Detailed findings hidden
Create a free account to see every issue and where it was found.
Sign up freeDomain & DNS
Mail servers (MX)
| Priority | Exchange |
|---|---|
| 5 | gmr-smtp-in.l.google.com |
| 10 | alt1.gmr-smtp-in.l.google.com |
| 20 | alt2.gmr-smtp-in.l.google.com |
| 30 | alt3.gmr-smtp-in.l.google.com |
| 40 | alt4.gmr-smtp-in.l.google.com |
Name servers (NS)
Certificate authorities (CAA)
Zone metadata (SOA)
Reverse DNS (PTR)
| IP | PTR |
|---|---|
| 104.154.89.105 | 105.89.154.104.bc.googleusercontent.com |
Without a CAA record, any public certificate authority is permitted to issue a certificate for this domain.
Authorities that actually issued (valid certificates)
| Authority | Certificates | CAA identifier | Verdict |
|---|---|---|---|
| Let's Encrypt | 5 | letsencrypt.org | Unknown |
ACME validation (_acme-challenge)
- MEDIUM No CAA record, any public certificate authority may issue for this domain
EPP status
Nameservers
Networks (ASN)
IP addresses
| IP | ASN | Org | Country | Flags |
|---|---|---|---|---|
| 104.154.89.105 | AS396982 Google LLC | Google Cloud (us-central1) | US | Hosting |
Raw TXT records all TXT values
All TXT values
| Value |
|---|
| _4wahjzefs6if6al9ai0ukockra7wb9c |
Web & TLS
Certificate authorities used
| Authority | Certificates | First | Last |
|---|---|---|---|
| Let's Encrypt | 5 | 2026-07-14 | 2026-07-28 |
Matched against the version disclosed in the response. These are CVEs attributed to the product that this version cannot be ruled out of — not confirmed exploitable findings. Entries marked in range have an advisory range this version falls inside; undetermined ones carry no parseable range.
nginx 1.10.3 (from header; 0 not attributed to this product, 0 ruled out by version)
Account only
Network Requests capture runs a real headless browser and counts as 1 domain scan against your quota. Create a free account to use it.
Sign up freeCertificate transparency 5 certificate(s) from crt.sh
| crt.sh ID | Logged At | Not Before | Not After | Common Name | Matching Identities | Issuer Name |
|---|---|---|---|---|---|---|
| 16142101677 | 2026-07-28 20:03:10Z | 2026-07-28 | 2026-10-26 | *.badssl.com |
*.badssl.com badssl.com |
C=US, O=Let's Encrypt, CN=YR1 |
| 16142111860 | 2026-07-28 20:03:02Z | 2026-07-28 | 2026-10-26 | *.badssl.com |
*.badssl.com badssl.com |
C=US, O=Let's Encrypt, CN=YR2 |
| 16142113178 | 2026-07-28 20:02:57Z | 2026-07-28 | 2026-10-26 | *.badssl.com |
*.badssl.com badssl.com |
C=US, O=Let's Encrypt, CN=YE1 |
| 16142117086 | 2026-07-28 20:02:52Z | 2026-07-28 | 2026-10-26 | *.badssl.com |
*.badssl.com badssl.com |
C=US, O=Let's Encrypt, CN=YE1 |
| 15848189757 | 2026-07-14 20:02:54Z | 2026-07-14 | 2026-10-12 | revoked.badssl.com | revoked.badssl.com | C=US, O=Let's Encrypt, CN=YE1 |
robots.txt raw file
User-agent: Browsershots
Disallow:security.txt raw file
not foundAttack surface
Every CNAME, MX, NS and SPF include: hands trust to another domain.
A target that has lapsed can be registered by anyone, who then inherits whatever
that record delegated — content, mail, DNS, or the right to send mail as
this domain. A target is only reported as claimable when RDAP and DNS agree;
0 could not be determined.