Analyze any domain

Get a complete DNS, email, SSL, HTTP and network analysis in seconds.

Total

DNS

Email

Security

Network

100

Availability

Domainbellingcat.com

IPv42

IPv62

MX records5

StatusActive

Domain technical report

bellingcat - the home of online investigations

bellingcat.com

Generated: 2026-08-09T18:04:54-05:00 · Cached result

JSON CSV PDF Visit site

IPv42

IPv62

MX5

NS2

DiagnosticsMain findings and recommendations

✓

IPv4 (A)30 / 30 pts · Dns

2 IPv4 address(es) detected.

✓

IPv6 (AAAA)10 / 10 pts · Dns

2 IPv6 address(es) detected.

✓

Name server redundancy20 / 20 pts · Dns

2 NS record(s); 2 or more required.

✓

SOA record10 / 10 pts · Dns

Authoritative zone record.

DNSSEC chain0 / 15 pts · Dns

Both DS and DNSKEY are required.

✓

CAA policy5 / 5 pts · Dns

Certificate authority restriction.

✓

DNS propagation10 / 10 pts · Dns

Agreement between public resolvers.

✓

MX records20 / 20 pts · Mail

5 MX record(s).

✓

SPF25 / 25 pts · Mail

SPF policy published.

✓

DMARC25 / 25 pts · Mail

DMARC policy published.

✓

DKIM20 / 20 pts · Mail

A DKIM selector was verified.

MTA-STS0 / 5 pts · Mail

Mail transport policy.

TLS-RPT0 / 5 pts · Mail

TLS reporting policy.

✓

Valid TLS certificate55 / 55 pts · Security

58 day(s) remaining.

✓

Certificate lifetime10 / 10 pts · Security

Full points require at least 30 days remaining.

HTTP security headers4 / 35 pts · Security

1 of 9 evaluated headers detected.

PTR reverse DNS0 / 30 pts · Network

PTR not detected.

✓

IPv4 diversity35 / 35 pts · Network

Two or more IPv4 addresses receive full points.

✓

IPv6 connectivity35 / 35 pts · Network

AAAA availability.

✓

DNS resolution40 / 40 pts · Availability

At least one address family must resolve.

✓

HTTP response40 / 40 pts · Availability

HTTP/2 200

✓

HTTPS final URL20 / 20 pts · Availability

Final URL uses HTTPS.

DNS and emailPublished records and email configuration

A

2 record(s)

104.20.30.192
172.66.172.84

AAAA

2 record(s)

2606:4700:10::6814:1ec0
2606:4700:10::ac42:ac54

CNAME

0 record(s)

—

Not configured

MX

5 record(s)

10 alt3.aspmx.l.google.com.
5 alt1.aspmx.l.google.com.
10 alt4.aspmx.l.google.com.
5 alt2.aspmx.l.google.com.
1 aspmx.l.google.com.

TXT

13 record(s)

"bw=NFPlzlX8ooSYsvf4/wuQ6FBJ1Blo3cRYWMEqQ1xnp9Cq"
"apple-domain-verification=ltpXu0akd9dqcMec"
"425B3E9681"
"google-site-verification=oaGp_gRaUe4ouaer_qnJsWMmLSJ4PNIv7WHa5qdJMiw"
"slack-domain-verification=ONHqQcAaYHqvnYHX2DhciIzd5vqN2rrb1U9R6f7l"
"anthropic-domain-verification-rkgrjg=uNL1HWzVhUsH2JDEjZRmnOJBJ"
"MS=ms71957508"
"v=spf1 include:_spf.google.com include:mandrillapp.com include:spf.mailjet.com include:_spf.salesforce.com include:servers.mcsv.net ip4:83.96.170.83 ip6:2001:828:13f3:2::83 -all"
"google-site-verification=qROxAQaxoNkOpZYoyEMkjvLG2rYhl86OWxi6qENousw"
"zapier-domain-verification-challenge=36bd9286-cf63-494a-b23e-4dfe8475977f"
"canva-site-verification=OScS2gzHatVx1EXMgwYxWg"
"HbEy9wlhfSbh"
"google-site-verification=Z5Sup8nU24hSwS3cxofMzfVFnNLpHrtfm_t8dytR_so"

NS

2 record(s)

ishaan.ns.cloudflare.com.
audrey.ns.cloudflare.com.

