pass
DNS·01
example.com · dns
# example.com · dns
## Checks
| Code | Check | Status | Finding | Fix |
|---|---|---|---|---|
| DNS·01 | DNSSEC signed | pass | | |
| DNS·02 | DNSKEY algorithm | pass | | |
| DNS·03 | DNSSEC key rollover | pass | | |
| DNS·04 | CAA records | warn | No CAA records found: any Certificate Authority can issue certificates for this domain; cf. RFC 8659 | Publish issue and issuewild CAA records naming the allowed certificate authorities, using only known tags. |
| DNS·05 | Nameserver redundancy | pass | | |
| DNS·06 | Lame delegation | pass | | |
| DNS·07 | Delegation consistency | pass | | |
| DNS·08 | No CNAME at apex | pass | | |
| DNS·09 | HTTPS record | pass | | |
| DNS·10 | TTL range | pass | | |
## A
| Owner | Type | TTL | Data |
|---|---|---|---|
| example.com. | A | 300 | 104.20.23.154 |
| example.com. | A | 300 | 172.66.147.243 |
## AAAA
| Owner | Type | TTL | Data |
|---|---|---|---|
| example.com. | AAAA | 300 | 2606:4700:10::6814:179a |
| example.com. | AAAA | 300 | 2606:4700:10::ac42:93f3 |
## MX
| Owner | Type | TTL | Data |
|---|---|---|---|
| example.com. | MX | 196 | 0 . |
## CAA
| Owner | Type | TTL | Data |
|---|---|---|---|
## NS
| Owner | Type | TTL | Data |
|---|---|---|---|
| example.com. | NS | 21600 | elliott.ns.cloudflare.com. |
| example.com. | NS | 21600 | hera.ns.cloudflare.com. |
## HTTPS
| Owner | Type | TTL | Data |
|---|---|---|---|
| example.com. | HTTPS | 300 | 1 . alpn=h3,h2 ipv4hint=104.20.23.154,172.66.147.243 ipv6hint=2606:4700:10::6814:179a,2606:4700:10::ac42:93f3 |
## CNAME
| Owner | Type | TTL | Data |
|---|---|---|---|
## DNSKEY
| Owner | Type | TTL | Data |
|---|---|---|---|
| example.com. | DNSKEY | 3505 | 256 3 13 MjyZielP0GqniI1+j+wAG/3t0ImDDIlj1CxR0oobkZQHSKH2Fqx6tm2NcYu57POJ83SzCWLkqIjZHS1mh5wbaw== |
| example.com. | DNSKEY | 3505 | 256 3 13 kxipjoIbNZDsWqEKaYaGq6fM/XThrRp1ue6AV9R/n3eWxpGCeCWJb47PEEEj/Q6VAYFW/7UFo5mXoZfxKYZa3A== |
| example.com. | DNSKEY | 3505 | 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x8fGAa2XhSA== |
| example.com. | DNSKEY | 3505 | 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iUzy1L53eKGQ== |
## DS
| Owner | Type | TTL | Data |
|---|---|---|---|
| example.com. | DS | 15912 | 2371 13 2 C988EC423E3880EB8DD8A46FE06CA230EE23F35B578D64E78B29C3E1C83D245A |
## NSEC
| Owner | Type | TTL | Data |
|---|---|---|---|
| example.com. | NSEC | 1800 | \\000.example.com. A NS SOA PTR HINFO MX TXT AAAA Unknown SRV NAPTR CERT SSHFP RRSIG NSEC DNSKEY TLSA SMIMEA Unknown CDS CDNSKEY OPENPGPKEY SVCB HTTPS Unknown CAA |
## NSEC3
| Owner | Type | TTL | Data |
|---|---|---|---|
## SOA
| Owner | Type | TTL | Data |
|---|---|---|---|
| example.com. | SOA | 581 | elliott.ns.cloudflare.com. dns.cloudflare.com. 2418004112 10000 2400 604800 1800 |
## SVCB
| Owner | Type | TTL | Data |
|---|---|---|---|
## TXT
| Owner | Type | TTL | Data |
|---|---|---|---|
| example.com. | TXT | 300 | "\_k2n1y4vw3qtb4skdx9e7dxt97qrmmq9" |
| example.com. | TXT | 300 | "v=spf1 -all" |
section,item,field,value
checks,dns.dnssec,status,pass
checks,dns.dnssec,finding,
checks,dns.dnssec,fix,
checks,dns.dnskey_algorithm,status,pass
checks,dns.dnskey_algorithm,finding,
checks,dns.dnskey_algorithm,fix,
checks,dns.dnssec_rollover,status,pass
checks,dns.dnssec_rollover,finding,
checks,dns.dnssec_rollover,fix,
checks,dns.caa,status,warn
checks,dns.caa,finding,No CAA records found: any Certificate Authority can issue certificates for this domain; cf. RFC 8659
checks,dns.caa,fix,"Publish issue and issuewild CAA records naming the allowed certificate authorities, using only known tags."
checks,dns.ns,status,pass
checks,dns.ns,finding,
checks,dns.ns,fix,
checks,dns.ns_lame,status,pass
checks,dns.ns_lame,finding,
checks,dns.ns_lame,fix,
checks,dns.ns_delegation,status,pass
checks,dns.ns_delegation,finding,
checks,dns.ns_delegation,fix,
checks,dns.cname_apex,status,pass
checks,dns.cname_apex,finding,
checks,dns.cname_apex,fix,
checks,dns.https_svcb,status,pass
checks,dns.https_svcb,finding,
checks,dns.https_svcb,fix,
checks,dns.ttl,status,pass
checks,dns.ttl,finding,
checks,dns.ttl,fix,
dns.a,0,owner,example.com.
dns.a,0,type,A
dns.a,0,ttl,300
dns.a,0,data,104.20.23.154
dns.a,1,owner,example.com.
dns.a,1,type,A
dns.a,1,ttl,300
dns.a,1,data,172.66.147.243
dns.aaaa,0,owner,example.com.
dns.aaaa,0,type,AAAA
dns.aaaa,0,ttl,300
dns.aaaa,0,data,2606:4700:10::6814:179a
dns.aaaa,1,owner,example.com.
dns.aaaa,1,type,AAAA
dns.aaaa,1,ttl,300
dns.aaaa,1,data,2606:4700:10::ac42:93f3
dns.mx,0,owner,example.com.
dns.mx,0,type,MX
dns.mx,0,ttl,196
dns.mx,0,data,0 .
dns.ns,0,owner,example.com.
