Initializing diagnostics...

⚡ Live Data: Report generated fresh from authoritative registries. 🔄 Force Refresh
🤖 AI Intelligence Summary

The domain kottke.org is registered with Domain.com - Network Solutions, LLC, first registered on 1998-12-26 and expires on 2027-12-26 (domain age: 27 years, 10 months). It resolves to IP address 104.21.36.86, hosted by Cloudflare, Inc.. Email delivery is handled by Google Workspace. SPF authentication is published and valid. DMARC policy is published. Web traffic is secured with an SSL certificate issued by WE1.

Domain Overview: kottke.org

Domain Registration 🌐
Active 27 years, 10 months

Expires in 1 year, 1 month, 25 days · DNSSEC: Unsigned

Email Security 🛡️
SPF: Pass DKIM: Detected DMARC: None

Google Workspace (6 MX)

SSL Certificate 🔒
Valid Chain 56 Days Left

Issuer: WE1 (2 SANs)

Server & Hosting 🖥️
200 cloudflare

Toronto, Ontario, Canada (CA)

🌐 Domain & Registration Identity View Full Whois Details →

Domainkottke.org
Website TitleFavicon kottke.org - home of fine hypertext products
Registered1998-12-26
Expires2027-12-26
Remaining Validity1 year, 1 month, 25 days
Domain Age27 years, 10 months
RegistrarDomain.com - Network Solutions, LLC
Domain Statusclient transfer prohibited i
DNSSEC Delegation Unsigned · Zone not signed with DNSSEC keys i
Authoritative Nameservers hugh.ns.cloudflare.com, kenia.ns.cloudflare.com i

🛡️ Email Security & Deliverability (SPF, DKIM, DMARC) View Complete Email Security Diagnostics →

Detected Email Provider 📬 Google Workspace
Primary Mail Server (MX) ASPMX.L.GOOGLE.COM (Priority: 1) · 6 MX servers configured i
SPF Record (Sender Policy) Pass · 2/10 DNS Lookups · Policy: ~all i
v=spf1 include:_spf.google.com include:amazonses.com ~all
DKIM Authentication Detected · Discovered: Google Workspace (google) i
DMARC Policy Warning (Monitoring None) · Subdomain Policy: sp=none · Reports: mailto:re+i7da79rxi5j@dmarc.postmarkapp.com i
v=DMARC1;p=none;pct=100;rua=mailto:re+i7da79rxi5j@dmarc.postmarkapp.com;sp=none;aspf=r;
SMTP Port 25 Status Online (37ms) · Inbound mail server handshake response

🖥️ Web Server, Hosting & Network View Full Server & Tech Details →

Web Server Software cloudflare i
HTTP Status Code 200 i
Server IP (IPv4) 104.21.36.86 View Geo Details →
IPv6 Address (AAAA) 2606:4700:3030::ac43:beb0
Reverse DNS (PTR) None Detected (No PTR Record)
Server Location 📍 Toronto, Ontario, Canada (CA)
ASN Network & ISP AS13335 (Cloudflare, Inc.)
Hosting Provider Cloudflare, Inc. i
Control Panel Not Detected i
Technology Stack Cloudflare Font Awesome Typekit
HTTP Security Headers 5 / 6 Active (HSTS, X-Frame, X-Content, Referrer-Policy, Permissions-Policy) Audit Details →
DNSBL Blacklist Reputation Clean (0/5 lists)

🔒 SSL/TLS Certificate Summary View Full SSL Certificate & Chain →

Primary Hostname (CN) kottke.org · Multi-Domain SAN (Covers 2 hostnames)
SSL IssuerWE1
SSL Valid Till2026-12-26
Remaining Validity56 Days
Chain Status Valid Trusted Chain
Signature Algorithmecdsa-with-SHA256

Whois Ownership & Registration for kottke.org

📄 View Raw Registry Response ↓

Domain Information i

Domain NameKOTTKE.ORG
Expiration Date2027-12-26 05:00:00 Z
Registration Date1998-12-26 05:00:00 Z
Last Changed Date2026-08-12 05:46:10 Z

Domain Status i

  • client transfer prohibited

Registrar Information i

NameDomain.com - Network Solutions, LLC
Abuse Emaildomain.operations@web.com

Registrant Contact i

Contact information for this role is not provided or redacted.

