WAPDNS.com

Analyze any domain

Get a complete DNS, email, SSL, HTTP and network analysis in seconds.

77
Total
65
DNS
90
Email
65
Security
65
Network
100
Availability
Domainkhanacademy.org
IPv44
IPv60
MX records5
StatusActive
Domain technical report

Client Challenge

khanacademy.org

Generated: 2026-08-08T19:17:03-05:00 · Cached result

JSONCSVPDFVisit site
IPv44
IPv60
MX5
NS4

DiagnosticsMain findings and recommendations

✓
IPv4 (A)30 / 30 pts · Dns

4 IPv4 address(es) detected.

!
IPv6 (AAAA)0 / 10 pts · Dns

0 IPv6 address(es) detected.

✓
Name server redundancy20 / 20 pts · Dns

4 NS record(s); 2 or more required.

✓
SOA record10 / 10 pts · Dns

Authoritative zone record.

!
DNSSEC chain0 / 15 pts · Dns

Both DS and DNSKEY are required.

✓
CAA policy5 / 5 pts · Dns

Certificate authority restriction.

!
DNS propagation0 / 10 pts · Dns

Agreement between public resolvers.

✓
MX records20 / 20 pts · Mail

5 MX record(s).

✓
SPF25 / 25 pts · Mail

SPF policy published.

✓
DMARC25 / 25 pts · Mail

DMARC policy published.

✓
DKIM20 / 20 pts · Mail

A DKIM selector was verified.

!
MTA-STS0 / 5 pts · Mail

Mail transport policy.

!
TLS-RPT0 / 5 pts · Mail

TLS reporting policy.

✓
Valid TLS certificate55 / 55 pts · Security

123 day(s) remaining.

✓
Certificate lifetime10 / 10 pts · Security

Full points require at least 30 days remaining.

!
HTTP security headers0 / 35 pts · Security

0 of 9 evaluated headers detected.

✓
PTR reverse DNS30 / 30 pts · Network

PTR: server-3-171-22-86.ord56.r.cloudfront.net

✓
IPv4 diversity35 / 35 pts · Network

Two or more IPv4 addresses receive full points.

!
IPv6 connectivity0 / 35 pts · Network

AAAA availability.

✓
DNS resolution40 / 40 pts · Availability

At least one address family must resolve.

✓
HTTP response40 / 40 pts · Availability

HTTP/2 200

✓
HTTPS final URL20 / 20 pts · Availability

Final URL uses HTTPS.

DNS and emailPublished records and email configuration

A

4 record(s)
3.171.22.86
3.171.22.43
3.171.22.48
3.171.22.88

AAAA

0 record(s)
—

Not configured

CNAME

0 record(s)
—

Not configured

MX

5 record(s)
1 aspmx.l.google.com.
5 alt2.aspmx.l.google.com.
10 aspmx2.googlemail.com.
10 aspmx3.googlemail.com.
5 alt1.aspmx.l.google.com.

TXT

27 record(s)
"onetrust-domain-verification=4bc2331ed4d24c81b7be278e6e1fb58b"
"google-site-verification=SprWzGYoIdXdFrUCSyBhXJtHzFjE8FAQNlTamgKenhU"
"cl_verification=a568671a-6112-4bc5-997d-1f06d8389b2e"
"_globalsign-domain-verification=Prrz12gznJzJiHaajX3CnPfpqK6hhLae0miMSZ_BGa"
"MS=ms10049948"
"_globalsign-domain-verification=Ca9ol7KyPTrPtyGjL1BqGx_wv6SymozDmCXhHJveUr"
"google-site-verification=Jiabx8hC-zV0E8-hAj40dHCY_oWNIvfqkNe7VFnGbCs"
"stripe-verification=332820F9A5BCCCACBF2F5D8636496EB723C4062C9B878B8BAB77E99A2522E947"
"ZOOM_verify_G7FwqtyEKLkoQGhA3ifQq5"
"google-site-verification=sHrvDlgokhtbjBWsn8Dhu616EFRRv8GD0C1AU4_1gl4"
"apple-domain-verification=FBF7Yx9o3htFHZ7m"
"_globalsign-domain-verification=e70UZqvudGByIeilV8oO0gubBZi0P7QLakTxKub-zS"
"google-site-verification=BUF9CkP4-zm7sN2rDSq6NGRiEkrvvh2k3UdQxwSusrU"
"facebook-domain-verification=8kvuco8ljlv8t1aedswjypctrp1pk3"
"botify-site-verification=sGRcFNKzIkHzx1jtsQ7YkiT8hgWB6RiU"
"google-site-verification=JML6gcy7DbE1dA3JB9W4O6EB9uQ8bpOlJTyniVCgd-o"
"yahoo-verification-key=h5B5VELNOFcyiRDJQWEiNChg+SeClI9Bk9k9daiRPR4="
"cursor-domain-verification-dc9ngn=XEN4zLZD2K4p5yMB2JFUNxGIk"
"anthropic-domain-verification-4va7p1=Uuz4j8MkpGFjBjYBqvNGNuK46"
"google-site-verification=7kTMmLFa8kfzTFffAv659zZAhSvDX5lqnB_yuST-xLY"
"canva-site-verification=JW5MeXNqA7ezvjIRgLOPaQ"
"globalsign-domain-verification=qV_5Us2mt6FO1Ig5hnG4kYHESYAxuH5-qZ0cRXC-Ig"
"hibp-verify=dweb_9nibj6s7woei7t5h43qd3yni"
"google-site-verification=y1w1HGdtmQcg92Uy4JtubYkFtDDshCwmDXTFCgjpr-Y"
"spf2.0/pra include:_spf.google.com include:sendgrid.net include:aspmx.sailthru.com -all"
"v=spf1 include:_spf.google.com include:sendgrid.net include:aspmx.sailthru.com include:mail.zendesk.com exists:%{i}._spf.mta.salesforce.com include:mg-spf.greenhouse.io -all"
"openai-domain-verification=dv-E4EGw5ZIgYd9B3mwA3dPV5zY"

NS

4 record(s)
ns-1489.awsdns-58.org.
ns-798.awsdns-35.net.
ns-125.awsdns-15.com.
ns-1664.awsdns-16.co.uk.

