zeplin.io
Paid content
Categories: Design & Creativity
Document designs, map user flows, track version changes — deliver with confidence without changing how you design.
Related questions
More questions →What is zeplin.io?
Does zeplin.io offer paid content?
What languages does zeplin.io support?
How can I visit zeplin.io?
What are some alternatives to zeplin.io?
Website Overview
An established domain and managed infrastructure suggest continuity of operations and may support dependable delivery, although neither guarantees service quality. Page metadata, canonical configuration and social previews work together to provide more consistent search and sharing presentation.
Domain and Registration
Registered in 2013, this domain has about 12 years of history. That suggests continuity, although ownership and purpose may have changed. Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The registrar is Gandi SAS, a widely used domain service provider. The domain uses the common .io extension, which is not an independent safety signal.
DNS and Email
The lowest TTL is 59 seconds, supporting rapid record changes at the cost of more frequent lookups. Nameservers are provided by Amazon Route 53, indicating managed DNS hosting. MX records point to the Google Workspace email service. CAA records restrict which certificate authorities are authorized to issue certificates. No CNAME was found; the observed records resolve directly to addresses.
TLS and Certificates
The certificate uses an RSA 2048-bit public key, offering broad client compatibility. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued within the Amazon cloud or CDN ecosystem. The certificate is valid for about 197 days in total, with 117 days remaining.
HTTP and Browser Security
The response lacks these common security headers: Permissions-Policy. No X-Powered-By header was found, reducing one common source of backend fingerprinting information. No obvious internal addresses or debug information were found in the headers. The Server header identifies nginx without an exact version. No explicit CDN or WAF marker was found in the response headers.
Technology Stack Analysis
The public page identifies nginx without precise versions, leaving fewer clues for version-specific scanning.
Search and Social Sharing
Twitter Card metadata is configured. JSON-LD includes Organization data, helping describe the organization as an entity. The title has 41 characters, within a common display range. A meta description is present, with 114 characters. The observed directives allow indexing and link following.
Hosting and Email
Pages, Search and Sharing
| Meta description | Document designs, map user flows, track version changes — deliver with confidence without changing how you design. |
|---|---|
| Canonical URL | https://zeplin.io/ |
| Language | English (default) |
| Twitter Card | summary |
Social Sharing Preview
10 fieldsrobots.txt (opens in a new tab)
HTTP 404No robots.txt found
Sitemaps
1
Registration details RDAP / WHOIS
| Registrar | Gandi SAS |
|---|---|
| Registered | 2013-12-09 |
| Expires | 2026-12-09 |
| Domain status | clientTransferProhibited https://icann.org/epp#clientTransferProhibited |
| Nameservers | ns-1250.awsdns-28.org、ns-1894.awsdns-44.co.uk、ns-65.awsdns-08.com、ns-918.awsdns-50.net |
| DNSSEC | unsigned |
DNS records
| Type | Name | Value | TTL | Priority |
|---|---|---|---|---|
| A | zeplin.io | 35.166.107.81 | 60 | — |
| A | zeplin.io | 44.253.103.180 | 60 | — |
| A | zeplin.io | 52.34.126.115 | 60 | — |
| MX | zeplin.io | aspmx.l.google.com | 300 | 1 |
| MX | zeplin.io | alt1.aspmx.l.google.com | 300 | 5 |
| MX | zeplin.io | alt2.aspmx.l.google.com | 300 | 5 |
| MX | zeplin.io | aspmx2.googlemail.com | 300 | 10 |
| MX | zeplin.io | aspmx3.googlemail.com | 300 | 10 |
| NS | zeplin.io | ns-1250.awsdns-28.org | 300 | — |
| NS | zeplin.io | ns-1894.awsdns-44.co.uk | 300 | — |
| NS | zeplin.io | ns-65.awsdns-08.com | 300 | — |
| NS | zeplin.io | ns-918.awsdns-50.net | 300 | — |
| TXT | zeplin.io | 47C703CF7A | 300 | — |
| TXT | zeplin.io | MS=ms26875366 | 300 | — |
| TXT | zeplin.io | ZOOM_verify_JH05tqSETKi-zFSUdozJuQ | 300 | — |
