{
  "domain": "cloudflare.com",
  "records": {
    "ns": [
      "ns3.cloudflare.com",
      "ns4.cloudflare.com",
      "ns5.cloudflare.com",
      "ns6.cloudflare.com",
      "ns7.cloudflare.com"
    ],
    "a": [
      "104.16.132.229",
      "104.16.133.229"
    ],
    "aaaa": [
      "2606:4700::6810:84e5",
      "2606:4700::6810:85e5"
    ],
    "mx": [
      {
        "pref": 5,
        "host": "mxa-canary.global.inbound.cf-emailsecurity.net"
      },
      {
        "pref": 5,
        "host": "mxb-canary.global.inbound.cf-emailsecurity.net"
      },
      {
        "pref": 10,
        "host": "mxa.global.inbound.cf-emailsecurity.net"
      },
      {
        "pref": 10,
        "host": "mxb.global.inbound.cf-emailsecurity.net"
      }
    ],
    "cname": null,
    "txt": [
      "_neqmkgaq1lq9it5s8qmetrhbnu121wb",
      "_saml-domain-challenge.2dc00405-79cd-457b-b288-a119c6f0c7b7.71996d53-d178-4ba9-bef4-7f7e46edab74.cloudflare.com=1c8736fd-84b2-4197-985f-3fb2852f2457",
      "_wkjc0fot0d7qrvrdt78bxkj2e2o67d2",
      "apple-domain-verification=dnnwjoarjobfjkhj",
      "asv=894f6d1f9f83bcf44e4b1bc40bc1c4aa",
      "atlassian-domain-verification=wxxkyn9alnjesoojuyi6t0bb5vcqmkzaikc9rx2qknb751g3ll/cus8/zdogh8xb",
      "canva-site-verification=ooyavnhc-oifor1bpvetna",
      "cisco-ci-domain-verification=27e926884619804ef987ae4aa1c4168f6b152ada84f4c8bfc74eb2bd2912ad72",
      "creatopy-domain-verification=97d2ca50-9b6f-4a21-9bdb-fbb630e4cec7",
      "databank-domain-verification-hkehd2=fzgu4kmbzwmow99zengo4u8nl",
      "directfedauthurl=https://cloudflare-security.cloudflareaccess.com/cdn-cgi/access/sso/saml/dba6756ad312fc13c45f705cf7f5e87f4d658be016c41f950329aa4085b3abc1",
      "directfedauthurl=https://cloudflare-security.cloudflareaccess.com/cdn-cgi/access/sso/saml/ebec933773c69c93420d13e6776adb8c4a190f6281f9d132bcebd7dcb0967bdd",
      "docker-verification=c578e21c-34fb-4474-9b90-d55ee4cba10c",
      "drift-domain-verification=f037808a26ae8b25bc13b1f1f2b4c3e0f78c03e67f24cefdd4ec520efa8e719f",
      "facebook-domain-verification=h9mm6zopj6p2po54woa16m5bskm6oo",
      "google-site-verification=c7thfnexvahkvhniiqti1isvnelkr_kbbtnehkegdlo",
      "google-site-verification=zdlqzlbbapkxeftcm1rpib_ibtgff_jf5kllnkwdr9i",
      "liveramp-site-verification=ehh1mqgwbndtwl1an64hotkz7hc1s80yupchlbgpfy0",
      "logmein-verification-code=b3433c86-3823-4808-8a7e-58042469f654",
      "miro-verification=bdd7dfa0a49adfb43ad6ddfaf797633246c07356",
      "ms=ms70274184",
      "onetrust-domain-verification=bd5cd08a1e9644799fdb98ed7d60c9cb",
      "status-page-domain-verification=r14frwljwbxs",
      "stripe-verification=5096d01ff2cf194285dd51cae18f24fa9c26dc928cebac3636d462b4c6925623",
      "stripe-verification=bf1a94e6b16ace2502a4a7fff574a25c8a45291054960c883c59be39d1788db9",
      "uber-domain-verification=58086039-150a-42a4-a4be-b4032921aa0f",
      "v=spf1 ip4:199.15.212.0/22 ip4:173.245.48.0/20 include:_spf.google.com include:spf1.mcsv.net include:spf.mandrillapp.com include:mail.zendesk.com include:stspg-customer.com include:_spf.salesforce.com -all",
      "zoom_verify_7lfbvoo9siigypfg2xrlma"
    ],
    "caa": [
      "\\# 14 00 05 69 73 73 75 65 73 73 6c 2e 63 6f 6d",
      "\\# 18 00 09 69 73 73 75 65 77 69 6c 64 73 73 6c 2e 63 6f 6d",
      "\\# 19 00 05 69 73 73 75 65 63 6f 6d 6f 64 6f 63 61 2e 63 6f 6d",
      "\\# 22 00 05 69 73 73 75 65 6c 65 74 73 65 6e 63 72 79 70 74 2e 6f 72 67",
      "\\# 23 00 09 69 73 73 75 65 77 69 6c 64 63 6f 6d 6f 64 6f 63 61 2e 63 6f 6d",
      "\\# 26 00 09 69 73 73 75 65 77 69 6c 64 6c 65 74 73 65 6e 63 72 79 70 74 2e 6f 72 67",
      "\\# 38 00 05 69 6f 64 65 66 6d 61 69 6c 74 6f 3a 74 6c 73 2d 61 62 75 73 65 40 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d",
      "\\# 41 00 05 69 73 73 75 65 70 6b 69 2e 67 6f 6f 67 3b 20 63 61 6e 73 69 67 6e 68 74 74 70 65 78 63 68 61 6e 67 65 73 3d 79 65 73",
      "\\# 45 00 05 69 73 73 75 65 64 69 67 69 63 65 72 74 2e 63 6f 6d 3b 20 63 61 6e 73 69 67 6e 68 74 74 70 65 78 63 68 61 6e 67 65 73 3d 79 65 73",
      "\\# 45 00 09 69 73 73 75 65 77 69 6c 64 70 6b 69 2e 67 6f 6f 67 3b 20 63 61 6e 73 69 67 6e 68 74 74 70 65 78 63 68 61 6e 67 65 73 3d 79 65 73",
