dnsspof
B
86/100
example.com

Moderate concentration — DNS and web on a single anycast operator.

NS 2 web 4 MX 0 CDN yes · Cloudflare DNSSEC yes

Network dependency map

each block is one resolved endpoint, coloured by Autonomous System
DNS
Web
Mail
no mail (MX) configured
  • AS13335 CLOUDFLARENET - Cloudflare, Inc.×16

Findings

4
medium network DNS and web on a single anycast operator

Both nameservers and web origin announce from AS13335 (CLOUDFLARENET - Cloudflare, Inc.). The anycast network cushions localized failures, but the operator remains a single dependency — a global control-plane incident affects everything at once.

16 endpoints
  • elliott.ns.cloudflare.com → 108.162.195.228 · AS13335 Cloudflare · US
  • elliott.ns.cloudflare.com → 162.159.44.228 · AS13335 Cloudflare · US
  • elliott.ns.cloudflare.com → 172.64.35.228 · AS13335 Cloudflare · US
  • elliott.ns.cloudflare.com → 2606:4700:58::a29f:2ce4 · AS13335 Cloudflare · US
  • elliott.ns.cloudflare.com → 2803:f800:50::6ca2:c3e4 · AS13335 Cloudflare · CR
  • elliott.ns.cloudflare.com → 2a06:98c1:50::ac40:23e4 · AS13335 Cloudflare · US
  • hera.ns.cloudflare.com → 108.162.192.162 · AS13335 Cloudflare · US
  • hera.ns.cloudflare.com → 172.64.32.162 · AS13335 Cloudflare · US
  • hera.ns.cloudflare.com → 173.245.58.162 · AS13335 Cloudflare · US
  • hera.ns.cloudflare.com → 2606:4700:50::adf5:3aa2 · AS13335 Cloudflare · US
  • hera.ns.cloudflare.com → 2803:f800:50::6ca2:c0a2 · AS13335 Cloudflare · CR
  • hera.ns.cloudflare.com → 2a06:98c1:50::ac40:20a2 · AS13335 Cloudflare · US
  • example.com → 104.20.23.154 · AS13335 Cloudflare · US
  • example.com → 172.66.147.243 · AS13335 Cloudflare · US
  • example.com → 2606:4700:10::6814:179a · AS13335 Cloudflare · US
  • example.com → 2606:4700:10::ac42:93f3 · AS13335 Cloudflare · US

For high-availability domains, host authoritative DNS with a second, independent operator.

low dns Nameservers on a single anycast provider

All nameservers are Cloudflare, a globally anycast operator — resilient to localized failures, but still a single operator-level dependency (control plane, account, global outage).

12 endpoints
  • elliott.ns.cloudflare.com → 108.162.195.228 · AS13335 Cloudflare · US
  • elliott.ns.cloudflare.com → 162.159.44.228 · AS13335 Cloudflare · US
  • elliott.ns.cloudflare.com → 172.64.35.228 · AS13335 Cloudflare · US
  • elliott.ns.cloudflare.com → 2606:4700:58::a29f:2ce4 · AS13335 Cloudflare · US
  • elliott.ns.cloudflare.com → 2803:f800:50::6ca2:c3e4 · AS13335 Cloudflare · CR
  • elliott.ns.cloudflare.com → 2a06:98c1:50::ac40:23e4 · AS13335 Cloudflare · US
  • hera.ns.cloudflare.com → 108.162.192.162 · AS13335 Cloudflare · US
  • hera.ns.cloudflare.com → 172.64.32.162 · AS13335 Cloudflare · US
  • hera.ns.cloudflare.com → 173.245.58.162 · AS13335 Cloudflare · US
  • hera.ns.cloudflare.com → 2606:4700:50::adf5:3aa2 · AS13335 Cloudflare · US
  • hera.ns.cloudflare.com → 2803:f800:50::6ca2:c0a2 · AS13335 Cloudflare · CR
  • hera.ns.cloudflare.com → 2a06:98c1:50::ac40:20a2 · AS13335 Cloudflare · US

Acceptable for most; for tier-1 domains add a second anycast provider for operator independence.

info web Web served via CDN (Cloudflare)

The web tier resolves into a CDN/anycast network, which absorbs traffic across many PoPs and shields the origin.

4 endpoints
  • example.com → 104.20.23.154 · AS13335 Cloudflare · US
  • example.com → 172.66.147.243 · AS13335 Cloudflare · US
  • example.com → 2606:4700:10::6814:179a · AS13335 Cloudflare · US
  • example.com → 2606:4700:10::ac42:93f3 · AS13335 Cloudflare · US
info pki No CAA records

Without a CAA record, any public CA may issue certificates for this domain, widening the mis-issuance attack surface.

Publish a CAA record naming only your intended CA(s).

DNS records

Nameserverselliott.ns.cloudflare.com
hera.ns.cloudflare.com
A104.20.23.154
172.66.147.243
AAAA2606:4700:10::6814:179a
2606:4700:10::ac42:93f3
MX—
SOAelliott.ns.cloudflare.com. dns.cloudflare.com. 2410849323 10000 2400 604800 1800
CAAnone — any CA may issue
DNSSECsigned (DS present)
TXT2 record(s)

Scan history

  • B2026-08-01 01:08 UTCscore 86 · 1 network
  • B2026-08-01 00:57 UTCscore 86 · 1 network
  • B2026-08-01 00:57 UTCscore 86 · 1 network
  • B2026-08-01 00:57 UTCscore 86 · 1 network
  • B2026-08-01 00:57 UTCscore 86 · 1 network
  • B2026-08-01 00:53 UTCscore 86 · 1 network
  • B2026-07-30 10:50 UTCscore 86 · 1 network
  • B2026-07-30 10:50 UTCscore 86 · 1 network

Machine-readable: /api/scan?domain=example.com

← scan another domain