Email Security Check for skitterphoto.com – SPF, DKIM, DMARC & SMTP

⚡ Live Data: Report generated fresh from authoritative registries. 🔄 Force Refresh

🤖 AI Intelligence Summary

The domain skitterphoto.com is registered with Tucows Domains Inc., first registered on 2014-03-30 and expires on 2027-03-30 (domain age: 12 years, 5 months). It resolves to IP address 178.162.201.225, hosted by Leaseweb Deutschland GmbH. Email delivery is handled by Self-hosted or Custom. No valid SPF record was detected. DMARC policy is published. Web traffic is secured with an SSL certificate issued by YR1.

Domain Overview: skitterphoto.com

Domain Registration 🌐

Active 12 years, 5 months

Expires in 6 months, 1 day · DNSSEC: Unsigned

Email Security 🛡️

SPF: Missing DKIM: Not Detected DMARC: None

Self-hosted or Custom (4 MX)

SSL Certificate 🔒

Valid Chain 69 Days Left

Issuer: YR1 (2 SANs)

Server & Hosting 🖥️

200 nginx

Frankfurt am Main (Innenstadt I), Hesse, Germany (DE)

🌐 Domain & Registration Identity View Full Whois Details →

Domain	skitterphoto.com
Website Title	Skitterphoto: a place to find, show and share public domain images.
Registered	2014-03-30
Expires	2027-03-30
Remaining Validity	6 months, 1 day
Domain Age	12 years, 5 months
Registrar	Tucows Domains Inc.
Domain Status	client transfer prohibited, client update prohibited i
DNSSEC Delegation	Unsigned · Zone not signed with DNSSEC keys i
Authoritative Nameservers	`ns02.hostnet.nl, ns01.hostnet.nl` i

🛡️ Email Security & Deliverability (SPF, DKIM, DMARC) View Complete Email Security Diagnostics →

Detected Email Provider	📬 Self-hosted or Custom
Primary Mail Server (MX)	`mx3.mailpod13-cph3.g1i.hostnet.nl (Priority: 10)` · 4 MX servers configured i
SPF Record (Sender Policy)	Missing i
DKIM Authentication	Not Detected · (No common third-party selector found; custom keys may be configured) i
DMARC Policy	Warning (Monitoring None) i `v=DMARC1; p=none`
SMTP Port 25 Status	Online (868ms) · Inbound mail server handshake response

🖥️ Web Server, Hosting & Network View Full Server & Tech Details →

Web Server Software	nginx i
HTTP Status Code	200 i
Server IP (IPv4)	178.162.201.225 View Geo Details →
IPv6 Address (AAAA)	`Not Configured`
Reverse DNS (PTR)	`opal11.opalstack.com`
Server Location	📍 Frankfurt am Main (Innenstadt I), Hesse, Germany (DE)
ASN Network & ISP	`AS28753 (Leaseweb Deutschland GmbH)`
Hosting Provider	Leaseweb Deutschland GmbH i
Control Panel	Not Detected i
Technology Stack	Nginx Google Analytics
HTTP Security Headers	None Detected (Missing HSTS / CSP) Audit Details →
DNSBL Blacklist Reputation	Clean (0/5 lists)

🔒 SSL/TLS Certificate Summary View Full SSL Certificate & Chain →

Primary Hostname (CN)	skitterphoto.com · Multi-Domain SAN (Covers 2 hostnames)
SSL Issuer	YR1
SSL Valid Till	2026-12-06
Remaining Validity	69 Days
Chain Status	Valid Trusted Chain
Signature Algorithm	`RSA-SHA256`

Whois Ownership & Registration for skitterphoto.com

📄 View Raw Registry Response ↓

Domain Information i

Domain Name	SKITTERPHOTO.COM
Registration Date	2014-03-30 20:35:37 Z
Expiration Date	2027-03-30 20:35:37 Z
Last Changed Date	2026-03-01 04:58:13 Z

Domain Status i

client transfer prohibited
client update prohibited

Registrar Information i

Name	Tucows Domains Inc.
Abuse Email	domainabuse@tucows.com

Registrant Contact i

Contact information for this role is not provided by the registry.

Administrative Contact i

Contact information for this role is not provided by the registry.

