Initializing diagnostics...

⚡ Live Data: Report generated fresh from authoritative registries. 🔄 Force Refresh
🤖 AI Intelligence Summary

The domain fascinito.com is registered with PDR Ltd. d/b/a PublicDomainRegistry.com, first registered on 2023-01-23 and expires on 2027-01-23 (domain age: 3 years, 8 months). It resolves to IP address 23.227.38.65, hosted by Cloudflare, Inc.. Email delivery is handled by Self-hosted or Custom. SPF authentication is published and valid. DMARC policy is published. Web traffic is secured with an SSL certificate issued by YE1.

Domain Overview: fascinito.com

Domain Registration 🌐
Active 3 years, 8 months

Expires in 3 months, 28 days · DNSSEC: Unsigned

Email Security 🛡️
SPF: Pass DKIM: Not Detected DMARC: None

Self-hosted or Custom (2 MX)

SSL Certificate 🔒
Valid Chain 64 Days Left

Issuer: YE1 (1 SANs)

Server & Hosting 🖥️
200 cloudflare

Toronto, Ontario, Canada (CA)

🌐 Domain & Registration Identity View Full Whois Details →

Domainfascinito.com
Website TitleFavicon Baby Clothes India for Boys & Girls – Fascinito
Registered2023-01-23
Expires2027-01-23
Remaining Validity3 months, 28 days
Domain Age3 years, 8 months
RegistrarPDR Ltd. d/b/a PublicDomainRegistry.com
Domain Statusclient transfer prohibited i
DNSSEC Delegation Unsigned · Zone not signed with DNSSEC keys i
Authoritative Nameservers apollo.dns-parking.com, athena.dns-parking.com i

🛡️ Email Security & Deliverability (SPF, DKIM, DMARC) View Complete Email Security Diagnostics →

Detected Email Provider 📬 Self-hosted or Custom
Primary Mail Server (MX) mx1.hostinger.com (Priority: 5) · 2 MX servers configured i
SPF Record (Sender Policy) Pass · 1/10 DNS Lookups · Policy: ~all i
v=spf1 include:_spf.mail.hostinger.com ~all
DKIM Authentication Not Detected · (No common third-party selector found; custom keys may be configured) i
DMARC Policy Warning (Monitoring None) i
v=DMARC1; p=none
SMTP Port 25 Status Online (8ms) · Inbound mail server handshake response

🖥️ Web Server, Hosting & Network View Full Server & Tech Details →

Web Server Software cloudflare i
HTTP Status Code 200 i
Server IP (IPv4) 23.227.38.65 View Geo Details →
IPv6 Address (AAAA) 2620:127:f00f:5::
Reverse DNS (PTR) myshopify.com
Server Location 📍 Toronto, Ontario, Canada (CA)
ASN Network & ISP AS13335 (Cloudflare, Inc.)
Hosting Provider Cloudflare, Inc. i
Control Panel Not Detected i
Technology Stack Cloudflare Shopify Vue.js jQuery Bootstrap Google Fonts Google Analytics Google Tag Manager
HTTP Security Headers 4 / 6 Active (HSTS, CSP, X-Frame, X-Content) Audit Details →
DNSBL Blacklist Reputation Clean (0/5 lists)

🔒 SSL/TLS Certificate Summary View Full SSL Certificate & Chain →

Primary Hostname (CN) fascinito.com · Multi-Domain SAN (Covers 1 hostnames)
SSL IssuerYE1
SSL Valid Till2026-11-29
Remaining Validity64 Days
Chain Status Valid Trusted Chain
Signature Algorithmecdsa-with-SHA384

Whois Ownership & Registration for fascinito.com

📄 View Raw Registry Response ↓

Domain Information i

Domain NameFASCINITO.COM
Registration Date2023-01-23 09:26:04 Z
Expiration Date2027-01-23 09:26:04 Z
Last Changed Date2026-01-03 09:34:03 Z

Domain Status i

  • client transfer prohibited

Registrar Information i

NamePDR Ltd. d/b/a PublicDomainRegistry.com
Abuse Emailabuse-contact@publicdomainregistry.com

Registrant Contact i

Contact information for this role is not provided or redacted.

Administrative Contact i

Contact information for this role is not provided or redacted.

Technical Contact i

Contact information for this role is not provided or redacted.

