WAPDNS.com

Analyze any domain

Get a complete DNS, email, SSL, HTTP and network analysis in seconds.

76
Total
60
DNS
90
Email
65
Security
65
Network
100
Availability
Domaincarnegieendowment.org
IPv44
IPv60
MX records1
StatusActive
Domain technical report

Carnegie Endowment for International Peace | Carnegie Endowment for International Peace

carnegieendowment.org

The Carnegie Endowment for International Peace generates strategic ideas and independent analysis, supports diplomacy, and trains the next generation of scholar-practitioners to help countries and institutions take on the most difficult global problems and advance peace.

Generated: 2026-08-09T02:02:25-05:00 · Cached result

IPv44
IPv60
MX1
NS2

DiagnosticsMain findings and recommendations

IPv4 (A)30 / 30 pts · Dns

4 IPv4 address(es) detected.

!
IPv6 (AAAA)0 / 10 pts · Dns

0 IPv6 address(es) detected.

Name server redundancy20 / 20 pts · Dns

2 NS record(s); 2 or more required.

SOA record10 / 10 pts · Dns

Authoritative zone record.

!
DNSSEC chain0 / 15 pts · Dns

Both DS and DNSKEY are required.

!
CAA policy0 / 5 pts · Dns

Certificate authority restriction.

!
DNS propagation0 / 10 pts · Dns

Agreement between public resolvers.

MX records20 / 20 pts · Mail

1 MX record(s).

SPF25 / 25 pts · Mail

SPF policy published.

DMARC25 / 25 pts · Mail

DMARC policy published.

DKIM20 / 20 pts · Mail

A DKIM selector was verified.

!
MTA-STS0 / 5 pts · Mail

Mail transport policy.

!
TLS-RPT0 / 5 pts · Mail

TLS reporting policy.

Valid TLS certificate55 / 55 pts · Security

145 day(s) remaining.

Certificate lifetime10 / 10 pts · Security

Full points require at least 30 days remaining.

!
HTTP security headers0 / 35 pts · Security

0 of 9 evaluated headers detected.

PTR reverse DNS30 / 30 pts · Network

PTR: server-3-166-96-39.mci50.r.cloudfront.net

IPv4 diversity35 / 35 pts · Network

Two or more IPv4 addresses receive full points.

!
IPv6 connectivity0 / 35 pts · Network

AAAA availability.

DNS resolution40 / 40 pts · Availability

At least one address family must resolve.

HTTP response40 / 40 pts · Availability

HTTP/2 200

HTTPS final URL20 / 20 pts · Availability

Final URL uses HTTPS.

DNS and emailPublished records and email configuration

A

4 record(s)
3.166.96.39
3.166.96.9
3.166.96.120
3.166.96.36

AAAA

0 record(s)

Not configured

CNAME

0 record(s)

Not configured

MX

1 record(s)
0 ceip-org.mail.protection.outlook.com.

TXT

3 record(s)
"v=spf1 a:vpn.ceip.org mx include:mktomail.com include:amazonses.com include:spf.protection.outlook.com include:spf.exclaimer.net -all"
"globalsign-domain-verification=9e951de685c8b2af63529821752dc106"
"google-site-verification=ReLwjMc51AmeoDJm8Q_J0cApiOukyapbxsbM_XmoxYM"

NS

2 record(s)
ns-1308.awsdns-35.org.
ns-782.awsdns-33.net.

SOA

1 record(s)
ns-782.awsdns-33.net. awsdns-hostmaster.amazon.com. 2019071655 7200 900 1209600 86400

CAA

0 record(s)

Not configured

DS

0 record(s)

Not configured

DNSKEY

0 record(s)

Not configured

RRSIG

0 record(s)

Not configured

NSEC

0 record(s)

Not configured

NSEC3

0 record(s)

Not configured

SRV

0 record(s)

Not configured

NAPTR

0 record(s)

Not configured

TLSA

0 record(s)

Not configured

SSHFP

0 record(s)

