tools / DNS & domains

DNS discovery

Scan a domain's apex records, email setup and subdomains in one go, with names from Certificate Transparency logs.

Records 86Subdomains 6Queries 104Time 0.9 sResolver Cloudflare 1.1.1.1DNSSEC validated

Email

MX 4 mail servers
SPF published
DMARC p=reject
DKIM selectors k1, krs, m1, mandrill, s1, smtpapi
MTA-STS published
TLS-RPT published

Apex

Type	Value	TTL
A	`104.16.132.229`	1 min
A	`104.16.133.229`	1 min
AAAA	`2606:4700::6810:84e5`	5 min
AAAA	`2606:4700::6810:85e5`	5 min
NS	`ns3.cloudflare.com`	24 h
NS	`ns4.cloudflare.com`	24 h
NS	`ns5.cloudflare.com`	24 h
NS	`ns6.cloudflare.com`	24 h
NS	`ns7.cloudflare.com`	24 h
MX	`5 mxa-canary.global.inbound.cf-emailsecurity.net`	26 min
MX	`5 mxb-canary.global.inbound.cf-emailsecurity.net`	26 min
MX	`10 mxa.global.inbound.cf-emailsecurity.net`	26 min
MX	`10 mxb.global.inbound.cf-emailsecurity.net`	26 min
SOA	`ns3.cloudflare.com dns.cloudflare.com 2418705800 10000 2400 604800 300`	5 min
TXT	`MS=ms70274184`	5 min
TXT	`_neqmkgaq1lq9it5s8qmetrhbnu121wb`	5 min
TXT	`_wkjc0fot0d7qrvrdt78bxkj2e2o67d2`	5 min
TXT	`ZOOM_verify_7LFBvOO9SIigypFG2xRlMA`	5 min
TXT	`asv=894f6d1f9f83bcf44e4b1bc40bc1c4aa`	5 min
TXT	`apple-domain-verification=DNnWJoArJobFJKhJ`	5 min
TXT	`status-page-domain-verification=r14frwljwbxs`	5 min
TXT	`jamf-site-verification=c-eUvHBbhgFxMulFSY-QJQ`	5 min
TXT	`canva-site-verification=oOyaVnHC-OiFoR1BPvetNA`	5 min
TXT	`docker-verification=c578e21c-34fb-4474-9b90-d55ee4cba10c`	5 min
TXT	`miro-verification=bdd7dfa0a49adfb43ad6ddfaf797633246c07356`	5 min
TXT	`facebook-domain-verification=h9mm6zopj6p2po54woa16m5bskm6oo`	5 min
TXT	`databank-domain-verification-hkehd2=fzgu4kmbZwMoW99zENgO4u8NL`	5 min
TXT	`onetrust-domain-verification=bd5cd08a1e9644799fdb98ed7d60c9cb`	5 min
TXT	`uber-domain-verification=58086039-150a-42a4-a4be-b4032921aa0f`	5 min
TXT	`logmein-verification-code=b3433c86-3823-4808-8a7e-58042469f654`	5 min
TXT	`creatopy-domain-verification=97d2ca50-9b6f-4a21-9bdb-fbb630e4cec7`	5 min
TXT	`google-site-verification=C7thfNeXVahkVhniiqTI1iSVnElKR_kBBtnEHkeGDlo`	5 min
TXT	`google-site-verification=ZdlQZLBBAPkxeFTCM1rpiB_ibtGff_JF5KllNKwDR9I`	5 min
TXT	`liveramp-site-verification=EhH1MqgwbndTWl1AN64hOTKz7hc1s80yUpchLbgpfY0`	5 min
TXT	`stripe-verification=5096d01ff2cf194285dd51cae18f24fa9c26dc928cebac3636d462b4c6925623`	5 min
TXT	`stripe-verification=bf1a94e6b16ace2502a4a7fff574a25c8a45291054960c883c59be39d1788db9`	5 min
TXT	`drift-domain-verification=f037808a26ae8b25bc13b1f1f2b4c3e0f78c03e67f24cefdd4ec520efa8e719f`	5 min
TXT	`cisco-ci-domain-verification=27e926884619804ef987ae4aa1c4168f6b152ada84f4c8bfc74eb2bd2912ad72`	5 min
TXT	`atlassian-domain-verification=WxxKyN9aLnjEsoOjUYI6T0bb5vcqmKzaIkC9Rx2QkNb751G3LL/cus8/ZDOgh8xB`	5 min
TXT	`_saml-domain-challenge.2dc00405-79cd-457b-b288-a119c6f0c7b7.71996d53-d178-4ba9-bef4-7f7e46edab74.cloudflare.com=1c8736fd-84b2-4197-985f-3fb2852f2457`	5 min
TXT	`DirectFedAuthUrl=https://cloudflare-security.cloudflareaccess.com/cdn-cgi/access/sso/saml/dba6756ad312fc13c45f705cf7f5e87f4d658be016c41f950329aa4085b3abc1`	5 min
TXT	`DirectFedAuthUrl=https://cloudflare-security.cloudflareaccess.com/cdn-cgi/access/sso/saml/ebec933773c69c93420d13e6776adb8c4a190f6281f9d132bcebd7dcb0967bdd`	5 min
TXT	`v=spf1 ip4:199.15.212.0/22 ip4:173.245.48.0/20 include:_spf.google.com include:spf1.mcsv.net include:spf.mandrillapp.com include:mail.zendesk.com include:stspg-customer.com include:_spf.salesforce.com -all`	5 min
CAA	`0 iodef "mailto:tls-abuse@cloudflare.com"`	5 min
CAA	`0 issue "comodoca.com"`	5 min
CAA	`0 issue "digicert.com; cansignhttpexchanges=yes"`	5 min
CAA	`0 issue "letsencrypt.org"`	5 min
CAA	`0 issue "pki.goog; cansignhttpexchanges=yes"`	5 min
CAA	`0 issue "ssl.com"`	5 min
CAA	`0 issuewild "comodoca.com"`	5 min
CAA	`0 issuewild "digicert.com; cansignhttpexchanges=yes"`	5 min
CAA	`0 issuewild "letsencrypt.org"`	5 min
CAA	`0 issuewild "pki.goog; cansignhttpexchanges=yes"`	5 min
CAA	`0 issuewild "ssl.com"`	5 min

