DNS Report: ewg.org

Generated: 2026-08-08T23:59:12-05:00

88/100

Diagnostics

StatusCheckPointsDetails
OKIPv4 (A)30/302 IPv4 address(es) detected.
OKIPv6 (AAAA)10/102 IPv6 address(es) detected.
OKName server redundancy20/202 NS record(s); 2 or more required.
OKSOA record10/10Authoritative zone record.
OKDNSSEC chain15/15DS and DNSKEY detected.
OKCAA policy5/5Certificate authority restriction.
OKDNS propagation10/10Agreement between public resolvers.
OKMX records20/205 MX record(s).
OKSPF25/25SPF policy published.
OKDMARC25/25DMARC policy published.
OKDKIM20/20A DKIM selector was verified.
OKMTA-STS5/5Mail transport policy.
OKTLS-RPT5/5TLS reporting policy.
OKValid TLS certificate55/5566 day(s) remaining.
OKCertificate lifetime10/10Full points require at least 30 days remaining.
WARNINGHTTP security headers31/358 of 9 evaluated headers detected.
ERRORPTR reverse DNS0/30PTR not detected.
OKIPv4 diversity35/35Two or more IPv4 addresses receive full points.
OKIPv6 connectivity35/35AAAA availability.
OKDNS resolution40/40At least one address family must resolve.
ERRORHTTP response0/40HTTP/2 403
OKHTTPS final URL20/20Final URL uses HTTPS.

DNS Records

TipoValues
A
104.18.19.138
104.18.18.138
AAAA
2606:4700::6812:138a
2606:4700::6812:128a
CNAME
MX
5 alt1.aspmx.l.google.com.
10 alt3.aspmx.l.google.com.
1 aspmx.l.google.com.
5 alt2.aspmx.l.google.com.
10 alt4.aspmx.l.google.com.
TXT
"zapier-domain-verification-challenge=bb42701a-b832-4bd9-9c55-1adffd4e1fb4"
"google-site-verification=f9TCoVdzMb8veSn8Q4CvVAjq-727C0WXk90TbfjnRBg"
"apple-domain-verification=mgNxHHKxq2uYZvei"
"ZOOM_verify_XOjunHyR9pB9zXd19wuvgI"
"facebook-domain-verification=ro3lmnsugizguxe5t4hbwcmhoveqbd"
"atlassian-domain-verification=lYpcub13BOMnb7IMBSHSGCU9wViziPngSkhXdEnlEcP3Z64DLAj9PYZ0kz/IyDay"
"openai-domain-verification=dv-rYuDv5nP6gwhglMvZlOngK5H"
"google-site-verification=a9b_BKoG7liHa4tHze18k7765g2FhuLlqPkKN7yBFr8"
"apple-domain-verification=kmc6_L_I2SIMiYd8SVf-i_28kXpECulspkQZupNGHSQ"
"MS=ms16513810"
"miro-verification=adde3e644a81d72cddb06fd13a251e1fbba8e399"
"anthropic-domain-verification-3nd2h0=YsUY0vzeSUTR5Sb4c8Yyi00g8"
"_kzg95k5prhkk5yoz5jmkia0kb3ttkv1"
"intacct-esk=14C0776BF02418DCE0639A068D0A4A95"
"google-site-verification=yRexUw0wGdOIhzjGjJzXKsmKN-XoBvMsmWYl2Uc0Ew4"
"v=spf1 include:_spf.google.com include:_spfprod.ngpvan.com include:spf.congressplus.com include:servers.mcsv.net include:amazonses.com include:mail.zendesk.com include:_spf.intacct.com ~all"
"cloudflare_dashboard_sso=4b3fdaea42efaf6b1df63b35d0c9b994"
NS
micah.ns.cloudflare.com.
jamie.ns.cloudflare.com.
SOA
jamie.ns.cloudflare.com. dns.cloudflare.com. 2411597270 10000 2400 604800 1800
CAA
0 issuewild "digicert.com; cansignhttpexchanges=yes"
0 issuewild "pki.goog; cansignhttpexchanges=yes"
0 issuewild "comodoca.com"
0 issuewild "amazonaws.com"
0 issue "comodoca.com"
0 issuewild "awstrust.com"
0 issue "pki.goog; cansignhttpexchanges=yes"
0 issuewild "amazon.com"
0 issue "ssl.com"
0 issue "letsencrypt.org"
0 issuewild "amazontrust.com"
0 issuewild "ssl.com"
0 issuewild "letsencrypt.org"
0 issue "digicert.com; cansignhttpexchanges=yes"
0 issuewild ";"
DS
2371 13 2 324E5AA2DA5ED7143711D92609B1D4B1C8C897596814093BF44903A0 EC3A8073
DNSKEY
257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+ KkxLbxILfDLUT0rAK9iUzy1L53eKGQ==
256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8 KqXXFJkqmVfRvMGPmM1x8fGAa2XhSA==
RRSIG
NSEC
\000.ewg.org. A NS SOA PTR HINFO MX TXT AAAA LOC SRV NAPTR CERT SSHFP RRSIG NSEC DNSKEY TLSA SMIMEA HIP CDS CDNSKEY OPENPGPKEY SVCB HTTPS URI CAA
NSEC3
SRV
NAPTR
TLSA
SSHFP