DNS Report: occrp.org

Generated: 2026-08-09T14:00:39-05:00

77/100

Diagnostics

StatusCheckPointsDetails
OKIPv4 (A)30/302 IPv4 address(es) detected.
OKIPv6 (AAAA)10/102 IPv6 address(es) detected.
OKName server redundancy20/202 NS record(s); 2 or more required.
OKSOA record10/10Authoritative zone record.
ERRORDNSSEC chain0/15Both DS and DNSKEY are required.
OKCAA policy5/5Certificate authority restriction.
OKDNS propagation10/10Agreement between public resolvers.
OKMX records20/208 MX record(s).
OKSPF25/25SPF policy published.
OKDMARC25/25DMARC policy published.
OKDKIM20/20A DKIM selector was verified.
ERRORMTA-STS0/5Mail transport policy.
ERRORTLS-RPT0/5TLS reporting policy.
OKValid TLS certificate55/5579 day(s) remaining.
OKCertificate lifetime10/10Full points require at least 30 days remaining.
WARNINGHTTP security headers12/353 of 9 evaluated headers detected.
ERRORPTR reverse DNS0/30PTR not detected.
OKIPv4 diversity35/35Two or more IPv4 addresses receive full points.
OKIPv6 connectivity35/35AAAA availability.
OKDNS resolution40/40At least one address family must resolve.
ERRORHTTP response0/40HTTP/2 403
OKHTTPS final URL20/20Final URL uses HTTPS.

DNS Records

TipoValues
A
104.20.24.254
172.66.153.69
AAAA
2606:4700:10::ac42:9945
2606:4700:10::6814:18fe
CNAME
MX
20 alt2.aspmx.l.google.com.
30 aspmx3.googlemail.com.
30 aspmx2.googlemail.com.
10 aspmx.l.google.com.
20 alt1.aspmx.l.google.com.
30 aspmx5.googlemail.com.
30 aspmx4.googlemail.com.
80 _dc-mx.5bca2efb9b90.occrp.org.
TXT
"asv=bcb7ae2b256081ccb35ede63ce54b67c"
"anthropic-domain-verification-k8f2wy=tVBH8sreXOxFGhkRWjNp2PqYr"
"MS=ms32682752"
"google-site-verification=kEGLJHfqBiG_J3Gn_qmIZjUIzyuc4d-gfY2LqUPA0iM"
"google-site-verification=nH3qJa4_OaXIxRtbE18A_P9zLNX6Uyx_-uUmEQPXLH8"
"atlassian-domain-verification=41jArbO1DdanJ6GhzFPkO13WmTiJ9XlysSLCIrrSHRQEo9PthuuB2JmN9JVq8Csj 3m"
"globalsign-domain-verification=rGNEA2NEUzDw_KldVRJOJvgsKzh7UwhYdpzgoBpJiL"
"apple-domain-verification=bhHZRHdCk4qvHpMG"
"zapier-domain-verification-challenge=bb083283-93df-407f-90e6-ed6b19d5ba88"
"v=spf1 include:_spf.google.com include:_spf.salesforce.com include:servers.mcsv.net -all"
"google-site-verification=ybqj6Ke8H1eDFi_Gm05pTmslsp0I0j_2mWIRO95eMhc"
"google-site-verification=L0xZkBj9MvBBOk9C2GX-mzNOUI2yhu3DGjU-FntJ79U"
"google-site-verification=M3z_ySfE8WMr4L2lNYQnnukQtcI_OCTQ-yDBI4pACqg"
"slack-domain-verification=MJ35K1JoFDQFVmIOODpwwbpNbBP6IqWg05qH0whc"
"facebook-domain-verification=0tp6l06kx50qxahngqgoc7pafes533"
NS
yichun.ns.cloudflare.com.
ophelia.ns.cloudflare.com.
SOA
ophelia.ns.cloudflare.com. dns.cloudflare.com. 2411751305 10000 2400 604800 1800
CAA
0 issuewild "pki.goog; cansignhttpexchanges=yes"
0 issuewild "comodoca.com"
0 issuewild "digicert.com; cansignhttpexchanges=yes"
0 issuewild "ssl.com"
0 issue "sectigo.com"
0 issuewild "sectigo.com"
0 issue "ssl.com"
0 issue "pki.goog; cansignhttpexchanges=yes"
0 issuewild "letsencrypt.org"
0 issue "letsencrypt.org"
0 issue "comodoca.com"
0 issue "digicert.com; cansignhttpexchanges=yes"
DS
DNSKEY
RRSIG
NSEC
NSEC3
SRV
NAPTR
TLSA
SSHFP