← Check another domain

cloudflare.com

77/100

B

Scanned 2026-05-12

Cached result — add ?fresh=1 to force a new scan

Subcheck breakdown

Check	Status	Score
DMARC policy	reject	25/25
SPF record	warn	7/10
DKIM selector	missing	0/10
TLS certificate	ok	20/20
WHOIS integrity	ok	10/10
Subdomain takeover	ct_unavailable	10/15
MTA-STS / TLSRPT	missing	0/5
DNSSEC	signed	5/5

Recommendations

Simplify SPF includes on cloudflare.com — more than 10 DNS lookups causes SPF PermError
Publish a DKIM key at default._domainkey.cloudflare.com (v=DKIM1; k=rsa; p=…)
Publish MTA-STS: add _mta-sts.cloudflare.com TXT and host a policy at https://mta-sts.cloudflare.com/.well-known/mta-sts.txt

Details

Area	Detail
DMARC	v=DMARC1; p=reject; pct=100; rua=mailto:a1c47f179bc04efd8ee4dcd4d85dfc65@dmarc-reports.cloudflare.net,mailto:rua@cloudflare.com
SPF	v=spf1 ip4:199.15.212.0/22 ip4:173.245.48.0/20 include:_spf.google.com include:spf1.mcsv.net include:spf.mandrillapp.com include:mail.zendesk.com include:stspg-customer.com include:_spf.salesforce.com
DKIM selectors	—
TLS certificate	Ok (88 days remaining) — CN=WE1,O=Google Trust Services,C=US
WHOIS registrar	Cloudflare, Inc.
WHOIS expires	—
Subdomains	0 found
DNSSEC	Signed