Initializing diagnostics...

⚡ Live Data: Report generated fresh from authoritative registries. 🔄 Force Refresh
🤖 AI Intelligence Summary

The domain xn--l3caaa5iqc3a.com is registered with NameCheap, Inc., first registered on 2025-12-03 and expires on 2026-12-03 (domain age: 9 months). It resolves to IP address 104.21.4.71, hosted by Cloudflare, Inc.. Email delivery is handled by Self-hosted or Custom. SPF authentication is published and valid. DMARC protection is missing or unconfigured. Web traffic is secured with an SSL certificate issued by YE1.

Domain Overview: xn--l3caaa5iqc3a.com

Domain Registration 🌐
Active 9 months

Expires in 2 months, 6 days · DNSSEC: Unsigned

Email Security 🛡️
SPF: Pass DKIM: Not Detected DMARC: Missing

Self-hosted or Custom (5 MX)

SSL Certificate 🔒
Valid Chain 89 Days Left

Issuer: YE1 (2 SANs)

Server & Hosting 🖥️
200 cloudflare

Toronto, Ontario, Canada (CA)

🌐 Domain & Registration Identity View Full Whois Details →

Domainxn--l3caaa5iqc3a.com
Website TitleFavicon หีดูดดด - รวมคลิปหลุด 18+ ล่าสุด ดูฟรีเต็มเรื่อง
Registered2025-12-03
Expires2026-12-03
Remaining Validity2 months, 6 days
Domain Age9 months
RegistrarNameCheap, Inc.
Domain Statusclient transfer prohibited i
DNSSEC Delegation Unsigned · Zone not signed with DNSSEC keys i
Authoritative Nameservers eric.ns.cloudflare.com, bingo.ns.cloudflare.com i

🛡️ Email Security & Deliverability (SPF, DKIM, DMARC) View Complete Email Security Diagnostics →

Detected Email Provider 📬 Self-hosted or Custom
Primary Mail Server (MX) eforward2.registrar-servers.com (Priority: 10) · 5 MX servers configured i
SPF Record (Sender Policy) Pass · 1/10 DNS Lookups · Policy: ~all i
v=spf1 include:spf.efwd.registrar-servers.com ~all
DKIM Authentication Not Detected · (No common third-party selector found; custom keys may be configured) i
DMARC Policy Missing i
SMTP Port 25 Status Online (269ms) · Inbound mail server handshake response

🖥️ Web Server, Hosting & Network View Full Server & Tech Details →

Web Server Software cloudflare i
HTTP Status Code 200 i
Server IP (IPv4) 104.21.4.71 View Geo Details →
IPv6 Address (AAAA) 2606:4700:3033::ac43:83c1
Reverse DNS (PTR) None Detected (No PTR Record)
Server Location 📍 Toronto, Ontario, Canada (CA)
ASN Network & ISP AS13335 (Cloudflare, Inc.)
Hosting Provider Cloudflare, Inc. i
Control Panel Not Detected i
Technology Stack Cloudflare WordPress jQuery Google Analytics
HTTP Security Headers 4 / 6 Active (HSTS, X-Frame, X-Content, Referrer-Policy) Audit Details →
DNSBL Blacklist Reputation Clean (0/5 lists)

🔒 SSL/TLS Certificate Summary View Full SSL Certificate & Chain →

Primary Hostname (CN) xn--l3caaa5iqc3a.com · Multi-Domain SAN (Covers 2 hostnames)
SSL IssuerYE1
SSL Valid Till2026-12-24
Remaining Validity89 Days
Chain Status Valid Trusted Chain
Signature Algorithmecdsa-with-SHA384

Whois Ownership & Registration for xn--l3caaa5iqc3a.com

📄 View Raw Registry Response ↓

Domain Information i

Domain NameXN--L3CAAA5IQC3A.COM
Registration Date2025-12-03 06:00:15 Z
Expiration Date2026-12-03 06:00:15 Z
Last Changed Date2025-12-04 09:30:39 Z

Domain Status i

  • client transfer prohibited

Registrar Information i

NameNameCheap, Inc.
Abuse Emailabuse@namecheap.com

Registrant Contact i

Contact information for this role is not provided or redacted.

Administrative Contact i

Contact information for this role is not provided or redacted.

Technical Contact i

Contact information for this role is not provided or redacted.

