IPv4 Addresses

TTL

IPv6 Addresses

TTL

Name Servers

TTL

Mail Servers

TTL

SOA Details

TTL
SOA Primary NS
20m
SOA Responsible
dns.cloudflare.com
SOA Serial
2403781543
SOA Times
Refresh 2h
Retry 40m
Expire 7d
Minimum TTL 30m

Certificate Authority Authorization

TTL
0 issue digicert.com ; cansignhttpexchanges=yes
20m
0 issue pki.goog ; cansignhttpexchanges=yes
20m
20m
20m
0 issuewild digicert.com ; cansignhttpexchanges=yes
20m
0 issuewild pki.goog ; cansignhttpexchanges=yes
20m
0 issuewild ssl.com
20m

DMARC

TTL
DMARC Policy

Organizational policy (p): how receivers treat mail that fails aligned DMARC checks — none (monitor only), quarantine (often junk), or reject (block).

none quarantine reject
5m
DMARC Subdomain Policy

Subdomain policy (sp): when set, it applies to hostnames below this domain instead of p; if omitted, subdomains inherit the organizational policy.

none quarantine reject
DMARC Percentage

pct: share of mail that gets quarantine/reject; 100 = all failing messages (default).

100
DMARC RUA

Aggregate DMARC reports (ZIP/XML). Optional but recommended for visibility.

DMARC RUF

Forensic (per-failure) reports. Often omitted for privacy or volume.

No forensic report URIs (RUF).

DKIM

TTL
DKIM Selector default
v=DKIM1 k=rsa
2m
Public Key
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEgAPnIksMLB...
DKIM Selector selector1
v=DKIM1 k=rsa
20m
Public Key
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC9uRc6OiEO2/zSTaks...

SPF (Sender Policy Framework)

TTL
SPF SPFv1
Qualifier Mechanism Target / value Valid Details
+ Pass mx
+ Pass a
+ Pass ip4
+ Pass ip4
+ Pass ip4
+ Pass include
+ Pass include
+ Pass include
- Fail all
5m

MTA-STS

TTL

This hostname does not publish an MTA-STS policy (no v=STSv1 TXT at _mta-sts.<name> and/or no policy at https://mta-sts.<name>/.well-known/mta-sts.txt).

Text Content

TTL
MS=ms66614174
5m
anthropic-domain-verification-z4wsnf=Rwhp1ZgsHaiuZJuvQ6S7ps4iz
5m
atlassian-domain-verification=HEq2DjOhLQjJhTKRHDYW/i258PyrXmwis4XIb28LhP5tI/nQpSGm7J2DjL8eVyyr
5m
google-site-verification=h2pEFuGSxGLVwuN7WSUb0BPY4z4wwaggZdXAvpP1vKc
5m

DNSSEC Public Keys

TTL
DNSKEY
256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x8fGAa2XhSA==
20m
DNSKEY
257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iUzy1L53eKGQ==
20m

Delegation Signer

TTL
DS
2371 13 2 32A9481CAA4549795C43EB81F36F2A9D8F35DB49086B8D778066FBE91D88D696
20m
DS
2371 13 1 208869A5E4B270C0F6CC3212FC6436FC12970D43
20m

DNSSEC Next Secure

TTL
NSEC
.thinkowl.com ["TYPE65", "TYPE64", "TYPE61", "TYPE60", "TYPE59", "TYPE55", "TYPE53", "TYPE52", "DNSKEY", "NSEC", "RRSIG", "TYPE44", "TYPE37", "TYPE35", "SRV", "TYPE29", "AAAA", "TXT", "MX", "TYPE13", "SOA", "NS", "A", "CAA", "TYPE256"]
20m