Initializing diagnostics...

⚡ Live Data: Report generated fresh from authoritative registries. 🔄 Force Refresh
🤖 AI Intelligence Summary

The domain jsalaw.com is registered with Tucows Domains Inc., first registered on 1998-08-31 and expires on 2035-08-30 (domain age: 28 years). It resolves to IP address 104.21.36.187, hosted by Cloudflare, Inc.. Email delivery is handled by Self-hosted or Custom. SPF authentication is published and valid. DMARC policy is published. Web traffic is secured with an SSL certificate issued by WE1.

Domain Overview: jsalaw.com

Domain Registration 🌐
Active 28 years

Expires in 8 years, 11 months, 4 days · DNSSEC: Unsigned

Email Security 🛡️
SPF: Pass DKIM: Detected DMARC: Reject

Self-hosted or Custom (2 MX)

SSL Certificate 🔒
Valid Chain 41 Days Left

Issuer: WE1 (2 SANs)

Server & Hosting 🖥️
403 cloudflare

Toronto, Ontario, Canada (CA)

🌐 Domain & Registration Identity View Full Whois Details →

Domainjsalaw.com
Website TitleFavicon Just a moment...
Registered1998-08-31
Expires2035-08-30
Remaining Validity8 years, 11 months, 4 days
Domain Age28 years
RegistrarTucows Domains Inc.
Domain Statusclient transfer prohibited, client update prohibited i
DNSSEC Delegation Unsigned · Zone not signed with DNSSEC keys i
Authoritative Nameservers ophelia.ns.cloudflare.com, venkat.ns.cloudflare.com i

🛡️ Email Security & Deliverability (SPF, DKIM, DMARC) View Complete Email Security Diagnostics →

Detected Email Provider 📬 Self-hosted or Custom
Primary Mail Server (MX) esa1.hc715-24.ap.iphmx.com (Priority: 0) · 2 MX servers configured i
SPF Record (Sender Policy) Pass · 5/10 DNS Lookups · Policy: ~all i
v=spf1 a ip4:103.11.85.92 ip4:103.11.85.203 ip4:103.11.85.141 include:sendgrid.net include:spf.protection.outlook.com include:amazonses.com include:_spf.jsalaw_com._d.easydmarc.pro ~all
DKIM Authentication Detected · Discovered: Microsoft 365 (Key 1) (selector1), Microsoft 365 (Key 2) (selector2), Twilio SendGrid (Key 1) (s1), Twilio SendGrid (Key 2) (s2) i
DMARC Policy Pass (Reject) · Reports: mailto:51d9bc6a4b@rua.easydmarc.asia i
v=DMARC1;p=reject;pct=100;rua=mailto:51d9bc6a4b@rua.easydmarc.asia;ruf=mailto:51d9bc6a4b@ruf.easydmarc.asia;ri=86400;fo=0:1:d:s;
SMTP Port 25 Status Online (225ms) · Inbound mail server handshake response

🖥️ Web Server, Hosting & Network View Full Server & Tech Details →

Web Server Software cloudflare i
HTTP Status Code 403 i
Server IP (IPv4) 104.21.36.187 View Geo Details →
IPv6 Address (AAAA) 2606:4700:3037::6815:24bb
Reverse DNS (PTR) None Detected (No PTR Record)
Server Location 📍 Toronto, Ontario, Canada (CA)
ASN Network & ISP AS13335 (Cloudflare, Inc.)
Hosting Provider Cloudflare, Inc. i
Control Panel Not Detected i
Technology Stack Cloudflare Google Analytics
HTTP Security Headers 5 / 6 Active (CSP, X-Frame, X-Content, Referrer-Policy, Permissions-Policy) Audit Details →
DNSBL Blacklist Reputation Clean (0/5 lists)

🔒 SSL/TLS Certificate Summary View Full SSL Certificate & Chain →

Primary Hostname (CN) jsalaw.com · Multi-Domain SAN (Covers 2 hostnames)
SSL IssuerWE1
SSL Valid Till2026-11-06
Remaining Validity41 Days
Chain Status Valid Trusted Chain
Signature Algorithmecdsa-with-SHA256