Nameservers i

  • BINGO.NS.CLOUDFLARE.COM
  • ERIC.NS.CLOUDFLARE.COM
📄 View Raw Registry Response RDAP (Hybrid)
Domain Name: XN--L3CAAA5IQC3A.COM
   Registry Domain ID: 3044394136_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.namecheap.com
   Registrar URL: http://www.namecheap.com
   Updated Date: 2025-12-04T09:30:39Z
   Creation Date: 2025-12-03T06:00:15Z
   Registry Expiry Date: 2026-12-03T06:00:15Z
   Registrar: NameCheap, Inc.
   Registrar IANA ID: 1068
   Registrar Abuse Contact Email: abuse@namecheap.com
   Registrar Abuse Contact Phone: +1.6613102107
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Name Server: BINGO.NS.CLOUDFLARE.COM
   Name Server: ERIC.NS.CLOUDFLARE.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2026-09-26T10:52:05Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

DNS Records for xn--l3caaa5iqc3a.com

NS Records i

NameDataCopy
xn--l3caaa5iqc3a.com. eric.ns.cloudflare.com.
xn--l3caaa5iqc3a.com. bingo.ns.cloudflare.com.

A Records i

NameDataCopy
xn--l3caaa5iqc3a.com. 104.21.4.71
xn--l3caaa5iqc3a.com. 172.67.131.193

AAAA Records i

NameDataCopy
xn--l3caaa5iqc3a.com. 2606:4700:3033::ac43:83c1
xn--l3caaa5iqc3a.com. 2606:4700:3033::6815:447

WWW Records (www.xn--l3caaa5iqc3a.com) i

TypeHostValueCopy
A www.xn--l3caaa5iqc3a.com. 104.21.4.71
A www.xn--l3caaa5iqc3a.com. 172.67.131.193

MX Records i

PriorityMail Server TargetCopy
15 eforward4.registrar-servers.com.
20 eforward5.registrar-servers.com.
10 eforward2.registrar-servers.com.
10 eforward1.registrar-servers.com.
10 eforward3.registrar-servers.com.

TXT Records i

NameValueCopy
xn--l3caaa5iqc3a.com. google-site-verification=1n9h7jseTrYgeb11fJ96Rk7VBvz_V69uPtkNeHI7swI
xn--l3caaa5iqc3a.com. v=spf1 include:spf.efwd.registrar-servers.com ~all

Email Security (MX, SPF, DKIM, DMARC, SMTP) for xn--l3caaa5iqc3a.com

Detected Email Provider
📬 Self-hosted or Custom
✓ Active MX Routing (5 Servers)

Mail Exchange (MX) Routing Records i

Priority Mail Server Hostname Copy
10 eforward2.registrar-servers.com
10 eforward1.registrar-servers.com
10 eforward3.registrar-servers.com
15 eforward4.registrar-servers.com
20 eforward5.registrar-servers.com

SPF Record Validation i

v=spf1 include:spf.efwd.registrar-servers.com ~all

Record Breakdown

PrefixMechanismValueDescription
+ v spf1 The SPF record version.
+ include spf.efwd.registrar-servers.com The specified domain is searched for a match.
~ all Always matches. This should be the last mechanism.

Validation Summary

SPF Record Published Pass An SPF record was found.
Multiple SPF Records Pass Only one SPF record was found.
Included Lookups Pass The number of DNS lookups (1) is within the limit of 10.
Type PTR Check Pass The deprecated PTR mechanism was not found.
Characters After ALL Pass No mechanisms were found after the "all" mechanism.

Common DKIM Selectors i

No common third-party DKIM selectors found. Custom selectors may be configured.

🔍 Query Custom DKIM Selector

Live DNS Lookup

Using a custom or date-based selector (e.g. crm, newsletter, 2024)? Query its public key live on xn--l3caaa5iqc3a.com:

DMARC Policy Validation i

No DMARC record found to validate.

Validation Summary

DMARC Record Published Fail No DMARC record was found.

Optimization Suggestions

A DMARC record is essential for email security. It tells receiving servers what to do with emails that fail SPF and DKIM checks, protecting your domain from spoofing.

SMTP Connectivity Test (Port 25)

Mail ServerStatusLatencyBanner / Handshake Response
eforward2.registrar-servers.com Success 269ms 220-asp-relay.et.namecheap.tech ESMTP Postfix

Server IP Blacklist Check (104.21.4.71)

  • Spamhaus ZEN: Clean
  • SpamCop: Clean
  • Barracuda: Clean
  • GBUdb Truncate: Clean
  • DroneBL: Clean
  • SSL/TLS Certificate Details for xn--l3caaa5iqc3a.com

    • Issuer: YE1
    • Expires In: 89 Days
    • Chain Status: Valid Chain

    🔒 SSL / TLS Protocol Support

    Warning
    TLS protocol versions
    TLS 1.3 Enabled
    TLS 1.2 Enabled
    TLS 1.1 (deprecated) Enabled
    TLS 1.0 (deprecated) Enabled
    SSL protocol versions
    SSLv3 (deprecated) Disabled
    SSLv2 (deprecated) Disabled