dns.ns,0,type,NS
dns.ns,0,ttl,21600
dns.ns,0,data,elliott.ns.cloudflare.com.
dns.ns,1,owner,example.com.
dns.ns,1,type,NS
dns.ns,1,ttl,21600
dns.ns,1,data,hera.ns.cloudflare.com.
dns.https,0,owner,example.com.
dns.https,0,type,HTTPS
dns.https,0,ttl,300
dns.https,0,data,"1 . alpn=h3,h2 ipv4hint=104.20.23.154,172.66.147.243 ipv6hint=2606:4700:10::6814:179a,2606:4700:10::ac42:93f3"
dns.dnskey,0,owner,example.com.
dns.dnskey,0,type,DNSKEY
dns.dnskey,0,ttl,3505
dns.dnskey,0,data,256 3 13 MjyZielP0GqniI1+j+wAG/3t0ImDDIlj1CxR0oobkZQHSKH2Fqx6tm2NcYu57POJ83SzCWLkqIjZHS1mh5wbaw==
dns.dnskey,1,owner,example.com.
dns.dnskey,1,type,DNSKEY
dns.dnskey,1,ttl,3505
dns.dnskey,1,data,256 3 13 kxipjoIbNZDsWqEKaYaGq6fM/XThrRp1ue6AV9R/n3eWxpGCeCWJb47PEEEj/Q6VAYFW/7UFo5mXoZfxKYZa3A==
dns.dnskey,2,owner,example.com.
dns.dnskey,2,type,DNSKEY
dns.dnskey,2,ttl,3505
dns.dnskey,2,data,256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x8fGAa2XhSA==
dns.dnskey,3,owner,example.com.
dns.dnskey,3,type,DNSKEY
dns.dnskey,3,ttl,3505
dns.dnskey,3,data,257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iUzy1L53eKGQ==
dns.ds,0,owner,example.com.
dns.ds,0,type,DS
dns.ds,0,ttl,15912
dns.ds,0,data,2371 13 2 C988EC423E3880EB8DD8A46FE06CA230EE23F35B578D64E78B29C3E1C83D245A
dns.nsec,0,owner,example.com.
dns.nsec,0,type,NSEC
dns.nsec,0,ttl,1800
dns.nsec,0,data,\000.example.com. A NS SOA PTR HINFO MX TXT AAAA Unknown SRV NAPTR CERT SSHFP RRSIG NSEC DNSKEY TLSA SMIMEA Unknown CDS CDNSKEY OPENPGPKEY SVCB HTTPS Unknown CAA
dns.soa,0,owner,example.com.
dns.soa,0,type,SOA
dns.soa,0,ttl,581
dns.soa,0,data,elliott.ns.cloudflare.com. dns.cloudflare.com. 2418004112 10000 2400 604800 1800
dns.txt,0,owner,example.com.
dns.txt,0,type,TXT
dns.txt,0,ttl,300
dns.txt,0,data,"""_k2n1y4vw3qtb4skdx9e7dxt97qrmmq9"""
dns.txt,1,owner,example.com.
dns.txt,1,type,TXT
dns.txt,1,ttl,300
dns.txt,1,data,"""v=spf1 -all"""
{"id":"gDO79E9Z","domain":"example.com","created_at":1793994940,"last_seen_at":1793994940,"predecessor_id":"CDVR1RYA","profile_version":5,"grade":"B","engine_version":"0.31.0","run":{"profile_version":5,"engine_version":"0.31.0","evidence_schema_version":1,"grade":"B","complete":true,"sections":[{"protocol":"dns","outcome":"measured","reason":null},{"protocol":"email","outcome":"measured","reason":null},{"protocol":"http","outcome":"measured","reason":null},{"protocol":"ip","outcome":"measured","reason":null},{"protocol":"tls","outcome":"measured","reason":null}],"checks":[{"id":"dns.caa","status":"warn","findings":["No CAA records found: any Certificate Authority can issue certificates for this domain; cf. RFC 8659"],"evidence":["dns.caa"]},{"id":"dns.cname_apex","status":"pass","evidence":["dns.cname","dns.soa"]},{"id":"dns.dnssec","status":"pass","evidence":["dns.dnskey","dns.ds","dns.nsec","dns.nsec3"]},{"id":"dns.dnskey_algorithm","status":"pass","evidence":["dns.dnskey"]},{"id":"dns.dnssec_rollover","status":"pass","evidence":["dns.dnskey","dns.ds"]},{"id":"dns.https_svcb","status":"pass","evidence":["dns.https","dns.svcb"]},{"id":"dns.ns","status":"pass","evidence":["dns.ns"]},{"id":"dns.ns_lame","status":"pass","evidence":["dns.ns"]},{"id":"dns.ns_delegation","status":"pass","evidence":["dns.ns"]},{"id":"dns.ttl","status":"pass","evidence":["dns.a","dns.aaaa","dns.mx","dns.caa","dns.ns","dns.https","dns.cname","dns.dnskey","dns.ds","dns.nsec","dns.nsec3","dns.soa","dns.svcb","dns.txt"]},{"id":"email.mx","status":"not_applicable","findings":["Null MX"]},{"id":"email.spf","status":"pass","findings":["domain declares it sends no mail (Null MX or SPF -all only)"],"evidence":["email.spf","email.mx"]},{"id":"email.dkim","status":"not_applicable","findings":["only revoked DKIM keys"]},{"id":"email.dmarc","status":"warn","findings":["no aggregate reports"],"evidence":["email.dmarc"]},{"id":"email.mta_sts","status":"not_applicable","findings":["Null MX"]},{"id":"email.tls_rpt","status":"not_applicable","findings":["Null MX"]},{"id":"email.bimi","status":"not_applicable","findings":["Null MX"]},{"id":"email.dane","status":"not_applicable","findings":["Null MX"]},{"id":"email.dnsbl","status":"not_applicable","findings":["Null MX"]},{"id":"email.fcrdns","status":"not_applicable","findings":["Null MX"]},{"id":"http.https_redirect","status":"fail","findings":["HTTP port 80 does not redirect to HTTPS"],"evidence":["http.port80","http.port80_probe"]},{"id":"http.hsts","status":"fail","findings":["No HSTS header found"],"evidence":["http.headers"]},{"id":"http.cors","status":"pass","evidence":["http.cors"]},{"id":"http.cookie_secure","status":"not_applicable","findings":["not applicable"],"evidence":["http.cookies"]},{"id":"http.csp","status":"warn","findings":["No Content-Security-Policy header"],"evidence":["http.headers"]},{"id":"http.x_frame_options","status":"warn","findings":["Missing