Whois Ownership & Registration for jsalaw.com

📄 View Raw Registry Response ↓

Domain Information i

Domain NameJSALAW.COM
Registration Date1998-08-31 04:00:00 Z
Expiration Date2035-08-30 04:00:00 Z
Last Changed Date2025-09-12 09:21:13 Z

Domain Status i

  • client transfer prohibited
  • client update prohibited

Registrar Information i

NameTucows Domains Inc.
Abuse Emaildomainabuse@tucows.com

Registrant Contact i

Contact information for this role is not provided or redacted.

Administrative Contact i

Contact information for this role is not provided or redacted.

Technical Contact i

Contact information for this role is not provided or redacted.

Nameservers i

  • OPHELIA.NS.CLOUDFLARE.COM
  • VENKAT.NS.CLOUDFLARE.COM
📄 View Raw Registry Response RDAP (Hybrid)
Domain Name: JSALAW.COM
   Registry Domain ID: 1874272_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.tucows.com
   Registrar URL: http://www.tucows.com
   Updated Date: 2025-09-12T09:21:13Z
   Creation Date: 1998-08-31T04:00:00Z
   Registry Expiry Date: 2035-08-30T04:00:00Z
   Registrar: Tucows Domains Inc.
   Registrar IANA ID: 69
   Registrar Abuse Contact Email: domainabuse@tucows.com
   Registrar Abuse Contact Phone: +1.4165350123
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Name Server: OPHELIA.NS.CLOUDFLARE.COM
   Name Server: VENKAT.NS.CLOUDFLARE.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2026-09-25T12:23:50Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

DNS Records for jsalaw.com

NS Records i

NameDataCopy
jsalaw.com. ophelia.ns.cloudflare.com.
jsalaw.com. venkat.ns.cloudflare.com.

A Records i

NameDataCopy
jsalaw.com. 104.21.36.187
jsalaw.com. 172.67.198.144

AAAA Records i

NameDataCopy
jsalaw.com. 2606:4700:3037::6815:24bb
jsalaw.com. 2606:4700:3036::ac43:c690

WWW Records (www.jsalaw.com) i

TypeHostValueCopy
A www.jsalaw.com. 172.67.198.144
A www.jsalaw.com. 104.21.36.187

MX Records i

PriorityMail Server TargetCopy
10 esa2.hc715-24.ap.iphmx.com.
0 esa1.hc715-24.ap.iphmx.com.

TXT Records i

NameValueCopy
jsalaw.com. brevo-code:6d10d8bf5489b3c4ef523b63bdd708e7
jsalaw.com. zoho-verification=zb09252619.zmverify.zoho.in
jsalaw.com. v=spf1 a ip4:103.11.85.92 ip4:103.11.85.203 ip4:103.11.85.141 include:sendgrid.net include:spf.protection.outlook.com include:amazonses.com include:_spf.jsalaw_com._d.easydmarc.pro ~all
jsalaw.com. yhW71m11a67kokM5ptL/zTAzSbCCWBQMFrWhbLDlVaSGZrFm6CWPl03VyCUxwc0eGhLsK3iBKJg0Ag5BVT/rVQ==
jsalaw.com. sendinblue-site-verification=9596381
jsalaw.com. brevo-code:593f90ff88412353cba5d0e8a841744b
jsalaw.com. google-site-verification=nCi3nPgubpKORNJQ3XBQcC__OEQIyPHDAIlbrayvekY
jsalaw.com. rbmvpsg94982ngr8aea5vvljje

Email Security (MX, SPF, DKIM, DMARC, SMTP) for jsalaw.com

Detected Email Provider
📬 Self-hosted or Custom
✓ Active MX Routing (2 Servers)

Mail Exchange (MX) Routing Records i

Priority Mail Server Hostname Copy
0 esa1.hc715-24.ap.iphmx.com
10 esa2.hc715-24.ap.iphmx.com