    Main Leaf Certificate

    • Common Name: xn--l3caaa5iqc3a.com
    • SANs: DNS:*.xn--l3caaa5iqc3a.com, DNS:xn--l3caaa5iqc3a.com
    • Organization: N/A
    • Validity: Sep 25, 2026 to Dec 24, 2026
    • Algorithm: ecdsa-with-SHA384
    ↓ Intermediate CA Certificate ↓
    • Common Name: YE1
    • Organization: Let's Encrypt
    • Valid Till: Sep 03, 2028
    • Issuer: Root YE
    ↓ Intermediate CA Certificate ↓
    • Common Name: Root YE
    • Organization: ISRG
    • Valid Till: Sep 03, 2032
    • Issuer: ISRG Root X2
    ↓ Intermediate CA Certificate ↓
    • Common Name: ISRG Root X2
    • Organization: Internet Security Research Group
    • Valid Till: Sep 03, 2032
    • Issuer: ISRG Root X1

    Website & Server Intelligence for xn--l3caaa5iqc3a.com

    Website Identity

    TitleFavicon หีดูดดด - รวมคลิปหลุด 18+ ล่าสุด ดูฟรีเต็มเรื่อง
    Meta Descriptionศูนย์รวมคลิปหลุดอันดับ 1 อัปเดตงานใหม่จาก Onlyfans และ VK ทุกวัน

    Hosting & Server Network

    IP Address104.21.4.71
    HTTP Status200 i
    Hosting ProviderCloudflare, Inc. i
    Web Servercloudflare i
    Control Panel Not Detected i

    Technology Profile

    • Cloudflare
    • WordPress
    • jQuery
    • Google Analytics

    HTTP Security Headers

    Strict-Transport-Security Present
    Content-Security-Policy Missing
    X-Frame-Options Present
    X-Content-Type-Options Present
    Referrer-Policy Present
    Permissions-Policy Missing

    IP Details & Geolocation

    IP Address 104.21.4.71
    Reverse DNS (PTR) None Detected (No PTR Record)
    CountryCanada (CA)
    RegionOntario
    CityToronto
    ZIP CodeN/A
    ASN13335
    Organization / ISPCloudflare, Inc.

    Understanding Diagnostic Terms for xn--l3caaa5iqc3a.com

    Domain Status (EPP)

    EPP status codes (e.g., clientTransferProhibited, active) indicating if a domain is locked against unauthorized transfer, pending renewal, or active.

    Registrar Information

    The authorized or accredited organization managing the domain reservation and authoritative registry delegation.

    Nameservers (NS)

    Authoritative servers that translate domain names into IP addresses and direct web visitors and mail traffic globally.

    A & AAAA Records

    Primary address records mapping your domain name directly to standard IPv4 (e.g., 192.0.2.1) and newer IPv6 server network addresses.

    MX (Mail Exchange)

    Priority-ranked records pointing inbound emails to designated mail server hosts (e.g., Google Workspace, Microsoft 365, Zoho).

    SPF & DMARC Security

    Email authentication standards that verify authorized sender IPs (SPF) and instruct receiving servers how to enforce security policies (DMARC).

    DKIM Signatures

    Cryptographic public key in DNS used by receiving mail servers to verify digital signatures on your emails, ensuring messages were not tampered with.

    SSL Certificate & Chain

    Establishes encrypted HTTPS connections and authenticates domain ownership via an intermediate certificate authority chain.

    Hosting Provider & ASN

    The physical server infrastructure where website files reside and the autonomous system network (ASN) routing global traffic.

    Reverse DNS (PTR)

    Pointer (PTR) records that map a server's IP address back to its canonical hostname, verifying server identity and preventing email spam rejection.

    HTTP Security Headers

    Directives like HSTS, CSP, and X-Frame-Options instructed by the server to protect browser visitors against XSS, clickjacking, and packet sniffing.

    ⚠️ Report Limitations & Data Sources

    • Data Currency: This report uses cached registry and DNS data (freshened within 4 hours) for high-speed resolution. Click "🔄 Refresh Live" to query directly against authoritative registries.
    • DNS Resolution & Propagation: Records are queried via Google Public DNS-over-HTTPS. Global DNS propagation may take up to 24–48 hours across different regional ISP resolvers during recent DNS record changes.
    • Completeness & Scope: This diagnostic tool analyzes standard authoritative records (A, AAAA, MX, NS, TXT, CNAME, SOA). It does not perform invasive brute-force subdomain scans or unauthenticated DNS zone transfers.
    • Email Deliverability & Reputation: The security analysis (SPF, DKIM, DMARC, and Port 25 SMTP handshake) reflects public DNS policies and inbound connection states. Recipient spam filters evaluate internal headers that cannot be checked from outside.
    • Reverse Proxies & CDNs: If a website is behind Cloudflare, Fastly, or another CDN/reverse proxy, the detected IP, web server software, and SSL edge certificate reflect the proxy tier.