SOA

1 record(s)

audrey.ns.cloudflare.com. dns.cloudflare.com. 2411494209 10000 2400 604800 1800

CAA

13 record(s)

0 issuewild "ssl.com"
0 issuewild "digicert.com; cansignhttpexchanges=yes"
0 issue "pki.goog; cansignhttpexchanges=yes"
0 issuewild "comodoca.com"
0 issue "letsencrypt.org"
0 issue "ssl.com"
0 issuewild "letsencrypt.org"
0 issuewild "pki.goog; cansignhttpexchanges=yes"
0 issue "amazon.com"
0 issuewild "amazon.com"
0 issue "comodoca.com"
0 issue "digicert.com; cansignhttpexchanges=yes"
0 issue "entrust.net"

DS

0 record(s)

—

Not configured

DNSKEY

0 record(s)

—

Not configured

RRSIG

0 record(s)

—

Not configured

NSEC

0 record(s)

—

Not configured

NSEC3

0 record(s)

—

Not configured

SRV

0 record(s)

—

Not configured

NAPTR

0 record(s)

—

Not configured

TLSA

0 record(s)

—

Not configured

SSHFP

0 record(s)

—

Not configured

SPF

Configured

v=spf1 include:_spf.google.com include:mandrillapp.com include:spf.mailjet.com include:_spf.salesforce.com include:servers.mcsv.net ip4:83.96.170.83 ip6:2001:828:13f3:2::83 -all

DMARC

Configured

v=DMARC1; p=reject; rua=mailto:dmarc-reports@bellingcat.com; pct=100; adkim=s; aspf=s

DKIM

Selector google

v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCK5v/B55VZ1dY37oGlcX1TP5Hz8juPRX3k6EHXjguA6lyy3ArvKESeeND6f6pzF8eI/wYj6nNHsny4z8nX5VMbgfCV5J1slbunhkvdpuhI69wbmLwAjgsSDxXbzzfnOFOr0xLaYLUaRM+f3mf3GHRk0Z8hPHCR4VEjiK0IHvgmcwIDAQAB

Analyzed webpageMetadata and HTTP response

Title and description

Extracted

Title

bellingcat - the home of online investigations

Description

Final URL

https://www.bellingcat.com/

HTTP status

200

HTTP

Status

HTTP/2 200

Final URL

https://www.bellingcat.com/

Version

Server

cloudflare

X-Powered-By

PHP/8.2.33

SSL and HTTP securityCertificate, protocol and security headers

SSL certificate

Available

Yes

Issuer

Google Trust Services

bellingcat.com

Valid from

2026-07-09T12:28:08-05:00

Valid until

2026-10-07T13:27:51-05:00

Days remaining

Protocol

TLSv1.3

Cipher

TLS_AES_256_GCM_SHA384

Security headers

1 active

—

HSTSNot detected

—

Content Security PolicyNot detected

—

X-Content-Type-OptionsNot detected

—

X-Frame-OptionsNot detected

✓

Referrer PolicyImplemented

—

Permissions PolicyNot detected

—

Cross-Origin-Opener-PolicyNot detected

—

Cross-Origin-Embedder-PolicyNot detected

—

Cross-Origin-Resource-PolicyNot detected

DNS propagationComparison across public resolvers

Public resolver comparison

Consistent

✓

Consistent propagation

5 public resolvers queried.

ResolverServerResultLatency

Google

8.8.8.8

104.20.30.192, 172.66.172.84

63,46 ms

Cloudflare

1.1.1.1

104.20.30.192, 172.66.172.84

50,92 ms

Quad9

9.9.9.9

104.20.30.192, 172.66.172.84

37,36 ms

OpenDNS

208.67.222.222

104.20.30.192, 172.66.172.84

56,86 ms

AdGuard

94.140.14.14

104.20.30.192, 172.66.172.84

67,64 ms

IP, geolocation and ASNAssociated network information

104.20.30.192

Identified

success

Yes

country

United States

country_code

region

California

city

San Francisco

latitude

37.7749113

longitude

-122.4185412

asn

13335

organization

Cloudflare, Inc.

isp

Cloudflare, Inc.

timezone

America/Los_Angeles

172.66.172.84

Identified

success

Yes

country

United States

country_code

region

California

city

San Francisco

latitude

37.7749113

longitude

-122.4185412

asn

13335

organization

Cloudflare, Inc.

isp

Cloudflare, Inc.

timezone

America/Los_Angeles

Visitor information

Visitor

216.73.217.62

reverse

country

country_code

region

city

latitude

longitude

isp

organization

asn

timezone

browser

Other

language

user_agent

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)

is_bot

Yes

cloudflare

SMTPEmail port connectivity

alt3.aspmx.l.google.com

Port 25: Closed/unreachable - 1.3 ms - 
Port 465: Closed/unreachable - 4010.9 ms - 
Port 587: Closed/unreachable - 4014.3 ms -

Recently analyzed domains

View all →

qc.ca4 wixstudio.com76 kpn.com97 www.news.bbc.co.uk4 kktix.com81 leovegascasinos.org66 asso.fr4 dovecot.org97 fl.us4 z9x8c7v6b5-debug-trigger-wapdns.com4