SPF Record Validation i

v=spf1 a ip4:103.11.85.92 ip4:103.11.85.203 ip4:103.11.85.141 include:sendgrid.net include:spf.protection.outlook.com include:amazonses.com include:_spf.jsalaw_com._d.easydmarc.pro ~all

Record Breakdown

PrefixMechanismValueDescription
+ v spf1 The SPF record version.
+ a Match if the sender's IP is one of the domain's A records.
+ ip4 103.11.85.92 Match if the IP is in the given IPv4 range.
+ ip4 103.11.85.203 Match if the IP is in the given IPv4 range.
+ ip4 103.11.85.141 Match if the IP is in the given IPv4 range.
+ include sendgrid.net The specified domain is searched for a match.
+ include spf.protection.outlook.com The specified domain is searched for a match.
+ include amazonses.com The specified domain is searched for a match.
+ include _spf.jsalaw_com._d.easydmarc.pro The specified domain is searched for a match.
~ all Always matches. This should be the last mechanism.

Validation Summary

SPF Record Published Pass An SPF record was found.
Multiple SPF Records Pass Only one SPF record was found.
Included Lookups Pass The number of DNS lookups (5) is within the limit of 10.
Type PTR Check Pass The deprecated PTR mechanism was not found.
Characters After ALL Pass No mechanisms were found after the "all" mechanism.

Common DKIM Selectors i

Microsoft 365 (Key 1) (selector1)

NameDataCopy
selector1._domainkey.jsalaw.com.selector1-jsalaw-com._domainkey.jsalaw.onmicrosoft.com.
selector1-jsalaw-com._domainkey.jsalaw.onmicrosoft.com.v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE4M66YVDmYGyOMd1z+rgkWe1YQ29qJ6AbGFdEQ3UDLAOyvkD+hyjUtQ4Wn+oYLAdFi1R92S9THdYAiIy5WuTXMtzhg5cRo/0Q0EWp15TbgUTRKWeRptzt56ainJIbjxhcyiM1TSXL2rMefqDj/lJddxYSM9GaeDmH3rhJ7rhg6hdge1oaijIDwGubwqgs0u7QsbOP5c8dbiOG0pXPMly4uNlcIToGjczqGF7YNuTWU22AGAMniLSlxkKm8ONeUfqumV8GbVEeCS5UFnh/S0/9l+mHlRZ3RSBh6LROzCDi8jkWeJHBt1nKp05BZJf4cSVzfi00Ti+qEoNY/jP9mJjQIDAQAB;

Microsoft 365 (Key 2) (selector2)

NameDataCopy
selector2._domainkey.jsalaw.com.selector2-jsalaw-com._domainkey.jsalaw.onmicrosoft.com.
selector2-jsalaw-com._domainkey.jsalaw.onmicrosoft.com.v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRov4rfqwDpq1F6McJ3kYjktReg0mBaV9dZgfSjfIr9qpysnEfYtoBQBIbp1St4e8hH8shyYA2aJEkOhCJw+13UM8mJO4BR61ljQD+P6ytPsKb3EnACP8slv00FBaPrr0/rgvfdJrGNA3kk9Oh2aYGeAVOATbvo1IYmNui95RhSPYRenCGNlryQdQHsxbPrHRI7mi0oYjFuSYqh8Y2q9Ojo6TwUHxoc5ibeCdQvlbcuuJVNarJykQ/7nv/7IsVXCfAEGXDUJPjbYwhXpuHxUeDVArVZS1hppyxTu0bOHXmXAh/yHzQjLFVRCY8qJb/GJpQpLyVLYllGan7lRDfHC6QIDAQAB;

Twilio SendGrid (Key 1) (s1)

