889E66C8DFCEC05FFBCF6E8EBDA646B8F569F4
crescent.education. facebook-domain-verification=6rm8p4zbbmf7vgesa3jn3qze7neoc8
crescent.education. v=spf1 +a +mx ip4:180.150.156.26 ip4:180.150.156.27 ip4:180.150.140.186 ip4:212.100.237.176 ip4:212.100.237.177 ip4:212.100.237.178 ip4:212.100.237.179 include:_spf.google.com include:amazonses.com -all
crescent.education. adobe-idp-site-verification=26b73c6d3b840b31092d3330c3c2d4a3b3830d0d195f1b1bbceb8bd174eda6e5
crescent.education. amazonses:+NPySYS+TrzmRcTidbwGEtVdfHTEUbUwYQFwcpO56/I=

Email Security (MX, SPF, DKIM, DMARC, SMTP) for crescent.education

Detected Email Provider
๐Ÿ“ฌ Google Workspace
โœ“ Active MX Routing (6 Servers)

Mail Exchange (MX) Routing Records i

Priority Mail Server Hostname Copy
0 aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
10 feedback-smtp.us-east-1.amazonses.com

SPF Record Validation i

v=spf1 +a +mx ip4:180.150.156.26 ip4:180.150.156.27 ip4:180.150.140.186 ip4:212.100.237.176 ip4:212.100.237.177 ip4:212.100.237.178 ip4:212.100.237.179 include:_spf.google.com include:amazonses.com -all

Record Breakdown

PrefixMechanismValueDescription
+ v spf1 The SPF record version.
+ a Match if the sender's IP is one of the domain's A records.
+ mx Match if the sender's IP is one of the domain's MX records.
+ ip4 180.150.156.26 Match if the IP is in the given IPv4 range.
+ ip4 180.150.156.27 Match if the IP is in the given IPv4 range.
+ ip4 180.150.140.186 Match if the IP is in the given IPv4 range.
+ ip4 212.100.237.176 Match if the IP is in the given IPv4 range.
+ ip4 212.100.237.177 Match if the IP is in the given IPv4 range.
+ ip4 212.100.237.178 Match if the IP is in the given IPv4 range.
+ ip4 212.100.237.179 Match if the IP is in the given IPv4 range.
+ include _spf.google.com The specified domain is searched for a match.
+ include amazonses.com The specified domain is searched for a match.
- all Always matches. This should be the last mechanism.

Validation Summary

SPF Record Published Pass An SPF record was found.
Multiple SPF Records Pass Only one SPF record was found.
Included Lookups Pass The number of DNS lookups (4) is within the limit of 10.
Type PTR Check Pass The deprecated PTR mechanism was not found.
Characters After ALL Pass No mechanisms were found after the "all" mechanism.

Common DKIM Selectors i

Twilio SendGrid (Key 1) (s1)

NameDataCopy
s1._domainkey.crescent.education.s1.domainkey.u44106214.wl215.sendgrid.net.
s1.domainkey.u44106214.wl215.sendgrid.net.k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy1m1XS/1WuuHIs+Zlksab3mfWl8X5Wdu9nGiErBS2qBiY+/B3VuJz3IBoFS8OQCsqfUP1ZbrP86rXkV4HLoYyLm97JjXyyLGQkxvjZnfJA6DTRSpv3bviLnCvhxZhnxFuxQh/IN120Ylo20UyMY8ZyDLUlXUzoR30RRoME+2O0o0Q81gW8A/IsuO9RFpzTOB+meRs5tWD8hxEeVruzNcBSd7DzZLuAOEvv7EeCaLWwsGQ8yxL2UVrMrpOhTKUl8bCG6kyPqNqfmggXBJ9zOCGjaYUa2Kwhp6hmDs3P6y2ribC+6x/fGRj8MEbN50quZT4nnDk+eZSsu6J6sjSHZDQIDAQAB

Twilio SendGrid (Key 2) (s2)

NameDataCopy
s2._domainkey.crescent.education.s2.domainkey.u44106214.wl215.sendgrid.net.
s2.domainkey.u44106214.wl215.sendgrid.net.k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqno+nyJaFRnMccE626fu9ulOvlpnRXw2Y0jiQg+OHsCg1LYGXxSoxtjXa3Yp2Cjsm0Y3XmaOUHL32pmzAF1/m1nqTzwRvnjXxgofRQPYE/h8/1RhkaexieXdGnKLKJGBtFy1qcKNRp1UFtNQjbP2WniUl2ALQ1cIcXvFRVBuZHV5S9pxHMO7zkOkHUVgY8RYjkh9xEzQ1UNqroqNih7a6hRknAfNsCTuv6PyFqySExiys9IZl7Xu1FignhEqsrce385NrtPeBQN4eVjBxGyJKxjWXnmPdVF53CeFPHAhI5u6j4Ue433+45eNUEKcr7oK+XymWjiSRdN4+OYPS3xBXwIDAQAB

๐Ÿ” Query Custom DKIM Selector

Live DNS Lookup

Using a custom or date-based selector (e.g. crm, newsletter, 2024)? Query its public key live on crescent.education:

DMARC Policy Validation i

v=DMARC1; p=none; rua=mailto:dmarc@crescent.education

Tag Breakdown

TagValueDescription
v DMARC1 Version: Must be "DMARC1".
p none Policy: The action to take for failed emails (none, quarantine, reject).
rua mailto:dmarc@crescent.education Aggregate Reports: Email address(es) to send summary reports.

