WAPDNS.com

Analyze any domain

Get a complete DNS, email, SSL, HTTP and network analysis in seconds.

77
Total
70
DNS
90
Email
88
Security
65
Network
60
Availability
Domaincl.ly
IPv42
IPv60
MX records7
StatusActive
Domain technical report

403 Forbidden

cl.ly

Generated: 2026-08-11T04:23:49-05:00 · Cached result

JSONCSVPDFVisit site
IPv42
IPv60
MX7
NS4

DiagnosticsMain findings and recommendations

✓
IPv4 (A)30 / 30 pts · Dns

2 IPv4 address(es) detected.

!
IPv6 (AAAA)0 / 10 pts · Dns

0 IPv6 address(es) detected.

✓
Name server redundancy20 / 20 pts · Dns

4 NS record(s); 2 or more required.

✓
SOA record10 / 10 pts · Dns

Authoritative zone record.

!
DNSSEC chain0 / 15 pts · Dns

Both DS and DNSKEY are required.

!
CAA policy0 / 5 pts · Dns

Certificate authority restriction.

✓
DNS propagation10 / 10 pts · Dns

Agreement between public resolvers.

✓
MX records20 / 20 pts · Mail

7 MX record(s).

✓
SPF25 / 25 pts · Mail

SPF policy published.

✓
DMARC25 / 25 pts · Mail

DMARC policy published.

✓
DKIM20 / 20 pts · Mail

A DKIM selector was verified.

!
MTA-STS0 / 5 pts · Mail

Mail transport policy.

!
TLS-RPT0 / 5 pts · Mail

TLS reporting policy.

✓
Valid TLS certificate55 / 55 pts · Security

188 day(s) remaining.

✓
Certificate lifetime10 / 10 pts · Security

Full points require at least 30 days remaining.

i
HTTP security headers23 / 35 pts · Security

6 of 9 evaluated headers detected.

✓
PTR reverse DNS30 / 30 pts · Network

PTR: ec2-3-233-0-221.compute-1.amazonaws.com

✓
IPv4 diversity35 / 35 pts · Network

Two or more IPv4 addresses receive full points.

!
IPv6 connectivity0 / 35 pts · Network

AAAA availability.

✓
DNS resolution40 / 40 pts · Availability

At least one address family must resolve.

!
HTTP response0 / 40 pts · Availability

HTTP/2 403

✓
HTTPS final URL20 / 20 pts · Availability

Final URL uses HTTPS.

DNS and emailPublished records and email configuration

A

2 record(s)
3.233.0.221
100.56.149.11

AAAA

0 record(s)
—

Not configured

CNAME

0 record(s)
—

Not configured

MX

7 record(s)
20 alt2.aspmx.l.google.com.
30 aspmx4.googlemail.com.
30 aspmx5.googlemail.com.
30 aspmx2.googlemail.com.
20 alt1.aspmx.l.google.com.
10 aspmx.l.google.com.
30 aspmx3.googlemail.com.

TXT

6 record(s)
;; communications error to 69.64.44.20#53: timed out
"MS=ms43396462"
"v=spf1 include:_spf.google.com include:customeriomail.com include:mailgun.org include:mail.zendesk.com ~all"
"google-site-verification=YBAMTfCAJ1IWyTaM_t3bwcYe3qvKykrIjoLLNpgnBkM"
"google-site-verification=so4x2EC48xMe65NpJcUu6FCRteKFImp23V90xHA3YLs"
"MS=ms97936435"

NS

4 record(s)
ns-1383.awsdns-44.org.
ns-1927.awsdns-48.co.uk.
ns-723.awsdns-26.net.
ns-12.awsdns-01.com.

SOA

1 record(s)
ns-12.awsdns-01.com. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 3600

CAA

0 record(s)
—

Not configured

DS

0 record(s)
—

Not configured

DNSKEY

0 record(s)
—

Not configured

RRSIG

0 record(s)
—

Not configured

NSEC

0 record(s)
—

Not configured

NSEC3

0 record(s)
—

Not configured

SRV

0 record(s)
—

Not configured

NAPTR

0 record(s)
—

Not configured

TLSA

0 record(s)
—

Not configured

SSHFP

0 record(s)
—

Not configured

SPF

Configured
v=spf1 include:_spf.google.com include:customeriomail.com include:mailgun.org include:mail.zendesk.com ~all

DMARC

Configured
v=DMARC1; p=none; pct=100; rua=mailto:re+vldqvc9f8hl@dmarc.postmarkapp.com; sp=none; aspf=r;

DKIM

Selector google
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCNopugHTg/FaOtllF2t6Spd2FxeS16bTEk9BvzNc9A4x30nkInebOW+IUH2FlG9pqhb0IKtQoiCsIp24TyCQS8VTpGBDkxHd02f1M/RbMJta1NHqlz+f+YXhYvYFaV1BNuXZ8PiGT2NRVfsnUzZk96SD8KD9JbOsrex/JeZp4h/QIDAQAB

Analyzed webpageMetadata and HTTP response

Title and description

Extracted
Title
403 Forbidden
Description
Final URL
https://www.zight.com/
HTTP status
403

HTTP

Status
HTTP/2 403
Final URL
https://www.zight.com/
Version
3
Server
cloudflare
X-Powered-By

SSL and HTTP securityCertificate, protocol and security headers

SSL certificate

Available
Available
Yes
Issuer
Amazon
CN
cl.ly
Valid from
2026-01-16T18:00:00-06:00
Valid until
2027-02-15T17:59:59-06:00
Days remaining
188
Protocol
TLSv1.3
Cipher
TLS_AES_128_GCM_SHA256

Security headers

6 active
✓
HSTSImplemented
✓
Content Security PolicyImplemented
✓
X-Content-Type-OptionsImplemented
✓
X-Frame-OptionsImplemented
✓
Referrer PolicyImplemented
✓
Permissions PolicyImplemented
—
Cross-Origin-Opener-PolicyNot detected
—
Cross-Origin-Embedder-PolicyNot detected
—
Cross-Origin-Resource-PolicyNot detected

DNS propagationComparison across public resolvers

Public resolver comparison

Consistent
✓
Consistent propagation

5 public resolvers queried.

ResolverServerResultLatency
Google
8.8.8.8
100.56.149.11, 3.233.0.221
85,15 ms
Cloudflare
1.1.1.1
100.56.149.11, 3.233.0.221
77,86 ms
Quad9
9.9.9.9
100.56.149.11, 3.233.0.221
66,50 ms
OpenDNS
208.67.222.222
100.56.149.11, 3.233.0.221
75,92 ms
AdGuard
94.140.14.14
100.56.149.11, 3.233.0.221
316,40 ms

IP, geolocation and ASNAssociated network information

3.233.0.221

No data
success
No
country
region
city
asn
organization
isp

100.56.149.11

No data
success
No
country
region
city
asn
organization
isp

Visitor information

Visitor
ip
216.73.217.62
reverse
country
country_code
region
city
latitude
longitude
isp
organization
asn
timezone
browser
Other
os
Other
language
user_agent
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
is_bot
Yes
cloudflare
No

SMTPEmail port connectivity

alt2.aspmx.l.google.com

Port 25: Closed/unreachable - 1.1 ms - 
Port 465: Closed/unreachable - 4007.3 ms - 
Port 587: Closed/unreachable - 4020 ms -

Recently analyzed domains

View all →
littelfuse.com66rijksoverheid.nl96idblogmaker.com67asso.fr4nwo.nl97jeito.nl97bc.ca4siutica.cl4wixstudio.com76dovecot.org97