      "\\# 49 00 09 69 73 73 75 65 77 69 6c 64 64 69 67 69 63 65 72 74 2e 63 6f 6d 3b 20 63 61 6e 73 69 67 6e 68 74 74 70 65 78 63 68 61 6e 67 65 73 3d 79 65 73"
    ],
    "soa": "ns3.cloudflare.com. dns.cloudflare.com. 2410308532 10000 2400 604800 300",
    "ds": [
      "2371 ecdsap256sha256 2 32996839a6d808afe3eb4a795a0e6a7a39a76fc52ff228b22b76f6d63826f2b9"
    ],
    "dnskey": [
      "256 3 ecdsap256sha256 ojmresz5e4gyzs/q6xdrvu1qmpyijcwzjaoau8xnezeqcykd5ar0ird8kqxxfjkqmvfrvmgpmm1x8fgaa2xhsa==",
      "257 3 ecdsap256sha256 mdsswuyr3dpw132moi8v9xeswe8jto0dxcjjnopkl+gqjxpvxckhaef+kkxlbxilfdlut0rak9iuzy1l53ekgq=="
    ],
    "has_dnssec": true
  },
  "ns_hosts": [
    {
      "host": "ns3.cloudflare.com",
      "ip": "162.159.0.33",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "162.159.0.0/24",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "ns3.cloudflare.com",
      "ip": "162.159.7.226",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "162.159.7.0/24",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "ns3.cloudflare.com",
      "ip": "2400:cb00:2049:1::a29f:21",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "2400:cb00:2049::/48",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "ns3.cloudflare.com",
      "ip": "2400:cb00:2049:1::a29f:7e2",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "2400:cb00:2049::/48",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "ns4.cloudflare.com",
      "ip": "162.159.1.33",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "162.159.1.0/24",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "ns4.cloudflare.com",
      "ip": "162.159.8.55",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "162.159.8.0/24",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "ns4.cloudflare.com",
      "ip": "2400:cb00:2049:1::a29f:121",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "2400:cb00:2049::/48",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "ns4.cloudflare.com",
      "ip": "2400:cb00:2049:1::a29f:837",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "2400:cb00:2049::/48",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "ns5.cloudflare.com",
      "ip": "162.159.2.9",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "162.159.2.0/24",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "ns5.cloudflare.com",
      "ip": "162.159.9.55",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "162.159.9.0/24",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "ns5.cloudflare.com",
      "ip": "2400:cb00:2049:1::a29f:209",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "2400:cb00:2049::/48",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "ns5.cloudflare.com",
      "ip": "2400:cb00:2049:1::a29f:937",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "2400:cb00:2049::/48",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "ns6.cloudflare.com",
      "ip": "162.159.3.11",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "162.159.3.0/24",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "ns6.cloudflare.com",
      "ip": "162.159.5.6",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "162.159.5.0/24",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "ns6.cloudflare.com",
      "ip": "2400:cb00:2049:1::a29f:30b",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "2400:cb00:2049::/48",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "ns6.cloudflare.com",
      "ip": "2400:cb00:2049:1::a29f:506",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "2400:cb00:2049::/48",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "ns7.cloudflare.com",
      "ip": "162.159.4.8",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "162.159.4.0/24",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "ns7.cloudflare.com",
      "ip": "162.159.6.6",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "162.159.6.0/24",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "ns7.cloudflare.com",
      "ip": "2400:cb00:2049:1::a29f:408",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "2400:cb00:2049::/48",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "ns7.cloudflare.com",
