Domain & DNS

At a glanceLearn

Mail FHTTP FTLS TLSv1.2DNSSEC OffTakeover NoneMX 5NS 4CAA NoHTTPS RedirectLookalikes 4Registrar MarkMonitor Inc.Age 4226 d

DNS recordsLearn

Mail servers (MX)

Priority	Exchange
5	gmr-smtp-in.l.google.com
10	alt1.gmr-smtp-in.l.google.com
20	alt2.gmr-smtp-in.l.google.com
30	alt3.gmr-smtp-in.l.google.com
40	alt4.gmr-smtp-in.l.google.com

Name servers (NS)

ns-cloud-c1.googledomains.comns-cloud-c2.googledomains.comns-cloud-c3.googledomains.comns-cloud-c4.googledomains.com

4 name server(s), 1 provider(s) (googledomains.com), 4 distinct /24 network(s).

Certificate authorities (CAA)

No CAA records, any CA may issue certificates for this domain.

Zone metadata (SOA)

Primary NS

ns-cloud-c1.googledomains.com

Hostmaster

cloud-dns-hostmaster.google.com

Serial

2

Reverse DNS (PTR)

IP	PTR
104.154.89.105	105.89.154.104.bc.googleusercontent.com

DNSSEC chain of trustLearn

Not signed

The zone is not signed, so a resolver cannot tell a forged answer from a real one. Most DNS hosts sign in one step; the registrar then publishes the DS record they give you.

Parent zone No DS record
This zone No DNSKEY
Resolvers Nothing to validate

LOW DNSSEC is not enabled: DNS answers for this domain can be forged in transit

RegistrationLearn

Registrar

MarkMonitor Inc.

Created

2015-04-07T22:09:30Z

Updated

2026-03-06T10:32:49Z

Expires

2027-04-07T22:09:30Z

Age

4226 days

Transfer lock OnDelete lock OnUpdate lock On

EPP status

client delete prohibitedclient transfer prohibitedclient update prohibited

Nameservers

ns-cloud-c1.googledomains.comns-cloud-c2.googledomains.comns-cloud-c3.googledomains.comns-cloud-c4.googledomains.com

Third-party servicesLearn

Third-party services results hidden

Create a free account to unlock full scan results.

Sign up free

Already have an account? Log in

Hosting & IP intelligenceLearn

Providers

Cloud Google Cloud 1 IP

Networks (ASN)

AS396982 Google LLC 1

IP addresses

IP	ASN	Org	Country	Flags
104.154.89.105	AS396982 Google LLC	Google Cloud (us-central1)	US	Cloud

Raw TXT records all TXT values Learn

All TXT values

Value
_4wahjzefs6if6al9ai0ukockra7wb9c

02

Email

Mail authenticationLearn

Mail authentication results hidden

Create a free account to unlock full scan results.

Sign up free

Already have an account? Log in

Spoofing protectionLearn

Spoofing protection results hidden

Create a free account to unlock full scan results.

Sign up free

Already have an account? Log in

03

Web & TLS

TLS handshakeLearn

TLS results hidden

Create a free account to unlock full scan results.

Sign up free

Already have an account? Log in

HTTP security headersLearn

HTTP security header results hidden

Create a free account to unlock full scan results.

Sign up free

Already have an account? Log in

Known vulnerabilitiesLearn

Products checked 1Candidate CVEs 0

Matched against the version disclosed in the response. These are CVEs attributed to the product that this version cannot be ruled out of — not confirmed exploitable findings. Entries marked in range have an advisory range this version falls inside; undetermined ones carry no parseable range.

nginx 1.10.3 (from header; 50 not attributed to this product, 0 ruled out by version)

No CVE attributed to this product survived the version filter.

Well-known endpointsLearn

No .well-known endpoint responded.

Network requestsLearn

Loads the URL in a headless browser and lists every network request.

Requests

42

Transferred

1.2 MB

Capture time

12.4 s

Failed

0

#	Method	Status	Type	URL	MIME	Size	Duration	Remote IP
1	GET	200	Document	https://example-hidden.com/	text/html	8.1 KB	120 ms	x.x.x.x
2	GET	200	Script	https://cdn.example-hidden.com/app.js	application/javascript	42 KB	85 ms	x.x.x.x
3	GET	200	Stylesheet	https://example-hidden.com/style.css	text/css	12 KB	60 ms	x.x.x.x
4	GET	200	XHR	https://api.example-hidden.com/v1/track	application/json	1.4 KB	210 ms	x.x.x.x
5	GET	200	Image	https://example-hidden.com/logo.png	image/png	22 KB	45 ms	x.x.x.x

Account only

Network Requests capture runs a real headless browser and counts as 1 domain scan against your quota. Create a free account to use it.