Nameservers i

  • APOLLO.DNS-PARKING.COM
  • ATHENA.DNS-PARKING.COM
📄 View Raw Registry Response RDAP (Hybrid)
Domain Name: FASCINITO.COM
   Registry Domain ID: 2753229079_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.PublicDomainRegistry.com
   Registrar URL: http://www.publicdomainregistry.com
   Updated Date: 2026-01-03T09:34:03Z
   Creation Date: 2023-01-23T09:26:04Z
   Registry Expiry Date: 2027-01-23T09:26:04Z
   Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
   Registrar IANA ID: 303
   Registrar Abuse Contact Email: abuse-contact@publicdomainregistry.com
   Registrar Abuse Contact Phone: +1.2013775952
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Name Server: APOLLO.DNS-PARKING.COM
   Name Server: ATHENA.DNS-PARKING.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2026-09-25T16:00:35Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

DNS Records for fascinito.com

NS Records i

NameDataCopy
fascinito.com. apollo.dns-parking.com.
fascinito.com. athena.dns-parking.com.

A Records i

NameDataCopy
fascinito.com. 23.227.38.65

AAAA Records i

NameDataCopy
fascinito.com. 2620:127:f00f:5::

WWW Records (www.fascinito.com) i

TypeHostValueCopy
CNAME www.fascinito.com. shops.myshopify.com.
A www.fascinito.com. shops.myshopify.com.
A shops.myshopify.com. 23.227.38.74

MX Records i

PriorityMail Server TargetCopy
5 mx1.hostinger.com.
10 mx2.hostinger.com.

TXT Records i

NameValueCopy
fascinito.com. v=spf1 include:_spf.mail.hostinger.com ~all
fascinito.com. google-site-verification=Dmc0CelufjHexDdf1VNvmHeZ84FH7vTclKl9TqNClVE

Email Security (MX, SPF, DKIM, DMARC, SMTP) for fascinito.com

Detected Email Provider
📬 Self-hosted or Custom
✓ Active MX Routing (2 Servers)

Mail Exchange (MX) Routing Records i

Priority Mail Server Hostname Copy
5 mx1.hostinger.com
10 mx2.hostinger.com

SPF Record Validation i

v=spf1 include:_spf.mail.hostinger.com ~all

Record Breakdown

PrefixMechanismValueDescription
+ v spf1 The SPF record version.
+ include _spf.mail.hostinger.com The specified domain is searched for a match.
~ all Always matches. This should be the last mechanism.

Validation Summary

SPF Record Published Pass An SPF record was found.
Multiple SPF Records Pass Only one SPF record was found.
Included Lookups Pass The number of DNS lookups (1) is within the limit of 10.
Type PTR Check Pass The deprecated PTR mechanism was not found.
Characters After ALL Pass No mechanisms were found after the "all" mechanism.

Common DKIM Selectors i

No common third-party DKIM selectors found. Custom selectors may be configured.

🔍 Query Custom DKIM Selector

Live DNS Lookup

Using a custom or date-based selector (e.g. crm, newsletter, 2024)? Query its public key live on fascinito.com:

DMARC Policy Validation i

v=DMARC1; p=none

Tag Breakdown

TagValueDescription
v DMARC1 Version: Must be "DMARC1".
p none Policy: The action to take for failed emails (none, quarantine, reject).

Validation Summary

DMARC Record Published Pass A DMARC record was found.
Syntax Check Pass The record has a valid version tag.
Policy Enforcement Warning The policy is "p=none", which is for monitoring only and does not protect against spoofing.
Aggregate Reporting Warning No "rua" tag was found. You will not receive summary reports.

Optimization Suggestions

After monitoring your aggregate reports to ensure legitimate email sources are aligned, you should move to a "p=quarantine" or "p=reject" policy to protect your domain.

It is highly recommended to add an "rua" tag (e.g., "rua=mailto:dmarc-reports@yourdomain.com") to monitor email traffic and ensure legitimate emails are not failing checks.

SMTP Connectivity Test (Port 25)

Mail ServerStatusLatencyBanner / Handshake Response
mx1.hostinger.com Success 8ms 220-ESMTP mx.hostinger.com

Server IP Blacklist Check (23.227.38.65)

  • Spamhaus ZEN: Clean
  • SpamCop: Clean
  • Barracuda: Clean
  • GBUdb Truncate: Clean
  • DroneBL: Clean
  • SSL/TLS Certificate Details for fascinito.com

    • Issuer: YE1
    • Expires In: 64 Days
    • Chain Status: Valid Chain

    🔒 SSL / TLS Protocol Support

    Excellent
    TLS protocol versions
    TLS 1.3 Enabled
    TLS 1.2 Enabled
    TLS 1.1 (deprecated) Disabled
    TLS 1.0 (deprecated) Disabled
    SSL protocol versions
    SSLv3 (deprecated) Disabled
    SSLv2 (deprecated) Disabled