Email authentication

Name	Type	Value	TTL
`_dmarc`	TXT	`v=DMARC1; p=reject; sp=reject; adkim=r; aspf=r; pct=100; rua=mailto:a1c47f179bc04efd8ee4dcd4d85dfc65@dmarc-reports.cloudflare.net,mailto:rua@cloudflare.com`	4 min
`_mta-sts`	TXT	`v=STSv1;id=1769609691387;`	5 min
`_smtp._tls`	TXT	`v=TLSRPTv1; rua=mailto:rua@cloudflare.com;`	5 min
`k1._domainkey`	CNAME	`dkim.mcsv.net`	5 min
`krs._domainkey`	TXT	`k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDABsWW5o5AZXBkDW4tfObv80OqeitxSVC6z3j2vsE+vilmJ50McTtro5xnZALRdI8gG5fjswYN9Bia5Yn7jPFXVm1K7tj8rWo1wqLR129pyOffIdP1XyOkyhi5KCVNLG9Brad5w1sH6x93Sh4t3Oz4HT8AwOP7L5EEG4pl/Y/XVQIDAQAB`	5 min
`m1._domainkey`	TXT	`v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfI4XmZUuFjcKhAIW2f5dqqlYg4/7xSM953hHWXR5U2VPrfram3ZCqXIOxgvgINFxNAm4m0rxaQ2xtwknSWubFcl+yepZ5mwgBqWh/7bO1LNdOqj10lgfspWukRdI34djbEYDkFg/2A7q5QspifLSLD9o07ecrTjwWHaDth5/SMjePQ0ImOJYy1lScWaicB3x+MYY3TYVRFN2OLwk+ABgZhV4axYlCCYKGVXx6S4LhQkYApM0HWYNdEnxkUgP3t4YFVb/0Lc2c13Sn61mZShBOKehkocHbGwhBuCxcIhHpw+Zt+n2RyE9/aAAv3oNHJByCWu0+zvD+USmyfkao2//wIDAQAB`	5 min
`mandrill._domainkey`	TXT	`v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y78dHZj1YeRXXVvWob2OaKynO8/lQIDAQAB`	5 min
`s1._domainkey`	CNAME	`s1.domainkey.u5338572.wl073.sendgrid.net`	5 min
`smtpapi._domainkey`	TXT	`k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76yojh54Xu3uSbQ3JP0A7k8o8GutRF8zbFUA8n0ZH2y0cIEjMliXY4W4LwPA7m4q0ObmvSjhd63O9d8z1XkUBwIDAQAB`	5 min

