DNS Report: haveibeenpwned.com

Generated: 2026-08-08T22:51:01-05:00

92/100

Diagnostics

StatusCheckPointsDetails
OKIPv4 (A)30/302 IPv4 address(es) detected.
OKIPv6 (AAAA)10/102 IPv6 address(es) detected.
OKName server redundancy20/202 NS record(s); 2 or more required.
OKSOA record10/10Authoritative zone record.
OKDNSSEC chain15/15DS and DNSKEY detected.
OKCAA policy5/5Certificate authority restriction.
OKDNS propagation10/10Agreement between public resolvers.
OKMX records20/202 MX record(s).
OKSPF25/25SPF policy published.
OKDMARC25/25DMARC policy published.
OKDKIM20/20A DKIM selector was verified.
ERRORMTA-STS0/5Mail transport policy.
ERRORTLS-RPT0/5TLS reporting policy.
OKValid TLS certificate55/5589 day(s) remaining.
OKCertificate lifetime10/10Full points require at least 30 days remaining.
WARNINGHTTP security headers23/356 of 9 evaluated headers detected.
ERRORPTR reverse DNS0/30PTR not detected.
OKIPv4 diversity35/35Two or more IPv4 addresses receive full points.
OKIPv6 connectivity35/35AAAA availability.
OKDNS resolution40/40At least one address family must resolve.
OKHTTP response40/40HTTP/2 200
OKHTTPS final URL20/20Final URL uses HTTPS.

DNS Records

TipoValues
A
104.16.124.33
104.16.123.33
AAAA
2606:4700::6810:7b21
2606:4700::6810:7c21
CNAME
MX
10 mxb.mailgun.org.
10 mxa.mailgun.org.
TXT
"keybase-site-verification=ImeAFts_XWPcJ4XKyCC-nGZekutZ-ks1WpqvlL6EcOM"
"ALIAS for haveibeenpwned.azurewebsites.net"
"v=spf1 include:mailgun.org include:sendgrid.net include:mail.zendesk.com -all"
"google-site-verification=aby67ZMcCdhQErk_d7cWepRI0wyUU5fknvGAqX8goS4"
NS
rob.ns.cloudflare.com.
leah.ns.cloudflare.com.
SOA
leah.ns.cloudflare.com. dns.cloudflare.com. 2411693312 10000 2400 604800 1800
CAA
0 iodef "mailto:domains@troyhunt.com"
0 issue "pki.goog; cansignhttpexchanges=yes"
0 issue "digicert.com; cansignhttpexchanges=yes"
0 issue "ssl.com"
0 issue "letsencrypt.org"
0 issuewild "ssl.com"
0 issuewild "letsencrypt.org"
0 issue ";"
0 issue "comodoca.com"
0 issuewild "digicert.com; cansignhttpexchanges=yes"
0 issuewild "comodoca.com"
0 issuewild "pki.goog; cansignhttpexchanges=yes"
DS
2371 13 2 B35B3DA0D2CC34373548FCF22E88FE447CE564750958996F05738247 BF91D7AA
DNSKEY
257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+ KkxLbxILfDLUT0rAK9iUzy1L53eKGQ==
256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8 KqXXFJkqmVfRvMGPmM1x8fGAa2XhSA==
RRSIG
NSEC
\000.haveibeenpwned.com. A NS SOA PTR HINFO MX TXT AAAA LOC SRV NAPTR CERT SSHFP RRSIG NSEC DNSKEY TLSA SMIMEA HIP CDS CDNSKEY OPENPGPKEY SVCB HTTPS URI CAA
NSEC3
SRV
NAPTR
TLSA
SSHFP