DNS Audit

Domains: full A/AAAA/MX/NS/TXT/SOA/CNAME audit. IPs: reverse DNS (PTR) lookup. Resolves over DNS-over-HTTPS (Google/Cloudflare) when the host blocks UDP/53, so it works on shared hosting.

Results for mheducation.com

TypeValueTTLPriority
A 3.215.70.167 60 -
A 34.237.175.198 60 -
A 44.216.239.162 60 -
MX mxa-00363701.gslb.pphosted.com 600 10
MX mxb-00363701.gslb.pphosted.com 600 10
NS pdns85.ultradns.com 9326 -
NS pdns85.ultradns.net 9326 -
NS pdns85.ultradns.org 9326 -
NS pdns85.ultradns.biz 9326 -
TXT pendo-domain-verification=402cbc8d-0f07-4299-b6db-6df6f6323e42 300 -
TXT extensis-domain-verification=c523eb99-270b-4f84-9236-7b9815eb8ffd 300 -
TXT webexdomainverification.4C675B8B79D8B136E053AB06FC0A3F65=98c599cf-9d2f-4319-aa85-a5c4d1993db1 300 -
TXT asv=8b051e8264b0157766b0f0ca9e727afd 300 -
TXT figma-domain-verification=f8a35c1b991243122cdc71405b1f75b0c8a35a759e75e9c1318c203d387832cc-1763500311 300 -
TXT onetrust-domain-verification=1f5b083b2c4749c391bbf4d9656891bd 300 -
TXT docker-verification=c3d7b8b9-cb16-4eb7-8d81-0974e72e0a0c 300 -
TXT sfOrgId = '00D6C0000009yRZ' 300 -
TXT amazonses:29ZQ0rqs3F93+tDQVLe8cI3rSaDKO+Qi8hl/iySiick= 300 -
TXT apple-domain-verification=1lJD7yCkNLx70BGU 300 -
TXT amazonses:sInK/zhtrYvi9X6AyK4c5Ggi/eC9R8CRW7uMsuY/sgA= 300 -
TXT facebook-domain-verification=jmucfz5agnyrro97dnvyagbmvx5o18 300 -
TXT sfEnvUrlPod = 'https://mh--dev.sandbox.my.site.com' 300 -
TXT hpe-greenlake-domain-verification=69637752352d5a4b39503633484548785a595a315948577668596b496a717173 300 -
TXT liClWoeZEad9pMYaMIZz2jqKd0U 300 -
TXT google-site-verification=AJzhGkXacqCr1vHOp3vFEbvkNqjleD3Xw3O0KT2nAoQ 300 -
TXT google-site-verification=8V7kN5CIvny969sc05QlJkMNRCDAFOdmom27W3WB5HE 300 -
TXT sfEnvUrl = 'https://mh--dev.sandbox.my.salesforce.com' 300 -
TXT pendo-domain-verification=92a38a43-3bd2-4007-b8be-7294fdda3277 300 -
TXT anthropic-domain-verification-s041y7=euKjnfaw8mhUS1vjnGtUnyuhd 300 -
TXT sfChatUrl = 'https://d.la2-c1cs-ia5.salesforceliveagent.com/chat' 300 -
TXT jamf-site-verification=UM34-Qn-quR-NA0uumS1DA 300 -
TXT v6grhjx01dxk5yjjfn1cmg0tpbgpll6f 300 -
TXT klaviyo-site-verification=Ugs4T4 300 -
TXT sfContentUrl = 'https://d.la2-c1cs-ia5.salesforceliveagent.com/content' 300 -
TXT amazonses:c0nhtnSNNxXqHNK9iy8SSVI1qj1DDadpwmIEiRKAv98= 300 -
TXT google-site-verification=1SrHQrsSKlaeICKr7JUyP2ac3FBE7GrDArejeqsNek8 300 -
TXT amazonses:MGqHru9vHXwtjv6chSNbA9u+CFog403Li1ZZqLoQWJA= 300 -
TXT cisco-ci-domain-verification=4be5ec8f692cac532be02675d994632e86b8ec5ffd60df0ab03e0fc88f8e6619 300 -
TXT google-site-verification=WxPEEvrengXOlaM-QNci58faN8YYTU9NlHChMmVjDR0 300 -
TXT virtru-site-verify=TTsZikYt6*mCn-fz87jTeh!3g9**VH.3xTNfEs!J 300 -
TXT sfEmbdServiceUrl = 'https://mh--dev.my.salesforce.com/embeddedservice/5.0/esw.min.js' 300 -
TXT google-site-verification=oFO4uswKeYaeUxGm_B7UQ8U3m2ZtNk0Q21uqfGDp568 300 -
TXT v=spf1 include:_spf2.mheducation.com a:mx.brainshark.com include:amazonses.com include:mktomail.com include:spf.protection.outlook.com include:_spf.salesforce.com include:spf-00363701.pphosted.com -all 300 -
TXT atlassian-domain-verification=c7gXeeyIdIRhycDBErnNtWxlaLdJaH8Xe4HRW8opzT9s2oN12uSQAMt/uwuQHErb 300 -
TXT figma-domain-verification=d7249675b732b693c2d795fab480fc4ca609f8d8a26a7a37105b47654a1313b5-1762875396 300 -
TXT figma-domain-verification=ea3477b1f8e715593349bd1ce1979c58a5beadf0a10e904d501a3444028b87ed-1763045434 300 -
SOA pdns85.ultradns.com 300 -
Generate Takedown Request →

Bulk DNS Audit

Audited so far: 6,654 indicators.

▶ Run Bulk DNS Audit (auto-continues)

Sweeps every stored domain/IP lacking DNS data, in time-boxed batches that auto-continue in the browser until done. For the whole database at once (no browser), run php dns-audit.php bulk=run on the CLI or via cron.

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center