Sign up free

Already have an account? Log in

robots.txt raw file Learn

User-agent: Browsershots
Disallow:

security.txtLearn

No security.txt at /.well-known/security.txt. It is the file (RFC 9116) that tells a researcher who found a vulnerability where to report it; without it, reports go to a generic inbox, social media, or nowhere.

LOW No security.txt: researchers who find a vulnerability have no published way to report it (RFC 9116)

04

Technologies

Software & versionsLearn

Technology	Version	Category	Identifier
WordPress	6.x.x	CMS	cpe:2.3:a:wordpress:wordpress:6.x.x
WooCommerce	9.x.x	Ecommerce	wordpress-plugin: woocommerce
Contact Form 7	5.x.x	WordPress plugins	wordpress-plugin: contact-form-7
jQuery	3.x.x	JavaScript libraries	npm: jquery
Nginx	1.x.x	Web servers	cpe:2.3:a:f5:nginx:1.x.x
PHP	8.x.x	Programming languages	cpe:2.3:a:php:php:8.x.x

Team and Enterprise

Identify the software, plugins and exact versions running on this domain and its subdomains, ready for vulnerability tracking. You need a Team or Enterprise plan to unlock this version of the report.

See plans

05

Certificates

Certificate authorisation (CAA)Learn

CAA record Absent

Without a CAA record, any public certificate authority is permitted to issue a certificate for this domain.

Authorities that actually issued (valid certificates)

Authority	Certificates	CAA identifier	Verdict
Let's Encrypt	5	letsencrypt.org	Unknown

ACME validation (_acme-challenge)

Stale tokens 1

MEDIUM No CAA record, any public certificate authority may issue for this domain

Certificate historyLearn

HTTPS since 47 dCertificates 5Authorities 1Median renewal 0 dValid today 5Wildcard Yes

Authorities valid today

Let's Encrypt

Valid wildcard names

*.badssl.com

Certificate authorities used

Authority	Certificates	First	Last
Let's Encrypt	5	2026-09-15	2026-09-29

INFO 1 valid wildcard certificate name(s) (*.badssl.com): one leaked key from any host impersonates every subdomain

Shared certificatesLearn

Certificate DedicatedShared certs 0 / 5Co-signed domains 0

Every certificate covers only this domain.

Certificate transparency 5 certificate(s) from crt.sh Learn

crt.sh ID	Logged At	Not Before	Not After	Common Name	Matching Identities	Issuer Name
17487281884	2026-09-29 20:03:06Z	2026-09-29	2026-12-28	*.badssl.com	*.badssl.com badssl.com	C=US, O=Let's Encrypt, CN=YR1
17487280624	2026-09-29 20:02:56Z	2026-09-29	2026-12-28	*.badssl.com	*.badssl.com badssl.com	C=US, O=Let's Encrypt, CN=YR1
17487284704	2026-09-29 20:02:50Z	2026-09-29	2026-12-28	*.badssl.com	*.badssl.com badssl.com	C=US, O=Let's Encrypt, CN=YE2
17487277625	2026-09-29 20:02:44Z	2026-09-29	2026-12-28	*.badssl.com	*.badssl.com badssl.com	C=US, O=Let's Encrypt, CN=YE1
17198709493	2026-09-15 20:02:51Z	2026-09-15	2026-12-14	revoked.badssl.com	revoked.badssl.com	C=US, O=Let's Encrypt, CN=YE2

06

Subdomains

Subdomains on the webLearn

No subdomain besides the apex resolves to a public address, so there was nothing else to visit.

Active subdomainsLearn

3 subdomains results hidden

Create a free account to unlock full scan results.

Sign up free

Already have an account? Log in

Ghost subdomainsLearn

Known in CT 1Resolving 0Ghosts 1

1 name(s) had a certificate issued for them but no longer resolve. Decommissioned services, internal hostnames leaked into a public log, or dangling records someone else could recreate.

1 ghost subdomains results hidden

Create a free account to unlock full scan results.

Sign up free

Already have an account? Log in

Subdomain takeoverLearn

Takeover results hidden

Create a free account to unlock full scan results.

Sign up free

Already have an account? Log in

All discovered subdomains active and passive Learn

5 subdomains results hidden

Create a free account to unlock full scan results.

