Domain technical report
403 Forbidden
vanityfair.it
IPv43
IPv60
MX5
NS4
Analyze any domain
Get a complete DNS, email, SSL, HTTP and network analysis in seconds.
71
Total
70
DNS
90
Email
65
Security
65
Network
60
Availability
Domainvanityfair.it
IPv43
IPv60
MX records5
StatusActive
DiagnosticsMain findings and recommendations
IPv4 (A)30 / 30 pts · Dns
3 IPv4 address(es) detected.
IPv6 (AAAA)0 / 10 pts · Dns
0 IPv6 address(es) detected.
Name server redundancy20 / 20 pts · Dns
4 NS record(s); 2 or more required.
SOA record10 / 10 pts · Dns
Authoritative zone record.
DNSSEC chain0 / 15 pts · Dns
Both DS and DNSKEY are required.
CAA policy0 / 5 pts · Dns
Certificate authority restriction.
DNS propagation10 / 10 pts · Dns
Agreement between public resolvers.
MX records20 / 20 pts · Mail
5 MX record(s).
SPF25 / 25 pts · Mail
SPF policy published.
DMARC25 / 25 pts · Mail
DMARC policy published.
DKIM20 / 20 pts · Mail
A DKIM selector was verified.
MTA-STS0 / 5 pts · Mail
Mail transport policy.
TLS-RPT0 / 5 pts · Mail
TLS reporting policy.
Valid TLS certificate55 / 55 pts · Security
156 day(s) remaining.
Certificate lifetime10 / 10 pts · Security
Full points require at least 30 days remaining.
HTTP security headers0 / 35 pts · Security
0 of 9 evaluated headers detected.
PTR reverse DNS30 / 30 pts · Network
PTR: ec2-18-234-17-140.compute-1.amazonaws.com
IPv4 diversity35 / 35 pts · Network
Two or more IPv4 addresses receive full points.
IPv6 connectivity0 / 35 pts · Network
AAAA availability.
DNS resolution40 / 40 pts · Availability
At least one address family must resolve.
HTTP response0 / 40 pts · Availability
HTTP/2 403
HTTPS final URL20 / 20 pts · Availability
Final URL uses HTTPS.
DNS and emailPublished records and email configuration
A
3 record(s)18.234.17.140 3.212.248.91 52.7.171.160
AAAA
0 record(s)—
Not configured
CNAME
0 record(s)—
Not configured
MX
5 record(s)5 alt1.aspmx.l.google.com. 10 alt4.aspmx.l.google.com. 5 alt2.aspmx.l.google.com. 1 aspmx.l.google.com. 10 alt3.aspmx.l.google.com.
TXT
9 record(s)"3su1ftq3b144gu2lslmaqcl26q" "google-site-verification=AQf-0fIfCCbtUg0sXjT_7GARcjf2_LmPnr1VFxL8UFc" "google-site-verification=VrTGIU_qTFw4MEy2knFl9vv4b4ghIIp34myWPx2bvuo" "cqjujdih32fd4e4cmk8f78pv0g" "google-site-verification=GrqOUIAbkt4KJmWHLgNoCoRZdvsKo0DLS5OaoULmrXQ" "google-site-verification=dXOEC64iDfTEJ3VtiFSKohhrGn91faM9qGnUfEOdVC4" "yahoo-verification-key=25zze9RGK1OhdY4E1ICUN69ootV+HF0lue7Nt7IgZI4=" "v=spf1 include:_u.vanityfair.it._spf.smart.ondmarc.com ~all" "google-site-verification=zudIjvly4cy5_mKdt3vrXvTea9xVNQXbc-jDeFoxfns"
NS
4 record(s)ns-28.awsdns-03.com. ns-836.awsdns-40.net. ns-1935.awsdns-49.co.uk. ns-1116.awsdns-11.org.
