Initializing diagnostics...

⚡ Live Data: Report generated fresh from authoritative registries. 🔄 Force Refresh
🤖 AI Intelligence Summary

The domain kumu.io is registered with 1API GmbH, first registered on 2012-08-21 and expires on 2027-08-21 (domain age: 14 years, 2 months). It resolves to IP address 35.172.255.195, hosted by Amazon.com, Inc.. Email delivery is handled by Google Workspace. SPF authentication is published and valid. DMARC policy is published. Web traffic is secured with an SSL certificate issued by Amazon RSA 2048 M04.

Domain Overview: kumu.io

Domain Registration 🌐
Active 14 years, 2 months

Expires in 9 months, 12 days · DNSSEC: Signed

Email Security 🛡️
SPF: Pass DKIM: Detected DMARC: None

Google Workspace (5 MX)

SSL Certificate 🔒
Valid Chain 75 Days Left

Issuer: Amazon RSA 2048 M04 (2 SANs)

Server & Hosting 🖥️
200 nginx

Ashburn, Virginia, United States (US)

🌐 Domain & Registration Identity View Full Whois Details →

Domainkumu.io
Website TitleFavicon Kumu
Registered2012-08-21
Expires2027-08-21
Remaining Validity9 months, 12 days
Domain Age14 years, 2 months
Registrar1API GmbH
Domain StatusclientTransferProhibited i
DNSSEC Delegation Signed · Cryptographically signed DNS zone i
Authoritative Nameservers ns-1798.awsdns-32.co.uk, ns-1499.awsdns-59.org, ns-227.awsdns-28.com, ns-612.awsdns-12.net i

🛡️ Email Security & Deliverability (SPF, DKIM, DMARC) View Complete Email Security Diagnostics →

Detected Email Provider 📬 Google Workspace
Primary Mail Server (MX) aspmx.l.google.com (Priority: 1) · 5 MX servers configured i
SPF Record (Sender Policy) Pass · 3/10 DNS Lookups · Policy: -all i
v=spf1 a include:_spf.google.com include:spf.mandrillapp.com -all
DKIM Authentication Detected · Discovered: Mandrill (mandrill) i
DMARC Policy Warning (Monitoring None) · Reports: mailto:ryan@kumu.io i
v=DMARC1; p=none; rua=mailto:ryan@kumu.io
SMTP Port 25 Status Online (26ms) · Inbound mail server handshake response

🖥️ Web Server, Hosting & Network View Full Server & Tech Details →

Web Server Software nginx i
HTTP Status Code 200 i
Server IP (IPv4) 35.172.255.195 View Geo Details →
IPv6 Address (AAAA) Not Configured
Reverse DNS (PTR) ec2-35-172-255-195.compute-1.amazonaws.com
Server Location 📍 Ashburn, Virginia, United States (US)
ASN Network & ISP AS14618 (Amazon.com, Inc.)
Hosting Provider Amazon.com, Inc. i
Control Panel Not Detected i
Technology Stack Nginx Bootstrap Typekit Google Analytics
HTTP Security Headers 4 / 6 Active (HSTS, CSP, X-Frame, X-Content) Audit Details →
DNSBL Blacklist Reputation Clean (0/5 lists)

🔒 SSL/TLS Certificate Summary View Full SSL Certificate & Chain →

Primary Hostname (CN) kumu.io · Multi-Domain SAN (Covers 2 hostnames)
SSL IssuerAmazon RSA 2048 M04
SSL Valid Till2027-01-23
Remaining Validity75 Days
Chain Status Valid Trusted Chain
Signature AlgorithmRSA-SHA256

Whois Ownership & Registration for kumu.io

📄 View Raw Registry Response ↓

Domain Information i

Domain Namekumu.io
Creation Date2012-08-21T18:27:09Z
Updated Date2026-08-26T04:28:24Z
Registry Expiry Date2027-08-21T18:27:09Z

Registrar Information i

Registrar1API GmbH
Registrar Abuse Contact Emailabuse@1api.net
Registrar IANA ID1387

Registrant Contact i

Registrant NameRedacted for Privacy
Registrant OrganizationKumu Inc.
Registrant CountryUS

Administrative Contact i

Admin NameRedacted for Privacy
Admin OrganizationRedacted for Privacy
Admin CountryRedacted for Privacy

Technical Contact i

Tech NameRedacted for Privacy
Tech OrganizationRedacted for Privacy
Tech CountryRedacted for Privacy