Sign up free

Already have an account? Log in

07

Exposure

Dangling delegationLearn

Dependencies 2Claimable None

Every CNAME, MX, NS and SPF include: hands trust to another domain. A target that has lapsed can be registered by anyone, who then inherits whatever that record delegated — content, mail, DNS, or the right to send mail as this domain. A target is only reported as claimable when RDAP and DNS agree; 0 could not be determined.

Every external dependency is still registered.

Lookalike domainsLearn

Typosquat results hidden

Create a free account to unlock full scan results.

Sign up free

Already have an account? Log in

08

AI & agents

llms.txtLearn

No /llms.txt. It is an optional convention (llmstxt.org): a markdown file that tells language models which pages of the site matter. Its absence is not a weakness.

AI crawling policyLearn

AI crawlers blocked

0 of 15

Named in robots.txt

0

Content-Signal

search unsetai-input unsetai-train unset

Crawler	Operator	Purpose	Status	Rule
`GPTBot`	OpenAI	Model training	Allowed	No rule
`OAI-SearchBot`	OpenAI	AI search index	Allowed	No rule
`ChatGPT-User`	OpenAI	Fetch on user request	Allowed	No rule
`ClaudeBot`	Anthropic	Model training	Allowed	No rule
`Claude-SearchBot`	Anthropic	AI search index	Allowed	No rule
`Claude-User`	Anthropic	Fetch on user request	Allowed	No rule
`Google-Extended`	Google	Model training	Allowed	No rule
`Applebot-Extended`	Apple	Model training	Allowed	No rule
`PerplexityBot`	Perplexity	AI search index	Allowed	No rule
`Perplexity-User`	Perplexity	Fetch on user request	Allowed	No rule
`CCBot`	Common Crawl	Model training	Allowed	No rule
`Bytespider`	ByteDance	Model training	Allowed	No rule
`meta-externalagent`	Meta	Model training	Allowed	No rule
`Amazonbot`	Amazon	Model training	Allowed	No rule
`MistralAI-User`	Mistral	Fetch on user request	Allowed	No rule

Agent discoveryLearn

No agent discovery document: no A2A agent card, no MCP server card (/.well-known/mcp/server-card.json, mcp.json, mcp-server), no _mcp TXT record, no ChatGPT plugin manifest.

MCP serverLearn

No MCP server found. We only connect where the domain announces one (a server card, a _mcp TXT record, an llms.txt link, or a host named mcp.*), never by guessing paths. Tried https://mcp.badssl.com/mcp, https://mcp.badssl.com/, none answered as an MCP server.

09

Branding

Website preview

Website preview results hidden

Create a free account to unlock full scan results.

Sign up free

Already have an account? Log in

10

Since last time

42 changes since 2026-10-14, compared with the previous scan job by job.

caa-audit1 changed

Change	Field	Before	Now
changed	`observed_cas`	`{"authorized":null,"caa_identifiers":["letsencrypt.org"],"cert_count":9,"org":"Let's Encrypt"}`	`{"authorized":null,"caa_identifiers":["letsencrypt.org"],"cert_count":5,"org":"Let's Encrypt"}`

dangling2 added, 2 removed

Change	Field	Before	Now
added	`dependencies`	none	`{"ns":"delegated","rdap":"registered","refs":[{"host":"alt3.gmr-smtp-in.l.google.com","mechanism":"mx","via":"badssl.com"},{"host":"alt1.gmr-smtp-in.l.google.co…`
added	`dependencies`	none	`{"ns":"delegated","rdap":"registered","refs":[{"host":"ns-cloud-c3.googledomains.com","mechanism":"ns","via":"badssl.com"},{"host":"ns-cloud-c4.googledomains.co…`
removed	`dependencies`	`{"ns":"delegated","rdap":"registered","refs":[{"host":"alt4.gmr-smtp-in.l.google.com","mechanism":"mx","via":"badssl.com"},{"host":"gmr-smtp-in.l.google.com","m…`	none
removed	`dependencies`	`{"ns":"delegated","rdap":"registered","refs":[{"host":"ns-cloud-c3.googledomains.com","mechanism":"ns","via":"badssl.com"},{"host":"ns-cloud-c1.googledomains.co…`	none

dns-txt1 changed

Change	Field	Before	Now
changed	`saas`	`{"category":"email","evidence":"alt1.gmr-smtp-in.l.google.com","service":"Google Workspace","source":"mx","sources":["mx"]}`	`{"category":"email","evidence":"gmr-smtp-in.l.google.com","service":"Google Workspace","source":"mx","sources":["mx"]}`