| TXT | zeplin.io | apple-domain-verification=tbEsj9r5SpqMtbJ2 | 300 | — |
| TXT | zeplin.io | facebook-domain-verification=qb87bk0xd01ij23ufq357z72eg6j2k | 300 | — |
| TXT | zeplin.io | google-site-verification=8pe-V3PRg_DR_dm9JlujtlijSl85YG_aT0Yljh2ldVk | 300 | — |
| TXT | zeplin.io | google-site-verification=Kho_YavJfWS10C5Zt8YuroiFYAdSjtyHTaUX6q0fHuU | 300 | — |
| TXT | zeplin.io | v=spf1 include:_spf.google.com include:20002031.spf01.hubspotemail.net include:spf.mtasv.net include:mg-spf.greenhouse.io -all | 300 | — |
| TXT | zeplin.io | zapier-domain-verification-challenge=03f230bc-5855-4f34-8b1f-ceb95183e7df | 300 | — |
| CAA | zeplin.io | 0 issue "amazontrust.com" | 300 | — |
| DMARC | _dmarc.zeplin.io | v=DMARC1;p=quarantine;sp=quarantine;ruf=mailto:[email protected];rua=mailto:[email protected];aspf=r;adkim=r | 59 | — |
TLS and certificates
| Assessment | Normal configuration |
|---|---|
| Supported protocols | TLSv1.2、TLSv1.3 |
| Negotiated protocol | TLSv1.3 |
| Certificate subject | zeplin.io |
| Issuer | Amazon |
| Valid until | 2027-01-30T23:59 · Remaining when checked: 117 days |
| Verification details | Certificate trust: Passed · Hostname match: Passed |
HTTP response headers
| Header | Value |
|---|---|
| content-type | text/html |
| cache-control | no-cache |
| server | nginx |
| strict-transport-security | max-age=31536000; includeSubDomains; preload |
| content-security-policy | script-src 'unsafe-inline' 'unsafe-eval' j.6sc.co static.ads-twitter.com bat.bing.com www.clarity.ms x.clearbitjs.com tag.clearbitscripts.com cdn-cookieyes.com cdn.cr-relay.com connect.facebook.net googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com accounts.google.com pagead2.googlesyndication.com www.googletagmanager.com script.hotjar.com static.hotjar.com js.hsforms.net widget.intercom.io zeplin.io snap.licdn.com client-registry.mutinycdn.com www.redditstatic.com app.termly.io analytics.tiktok.com cdn.zeplin.io; script-src-elem 'unsafe-inline' blob: j.6sc.co static.ads-twitter.com bat.bing.com scripts.clarity.ms www.clarity.ms x.clearbitjs.com tag.clearbitscripts.com cdn-cookieyes.com infirc.com infird.com cdn.cr-relay.com connect.facebook.net googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com accounts.google.com www.google.com pagead2.googlesyndication.com www.googletagmanager.com script.hotjar.com static.hotjar.com js.hsforms.net js.intercomcdn.com widget.intercom.io zeplin.io snap.licdn.com client-registry.mutinycdn.com www.redditstatic.com app.termly.io analytics.tiktok.com www.youtube.com cdn.zeplin.io; script-src-attr 'unsafe-inline'; style-src 'unsafe-inline' accounts.google.com www.gstatic.com cdn.honey.io zeplin.io; style-src-elem 'unsafe-inline' fonts.googleapis.com accounts.google.com www.gstatic.com cdn.honey.io zeplin.io; style-src-attr 'unsafe-inline'; img-src data: blob: b.6sc.co pos.baidu.com bat.bing.com c.bing.com bat.bing.net c.clarity.ms t.co cdn-cookieyes.com ad.doubleclick.net www.facebook.com connect.facebook.net googleads.g.doubleclick.net stats.g.doubleclick.net www.googleadservices.com www.google.ae www.google.am www.google-analytics.com www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bj www.google.by www.google.ca www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr adservice.google.com translate.google.com www.google.com www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.gy www.google.hn www.google.hr www.google.hu www.google.ie www.google.iq www.google.is www.google.it www.google.jo www.google.kg www.google.kz www.google.la www.google.lk www.google.lt www.google.lv www.google.md www.google.mg www.google.mk www.google.mn www.google.mu www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.se www.google.si www.google.sk www.google.sn pagead2.googlesyndication.com www.googletagmanager.com www.google.tn www.google.tt fonts.gstatic.com cdn.honey.io forms-na1.hsforms.com static.intercomassets.com js.intercomcdn.com zeplin.io *.linkedin.com yastatic.net my.productfruits.com alb.reddit.com cdn.sanity.io analytics.tiktok.com ana |
| x-frame-options | SAMEORIGIN |
| x-content-type-options | nosniff |
| referrer-policy | strict-origin-when-cross-origin |
User reviews (0)