IPv6 Addresses Detected
2600:9000:2721:f400:f:1353:fac0:93a1
2600:9000:2721:1200:f:1353:fac0:93a1
2600:9000:2721:da00:f:1353:fac0:93a1
2600:9000:2721:6000:f:1353:fac0:93a1
2600:9000:2721:ec00:f:1353:fac0:93a1
2600:9000:2721:a000:f:1353:fac0:93a1
2600:9000:2721:9000:f:1353:fac0:93a1
2600:9000:2721:1a00:f:1353:fac0:93a1
IPv4 Addresses Detected
3.165.102.109
3.165.102.32
3.165.102.105
3.165.102.42
Network Information
WHOISIPv6 Network
- Organization
- Amazon.com, Inc.
- Country
- US
- ASN
- AS16509 AMAZON-02 - Amazon.com, Inc., US
- Network
- 2600:9000::/28
IPv4 Network
- Organization
- Amazon.com, Inc.
- Country
- US
- ASN
- AS16509 AMAZON-02 - Amazon.com, Inc., US
- Network
- 3.165.0.0/16
Web Services
35%The domain has at least one IPv6 address (AAAA DNS record).
✓ 2600:9000:2721:f400:f:1353:fac0:93a1, 2600:9000:2721:1200:f:1353:fac0:93a1, 2600:9000:2721:da00:f:1353:fac0:93a1, 2600:9000:2721:6000:f:1353:fac0:93a1, 2600:9000:2721:ec00:f:1353:fac0:93a1, 2600:9000:2721:a000:f:1353:fac0:93a1, 2600:9000:2721:9000:f:1353:fac0:93a1, 2600:9000:2721:1a00:f:1353:fac0:93a1
The IPv6 addresses are publicly routable — not link-local, ULA, loopback or documentation ranges.
✓ All addresses are globally routable.
Website reachable on port 80 when connecting via IPv6.
✓ HTTP (port 80) responds over IPv6.
Website reachable on port 443 when connecting via IPv6.
✓ HTTPS (port 443) responds over IPv6 — 25ms TTFB.
Website responds when connected exclusively over IPv6, with no IPv4 fallback. Simulates what happens when IPv4 is turned off.
✗ Site is not reachable when limited to IPv6-only.
The SSL/TLS certificate is valid, not expired, and matches the domain when connected via IPv6.
✓ Certificate valid — issued by C = US, O = Amazon, CN = Amazon RSA 2048 M01, expires Nov 5 23:59:59 2026 GMT
The domain has both A and AAAA records for backwards compatibility during the IPv6 transition.
✓ Domain has both A and AAAA records.
Server advertises HTTP/3 support via the Alt-Svc: h3 header.
✓ Alt-Svc: h3 header detected.
DNS & DNSSEC
25%At least one authoritative nameserver has an IPv6 address (AAAA record).
✓ Nameserver has IPv6 address.
Authoritative nameserver accepts TCP connections on port 53 over IPv6.
✓ Nameserver is reachable via IPv6 on port 53.
Nameserver actually resolves DNS queries when asked over IPv6 — not just TCP open, but functionally answering.
✓ DNS queries answered over IPv6.
Full DNSSEC chain-of-trust validation passes. Prevents DNS cache poisoning and spoofing.
✗ DNSSEC validation failed or zone is unsigned.
A PTR record exists in ip6.arpa for the IPv6 address. Important for email delivery and network diagnostics.
✗ No PTR record found.
Delegation Signer record exists in the parent zone.
✗ No DS record at parent.
RRSIG signatures are present and not expired.
✗ No valid RRSIG found.
The cryptographic algorithm used for DNSSEC signing.
No DNSKEY record found.
Email Services
25%The domain has at least one MX (Mail Exchange) DNS record pointing to a mail server.
✓ MX record found.
The highest-priority MX server resolves to an IPv6 address (AAAA record).
✓ MX server has AAAA record.
The MX server accepts SMTP connections (port 25) over IPv6 and responds with a 220 banner.
✓ SMTP port 25 responds over IPv6.
The MX server supports STARTTLS encryption when connected over IPv6.
✓ STARTTLS supported over IPv6.
A TXT record with v=spf1 exists, declaring which servers may send email for this domain.
✓ SPF record found.
A DKIM public key is published at a common selector, enabling email signature verification.
DKIM selector found: google._domainkey
A DMARC policy record exists at _dmarc.<domain>, enabling email authentication reporting.
✓ DMARC record found.
IPv4 Baseline
15%The domain has at least one IPv4 address (A DNS record).
✓ 3.165.102.109, 3.165.102.32, 3.165.102.105, 3.165.102.42
Website reachable on port 80 when connecting via IPv4.
✓ HTTP (port 80) responds over IPv4 — 44ms TTFB.
Website reachable on port 443 when connecting via IPv4.
✓ HTTPS (port 443) responds over IPv4 — 36ms TTFB.
Render-Path Dependencies
not weightedAn AAAA record on this domain says nothing about the stylesheets, scripts and fonts the page then loads from somewhere else. Those are scored here, separately, because a blended figure would flatter both numbers. This score does not affect the 86% above.
The dependency chain could not be walked because this check predates dependency scoring. This is recorded as unmeasured rather than counted against the domain.
DNS Resolution Performance
Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.
| Resolver | Transport | A (IPv4) | AAAA (IPv6) | Delta |
|---|---|---|---|---|
| System | Default | 21.99 ms (p95: 23.51) | 22.89 ms (p95: 23.91) | +0.9 ms |
| IPv4 | 81.39 ms (p95: 94.34) | 83.13 ms (p95: 95.84) | +1.7 ms | |
| IPv6 | 94.53 ms (p95: 95.33) | 84.4 ms (p95: 94.44) | -10.1 ms | |
| Cloudflare | IPv4 | 24.08 ms (p95: 27.55) | 24.7 ms (p95: 25.59) | +0.6 ms |
| Cloudflare | IPv6 | 20.73 ms (p95: 35.76) | 22.72 ms (p95: 24.21) | +2 ms |
This result is backed by an HMAC-SHA256 signed evidence record. Scan the code or follow the link to verify the audit trail independently.
d3a55c56-ea60-4a12-9457-37c777b13278
Score History
Check History
Last 4 checks
| Date | Score | Status | Triggered By |
|---|---|---|---|
|
08 Aug 2026 18:28 UTC |
86 % | Partial | manual |
|
08 Aug 2026 11:00 UTC |
86 % | Partial | manual |
|
01 Aug 2026 02:54 UTC |
77 % | Partial | scheduled |
|
04 Jul 2026 03:43 UTC |
77 % | Partial | manual |