Domain Status i

  • clientTransferProhibited

Nameservers i

  • ns-612.awsdns-12.net
  • ns-1499.awsdns-59.org
  • ns-1798.awsdns-32.co.uk
  • ns-227.awsdns-28.com
📄 View Raw Registry Response Legacy Whois (Port 43)
Domain Name: kumu.io
Registry Domain ID: REDACTED
Registrar WHOIS Server: whois.1api.net
Registrar URL: http://www.1api.net
Updated Date: 2026-08-26T04:28:24Z
Creation Date: 2012-08-21T18:27:09Z
Registry Expiry Date: 2027-08-21T18:27:09Z
Registrar: 1API GmbH
Registrar IANA ID: 1387
Registrar Abuse Contact Email: abuse@1api.net
Registrar Abuse Contact Phone: +49.68949396850
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID: REDACTED
Registrant Name: REDACTED
Registrant Organization: Kumu Inc.
Registrant Street: REDACTED
Registrant City: REDACTED
Registrant State/Province: CA
Registrant Postal Code: REDACTED
Registrant Country: US
Registrant Phone: REDACTED
Registrant Phone Ext: REDACTED
Registrant Fax: REDACTED
Registrant Fax Ext: REDACTED
Registrant Email: REDACTED
Registry Admin ID: REDACTED
Admin Name: REDACTED
Admin Organization: REDACTED
Admin Street: REDACTED
Admin City: REDACTED
Admin State/Province: REDACTED
Admin Postal Code: REDACTED
Admin Country: REDACTED
Admin Phone: REDACTED
Admin Phone Ext: REDACTED
Admin Fax: REDACTED
Admin Fax Ext: REDACTED
Admin Email: REDACTED
Registry Tech ID: REDACTED
Tech Name: REDACTED
Tech Organization: REDACTED
Tech Street: REDACTED
Tech City: REDACTED
Tech State/Province: REDACTED
Tech Postal Code: REDACTED
Tech Country: REDACTED
Tech Phone: REDACTED
Tech Phone Ext: REDACTED
Tech Fax: REDACTED
Tech Fax Ext: REDACTED
Tech Email: REDACTED
Name Server: ns-612.awsdns-12.net
Name Server: ns-1499.awsdns-59.org
Name Server: ns-1798.awsdns-32.co.uk
Name Server: ns-227.awsdns-28.com
DNSSEC: signedDelegation
URL of the ICANN Whois Inaccuracy Complaint Form: https://icann.org/wicf/
>>> Last update of WHOIS database: 2026-11-08T09:01:27Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

Terms of Use: Access to WHOIS information is provided to assist persons in determining the contents of a domain name registration record in the registry database. The data in this record is provided by Identity Digital or the Registry Operator for informational purposes only, and accuracy is not guaranteed. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to (a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Registry Operator, a Registrar, or Identity Digital except as reasonably necessary to register domain names or modify existing registrations. When using the Whois service, please consider the following: The Whois service is not a replacement for standard EPP commands to the SRS service. Whois is not considered authoritative for registered domain objects. The Whois service may be scheduled for downtime during production or OT&E maintenance periods. Queries to the Whois services are throttled. If too many queries are received from a single IP address within a specified time, the service will begin to reject further queries for a period of time to prevent disruption of Whois service access. Abuse of the Whois system through data mining is mitigated by detecting and limiting bulk query access from single sources. Where applicable, the presence of a [Non-Public Data] tag indicates that such data is not made publicly available due to applicable data privacy laws or requirements. Should you wish to contact the registrant, please refer to the Whois records available through the registrar URL listed above. Access to non-public data may be provided, upon request, where it can be reasonably confirmed that the requester holds a specific legitimate interest and a proper legal basis for accessing the withheld data. Access to this data provided by Identity Digital can be requested by submitting a request via the form found at https://www.identity.digital/about/policies/whois-layered-access/. The Registrar of Record identified in this output may have an RDDS service that can be queried for additional information on how to contact the Registrant, Admin, or Tech contact of the queried domain name. Identity Digital Inc. and Registry Operator reserve the right to modify these terms at any time. By submitting this query, you agree to abide by this policy.

DNS Records for kumu.io

NS Records i

NameDataCopy
kumu.io. ns-1798.awsdns-32.co.uk.
kumu.io. ns-1499.awsdns-59.org.
kumu.io. ns-227.awsdns-28.com.
kumu.io. ns-612.awsdns-12.net.