Validation Summary

DMARC Record Published Pass A DMARC record was found.
Syntax Check Pass The record has a valid version tag.
Policy Enforcement Warning The policy is "p=none", which is for monitoring only and does not protect against spoofing.
Aggregate Reporting Pass An address for aggregate reports was found.

Optimization Suggestions

After monitoring your aggregate reports to ensure legitimate email sources are aligned, you should move to a "p=quarantine" or "p=reject" policy to protect your domain.

SMTP Connectivity Test (Port 25)

Mail ServerStatusLatencyBanner / Handshake Response
aspmx.l.google.com Success 8ms 220 mx.google.com ESMTP 5a478bee46e88-36a23919bbesi9407232eec.22 - gsmtp

Server IP Blacklist Check (74.225.156.91)

  • Spamhaus ZEN: Clean
  • SpamCop: Clean
  • Barracuda: Clean
  • GBUdb Truncate: Clean
  • DroneBL: Clean
  • SSL/TLS Certificate Details for crescent.education

    • Issuer: Sectigo Public Server Authentication CA DV R36
    • Expires In: 37 Days
    • Chain Status: Invalid Chain

    ๐Ÿ”’ SSL / TLS Protocol Support

    Excellent
    TLS protocol versions
    TLS 1.3 Enabled
    TLS 1.2 Enabled
    TLS 1.1 (deprecated) Disabled
    TLS 1.0 (deprecated) Disabled
    SSL protocol versions
    SSLv3 (deprecated) Disabled
    SSLv2 (deprecated) Disabled

    Main Leaf Certificate

    • Common Name: crescent.education
    • SANs: DNS:crescent.education, DNS:www.crescent.education
    • Organization: N/A
    • Validity: May 20, 2026 to Dec 05, 2026
    • Algorithm: RSA-SHA256
    โ†“ Intermediate CA Certificate โ†“
    • Common Name: RapidSSL TLS RSA CA G1
    • Organization: DigiCert Inc
    • Valid Till: Nov 02, 2027
    • Issuer: DigiCert Global Root G2

    Website & Server Intelligence for crescent.education

    Website Identity

    TitleFavicon N/A
    Meta DescriptionN/A

    Hosting & Server Network

    IP Address74.225.156.91
    HTTP StatusN/A i
    Hosting ProviderMicrosoft Corporation i
    Web ServerN/A i
    Control Panel Not Detected i

    Technology Profile

    No specific third-party frameworks or CMS fingerprints detected.

    HTTP Security Headers

    Could not fetch HTTP headers.

    IP Details & Geolocation

    IP Address 74.225.156.91
    Reverse DNS (PTR) None Detected (No PTR Record)
    CountryIndia (IN)
    RegionMaharashtra
    CityPune
    ZIP CodeN/A
    ASN8075
    Organization / ISPMicrosoft Corporation

    Understanding Diagnostic Terms for crescent.education

    Domain Status (EPP)

    EPP status codes (e.g., clientTransferProhibited, active) indicating if a domain is locked against unauthorized transfer, pending renewal, or active.

    Registrar Information

    The authorized or accredited organization managing the domain reservation and authoritative registry delegation.

    Nameservers (NS)

    Authoritative servers that translate domain names into IP addresses and direct web visitors and mail traffic globally.

    A & AAAA Records

    Primary address records mapping your domain name directly to standard IPv4 (e.g., 192.0.2.1) and newer IPv6 server network addresses.

    MX (Mail Exchange)

    Priority-ranked records pointing inbound emails to designated mail server hosts (e.g., Google Workspace, Microsoft 365, Zoho).

    SPF & DMARC Security

    Email authentication standards that verify authorized sender IPs (SPF) and instruct receiving servers how to enforce security policies (DMARC).

    DKIM Signatures

    Cryptographic public key in DNS used by receiving mail servers to verify digital signatures on your emails, ensuring messages were not tampered with.

    SSL Certificate & Chain

    Establishes encrypted HTTPS connections and authenticates domain ownership via an intermediate certificate authority chain.

    Hosting Provider & ASN

    The physical server infrastructure where website files reside and the autonomous system network (ASN) routing global traffic.

    Reverse DNS (PTR)

    Pointer (PTR) records that map a server's IP address back to its canonical hostname, verifying server identity and preventing email spam rejection.

    HTTP Security Headers

    Directives like HSTS, CSP, and X-Frame-Options instructed by the server to protect browser visitors against XSS, clickjacking, and packet sniffing.

    โš ๏ธ Report Limitations & Data Sources

    • Data Currency: This report uses cached registry and DNS data (freshened within 4 hours) for high-speed resolution. Click "๐Ÿ”„ Refresh Live" to query directly against authoritative registries.
    • DNS Resolution & Propagation: Records are queried via Google Public DNS-over-HTTPS. Global DNS propagation may take up to 24โ€“48 hours across different regional ISP resolvers during recent DNS record changes.
    • Completeness & Scope: This diagnostic tool analyzes standard authoritative records (A, AAAA, MX, NS, TXT, CNAME, SOA). It does not perform invasive brute-force subdomain scans or unauthenticated DNS zone transfers.
    • Email Deliverability & Reputation: The security analysis (SPF, DKIM, DMARC, and Port 25 SMTP handshake) reflects public DNS policies and inbound connection states. Recipient spam filters evaluate internal headers that cannot be checked from outside.
    • Reverse Proxies & CDNs: If a website is behind Cloudflare, Fastly, or another CDN/reverse proxy, the detected IP, web server software, and SSL edge certificate reflect the proxy tier.