Technical Contact i

Contact information for this role is not provided by the registry.

Nameservers i

NS01.HOSTNET.NL
NS02.HOSTNET.NL

📄 View Raw Registry Response RDAP (Hybrid)

{
    "objectClassName": "domain",
    "handle": "1852670318_DOMAIN_COM-VRSN",
    "ldhName": "SKITTERPHOTO.COM",
    "links": [
        {
            "value": "https://rdap.verisign.com/com/v1/domain/skitterphoto.com",
            "rel": "self",
            "href": "https://rdap.verisign.com/com/v1/domain/skitterphoto.com",
            "type": "application/rdap+json"
        },
        {
            "value": "https://rdap.verisign.com/com/v1/domain/skitterphoto.com",
            "rel": "related",
            "href": "https://opensrs.rdap.tucows.com/domain/SKITTERPHOTO.COM",
            "type": "application/rdap+json"
        }
    ],
    "status": [
        "client transfer prohibited",
        "client update prohibited"
    ],
    "entities": [
        {
            "objectClassName": "entity",
            "handle": "69",
            "roles": [
                "registrar"
            ],
            "links": [
                {
                    "href": "http://www.tucows.com",
                    "type": "text/html",
                    "value": "https://opensrs.rdap.tucows.com/",
                    "rel": "about"
                }
            ],
            "publicIds": [
                {
                    "type": "IANA Registrar ID",
                    "identifier": "69"
                }
            ],
            "vcardArray": [
                "vcard",
                [
                    [
                        "version",
                        [],
                        "text",
                        "4.0"
                    ],
                    [
                        "fn",
                        [],
                        "text",
                        "Tucows Domains Inc."
                    ]
                ]
            ],
            "entities": [
                {
                    "objectClassName": "entity",
                    "roles": [
                        "abuse"
                    ],
                    "vcardArray": [
                        "vcard",
                        [
                            [
                                "version",
                                [],
                                "text",
                                "4.0"
                            ],
                            [
                                "fn",
                                [],
                                "text",
                                ""
                            ],
                            [
                                "tel",
                                {
                                    "type": "voice"
                                },
                                "uri",
                                "tel:+1.4165350123"
                            ],
                            [
                                "email",
                                [],
                                "text",
                                "domainabuse@tucows.com"
                            ]
                        ]
                    ]
                }
            ]
        }
    ],
    "events": [
        {
            "eventAction": "registration",
            "eventDate": "2014-03-30T20:35:37Z"
        },
        {
            "eventAction": "expiration",
            "eventDate": "2027-03-30T20:35:37Z"
        },
        {
            "eventAction": "last changed",
            "eventDate": "2026-03-01T04:58:13Z"
        },
        {
            "eventAction": "last update of RDAP database",
            "eventDate": "2026-09-28T01:41:58Z"
        }
    ],
    "secureDNS": {
        "delegationSigned": false
    },
    "nameservers": [
        {
            "objectClassName": "nameserver",
            "ldhName": "NS01.HOSTNET.NL"
        },
        {
            "objectClassName": "nameserver",
            "ldhName": "NS02.HOSTNET.NL"
        }
    ],
    "rdapConformance": [
        "rdap_level_0",
        "icann_rdap_technical_implementation_guide_1",
        "icann_rdap_response_profile_1"
    ],
    "notices": [
        {
            "title": "Terms of Service",
            "description": [
                "Service subject to Terms of Use."
            ],
            "links": [
                {
                    "href": "https://www.verisign.com/domain-names/registration-data-access-protocol/terms-service/index.xhtml",
                    "type": "text/html",
                    "value": "https://rdap.verisign.com/com/v1/domain/skitterphoto.com",
                    "rel": "terms-of-service"
                }
            ]
        },
        {
            "title": "Status Codes",
            "description": [
                "For more information on domain status codes, please visit https://icann.org/epp"
            ],
            "links": [
                {
                    "href": "https://icann.org/epp",
                    "type": "text/html",
                    "value": "https://rdap.verisign.com/com/v1/domain/skitterphoto.com",
                    "rel": "glossary"
                }
            ]
        },
        {
            "title": "RDDS Inaccuracy Complaint Form",
            "description": [
                "URL of the ICANN RDDS Inaccuracy Complaint Form: https://icann.org/wicf"
            ],
            "links": [
                {
                    "href": "https://icann.org/wicf",
                    "type": "text/html",
                    "value": "https://rdap.verisign.com/com/v1/domain/skitterphoto.com",
                    "rel": "help"
                }
            ]
        }
    ]
}

DNS Records for skitterphoto.com

NS Records i

Name	Data	Copy
skitterphoto.com.	`ns02.hostnet.nl.`
skitterphoto.com.	`ns01.hostnet.nl.`

A Records i

Name	Data	Copy
skitterphoto.com.	`178.162.201.225`

AAAA Records i

No AAAA records found.

