DNS Record Lookup
Look up DNS records including A, AAAA, MX, NS, SOA, CNAME, TXT, and CAA records for any domain
Hosting & Network
xss.st runs on Cloudflare, with DNS by Cloudflare and email configured.
- Hosting network
- CloudflareAS13335Cloudflare
- Managed DNS
- Cloudflare
- Configured
- IPv6 (AAAA)
- Enabled
- CAA pinning
- Set
Sits alongside 4,994,654 other sites on Cloudflare. Stable here since we started watching (Sep 25, 2026).
The apex and www are the same hosting — the apex via A records.
DNS Records for xss.st
| Hostname | Type | TTL | Priority | Content |
|---|---|---|---|---|
| xss.st | SOA | 1800 | nena.ns.cloudflare.com dns.cloudflare.com 2417239853 10000 2400 604800 1800 | |
| xss.st | TXT | 0 | v=spf1 include:_spf.mail.hostinger.com ~all | |
| xss.st | A | 0 | 104.21.14.35 | |
| xss.st | A | 0 | 172.67.157.176 | |
| xss.st | NS | 0 | tanner.ns.cloudflare.com | |
| xss.st | NS | 0 | nena.ns.cloudflare.com | |
| xss.st | AAAA | 0 | 2606:4700:3030::6815:e23 | |
| xss.st | AAAA | 0 | 2606:4700:3033::ac43:9db0 | |
| xss.st | MX | 0 | 10 | mx2.hostinger.com |
| xss.st | MX | 0 | 5 | mx1.hostinger.com |
| xss.st | CAA | 0 | 0 issue globalsign.com | |
| xss.st | CAA | 0 | 0 issuewild sectigo.com | |
| xss.st | CAA | 0 | 0 issue sectigo.com | |
| xss.st | CAA | 0 | 0 issue pki.goog; cansignhttpexchanges=yes | |
| xss.st | CAA | 0 | 0 issue comodoca.com | |
| xss.st | CAA | 0 | 0 issuewild pki.goog; cansignhttpexchanges=yes | |
| xss.st | CAA | 0 | 0 issuewild digicert.com; cansignhttpexchanges=yes | |
| xss.st | CAA | 0 | 0 issuewild comodoca.com | |
| xss.st | CAA | 0 | 0 issuewild letsencrypt.org | |
| xss.st | CAA | 0 | 0 issuewild ssl.com | |
| xss.st | CAA | 0 | 0 issue digicert.com; cansignhttpexchanges=yes | |
| xss.st | CAA | 0 | 0 issue ssl.com | |
| xss.st | CAA | 0 | 0 issuewild globalsign.com | |
| xss.st | CAA | 0 | 0 issue letsencrypt.org | |
| www.xss.st | AAAA | 0 | 2606:4700:3030::6815:e23 | |
| www.xss.st | AAAA | 0 | 2606:4700:3033::ac43:9db0 | |
| www.xss.st | A | 0 | 104.21.14.35 | |
| www.xss.st | A | 0 | 172.67.157.176 |
Get alerted the moment xss.st's DNS changes
This page is today's snapshot. Turn on monitoring and we'll watch xss.st continuously, notifying you the moment anything moves across all three signals:
Uptime
We visit the site from multiple regions worldwide and email you within minutes if it goes down, with a per-region breakdown so a real outage stands out from a regional blip.
DNS changes
We watch NS, MX, CAA, DNSSEC, CNAME and A/AAAA records, and identify the host, network, and ASN behind them, so a real migration or hijack stands out from routine noise.
TLS certificate
We warn you 30, 14, 7, and 1 days before it expires, and flag it if the issuing authority changes or the certificate is unexpectedly replaced.
Free for your first domain: uptime, DNS, and certificate together. No credit card.
What's up with DNS →
Our daily roundup of the most interesting DNS changes across the web — hosting and CDN migrations, network moves, and security-config shifts.
Ask about xss.st
BetaAnswers use the live DNS records shown on this page. AI-generated — double-check anything important.
About DNS Records
DNS (Domain Name System) records are instructions that provide information about a domain, including its IP addresses, mail servers, and other services. Common record types include:
- SOA (Start of Authority) - Contains administrative information about the zone
- NS (Nameserver) - Specifies authoritative nameservers for the domain
- A (Address) - Maps a domain to an IPv4 address
- AAAA - Maps a domain to an IPv6 address
- CNAME (Canonical Name) - Creates an alias pointing to another domain
- MX (Mail Exchange) - Specifies mail servers for the domain