x-frame-options header"],"evidence":["http.headers"]},{"id":"http.x_content_type_options","status":"warn","findings":["Missing x-content-type-options header"],"evidence":["http.headers"]},{"id":"http.referrer_policy","status":"warn","findings":["Missing referrer-policy header"],"evidence":["http.headers"]},{"id":"http.permissions_policy","status":"warn","findings":["Missing permissions-policy header"],"evidence":["http.headers"]},{"id":"http.coop","status":"warn","findings":["Missing cross-origin-opener-policy header"],"evidence":["http.headers","http.isolation"]},{"id":"http.deprecated_headers","status":"pass","evidence":["http.headers"]},{"id":"http.info_leakage","status":"warn","findings":["Info leakage headers: Server"],"evidence":["http.headers"]},{"id":"http.caching","status":"warn","findings":["No Cache-Control header"],"evidence":["http.headers","http.caching"]},{"id":"ip.reputation","status":"pass","evidence":["ip.addresses"]},{"id":"tls.tls_reachable","status":"pass","evidence":["tls.addresses"]},{"id":"tls.chain_trusted","status":"pass","evidence":["tls.chain@172.66.147.243:443","tls.chain@104.20.23.154:443"]},{"id":"tls.not_expired","status":"pass","evidence":["tls.chain@172.66.147.243:443","tls.chain@104.20.23.154:443"]},{"id":"tls.hostname_match","status":"pass","evidence":["tls.chain@172.66.147.243:443","tls.chain@104.20.23.154:443"]},{"id":"tls.chain_complete","status":"pass","evidence":["tls.chain@172.66.147.243:443","tls.chain@104.20.23.154:443"]},{"id":"tls.strong_signature","status":"pass","evidence":["tls.chain@172.66.147.243:443","tls.chain@104.20.23.154:443"]},{"id":"tls.key_strength","status":"pass","evidence":["tls.chain@172.66.147.243:443","tls.chain@104.20.23.154:443"]},{"id":"tls.expiry_window","status":"pass","evidence":["tls.chain@172.66.147.243:443","tls.chain@104.20.23.154:443"]},{"id":"tls.cert_lifetime","status":"pass","evidence":["tls.chain@172.66.147.243:443","tls.chain@104.20.23.154:443"]},{"id":"tls.san_quality","status":"pass","evidence":["tls.chain@172.66.147.243:443","tls.chain@104.20.23.154:443"]},{"id":"tls.aia_reachability","status":"not_applicable","findings":["Chain is complete; AIA URLs not required for verification"],"evidence":["tls.chain@172.66.147.243:443","tls.chain@104.20.23.154:443"]},{"id":"tls.tls_version","status":"pass","evidence":["tls.handshake@172.66.147.243:443","tls.handshake@104.20.23.154:443"]},{"id":"tls.forward_secrecy","status":"pass","evidence":["tls.handshake@172.66.147.243:443","tls.handshake@104.20.23.154:443"]},{"id":"tls.aead_cipher","status":"pass","evidence":["tls.handshake@172.66.147.243:443","tls.handshake@104.20.23.154:443"]},{"id":"tls.legacy_versions","status":"fail","findings":["172.66.147.243: accepts TLS 1.0, TLS 1.1"],"evidence":["tls.probes@172.66.147.243:443","tls.protocols"]},{"id":"tls.weak_suites","status":"warn","findings":["172.66.147.243: accepts CBC suite TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA","172.66.147.243: accepts static RSA suite TLS_RSA_WITH_AES_128_GCM_SHA256"],"evidence":["tls.probes@172.66.147.243:443","tls.protocols"]},{"id":"tls.ct_logged","status":"pass","evidence":["tls.ct"]},{"id":"tls.ocsp_stapled","status":"pass","evidence":["tls.handshake@172.66.147.243:443","tls.handshake@104.20.23.154:443"]},{"id":"tls.caa_compliant","status":"pass","evidence":["tls.caa"]},{"id":"tls.dane_valid","status":"not_applicable","findings":["DANE check skipped (requires DNSSEC)"],"evidence":["tls.chain@172.66.147.243:443","tls.chain@104.20.23.154:443"]},{"id":"tls.consistency","status":"pass","evidence":["tls.chain@172.66.147.243:443","tls.chain@104.20.23.154:443","tls.handshake@172.66.147.243:443","tls.handshake@104.20.23.154:443"]},{"id":"tls.alpn_consistency","status":"pass","evidence":["tls.handshake@172.66.147.243:443","tls.handshake@104.20.23.154:443"]},{"id":"tls.ech_advertised","status":"warn","findings":["172.66.147.243: ECH not advertised in HTTPS DNS record","104.20.23.154: ECH not advertised in HTTPS DNS record"],"evidence":["tls.handshake@172.66.147.243:443","tls.handshake@104.20.23.154:443","dns.https"]}],"blocks":[{"id":"dns.a","title":"A","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"example.com."},"type":{"t":"text","v":"A"},"ttl":{"t":"int","v":300},"data":{"t":"text","v":"104.20.23.154"}},{"owner":{"t":"text","v":"example.com."},"type":{"t":"text","v":"A"},"ttl":{"t":"int","v":300},"data":{"t":"text","v":"172.66.147.243"}}]}},{"id":"dns.aaaa","title":"AAAA","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"example.com."},"type":{"t":"text","v":"AAAA"},"ttl":{"t":"int","v":300},"data":{"t":"text","v":"2606:4700:10::6814:179a"}},{"owner":{"t":"text","v":"example.com."},"type":{"t":"text","v":"AAAA"},"ttl":{"t":"int","v":300},"data":{"t":"text","v":"2606:4700:10::ac42:93f3"}}]}},{"id":"dns.mx","title":"MX","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"example.com."