Authoritative DNS Record Lookup
Query global root and authoritative name servers for A, AAAA, MX, TXT (SPF/DKIM/DMARC), NS, CNAME, and SOA zone entries in real time. Inspect TTL caching timers and authoritative delegation with zero third-party latency.
cloudflare.com
RESOLVED OK Query Filter: ALLResolved via native socket resolver in 0.4ms • Total authoritative zone entries: 43
| Type | Host / Subdomain | TTL | Resolved Target / Value | Actions |
|---|---|---|---|---|
| A | cloudflare.com | 82s | 104.16.133.229 | |
| A | cloudflare.com | 82s | 104.16.132.229 | |
| AAAA | cloudflare.com | 300s | 2606:4700::6810:84e5 | |
| AAAA | cloudflare.com | 300s | 2606:4700::6810:85e5 | |
| MX | cloudflare.com | 1618s | mxa-canary.global.inbound.cf-emailsecurity.net (Priority: 5) | |
| MX | cloudflare.com | 1618s | mxb-canary.global.inbound.cf-emailsecurity.net (Priority: 5) | |
| MX | cloudflare.com | 1618s | mxa.global.inbound.cf-emailsecurity.net (Priority: 10) | |
| MX | cloudflare.com | 1618s | mxb.global.inbound.cf-emailsecurity.net (Priority: 10) | |
| TXT | cloudflare.com | 300s | _wkjc0fot0d7qrvrdt78bxkj2e2o67d2 | |
| TXT | cloudflare.com | 300s | apple-domain-verification=DNnWJoArJobFJKhJ | |
| TXT | cloudflare.com | 300s | _neqmkgaq1lq9it5s8qmetrhbnu121wb | |
| TXT | cloudflare.com | 300s | asv=894f6d1f9f83bcf44e4b1bc40bc1c4aa | |
| TXT | cloudflare.com | 300s | uber-domain-verification=58086039-150a-42a4-a4be-b4032921aa0f | |
| TXT | cloudflare.com | 300s | logmein-verification-code=b3433c86-3823-4808-8a7e-58042469f654 | |
| TXT | cloudflare.com | 300s | miro-verification=bdd7dfa0a49adfb43ad6ddfaf797633246c07356 | |
| TXT | cloudflare.com | 300s | stripe-verification=bf1a94e6b16ace2502a4a7fff574a25c8a45291054960c883c59be39d1788db9 | |
| TXT | cloudflare.com | 300s | drift-domain-verification=f037808a26ae8b25bc13b1f1f2b4c3e0f78c03e67f24cefdd4ec520efa8e719f | |
| TXT | cloudflare.com | 300s | onetrust-domain-verification=bd5cd08a1e9644799fdb98ed7d60c9cb | |
| TXT | cloudflare.com | 300s | _saml-domain-challenge.2dc00405-79cd-457b-b288-a119c6f0c7b7.71996d53-d178-4ba9-bef4-7f7e46edab74.cloudflare.com=1c8736fd-84b2-4197-985f-3fb2852f2457 | |
| TXT | cloudflare.com | 300s | creatopy-domain-verification=97d2ca50-9b6f-4a21-9bdb-fbb630e4cec7 | |
| TXT | cloudflare.com | 300s | status-page-domain-verification=r14frwljwbxs | |
| TXT | cloudflare.com | 300s | v=spf1 ip4:199.15.212.0/22 ip4:173.245.48.0/20 include:_spf.google.com include:spf1.mcsv.net include:spf.mandrillapp.com include:mail.zendesk.com include:stspg-customer.com include:_spf.salesforce.com -all SPF Policy | |
| TXT | cloudflare.com | 300s | atlassian-domain-verification=WxxKyN9aLnjEsoOjUYI6T0bb5vcqmKzaIkC9Rx2QkNb751G3LL/cus8/ZDOgh8xB | |
| TXT | cloudflare.com | 300s | jamf-site-verification=c-eUvHBbhgFxMulFSY-QJQ | |
| TXT | cloudflare.com | 300s | facebook-domain-verification=h9mm6zopj6p2po54woa16m5bskm6oo | |