    Main Leaf Certificate

    • Common Name: fascinito.com
    • SANs: DNS:fascinito.com
    • Organization: N/A
    • Validity: Aug 31, 2026 to Nov 29, 2026
    • Algorithm: ecdsa-with-SHA384
    ↓ Intermediate CA Certificate ↓
    • Common Name: YE1
    • Organization: Let's Encrypt
    • Valid Till: Sep 03, 2028
    • Issuer: Root YE
    ↓ Intermediate CA Certificate ↓
    • Common Name: Root YE
    • Organization: ISRG
    • Valid Till: Sep 03, 2032
    • Issuer: ISRG Root X2
    ↓ Intermediate CA Certificate ↓
    • Common Name: ISRG Root X2
    • Organization: Internet Security Research Group
    • Valid Till: Sep 03, 2032
    • Issuer: ISRG Root X1

    Website & Server Intelligence for fascinito.com

    Website Identity

    TitleFavicon Baby Clothes India for Boys & Girls – Fascinito
    Meta DescriptionShop baby clothes online in India for newborns, boys, girls, and toddlers. Soft cotton outfits, party wear, and gifting sets from Fascinito.

    Hosting & Server Network

    IP Address23.227.38.65
    HTTP Status200 i
    Hosting ProviderCloudflare, Inc. i
    Web Servercloudflare i
    Control Panel Not Detected i

    Technology Profile

    • Cloudflare
    • Shopify
    • Vue.js
    • jQuery
    • Bootstrap
    • Google Fonts
    • Google Analytics
    • Google Tag Manager

    HTTP Security Headers

    Strict-Transport-Security Present
    Content-Security-Policy Present
    X-Frame-Options Present
    X-Content-Type-Options Present
    Referrer-Policy Missing
    Permissions-Policy Missing

    IP Details & Geolocation

    IP Address 23.227.38.65
    Reverse DNS (PTR) myshopify.com
    CountryCanada (CA)
    RegionOntario
    CityToronto
    ZIP CodeN/A
    ASN13335
    Organization / ISPCloudflare, Inc.

    Understanding Diagnostic Terms for fascinito.com

    Domain Status (EPP)

    EPP status codes (e.g., clientTransferProhibited, active) indicating if a domain is locked against unauthorized transfer, pending renewal, or active.

    Registrar Information

    The authorized or accredited organization managing the domain reservation and authoritative registry delegation.

    Nameservers (NS)

    Authoritative servers that translate domain names into IP addresses and direct web visitors and mail traffic globally.

    A & AAAA Records

    Primary address records mapping your domain name directly to standard IPv4 (e.g., 192.0.2.1) and newer IPv6 server network addresses.

    MX (Mail Exchange)

    Priority-ranked records pointing inbound emails to designated mail server hosts (e.g., Google Workspace, Microsoft 365, Zoho).

    SPF & DMARC Security

    Email authentication standards that verify authorized sender IPs (SPF) and instruct receiving servers how to enforce security policies (DMARC).

    DKIM Signatures

    Cryptographic public key in DNS used by receiving mail servers to verify digital signatures on your emails, ensuring messages were not tampered with.

    SSL Certificate & Chain

    Establishes encrypted HTTPS connections and authenticates domain ownership via an intermediate certificate authority chain.

    Hosting Provider & ASN

    The physical server infrastructure where website files reside and the autonomous system network (ASN) routing global traffic.

    Reverse DNS (PTR)

    Pointer (PTR) records that map a server's IP address back to its canonical hostname, verifying server identity and preventing email spam rejection.

    HTTP Security Headers

    Directives like HSTS, CSP, and X-Frame-Options instructed by the server to protect browser visitors against XSS, clickjacking, and packet sniffing.

    ⚠️ Report Limitations & Data Sources

    • Data Currency: This report uses cached registry and DNS data (freshened within 4 hours) for high-speed resolution. Click "🔄 Refresh Live" to query directly against authoritative registries.
    • DNS Resolution & Propagation: Records are queried via Google Public DNS-over-HTTPS. Global DNS propagation may take up to 24–48 hours across different regional ISP resolvers during recent DNS record changes.
    • Completeness & Scope: This diagnostic tool analyzes standard authoritative records (A, AAAA, MX, NS, TXT, CNAME, SOA). It does not perform invasive brute-force subdomain scans or unauthenticated DNS zone transfers.
    • Email Deliverability & Reputation: The security analysis (SPF, DKIM, DMARC, and Port 25 SMTP handshake) reflects public DNS policies and inbound connection states. Recipient spam filters evaluate internal headers that cannot be checked from outside.
    • Reverse Proxies & CDNs: If a website is behind Cloudflare, Fastly, or another CDN/reverse proxy, the detected IP, web server software, and SSL edge certificate reflect the proxy tier.