DNS Report: trezor.io

Generated: 2026-08-09T02:52:43-05:00

92/100

Diagnostics

StatusCheckPointsDetails
OKIPv4 (A)30/302 IPv4 address(es) detected.
OKIPv6 (AAAA)10/102 IPv6 address(es) detected.
OKName server redundancy20/202 NS record(s); 2 or more required.
OKSOA record10/10Authoritative zone record.
OKDNSSEC chain15/15DS and DNSKEY detected.
OKCAA policy5/5Certificate authority restriction.
OKDNS propagation10/10Agreement between public resolvers.
OKMX records20/205 MX record(s).
OKSPF25/25SPF policy published.
OKDMARC25/25DMARC policy published.
OKDKIM20/20A DKIM selector was verified.
ERRORMTA-STS0/5Mail transport policy.
ERRORTLS-RPT0/5TLS reporting policy.
OKValid TLS certificate55/5551 day(s) remaining.
OKCertificate lifetime10/10Full points require at least 30 days remaining.
WARNINGHTTP security headers23/356 of 9 evaluated headers detected.
ERRORPTR reverse DNS0/30PTR not detected.
OKIPv4 diversity35/35Two or more IPv4 addresses receive full points.
OKIPv6 connectivity35/35AAAA availability.
OKDNS resolution40/40At least one address family must resolve.
OKHTTP response40/40HTTP/2 200
OKHTTPS final URL20/20Final URL uses HTTPS.

DNS Records

TipoValues
A
172.66.137.111
172.66.134.245
AAAA
2606:4700:10::ac42:896f
2606:4700:10::ac42:86f5
CNAME
MX
1 aspmx.l.google.com.
10 aspmx3.googlemail.com.
5 alt1.aspmx.l.google.com.
10 aspmx2.googlemail.com.
5 alt2.aspmx.l.google.com.
TXT
"sendinblue-site-verification=4794744"
"brevo-code:1af3e8bb9f0b4211d6e27bb86d4e73c0"
"proxy-ssl.webflow.com"
"Sendinblue-code:34d700f1b575b8a982e48df7fdaae9a8"
"google-site-verification=Fb8TEfSkdtdBs6GDgeJYPyKQRGJAvS9smdhLR9GHQTc"
"v=spf1 include:_spf.google.com include:spf.sendinblue.com include:amazonses.com include:mail.zendesk.com ~all"
"facebook-domain-verification=jbzhsmqwdxjzdp1xcu5aq6msw9hx1d"
NS
lucy.ns.cloudflare.com.
jeff.ns.cloudflare.com.
SOA
jeff.ns.cloudflare.com. dns.cloudflare.com. 2411237880 10000 2400 604800 1800
CAA
0 issuewild "digicert.com; cansignhttpexchanges=yes"
0 issuewild "comodoca.com"
0 issue "ssl.com"
0 issue "pki.goog; cansignhttpexchanges=yes"
0 issuewild "ssl.com"
0 issue "letsencrypt.org"
0 issue "amazon.com"
0 iodef "mailto:it+security@satoshilabs.com"
0 issuewild "amazon.com"
0 issue "comodoca.com"
0 issuewild "letsencrypt.org"
0 issue "digicert.com; cansignhttpexchanges=yes"
0 issuewild "pki.goog; cansignhttpexchanges=yes"
DS
2371 13 2 0342695D3B8C5B526103DB06FB4251BF1D1F97969D0383C7EBE874B2 4AA75E1D
DNSKEY
257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+ KkxLbxILfDLUT0rAK9iUzy1L53eKGQ==
256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8 KqXXFJkqmVfRvMGPmM1x8fGAa2XhSA==
RRSIG
NS 13 2 86400 20260810085233 20260808065233 34505 trezor.io. +Qr9KuZxQ1A0bQVt+aw3HUZkkivv8+LVHqYU7eliYlHum1hwlBxlLKSz Lv4mUEkVcwHPhzWstAru3c3GVRTXNQ==
TXT 13 2 300 20260810085233 20260808065233 34505 trezor.io. OzTw244Kyygk8dm6NERzakm/0Uiz7DwNVdSWKx7Ih6cDV3gCVSrAtuh+ rfSP13x7lFiEAiIQiUdes0DvJqa7zg==
AAAA 13 2 300 20260810085233 20260808065233 34505 trezor.io. 5MmDlezBuodTvLE4Tvkdk6/U28RyPDRV2AK+74qltBFaxV6CLTFrZSOb MYAF+eU8pD8Z5LE45d6QkXUD1/85Tw==
DS 8 2 3600 20260822160612 20260801150612 46863 io. NYR39lN92VjywXQOvmI1aQYhGlfq5lYUbB646J+LRtg64VjOBzbSvoY6 iDzpKpT0VF3vPLAYJ1ZFv2Vt3p8ZQml/FjvxiUWiezoePiHFOyMXBn/x UQ2DAzPOaMonn/GnDKcDK2JawUMmLKVfip9q4aNajbPDA+6YQMlUdShq wQY=
CAA 13 2 300 20260810085233 20260808065233 34505 trezor.io. ZdigNRrR7EICBKfOWGS1VLE7/DI19Eo/CWIyiPPaw+wJ7Xw3/wfbO0C3 5IaPKe7ePaxEwFNUmdQWtm8QF+pKaQ==
NSEC
\000.trezor.io. A NS SOA PTR HINFO MX TXT AAAA LOC SRV NAPTR CERT SSHFP RRSIG NSEC DNSKEY TLSA SMIMEA HIP CDS CDNSKEY OPENPGPKEY SVCB HTTPS URI CAA
NSEC3
SRV
NAPTR
TLSA
SSHFP