Email Security Check for mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org – SPF, DKIM, DMARC & SMTP

⚡ Loaded from cache (2026-09-25 08:45:34 IST). 🔄 Refresh Live

🤖 AI Intelligence Summary

The domain mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org is registered with an undisclosed registrar. It resolves to IP address cdn-content.ampproject.org.. Email delivery is handled by Self-hosted or Custom. No valid SPF record was detected. DMARC protection is missing or unconfigured. Web traffic is secured with an SSL certificate issued by WR2.

Domain Overview: mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org

Domain Registration 🌐

Active N/A

Expires in N/A · DNSSEC: Unsigned

Email Security 🛡️

SPF: Missing DKIM: Not Detected DMARC: Missing

Self-hosted or Custom (1 MX)

SSL Certificate 🔒

Valid Chain 69 Days Left

Issuer: WR2 (328 SANs)

Server & Hosting 🖥️

N/A N/A

N/A

🌐 Domain & Registration Identity View Full Whois Details →

Domain	mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org
Website Title	N/A
Registered	N/A
Expires	N/A
Remaining Validity	N/A
Domain Age	N/A
Registrar	N/A
Domain Status	N/A i
DNSSEC Delegation	Unsigned · Zone not signed with DNSSEC keys i
Authoritative Nameservers	`cdn-content.ampproject.org` i

🛡️ Email Security & Deliverability (SPF, DKIM, DMARC) View Complete Email Security Diagnostics →

Detected Email Provider	📬 Self-hosted or Custom
Primary Mail Server (MX)	`cdn-content.ampproject.org (Priority: cdn-content.ampproject.org.)` · 1 MX server configured i
SPF Record (Sender Policy)	Missing i
DKIM Authentication	Not Detected · (No common third-party selector found; custom keys may be configured) i
DMARC Policy	Missing i
SMTP Port 25 Status	Failed · Inbound mail server handshake response

🖥️ Web Server, Hosting & Network View Full Server & Tech Details →

Web Server Software	N/A i
HTTP Status Code	N/A i
Server IP (IPv4)	cdn-content.ampproject.org. View Geo Details →
IPv6 Address (AAAA)	`cdn-content.ampproject.org.`
Reverse DNS (PTR)	`None Detected (No PTR Record)`
Server Location	📍 N/A
ASN Network & ISP	`N/A`
Hosting Provider	N/A i
Control Panel	Not Detected i
Technology Stack	No third-party framework or CMS fingerprints detected
HTTP Security Headers	None Detected (Missing HSTS / CSP) Audit Details →
DNSBL Blacklist Reputation	Not Checked

🔒 SSL/TLS Certificate Summary View Full SSL Certificate & Chain →

Primary Hostname (CN)	misc-sni.google.com · Multi-Domain SAN (Covers 328 hostnames)
SSL Issuer	WR2
SSL Valid Till	2026-12-04
Remaining Validity	69 Days
Chain Status	Valid Trusted Chain
Signature Algorithm	`RSA-SHA256`

Whois Ownership & Registration for mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org

📄 View Raw Registry Response ↓

Domain Information i

Domain Name

N/A

Registrar Information i

Name

N/A

Registrant Contact i

Contact information for this role is not provided or redacted.

Administrative Contact i

Contact information for this role is not provided or redacted.

Technical Contact i

Contact information for this role is not provided or redacted.

Nameservers i

📄 View Raw Registry Response RDAP (Hybrid)

Malformed request.
>>> Last update of WHOIS database: 2026-09-25T03:15:31Z <<<

Terms of Use: Access to Public Interest Registry WHOIS information is provided to assist persons in determining the contents of a domain name registration record in the Public Interest Registry registry database. The data in this record is provided by Public Interest Registry for informational purposes only, and Public Interest Registry does not guarantee its accuracy. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to (a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Registry Operator, a Registrar, or Identity Digital except as reasonably necessary to register domain names or modify existing registrations. All rights reserved. Public Interest Registry reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy.  The Registrar of Record identified in this output may have an RDDS service that can be queried for additional information on how to contact the Registrant, Admin, or Tech contact of the queried domain name.

