IPv4 Addresses

TTL

Name Servers

TTL

Mail Servers

TTL

SOA Details

TTL
20m
SOA Responsible
dns.cloudflare.com
SOA Serial
2403481469
SOA Times
Refresh 2h
Retry 40m
Expire 7d
Minimum TTL 30m

Certificate Authority Authorization

TTL

No CAA records were returned at this registrable domain name. With no CAA policy, any public certificate authority (CA) may issue TLS certificates for names under this zone unless a parent publishes CAA; add issue / issuewild / iodef records to restrict issuance.

DMARC

TTL
DMARC Policy

Organizational policy (p): how receivers treat mail that fails aligned DMARC checks — none (monitor only), quarantine (often junk), or reject (block).

none quarantine reject
5m
DMARC Percentage

pct: share of mail that gets quarantine/reject; 100 = all failing messages (default).

100
DMARC RUA

Aggregate DMARC reports (ZIP/XML). Optional but recommended for visibility.

DMARC RUF

Forensic (per-failure) reports. Often omitted for privacy or volume.

DKIM

TTL
DKIM Selector k3
v=DKIM1 k=rsa
20m
Public Key
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYGiMSn7fsUq...
DKIM Selector k2
v=DKIM1 k=rsa
20m
Public Key
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOw...

SPF (Sender Policy Framework)

TTL
SPF SPFv1
Qualifier Mechanism Target / value Valid Details
+ Pass mx
+ Pass include
+ Pass include
+ Pass include
- Fail all
30s

MTA-STS

TTL

This hostname does not publish an MTA-STS policy (no v=STSv1 TXT at _mta-sts.<name> and/or no policy at https://mta-sts.<name>/.well-known/mta-sts.txt).

Text Content

TTL
globalsign-domain-verification=1B52378CEC58907CA97474325BF17DD5
30s
google-site-verification=RPO0G-fgyI4FQnDRaT3sVvuVz8sLwbms4wnoGtJy0zU
30s
knowbe4-site-verification=bf23cfddc6d5aa008219f5577fef6de2
30s
TXT
0ed1fe018ad5e75e45cac84432b5ab58
30s
TXT
7vv5qx5223d0lp6qxqgm9x75cyh25d03
30s
TXT
LYY/YHIX4TvGCtJBrXw23fXkg5cEO9eXzHVYKWV0n+A6M9AU86llQBPSEyDF/PHSKKB8N/g3pFY82vfnLFLDIA==
30s
TXT
_cuz0mcx8uiaxtn3lccuw8bhxalivimq
30s
TXT
_g2o55me0nd6b6vwhl2kqifw6x0qnw39
30s
TXT
dp9pr86b72kqc57qcjd2rlly7x1xdw55
30s
TXT
s2pwReI3iOP6gNsyi3TLyPmFdrGXuwOG5kuzwjYFe1PULhNQ0hgfHX3Pc9TRF7Kp5lwyAtjadVPHeBGd3KSE8Q==
30s
TXT
tdl1x8hftl5dtm0j0fstjv441b6bbkgs
30s

DNSSEC Public Keys

TTL
DNSKEY
256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x8fGAa2XhSA==
20m
DNSKEY
257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iUzy1L53eKGQ==
20m

DNSSEC Next Secure

TTL
NSEC
.cardinus.com ["TYPE65", "TYPE64", "TYPE61", "TYPE60", "TYPE59", "TYPE55", "TYPE53", "TYPE52", "DNSKEY", "NSEC", "RRSIG", "TYPE44", "TYPE37", "TYPE35", "SRV", "TYPE29", "AAAA", "TXT", "MX", "TYPE13", "SOA", "NS", "A", "CAA", "TYPE256"]
20m