IPv4 Addresses

TTL

IPv6 Addresses

TTL

Name Servers

TTL

Mail Servers

TTL

SOA Details

TTL
20m
SOA Responsible
dns.cloudflare.com
SOA Serial
2402508784
SOA Times
Refresh 2h
Retry 40m
Expire 7d
Minimum TTL 30m

Certificate Authority Authorization

TTL
0 issue digicert.com ; cansignhttpexchanges=yes
5m
0 issue pki.goog ; cansignhttpexchanges=yes
5m
5m
5m
0 issuewild digicert.com ; cansignhttpexchanges=yes
5m
0 issuewild pki.goog ; cansignhttpexchanges=yes
5m
0 issuewild ssl.com
5m

DMARC

TTL
DMARC Policy

Organizational policy (p): how receivers treat mail that fails aligned DMARC checks — none (monitor only), quarantine (often junk), or reject (block).

none quarantine reject
5m
DMARC Subdomain Policy

Subdomain policy (sp): when set, it applies to hostnames below this domain instead of p; if omitted, subdomains inherit the organizational policy.

none quarantine reject
DMARC Percentage

pct: share of mail that gets quarantine/reject; 100 = all failing messages (default).

100
DMARC RUA

Aggregate DMARC reports (ZIP/XML). Optional but recommended for visibility.

DMARC RUF

Forensic (per-failure) reports. Often omitted for privacy or volume.

No forensic report URIs (RUF).

DKIM

TTL
DKIM Selector google
v=DKIM1 k=rsa
5m
Public Key
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCDgCW4gc2vXA9afLnw...

SPF (Sender Policy Framework)

TTL
SPF SPFv1
Qualifier Mechanism Target / value Valid Details
+ Pass include
+ Pass include
+ Pass include
+ Pass include
~ Softfail all
5m

MTA-STS

TTL

This hostname does not publish an MTA-STS policy (no v=STSv1 TXT at _mta-sts.<name> and/or no policy at https://mta-sts.<name>/.well-known/mta-sts.txt).

Text Content

TTL
MS=5634ED7BD2C43C40945FE46DDD7B8649FDF6D1BD
5m
_globalsign-domain-verification=zJxWhjoRSbIGENOQQesgfwCP6CVlC2sFCNxpw93iWZ
5m
anthropic-domain-verification-6k7msv=2VsBXh5lG3xqs6JjTOKxjvyKs
5m
google-site-verification=GvRaKeKzaBjJhZd9f2_tHjQesILZYt-piwGRJAEPUq0
5m
google-site-verification=qcwBLfHf0COhRf7GwC4gOyVtzQIRoMZxNFDNc5Faegg
5m
klaviyo-site-verification=XuWMXN
5m
rippling-domain-verification=9fd336eb43ffdad4
5m
status-page-domain-verification=zbz15rtkb5cr
5m
uber-domain-verification=dbf00ce1-edc6-433b-804b-2f388ce1a43c
5m

DNSSEC Public Keys

TTL
DNSKEY
257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iUzy1L53eKGQ==
20m
DNSKEY
256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x8fGAa2XhSA==
20m

Delegation Signer

TTL
DS
2371 13 2 A43D701905137EE099166D6BE4E83A3BBD59EC3B4393A9F161B3B28821C2351E
20m

DNSSEC Next Secure

TTL
NSEC
.fulfil.io ["TYPE65", "TYPE64", "TYPE61", "TYPE60", "TYPE59", "TYPE55", "TYPE53", "TYPE52", "DNSKEY", "NSEC", "RRSIG", "TYPE44", "TYPE37", "TYPE35", "SRV", "TYPE29", "AAAA", "TXT", "MX", "TYPE13", "SOA", "NS", "A", "CAA", "TYPE256"]
20m