{
    "rdapConformance": [
        "rdap_level_0",
        "icann_rdap_response_profile_1",
        "icann_rdap_technical_implementation_guide_1"
    ],
    "notices": [
        {
            "title": "Terms of Service",
            "description": [
                "Public Interest Registry provides this RDAP service for informational purposes only, and to assist persons in obtaining information about or related to a domain name registration record. Public Interest Registry does not guarantee its accuracy. Users accessing the Public Interest Registry RDAP service agree to use the data only for lawful purposes, and under no circumstances may this data be used to: a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the registrar's own existing customers and b) enable high volume, automated, electronic processes that send queries or data to the systems of Public Interest Registry or any ICANN-accredited registrar, except as reasonably necessary to register domain names or modify existing registrations. When using the Public Interest Registry RDAP service, please consider the following: the RDAP service is not a replacement for standard EPP commands to the SRS service. RDAP is not considered authoritative for registered domain objects. The RDAP service may be scheduled for downtime during production or OT&E maintenance periods. Queries to the RDAP services are throttled. If too many queries are received from a single IP address within a specified time, the service will begin to reject further queries for a period of time to prevent disruption of RDAP service access. Abuse of the RDAP system through data mining is mitigated by detecting and limiting bulk query access from single sources. Where applicable, the presence of a [Non-Public Data] tag indicates that such data is not made publicly available due to applicable data privacy laws or requirements. Should you wish to contact the registrant, please refer to the RDAP records available through the registrar URL listed above. Access to non-public data may be provided, upon request, where it can be reasonably confirmed that the requester holds a specific legitimate interest and a proper legal basis for accessing the withheld data. Access to this data can be requested by submitting a request to WHOISrequest@pir.org. Public Interest Registry Inc. reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy."
            ],
            "links": [
                {
                    "value": "https://rdap.publicinterestregistry.org/rdap/domain/mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org",
                    "rel": "terms-of-service",
                    "href": "https://thenew.org/org-people/about-pir/policies/",
                    "type": "text/html"
                }
            ]
        }
    ],
    "errorCode": 400,
    "title": "Bad Request",
    "description": [
        "Bad Request"
    ],
    "lang": "en"
}

DNS Records for mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org

NS Records i

Name	Data	Copy
mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org.	`cdn-content.ampproject.org.`

A Records i

Name	Data	Copy
mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org.	`cdn-content.ampproject.org.`
cdn-content.ampproject.org.	`142.250.194.225`

AAAA Records i

Name	Data	Copy
mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org.	`cdn-content.ampproject.org.`
cdn-content.ampproject.org.	`2404:6800:4009:816::2001`

WWW Records (www.mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org) i

Type	Host	Value
CNAME	www.mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org.	`cdn-content.ampproject.org.`
A	www.mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org.	`cdn-content.ampproject.org.`
A	cdn-content.ampproject.org.	`142.250.194.225`

MX Records i

Priority	Mail Server Target	Copy
cdn-content.ampproject.org.

TXT Records i

Name	Value	Copy
mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org.	`cdn-content.ampproject.org.`

Email Security (MX, SPF, DKIM, DMARC, SMTP) for mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org

Detected Email Provider

📬 Self-hosted or Custom

✓ Active MX Routing (1 Server)

Mail Exchange (MX) Routing Records i

Priority	Mail Server Hostname	Copy
cdn-content.ampproject.org.

SPF Record Validation i

No SPF record found to validate.

Common DKIM Selectors i

No common third-party DKIM selectors found. Custom selectors may be configured.

🔍 Query Custom DKIM Selector

Live DNS Lookup

Using a custom or date-based selector (e.g. crm, newsletter, 2024)? Query its public key live on mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org:

DMARC Policy Validation i

No DMARC record found to validate.

Validation Summary

DMARC Record Published

Fail No DMARC record was found.

Optimization Suggestions

A DMARC record is essential for email security. It tells receiving servers what to do with emails that fail SPF and DKIM checks, protecting your domain from spoofing.

SMTP Connectivity Test (Port 25)

Mail Server	Status	Latency	Banner / Handshake Response
cdn-content.ampproject.org	Failed	3008ms	`Connection failed (110: Connection timed out). Port 25 may be blocked.`

SSL/TLS Certificate Details for mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org

Issuer: WR2
Expires In: 69 Days
Chain Status: Valid Chain

🔒 SSL / TLS Protocol Support

Warning

TLS protocol versions

TLS 1.3	Enabled
TLS 1.2	Enabled
TLS 1.1 (deprecated)	Enabled
TLS 1.0 (deprecated)	Enabled