SOA

1 record(s)
ns-1664.awsdns-16.co.uk. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400

CAA

8 record(s)
0 issue "globalsign.com"
0 issue "godaddy.com"
0 issue "digicert.com"
0 issue "letsencrypt.org"
0 iodef "mailto:it@khanacademy.org"
0 issue "amazon.com"
0 issue "certainly.com"
0 issue "pki.goog"

DS

0 record(s)
—

Not configured

DNSKEY

0 record(s)
—

Not configured

RRSIG

0 record(s)
—

Not configured

NSEC

0 record(s)
—

Not configured

NSEC3

0 record(s)
—

Not configured

SRV

0 record(s)
—

Not configured

NAPTR

0 record(s)
—

Not configured

TLSA

0 record(s)
—

Not configured

SSHFP

0 record(s)
—

Not configured

SPF

Configured
v=spf1 include:_spf.google.com include:sendgrid.net include:aspmx.sailthru.com include:mail.zendesk.com exists:%{i}._spf.mta.salesforce.com include:mg-spf.greenhouse.io -all

DMARC

Configured
v=DMARC1; p=reject; rua=mailto:dmarc-reports@khanacademy.org; ruf=mailto:dmarc-reports@khanacademy.org

DKIM

Selector google
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCyaX/aKTIfZas2M7BHoGDn9lIce9i+9UDBzkHYd4AienpIaZZhWbuF89ZigxblprZZvCjShmFFhxvjQkwvWzkevnnhqQ6PFi88ixYqxHmmHXTWD7yryjeOTmJzd8ngxBGm+tdPSk3visPhebuMRMLo9S5WiDV232SgwI54EB1+xwIDAQAB

Analyzed webpageMetadata and HTTP response

Title and description

Extracted
Title
Client Challenge
Description
Final URL
https://www.khanacademy.org/
HTTP status
206

HTTP

Status
HTTP/2 200
Final URL
https://www.khanacademy.org/
Version
3
Server
CloudFront
X-Powered-By

SSL and HTTP securityCertificate, protocol and security headers

SSL certificate

Available
Available
Yes
Issuer
Amazon
CN
khanacademy.org
Valid from
2025-11-10T18:00:00-06:00
Valid until
2026-12-10T17:59:59-06:00
Days remaining
123
Protocol
TLSv1.3
Cipher
TLS_AES_128_GCM_SHA256

Security headers

0 active
—
HSTSNot detected
—
Content Security PolicyNot detected
—
X-Content-Type-OptionsNot detected
—
X-Frame-OptionsNot detected
—
Referrer PolicyNot detected
—
Permissions PolicyNot detected
—
Cross-Origin-Opener-PolicyNot detected
—
Cross-Origin-Embedder-PolicyNot detected
—
Cross-Origin-Resource-PolicyNot detected

DNS propagationComparison across public resolvers

Public resolver comparison

Review
!
Differences detected

5 public resolvers queried.

ResolverServerResultLatency
Google
8.8.8.8
52.84.127.110, 52.84.127.112, 52.84.127.15, 52.84.127.35
81,75 ms
Cloudflare
1.1.1.1
108.138.159.101, 108.138.159.23, 108.138.159.76, 108.138.159.87
53,59 ms
Quad9
9.9.9.9
3.171.22.43, 3.171.22.48, 3.171.22.86, 3.171.22.88
85,37 ms
OpenDNS
208.67.222.222
52.84.127.110, 52.84.127.112, 52.84.127.15, 52.84.127.35
83,55 ms
AdGuard
94.140.14.14
54.192.100.117, 54.192.100.124, 54.192.100.68, 54.192.100.76
321,56 ms

IP, geolocation and ASNAssociated network information

3.171.22.86

No data
success
No
country
region
city
asn
organization
isp

3.171.22.43

No data
success
No
country
region
city
asn
organization
isp

3.171.22.48

No data
success
No
country
region
city
asn
organization
isp

3.171.22.88

No data
success
No
country
region
city
asn
organization
isp

Visitor information

Visitor
ip
216.73.217.62
reverse
country
country_code
region
city
latitude
longitude
isp
organization
asn
timezone
browser
Other
os
Other
language
user_agent
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
is_bot
Yes
cloudflare
No

SMTPEmail port connectivity

aspmx.l.google.com

Port 25: Closed/unreachable - 21.7 ms - 220 mx.google.com ESMTP 586e51a60fabf-459f19ecd75si5216869fac.6 - gsmtp
Port 465: Closed/unreachable - 4002.3 ms - 
Port 587: Closed/unreachable - 4021.1 ms -

Recently analyzed domains

View all →
mn.us4kpn.com97uslegal.com81elindependiente.com83designi1.com72rijksoverheid.nl96znanierussia.ru75chiba.jp4bc.ca4www.news.bbc.co.uk4