Administrative Contact i

Contact information for this role is not provided or redacted.

Technical Contact i

Contact information for this role is not provided or redacted.

Nameservers i

  • hugh.ns.cloudflare.com
  • kenia.ns.cloudflare.com
📄 View Raw Registry Response RDAP (Hybrid)
Domain Name: kottke.org
Registry Domain ID: REDACTED
Registrar WHOIS Server: whois.domain.com
Registrar URL: http://www.domain.com
Updated Date: 2026-08-12T05:46:10Z
Creation Date: 1998-12-26T05:00:00Z
Registry Expiry Date: 2027-12-26T05:00:00Z
Registrar: Domain.com - Network Solutions, LLC
Registrar IANA ID: 886
Registrar Abuse Contact Email: domain.operations@web.com
Registrar Abuse Contact Phone: +1.8777228662
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: hugh.ns.cloudflare.com
Name Server: kenia.ns.cloudflare.com
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://icann.org/wicf/
>>> Last update of WHOIS database: 2026-10-30T15:15:58Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

Terms of Use: Access to Public Interest Registry WHOIS information is provided to assist persons in determining the contents of a domain name registration record in the Public Interest Registry registry database. The data in this record is provided by Public Interest Registry for informational purposes only, and Public Interest Registry does not guarantee its accuracy. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to (a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Registry Operator, a Registrar, or Identity Digital except as reasonably necessary to register domain names or modify existing registrations. All rights reserved. Public Interest Registry reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy.  The Registrar of Record identified in this output may have an RDDS service that can be queried for additional information on how to contact the Registrant, Admin, or Tech contact of the queried domain name.

DNS Records for kottke.org

NS Records i

NameDataCopy
kottke.org. hugh.ns.cloudflare.com.
kottke.org. kenia.ns.cloudflare.com.

A Records i

NameDataCopy
kottke.org. 104.21.36.86
kottke.org. 172.67.190.176

AAAA Records i

NameDataCopy
kottke.org. 2606:4700:3030::ac43:beb0
kottke.org. 2606:4700:3031::6815:2456

WWW Records (www.kottke.org) i

TypeHostValueCopy
A www.kottke.org. 172.67.190.176
A www.kottke.org. 104.21.36.86

MX Records i

PriorityMail Server TargetCopy
10 ASPMX2.GOOGLEMAIL.COM.
5 ALT2.ASPMX.L.GOOGLE.COM.
1 ASPMX.L.GOOGLE.COM.
5 ALT1.ASPMX.L.GOOGLE.COM.
10 ASPMX3.GOOGLEMAIL.COM.
10 ASPMX4.GOOGLEMAIL.COM.

TXT Records i

NameValueCopy
kottke.org. v=spf1 include:_spf.google.com include:amazonses.com ~all
kottke.org. google-site-verification=YgbHWy1ySFXowe_7gY6-73wqbmpzQEdSFDfZZXPBHls

Email Security (MX, SPF, DKIM, DMARC, SMTP) for kottke.org

Detected Email Provider
📬 Google Workspace
✓ Active MX Routing (6 Servers)

Mail Exchange (MX) Routing Records i

Priority Mail Server Hostname Copy
1 ASPMX.L.GOOGLE.COM
5 ALT2.ASPMX.L.GOOGLE.COM
5 ALT1.ASPMX.L.GOOGLE.COM
10 ASPMX2.GOOGLEMAIL.COM
10 ASPMX3.GOOGLEMAIL.COM
10 ASPMX4.GOOGLEMAIL.COM

SPF Record Validation i

v=spf1 include:_spf.google.com include:amazonses.com ~all

Record Breakdown

PrefixMechanismValueDescription
+ v spf1 The SPF record version.
+ include _spf.google.com The specified domain is searched for a match.
+ include amazonses.com The specified domain is searched for a match.
~ all Always matches. This should be the last mechanism.