},"type":{"t":"text","v":"MX"},"ttl":{"t":"int","v":196},"data":{"t":"text","v":"0 ."}}]}},{"id":"dns.caa","title":"CAA","shape":{"kind":"records","data":[]}},{"id":"dns.ns","title":"NS","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"example.com."},"type":{"t":"text","v":"NS"},"ttl":{"t":"int","v":21600},"data":{"t":"text","v":"elliott.ns.cloudflare.com."}},{"owner":{"t":"text","v":"example.com."},"type":{"t":"text","v":"NS"},"ttl":{"t":"int","v":21600},"data":{"t":"text","v":"hera.ns.cloudflare.com."}}]}},{"id":"dns.https","title":"HTTPS","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"example.com."},"type":{"t":"text","v":"HTTPS"},"ttl":{"t":"int","v":300},"data":{"t":"text","v":"1 . alpn=h3,h2 ipv4hint=104.20.23.154,172.66.147.243 ipv6hint=2606:4700:10::6814:179a,2606:4700:10::ac42:93f3"}}]}},{"id":"dns.cname","title":"CNAME","shape":{"kind":"records","data":[]}},{"id":"dns.dnskey","title":"DNSKEY","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"example.com."},"type":{"t":"text","v":"DNSKEY"},"ttl":{"t":"int","v":3505},"data":{"t":"text","v":"256 3 13 MjyZielP0GqniI1+j+wAG/3t0ImDDIlj1CxR0oobkZQHSKH2Fqx6tm2NcYu57POJ83SzCWLkqIjZHS1mh5wbaw=="}},{"owner":{"t":"text","v":"example.com."},"type":{"t":"text","v":"DNSKEY"},"ttl":{"t":"int","v":3505},"data":{"t":"text","v":"256 3 13 kxipjoIbNZDsWqEKaYaGq6fM/XThrRp1ue6AV9R/n3eWxpGCeCWJb47PEEEj/Q6VAYFW/7UFo5mXoZfxKYZa3A=="}},{"owner":{"t":"text","v":"example.com."},"type":{"t":"text","v":"DNSKEY"},"ttl":{"t":"int","v":3505},"data":{"t":"text","v":"256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x8fGAa2XhSA=="}},{"owner":{"t":"text","v":"example.com."},"type":{"t":"text","v":"DNSKEY"},"ttl":{"t":"int","v":3505},"data":{"t":"text","v":"257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iUzy1L53eKGQ=="}}]}},{"id":"dns.ds","title":"DS","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"example.com."},"type":{"t":"text","v":"DS"},"ttl":{"t":"int","v":15912},"data":{"t":"text","v":"2371 13 2 C988EC423E3880EB8DD8A46FE06CA230EE23F35B578D64E78B29C3E1C83D245A"}}]}},{"id":"dns.nsec","title":"NSEC","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"example.com."},"type":{"t":"text","v":"NSEC"},"ttl":{"t":"int","v":1800},"data":{"t":"text","v":"\\000.example.com. A NS SOA PTR HINFO MX TXT AAAA Unknown SRV NAPTR CERT SSHFP RRSIG NSEC DNSKEY TLSA SMIMEA Unknown CDS CDNSKEY OPENPGPKEY SVCB HTTPS Unknown CAA"}}]}},{"id":"dns.nsec3","title":"NSEC3","shape":{"kind":"records","data":[]}},{"id":"dns.soa","title":"SOA","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"example.com."},"type":{"t":"text","v":"SOA"},"ttl":{"t":"int","v":581},"data":{"t":"text","v":"elliott.ns.cloudflare.com. dns.cloudflare.com. 2418004112 10000 2400 604800 1800"}}]}},{"id":"dns.svcb","title":"SVCB","shape":{"kind":"records","data":[]}},{"id":"dns.txt","title":"TXT","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"example.com."},"type":{"t":"text","v":"TXT"},"ttl":{"t":"int","v":300},"data":{"t":"text","v":"\"_k2n1y4vw3qtb4skdx9e7dxt97qrmmq9\""}},{"owner":{"t":"text","v":"example.com."},"type":{"t":"text","v":"TXT"},"ttl":{"t":"int","v":300},"data":{"t":"text","v":"\"v=spf1 -all\""}}]}},{"id":"email.mx","title":"MX","shape":{"kind":"table","data":{"key":"host","columns":["host","preference"],"rows":[[{"t":"text","v":"."},{"t":"int","v":0}]]}}},{"id":"email.mx_addresses","title":"MX addresses","shape":{"kind":"table","data":{"key":"address","columns":["address","host"],"rows":[]}}},{"id":"email.spf","title":"SPF","shape":{"kind":"fields","data":[["record",{"t":"text","v":"v=spf1 -all"}],["lookup_count",{"t":"int","v":0}],["void_lookups",{"t":"int","v":0}]]}},{"id":"email.dmarc","title":"DMARC","shape":{"kind":"fields","data":[["record",{"t":"text","v":"v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s"}],["p",{"t":"text","v":"reject"}],["sp",{"t":"text","v":"reject"}],["adkim",{"t":"text","v":"s"}],["aspf",{"t":"text","v":"s"}]]}},{"id":"email.mta_sts","title":"MTA-STS","shape":{"kind":"fields","data":[]}},{"id":"email.tls_rpt","title":"TLS-RPT","shape":{"kind":"fields","data":[]}},{"id":"email.bimi","title":"BIMI","shape":{"kind":"fields","data":[]}},{"id":"email.dnssec","title":"DNSSEC","shape":{"kind":"fields","data":[["dnskey_present",{"t":"bool","v":true}]]}},{"id":"email.dkim","title":"DKIM keys","shape":{"kind":"table","data":{"key":"key","columns":["key","selector","state","key_type","bits"],"rows":[[{"t":"text","v":"default#1"},{"t":"text","v":"default"},{"t":"text","v":"revoked"},{"t":"text","v":""},{"t":"text","v":""}]]}}},{"id":"email.summary","title":"Summary","shape":{"kind":"fields","data":[["grade",{"t":"text","v":"B"}]]}},{"id":"http.redirects","title":"Redirects","shape":{"kind":"chain","data":[]}},{"id":"http.port80","title":"Port 