SOA
1 record(s)ns-1935.awsdns-49.co.uk. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400
CAA
0 record(s)—
Not configured
DS
0 record(s)—
Not configured
DNSKEY
0 record(s)—
Not configured
RRSIG
0 record(s)—
Not configured
NSEC
0 record(s)—
Not configured
NSEC3
0 record(s)—
Not configured
SRV
0 record(s)—
Not configured
NAPTR
0 record(s)—
Not configured
TLSA
0 record(s)—
Not configured
SSHFP
0 record(s)—
Not configured
SPF
Configuredv=spf1 include:_u.vanityfair.it._spf.smart.ondmarc.com ~all
DMARC
Configuredv=DMARC1; p=reject; pct=100; sp=reject; rua=mailto:a6816915@inbox.ondmarc.com; ruf=mailto:a6816915@inbox.ondmarc.com; adkim=r; aspf=r; fo=1; rf=afrf; ri=3600
DKIM
Selector googlev=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCQWgoJV/kVSt0yKMlHTh3xFnghpyHGlTdx/gAGVGBMSi4nBQVJzh7KzqmKiEzKHlXfQaBWe35ZHLkBjSSnaeLm7M4PKW+imBjNlSNouE9vFq3cTcQ7lwFhNuKxfwzjfnPTv1MtQuEo8gjsvi3uTp5DIUjgP4x6Mro8OQLFF49LDQIDAQAB
Analyzed webpageMetadata and HTTP response
Title and description
ExtractedTitle
403 Forbidden
Description
Final URL
https://vanityfair.it/
HTTP status
403
HTTP
Status
HTTP/2 403
Final URL
https://vanityfair.it/
Version
3
Server
awselb/2.0
X-Powered-By
SSL and HTTP securityCertificate, protocol and security headers
SSL certificate
AvailableAvailable
Yes
Issuer
Amazon
CN
condenast.com
Valid from
2026-06-30T19:00:00-05:00
Valid until
2027-01-14T17:59:59-06:00
Days remaining
156
Protocol
TLSv1.2
Cipher
ECDHE-RSA-AES128-GCM-SHA256
Security headers
0 activeHSTSNot detected
Content Security PolicyNot detected
X-Content-Type-OptionsNot detected
X-Frame-OptionsNot detected
Referrer PolicyNot detected
Permissions PolicyNot detected
Cross-Origin-Opener-PolicyNot detected
Cross-Origin-Embedder-PolicyNot detected
Cross-Origin-Resource-PolicyNot detected
DNS propagationComparison across public resolvers
Public resolver comparison
ConsistentConsistent propagation
5 public resolvers queried.
ResolverServerResultLatency
Google
8.8.8.818.234.17.140, 3.212.248.91, 52.7.171.160
83,33 ms
Cloudflare
1.1.1.118.234.17.140, 3.212.248.91, 52.7.171.160
130,29 ms
Quad9
9.9.9.918.234.17.140, 3.212.248.91, 52.7.171.160
292,94 ms
OpenDNS
208.67.222.22218.234.17.140, 3.212.248.91, 52.7.171.160
33,28 ms
AdGuard
94.140.14.1418.234.17.140, 3.212.248.91, 52.7.171.160
143,13 ms
IP, geolocation and ASNAssociated network information
18.234.17.140
No datasuccess
No
country
region
city
asn
organization
isp
3.212.248.91
No datasuccess
No
country
region
city
asn
organization
isp
52.7.171.160
No datasuccess
No
country
region
city
asn
organization
isp
Visitor information
Visitorip
216.73.217.62
reverse
country
country_code
region
city
latitude
longitude
isp
organization
asn
timezone
browser
Other
os
Other
language
user_agent
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
is_bot
Yes
cloudflare
No
SMTPEmail port connectivity
alt1.aspmx.l.google.com
Port 25: Closed/unreachable - 1.3 ms - Port 465: Closed/unreachable - 4003.1 ms - Port 587: Closed/unreachable - 4021.2 ms -