A Records i

NameDataCopy
kumu.io. 35.172.255.195
kumu.io. 44.218.105.211

AAAA Records i

No AAAA records found.

WWW Records (www.kumu.io) i

TypeHostValueCopy
A www.kumu.io. 44.218.105.211
A www.kumu.io. 35.172.255.195

MX Records i

PriorityMail Server TargetCopy
5 alt2.aspmx.l.google.com.
1 aspmx.l.google.com.
5 alt1.aspmx.l.google.com.
10 alt3.aspmx.l.google.com.
10 alt4.aspmx.l.google.com.

TXT Records i

NameValueCopy
kumu.io. google-site-verification=ohGrcLXEfii187B-cXycshu7BkOAMQZX1AIKqoCZLW4
kumu.io. v=spf1 a include:_spf.google.com include:spf.mandrillapp.com -all

Email Security (MX, SPF, DKIM, DMARC, SMTP) for kumu.io

Detected Email Provider
📬 Google Workspace
✓ Active MX Routing (5 Servers)

Mail Exchange (MX) Routing Records i

Priority Mail Server Hostname Copy
1 aspmx.l.google.com
5 alt2.aspmx.l.google.com
5 alt1.aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com

SPF Record Validation i

v=spf1 a include:_spf.google.com include:spf.mandrillapp.com -all

Record Breakdown

PrefixMechanismValueDescription
+ v spf1 The SPF record version.
+ a Match if the sender's IP is one of the domain's A records.
+ include _spf.google.com The specified domain is searched for a match.
+ include spf.mandrillapp.com The specified domain is searched for a match.
- all Always matches. This should be the last mechanism.

Validation Summary

SPF Record Published Pass An SPF record was found.
Multiple SPF Records Pass Only one SPF record was found.
Included Lookups Pass The number of DNS lookups (3) is within the limit of 10.
Type PTR Check Pass The deprecated PTR mechanism was not found.
Characters After ALL Pass No mechanisms were found after the "all" mechanism.

Common DKIM Selectors i

Mandrill (mandrill)

NameDataCopy
mandrill._domainkey.kumu.io.v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y78dHZj1YeRXXVvWob2OaKynO8/lQIDAQAB;

🔍 Query Custom DKIM Selector

Live DNS Lookup

Using a custom or date-based selector (e.g. crm, newsletter, 2024)? Query its public key live on kumu.io:

DMARC Policy Validation i

v=DMARC1; p=none; rua=mailto:ryan@kumu.io

Tag Breakdown

TagValueDescription
v DMARC1 Version: Must be "DMARC1".
p none Policy: The action to take for failed emails (none, quarantine, reject).
rua mailto:ryan@kumu.io Aggregate Reports: Email address(es) to send summary reports.

Validation Summary

DMARC Record Published Pass A DMARC record was found.
Syntax Check Pass The record has a valid version tag.
Policy Enforcement Warning The policy is "p=none", which is for monitoring only and does not protect against spoofing.
Aggregate Reporting Pass An address for aggregate reports was found.

Optimization Suggestions

After monitoring your aggregate reports to ensure legitimate email sources are aligned, you should move to a "p=quarantine" or "p=reject" policy to protect your domain.

SMTP Connectivity Test (Port 25)

Mail ServerStatusLatencyBanner / Handshake Response
aspmx.l.google.com Success 26ms 220 mx.google.com ESMTP 5a478bee46e88-37265ff8c76si4598125eec.49 - gsmtp

Server IP Blacklist Check (35.172.255.195)

  • Spamhaus ZEN: Clean
  • SpamCop: Clean
  • Barracuda: Clean
  • GBUdb Truncate: Clean
  • DroneBL: Clean
  • SSL/TLS Certificate Details for kumu.io

    • Issuer: Amazon RSA 2048 M04
    • Expires In: 75 Days
    • Chain Status: Valid Chain

    🔒 SSL / TLS Protocol Support

    Excellent
    TLS protocol versions
    TLS 1.3 Enabled
    TLS 1.2 Enabled
    TLS 1.1 (deprecated) Disabled
    TLS 1.0 (deprecated) Disabled
    SSL protocol versions
    SSLv3 (deprecated) Disabled
    SSLv2 (deprecated) Disabled

