Domain technical report
The Nest
thenest.com
The Nest is the go-to guide for newlyweds — relationships, home, money and building your life together.
IPv42
IPv62
MX5
NS2
Analyze any domain
Get a complete DNS, email, SSL, HTTP and network analysis in seconds.
81
Total
85
DNS
70
Email
77
Security
70
Network
100
Availability
Domainthenest.com
IPv42
IPv62
MX records5
StatusActive
DiagnosticsMain findings and recommendations
IPv4 (A)30 / 30 pts · Dns
2 IPv4 address(es) detected.
IPv6 (AAAA)10 / 10 pts · Dns
2 IPv6 address(es) detected.
Name server redundancy20 / 20 pts · Dns
2 NS record(s); 2 or more required.
SOA record10 / 10 pts · Dns
Authoritative zone record.
DNSSEC chain0 / 15 pts · Dns
Both DS and DNSKEY are required.
CAA policy5 / 5 pts · Dns
Certificate authority restriction.
DNS propagation10 / 10 pts · Dns
Agreement between public resolvers.
MX records20 / 20 pts · Mail
5 MX record(s).
SPF25 / 25 pts · Mail
SPF policy published.
DMARC25 / 25 pts · Mail
DMARC policy published.
DKIM0 / 20 pts · Mail
No tested DKIM selector responded.
MTA-STS0 / 5 pts · Mail
Mail transport policy.
TLS-RPT0 / 5 pts · Mail
TLS reporting policy.
Valid TLS certificate55 / 55 pts · Security
62 day(s) remaining.
Certificate lifetime10 / 10 pts · Security
Full points require at least 30 days remaining.
HTTP security headers12 / 35 pts · Security
3 of 9 evaluated headers detected.
PTR reverse DNS0 / 30 pts · Network
PTR not detected.
IPv4 diversity35 / 35 pts · Network
Two or more IPv4 addresses receive full points.
IPv6 connectivity35 / 35 pts · Network
AAAA availability.
DNS resolution40 / 40 pts · Availability
At least one address family must resolve.
HTTP response40 / 40 pts · Availability
HTTP/2 200
HTTPS final URL20 / 20 pts · Availability
Final URL uses HTTPS.
DNS and emailPublished records and email configuration
A
2 record(s)172.67.223.141 104.21.70.129
AAAA
2 record(s)2606:4700:3032::6815:4681 2606:4700:3036::ac43:df8d
CNAME
0 record(s)—
Not configured
MX
5 record(s)30 aspmx3.googlemail.com. 30 aspmx2.googlemail.com. 20 alt1.aspmx.l.google.com. 10 aspmx.l.google.com. 20 alt2.aspmx.l.google.com.
TXT
10 record(s)"MS=ms57495323" "loaderio=d74da07e44831b1c81aff4408afd8d56" "google-site-verification=6PhddqtNrX4UOT-YG4TJG6M9vAJeKXF7YXayl_kdfTU" "globalsign-domain-verification=8frsHcE2ag-0ccaaP5BTpPmUJC8ob8pdjDQchfAWzD" "v=spf1 a mx include:_spf.google.com ~all" "google-site-verification=BvStdHcM3nRiMEr46C-UllFeE1tTcycWoapsHM_LWoE" "google-site-verification=8JU6cOVxfrSSvUuc-AH2dMJFn0Eh6TQ6bUWJKDZIePw" "google-site-verification=_wVNAlxt61iwleIHKYSV0Ra3GpGMzy1NwC2novx-7Q4" "thenest.com" "google-site-verification=Uxjlccjjn2tQVeJ1lus2E1B50nD5rp0lcNue9AchzZM"
NS
2 record(s)will.ns.cloudflare.com. edna.ns.cloudflare.com.
SOA
1 record(s)edna.ns.cloudflare.com. dns.cloudflare.com. 2410476545 10000 2400 604800 1800
CAA
11 record(s)0 issuewild "pki.goog; cansignhttpexchanges=yes" 0 issue "digicert.com; cansignhttpexchanges=yes" 0 issuewild "letsencrypt.org" 0 issue "pki.goog; cansignhttpexchanges=yes" 0 issue "ssl.com" 0 issuewild "comodoca.com" 0 issue "amazon.com" 0 issuewild "ssl.com" 0 issue "comodoca.com" 0 issuewild "digicert.com; cansignhttpexchanges=yes" 0 issue "letsencrypt.org"
DS
0 record(s)—
Not configured
DNSKEY
0 record(s)—
Not configured
RRSIG
0 record(s)—
Not configured
NSEC
0 record(s)—
Not configured
NSEC3
0 record(s)—
Not configured
SRV
0 record(s)—
Not configured
NAPTR
0 record(s)—
Not configured
TLSA
0 record(s)—
Not configured
SSHFP
0 record(s)—
Not configured
SPF
Configuredv=spf1 a mx include:_spf.google.com ~all
DMARC
Configuredv=DMARC1; p=none; rua=mailto:4a9a45bfa4e147e5abf28bb12e14bef2@dmarc-reports.cloudflare.net,mailto:dmarc@technologyadvice.com; ruf=mailto:dmarc@technologyadvice.com
DKIM
Not found—
Not configured
Analyzed webpageMetadata and HTTP response
Title and description
ExtractedTitle
The Nest
Description
The Nest is the go-to guide for newlyweds — relationships, home, money and building your life together.
Final URL
https://www.thenest.com/
HTTP status
200
HTTP
Status
HTTP/2 200
Final URL
https://www.thenest.com/
Version
3
Server
cloudflare
X-Powered-By
SSL and HTTP securityCertificate, protocol and security headers
SSL certificate
AvailableAvailable
Yes
Issuer
Google Trust Services
CN
thenest.com
Valid from
2026-07-15T23:28:53-05:00
Valid until
2026-10-14T00:28:46-05:00
Days remaining
62
Protocol
TLSv1.3
Cipher
TLS_AES_256_GCM_SHA384
Security headers
3 activeHSTSNot detected
Content Security PolicyNot detected
X-Content-Type-OptionsImplemented
X-Frame-OptionsImplemented
Referrer PolicyImplemented
Permissions PolicyNot detected
Cross-Origin-Opener-PolicyNot detected
Cross-Origin-Embedder-PolicyNot detected
Cross-Origin-Resource-PolicyNot detected
DNS propagationComparison across public resolvers
Public resolver comparison
ConsistentConsistent propagation
5 public resolvers queried.
ResolverServerResultLatency
Google
8.8.8.8104.21.70.129, 172.67.223.141
62,56 ms
Cloudflare
1.1.1.1104.21.70.129, 172.67.223.141
27,69 ms
Quad9
9.9.9.9104.21.70.129, 172.67.223.141
37,18 ms
OpenDNS
208.67.222.222104.21.70.129, 172.67.223.141
34,05 ms
AdGuard
94.140.14.14104.21.70.129, 172.67.223.141
70,89 ms
IP, geolocation and ASNAssociated network information
172.67.223.141
No datasuccess
No
country
region
city
asn
organization
isp
104.21.70.129
No datasuccess
No
country
region
city
asn
organization
isp
Visitor information
Visitorip
216.73.216.212
reverse
country
country_code
region
city
latitude
longitude
isp
organization
asn
timezone
browser
Other
os
Other
language
user_agent
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
is_bot
Yes
cloudflare
No
SMTPEmail port connectivity
aspmx3.googlemail.com
Port 25: Closed/unreachable - 38.6 ms - Port 465: Closed/unreachable - 4042.9 ms - Port 587: Closed/unreachable - 4018.5 ms -