tolt.io
Domain report: WHOIS, DNS, hosting, SSL and safety. Checked .
Online · 200SafeSSL: 32 days left4 years oldTranco #84662
80
tolt.io was registered on 14 Mar 2022 via Cloudflare, Inc and the registry expiry is 14 Mar 2028. WHOIS data came from RDAP at https://rdap.identitydigital.services/rdap/domain/tolt.io.
tolt.io publishes 2 nameservers. DNSSEC is not signed.
tolt.io has 3 IPv4 addresses (104.26.14.175, 104.26.15.175, 172.67.69.245) and 3 IPv6 addresses (2606:4700:20::681a:eaf, 2606:4700:20::681a:faf, 2606:4700:20::ac43:45f5). The geolocation database places 104.26.14.175 in Toronto, Canada.
The TLS certificate from WE1 is valid and has 32 days left (TLS 1.3). The homepage answered HTTP 200.
Tech detection named Cloudflare, Cloudflare Browser Insights, Google Tag Manager and HTTP/3. The fingerprints ran on the homepage that was already downloaded.
No safety warning was recorded for tolt.io in the checks that ran.
Domain · RDAP/WHOIS
tolt.io was registered on 14 Mar 2022 via Cloudflare, Inc. The registry returned 1 status value and 2 nameservers from https://rdap.identitydigital.services/rdap/domain/tolt.io.
| Registered | since 14 Mar 2022 |
|---|---|
| Created | 14 March 2022 |
| Updated | 12 August 2026 |
| Expires | 14 March 2028 |
| Registrar | Cloudflare, Inc |
| Status | client transfer prohibited |
| Nameservers | robin.ns.cloudflare.com, rayden.ns.cloudflare.com |
| DNSSEC | no |
| Source | https://rdap.identitydigital.services/rdap/domain/tolt.io |
tolt.io carries the status "client transfer prohibited". The registrar has asked the registry to refuse a transfer to another registrar. The status is a lock on the domain object. It is not evidence about the content of the site.
Nameserver robin.ns.cloudflare.com is published for tolt.io in the registration record from https://rdap.identitydigital.services/rdap/domain/tolt.io.
Nameserver rayden.ns.cloudflare.com is published for tolt.io in the registration record from https://rdap.identitydigital.services/rdap/domain/tolt.io.
DNS
tolt.io has 6 address records, 5 mail exchangers and 2 nameservers, measured at 1.1.1.1:53.
| A | 104.26.14.175, 104.26.15.175, 172.67.69.245 |
|---|---|
| AAAA | 2606:4700:20::681a:eaf, 2606:4700:20::681a:faf, 2606:4700:20::ac43:45f5 |
| NS | rayden.ns.cloudflare.com, robin.ns.cloudflare.com |
| MX | aspmx.l.google.com (1) Google, alt1.aspmx.l.google.com (5) Google, alt2.aspmx.l.google.com (5) Google, alt3.aspmx.l.google.com (10) Google, alt4.aspmx.l.google.com (10) Google |
| SPF | present |
| DMARC | present |
| CAA | — |
| Wildcard | on |
| DNSSEC | not signed |
| Resolver | 1.1.1.1:53 |
The SPF text record at tolt.io is "v=spf1 include:_spf.google.com ~all".
The DMARC text record at _dmarc.tolt.io is "v=DMARC1; p=reject; sp=reject; adkim=r; aspf=r; rua=mailto:[email protected]".
IPv4 address 104.26.14.175 answers for tolt.io at resolver 1.1.1.1:53.
IPv4 address 104.26.15.175 answers for tolt.io at resolver 1.1.1.1:53.
IPv4 address 172.67.69.245 answers for tolt.io at resolver 1.1.1.1:53.
IPv6 address 2606:4700:20::681a:eaf answers for tolt.io at resolver 1.1.1.1:53.
IPv6 address 2606:4700:20::681a:faf answers for tolt.io at resolver 1.1.1.1:53.
IPv6 address 2606:4700:20::ac43:45f5 answers for tolt.io at resolver 1.1.1.1:53.
Mail exchanger aspmx.l.google.com has preference 1. The host is recognised as Google.
Mail exchanger alt1.aspmx.l.google.com has preference 5. The host is recognised as Google.
Mail exchanger alt2.aspmx.l.google.com has preference 5. The host is recognised as Google.
Mail exchanger alt3.aspmx.l.google.com has preference 10. The host is recognised as Google.
Mail exchanger alt4.aspmx.l.google.com has preference 10. The host is recognised as Google.
A random label under tolt.io also resolved, which means wildcard DNS is on.
