IPv4 Addresses
fontsource.org. 300 IN A 104.26.12.63 fontsource.org. 300 IN A 104.26.13.63 fontsource.org. 300 IN A 172.67.68.42
IPv6 Addresses
fontsource.org. 300 IN AAAA 2606:4700:20:0:0:0:681A:C3F fontsource.org. 300 IN AAAA 2606:4700:20:0:0:0:681A:D3F fontsource.org. 300 IN AAAA 2606:4700:20:0:0:0:AC43:442A
Name Servers
fontsource.org. 1200 IN NS jade.ns.cloudflare.com. fontsource.org. 1200 IN NS woz.ns.cloudflare.com.
Mail Servers
fontsource.org. 300 IN MX 5 route3.mx.cloudflare.net. fontsource.org. 300 IN MX 14 route1.mx.cloudflare.net. fontsource.org. 300 IN MX 60 route2.mx.cloudflare.net.
SOA Details
fontsource.org. 1200 IN SOA jade.ns.cloudflare.com. dns.cloudflare.com. 2404079936 10000 2400 604800 1800
Certificate Authority Authorization
fontsource.org. 1200 IN CAA 0 issue "comodoca.com" fontsource.org. 1200 IN CAA 0 issue "digicert.com; cansignhttpexchanges=yes" fontsource.org. 1200 IN CAA 0 issue "letsencrypt.org" fontsource.org. 1200 IN CAA 0 issue "pki.goog; cansignhttpexchanges=yes" fontsource.org. 1200 IN CAA 0 issue "ssl.com" fontsource.org. 1200 IN CAA 0 issuewild "comodoca.com" fontsource.org. 1200 IN CAA 0 issuewild "digicert.com; cansignhttpexchanges=yes" fontsource.org. 1200 IN CAA 0 issuewild "letsencrypt.org" fontsource.org. 1200 IN CAA 0 issuewild "pki.goog; cansignhttpexchanges=yes" fontsource.org. 1200 IN CAA 0 issuewild "ssl.com"
DMARC
Organizational policy (p): how receivers treat mail that fails aligned DMARC checks — none (monitor only), quarantine (often junk), or reject (block).
Subdomain policy (sp): when set, it applies to hostnames below this domain instead of p; if omitted, subdomains inherit the organizational policy.
pct: share of mail that gets quarantine/reject; 100 = all failing messages (default).
100Aggregate DMARC reports (ZIP/XML). Optional but recommended for visibility.
Forensic (per-failure) reports. Often omitted for privacy or volume.
fontsource.org. 300 IN DMARC v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s; rua=mailto:[email protected]
DKIM
No DKIM TXT with `v=DKIM1` was returned for the selector names we probe automatically.
SPF (Sender Policy Framework)
| Qualifier | Mechanism | Target / value | Valid | Details |
|---|---|---|---|---|
| + Pass | include |
|
||
| ~ Softfail | all |
—
|
|
fontsource.org. 300 IN TXT "v=spf1 include:_spf.mx.cloudflare.net ~all"
MTA-STS
This hostname does not publish an MTA-STS policy (no v=STSv1 TXT at _mta-sts.<name> and/or no policy at https://mta-sts.<name>/.well-known/mta-sts.txt).
Text Content
fontsource.org. 300 IN TXT "google-site-verification=fafZrGtjismdhv5Dm_L8t-Rlby9GF9tLcmfrvAOSCGY"
DNSSEC Public Keys
fontsource.org. 1199 IN DNSKEY 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iUzy1L53eKGQ== fontsource.org. 1199 IN DNSKEY 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x8fGAa2XhSA==
Delegation Signer
fontsource.org. 1199 IN DS 2371 13 2 87B2B39A09953508D1BB6B07D1335D7EF1FBDC3BD5065BA774F87D8F3E52C227
DNSSEC Next Secure
fontsource.org. 1200 IN NSEC .fontsource.org ["TYPE65", "TYPE64", "TYPE61", "TYPE60", "TYPE59", "TYPE55", "TYPE53", "TYPE52", "DNSKEY", "NSEC", "RRSIG", "TYPE44", "TYPE37", "TYPE35", "SRV", "TYPE29", "AAAA", "TXT", "MX", "TYPE13", "SOA", "NS", "A", "CAA", "TYPE256"]