      "ip": "2400:cb00:2049:1::a29f:606",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "2400:cb00:2049::/48",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    }
  ],
  "web_hosts": [
    {
      "host": "cloudflare.com",
      "ip": "104.16.132.229",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "104.16.128.0/20",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "cloudflare.com",
      "ip": "104.16.133.229",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "104.16.128.0/20",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "cloudflare.com",
      "ip": "2606:4700::6810:84e5",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "2606:4700::/44",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "cloudflare.com",
      "ip": "2606:4700::6810:85e5",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "2606:4700::/44",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    }
  ],
  "mx_hosts": [
    {
      "host": "mxa-canary.global.inbound.cf-emailsecurity.net",
      "ip": "172.65.169.99",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "172.65.160.0/20",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "mxb-canary.global.inbound.cf-emailsecurity.net",
      "ip": "172.65.65.66",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "172.65.64.0/20",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "mxa.global.inbound.cf-emailsecurity.net",
      "ip": "172.65.64.105",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "172.65.64.0/20",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    },
    {
      "host": "mxb.global.inbound.cf-emailsecurity.net",
      "ip": "172.65.64.78",
      "asn": 13335,
      "as_name": "CLOUDFLARENET - Cloudflare, Inc.",
      "prefix": "172.65.64.0/20",
      "country": "US",
      "provider": "Cloudflare",
      "kind": "cdn",
      "anycast": true
    }
  ],
  "findings": [
    {
      "layer": "network",
      "severity": "medium",
      "title": "DNS and web on a single anycast operator",
      "detail": "Both nameservers and web origin announce from AS13335 (CLOUDFLARENET - Cloudflare, Inc.). The anycast network cushions localized failures, but the operator remains a single dependency — a global control-plane incident affects everything at once.",
      "evidence": [
        "ns3.cloudflare.com → 162.159.0.33 · AS13335 Cloudflare · US",
        "ns3.cloudflare.com → 162.159.7.226 · AS13335 Cloudflare · US",
        "ns3.cloudflare.com → 2400:cb00:2049:1::a29f:21 · AS13335 Cloudflare · US",
        "ns3.cloudflare.com → 2400:cb00:2049:1::a29f:7e2 · AS13335 Cloudflare · US",
        "ns4.cloudflare.com → 162.159.1.33 · AS13335 Cloudflare · US",
        "ns4.cloudflare.com → 162.159.8.55 · AS13335 Cloudflare · US",
        "ns4.cloudflare.com → 2400:cb00:2049:1::a29f:121 · AS13335 Cloudflare · US",
        "ns4.cloudflare.com → 2400:cb00:2049:1::a29f:837 · AS13335 Cloudflare · US",
        "ns5.cloudflare.com → 162.159.2.9 · AS13335 Cloudflare · US",
        "ns5.cloudflare.com → 162.159.9.55 · AS13335 Cloudflare · US",
        "ns5.cloudflare.com → 2400:cb00:2049:1::a29f:209 · AS13335 Cloudflare · US",
        "ns5.cloudflare.com → 2400:cb00:2049:1::a29f:937 · AS13335 Cloudflare · US",
        "ns6.cloudflare.com → 162.159.3.11 · AS13335 Cloudflare · US",
        "ns6.cloudflare.com → 162.159.5.6 · AS13335 Cloudflare · US",
        "ns6.cloudflare.com → 2400:cb00:2049:1::a29f:30b · AS13335 Cloudflare · US",
        "ns6.cloudflare.com → 2400:cb00:2049:1::a29f:506 · AS13335 Cloudflare · US",
        "ns7.cloudflare.com → 162.159.4.8 · AS13335 Cloudflare · US",
        "ns7.cloudflare.com → 162.159.6.6 · AS13335 Cloudflare · US",
        "ns7.cloudflare.com → 2400:cb00:2049:1::a29f:408 · AS13335 Cloudflare · US",
        "ns7.cloudflare.com → 2400:cb00:2049:1::a29f:606 · AS13335 Cloudflare · US",
        "cloudflare.com → 104.16.132.229 · AS13335 Cloudflare · US",
        "cloudflare.com → 104.16.133.229 · AS13335 Cloudflare · US",
        "cloudflare.com → 2606:4700::6810:84e5 · AS13335 Cloudflare · US",
        "cloudflare.com → 2606:4700::6810:85e5 · AS13335 Cloudflare · US"
      ],
      "remediate": "For high-availability domains, host authoritative DNS with a second, independent operator."
