How privacy works
Private lookups are not added to public searches, stored reports or change history. This does not remove a report that was already public. Your choice lasts for this browser session.
Who hosts scamdoc.com?
Answer
www.scamdoc.com sits behind Cloudflare, which hides the server that really hosts it.
Checked 59 minutes ago from Cloudflare ZRH in 830 ms. This is a saved result.
What needs attention
Prioritized observations from this check. Review changes with whoever manages the website.
- Review
HTTP does not redirect to HTTPS
The HTTP check returned content without switching to HTTPS.
Next step: Configure a permanent HTTP-to-HTTPS redirect at the CDN or web server.
- Improve
DMARC is in monitoring mode
The published p=none policy does not request rejection or quarantine of failing messages.
Next step: Review DMARC reports and SPF/DKIM alignment before considering a stricter policy.
- Improve
Review browser security headers
Strict-Transport-Security, Content-Security-Policy, Clickjacking protection, X-Content-Type-Options, Referrer-Policy, Permissions-Policy did not meet the conservative header checks. This is not a complete security audit.
Next step: Review these headers with the site developer and test policy changes before enforcing them.
Evidence by layer
The company operating a network and the company selling the hosting can be different.
- CDN / proxy
- CloudflareStrong evidence
Network operators
Cloudflare
Network ownership alone does not confirm the retail hosting provider.
How we know
- 104.26.13.97 belongs to AS13335 (Cloudflare)
- 172.67.68.5 belongs to AS13335 (Cloudflare)
- 2606:4700:20::ac43:4405 belongs to AS13335 (Cloudflare)
- HTTP header cf-ray: a50daa7e8cc5dc8b-ZRH
- HTTP header server: cloudflare
Servers
The addresses the name points to and the networks that own them.
www.scamdoc.com (where the site redirects)
- 104.26.13.97Cloudflare
- 172.67.68.5Cloudflare
- 2606:4700:20::ac43:4405Cloudflare
- 104.26.12.97
- 2606:4700:20::681a:c61
- 2606:4700:20::681a:d61
scamdoc.com (the address you entered)
- 172.67.68.5Cloudflare
- 104.26.12.97Cloudflare
- 2606:4700:20::681a:c61Cloudflare
- 104.26.13.97
- 2606:4700:20::681a:d61
- 2606:4700:20::ac43:4405
Reachable over IPv6.
Website
What the site answered when we visited its home page.
- Status
- 200 OK
- Address
- https://www.scamdoc.com/
- Page title
- Scamdoc.com | Check if a website is legit or not
- HTTPS
- Yes, but http:// does not redirect to https://
- HTTP/3
- Not advertised
- Response time
- 648 ms from Cloudflare ZRH
- Server
- cloudflare
Redirects (1)
- 301https://scamdoc.com/
- 200https://www.scamdoc.com/
Security headers
- Strict-Transport-Security
- Content-Security-Policy
- Clickjacking protection (too weak)
- X-Content-Type-Options
- Referrer-Policy
- Permissions-Policy
Built with
DNS
Who answers for the domain name, and its records.
- DNS provider
- Cloudflare
- Name servers
- karsyn.ns.cloudflare.com
uriah.ns.cloudflare.com - Zone
- scamdoc.com
- DNSSEC
- Not signed
- Certificates
- Any certificate authority (no CAA record)
All DNS records (16)
| Type | Name | Value | TTL |
|---|---|---|---|
| A | scamdoc.com | 172.67.68.5 | 300 |
| A | scamdoc.com | 104.26.12.97 | 300 |
| A | scamdoc.com | 104.26.13.97 | 300 |
| AAAA | scamdoc.com | 2606:4700:20::681a:c61 | 300 |
| AAAA | scamdoc.com | 2606:4700:20::681a:d61 | 300 |
| AAAA | scamdoc.com | 2606:4700:20::ac43:4405 | 300 |
| NS | scamdoc.com | karsyn.ns.cloudflare.com | 86400 |
| NS | scamdoc.com | uriah.ns.cloudflare.com | 86400 |
| MX | scamdoc.com | 1 mx1.mail.ovh.net | 300 |
| MX | scamdoc.com | 100 mx3.mail.ovh.net | 300 |
| MX | scamdoc.com | 5 mx2.mail.ovh.net | 300 |
| TXT | scamdoc.com | 1|www.scamdoc.com | 300 |
| TXT | scamdoc.com | Sendinblue-code:f47636aca4b7cc0aaa04237032a407f9 | 300 |
| TXT | scamdoc.com | facebook-domain-verification=l9ssq3wrsax5y4tx9lywpomtstigiv | 300 |
| TXT | scamdoc.com | google-site-verification=8cALOeT4rGcko3YW4-rTcBOgMAUNH2gvHiuOyArVAPw | 300 |
| TXT | scamdoc.com | v=spf1 mx ip6:2001:41d0:2:917d:: ip4:188.165.200.125 include:mx.ovh.com include:spf.sendinblue.com include:spf.mailjet.com -all | 300 |
Partly protected: DMARC is set to monitoring only.
- Mailbox provider
- OVHcloud
- Mail servers
- 1 mx1.mail.ovh.net
5 mx2.mail.ovh.net
100 mx3.mail.ovh.net - Allowed senders
- OVHcloudBrevoMailjet
- SPF
- Mail from any other server is rejected.
- DMARC
- Monitoring only — spoofed mail is still delivered.
- MTA-STS
- Not enabled
SPF and DMARC records
v=spf1 mx ip6:2001:41d0:2:917d:: ip4:188.165.200.125 include:mx.ovh.com include:spf.sendinblue.com include:spf.mailjet.com -all
v=DMARC1; p=none; rua=mailto:dmarc@scamdoc.com
Domain registration
- Registrar
- OVH sas
- Registered
- 22 Nov 2017 (8 years ago)
- Paid until
- 22 Nov 2028 (in 757 days)
- Last changed
- 1 Nov 2025
- Status
- Deletion lock (registrar)Transfer lock (registrar)
- DNSSEC at registry
- No
- Source
- rdap.verisign.com
Connected services
Verification records in DNS show the domain is linked to these accounts.
BrevoMeta BusinessGoogle Search Console
Observed changes
A compact record of what changed between public checks. Rechecks happen only when someone requests them.
History starts with saved public observations. No earlier changes are inferred.
Something look wrong? Report an incorrect result
Tell us which result needs a second look. Reports are reviewed privately and do not change detection automatically. Please do not include personal or confidential information.
Last 10 searches
| Domain Name | Host |
|---|---|
| reddit.com | Fastly (host hidden) |
| dingleberry.com | Unknown |
| trustpilot.com | Amazon CloudFront (host hidden) |
| example.org | Cloudflare (host hidden) |
| levels.io | Cloudflare (host hidden) |
| hotelist.com | Cloudflare (host hidden) |
| nomads.com | Cloudflare (host hidden) |
| interiorai.com | Cloudflare (host hidden) |
| vibejam.com | Cloudflare (host hidden) |