Subdomains

Name	Type	Value	TTL
`api`	A	`104.19.192.29`	5 min
`api`	A	`104.19.192.174`	5 min
`api`	A	`104.19.192.175`	5 min
`api`	A	`104.19.192.176`	5 min
`api`	A	`104.19.192.177`	5 min
`api`	A	`104.19.193.29`	5 min
`api`	AAAA	`2606:4700:300a::6813:c01d`	5 min
`api`	AAAA	`2606:4700:300a::6813:c0ae`	5 min
`api`	AAAA	`2606:4700:300a::6813:c0af`	5 min
`api`	AAAA	`2606:4700:300a::6813:c0b0`	5 min
`api`	AAAA	`2606:4700:300a::6813:c0b1`	5 min
`api`	AAAA	`2606:4700:300a::6813:c11d`	5 min
`blog`	A	`104.18.28.7`	5 min
`blog`	A	`104.18.29.7`	5 min
`blog`	AAAA	`2606:4700::6812:1c07`	5 min
`blog`	AAAA	`2606:4700::6812:1d07`	5 min
`ns1`	A	`173.245.58.100`	24 h
`ns2`	A	`173.245.59.100`	24 h
`staging`	A	`108.162.209.98`	2 min
`www`	A	`104.16.123.96`	5 min
`www`	A	`104.16.124.96`	5 min
`www`	AAAA	`2606:4700::6810:7b60`	5 min
`www`	AAAA	`2606:4700::6810:7c60`	5 min

Probed 24 common names. Certificate Transparency skipped: crt.sh answered HTTP 502.

Zone file

; Zone file for cloudflare.com
; Exported by tools dns-discovery on 2026-10-30T08:51:54.500Z
; Resolver: Cloudflare 1.1.1.1
; DNSSEC: validated (AD bit set)
; Discovered by probing common names, not a complete zone transfer
;
$ORIGIN cloudflare.com.

