etsy.com

Checked 5/15/2026, 12:00:22 AM · 329ms

Some critical hardenings missing.

Warnings

DNSSEC is not configured. Domain is exposed to DNS spoofing and cache poisoning.
No CAA records found. Any CA in the world can issue certificates for this domain.

Domain registration

266d to expiry

Registrar: MarkMonitor Inc.
Registered: Feb 5, 2004
Expires: Feb 5, 2027
Status: client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited

DNSSEC

not enabled

DS record: absent
AD bit: unset
Resolver: 1.1.1.1 (Cloudflare)

CAA records (0)

No CAA records published. Any CA can issue certs for this domain.

Nameservers (4)

dns3.p03.nsone.net
ns-162.awsdns-20.com
dns1.p03.nsone.net
ns-1264.awsdns-30.org

Mail servers (MX)

aspmx.l.google.compriority 10
alt1.aspmx.l.google.compriority 20
alt2.aspmx.l.google.compriority 30
aspmx2.googlemail.compriority 40
aspmx3.googlemail.compriority 50

Blacklist status

clean across 6

checked IP: 172.217.68.27 (MX aspmx.l.google.com), 172.253.147.26 (MX alt1.aspmx.l.google.com), 192.178.218.27 (MX alt2.aspmx.l.google.com)

✓ SpamCop
✓ Barracuda
✓ UCEPROTECT-1
✓ PSBL
✓ Mailspike
✓ 0spam

Threat-intel reputation

clean

Domain intel on etsy.com

✓ Malware / phishing intel: clean

Domain is not on any malware-distribution feed we track.

✓ Active threat intel: clean

No active C2 / botnet IOCs against this domain.

Registered 2004-02-05 - established

Established domains rarely host phishing infrastructure.

Recommendations

Enable DNSSEC in your registrar and have your DNS provider sign the zone.
Publish CAA records to restrict cert issuance, e.g. `0 issue "letsencrypt.org"`.

Auto-fix: lock down certificate issuance with CAA

for etsy.com

Let's Encrypt is the most common free CA. If you also use a paid CA (Sectigo, DigiCert, etc.), add additional `0 issue "<ca-host>"` records for each.

Type: CAA
Name: @
Value: 0 issue "letsencrypt.org"
TTL: Auto

Authorise wildcard cert issuance. Drop this record if you never need wildcard certs.

Type: CAA
Name: @
Value: 0 issuewild "letsencrypt.org"
TTL: Auto

Where to send incident reports if a CA detects an unauthorised issuance attempt. Point at a real mailbox.

Type: CAA
Name: @
Value: 0 iodef "mailto:[email protected]"
TTL: Auto

DNS → Records → Add record. Pick the type, paste Name and Content as shown below.
Set Proxy status to "DNS only" (grey cloud) for TXT / CAA records. TTL: Auto.

AI-assisted remediation

Want a tailored fix plan in plain English?

Wiredepth Pro sends this report to our AI engine and streams back a 30-day rollout plan tailored to etsy.com, with provider-specific tips when we can infer them from the data. 10 playbooks per month on Pro, 100 on MSP.

ProSee Pro plans→

Check another domain

Or share this URL with the team that owns the records.