80 redirects","shape":{"kind":"chain","data":[]}},{"id":"http.port80_probe","title":"Port 80 probe","shape":{"kind":"fields","data":[["url",{"t":"text","v":"http://example.com/"}],["status_code",{"t":"int","v":200}],["redirects_to_https",{"t":"bool","v":false}]]}},{"id":"http.headers","title":"Response headers","shape":{"kind":"table","data":{"key":"name","columns":["name","value"],"rows":[[{"t":"text","v":"date"},{"t":"text","v":"Fri, 06 Nov 2026 19:55:40 GMT"}],[{"t":"text","v":"content-type"},{"t":"text","v":"text/html; charset=utf-8"}],[{"t":"text","v":"server"},{"t":"text","v":"cloudflare"}],[{"t":"text","v":"last-modified"},{"t":"text","v":"Thu, 05 Nov 2026 21:17:41 GMT"}],[{"t":"text","v":"allow"},{"t":"text","v":"GET, HEAD"}],[{"t":"text","v":"age"},{"t":"text","v":"5"}],[{"t":"text","v":"cf-cache-status"},{"t":"text","v":"HIT"}],[{"t":"text","v":"content-encoding"},{"t":"text","v":"br"}],[{"t":"text","v":"cf-ray"},{"t":"text","v":"a566a838cea43727-FRA"}],[{"t":"text","v":"alt-svc"},{"t":"text","v":"h3=\":443\"; ma=86400"}]]}}},{"id":"http.caching","title":"Caching","shape":{"kind":"fields","data":[["last_modified",{"t":"time","v":"2026-11-05T21:17:41Z"}],["age",{"t":"int","v":5}]]}},{"id":"http.cdn","title":"CDN","shape":{"kind":"fields","data":[["provider",{"t":"text","v":"Cloudflare"}],["cache_status",{"t":"text","v":"HIT"}],["indicator",{"t":"text","v":"cf-ray"}],["indicator",{"t":"text","v":"cf-cache-status"}]]}},{"id":"http.isolation","title":"Cross-origin isolation","shape":{"kind":"fields","data":[["missing",{"t":"text","v":"cross-origin-opener-policy"}],["missing",{"t":"text","v":"cross-origin-embedder-policy"}],["missing",{"t":"text","v":"cross-origin-resource-policy"}]]}},{"id":"http.server","title":"Server","shape":{"kind":"fields","data":[["final_url",{"t":"text","v":"https://example.com/"}],["status_code",{"t":"int","v":200}],["http_version",{"t":"text","v":"h2"}],["inspection_ms",{"t":"duration","v":403}],["address",{"t":"addr","v":"172.66.147.243"}],["org",{"t":"text","v":"Cloudflare, Inc."}],["network_type",{"t":"text","v":"cloud"}]]}},{"id":"http.cors","title":"CORS","shape":{"kind":"fields","data":[["allows_any_origin",{"t":"bool","v":false}],["reflects_origin",{"t":"bool","v":false}],["allows_credentials",{"t":"bool","v":false}]]}},{"id":"http.cookies","title":"Cookies","shape":{"kind":"table","data":{"key":"cookie","columns":["cookie","name","secure","http_only","same_site"],"rows":[]}}},{"id":"ip.addresses","title":"Addresses","shape":{"kind":"table","data":{"key":"address","columns":["address","asn","org","prefix","network_type","country","city","spamhaus","c2","tor","vpn"],"rows":[[{"t":"addr","v":"104.20.23.154"},{"t":"text","v":"AS13335"},{"t":"text","v":"Cloudflare, Inc."},{"t":"text","v":"104.20.0.0/18"},{"t":"text","v":"cloud"},{"t":"text","v":""},{"t":"text","v":""},{"t":"bool","v":false},{"t":"bool","v":false},{"t":"bool","v":false},{"t":"bool","v":false}],[{"t":"addr","v":"172.66.147.243"},{"t":"text","v":"AS13335"},{"t":"text","v":"Cloudflare, Inc."},{"t":"text","v":"172.66.128.0/19"},{"t":"text","v":"cloud"},{"t":"text","v":""},{"t":"text","v":""},{"t":"bool","v":false},{"t":"bool","v":false},{"t":"bool","v":false},{"t":"bool","v":false}],[{"t":"addr","v":"2606:4700:10::6814:179a"},{"t":"text","v":"AS13335"},{"t":"text","v":"Cloudflare, Inc."},{"t":"text","v":"2606:4700::/43"},{"t":"text","v":"cloud"},{"t":"text","v":""},{"t":"text","v":""},{"t":"bool","v":false},{"t":"bool","v":false},{"t":"bool","v":false},{"t":"bool","v":false}],[{"t":"addr","v":"2606:4700:10::ac42:93f3"},{"t":"text","v":"AS13335"},{"t":"text","v":"Cloudflare, Inc."},{"t":"text","v":"2606:4700::/43"},{"t":"text","v":"cloud"},{"t":"text","v":""},{"t":"text","v":""},{"t":"bool","v":false},{"t":"bool","v":false},{"t":"bool","v":false},{"t":"bool","v":false}]]}}},{"id":"tls.addresses","title":"Addresses","shape":{"kind":"table","data":{"key":"address","columns":["address","port","outcome","message"],"rows":[[{"t":"addr","v":"172.66.147.243"},{"t":"int","v":443},{"t":"text","v":"ok"},{"t":"text","v":""}],[{"t":"addr","v":"2606:4700:10::ac42:93f3"},{"t":"int","v":443},{"t":"text","v":"NOT_TESTED_FROM_HERE"},{"t":"text","v":"Network unreachable (os error 101)"}],[{"t":"addr","v":"104.20.23.154"},{"t":"int","v":443},{"t":"text","v":"ok"},{"t":"text","v":""}]]}}},{"id":"tls.chain@172.66.147.243:443","title":"Certificate chain 172.66.147.243:443","shape":{"kind":"chain","data":[[["position",{"t":"text","v":"leaf"}],["subject",{"t":"text","v":"CN=example.com"}],["issuer",{"t":"text","v":"C=US, O=SSL Corporation, CN=Cloudflare TLS Issuing ECC CA 