| TXT | cloudflare.com | 300s | cisco-ci-domain-verification=27e926884619804ef987ae4aa1c4168f6b152ada84f4c8bfc74eb2bd2912ad72 | |
| TXT | cloudflare.com | 300s | docker-verification=c578e21c-34fb-4474-9b90-d55ee4cba10c | |
| TXT | cloudflare.com | 300s | DirectFedAuthUrl=https://cloudflare-security.cloudflareaccess.com/cdn-cgi/access/sso/saml/ebec933773c69c93420d13e6776adb8c4a190f6281f9d132bcebd7dcb0967bdd | |
| TXT | cloudflare.com | 300s | ZOOM_verify_7LFBvOO9SIigypFG2xRlMA | |
| TXT | cloudflare.com | 300s | google-site-verification=C7thfNeXVahkVhniiqTI1iSVnElKR_kBBtnEHkeGDlo | |
| TXT | cloudflare.com | 300s | canva-site-verification=oOyaVnHC-OiFoR1BPvetNA | |
| TXT | cloudflare.com | 300s | MS=ms70274184 | |
| TXT | cloudflare.com | 300s | DirectFedAuthUrl=https://cloudflare-security.cloudflareaccess.com/cdn-cgi/access/sso/saml/dba6756ad312fc13c45f705cf7f5e87f4d658be016c41f950329aa4085b3abc1 | |
| TXT | cloudflare.com | 300s | liveramp-site-verification=EhH1MqgwbndTWl1AN64hOTKz7hc1s80yUpchLbgpfY0 | |
| TXT | cloudflare.com | 300s | stripe-verification=5096d01ff2cf194285dd51cae18f24fa9c26dc928cebac3636d462b4c6925623 | |
| TXT | cloudflare.com | 300s | google-site-verification=ZdlQZLBBAPkxeFTCM1rpiB_ibtGff_JF5KllNKwDR9I | |
| TXT | cloudflare.com | 300s | databank-domain-verification-hkehd2=fzgu4kmbZwMoW99zENgO4u8NL | |
| NS | cloudflare.com | 86400s | ns3.cloudflare.com | |
| NS | cloudflare.com | 86400s | ns4.cloudflare.com | |
| NS | cloudflare.com | 86400s | ns5.cloudflare.com | |
| NS | cloudflare.com | 86400s | ns6.cloudflare.com | |
| NS | cloudflare.com | 86400s | ns7.cloudflare.com | |
| SOA | cloudflare.com | 300s | MNAME: ns3.cloudflare.com | RNAME: dns.cloudflare.com | Serial: 2418847198 |
RFC 1035 Standard BIND Zone File Format
Exportable zone file format ready for BIND, Named, Unbound, PowerDNS or Cloudflare import
; Authoritative BIND Zone Export for cloudflare.com ; Generated on 2026-11-03 07:59:18 UTC by Tech100 DNS Suite $ORIGIN cloudflare.com. $TTL 3600 cloudflare.com. 82 IN A 104.16.133.229 cloudflare.com. 82 IN A 104.16.132.229 cloudflare.com. 300 IN AAAA 2606:4700::6810:84e5 cloudflare.com. 300 IN AAAA 2606:4700::6810:85e5 cloudflare.com. 1618 IN MX mxa-canary.global.inbound.cf-emailsecurity.net (Priority: 5) cloudflare.com. 1618 IN MX mxb-canary.global.inbound.cf-emailsecurity.net (Priority: 5) cloudflare.com. 1618 IN MX mxa.global.inbound.cf-emailsecurity.net (Priority: 10) cloudflare.com. 1618 IN MX mxb.global.inbound.cf-emailsecurity.net (Priority: 10) cloudflare.com. 300 IN TXT _wkjc0fot0d7qrvrdt78bxkj2e2o67d2 cloudflare.com. 300 IN TXT apple-domain-verification=DNnWJoArJobFJKhJ cloudflare.com. 300 IN TXT _neqmkgaq1lq9it5s8qmetrhbnu121wb cloudflare.com. 300 IN TXT asv=894f6d1f9f83bcf44e4b1bc40bc1c4aa cloudflare.com. 300 IN TXT uber-domain-verification=58086039-150a-42a4-a4be-b4032921aa0f cloudflare.com. 300 IN TXT logmein-verification-code=b3433c86-3823-4808-8a7e-58042469f654 