WWW Records (www.skitterphoto.com) i

Type	Host	Value	Copy
A	www.skitterphoto.com.	`178.162.201.225`

MX Records i

Priority	Mail Server Target	Copy
10	`mx3.mailpod13-cph3.g1i.hostnet.nl.`
10	`mx4.mailpod13-cph3.g1i.hostnet.nl.`
10	`mx1.mailpod13-cph3.g1i.hostnet.nl.`
10	`mx2.mailpod13-cph3.g1i.hostnet.nl.`

TXT Records i

Name	Value	Copy
skitterphoto.com.	`google-site-verification=iBoLcglL_PY3wn8J5XlqKRZjessls1ezb2NzRnk8ST8`

Email Security (MX, SPF, DKIM, DMARC, SMTP) for skitterphoto.com

Detected Email Provider

📬 Self-hosted or Custom

✓ Active MX Routing (4 Servers)

Mail Exchange (MX) Routing Records i

Priority	Mail Server Hostname	Copy
10	`mx3.mailpod13-cph3.g1i.hostnet.nl`
10	`mx4.mailpod13-cph3.g1i.hostnet.nl`
10	`mx1.mailpod13-cph3.g1i.hostnet.nl`
10	`mx2.mailpod13-cph3.g1i.hostnet.nl`

SPF Record Validation i

No SPF record found to validate.

Common DKIM Selectors i

No common third-party DKIM selectors found. Custom selectors may be configured.

🔍 Query Custom DKIM Selector

Live DNS Lookup

Using a custom or date-based selector (e.g. crm, newsletter, 2024)? Query its public key live on skitterphoto.com:

DMARC Policy Validation i

v=DMARC1; p=none

Tag Breakdown

Tag	Value	Description
`v`	DMARC1	Version: Must be "DMARC1".
`p`	none	Policy: The action to take for failed emails (none, quarantine, reject).

Validation Summary

DMARC Record Published	Pass A DMARC record was found.
Syntax Check	Pass The record has a valid version tag.
Policy Enforcement	Warning The policy is "p=none", which is for monitoring only and does not protect against spoofing.
Aggregate Reporting	Warning No "rua" tag was found. You will not receive summary reports.

Optimization Suggestions

After monitoring your aggregate reports to ensure legitimate email sources are aligned, you should move to a "p=quarantine" or "p=reject" policy to protect your domain.

It is highly recommended to add an "rua" tag (e.g., "rua=mailto:dmarc-reports@yourdomain.com") to monitor email traffic and ensure legitimate emails are not failing checks.

SMTP Connectivity Test (Port 25)

Mail Server	Status	Latency	Banner / Handshake Response
mx3.mailpod13-cph3.g1i.hostnet.nl	Success	868ms	`220 mx3.pub.mailpod13-cph3.one.com ESMTP`

Server IP Blacklist Check (178.162.201.225)

Spamhaus ZEN: Clean

SpamCop: Clean

Barracuda: Clean

GBUdb Truncate: Clean

DroneBL: Clean

SSL/TLS Certificate Details for skitterphoto.com

Issuer: YR1
Expires In: 69 Days
Chain Status: Valid Chain

🔒 SSL / TLS Protocol Support

Good

TLS protocol versions

TLS 1.3	Disabled
TLS 1.2	Enabled
TLS 1.1 (deprecated)	Disabled
TLS 1.0 (deprecated)	Disabled

SSL protocol versions

SSLv3 (deprecated)	Disabled
SSLv2 (deprecated)	Disabled

Main Leaf Certificate

Common Name: skitterphoto.com
SANs: DNS:skitterphoto.com, DNS:www.skitterphoto.com
Organization: N/A
Validity: Sep 07, 2026 to Dec 06, 2026
Algorithm: RSA-SHA256