3"}],["sans",{"t":"text","v":"example.com"}],["sans",{"t":"text","v":"*.example.com"}],["not_before",{"t":"time","v":"2026-09-26T22:49:11Z"}],["not_after",{"t":"time","v":"2026-12-25T22:56:35Z"}],["days_remaining",{"t":"int","v":49}],["key",{"t":"text","v":"ECDSA P-256 256"}],["signature_algorithm",{"t":"text","v":"ecdsa-with-SHA256"}],["fingerprint_sha256",{"t":"text","v":"85:CA:6A:B0:68:E9:BC:CE:88:B6:C4:AA:3C:47:F7:D1:72:28:13:4A:45:7F:87:0D:38:00:E6:22:3A:0D:F0:7A"}],["fingerprint_sha1",{"t":"text","v":"89:9C:B2:59:E7:DE:8D:F1:00:33:A2:AF:48:C2:2C:2F:65:80:A2:1D"}],["serial",{"t":"text","v":"01:EE:E6:AA:BB:52:1D:5E:14:FC:31:5F:D9:98:56:90"}],["policy",{"t":"text","v":"DV"}],["self_signed",{"t":"bool","v":false}],["expired",{"t":"bool","v":false}],["ocsp_url",{"t":"text","v":"http://o.cf-i.ssl.com"}],["ca_issuers_url",{"t":"text","v":"http://i.cf-i.ssl.com/Cloudflare-TLS-I-E3.cer"}]],[["position",{"t":"text","v":"intermediate"}],["subject",{"t":"text","v":"C=US, O=SSL Corporation, CN=Cloudflare TLS Issuing ECC CA 3"}],["issuer",{"t":"text","v":"C=US, O=SSL Corporation, CN=SSL.com TLS Transit ECC CA R2"}],["not_before",{"t":"time","v":"2025-05-29T19:49:45Z"}],["not_after",{"t":"time","v":"2035-05-27T19:49:44Z"}],["days_remaining",{"t":"int","v":3123}],["key",{"t":"text","v":"ECDSA P-256 256"}],["signature_algorithm",{"t":"text","v":"ecdsa-with-SHA384"}],["fingerprint_sha256",{"t":"text","v":"F1:5F:29:AB:EF:73:AA:4D:D9:AB:75:4B:AE:AE:36:85:BD:D3:87:4B:46:B5:25:07:11:77:62:86:85:71:80:26"}],["fingerprint_sha1",{"t":"text","v":"AE:80:1E:D1:C5:5B:B5:79:D7:92:08:B0:D7:72:AC:FB:8C:C3:A2:08"}],["serial",{"t":"text","v":"31:EE:E8:8A:FB:87:CD:9E:F8:33:66:04:74:3F:9B:27"}],["policy",{"t":"text","v":"OV"}],["self_signed",{"t":"bool","v":false}],["expired",{"t":"bool","v":false}],["ca_issuers_url",{"t":"text","v":"http://cert.ssl.com/SSL.com-TLS-T-ECC-R2.cer"}]],[["position",{"t":"text","v":"intermediate"}],["subject",{"t":"text","v":"C=US, O=SSL Corporation, CN=SSL.com TLS Transit ECC CA R2"}],["issuer",{"t":"text","v":"C=US, O=SSL Corporation, CN=SSL.com TLS ECC Root CA 2022"}],["not_before",{"t":"time","v":"2022-10-21T17:02:23Z"}],["not_after",{"t":"time","v":"2037-10-17T17:02:22Z"}],["days_remaining",{"t":"int","v":3997}],["key",{"t":"text","v":"ECDSA P-384 384"}],["signature_algorithm",{"t":"text","v":"ecdsa-with-SHA384"}],["fingerprint_sha256",{"t":"text","v":"5D:1B:C3:99:27:4E:64:9E:1C:72:69:7D:E9:1A:54:AD:72:50:88:C5:22:1C:B6:1E:17:EE:9C:29:0B:C4:2A:92"}],["fingerprint_sha1",{"t":"text","v":"E1:51:88:4D:AE:92:4B:08:EF:26:46:01:21:D7:79:06:D5:D1:8A:C8"}],["serial",{"t":"text","v":"60:4D:8A:F8:D0:0B:A8:74:8B:95:58:53:17:2C:5F:2E"}],["policy",{"t":"text","v":"OV"}],["self_signed",{"t":"bool","v":false}],["expired",{"t":"bool","v":false}],["ca_issuers_url",{"t":"text","v":"http://cert.ssl.com/SSLcom-TLS-Root-2022-ECC.cer"}]],[["position",{"t":"text","v":"intermediate"}],["subject",{"t":"text","v":"C=US, O=SSL Corporation, CN=SSL.com TLS ECC Root CA 2022"}],["issuer",{"t":"text","v":"C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services"}],["not_before",{"t":"time","v":"2025-08-01T00:00:00Z"}],["not_after",{"t":"time","v":"2028-12-31T23:59:59Z"}],["days_remaining",{"t":"int","v":786}],["key",{"t":"text","v":"ECDSA P-384 384"}],["signature_algorithm",{"t":"text","v":"sha256WithRSAEncryption"}],["fingerprint_sha256",{"t":"text","v":"BA:06:D3:D3:E3:48:FC:E7:47:8C:C8:4B:42:2D:0E:63:8E:9E:22:1E:F1:A0:B5:3A:DC:14:CC:70:E0:4B:8A:B8"}],["fingerprint_sha1",{"t":"text","v":"5C:85:D2:01:CA:68:B3:9F:CC:D2:4A:89:27:35:9E:F2:95:AF:83:DC"}],["serial",{"t":"text","v":"17:3D:CA:60:EA:9F:8E:10:26:DA:FC:D7:28:10:E4:8E"}],["policy",{"t":"text","v":"EV"}],["self_signed",{"t":"bool","v":false}],["expired",{"t":"bool","v":false}],["ocsp_url",{"t":"text","v":"http://ocsp.comodoca.com"}]]]}},{"id":"tls.handshake@172.66.147.243:443","title":"Handshake 172.66.147.243:443","shape":{"kind":"fields","data":[["version",{"t":"text","v":"TLSv1.3"}],["cipher_suite",{"t":"text","v":"TLS13_AES_256_GCM_SHA384"}],["key_exchange_group",{"t":"text","v":"X25519"}],["sni",{"t":"text","v":"example.com"}],["ocsp_stapled",{"t":"bool","v":true}],["ocsp_status",{"t":"text","v":"good"}],["ocsp_this_update",{"t":"time","v":"2026-11-02T19:22:00Z"}],["ocsp_next_update",{"t":"time","v":"2026-11-09T19:22:00Z"}],["ocsp_live_status",{"t":"text","v":"good"}],["ech",{"t":"bool","v":false}],["handshake_ms",{"t":"duration","v":21}]]}},{"id":"tls.chain@104.20.23.154:443","title":"Certificate chain 104.20.23.154:443","shape":{"kind":"chain","data":[[["position",{"t":"text","v":"leaf"}],["subject",{"t":"text","v":"CN=example.com"}],["issuer",{"t":"text","v":"C=US, O=SSL Corporation, CN=Cloudflare TLS Issuing ECC CA 3"}],["sans",{"t":"text","v":"example.com"}],["sans",{"t":"text","v":"*.example.com"}],["not_before",{"t":"time","v":"2026-09-26T22:49:11Z"}],["not_after",{"t":"time","v":"2026-12-25T22:56:35Z"}],["days_remaining",{"t":"int","v":49}],["key",{"t":"text","v":"ECDSA