NameDataCopy
s1._domainkey.jsalaw.com.s1.domainkey.u915502.wl003.sendgrid.net.
s1.domainkey.u915502.wl003.sendgrid.net.k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcC4w7Jf4NFtusY8DE/iBHxzx/SE/1Dot3c6xYDJdaj1nNpfHQ3VH8TqIMDgv+2LIvWHQY5VjnUy8FfvKQQK0yngxzQzL15hpC+B8Ar4vI4IELzv6gZDw/q/6tJ2qyKoT/SjtQWHorn9hZeYubetyGyt11JON46BT5GCdBAoMygxwisrrcZW9iOx34h05MvvZBKsPEVAX6bWzlHFrAIeUu8hw6ncybxlFpY+kuNsft5L+nISjlB5YbmBkpbjPy04gZUV/rd1wwLHMv/MlUap378Q2Vi1lkabih5BxcL/N2cuzx3M5aNLqwMtxehKHKgaV4ivogNZ/U7ZWgk5VRTN5QIDAQAB

Twilio SendGrid (Key 2) (s2)

NameDataCopy
s2._domainkey.jsalaw.com.s2.domainkey.u915502.wl003.sendgrid.net.
s2.domainkey.u915502.wl003.sendgrid.net.k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6Crv4iWFhyUyVhK8wNSqZ9hrDEPF7vtzFK5rcAm4G9NNK/uCCyz+PH4sNRMB6EpnxbmTBYnCqK5tRXmpLX8cSiD9QvR6rRwoNkwSHKgIYdh7SsVlUiRHum46T7RIOxyhBSiNsV6aP/hIYLulDxJqR5Gg2gPpyZGyIyUc0489i8wIDAQAB

🔍 Query Custom DKIM Selector

Live DNS Lookup

Using a custom or date-based selector (e.g. crm, newsletter, 2024)? Query its public key live on jsalaw.com:

DMARC Policy Validation i

v=DMARC1;p=reject;pct=100;rua=mailto:51d9bc6a4b@rua.easydmarc.asia;ruf=mailto:51d9bc6a4b@ruf.easydmarc.asia;ri=86400;fo=0:1:d:s;

Tag Breakdown

TagValueDescription
v DMARC1 Version: Must be "DMARC1".
p reject Policy: The action to take for failed emails (none, quarantine, reject).
pct 100 Percentage: The percentage of emails to apply the policy to.
rua mailto:51d9bc6a4b@rua.easydmarc.asia Aggregate Reports: Email address(es) to send summary reports.
ruf mailto:51d9bc6a4b@ruf.easydmarc.asia Forensic Reports: Email address(es) to send detailed failure reports.
ri 86400 Unknown Tag
fo 0:1:d:s Failure Reporting Options: Defines when to send forensic reports.

Validation Summary

DMARC Record Published Pass A DMARC record was found.
Syntax Check Pass The record has a valid version tag.
Policy Enforcement Pass The policy is "p=reject", which provides the strongest protection against spoofing.
Aggregate Reporting Pass An address for aggregate reports was found.

SMTP Connectivity Test (Port 25)

Mail ServerStatusLatencyBanner / Handshake Response
esa1.hc715-24.ap.iphmx.com Success 225ms 220 esa1.hc715-24.ap.iphmx.com ESMTP

Server IP Blacklist Check (104.21.36.187)

  • Spamhaus ZEN: Clean
  • SpamCop: Clean
  • Barracuda: Clean
  • GBUdb Truncate: Clean
  • DroneBL: Clean
  • SSL/TLS Certificate Details for jsalaw.com

    • Issuer: WE1
    • Expires In: 41 Days
    • Chain Status: Valid Chain

    🔒 SSL / TLS Protocol Support

    Excellent
    TLS protocol versions
    TLS 1.3 Enabled
    TLS 1.2 Enabled
    TLS 1.1 (deprecated) Disabled
    TLS 1.0 (deprecated) Disabled
    SSL protocol versions
    SSLv3 (deprecated) Disabled
    SSLv2 (deprecated) Disabled