ssl-history5 added, 9 removed, 5 changed

Change	Field	Before	Now
changed	`cas`	`{"cert_count":9,"first_seen":"2026-07-28T20:02:52Z","last_seen":"2026-09-29T20:03:06Z","org":"Let's Encrypt"}`	`{"cert_count":5,"first_seen":"2026-09-15T20:02:51Z","last_seen":"2026-09-29T20:03:06Z","org":"Let's Encrypt"}`
changed	`cert_count`	`9`	`5`
changed	`currently_valid_count`	`9`	`5`
changed	`first_seen`	`2026-07-28T20:02:52Z`	`2026-09-15T20:02:51Z`
changed	`surface_age_days`	`77`	`47`
added	`timeline`	none	`{"common_name":"*.badssl.com","days_remaining":56,"expired":false,"issuer_org":"Let's Encrypt","name_count":2,"not_after":"2026-12-28T20:03:05Z","not_before":"2…`
added	`timeline`	none	`{"common_name":"*.badssl.com","days_remaining":56,"expired":false,"issuer_org":"Let's Encrypt","name_count":2,"not_after":"2026-12-28T20:02:55Z","not_before":"2…`
added	`timeline`	none	`{"common_name":"*.badssl.com","days_remaining":56,"expired":false,"issuer_org":"Let's Encrypt","name_count":2,"not_after":"2026-12-28T20:02:49Z","not_before":"2…`
added	`timeline`	none	`{"common_name":"*.badssl.com","days_remaining":56,"expired":false,"issuer_org":"Let's Encrypt","name_count":2,"not_after":"2026-12-28T20:02:43Z","not_before":"2…`
added	`timeline`	none	`{"common_name":"revoked.badssl.com","days_remaining":42,"expired":false,"issuer_org":"Let's Encrypt","name_count":1,"not_after":"2026-12-14T20:02:50Z","not_befo…`
removed	`timeline`	`{"common_name":"*.badssl.com","days_remaining":12,"expired":false,"issuer_org":"Let's Encrypt","name_count":2,"not_after":"2026-10-26T20:02:51Z","not_before":"2…`	none
removed	`timeline`	`{"common_name":"*.badssl.com","days_remaining":12,"expired":false,"issuer_org":"Let's Encrypt","name_count":2,"not_after":"2026-10-26T20:02:56Z","not_before":"2…`	none
removed	`timeline`	`{"common_name":"*.badssl.com","days_remaining":12,"expired":false,"issuer_org":"Let's Encrypt","name_count":2,"not_after":"2026-10-26T20:03:01Z","not_before":"2…`	none
removed	`timeline`	`{"common_name":"*.badssl.com","days_remaining":12,"expired":false,"issuer_org":"Let's Encrypt","name_count":2,"not_after":"2026-10-26T20:03:09Z","not_before":"2…`	none
removed	`timeline`	`{"common_name":"*.badssl.com","days_remaining":75,"expired":false,"issuer_org":"Let's Encrypt","name_count":2,"not_after":"2026-12-28T20:02:43Z","not_before":"2…`	none
removed	`timeline`	`{"common_name":"*.badssl.com","days_remaining":75,"expired":false,"issuer_org":"Let's Encrypt","name_count":2,"not_after":"2026-12-28T20:02:49Z","not_before":"2…`	none
removed	`timeline`	`{"common_name":"*.badssl.com","days_remaining":75,"expired":false,"issuer_org":"Let's Encrypt","name_count":2,"not_after":"2026-12-28T20:02:55Z","not_before":"2…`	none
removed	`timeline`	`{"common_name":"*.badssl.com","days_remaining":75,"expired":false,"issuer_org":"Let's Encrypt","name_count":2,"not_after":"2026-12-28T20:03:05Z","not_before":"2…`	none
removed	`timeline`	`{"common_name":"revoked.badssl.com","days_remaining":61,"expired":false,"issuer_org":"Let's Encrypt","name_count":1,"not_after":"2026-12-14T20:02:50Z","not_befo…`	none

