How privacy works
Private lookups are not added to public searches, stored reports or change history. This does not remove a report that was already public. Your choice lasts for this browser session.
Who hosts java.com?
Answer
www.java.com sits behind Cloudflare, which hides the server that really hosts it.
Checked 50 minutes ago from Cloudflare ZRH in 866 ms. This is a saved result.
What needs attention
Prioritized observations from this check. Review changes with whoever manages the website.
- Improve
Review browser security headers
Content-Security-Policy, Clickjacking protection, Referrer-Policy, Permissions-Policy did not meet the conservative header checks. This is not a complete security audit.
Next step: Review these headers with the site developer and test policy changes before enforcing them.
Evidence by layer
The company operating a network and the company selling the hosting can be different.
- CDN / proxy
- CloudflareStrong evidence
Network operators
Cloudflare
Network ownership alone does not confirm the retail hosting provider.
How we know
- DNS alias edge.www.java.com.akadns.net → www.java.com.cdn.cloudflare.net
- 104.18.22.215 belongs to AS13335 (Cloudflare)
- 104.18.23.215 belongs to AS13335 (Cloudflare)
- 2606:4700::6812:16d7 belongs to AS13335 (Cloudflare)
- HTTP header cf-ray: a50d8a9a1a11dc8b-ZRH
- HTTP header server: cloudflare
Servers
The addresses the name points to and the networks that own them.
www.java.com (where the site redirects)
www.java.com→edge.www.java.com.akadns.net→www.java.com.cdn.cloudflare.net
- 104.18.22.215Cloudflare
- 104.18.23.215Cloudflare
- 2606:4700::6812:16d7Cloudflare
- 2606:4700::6812:17d7
java.com (the address you entered)
- 138.1.33.162Oracle Cloud
Reachable over IPv6.
Website
What the site answered when we visited its home page.
- Status
- 200 OK
- Address
- https://www.java.com/en/
- Page title
- Java | Oracle
- HTTPS
- Yes
- HTTP/3
- Not advertised
- Response time
- 10 ms from Cloudflare ZRH
- Server
- cloudflare
Redirects (2)
- 301https://java.com/
- 302https://www.java.com/
- 200https://www.java.com/en/
Security headers
- Strict-Transport-Security
- Content-Security-Policy
- Clickjacking protection
- X-Content-Type-Options
- Referrer-Policy
- Permissions-Policy
DNS
Who answers for the domain name, and its records.
- DNS provider
- Akamai
- Name servers
- a1-198.akam.net
a11-64.akam.net
a13-65.akam.net
a2-67.akam.net
a20-65.akam.net
a22-64.akam.net
a24-65.akam.net
a24-67.akam.net
a3-66.akam.net
a9-67.akam.net - Zone
- java.com
- DNSSEC
- Not signed
- Certificates
- Any certificate authority (no CAA record)
All DNS records (12)
| Type | Name | Value | TTL |
|---|---|---|---|
| A | java.com | 138.1.33.162 | 291 |
| NS | java.com | a11-64.akam.net | 900 |
| NS | java.com | a22-64.akam.net | 900 |
| NS | java.com | a13-65.akam.net | 900 |
| NS | java.com | a2-67.akam.net | 900 |
| NS | java.com | a20-65.akam.net | 900 |
| NS | java.com | a9-67.akam.net | 900 |
| NS | java.com | a24-67.akam.net | 900 |
| NS | java.com | a24-65.akam.net | 900 |
| NS | java.com | a3-66.akam.net | 900 |
| NS | java.com | a1-198.akam.net | 900 |
| TXT | java.com | v=spf1 a -all | 900 |
Well protected against spoofing: SPF plus an enforced DMARC policy.
- Mailbox provider
- None
- Allowed senders
- Only servers listed in the SPF record
- SPF
- Mail from any other server is rejected.
- DMARC
- Spoofed mail is rejected.
- MTA-STS
- Not enabled
SPF and DMARC records
v=spf1 a -all
v=DMARC1;p=reject;rua=mailto:dmarc_rua@emaildefense.proofpoint.com;ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;fo=1
Domain registration
- Registrar
- MarkMonitor Inc.
- Registered
- 6 Jun 1996 (30 years ago)
- Paid until
- 5 Jun 2027 (in 221 days)
- Last changed
- 4 May 2026
- Status
- Deletion lock (registrar)Transfer lock (registrar)Update lock (registrar)Deletion lock (registry)Transfer lock (registry)Update lock (registry)
- DNSSEC at registry
- No
- Source
- rdap.verisign.com
Observed changes
A compact record of what changed between public checks. Rechecks happen only when someone requests them.
History starts with saved public observations. No earlier changes are inferred.
Something look wrong? Report an incorrect result
Tell us which result needs a second look. Reports are reviewed privately and do not change detection automatically. Please do not include personal or confidential information.
Last 10 searches
| Domain Name | Host |
|---|---|
| reddit.com | Fastly (host hidden) |
| dingleberry.com | Unknown |
| trustpilot.com | Amazon CloudFront (host hidden) |
| scamdoc.com | Cloudflare (host hidden) |
| example.org | Cloudflare (host hidden) |
| levels.io | Cloudflare (host hidden) |
| hotelist.com | Cloudflare (host hidden) |
| nomads.com | Cloudflare (host hidden) |
| interiorai.com | Cloudflare (host hidden) |
| vibejam.com | Cloudflare (host hidden) |