Not configured

SPF

Configured
v=spf1 a:vpn.ceip.org mx include:mktomail.com include:amazonses.com include:spf.protection.outlook.com include:spf.exclaimer.net -all

DMARC

Configured
v=DMARC1;p=reject;ruf=mailto:carnegieendowmentforinternationalpeace@us.cp-dmarc.com;rua=mailto:ceipdmarc@ceip.org,mailto:carnegieendowmentforinternationalpeace@us.cp-dmarc.com;

DKIM

Selector selector1
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCXIgD0zMiKYHSpsyiW4u/Xi/k0iu+EKUMzjSBRE8PE79y8BMvj022sFFGltq4D2BELOJv57PhS2d0/tbdDMNDGGXjb9nQi2CqJ8qcqVnxK9EY4IcvOxmboWGCnzWDZ+oA/e/JNnSkKgmiM2J60M4jEYwX3jGQ8+kXhOmp4J5BKXwIDAQAB;

Analyzed webpageMetadata and HTTP response

Title and description

Extracted
Title
Carnegie Endowment for International Peace | Carnegie Endowment for International Peace
Description
The Carnegie Endowment for International Peace generates strategic ideas and independent analysis, supports diplomacy, and trains the next generation of scholar-practitioners to help countries and institutions take on the most difficult global problems and advance peace.
Final URL
https://carnegieendowment.org/
HTTP status
200

HTTP

Status
HTTP/2 200
Final URL
https://carnegieendowment.org/
Version
3
Server
envoy
X-Powered-By

SSL and HTTP securityCertificate, protocol and security headers

SSL certificate

Available
Available
Yes
Issuer
Amazon
CN
carnegieendowment.org
Valid from
2025-12-02T18:00:00-06:00
Valid until
2027-01-01T17:59:59-06:00
Days remaining
145
Protocol
TLSv1.3
Cipher
TLS_AES_128_GCM_SHA256

Security headers

0 active
HSTSNot detected
Content Security PolicyNot detected
X-Content-Type-OptionsNot detected
X-Frame-OptionsNot detected
Referrer PolicyNot detected
Permissions PolicyNot detected
Cross-Origin-Opener-PolicyNot detected
Cross-Origin-Embedder-PolicyNot detected
Cross-Origin-Resource-PolicyNot detected

DNS propagationComparison across public resolvers

Public resolver comparison

Review
!
Differences detected

5 public resolvers queried.

ResolverServerResultLatency
Google
8.8.8.8
13.32.205.32, 13.32.205.36, 13.32.205.44, 13.32.205.77
89,42 ms
Cloudflare
1.1.1.1
13.32.205.32, 13.32.205.36, 13.32.205.44, 13.32.205.77
46,20 ms
Quad9
9.9.9.9
13.33.67.122, 13.33.67.3, 13.33.67.55, 13.33.67.7
55,24 ms
OpenDNS
208.67.222.222
13.32.205.32, 13.32.205.36, 13.32.205.44, 13.32.205.77
134,01 ms
AdGuard
94.140.14.14
3.166.96.120, 3.166.96.36, 3.166.96.39, 3.166.96.9
250,70 ms

IP, geolocation and ASNAssociated network information

3.166.96.39

No data
success
No
country
region
city
asn
organization
isp

3.166.96.9

No data
success
No
country
region
city
asn
organization
isp

3.166.96.120

No data
success
No
country
region
city
asn
organization
isp

3.166.96.36

No data
success
No
country
region
city
asn
organization
isp

Visitor information

Visitor
ip
216.73.217.62
reverse
country
country_code
region
city
latitude
longitude
isp
organization
asn
timezone
browser
Other
os
Other
language
user_agent
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
is_bot
Yes
cloudflare
No

SMTPEmail port connectivity

ceip-org.mail.protection.outlook.com

Port 25: Closed/unreachable - 20.9 ms - 
Port 465: Closed/unreachable - 4020.8 ms - 
Port 587: Closed/unreachable - 4056.6 ms -

Recently analyzed domains

View all →