cloudflare.com. 300 IN TXT miro-verification=bdd7dfa0a49adfb43ad6ddfaf797633246c07356 cloudflare.com. 300 IN TXT stripe-verification=bf1a94e6b16ace2502a4a7fff574a25c8a45291054960c883c59be39d1788db9 cloudflare.com. 300 IN TXT drift-domain-verification=f037808a26ae8b25bc13b1f1f2b4c3e0f78c03e67f24cefdd4ec520efa8e719f cloudflare.com. 300 IN TXT onetrust-domain-verification=bd5cd08a1e9644799fdb98ed7d60c9cb cloudflare.com. 300 IN TXT _saml-domain-challenge.2dc00405-79cd-457b-b288-a119c6f0c7b7.71996d53-d178-4ba9-bef4-7f7e46edab74.cloudflare.com=1c8736fd-84b2-4197-985f-3fb2852f2457 cloudflare.com. 300 IN TXT creatopy-domain-verification=97d2ca50-9b6f-4a21-9bdb-fbb630e4cec7 cloudflare.com. 300 IN TXT status-page-domain-verification=r14frwljwbxs cloudflare.com. 300 IN TXT v=spf1 ip4:199.15.212.0/22 ip4:173.245.48.0/20 include:_spf.google.com include:spf1.mcsv.net include:spf.mandrillapp.com include:mail.zendesk.com include:stspg-customer.com include:_spf.salesforce.com -all cloudflare.com. 300 IN TXT atlassian-domain-verification=WxxKyN9aLnjEsoOjUYI6T0bb5vcqmKzaIkC9Rx2QkNb751G3LL/cus8/ZDOgh8xB cloudflare.com. 300 IN TXT jamf-site-verification=c-eUvHBbhgFxMulFSY-QJQ cloudflare.com. 300 IN TXT facebook-domain-verification=h9mm6zopj6p2po54woa16m5bskm6oo cloudflare.com. 300 IN TXT cisco-ci-domain-verification=27e926884619804ef987ae4aa1c4168f6b152ada84f4c8bfc74eb2bd2912ad72 cloudflare.com. 300 IN TXT docker-verification=c578e21c-34fb-4474-9b90-d55ee4cba10c cloudflare.com. 300 IN TXT DirectFedAuthUrl=https://cloudflare-security.cloudflareaccess.com/cdn-cgi/access/sso/saml/ebec933773c69c93420d13e6776adb8c4a190f6281f9d132bcebd7dcb0967bdd cloudflare.com. 300 IN TXT ZOOM_verify_7LFBvOO9SIigypFG2xRlMA cloudflare.com. 300 IN TXT google-site-verification=C7thfNeXVahkVhniiqTI1iSVnElKR_kBBtnEHkeGDlo cloudflare.com. 300 IN TXT canva-site-verification=oOyaVnHC-OiFoR1BPvetNA cloudflare.com. 300 IN TXT MS=ms70274184 cloudflare.com. 300 IN TXT DirectFedAuthUrl=https://cloudflare-security.cloudflareaccess.com/cdn-cgi/access/sso/saml/dba6756ad312fc13c45f705cf7f5e87f4d658be016c41f950329aa4085b3abc1 cloudflare.com. 300 IN TXT liveramp-site-verification=EhH1MqgwbndTWl1AN64hOTKz7hc1s80yUpchLbgpfY0 cloudflare.com. 300 IN TXT stripe-verification=5096d01ff2cf194285dd51cae18f24fa9c26dc928cebac3636d462b4c6925623 cloudflare.com. 300 IN TXT google-site-verification=ZdlQZLBBAPkxeFTCM1rpiB_ibtGff_JF5KllNKwDR9I cloudflare.com. 300 IN TXT databank-domain-verification-hkehd2=fzgu4kmbZwMoW99zENgO4u8NL cloudflare.com. 86400 IN NS ns3.cloudflare.com cloudflare.com. 86400 IN NS ns4.cloudflare.com cloudflare.com. 86400 IN NS ns5.cloudflare.com cloudflare.com. 86400 IN NS ns6.cloudflare.com cloudflare.com. 86400 IN NS ns7.cloudflare.com cloudflare.com. 300 IN SOA MNAME: ns3.cloudflare.com | RNAME: dns.cloudflare.com | Serial: 2418847198
How Global DNS Resolution, Root Servers & Record Types Work