SSL protocol versions

SSLv3 (deprecated)	Disabled
SSLv2 (deprecated)	Disabled

Main Leaf Certificate

Common Name: misc-sni.google.com
SANs: DNS:misc-sni.google.com, DNS:*.aiplatform-notebook.cloud.google.com, DNS:*.aiplatform-training.cloud.google.com, DNS:*.backupdr.cloud.google.com, DNS:*.backupdr.cloud.google, DNS:*.backupdr-staging.cloud.google.com, DNS:*.backupdr-staging.cloud.google, DNS:*.backupdr-autopush.cloud.google.com, DNS:*.backupdr-autopush.cloud.google, DNS:*.backupdr-dev.cloud.google.com, DNS:*.backupdr-dev.cloud.google, DNS:*.backupdr-sandbox.cloud.google.com, DNS:*.backupdr-sandbox.cloud.google, DNS:*.brocaproject.com, DNS:brocaproject.com, DNS:*.composer.cloud.google.com, DNS:*.composer.cloud.google, DNS:*.composer-staging.cloud.google.com, DNS:*.composer-staging.cloud.google, DNS:*.composer-qa.cloud.google.com, DNS:*.composer-qa.cloud.google, DNS:*.composer-dev.cloud.google.com, DNS:*.composer-dev.cloud.google, DNS:*.datalab.cloud.google.com, DNS:*.datafusion.cloud.google.com, DNS:*.datafusion.cloud.google, DNS:*.datafusion-staging.cloud.google.com, DNS:*.datafusion-staging.cloud.google, DNS:*.datafusion-dev.cloud.google.com, DNS:*.datafusion-dev.cloud.google, DNS:*.datafusion-api.cloud.google.com, DNS:*.datafusion-api.cloud.google, DNS:*.datafusion-api-staging.cloud.google.com, DNS:*.datafusion-api-staging.cloud.google, DNS:*.datafusion-api-dev.cloud.google.com, DNS:*.datafusion-api-dev.cloud.google, DNS:*.dataplex.cloud.google.com, DNS:*.dataplex-staging.cloud.google.com, DNS:*.dataplex-dev.cloud.google.com, DNS:*.dataproc.cloud.google.com, DNS:*.dataproc.cloud.google, DNS:*.dataproc-image-staging.cloud.google.com, DNS:*.dataproc-image-staging.cloud.google, DNS:*.dataproc-staging.cloud.google.com, DNS:*.dataproc-staging.cloud.google, DNS:*.dataproc-test.cloud.google.com, DNS:*.dataproc-test.cloud.google, DNS:*.earthengine.google.co.in, DNS:*.earthengine.google.com, DNS:*.fiber.google.com, DNS:*.gateway.dev, DNS:*.de.gateway.dev, DNS:*.ew.gateway.dev, DNS:*.uc.gateway.dev, DNS:*.asia-east1.gateway.dev, DNS:*.europe-west1.gateway.dev, DNS:*.us-central1.gateway.dev, DNS:*.global.accountverification.cloud.google, DNS:*.staging-global.accountverification.cloud.google, DNS:*.autopush-global.accountverification.cloud.google, DNS:*.google-syndication.com, DNS:*.dev.google-syndication.com, DNS:*.staging.google-syndication.com, DNS:*.googleacquisitionmigration.com, DNS:*.gvt5.com, DNS:*.healthcare.cloud.google.com, DNS:*.machinelearningtools.cloud.google.com, DNS:*.machinelearningtools-staging.cloud.google.com, DNS:*.machinelearningtools-autopush.cloud.google.com, DNS:*.machinelearningtools-dev.cloud.google.com, DNS:*.mapmaker.google.com, DNS:*.microhost.google.com, DNS:*.notebooks.cloud.google.com, DNS:*.notebooks.cloud.google, DNS:*.picnik.com, DNS:picnik.com, DNS:*.pipelines.cloud.google.com, DNS:*.podcasts.goog, DNS:*.tensorboard.cloud.google.com, DNS:*.tensorboard-autopush.cloud.google.com, DNS:*.tensorboard-dev.cloud.google.com, DNS:*.tensorboard-staging.cloud.google.com, DNS:*.tensorboard-test.cloud.google.com, DNS:*.vast.cloud.google.com, DNS:*.vast-staging.cloud.google.com, DNS:*.vast-autopush.cloud.google.com, DNS:*.vast-sandbox.cloud.google.com, DNS:abc.xyz, DNS:*.abc.xyz, DNS:adsense.com, DNS:www.adsense.com, DNS:adsensecustomsearchads.com, DNS:*.adsensecustomsearchads.com, DNS:adsenseformobileapps.com, DNS:advertisercommunity.com, DNS:*.advertisercommunity.com, DNS:cloudyoryx.dev, DNS:*.cloudyoryx.dev, DNS:eageroryx.dev, DNS:*.eageroryx.dev, DNS:stage.advertisercommunity.com, DNS:*.stage.advertisercommunity.com, DNS:de.advertisercommunity.com, DNS:*.de.advertisercommunity.com, DNS:en.advertisercommunity.com, DNS:*.en.advertisercommunity.com, DNS:es.advertisercommunity.com, DNS:*.es.advertisercommunity.com, DNS:fr.advertisercommunity.com, DNS:*.fr.advertisercommunity.com, DNS:id.advertisercommunity.com, DNS:*.id.advertisercommunity.com, DNS:it.advertisercommunity.com, DNS:*.it.advertisercommunity.com, DNS:ja.advertisercommunity.com, DNS:*.ja.advertisercommunity.com, DNS:pl.advertisercommunity.com, DNS:*.pl.advertisercommunity.com, DNS:pt.advertisercommunity.com, DNS:*.pt.advertisercommunity.com, DNS:ru.advertisercommunity.com, DNS:*.ru.advertisercommunity.com, DNS:th.advertisercommunity.com, DNS:*.th.advertisercommunity.com, DNS:vi.advertisercommunity.com, DNS:*.vi.advertisercommunity.com, DNS:zh.advertisercommunity.com, DNS:*.zh.advertisercommunity.com, DNS:ampcache.com, DNS:*.ampcache.com, DNS:ampproject.com, DNS:*.ampproject.com, DNS:ampproject.net, DNS:*.ampproject.net, DNS:*.recaptcha.ampproject.net, DNS:ampproject.org, DNS:*.ampproject.org, DNS:*.cdn.ampproject.org, DNS:androidify.com, DNS:*.androidify.com, DNS:app.goo.gl, DNS:*.app.goo.gl, DNS:channel-app.google, DNS:console.au.cloud.google, DNS:*.au.cloud.google, DNS:console.ca.cloud.google, DNS:*.ca.cloud.google, DNS:console.eu.cloud.google, DNS:*.eu.cloud.google, DNS:console.eu.cloud.google.com, DNS:console.il.cloud.google, DNS:*.il.cloud.google, DNS:console.in.cloud.google, DNS:*.in.cloud.google, DNS:console.it.cloud.google, DNS:*.it.cloud.google, DNS:console.jp.cloud.google, DNS:*.jp.cloud.google, DNS:console.sa.cloud.google, DNS:*.sa.cloud.google, DNS:console.uk.cloud.google, DNS:*.uk.cloud.google, DNS:console.us.cloud.google, DNS:*.us.cloud.google, DNS:cloud.google, DNS:*.cloud.google, DNS:colab.research.google.com, DNS:code.webrtc.org, DNS:bugs.webrtc.org, DNS:issues.webrtc.org, DNS:*.issues.webrtc.org, DNS:chronicle.security, DNS:*.chronicle.security, DNS:*.backstory.chronicle.security, DNS:*.backstory-staging.chronicle.security, DNS:chronicleforgood.com, DNS:*.chronicleforgood.com, DNS:looker.chronicle.security, DNS:*.looker.chronicle.security, DNS:looker-staging.chronicle.security, DNS:*.looker-staging.chronicle.security, DNS:chroniclesec.com, DNS:*.chroniclesec.com, DNS:*.backstory.chroniclesec.com, DNS:crossmediapanel.com, DNS:*.crossmediapanel.com, DNS:crowdcalling.google, DNS:dataliberation.org, DNS:*.dataliberation.org, DNS:datasetsearch.research.google.com, DNS:dg-meta.video.google.com, DNS:digitalassetlinks.org, DNS:*.digitalassetlinks.org, DNS:discover.google.com, DNS:*.discover.google.com, DNS:domains.google, DNS:*.domains.google, DNS:earlydays.google, DNS:*.earlydays.google, DNS:engineering.google, DNS:*.engineering.google, DNS:fastlane.ci, DNS:firebase.new, DNS:www.firebase.new, DNS:floonet.goog, DNS:*.floonet.goog, DNS:gapi.waze.com, DNS:gmbads.gle, DNS:*.gmbads.gle, DNS:go-lang.com, DNS:*.go-lang.com, DNS:go-lang.net, DNS:*.go-lang.net, DNS:go-lang.org, DNS:*.go-lang.org, DNS:golang.com, DNS:*.golang.com, DNS:golang.net, DNS:*.golang.net, DNS:golang.org, DNS:*.golang.org, DNS:golang.google.cn, DNS:*.golang.google.cn, DNS:googleblog.com, DNS:*.googleblog.com, DNS:googlecert.net, DNS:*.googlecert.net, DNS:googlestore.com, DNS:www.googlestore.com, DNS:grow.google, DNS:*.grow.google, DNS:g.dev, DNS:*.g.dev, DNS:g.page, DNS:*.g.page, DNS:hey.gle, DNS:*.hey.gle, DNS:ok.gle, DNS:*.ok.gle, DNS:hats.goog, DNS:*.hats.goog, DNS:iamremarkable.org, DNS:www.iamremarkable.org, DNS:identityplatform.google, DNS:*.identityplatform.google, DNS:*.global.identityplatform.google, DNS:*.staging-global.identityplatform.google, DNS:*.staging-qual-global.identityplatform.google, DNS:*.autopush-global.identityplatform.google, DNS:*.autopush-qual-global.identityplatform.google, DNS:lanternal.com, DNS:*.lanternal.com, DNS:lers.google, DNS:nel.goog, DNS:*.nel.goog, DNS:nomulus.foo, DNS:*.nomulus.foo, DNS:notebooklm.google, DNS:ordering.page, DNS:*.ordering.page, DNS:macservice.goog, DNS:*.macservice.goog, DNS:makersuite.google, DNS:*.makersuite.google, DNS:pagespeed.web.dev, DNS:payment.goog, DNS:*.payment.goog, DNS:picasaweb.com, DNS:*.picasaweb.com, DNS:picasaweb.net, DNS:*.picasaweb.net, DNS:picasaweb.org, DNS:*.picasaweb.org, DNS:pixate.com, DNS:www.pixate.com, DNS:pki.goog, DNS:*.pki.goog, DNS:play.space, DNS:*.play.space, DNS:privacysandbox.google.com, DNS:*.privacysandbox.google.com, DNS:projectgomie.google, DNS:*.projectgomie.google, DNS:qr.google, DNS:*.qr.google, DNS:rbm.goog, DNS:*.rbm.goog, DNS:registry-qa.google, DNS:www.registry-qa.google, DNS:registry-sandbox.google, DNS:www.registry-sandbox.google, DNS:registry.google, DNS:www.registry.google, DNS:research.youtube, DNS:*.research.youtube, DNS:savethedate.foo, DNS:*.savethedate.foo, DNS:songwriters.youtube, DNS:*.songwriters.youtube, DNS:source.bazel.build, DNS:*.source.bazel.build, DNS:support.registry-qa.google, DNS:support.registry-sandbox.google, DNS:support.registry.google, DNS:sprayscape.com, DNS:www.sprayscape.com, DNS:tfhub.dev, DNS:*.tfhub.dev, DNS:thegooglestore.com, DNS:www.thegooglestore.com, DNS:tiltbrush.com, DNS:*.tiltbrush.com, DNS:travel.google, DNS:*.travel.google, DNS:webmproject.org, DNS:*.webmproject.org, DNS:issues.webmproject.org, DNS:*.issues.webmproject.org, DNS:webpkgcache.com, DNS:*.webpkgcache.com, DNS:workinxr.dev, DNS:*.workinxr.dev, DNS:xplr.co, DNS:*.xplr.co, DNS:zynamics.com, DNS:*.zynamics.com, DNS:app-ads-services.com, DNS:*.app-ads-services.com
Organization: N/A
Validity: Sep 11, 2026 to Dec 04, 2026
Algorithm: RSA-SHA256