P-256 256"}],["signature_algorithm",{"t":"text","v":"ecdsa-with-SHA256"}],["fingerprint_sha256",{"t":"text","v":"85:CA:6A:B0:68:E9:BC:CE:88:B6:C4:AA:3C:47:F7:D1:72:28:13:4A:45:7F:87:0D:38:00:E6:22:3A:0D:F0:7A"}],["fingerprint_sha1",{"t":"text","v":"89:9C:B2:59:E7:DE:8D:F1:00:33:A2:AF:48:C2:2C:2F:65:80:A2:1D"}],["serial",{"t":"text","v":"01:EE:E6:AA:BB:52:1D:5E:14:FC:31:5F:D9:98:56:90"}],["policy",{"t":"text","v":"DV"}],["self_signed",{"t":"bool","v":false}],["expired",{"t":"bool","v":false}],["ocsp_url",{"t":"text","v":"http://o.cf-i.ssl.com"}],["ca_issuers_url",{"t":"text","v":"http://i.cf-i.ssl.com/Cloudflare-TLS-I-E3.cer"}]],[["position",{"t":"text","v":"intermediate"}],["subject",{"t":"text","v":"C=US, O=SSL Corporation, CN=Cloudflare TLS Issuing ECC CA 3"}],["issuer",{"t":"text","v":"C=US, O=SSL Corporation, CN=SSL.com TLS Transit ECC CA R2"}],["not_before",{"t":"time","v":"2025-05-29T19:49:45Z"}],["not_after",{"t":"time","v":"2035-05-27T19:49:44Z"}],["days_remaining",{"t":"int","v":3123}],["key",{"t":"text","v":"ECDSA P-256 256"}],["signature_algorithm",{"t":"text","v":"ecdsa-with-SHA384"}],["fingerprint_sha256",{"t":"text","v":"F1:5F:29:AB:EF:73:AA:4D:D9:AB:75:4B:AE:AE:36:85:BD:D3:87:4B:46:B5:25:07:11:77:62:86:85:71:80:26"}],["fingerprint_sha1",{"t":"text","v":"AE:80:1E:D1:C5:5B:B5:79:D7:92:08:B0:D7:72:AC:FB:8C:C3:A2:08"}],["serial",{"t":"text","v":"31:EE:E8:8A:FB:87:CD:9E:F8:33:66:04:74:3F:9B:27"}],["policy",{"t":"text","v":"OV"}],["self_signed",{"t":"bool","v":false}],["expired",{"t":"bool","v":false}],["ca_issuers_url",{"t":"text","v":"http://cert.ssl.com/SSL.com-TLS-T-ECC-R2.cer"}]],[["position",{"t":"text","v":"intermediate"}],["subject",{"t":"text","v":"C=US, O=SSL Corporation, CN=SSL.com TLS Transit ECC CA R2"}],["issuer",{"t":"text","v":"C=US, O=SSL Corporation, CN=SSL.com TLS ECC Root CA 2022"}],["not_before",{"t":"time","v":"2022-10-21T17:02:23Z"}],["not_after",{"t":"time","v":"2037-10-17T17:02:22Z"}],["days_remaining",{"t":"int","v":3997}],["key",{"t":"text","v":"ECDSA P-384 384"}],["signature_algorithm",{"t":"text","v":"ecdsa-with-SHA384"}],["fingerprint_sha256",{"t":"text","v":"5D:1B:C3:99:27:4E:64:9E:1C:72:69:7D:E9:1A:54:AD:72:50:88:C5:22:1C:B6:1E:17:EE:9C:29:0B:C4:2A:92"}],["fingerprint_sha1",{"t":"text","v":"E1:51:88:4D:AE:92:4B:08:EF:26:46:01:21:D7:79:06:D5:D1:8A:C8"}],["serial",{"t":"text","v":"60:4D:8A:F8:D0:0B:A8:74:8B:95:58:53:17:2C:5F:2E"}],["policy",{"t":"text","v":"OV"}],["self_signed",{"t":"bool","v":false}],["expired",{"t":"bool","v":false}],["ca_issuers_url",{"t":"text","v":"http://cert.ssl.com/SSLcom-TLS-Root-2022-ECC.cer"}]],[["position",{"t":"text","v":"intermediate"}],["subject",{"t":"text","v":"C=US, O=SSL Corporation, CN=SSL.com TLS ECC Root CA 2022"}],["issuer",{"t":"text","v":"C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services"}],["not_before",{"t":"time","v":"2025-08-01T00:00:00Z"}],["not_after",{"t":"time","v":"2028-12-31T23:59:59Z"}],["days_remaining",{"t":"int","v":786}],["key",{"t":"text","v":"ECDSA P-384 384"}],["signature_algorithm",{"t":"text","v":"sha256WithRSAEncryption"}],["fingerprint_sha256",{"t":"text","v":"BA:06:D3:D3:E3:48:FC:E7:47:8C:C8:4B:42:2D:0E:63:8E:9E:22:1E:F1:A0:B5:3A:DC:14:CC:70:E0:4B:8A:B8"}],["fingerprint_sha1",{"t":"text","v":"5C:85:D2:01:CA:68:B3:9F:CC:D2:4A:89:27:35:9E:F2:95:AF:83:DC"}],["serial",{"t":"text","v":"17:3D:CA:60:EA:9F:8E:10:26:DA:FC:D7:28:10:E4:8E"}],["policy",{"t":"text","v":"EV"}],["self_signed",{"t":"bool","v":false}],["expired",{"t":"bool","v":false}],["ocsp_url",{"t":"text","v":"http://ocsp.comodoca.com"}]]]}},{"id":"tls.handshake@104.20.23.154:443","title":"Handshake 104.20.23.154:443","shape":{"kind":"fields","data":[["version",{"t":"text","v":"TLSv1.3"}],["cipher_suite",{"t":"text","v":"TLS13_AES_256_GCM_SHA384"}],["key_exchange_group",{"t":"text","v":"X25519"}],["sni",{"t":"text","v":"example.com"}],["ocsp_stapled",{"t":"bool","v":true}],["ocsp_status",{"t":"text","v":"good"}],["ocsp_this_update",{"t":"time","v":"2026-11-02T19:22:00Z"}],["ocsp_next_update",{"t":"time","v":"2026-11-09T19:22:00Z"}],["ocsp_live_status",{"t":"text","v":"good"}],["ech",{"t":"bool","v":false}],["handshake_ms",{"t":"duration","v":6}]]}},{"id":"tls.probes@172.66.147.243:443","title":"Protocol probes 172.66.147.243:443","shape":{"kind":"fields","data":[["ssl3",{"t":"text","v":"disabled"}],["ssl3_answer",{"t":"text","v":"alert handshake_failure"}],["tls1_0",{"t":"text","v":"enabled"}],["tls1_0_answer",{"t":"text","v":"server_hello TLSv1.0 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"}],["tls1_1",{"t":"text","v":"enabled"}],["tls1_1_answer",{"t":"text","v":"server_hello TLSv1.1 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"}],["tls1_2",{"t":"text","v":"enabled"}],["tls1_2_answer",{"t":"text","v":"server_hello