    Main Leaf Certificate

    • Common Name: jsalaw.com
    • SANs: DNS:jsalaw.com, DNS:*.jsalaw.com
    • Organization: N/A
    • Validity: Aug 08, 2026 to Nov 06, 2026
    • Algorithm: ecdsa-with-SHA256
    ↓ Intermediate CA Certificate ↓
    • Common Name: WE1
    • Organization: Google Trust Services
    • Valid Till: Feb 20, 2029
    • Issuer: GTS Root R4
    ↓ Intermediate CA Certificate ↓
    • Common Name: GTS Root R4
    • Organization: Google Trust Services LLC
    • Valid Till: Jan 28, 2028
    • Issuer: GlobalSign Root CA

    Website & Server Intelligence for jsalaw.com

    Website Identity

    TitleFavicon Just a moment...
    Meta DescriptionN/A

    Hosting & Server Network

    IP Address104.21.36.187
    HTTP Status403 i
    Hosting ProviderCloudflare, Inc. i
    Web Servercloudflare i
    Control Panel Not Detected i

    Technology Profile

    • Cloudflare
    • Google Analytics

    HTTP Security Headers

    Strict-Transport-Security Missing
    Content-Security-Policy Present
    X-Frame-Options Present
    X-Content-Type-Options Present
    Referrer-Policy Present
    Permissions-Policy Present

    IP Details & Geolocation

    IP Address 104.21.36.187
    Reverse DNS (PTR) None Detected (No PTR Record)
    CountryCanada (CA)
    RegionOntario
    CityToronto
    ZIP CodeN/A
    ASN13335
    Organization / ISPCloudflare, Inc.

    Understanding Diagnostic Terms for jsalaw.com

    Domain Status (EPP)

    EPP status codes (e.g., clientTransferProhibited, active) indicating if a domain is locked against unauthorized transfer, pending renewal, or active.

    Registrar Information

    The authorized or accredited organization managing the domain reservation and authoritative registry delegation.

    Nameservers (NS)

    Authoritative servers that translate domain names into IP addresses and direct web visitors and mail traffic globally.

    A & AAAA Records

    Primary address records mapping your domain name directly to standard IPv4 (e.g., 192.0.2.1) and newer IPv6 server network addresses.

    MX (Mail Exchange)

    Priority-ranked records pointing inbound emails to designated mail server hosts (e.g., Google Workspace, Microsoft 365, Zoho).

    SPF & DMARC Security

    Email authentication standards that verify authorized sender IPs (SPF) and instruct receiving servers how to enforce security policies (DMARC).

    DKIM Signatures

    Cryptographic public key in DNS used by receiving mail servers to verify digital signatures on your emails, ensuring messages were not tampered with.

    SSL Certificate & Chain

    Establishes encrypted HTTPS connections and authenticates domain ownership via an intermediate certificate authority chain.

    Hosting Provider & ASN

    The physical server infrastructure where website files reside and the autonomous system network (ASN) routing global traffic.

    Reverse DNS (PTR)

    Pointer (PTR) records that map a server's IP address back to its canonical hostname, verifying server identity and preventing email spam rejection.

    HTTP Security Headers

    Directives like HSTS, CSP, and X-Frame-Options instructed by the server to protect browser visitors against XSS, clickjacking, and packet sniffing.

    ⚠️ Report Limitations & Data Sources

    • Data Currency: This report uses cached registry and DNS data (freshened within 4 hours) for high-speed resolution. Click "🔄 Refresh Live" to query directly against authoritative registries.
    • DNS Resolution & Propagation: Records are queried via Google Public DNS-over-HTTPS. Global DNS propagation may take up to 24–48 hours across different regional ISP resolvers during recent DNS record changes.
    • Completeness & Scope: This diagnostic tool analyzes standard authoritative records (A, AAAA, MX, NS, TXT, CNAME, SOA). It does not perform invasive brute-force subdomain scans or unauthenticated DNS zone transfers.
    • Email Deliverability & Reputation: The security analysis (SPF, DKIM, DMARC, and Port 25 SMTP handshake) reflects public DNS policies and inbound connection states. Recipient spam filters evaluate internal headers that cannot be checked from outside.
    • Reverse Proxies & CDNs: If a website is behind Cloudflare, Fastly, or another CDN/reverse proxy, the detected IP, web server software, and SSL edge certificate reflect the proxy tier.