↓ Intermediate CA Certificate ↓

Common Name: WR2
Organization: Google Trust Services
Valid Till: Feb 20, 2029
Issuer: GTS Root R1

↓ Intermediate CA Certificate ↓

Common Name: GTS Root R1
Organization: Google Trust Services LLC
Valid Till: Jan 28, 2028
Issuer: GlobalSign Root CA

Website & Server Intelligence for mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org

Website Identity

Title	N/A
Meta Description	N/A

Hosting & Server Network

IP Address	cdn-content.ampproject.org.
HTTP Status	N/A i
Hosting Provider	N/A i
Web Server	N/A i
Control Panel	Not Detected i

Technology Profile

No specific third-party frameworks or CMS fingerprints detected.

HTTP Security Headers

Could not fetch HTTP headers.

Understanding Diagnostic Terms for mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org

Domain Status (EPP)

EPP status codes (e.g., clientTransferProhibited, active) indicating if a domain is locked against unauthorized transfer, pending renewal, or active.

Registrar Information

The authorized or accredited organization managing the domain reservation and authoritative registry delegation.

Nameservers (NS)

Authoritative servers that translate domain names into IP addresses and direct web visitors and mail traffic globally.

A & AAAA Records

Primary address records mapping your domain name directly to standard IPv4 (e.g., 192.0.2.1) and newer IPv6 server network addresses.

MX (Mail Exchange)

Priority-ranked records pointing inbound emails to designated mail server hosts (e.g., Google Workspace, Microsoft 365, Zoho).

SPF & DMARC Security

Email authentication standards that verify authorized sender IPs (SPF) and instruct receiving servers how to enforce security policies (DMARC).

DKIM Signatures

Cryptographic public key in DNS used by receiving mail servers to verify digital signatures on your emails, ensuring messages were not tampered with.

SSL Certificate & Chain

Establishes encrypted HTTPS connections and authenticates domain ownership via an intermediate certificate authority chain.

Hosting Provider & ASN

The physical server infrastructure where website files reside and the autonomous system network (ASN) routing global traffic.

Reverse DNS (PTR)

Pointer (PTR) records that map a server's IP address back to its canonical hostname, verifying server identity and preventing email spam rejection.

HTTP Security Headers

Directives like HSTS, CSP, and X-Frame-Options instructed by the server to protect browser visitors against XSS, clickjacking, and packet sniffing.

⚠️ Report Limitations & Data Sources

Data Currency: This report uses cached registry and DNS data (freshened within 4 hours) for high-speed resolution. Click "🔄 Refresh Live" to query directly against authoritative registries.
DNS Resolution & Propagation: Records are queried via Google Public DNS-over-HTTPS. Global DNS propagation may take up to 24–48 hours across different regional ISP resolvers during recent DNS record changes.
Completeness & Scope: This diagnostic tool analyzes standard authoritative records (A, AAAA, MX, NS, TXT, CNAME, SOA). It does not perform invasive brute-force subdomain scans or unauthenticated DNS zone transfers.
Email Deliverability & Reputation: The security analysis (SPF, DKIM, DMARC, and Port 25 SMTP handshake) reflects public DNS policies and inbound connection states. Recipient spam filters evaluate internal headers that cannot be checked from outside.
Reverse Proxies & CDNs: If a website is behind Cloudflare, Fastly, or another CDN/reverse proxy, the detected IP, web server software, and SSL edge certificate reflect the proxy tier.

Domain Overview: mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org

🌐 Domain & Registration Identity View Full Whois Details →

🛡️ Email Security & Deliverability (SPF, DKIM, DMARC) View Complete Email Security Diagnostics →

🖥️ Web Server, Hosting & Network View Full Server & Tech Details →

🔒 SSL/TLS Certificate Summary View Full SSL Certificate & Chain →

Whois Ownership & Registration for mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org

Domain Information i

Registrar Information i

Registrant Contact i

Administrative Contact i

Technical Contact i

Nameservers i

DNS Records for mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org

NS Records i

A Records i

AAAA Records i

WWW Records (www.mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org) i

MX Records i

TXT Records i

Email Security (MX, SPF, DKIM, DMARC, SMTP) for mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org

Mail Exchange (MX) Routing Records i

SPF Record Validation i

Common DKIM Selectors i

🔍 Query Custom DKIM Selector

DMARC Policy Validation i

Validation Summary

Optimization Suggestions

SMTP Connectivity Test (Port 25)

SSL/TLS Certificate Details for mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org

🔒 SSL / TLS Protocol Support

TLS protocol versions

SSL protocol versions

Main Leaf Certificate

Website & Server Intelligence for mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org

Website Identity

Hosting & Server Network

Technology Profile

HTTP Security Headers

IP Details & Geolocation

Understanding Diagnostic Terms for mg7k3eci7a6heelrae5ntzox6dzq64wb3werycaawuc33owydiea.cdn.ampproject.org

Domain Status (EPP)

Registrar Information

Nameservers (NS)

A & AAAA Records

MX (Mail Exchange)

SPF & DMARC Security

DKIM Signatures

SSL Certificate & Chain

Hosting Provider & ASN

Reverse DNS (PTR)

HTTP Security Headers

⚠️ Report Limitations & Data Sources