Validation Summary

SPF Record Published Pass An SPF record was found.
Multiple SPF Records Pass Only one SPF record was found.
Included Lookups Pass The number of DNS lookups (2) is within the limit of 10.
Type PTR Check Pass The deprecated PTR mechanism was not found.
Characters After ALL Pass No mechanisms were found after the "all" mechanism.

Common DKIM Selectors i

Google Workspace (google)

NameDataCopy
google._domainkey.kottke.org.v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE9Ky8LPLn2AYIoQkCVImwCQZ4V5w9cM14kFmwyQyd1DYYaDZ9aChsYZkk6eimGAR87AorjgBaFMVaz1qJUWWvd6se4d2/bYqQEVVlbyIUNwLNq+WmxfCFKQNxtPyWm4MO6x/0DjG7DJgFKBdKNUN472RZF2zQFnjlbCoafbhiXt70/canZBi++dzLeEqsySl+q83iF9Lkym9Z+7YcWA0imeCPam5jz0WPkH8bEJ8SyCGIrAbp5yM9cEKT53gIv1my0A66NL5CcXke2ybm4poGgTFx52z+eQd2wi6k2j3IpvEubP5SQvVh3hSfY9p0Bpjg6s03KY6ehrSxjB3XIyyQIDAQAB

🔍 Query Custom DKIM Selector

Live DNS Lookup

Using a custom or date-based selector (e.g. crm, newsletter, 2024)? Query its public key live on kottke.org:

DMARC Policy Validation i

v=DMARC1;p=none;pct=100;rua=mailto:re+i7da79rxi5j@dmarc.postmarkapp.com;sp=none;aspf=r;

Tag Breakdown

TagValueDescription
v DMARC1 Version: Must be "DMARC1".
p none Policy: The action to take for failed emails (none, quarantine, reject).
pct 100 Percentage: The percentage of emails to apply the policy to.
rua mailto:re+i7da79rxi5j@dmarc.postmarkapp.com Aggregate Reports: Email address(es) to send summary reports.
sp none Subdomain Policy: The policy for subdomains (none, quarantine, reject).
aspf r SPF Alignment: Specifies strict (s) or relaxed (r) alignment for SPF.

Validation Summary

DMARC Record Published Pass A DMARC record was found.
Syntax Check Pass The record has a valid version tag.
Policy Enforcement Warning The policy is "p=none", which is for monitoring only and does not protect against spoofing.
Aggregate Reporting Pass An address for aggregate reports was found.

Optimization Suggestions

After monitoring your aggregate reports to ensure legitimate email sources are aligned, you should move to a "p=quarantine" or "p=reject" policy to protect your domain.

SMTP Connectivity Test (Port 25)

Mail ServerStatusLatencyBanner / Handshake Response
ASPMX.L.GOOGLE.COM Success 37ms 220 mx.google.com ESMTP a92af1059eb24-1ac18737f4bsi7595367c88.15 - gsmtp

Server IP Blacklist Check (104.21.36.86)

  • Spamhaus ZEN: Clean
  • SpamCop: Clean
  • Barracuda: Clean
  • GBUdb Truncate: Clean
  • DroneBL: Clean
  • SSL/TLS Certificate Details for kottke.org

    • Issuer: WE1
    • Expires In: 56 Days
    • Chain Status: Valid Chain

    🔒 SSL / TLS Protocol Support

    Warning
    TLS protocol versions
    TLS 1.3 Enabled
    TLS 1.2 Enabled
    TLS 1.1 (deprecated) Enabled
    TLS 1.0 (deprecated) Enabled
    SSL protocol versions
    SSLv3 (deprecated) Disabled
    SSLv2 (deprecated) Disabled

    Main Leaf Certificate

    • Common Name: kottke.org
    • SANs: DNS:kottke.org, DNS:*.kottke.org
    • Organization: N/A
    • Validity: Sep 27, 2026 to Dec 26, 2026
    • Algorithm: ecdsa-with-SHA256
    ↓ Intermediate CA Certificate ↓
    • Common Name: WE1
    • Organization: Google Trust Services
    • Valid Till: Feb 20, 2029
    • Issuer: GTS Root R4
    ↓ Intermediate CA Certificate ↓
    • Common Name: GTS Root R4
    • Organization: Google Trust Services LLC
    • Valid Till: Jan 28, 2028
    • Issuer: GlobalSign Root CA

    Website & Server Intelligence for kottke.org

    Website Identity

    TitleFavicon kottke.org - home of fine hypertext products
    Meta DescriptionJason Kottke's daily links and commentary on art, science, technology, design, film, and culture since 1998.