↓ Intermediate CA Certificate ↓

Common Name: YR1
Organization: Let's Encrypt
Valid Till: Sep 03, 2028
Issuer: Root YR

↓ Intermediate CA Certificate ↓

Common Name: Root YR
Organization: ISRG
Valid Till: Sep 03, 2032
Issuer: ISRG Root X1

Website & Server Intelligence for skitterphoto.com

Website Identity

Title	Skitterphoto: a place to find, show and share public domain images.
Meta Description	Visit Skitterphoto to download free photos. No payment, no login required. Do you take pictures? Join us and start uploading your public domain photos today.

Hosting & Server Network

IP Address	178.162.201.225
HTTP Status	200 i
Hosting Provider	Leaseweb Deutschland GmbH i
Web Server	nginx i
Control Panel	Not Detected i

Technology Profile

Nginx
Google Analytics

HTTP Security Headers

Strict-Transport-Security	Missing
Content-Security-Policy	Missing
X-Frame-Options	Missing
X-Content-Type-Options	Missing
Referrer-Policy	Missing
Permissions-Policy	Missing

IP Details & Geolocation

IP Address	178.162.201.225
Reverse DNS (PTR)	`opal11.opalstack.com`
Country	Germany (DE)
Region	Hesse
City	Frankfurt am Main (Innenstadt I)
ZIP Code	N/A
ASN	28753
Organization / ISP	Leaseweb Deutschland GmbH

Understanding Diagnostic Terms for skitterphoto.com

Domain Status (EPP)

EPP status codes (e.g., clientTransferProhibited, active) indicating if a domain is locked against unauthorized transfer, pending renewal, or active.

Registrar Information

The authorized or accredited organization managing the domain reservation and authoritative registry delegation.

Nameservers (NS)

Authoritative servers that translate domain names into IP addresses and direct web visitors and mail traffic globally.

A & AAAA Records

Primary address records mapping your domain name directly to standard IPv4 (e.g., 192.0.2.1) and newer IPv6 server network addresses.

MX (Mail Exchange)

Priority-ranked records pointing inbound emails to designated mail server hosts (e.g., Google Workspace, Microsoft 365, Zoho).

SPF & DMARC Security

Email authentication standards that verify authorized sender IPs (SPF) and instruct receiving servers how to enforce security policies (DMARC).

DKIM Signatures

Cryptographic public key in DNS used by receiving mail servers to verify digital signatures on your emails, ensuring messages were not tampered with.

SSL Certificate & Chain

Establishes encrypted HTTPS connections and authenticates domain ownership via an intermediate certificate authority chain.

Hosting Provider & ASN

The physical server infrastructure where website files reside and the autonomous system network (ASN) routing global traffic.

Reverse DNS (PTR)

Pointer (PTR) records that map a server's IP address back to its canonical hostname, verifying server identity and preventing email spam rejection.

HTTP Security Headers

Directives like HSTS, CSP, and X-Frame-Options instructed by the server to protect browser visitors against XSS, clickjacking, and packet sniffing.

⚠️ Report Limitations & Data Sources

Data Currency: This report uses cached registry and DNS data (freshened within 4 hours) for high-speed resolution. Click "🔄 Refresh Live" to query directly against authoritative registries.
DNS Resolution & Propagation: Records are queried via Google Public DNS-over-HTTPS. Global DNS propagation may take up to 24–48 hours across different regional ISP resolvers during recent DNS record changes.
Completeness & Scope: This diagnostic tool analyzes standard authoritative records (A, AAAA, MX, NS, TXT, CNAME, SOA). It does not perform invasive brute-force subdomain scans or unauthenticated DNS zone transfers.
Email Deliverability & Reputation: The security analysis (SPF, DKIM, DMARC, and Port 25 SMTP handshake) reflects public DNS policies and inbound connection states. Recipient spam filters evaluate internal headers that cannot be checked from outside.
Reverse Proxies & CDNs: If a website is behind Cloudflare, Fastly, or another CDN/reverse proxy, the detected IP, web server software, and SSL edge certificate reflect the proxy tier.