@	73	IN	A	104.16.132.229
@	73	IN	A	104.16.133.229
@	300	IN	AAAA	2606:4700::6810:84e5
@	300	IN	AAAA	2606:4700::6810:85e5
@	86400	IN	NS	ns3.cloudflare.com.
@	86400	IN	NS	ns4.cloudflare.com.
@	86400	IN	NS	ns5.cloudflare.com.
@	86400	IN	NS	ns6.cloudflare.com.
@	86400	IN	NS	ns7.cloudflare.com.
@	1573	IN	MX	5 mxa-canary.global.inbound.cf-emailsecurity.net.
@	1573	IN	MX	5 mxb-canary.global.inbound.cf-emailsecurity.net.
@	1573	IN	MX	10 mxa.global.inbound.cf-emailsecurity.net.
@	1573	IN	MX	10 mxb.global.inbound.cf-emailsecurity.net.
@	300	IN	SOA	ns3.cloudflare.com. dns.cloudflare.com. 2418705800 10000 2400 604800 300
@	300	IN	TXT	"MS=ms70274184"
@	300	IN	TXT	"_neqmkgaq1lq9it5s8qmetrhbnu121wb"
@	300	IN	TXT	"_wkjc0fot0d7qrvrdt78bxkj2e2o67d2"
@	300	IN	TXT	"ZOOM_verify_7LFBvOO9SIigypFG2xRlMA"
@	300	IN	TXT	"asv=894f6d1f9f83bcf44e4b1bc40bc1c4aa"
@	300	IN	TXT	"apple-domain-verification=DNnWJoArJobFJKhJ"
@	300	IN	TXT	"status-page-domain-verification=r14frwljwbxs"
@	300	IN	TXT	"jamf-site-verification=c-eUvHBbhgFxMulFSY-QJQ"
@	300	IN	TXT	"canva-site-verification=oOyaVnHC-OiFoR1BPvetNA"
@	300	IN	TXT	"docker-verification=c578e21c-34fb-4474-9b90-d55ee4cba10c"
@	300	IN	TXT	"miro-verification=bdd7dfa0a49adfb43ad6ddfaf797633246c07356"
@	300	IN	TXT	"facebook-domain-verification=h9mm6zopj6p2po54woa16m5bskm6oo"
@	300	IN	TXT	"databank-domain-verification-hkehd2=fzgu4kmbZwMoW99zENgO4u8NL"
@	300	IN	TXT	"onetrust-domain-verification=bd5cd08a1e9644799fdb98ed7d60c9cb"
@	300	IN	TXT	"uber-domain-verification=58086039-150a-42a4-a4be-b4032921aa0f"
@	300	IN	TXT	"logmein-verification-code=b3433c86-3823-4808-8a7e-58042469f654"
@	300	IN	TXT	"creatopy-domain-verification=97d2ca50-9b6f-4a21-9bdb-fbb630e4cec7"
@	300	IN	TXT	"google-site-verification=C7thfNeXVahkVhniiqTI1iSVnElKR_kBBtnEHkeGDlo"
@	300	IN	TXT	"google-site-verification=ZdlQZLBBAPkxeFTCM1rpiB_ibtGff_JF5KllNKwDR9I"
@	300	IN	TXT	"liveramp-site-verification=EhH1MqgwbndTWl1AN64hOTKz7hc1s80yUpchLbgpfY0"
@	300	IN	TXT	"stripe-verification=5096d01ff2cf194285dd51cae18f24fa9c26dc928cebac3636d462b4c6925623"
@	300	IN	TXT	"stripe-verification=bf1a94e6b16ace2502a4a7fff574a25c8a45291054960c883c59be39d1788db9"
@	300	IN	TXT	"drift-domain-verification=f037808a26ae8b25bc13b1f1f2b4c3e0f78c03e67f24cefdd4ec520efa8e719f"
@	300	IN	TXT	"cisco-ci-domain-verification=27e926884619804ef987ae4aa1c4168f6b152ada84f4c8bfc74eb2bd2912ad72"
@	300	IN	TXT	"atlassian-domain-verification=WxxKyN9aLnjEsoOjUYI6T0bb5vcqmKzaIkC9Rx2QkNb751G3LL/cus8/ZDOgh8xB"
@	300	IN	TXT	"_saml-domain-challenge.2dc00405-79cd-457b-b288-a119c6f0c7b7.71996d53-d178-4ba9-bef4-7f7e46edab74.cloudflare.com=1c8736fd-84b2-4197-985f-3fb2852f2457"
@	300	IN	TXT	"DirectFedAuthUrl=https://cloudflare-security.cloudflareaccess.com/cdn-cgi/access/sso/saml/dba6756ad312fc13c45f705cf7f5e87f4d658be016c41f950329aa4085b3abc1"
@	300	IN	TXT	"DirectFedAuthUrl=https://cloudflare-security.cloudflareaccess.com/cdn-cgi/access/sso/saml/ebec933773c69c93420d13e6776adb8c4a190f6281f9d132bcebd7dcb0967bdd"
