Analyze any domain

Get a complete DNS, email, SSL, HTTP and network analysis in seconds.

Total

DNS

Email

Security

Network

Availability

Domainthinkific.com

IPv41

IPv60

MX records2

StatusActive

Domain technical report

Error 403 Forbidden

thinkific.com

Generated: 2026-08-08T23:27:44-05:00 · Cached result

JSON CSV PDF Visit site

IPv41

IPv60

MX2

NS2

DiagnosticsMain findings and recommendations

✓

IPv4 (A)30 / 30 pts · Dns

1 IPv4 address(es) detected.

IPv6 (AAAA)0 / 10 pts · Dns

0 IPv6 address(es) detected.

✓

Name server redundancy20 / 20 pts · Dns

2 NS record(s); 2 or more required.

✓

SOA record10 / 10 pts · Dns

Authoritative zone record.

DNSSEC chain0 / 15 pts · Dns

Both DS and DNSKEY are required.

✓

CAA policy5 / 5 pts · Dns

Certificate authority restriction.

✓

DNS propagation10 / 10 pts · Dns

Agreement between public resolvers.

✓

MX records20 / 20 pts · Mail

2 MX record(s).

✓

SPF25 / 25 pts · Mail

SPF policy published.

✓

DMARC25 / 25 pts · Mail

DMARC policy published.

✓

DKIM20 / 20 pts · Mail

A DKIM selector was verified.

MTA-STS0 / 5 pts · Mail

Mail transport policy.

TLS-RPT0 / 5 pts · Mail

TLS reporting policy.

✓

Valid TLS certificate55 / 55 pts · Security

78 day(s) remaining.

✓

Certificate lifetime10 / 10 pts · Security

Full points require at least 30 days remaining.

HTTP security headers0 / 35 pts · Security

0 of 9 evaluated headers detected.

PTR reverse DNS0 / 30 pts · Network

PTR not detected.

IPv4 diversity20 / 35 pts · Network

Two or more IPv4 addresses receive full points.

IPv6 connectivity0 / 35 pts · Network

AAAA availability.

✓

DNS resolution40 / 40 pts · Availability

At least one address family must resolve.

HTTP response0 / 40 pts · Availability

HTTP/2 403

✓

HTTPS final URL20 / 20 pts · Availability

Final URL uses HTTPS.

DNS and emailPublished records and email configuration

A

1 record(s)

162.159.135.42

AAAA

0 record(s)

—

Not configured

CNAME

0 record(s)

—

Not configured

MX

2 record(s)

10 ca-smtp-inbound-2.mimecast.com.
10 ca-smtp-inbound-1.mimecast.com.

TXT

33 record(s)

"cursor-domain-verification-pjpycz=oLOdsiCSINcnOpSzNE0HAMVos"
"anthropic-domain-verification-1kww8r=IMnB8N42ytLbj11TImbx31DZl"
"ca3-0e79582e49c341f6a7c6c518c02e4f92"
"ca3-892e52761ee2442aacf648e45ba02cec"
"zapier-domain-verification-challenge=cd11c05c-5fe2-4aaf-8105-5c3b8f293cba"
"v=spf1 a mx include:_spf.google.com include:mail.zendesk.com include:kinsta-flattened-1.thinkific.com include:kinsta-flattened-2.thinkific.com  include:ca._netblocks.mimecast.com include:_spf.salesforce.com ip4:23.21.109.197 ip4:23.21.109.212 ip4:147.160." "167.0/26 -all"
"ca3-60fcf7d4fca2430b96e7615542fdf9bc"
"stripe-verification=3912b974376d420e276be1769b4a4afc86910e8c24890a8dca330993c2278646"
"MS=78777F3F398BF16F86EE7A11109611A320E95E0F"
"stripe-verification=94c6002c6d4819229e4de2528d648697c77f43c66541cd17ef08ea2c8dd46e93"
"stripe-verification=d347622ec3730d985a205573247029988811abe0db484444a7058ccc632fb397"
"miro-verification=f9b8fc18ef07dde4b6aad3c864454a1121693a13"
"zapier-domain-verification-challenge=f6e46657-2158-4684-a8c2-8a672f0ec9d2"
"ZOOM_verify_ZbY5QZ4YbOrmWJ6lq1VuPg"
"status-page-domain-verification=pyctf37sgc01"
"google-site-verification=_Nb74SvlYZiQUH3kXBu54BdDQtli7SDY0Jspdbr-UrI"
"onetrust-domain-verification=886468f9f6de4ce1a841cc21ecbbcc8c"
"slack-domain-verification=cmLZ5KSyBuLhjg0eIxkL5MEecyQrK5xk9UU46ZNY"
"stripe-verification=0f591eccfda72124590e2f0f0c9b6bd8dc37ce03a7f16fb614070c10b80ac1df"
"google-site-verification=HCggDgFBKaL7EhlCeS8cSPQHTisFgLlm0mvBR-BLqYs"
"google-site-verification=EgYql9Xt8LBWmYYK2xfUqa5TmJerNJZt41wSnIRoIqA"
"atlassian-domain-verification=nIhkyfCe6slV5C/WasRqHuAP0mukWzBMOKwwzZauCMUwnDo8RtujxihGbMXsFMbq"
"google-site-verification=Vj64GOHOBgmOVYc7l_L121VvUQISualj_3NOGzU4734"
"hubspot-developer-verification=MTA2NmFkZTUtMzNhMC00NjEyLWE0YjctZTY3YjdmNGVhZjM0"
"stripe-verification=fccf8ad5b37c0810c0b5e474b9e6b766cdb332fd4f6ee70304026c9cc4a9b80d"
"mixpanel-domain-verify=e9dc93b0-6e8f-4058-8c43-255293eb1899"
"stripe-verification=a06bb9be52c15fd5cb25eae3f04d2500574575899382dab6dc317d24050369c9"
"stripe-verification=79573935b1e7e55f563d2b379b864af4247c6ea1b484d45cd9a15e8e0a035437"
"mgverify=0cbc0ee2f375425b8a226a122700192eb2aa5862e20c2c8a6e83b41acf167910"
"apple-domain-verification=wNPvGBCj02VaUYS0"
"google-site-verification=-zqXGL4Yw98i4ge0wVccJ41dhqR4ncEEGfpjCIDWq-Q"
"stripe-verification=7969af30dfd7e3a69636c0d8d08d5011ebf05e6fd9eee6dfa07f75eff5a18c66"
"google-site-verification=a-g6ytqiblxcBDwroQVNy4o4cEwrPkLnyuiSynZ1Upc"