ssl-neighbors2 added, 7 removed, 1 changed

Change	Field	Before	Now
changed	`cert_count`	`9`	`5`
removed	`certs`	`{"common_name":"*.badssl.com","id":16142101677,"issuer":"C=US, O=Let's Encrypt, CN=YR1","neighbor_count":0,"not_after":"2026-10-26T20:03:09Z","not_before":"2026…`	none
removed	`certs`	`{"common_name":"*.badssl.com","id":16142111860,"issuer":"C=US, O=Let's Encrypt, CN=YR2","neighbor_count":0,"not_after":"2026-10-26T20:03:01Z","not_before":"2026…`	none
removed	`certs`	`{"common_name":"*.badssl.com","id":16142113178,"issuer":"C=US, O=Let's Encrypt, CN=YE1","neighbor_count":0,"not_after":"2026-10-26T20:02:56Z","not_before":"2026…`	none
removed	`certs`	`{"common_name":"*.badssl.com","id":16142117086,"issuer":"C=US, O=Let's Encrypt, CN=YE1","neighbor_count":0,"not_after":"2026-10-26T20:02:51Z","not_before":"2026…`	none
added	`issuers`	none	`{"cert_count":2,"issuer":"C=US, O=Let's Encrypt, CN=YR1"}`
added	`issuers`	none	`{"cert_count":1,"issuer":"C=US, O=Let's Encrypt, CN=YE1"}`
removed	`issuers`	`{"cert_count":1,"issuer":"C=US, O=Let's Encrypt, CN=YR2"}`	none
removed	`issuers`	`{"cert_count":3,"issuer":"C=US, O=Let's Encrypt, CN=YE1"}`	none
removed	`issuers`	`{"cert_count":3,"issuer":"C=US, O=Let's Encrypt, CN=YR1"}`	none

tls1 changed

Change	Field	Before	Now
changed	`days_remaining`	`75`	`56`

typosquat2 added, 2 removed

Change	Field	Before	Now
added	`registered`	none	`{"a":["162.4.84.255"],"domain":"badsl.com"}`
added	`registered`	none	`{"a":["54.243.117.197","13.223.25.84"],"domain":"badss.com"}`
removed	`registered`	`{"a":["13.223.25.84","54.243.117.197"],"domain":"badss.com"}`	none
removed	`registered`	`{"a":["172.237.152.229","172.238.172.237","172.237.152.158"],"domain":"badsl.com"}`	none

whois2 changed

Change	Field	Before	Now
changed	`age_days`	`4207`	`4226`
changed	`expires_in_days`	`176`	`157`

ns1.example-hidden.com	192.168.x.x	-	-
mail.example-hidden.com	10.0.x.x	-	-
api.example-hidden.com	172.16.x.x	-	-
dev.example-hidden.com	192.168.x.x	-	-
staging.example-hidden.com	10.0.x.x	-	-

ns1.example-hidden.com	192.168.x.x	-	-
mail.example-hidden.com	10.0.x.x	-	-
api.example-hidden.com	172.16.x.x	-	-
dev.example-hidden.com	192.168.x.x	-	-
staging.example-hidden.com	10.0.x.x	-	-

ns1.example-hidden.com	192.168.x.x	-	-
mail.example-hidden.com	10.0.x.x	-	-
api.example-hidden.com	172.16.x.x	-	-
dev.example-hidden.com	192.168.x.x	-	-
staging.example-hidden.com	10.0.x.x	-	-

ns1.example-hidden.com	192.168.x.x	-	-
mail.example-hidden.com	10.0.x.x	-	-
api.example-hidden.com	172.16.x.x	-	-
dev.example-hidden.com	192.168.x.x	-	-
staging.example-hidden.com	10.0.x.x	-	-

ns1.example-hidden.com	192.168.x.x	-	-
mail.example-hidden.com	10.0.x.x	-	-
api.example-hidden.com	172.16.x.x	-	-
dev.example-hidden.com	192.168.x.x	-	-
staging.example-hidden.com	10.0.x.x	-	-

Navigation

Export this domain lookup

Detailed findings hidden

Domain & DNS

Mail servers (MX)

Name servers (NS)

Certificate authorities (CAA)

Zone metadata (SOA)

Reverse DNS (PTR)

EPP status

Nameservers

Third-party services results hidden

Providers

Networks (ASN)

IP addresses

All TXT values

Email

Mail authentication results hidden

Spoofing protection results hidden

Web & TLS

TLS results hidden

HTTP security header results hidden

nginx 1.10.3 (from header; 50 not attributed to this product, 0 ruled out by version)

Account only

Technologies

Team and Enterprise

Certificates

Authorities that actually issued (valid certificates)

ACME validation (_acme-challenge)

Certificate authorities used

Subdomains

3 subdomains results hidden

1 ghost subdomains results hidden

Takeover results hidden

5 subdomains results hidden

Exposure

Typosquat results hidden

AI & agents

Branding

Website preview results hidden

Since last time