@	300	IN	TXT	"v=spf1 ip4:199.15.212.0/22 ip4:173.245.48.0/20 include:_spf.google.com include:spf1.mcsv.net include:spf.mandrillapp.com include:mail.zendesk.com include:stspg-customer.com include:_spf.salesforce.com -all"
@	300	IN	CAA	0 iodef "mailto:tls-abuse@cloudflare.com"
@	300	IN	CAA	0 issue "comodoca.com"
@	300	IN	CAA	0 issue "digicert.com; cansignhttpexchanges=yes"
@	300	IN	CAA	0 issue "letsencrypt.org"
@	300	IN	CAA	0 issue "pki.goog; cansignhttpexchanges=yes"
@	300	IN	CAA	0 issue "ssl.com"
@	300	IN	CAA	0 issuewild "comodoca.com"
@	300	IN	CAA	0 issuewild "digicert.com; cansignhttpexchanges=yes"
@	300	IN	CAA	0 issuewild "letsencrypt.org"
@	300	IN	CAA	0 issuewild "pki.goog; cansignhttpexchanges=yes"
@	300	IN	CAA	0 issuewild "ssl.com"
_dmarc	219	IN	TXT	"v=DMARC1; p=reject; sp=reject; adkim=r; aspf=r; pct=100; rua=mailto:a1c47f179bc04efd8ee4dcd4d85dfc65@dmarc-reports.cloudflare.net,mailto:rua@cloudflare.com"
_mta-sts	300	IN	TXT	"v=STSv1;id=1769609691387;"
_smtp._tls	300	IN	TXT	"v=TLSRPTv1; rua=mailto:rua@cloudflare.com;"
k1._domainkey	300	IN	CNAME	dkim.mcsv.net.
krs._domainkey	300	IN	TXT	"k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDABsWW5o5AZXBkDW4tfObv80OqeitxSVC6z3j2vsE+vilmJ50McTtro5xnZALRdI8gG5fjswYN9Bia5Yn7jPFXVm1K7tj8rWo1wqLR129pyOffIdP1XyOkyhi5KCVNLG9Brad5w1sH6x93Sh4t3Oz4HT8AwOP7L5EEG4pl/Y/XVQIDAQAB"
m1._domainkey	300	IN	TXT	"v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfI4XmZUuFjcKhAIW2f5dqqlYg4/7xSM953hHWXR5U2VPrfram3ZCqXIOxgvgINFxNAm4m0rxaQ2xtwknSWubFcl+yepZ5mwgBqWh/7bO1LNdOqj10lgfspWukRdI34djbEYDkFg/2A7q5QspifLSLD9o07ecrTjwWHaDth5/SMjePQ0ImOJYy1lScWaicB3x+M" "YY3TYVRFN2OLwk+ABgZhV4axYlCCYKGVXx6S4LhQkYApM0HWYNdEnxkUgP3t4YFVb/0Lc2c13Sn61mZShBOKehkocHbGwhBuCxcIhHpw+Zt+n2RyE9/aAAv3oNHJByCWu0+zvD+USmyfkao2//wIDAQAB"
mandrill._domainkey	300	IN	TXT	"v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y78dHZj1YeRXXVvWob2OaKynO8/lQIDAQAB"
s1._domainkey	300	IN	CNAME	s1.domainkey.u5338572.wl073.sendgrid.net.
smtpapi._domainkey	300	IN	TXT	"k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76yojh54Xu3uSbQ3JP0A7k8o8GutRF8zbFUA8n0ZH2y0cIEjMliXY4W4LwPA7m4q0ObmvSjhd63O9d8z1XkUBwIDAQAB"
api	300	IN	A	104.19.192.29
api	300	IN	A	104.19.192.174
api	300	IN	A	104.19.192.175
api	300	IN	A	104.19.192.176
api	300	IN	A	104.19.192.177
api	300	IN	A	104.19.193.29
api	300	IN	AAAA	2606:4700:300a::6813:c01d
api	300	IN	AAAA	2606:4700:300a::6813:c0ae
api	300	IN	AAAA	2606:4700:300a::6813:c0af
api	300	IN	AAAA	2606:4700:300a::6813:c0b0
api	300	IN	AAAA	2606:4700:300a::6813:c0b1
api	300	IN	AAAA	2606:4700:300a::6813:c11d
blog	300	IN	A	104.18.28.7
blog	300	IN	A	104.18.29.7
blog	300	IN	AAAA	2606:4700::6812:1c07
blog	300	IN	AAAA	2606:4700::6812:1d07
ns1	86400	IN	A	173.245.58.100
ns2	86400	IN	A	173.245.59.100
staging	120	IN	A	108.162.209.98
www	300	IN	A	104.16.123.96
www	300	IN	A	104.16.124.96
www	282	IN	AAAA	2606:4700::6810:7b60
www	282	IN	AAAA	2606:4700::6810:7c60

A snapshot from probing common names, not a zone transfer: records under other names are not here.

JSON: /dns-discovery/api?dnssec=on&domain=cloudflare.com