NS

2 record(s)

memphis.ns.cloudflare.com.
lindsey.ns.cloudflare.com.

SOA

1 record(s)

lindsey.ns.cloudflare.com. dns.cloudflare.com. 2411347769 10000 2400 604800 1800

CAA

14 record(s)

0 iodef "mailto:security@thinkific.com"
0 issue "digicert.com; cansignhttpexchanges=yes"
0 issuewild "pki.goog; cansignhttpexchanges=yes"
0 issuewild "amazon.com"
0 issue "godaddy.com"
0 issue "comodoca.com"
0 issue "amazon.com"
0 issue "letsencrypt.org"
0 issuewild "comodoca.com"
0 issuewild "digicert.com; cansignhttpexchanges=yes"
0 issuewild "letsencrypt.org"
0 issue "ssl.com"
0 issue "pki.goog; cansignhttpexchanges=yes"
0 issuewild "ssl.com"

DS

0 record(s)

—

Not configured

DNSKEY

0 record(s)

—

Not configured

RRSIG

0 record(s)

—

Not configured

NSEC

0 record(s)

—

Not configured

NSEC3

0 record(s)

—

Not configured

SRV

0 record(s)

—

Not configured

NAPTR

0 record(s)

—

Not configured

TLSA

0 record(s)

—

Not configured

SSHFP

0 record(s)

—

Not configured

SPF

Configured

v=spf1 a mx include:_spf.google.com include:mail.zendesk.com include:kinsta-flattened-1.thinkific.com include:kinsta-flattened-2.thinkific.com  include:ca._netblocks.mimecast.com include:_spf.salesforce.com ip4:23.21.109.197 ip4:23.21.109.212 ip4:147.160.167.0/26 -all

DMARC

Configured

v=DMARC1; p=reject; pct=100; rua=mailto:re+lhfowlrksk6@dmarc.postmarkapp.com; ruf=mailto:dmarc@thinkific.com; aspf=r;

DKIM

Selector google

v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6yirqW3sg6ylboXbuAysgvOMQKKXBIMpx2/hI8dqPrVTuLcL5qwVUo6AmzC4LbRDJrvPnAmBYNdjxMwGXSff1DWUMc1s8qzX2dECyF6yzzXMuk/UCKijV6Ep6Sg7lIJbtzS0F26gjoa4X5eof3o20aIAhuFReObKRTJD+e+vr9QIDAQAB

Analyzed webpageMetadata and HTTP response

Title and description

Extracted

Title

Error 403 Forbidden

Description

Final URL

https://thinkific.com/

HTTP status

403

HTTP

Status

HTTP/2 403

Final URL

https://thinkific.com/

Version

Server

cloudflare

X-Powered-By

SSL and HTTP securityCertificate, protocol and security headers

SSL certificate

Available

Yes

Issuer

Let's Encrypt

thinkific.com

Valid from

2026-07-28T05:28:05-05:00

Valid until

2026-10-26T05:28:04-05:00

Days remaining

Protocol

TLSv1.3

Cipher

TLS_AES_256_GCM_SHA384

Security headers

0 active

—

HSTSNot detected

—

Content Security PolicyNot detected

—

X-Content-Type-OptionsNot detected

—

X-Frame-OptionsNot detected

—

Referrer PolicyNot detected

—

Permissions PolicyNot detected

—

Cross-Origin-Opener-PolicyNot detected

—

Cross-Origin-Embedder-PolicyNot detected

—

Cross-Origin-Resource-PolicyNot detected

DNS propagationComparison across public resolvers

Public resolver comparison

Consistent

✓

Consistent propagation

5 public resolvers queried.

ResolverServerResultLatency

Google

8.8.8.8

162.159.135.42

89,47 ms

Cloudflare

1.1.1.1

162.159.135.42

47,35 ms

Quad9

9.9.9.9

162.159.135.42

51,89 ms

OpenDNS

208.67.222.222

162.159.135.42

56,52 ms

AdGuard

94.140.14.14

162.159.135.42

90,78 ms

IP, geolocation and ASNAssociated network information

162.159.135.42

No data

success

country

region

city

asn

organization

isp

Visitor information

Visitor

216.73.217.62

reverse

country

country_code

region

city

latitude

longitude

isp

organization

asn

timezone

browser

Other

language

user_agent

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)

is_bot

Yes

cloudflare

SMTPEmail port connectivity

ca-smtp-inbound-2.mimecast.com

Port 25: Closed/unreachable - 31.1 ms - 
Port 465: Closed/unreachable - 4050 ms - 
Port 587: Closed/unreachable - 50.7 ms - 220 ca-smtp-inbound-1.mimecast.com ESMTP; Sun, 09 Aug 2026 00:27:44 -0400

Recently analyzed domains

View all →

dovecot.org97 ticketfly.com30 kpn.com97 ab.ca4 apnic.net95 gsa.gov95 go.id15 chiba.jp4 bny.com80 copyleaks.com89