    },
    {
      "layer": "dns",
      "severity": "low",
      "title": "Nameservers on a single anycast provider",
      "detail": "All nameservers are Cloudflare, a globally anycast operator — resilient to localized failures, but still a single operator-level dependency (control plane, account, global outage).",
      "evidence": [
        "ns3.cloudflare.com → 162.159.0.33 · AS13335 Cloudflare · US",
        "ns3.cloudflare.com → 162.159.7.226 · AS13335 Cloudflare · US",
        "ns3.cloudflare.com → 2400:cb00:2049:1::a29f:21 · AS13335 Cloudflare · US",
        "ns3.cloudflare.com → 2400:cb00:2049:1::a29f:7e2 · AS13335 Cloudflare · US",
        "ns4.cloudflare.com → 162.159.1.33 · AS13335 Cloudflare · US",
        "ns4.cloudflare.com → 162.159.8.55 · AS13335 Cloudflare · US",
        "ns4.cloudflare.com → 2400:cb00:2049:1::a29f:121 · AS13335 Cloudflare · US",
        "ns4.cloudflare.com → 2400:cb00:2049:1::a29f:837 · AS13335 Cloudflare · US",
        "ns5.cloudflare.com → 162.159.2.9 · AS13335 Cloudflare · US",
        "ns5.cloudflare.com → 162.159.9.55 · AS13335 Cloudflare · US",
        "ns5.cloudflare.com → 2400:cb00:2049:1::a29f:209 · AS13335 Cloudflare · US",
        "ns5.cloudflare.com → 2400:cb00:2049:1::a29f:937 · AS13335 Cloudflare · US",
        "ns6.cloudflare.com → 162.159.3.11 · AS13335 Cloudflare · US",
        "ns6.cloudflare.com → 162.159.5.6 · AS13335 Cloudflare · US",
        "ns6.cloudflare.com → 2400:cb00:2049:1::a29f:30b · AS13335 Cloudflare · US",
        "ns6.cloudflare.com → 2400:cb00:2049:1::a29f:506 · AS13335 Cloudflare · US",
        "ns7.cloudflare.com → 162.159.4.8 · AS13335 Cloudflare · US",
        "ns7.cloudflare.com → 162.159.6.6 · AS13335 Cloudflare · US",
        "ns7.cloudflare.com → 2400:cb00:2049:1::a29f:408 · AS13335 Cloudflare · US",
        "ns7.cloudflare.com → 2400:cb00:2049:1::a29f:606 · AS13335 Cloudflare · US"
      ],
      "remediate": "Acceptable for most; for tier-1 domains add a second anycast provider for operator independence."
    },
    {
      "layer": "web",
      "severity": "info",
      "title": "Web served via CDN (Cloudflare)",
      "detail": "The web tier resolves into a CDN/anycast network, which absorbs traffic across many PoPs and shields the origin.",
      "evidence": [
        "cloudflare.com → 104.16.132.229 · AS13335 Cloudflare · US",
        "cloudflare.com → 104.16.133.229 · AS13335 Cloudflare · US",
        "cloudflare.com → 2606:4700::6810:84e5 · AS13335 Cloudflare · US",
        "cloudflare.com → 2606:4700::6810:85e5 · AS13335 Cloudflare · US"
      ],
      "remediate": ""
    }
  ],
  "grade": "B",
  "score": 86,
  "has_cdn": true,
  "cdn_name": "Cloudflare"
}