DNS Report: commonwealthfund.org

Generated: 2026-08-09T12:44:56-05:00

82/100

Diagnostics

StatusCheckPointsDetails
OKIPv4 (A)30/302 IPv4 address(es) detected.
OKIPv6 (AAAA)10/102 IPv6 address(es) detected.
OKName server redundancy20/202 NS record(s); 2 or more required.
OKSOA record10/10Authoritative zone record.
ERRORDNSSEC chain0/15Both DS and DNSKEY are required.
OKCAA policy5/5Certificate authority restriction.
OKDNS propagation10/10Agreement between public resolvers.
OKMX records20/201 MX record(s).
OKSPF25/25SPF policy published.
OKDMARC25/25DMARC policy published.
OKDKIM20/20A DKIM selector was verified.
ERRORMTA-STS0/5Mail transport policy.
ERRORTLS-RPT0/5TLS reporting policy.
OKValid TLS certificate55/5570 day(s) remaining.
OKCertificate lifetime10/10Full points require at least 30 days remaining.
WARNINGHTTP security headers31/358 of 9 evaluated headers detected.
ERRORPTR reverse DNS0/30PTR not detected.
OKIPv4 diversity35/35Two or more IPv4 addresses receive full points.
OKIPv6 connectivity35/35AAAA availability.
OKDNS resolution40/40At least one address family must resolve.
ERRORHTTP response0/40HTTP/2 403
OKHTTPS final URL20/20Final URL uses HTTPS.

DNS Records

TipoValues
A
104.20.5.249
104.20.4.249
AAAA
2606:4700:10::6814:5f9
2606:4700:10::6814:4f9
CNAME
MX
1 commonwealthfund-org.mail.protection.outlook.com.
TXT
"google-site-verification=hMjPC0qe50eEu1uY0dj-GPlFtM8zsz95CnX0MgzKa1g"
"facebook-domain-verification=pgnxfoazwg024bdogi9jexulvmfamm"
"google-site-verification=9DWkyU80oOOyK5XY-_G8_Y5Mrx0WaFMSpZ8yMgdK3wY"
"v=spf1 a:137.135.119.183 a:137.135.120.172 include:sendgrid.net include:spf.protection.outlook.com include:cust-spf.exacttarget.com -all"
"apple-domain-verification=Z6oLCbH2lDPG3M3p"
"bgm565eg86mugma7h74oansai"
"google-site-verification=-FUysronhwFrVKzy2MrYNfSsh0b8wpiVXIK_RD-CA8"
NS
arya.ns.cloudflare.com.
kurt.ns.cloudflare.com.
SOA
arya.ns.cloudflare.com. dns.cloudflare.com. 2410241821 10000 2400 604800 1800
CAA
0 issuewild "pki.goog; cansignhttpexchanges=yes"
0 issue "amazon.com"
0 issue "ssl.com"
0 issue "digicert.com; cansignhttpexchanges=yes"
0 issue "letsencrypt.org"
0 issue "pki.goog; cansignhttpexchanges=yes"
0 issuewild "ssl.com"
0 issuewild "comodoca.com"
0 issue "comodoca.com"
0 issuewild "letsencrypt.org"
0 issuewild "digicert.com; cansignhttpexchanges=yes"
DS
DNSKEY
RRSIG
NSEC
NSEC3
SRV
NAPTR
TLSA
SSHFP