The Domain Name System (DNS) is the distributed, hierarchical database translating human-readable hostnames into binary IP addresses. Learn how recursive resolvers, authoritative nameservers, Anycast routing, and anti-spoofing security policies function.
Comprehensive DNS Resource Record (RR) Types Reference
Every internet protocol relies on specific DNS resource record types defined by the Internet Engineering Task Force (IETF).
Maps a fully qualified domain name to a 32-bit IPv4 address (e.g., 104.21.48.21). The foundational record of web browsing.
Maps a domain name to a 128-bit IPv6 address (e.g., 2606:4700:3036::6815:3015), enabling next-generation internet routing.
Canonical Name alias pointing one subdomain to another hostname. Cannot coexist with other records at zone apex.
Mail Exchange record routing incoming SMTP email to receiving mail servers, ranked by numerical priority (lower priority = primary).
Holds arbitrary text strings for SPF email security policies, DKIM cryptographic signatures, DMARC compliance, and domain ownership tokens.
Authoritative Name Server delegation indicating which nameservers hold the zone file and handle queries for the domain.
Start of Authority specifying primary master nameserver, admin email, zone serial number, refresh/retry timers, and negative caching TTL.
Certification Authority Authorization specifying which CAs (Let's Encrypt, DigiCert) are legally permitted to issue SSL certificates.
Pointer record for Reverse DNS lookups (in-addr.arpa or ip6.arpa), mapping an IP address back to a hostname. Essential for SMTP deliverability.
The 4 Stages of Iterative DNS Resolution
When a client browser queries a domain name, the request navigates 4 distinct server tiers before retrieving the authoritative IP address:
Recursive Resolver
Operated by your ISP, Cloudflare (1.1.1.1), or Google (8.8.8.8). Checks local cache before initiating iterative queries.
Root Nameservers (.)
13 global root server IP addresses (A through M root) operated by ICANN, NASA, VeriSign, and RIPE NCC directing to TLD servers.
TLD Nameservers
Top-Level Domain servers (.com, .net, .top, .org) that maintain the authoritative nameserver delegations for all registered domains.
Authoritative Server
The final nameserver hosting the actual zone file. Returns the A/AAAA record with its Time-to-Live (TTL) value.
Sender Policy Framework
Published in a TXT record (e.g. v=spf1 include:_spf.google.com ~all), SPF tells receiving mail servers which IP addresses are authorized to send email on behalf of your domain.
DomainKeys Identified Mail
Uses asymmetric public key cryptography published in a subdomain TXT record (selector._domainkey.domain) to cryptographically sign outbound emails and verify they were not tampered in transit.
DMARC Alignment
Published at _dmarc.domain, DMARC specifies how receiving mail systems should treat unaligned emails (p=none, p=quarantine, or p=reject).