DNS records
CL
cloudflare.com DNS records
cloudflare.com
7 record types
What this means
The hostname resolves and is reachable at the DNS layer. If browsers can't reach it, the issue is downstream of DNS — TLS, HTTP routing, or a firewall block. Try /check/cloudflare.com next.
Records
A104.16.133.229104.16.132.229
AAAA2606:4700::6810:85e52606:4700::6810:84e5
CNAMEno records
MX5 mxa-canary.global.inbound.cf-emailsecurity.net5 mxb-canary.global.inbound.cf-emailsecurity.net10 mxa.global.inbound.cf-emailsecurity.net10 mxb.global.inbound.cf-emailsecurity.net
NSns5.cloudflare.comns6.cloudflare.comns7.cloudflare.comns3.cloudflare.comns4.cloudflare.com
TXTcisco-ci-domain-verification=27e926884619804ef987ae4aa1c4168f6b152ada84f4c8bfc74eb2bd2912ad72creatopy-domain-verification=97d2ca50-9b6f-4a21-9bdb-fbb630e4cec7docker-verification=c578e21c-34fb-4474-9b90-d55ee4cba10cdrift-domain-verification=f037808a26ae8b25bc13b1f1f2b4c3e0f78c03e67f24cefdd4ec520efa8e719ffacebook-domain-verification=h9mm6zopj6p2po54woa16m5bskm6oogoogle-site-verification=C7thfNeXVahkVhniiqTI1iSVnElKR_kBBtnEHkeGDlogoogle-site-verification=ZdlQZLBBAPkxeFTCM1rpiB_ibtGff_JF5KllNKwDR9Iliveramp-site-verification=EhH1MqgwbndTWl1AN64hOTKz7hc1s80yUpchLbgpfY0logmein-verification-code=b3433c86-3823-4808-8a7e-58042469f654miro-verification=bdd7dfa0a49adfb43ad6ddfaf797633246c07356onetrust-domain-verification=bd5cd08a1e9644799fdb98ed7d60c9cbstatus-page-domain-verification=r14frwljwbxsstripe-verification=5096d01ff2cf194285dd51cae18f24fa9c26dc928cebac3636d462b4c6925623stripe-verification=bf1a94e6b16ace2502a4a7fff574a25c8a45291054960c883c59be39d1788db9uber-domain-verification=58086039-150a-42a4-a4be-b4032921aa0fv=spf1 ip4:199.15.212.0/22 ip4:173.245.48.0/20 include:_spf.google.com include:spf1.mcsv.net include:spf.mandrillapp.com include:mail.zendesk.com include:stspg-customer.com include:_spf.salesforce.com -allMS=ms70274184ZOOM_verify_7LFBvOO9SIigypFG2xRlMA_neqmkgaq1lq9it5s8qmetrhbnu121wb_saml-domain-challenge.2dc00405-79cd-457b-b288-a119c6f0c7b7.71996d53-d178-4ba9-bef4-7f7e46edab74.cloudflare.com=1c8736fd-84b2-4197-985f-3fb2852f2457_wkjc0fot0d7qrvrdt78bxkj2e2o67d2apple-domain-verification=DNnWJoArJobFJKhJasv=894f6d1f9f83bcf44e4b1bc40bc1c4aaatlassian-domain-verification=WxxKyN9aLnjEsoOjUYI6T0bb5vcqmKzaIkC9Rx2QkNb751G3LL/cus8/ZDOgh8xBcanva-site-verification=oOyaVnHC-OiFoR1BPvetNA
SOA
nsname ns3.cloudflare.com
hostmaster dns.cloudflare.com
serial 2401983296 · refresh 10000s · retry 2400s · expire 604800s · minttl 300s
What to try next
Full HTTP probe
Run /check/cloudflare.com to see live status, response time, and 24h history.
TLS certificate
Inspect the live cert at /ssl/cloudflare.com.
Compare resolvers
Run dig +short A cloudflare.com @1.1.1.1 and @8.8.8.8 — if they disagree, propagation is still in flight.
Methodology
- Probe
- We resolve A, AAAA, CNAME, MX, NS, TXT, and SOA records in parallel via Node's built-in dns.promises against the system resolver. Every query has a 5-second timeout; non-existent record types are reported as no records rather than errors.
- Counts as DOWN
- All address-resolution attempts fail. The most informative form is NXDOMAIN (the authoritative server explicitly says "no such name"); other forms are server errors or timeouts.
- Counts as DEGRADED
- Reserved for partial responses — some record types resolved, others timed out. Usually a flaky upstream or rate-limited authoritative server.
- Detail
- We surface the records as the resolver returned them, plus operational warnings: missing AAAA (IPv4-only), missing MX (cannot receive mail at the apex), missing SPF in TXT (outbound mail likely flagged as unauthenticated). We do not enumerate zone files, attempt zone transfers (AXFR), or run DNSSEC validation.
- Cadence
- Every 5 minutes, in parallel across 4 monitoring regions (US East Virginia, US West Oregon, Europe London, Asia Singapore).
- Rate-limited targets
- If a host returns 429 or consistently drops connections from our IPs, we cap retries at 3 and report the last observed status — we do not flood the target to confirm the outage.
- Data source
- Direct probes from our monitoring infrastructure. We do not aggregate crowd reports, Twitter mentions, or DownDetector signals — every result on this page is a live network request.