TLSv1.2 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"}],["tls1_3",{"t":"text","v":"enabled"}],["tls1_3_answer",{"t":"text","v":"handshake TLSv1.3"}],["suites_insecure",{"t":"text","v":"refused"}],["suites_insecure_answer",{"t":"text","v":"alert handshake_failure"}],["suites_cbc",{"t":"text","v":"accepted"}],["suites_cbc_answer",{"t":"text","v":"server_hello TLSv1.2 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA"}],["suites_static_rsa",{"t":"text","v":"accepted"}],["suites_static_rsa_answer",{"t":"text","v":"server_hello TLSv1.2 TLS_RSA_WITH_AES_128_GCM_SHA256"}]]}},{"id":"tls.protocols","title":"Protocols and features","shape":{"kind":"fields","data":[["ssl3",{"t":"text","v":"disabled"}],["tls1_0",{"t":"text","v":"enabled"}],["tls1_1",{"t":"text","v":"enabled"}],["tls1_2",{"t":"text","v":"enabled"}],["tls1_3",{"t":"text","v":"enabled"}],["suites_insecure",{"t":"text","v":"refused"}],["suites_cbc",{"t":"text","v":"accepted"}],["suites_static_rsa",{"t":"text","v":"accepted"}],["forward_secrecy_all_suites",{"t":"bool","v":false}]]}},{"id":"tls.ct","title":"Certificate Transparency","shape":{"kind":"table","data":{"key":"address","columns":["address","sct_count","log_ids"],"rows":[[{"t":"addr","v":"172.66.147.243"},{"t":"int","v":2},{"t":"text","v":"944e4387faecc1ef81f3192426a8186501c7d35f3802013f72677d55372e19d8, cb38f715897c84a1445f5bc1ddfbc96ef29a59cd470a690585b0cb14c31458e7"}],[{"t":"addr","v":"104.20.23.154"},{"t":"int","v":2},{"t":"text","v":"944e4387faecc1ef81f3192426a8186501c7d35f3802013f72677d55372e19d8, cb38f715897c84a1445f5bc1ddfbc96ef29a59cd470a690585b0cb14c31458e7"}]]}}},{"id":"tls.caa","title":"CAA","shape":{"kind":"records","data":[]}}]}}
run of 2026-11-06 19:55 UTC entry gDO79E9Z
pass
DNS·02
DNSKEY algorithm
pass
DNS·03
DNSSEC key rollover
warn
DNS·04
CAA records
No CAA records found: any Certificate Authority can issue certificates for this domain; cf. RFC 8659
Fix: Publish issue and issuewild CAA records naming the allowed certificate authorities, using only known tags.
pass
DNS·05
Nameserver redundancy
pass
DNS·06
Lame delegation
pass
DNS·07
Delegation consistency
pass
DNS·08
No CNAME at apex
pass
DNS·09
HTTPS record
pass
DNS·10
TTL range
A
| example.com. | A | 300 | 104.20.23.154 |
| example.com. | A | 300 | 172.66.147.243 |
← swipe the table
Feeds lines: TTL
AAAA
| example.com. | AAAA | 300 | 2606:4700:10::6814:179a |
| example.com. | AAAA | 300 | 2606:4700:10::ac42:93f3 |
← swipe the table
Feeds lines: TTL
MX
| example.com. | MX | 196 | 0 . |
← swipe the table
Feeds lines: TTL
CAA
Nothing recorded.
Feeds lines: CAA, TTL
NS
| example.com. | NS | 21600 | elliott.ns.cloudflare.com. |
| example.com. | NS | 21600 | hera.ns.cloudflare.com. |
← swipe the table
Feeds lines: NS, Lame NS, Deleg, TTL
HTTPS
| example.com. | HTTPS | 300 | 1 . alpn=h3,h2 ipv4hint=104.20.23.154,172.66.147.243 ipv6hint=2606:4700:10::6814:179a,2606:4700:10::ac42:93f3 |
← swipe the table
Feeds lines: HTTPS RR, TTL, ECH
CNAME
Nothing recorded.
Feeds lines: Apex, TTL
DNSKEY
| example.com. | DNSKEY | 3505 | 256 3 13 MjyZielP0GqniI1+j+wAG/3t0ImDDIlj1CxR0oobkZQHSKH2Fqx6tm2NcYu57POJ83SzCWLkqIjZHS1mh5wbaw== |
| example.com. | DNSKEY | 3505 | 256 3 13 kxipjoIbNZDsWqEKaYaGq6fM/XThrRp1ue6AV9R/n3eWxpGCeCWJb47PEEEj/Q6VAYFW/7UFo5mXoZfxKYZa3A== |
| example.com. | DNSKEY | 3505 | 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x8fGAa2XhSA== |
| example.com. | DNSKEY | 3505 | 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iUzy1L53eKGQ== |
← swipe the table
Feeds lines: DNSSEC, DNSKEY, Rollover, TTL
DS
| example.com. | DS | 15912 | 2371 13 2 C988EC423E3880EB8DD8A46FE06CA230EE23F35B578D64E78B29C3E1C83D245A |
← swipe the table
Feeds lines: DNSSEC, Rollover, TTL
NSEC
| example.com. | NSEC | 1800 | \000.example.com. A NS SOA PTR HINFO MX TXT AAAA Unknown SRV NAPTR CERT SSHFP RRSIG NSEC DNSKEY TLSA SMIMEA Unknown CDS CDNSKEY OPENPGPKEY SVCB HTTPS Unknown CAA |
← swipe the table
Feeds lines: DNSSEC, TTL
NSEC3
Nothing recorded.
Feeds lines: DNSSEC, TTL
SOA
| example.com. | SOA | 581 | elliott.ns.cloudflare.com. dns.cloudflare.com. 2418004112 10000 2400 604800 1800 |
← swipe the table
Feeds lines: Apex, TTL
SVCB
Nothing recorded.
Feeds lines: HTTPS RR, TTL
TXT
| example.com. | TXT | 300 | "_k2n1y4vw3qtb4skdx9e7dxt97qrmmq9" |
| example.com. | TXT | 300 | "v=spf1 -all" |
← swipe the table
Feeds lines: TTL
Explore live
- DNS · example.com
- DNS · example.com. A
- DNS · example.com. AAAA
- DNS · example.com. MX
- DNS · example.com CAA
- DNS · example.com. NS
- DNS · example.com. HTTPS
- DNS · example.com CNAME
- DNS · example.com. DNSKEY
- DNS · example.com. DS
- DNS · example.com. NSEC
- DNS · example.com NSEC3
- DNS · example.com. SOA
- DNS · example.com SVCB
- DNS · example.com. TXT