Hosting and geo
tolt.io is placed in Toronto, Canada by the local geolocation database (db-ip).
| Address | 104.26.14.175 |
|---|---|
| Country | Canada |
| City | Toronto |
| Source | db-ip |
SSL/TLS
The certificate for tolt.io is valid, with 32 days left and 2 subject alternative names. Source: tls:443.
| Issuer | WE1 |
|---|---|
| Subject | tolt.io |
| Valid from | 3 September 2026 |
| Valid until | 2 December 2026 |
| Days left | 32 |
| SAN count | 2 |
| Protocol | TLS 1.3 |
| Source | tls:443 |
Subject alternative names: *.tolt.io, tolt.io.
Tech stack
Tech detection checked the fetched homepage and named 4 products. Source: wappalyzergo.
- Cloudflare · CDN
- Cloudflare Browser Insights · Analytics, RUM
- Google Tag Manager · Tag managers
- HTTP/3 · Miscellaneous
Cloudflare is filed under CDN.
Cloudflare Browser Insights is filed under Analytics, RUM.
Google Tag Manager is filed under Tag managers.
HTTP/3 is filed under Miscellaneous.
On-page checks
The homepage returned HTTP 200 in 22 ms. The target title is 56 characters and the page has 1 H1 heading.
| Status | 200 |
|---|---|
| TTFB | 22 ms |
| Title length | 56 yes |
| Quoted title | "Tolt - AI Affiliate Marketing Software for SaaS Startups" |
| Meta description | "An all-in-one solution to launch your own affiliate program. Tolt helps SaaS startups build and run their own affiliate program. Works with Stripe, Paddle, and Chargebee." yes |
| H1 count | 1 |
| HSTS | no no |
| CSP | no |
| X-Frame-Options | SAMEORIGIN |
| Robots meta | — |
| Canonical | https://tolt.com |
| Language | en |
| Links | 121 |
| Images | 104 |
| Favicon | yes |
The quoted title and meta description are measurements of the other site. They are not this page's title or description.
Security
Family DNS for tolt.io is clear, and URLhaus is clear. Source: family DNS and local lists.
| Family DNS | clear |
|---|---|
| URLhaus | clear |
| UT1 | — |
| Web Risk | not run |
| Source | family DNS and local lists |
| HSTS | no |
| CSP | no |
Google Web Risk did not run. No API key is configured, and this report does not invent a clean result from that service.
Score breakdown
Availability 25 of 25. DNS answer plus a homepage status in the 2xx or 3xx range.
TLS 20 of 20. A valid certificate, with extra points when it has at least 14 days left.
DNS hygiene 10 of 20. SPF, DMARC, CAA, and DNSSEC are five points each.
Security headers 5 of 15. HSTS, CSP, and X-Frame-Options or CSP frame-ancestors.
Safety lists 15 of 15. Points only when the checks ran and came back clean. Unknown is not clean.
Domain age 5 of 5. Five points at one year, two points at 30 days.
Change history
- October 2026: rdap created changed from 2022-03-14T17:36:52Z to 2022-03-14T17:36:52.751Z.
- October 2026: rdap dnssec changed from unknown to no.
- October 2026: rdap expires changed from 2028-03-14T17:36:52Z to 2028-03-14T17:36:52.751Z.
- October 2026: rdap statuses changed from clienttransferprohibited to client transfer prohibited.
- October 2026: rdap updated changed from 2026-08-12T05:40:39Z to 2026-08-12T05:40:39.347Z.
Questions
Is tolt.io safe?
The checks that ran did not produce a safety warning, and a score is not a promise that the site is safe.
Who hosts tolt.io?
tolt.io is placed in Toronto, Canada.
When does tolt.io expire?
tolt.io expires on 14 March 2028 according to https://rdap.identitydigital.services/rdap/domain/tolt.io.
Who owns tolt.io?
The registry did not return a person or a company for tolt.io. RDAP often redacts the registrant. The registrar on file is Cloudflare, Inc.
Sources
- RDAP source https://rdap.identitydigital.services/rdap/domain/tolt.io at 2026-10-30T14:35:04Z
- DNS source 1.1.1.1:53 at 2026-10-30T14:35:04Z
- TLS source tls:443 at 2026-10-30T14:35:04Z
- HTTP source https://tolt.io/ at 2026-10-30T14:35:04Z
- Tech source wappalyzergo at 2026-10-30T14:35:04Z
- Geo source db-ip at 2026-10-30T14:35:04Z
- Safety source family DNS and local lists at 2026-10-30T14:35:04Z
Related reports
No other indexable reports share this TLD, host, or registrar yet.
Owner of this site?
Ask for a correction or for the report to be removed from search. Public DNS facts stay on the page. An optional badge is not inserted for you.
How to read this report
The sentences under each heading are filled from the latest snapshot. If a collector had nothing to say, that sentence is left out. The target site's own title and meta description, when shown, are quoted as measurements. They are not this page's title. Change history only lists a difference between two snapshots, so the first check starts the clock and later edits are the history. A malware blocklist is the only reason the homepage body is skipped. That fact stays on the report. It does not by itself drop the page from the sitemap or from related-report links.