Opens the print dialog of your browser. Choose "Save as PDF" as the printer there to get a file: the browser writes it, nothing is uploaded.
Share a snapshot of this report
A live report changes with every lookup, so a shared link to it would not show what you see now. A snapshot stores this report as our server observed it and gives it its own link for 30 days. It holds public lookup data only. Anyone with the link can open it; search engines are asked not to index it.
Some query types failed and may be missing: SOA. A missing record here is not evidence of absence. [EBADRESP]
Type
Name
Value
TTL
CNAME
designlanguage.mozilla.org
What the domain report checks
A domain is not one thing. It is a registration held at a registry, a set of DNS records served by nameservers, one or more servers that answer on the IP addresses those records point to, and usually a mail setup that lives somewhere else entirely. Problems tend to appear in the gaps between those layers, so the report looks at all of them in a single pass.
The registration section comes from RDAP, the structured successor to WHOIS: registrar, creation, update and expiry dates, status codes, nameservers and DNSSEC state. The DNS section queries public recursive resolvers for A, AAAA, NS, MX, TXT, CAA and SOA records. The mail section reads MX, SPF and DMARC. The hosting section maps each IP address to its network owner. The web section makes one HTTPS request and records redirects, the response status and the certificate the server presented.
DKIM keys are published under a selector chosen by the sender, so they cannot be discovered from the domain alone. Find the selector in the s= tag of a DKIM-Signature header.
Findings
No MX records
No MX records were found. Senders may fall back to the A/AAAA address, but the domain does not advertise a mail server.
No SPF record
No TXT record starting with "v=spf1" was found. For a domain that sends no mail, publishing "v=spf1 -all" states that explicitly.
DMARC policy is reject
An enforcing DMARC policy is published (inherited from mozilla.org). Its pct, alignment and reporting tags were not evaluated.
LiveSource: DNS · public resolvers 1.1.1.1, 8.8.8.8Observed:
Hosting and IP
Google LLC (AS396982) · US allocation + Google (AS396982) · edge network, origin not visible
This address belongs to a CDN or proxy network. It is not the origin server, and the allocation country is not the server's physical location.
LiveSource: Team Cymru IP-to-ASN (DNS) · IP RDAP · PTRObserved:
Web and TLS
HTTP status
200
Final URL
https://brand.mozilla.com/all-brands
Redirects
301 → https://mozilla.design/
301 → https://brand.mozilla.com/all-brands
Server header
frontify
Response time
94 ms
Page title
Mozilla Brand Portal - Mozilla Brand Portal
HSTS
HSTS
TLS
Chain validated
Chain validated
Issuer
Google Trust Services · WR3
Subject
designlanguage.mozilla.org
Valid from
Valid to
75 days left
Protocol
TLSv1.3
Alternative names
designlanguage.mozilla.org
LiveSource: Direct HTTPS request (headers + first 64 KB of HTML)Observed:
Change history
What this service recorded for this name on earlier checks. A check happens only when someone opens a report or calls the API: nothing is scheduled, so gaps between checks are normal.
52 checks since Oct 5, 2026, the latest on Oct 12, 2026.
Changes observed
No change in the recorded values across 52 checks.
Values on record
Registrar
MarkMonitor Inc. (IANA 292)
unchanged since Oct 5, 2026, seen in 13 checks · Source: RDAP · rdap.publicinterestregistry.org + rdap.markmonitor.com · Observed:
Expiry date
2027-01-23
unchanged since Oct 5, 2026, seen in 13 checks · Source: RDAP · rdap.publicinterestregistry.org + rdap.markmonitor.com · Observed:
unchanged since Oct 5, 2026, seen in 13 checks · Source: RDAP · rdap.publicinterestregistry.org + rdap.markmonitor.com · Observed:
IPv4 addresses (A)
35.190.14.201
unchanged since Oct 5, 2026, seen in 34 checks · Source: DNS · public resolvers 1.1.1.1, 8.8.8.8 · Observed:
IPv6 addresses (AAAA)
2600:1901:0:c197::
unchanged since Oct 5, 2026, seen in 34 checks · Source: DNS · public resolvers 1.1.1.1, 8.8.8.8 · Observed:
Certificate issuer
Google Trust Services · WR3
unchanged since Oct 5, 2026, seen in 17 checks · Source: Direct HTTPS request (headers + first 64 KB of HTML) · Observed:
Certificate expiry
2026-12-26
unchanged since Oct 5, 2026, seen in 17 checks · Source: Direct HTTPS request (headers + first 64 KB of HTML) · Observed:
Hosting networks
AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC (US)
unchanged since Oct 5, 2026, seen in 10 checks · Source: Team Cymru IP-to-ASN (DNS) · IP RDAP · PTR · Observed:
The history is kept for the domain name only; nothing about who looked it up is stored. Entries not seen again for 400 days are deleted. Changing A, AAAA and hosting values are normal for sites behind load balancers or content delivery networks.
How this domain compares
Fixed points of reference, not rankings. Each line says what the value is compared with and where it came from.
4 nameservers in the registry record. RFC 1034 asks for at least two; two to four is the usual range.Source: RDAP · rdap.publicinterestregistry.org + rdap.markmonitor.com · Observed:
DNSSEC: the registry record carries no DS data. Enabling it needs a DNS provider that signs the zone and a registrar that accepts DS records.Source: RDAP · rdap.publicinterestregistry.org + rdap.markmonitor.com · Observed:
Registrar: MarkMonitor (IANA ID 292), a corporate and brand-protection registrar, headquartered in United States. MarkMonitorSource: IANA Registrar IDs registry, read on 2026-09-21
.org is operated by Public Interest Registry (PIR); open to anyone. Registration data: RDAP (rdap.publicinterestregistry.org). .orgSource: IANA RDAP bootstrap file and root zone database, read on 2026-09-16
102 days to the expiry date recorded at the registry. A gTLD registration can be renewed up to ten years ahead.Source: RDAP · rdap.publicinterestregistry.org + rdap.markmonitor.com · Observed:
Reachable over IPv4 (1 address) and IPv6 (1).Source: DNS · public resolvers 1.1.1.1, 8.8.8.8 · Observed:
The addresses belong to the Google edge network: the origin server is not visible in DNS.Source: Team Cymru IP-to-ASN (DNS) · IP RDAP · PTR · Observed:
Announced by 1 network: AS396982. Allocation country: United States (where the address block is registered, not where the server stands).Source: Team Cymru IP-to-ASN (DNS) · IP RDAP · PTR · Observed:
Certificate lifetime 90 days, 75 days remaining. Publicly trusted certificates issued on this date may be valid for at most 200 days (CA/Browser Forum Baseline Requirements).Source: Direct HTTPS request (headers + first 64 KB of HTML) · Observed:
