Name Servers
sealed-vault.com. 1200 IN NS hadlee.ns.cloudflare.com. sealed-vault.com. 1200 IN NS josh.ns.cloudflare.com.
Mail Servers
sealed-vault.com. 1200 IN MX 1 aspmx.l.google.com. sealed-vault.com. 1200 IN MX 5 alt1.aspmx.l.google.com. sealed-vault.com. 1200 IN MX 5 alt2.aspmx.l.google.com. sealed-vault.com. 1200 IN MX 10 alt3.aspmx.l.google.com. sealed-vault.com. 1200 IN MX 10 alt4.aspmx.l.google.com.
SOA Details
sealed-vault.com. 1200 IN SOA hadlee.ns.cloudflare.com. dns.cloudflare.com. 2411573704 10000 2400 604800 1800
Certificate Authority Authorization
No CAA records were returned at this registrable domain name. With no CAA policy, any public certificate authority (CA) may issue TLS certificates for names under this zone unless a parent publishes CAA; add issue / issuewild / iodef records to restrict issuance.
DMARC
Organizational policy (p): how receivers treat mail that fails aligned DMARC checks — none (monitor only), quarantine (often junk), or reject (block).
pct: share of mail that gets quarantine/reject; 100 = all failing messages (default).
100Aggregate DMARC reports (ZIP/XML). Optional but recommended for visibility.
Forensic (per-failure) reports. Often omitted for privacy or volume.
sealed-vault.com. 300 IN DMARC v=DMARC1; p=reject; pct=100; aspf=r; adkim=r; rua=mailto:[email protected]; fo=1;
DKIM
sealed-vault.com. 300 IN DKIM v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6d8sz0Pl1Qj+eWzE0qqjZGkCDE+40YZ0bi9XPAVYXa7gsV+vmiTzi1EGjqmdlxH1DgfdUjiJjfOseQPkK8wa6kPDEHJuvOIPP260bL9jQqKEVjL9+9TJoYDLV6P1Gsueds5v5cxhChJPXqAg6Lt0FwlXewhEj0r1wMxbqlZF2TvOOLrkZqBNLjymEFr5i7aJZCwvZwWqHogyfjtuAhDa+YNbFKweKvCdwcwREv1qEC+S6fT67dv5DqNf+qZXBu+mAOT2v2eHyEfb9sRDr2QksfjMdtVYRbBQmnLUDgjIvOf5MhL5S218b22OTjR7PnKliVb84or+3aPVvdTZFeaDVQIDAQAB
SPF (Sender Policy Framework)
| Qualifier | Mechanism | Target / value | Valid | Details |
|---|---|---|---|---|
| + Pass | include |
|
||
| ~ Softfail | all |
—
|
|
sealed-vault.com. 300 IN TXT "v=spf1 include:_spf.google.com ~all"
MTA-STS
This hostname does not publish an MTA-STS policy (no v=STSv1 TXT at _mta-sts.<name> and/or no policy at https://mta-sts.<name>/.well-known/mta-sts.txt).
Text Content
sealed-vault.com. 300 IN TXT "google-site-verification=X8bVtQofrxvhE9pk44fG8PryxUfnxNNdEEyFefmII1U" sealed-vault.com. 300 IN TXT "google-site-verification=nQaEJRMiqteCaPTIe-lHJaFkgFOd0SQ_VU4UeYUIx4U" sealed-vault.com. 300 IN TXT "hosting-site=sealed-vault-site"
DNSSEC Public Keys
sealed-vault.com. 1200 IN DNSKEY 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x8fGAa2XhSA== sealed-vault.com. 1200 IN DNSKEY 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iUzy1L53eKGQ==
Delegation Signer
sealed-vault.com. 1200 IN DS 2371 13 2 6C412A1D8F0CFFE515EA29B82EE5644FC0FCD69D774DC9B8F0A36A60470177EA
DNSSEC Next Secure
sealed-vault.com. 1200 IN NSEC .sealed-vault.com ["TYPE65", "TYPE64", "TYPE61", "TYPE60", "TYPE59", "TYPE55", "TYPE53", "TYPE52", "DNSKEY", "NSEC", "RRSIG", "TYPE44", "TYPE37", "TYPE35", "SRV", "TYPE29", "AAAA", "TXT", "MX", "TYPE13", "PTR", "SOA", "NS", "A", "CAA", "TYPE256"]