registeredtarget

google.com

Visit
Registrar
MarkMonitor Inc.
Age
29y 2m
Expires
2028-09-14
IP
172.253.122.102
Network
GOOGLE
Edge
TLS
Mail

01WHOIS

rdap
Registrar
MarkMonitor Inc.
Created
1997-09-15 · 29y 2m ago
Updated
2019-09-09
Expires
2028-09-14 · in 671d
DNSSEC
unsigned
Status
client delete prohibitedclient transfer prohibitedclient update prohibitedserver delete prohibitedserver transfer prohibitedserver update prohibited
Name servers4
  • ns1.google.com
  • ns2.google.com
  • ns3.google.com
  • ns4.google.com
Contacts

Redacted or privacy-protected by the registry.

02DNS zone

50 records · DNSSEC off
TypeHostTTLValue
SOA@1mns1.google.com. dns-admin.google.com. 1019121829 900 900 1800 60
NS@5651mns1.google.com.
NS@5651mns2.google.com.
NS@5651mns3.google.com.
NS@5651mns4.google.com.
A@1m172.253.62.102
A@1m172.253.62.101
A@1m172.253.62.138
A@1m172.253.62.113
A@1m172.253.62.139
A@1m172.253.62.100
AAAA@1m2607:f8b0:4004:c17::64
AAAA@1m2607:f8b0:4004:c17::8a
AAAA@1m2607:f8b0:4004:c17::71
AAAA@1m2607:f8b0:4004:c17::8b
MX@1m10 smtp.google.com.
TXT@2mMS=E4A68B9AB2BB9670BCE15412F62916164C0B20BB
TXT@2mgoogle-site-verification=TV9-DBe4R80X4v0M4U_bd_J9cpOJM0nikft0jAgjmsQ
TXT@2mv=spf1 include:_spf.google.com ~all
TXT@2mglobalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8=
TXT@2m_r4rd1pvwyrpi7sw4a3hzmw8e51yh9td
TXT@2mgoogle-site-verification=4ibFUgB-wXLQ_S7vsXVomSTVamuOXBiVAzpR5IZ87D0
TXT@2monetrust-domain-verification=0d477fe608074e6f9c12bca7826035cc
TXT@2mdocusign=1b0a6754-49b1-4db5-8540-d2c12664b289
TXT@2mdocusign=05958488-4752-4ef2-95eb-aa7ba8a3bd0e
TXT@2mfacebook-domain-verification=22rm551cu4k0ab0bxsw536tlds4h95
TXT@2mcisco-ci-domain-verification=47c38bc8c4b74b7233e9053220c1bbe76bcc1cd33c7acf7acd36cd6a5332004b
TXT@2mapple-domain-verification=30afIBcvSuDV2PLX
TXT@2monetrust-domain-verification=6d685f1d41a94696ad7ef771f68993e0
TXT@2mZ29vZ2xl
TXT@2mgoogle-site-verification=wD8N7i1JTNTkezJ49swvWW48f8_9xveREV4oB-0Hf5o
TXT@2mwork-accounts-domain-verification=Tcj6JjIMZOw2KsSEw2Nt2rLae89tN6
TXT@2marcules-domain-verification=2R4t5G7nI6tRCo61lpxxbLksPYstxhGmtV75cpr8x9K
CAA@1d0 issue "pki.goog"
Awww1m142.251.157.119
Awww1m142.251.150.119
Awww1m142.251.152.119
Awww1m142.251.151.119
Awww1m142.251.155.119
Awww1m142.251.154.119
Awww1m142.251.153.119
Awww1m142.251.156.119
AAAAwww1m2001:4860:4828:7700::
AAAAwww1m2001:4860:4827:7700::
AAAAwww1m2001:4860:4829:7700::
AAAAwww1m2001:4860:482b:7700::
AAAAwww1m2001:4860:482d:7700::
AAAAwww1m2001:4860:482a:7700::
AAAAwww1m2001:4860:4826:7700::
AAAAwww1m2001:4860:482c:7700::

03Network

Network
GOOGLE - Google LLC, US
ASN · Country
AS15169 · US · ARIN
Addresses6
  • v4172.253.122.102172.253.122.0/24 · bh-in-f102.1e100.net
  • v4172.253.122.101172.253.122.0/24 · bh-in-f101.1e100.net
  • v4172.253.122.113172.253.122.0/24 · bh-in-f113.1e100.net
  • v4172.253.122.138172.253.122.0/24 · bh-in-f138.1e100.net

04Propagation

  • Cloudflare
    1.1.1.1
    172.253.63.100172.253.63.101172.253.63.102172.253.63.113172.253.63.138172.253.63.139
  • Google
    8.8.8.8
    172.253.62.100172.253.62.101172.253.62.102172.253.62.113172.253.62.138172.253.62.139
  • Quad9
    9.9.9.9
    173.194.45.100173.194.45.101173.194.45.102173.194.45.113173.194.45.138173.194.45.139
  • OpenDNS
    208.67.222.222
    172.253.62.100172.253.62.101172.253.62.102172.253.62.113172.253.62.138172.253.62.139

≠ answers differ (CDN / propagating)

06Email authentication

05TLS certificate

07Web & headers

Analysis & suggestions

08Health score

Critical0
Warning0
Suggestion2
Passed5
Registration2/2
DNS3/5
Email—
Security—
Website—

09Findings

Fix these0

Scanning…

Recommended2

  • DNSSEC not enabled

    DNSSEC protects visitors from forged DNS answers.

    Fix

    Enable DNSSEC at your DNS provider, then add the DS record at your registrar.

  • Resolvers return different IP addresses

    Either a DNS change is still propagating, or the domain uses geo/load-balanced DNS.

    Fix

    If you recently changed DNS, wait for the old TTL to expire. Otherwise this is usually expected for CDNs.

Passed5

  • Domain registered until 2028-09-14
  • Transfer lock is enabled
  • 4 name servers configured
  • IPv6 enabled
  • CAA record restricts certificate issuers