    Main Leaf Certificate

    • Common Name: kumu.io
    • SANs: DNS:kumu.io, DNS:*.kumu.io
    • Organization: N/A
    • Validity: Dec 24, 2025 to Jan 23, 2027
    • Algorithm: RSA-SHA256
    ↓ Intermediate CA Certificate ↓
    • Common Name: Amazon RSA 2048 M04
    • Organization: Amazon
    • Valid Till: Aug 24, 2030
    • Issuer: Amazon Root CA 1
    ↓ Intermediate CA Certificate ↓
    • Common Name: Amazon Root CA 1
    • Organization: Amazon
    • Valid Till: Dec 31, 2037
    • Issuer: Starfield Services Root Certificate Authority - G2

    Website & Server Intelligence for kumu.io

    Website Identity

    TitleFavicon Kumu
    Meta DescriptionN/A

    Hosting & Server Network

    IP Address35.172.255.195
    HTTP Status200 i
    Hosting ProviderAmazon.com, Inc. i
    Web Servernginx i
    Control Panel Not Detected i

    Technology Profile

    • Nginx
    • Bootstrap
    • Typekit
    • Google Analytics

    HTTP Security Headers

    Strict-Transport-Security Present
    Content-Security-Policy Present
    X-Frame-Options Present
    X-Content-Type-Options Present
    Referrer-Policy Missing
    Permissions-Policy Missing

    IP Details & Geolocation

    IP Address 35.172.255.195
    Reverse DNS (PTR) ec2-35-172-255-195.compute-1.amazonaws.com
    CountryUnited States (US)
    RegionVirginia
    CityAshburn
    ZIP CodeN/A
    ASN14618
    Organization / ISPAmazon.com, Inc.

    Understanding Diagnostic Terms for kumu.io

    Domain Status (EPP)

    EPP status codes (e.g., clientTransferProhibited, active) indicating if a domain is locked against unauthorized transfer, pending renewal, or active.

    Registrar Information

    The authorized or accredited organization managing the domain reservation and authoritative registry delegation.

    Nameservers (NS)

    Authoritative servers that translate domain names into IP addresses and direct web visitors and mail traffic globally.

    A & AAAA Records

    Primary address records mapping your domain name directly to standard IPv4 (e.g., 192.0.2.1) and newer IPv6 server network addresses.

    MX (Mail Exchange)

    Priority-ranked records pointing inbound emails to designated mail server hosts (e.g., Google Workspace, Microsoft 365, Zoho).

    SPF & DMARC Security

    Email authentication standards that verify authorized sender IPs (SPF) and instruct receiving servers how to enforce security policies (DMARC).

    DKIM Signatures

    Cryptographic public key in DNS used by receiving mail servers to verify digital signatures on your emails, ensuring messages were not tampered with.

    SSL Certificate & Chain

    Establishes encrypted HTTPS connections and authenticates domain ownership via an intermediate certificate authority chain.

    Hosting Provider & ASN

    The physical server infrastructure where website files reside and the autonomous system network (ASN) routing global traffic.

    Reverse DNS (PTR)

    Pointer (PTR) records that map a server's IP address back to its canonical hostname, verifying server identity and preventing email spam rejection.

    HTTP Security Headers

    Directives like HSTS, CSP, and X-Frame-Options instructed by the server to protect browser visitors against XSS, clickjacking, and packet sniffing.

    ⚠️ Report Limitations & Data Sources

    • Data Currency: This report uses cached registry and DNS data (freshened within 4 hours) for high-speed resolution. Click "🔄 Refresh Live" to query directly against authoritative registries.
    • DNS Resolution & Propagation: Records are queried via Google Public DNS-over-HTTPS. Global DNS propagation may take up to 24–48 hours across different regional ISP resolvers during recent DNS record changes.
    • Completeness & Scope: This diagnostic tool analyzes standard authoritative records (A, AAAA, MX, NS, TXT, CNAME, SOA). It does not perform invasive brute-force subdomain scans or unauthenticated DNS zone transfers.
    • Email Deliverability & Reputation: The security analysis (SPF, DKIM, DMARC, and Port 25 SMTP handshake) reflects public DNS policies and inbound connection states. Recipient spam filters evaluate internal headers that cannot be checked from outside.
    • Reverse Proxies & CDNs: If a website is behind Cloudflare, Fastly, or another CDN/reverse proxy, the detected IP, web server software, and SSL edge certificate reflect the proxy tier.