    Hosting & Server Network

    IP Address104.21.36.86
    HTTP Status200 i
    Hosting ProviderCloudflare, Inc. i
    Web Servercloudflare i
    Control Panel Not Detected i

    Technology Profile

    • Cloudflare
    • Font Awesome
    • Typekit

    HTTP Security Headers

    Strict-Transport-Security Present
    Content-Security-Policy Missing
    X-Frame-Options Present
    X-Content-Type-Options Present
    Referrer-Policy Present
    Permissions-Policy Present

    IP Details & Geolocation

    IP Address 104.21.36.86
    Reverse DNS (PTR) None Detected (No PTR Record)
    CountryCanada (CA)
    RegionOntario
    CityToronto
    ZIP CodeN/A
    ASN13335
    Organization / ISPCloudflare, Inc.

    Understanding Diagnostic Terms for kottke.org

    Domain Status (EPP)

    EPP status codes (e.g., clientTransferProhibited, active) indicating if a domain is locked against unauthorized transfer, pending renewal, or active.

    Registrar Information

    The authorized or accredited organization managing the domain reservation and authoritative registry delegation.

    Nameservers (NS)

    Authoritative servers that translate domain names into IP addresses and direct web visitors and mail traffic globally.

    A & AAAA Records

    Primary address records mapping your domain name directly to standard IPv4 (e.g., 192.0.2.1) and newer IPv6 server network addresses.

    MX (Mail Exchange)

    Priority-ranked records pointing inbound emails to designated mail server hosts (e.g., Google Workspace, Microsoft 365, Zoho).

    SPF & DMARC Security

    Email authentication standards that verify authorized sender IPs (SPF) and instruct receiving servers how to enforce security policies (DMARC).

    DKIM Signatures

    Cryptographic public key in DNS used by receiving mail servers to verify digital signatures on your emails, ensuring messages were not tampered with.

    SSL Certificate & Chain

    Establishes encrypted HTTPS connections and authenticates domain ownership via an intermediate certificate authority chain.

    Hosting Provider & ASN

    The physical server infrastructure where website files reside and the autonomous system network (ASN) routing global traffic.

    Reverse DNS (PTR)

    Pointer (PTR) records that map a server's IP address back to its canonical hostname, verifying server identity and preventing email spam rejection.

    HTTP Security Headers

    Directives like HSTS, CSP, and X-Frame-Options instructed by the server to protect browser visitors against XSS, clickjacking, and packet sniffing.

    ⚠️ Report Limitations & Data Sources

    • Data Currency: This report uses cached registry and DNS data (freshened within 4 hours) for high-speed resolution. Click "🔄 Refresh Live" to query directly against authoritative registries.
    • DNS Resolution & Propagation: Records are queried via Google Public DNS-over-HTTPS. Global DNS propagation may take up to 24–48 hours across different regional ISP resolvers during recent DNS record changes.
    • Completeness & Scope: This diagnostic tool analyzes standard authoritative records (A, AAAA, MX, NS, TXT, CNAME, SOA). It does not perform invasive brute-force subdomain scans or unauthenticated DNS zone transfers.
    • Email Deliverability & Reputation: The security analysis (SPF, DKIM, DMARC, and Port 25 SMTP handshake) reflects public DNS policies and inbound connection states. Recipient spam filters evaluate internal headers that cannot be checked from outside.
    • Reverse Proxies & CDNs: If a website is behind Cloudflare, Fastly, or another CDN/reverse proxy, the detected IP, web server software, and SSL edge certificate reflect the proxy tier.