← Check another domain

icann.org

50/100

D

Scanned 2026-05-12

Cached result — add ?fresh=1 to force a new scan

Subcheck breakdown

Check	Status	Score
DMARC policy	none	5/25
SPF record	ok	10/10
DKIM selector	missing	0/10
TLS certificate	ok	20/20
WHOIS integrity	ok	10/10
Subdomain takeover	vulnerable	0/15
MTA-STS / TLSRPT	missing	0/5
DNSSEC	signed	5/5

Recommendations

Upgrade DMARC from p=none to p=quarantine or p=reject at _dmarc.icann.org to block spoofed email
Publish a DKIM key at default._domainkey.icann.org (v=DKIM1; k=rsa; p=…)
Publish MTA-STS: add _mta-sts.icann.org TXT and host a policy at https://mta-sts.icann.org/.well-known/mta-sts.txt
One or more icann.org subdomains may be vulnerable to takeover — audit and remove dangling DNS entries

Details

Area	Detail
DMARC	v=DMARC1; p=none; fo=1;rua=mailto:tutnr7vw@ag.us.dmarcian.com
SPF	v=spf1 ip4:192.0.32.0/20 ip4:199.91.192.0/21 ip4:64.78.40.0/27 ip4:162.216.194.0/27 ip4:64.78.33.5/32 ip4:64.78.33.6/31 ip4:64.78.48.205/32 ip4:64.78.48.206/31
DKIM selectors	—
TLS certificate	Ok (238 days remaining) — CN=Sectigo Public Server Authentication CA OV R36,O=Sectigo Limited,C=GB
WHOIS registrar	CSC Corporate Domains, Inc.
WHOIS expires	2028-12-07T17:04:26Z
Subdomains (222 subdomains scanned, 23 at risk)	222 found
DNSSEC	Signed