| Act-OnMarketing automation | CNAMEsuffix: actonservice.com
suffix: actonsoftware.com
suffix: ez-touch.net | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | |
| Act-OnSpf | SPFsuffix: _spf.act-on.net | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| ActiveCampaignMarketing automation | CNAMEsuffix: activehosted.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | |
| AdobeBusiness software | TXT^adobe-idp-site-verification\s*= | Adobe identity domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| Adobe Acrobat SignBusiness software | TXT^adobe-sign-verification\s*=\s*\S+ | Adobe acrobat sign domain claimA Adobe Acrobat Sign domain-verification record is published. It does not establish completed verification, enabled SSO, a current subscription, or recent activity. | mediumRule reviewed 2026-10-15 | |
| Adobe CampaignMarketing automation | Delegated NSsuffix: ns.campaign.adobe.com | Delegated DNS infrastructurePublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | |
| Adobe MarketoMarketing automation | CNAMEsuffix: mktoweb.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| Adobe MarketoSpf | SPFsuffix: mktomail.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| Amazon SESSpf | SPFsuffix: amazonses.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| AnthropicAi workspace | TXT^anthropic-domain-verification(?:-[a-z0-9]+)?\s*= | Anthropic workspace domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| ApolloSales engagement | CNAMEsuffix: apollo.io
suffix: apollo-mail.io
suffix: apollomail.io
suffix: tryapollo.io | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| ApolloSales engagement | CNAMEsuffix: aplolinks.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| Apple BusinessBusiness software | TXT^apple-domain-verification\s*= | Apple Business domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| AtlassianSpf | SPFsuffix: _spf.atlassian.net | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| AtlassianBusiness software | TXT^atlassian-domain-verification\s*= | Atlassian organization domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| Atlassian StatuspageCustomer support | CNAMEsuffix: stspg-customer.com | Statuspage custom domainPublished DNS indicates configuration only; it does not prove active use or a current subscription. | highRule reviewed 2026-10-14 | |
| Atlassian StatuspageSpf | SPFexact: stspg-customer.com | Statuspage notification sendingPublished DNS indicates configuration only; it does not prove active use or a current subscription. | mediumRule reviewed 2026-10-14 | |
| Atlassian StatuspageCustomer support | TXT^status-page-domain-verification\s*= | Statuspage custom domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| Auth0Identity access | CNAMEsuffix: edge.tenants.auth0.com | Auth0 custom authentication domainPublished DNS indicates configuration only; it does not prove active use or a current subscription. | highRule reviewed 2026-10-14 | |
| BitlyLink management | CNAMEsuffix: bitly.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| BoxBusiness software | TXT^box-domain-verification\s*= | Box organization domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| BrevoSpf | SPFsuffix: spf.sendinblue.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| Campaign MonitorSpf | SPFsuffix: _spf.createsend.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| CDK EleadSpf | SPFsuffix: cust-spf.eleadtrack.net | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | lowReview date not recorded | Source not recorded in this legacy rule |
| CiscoBusiness software | TXT^cisco-ci-domain-verification\s*= | Cisco service domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| ClickFunnelsLanding pages | CNAMEexact: target.clickfunnels.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| Cloudflare Dashboard SSOIdentity access | TXT^cloudflare_dashboard_sso\s*=\s*\S+ | Cloudflare dashboard sso domainA Cloudflare Dashboard SSO domain-verification record is published. It does not establish completed verification, enabled SSO, paid seats, or recent activity. | mediumRule reviewed 2026-10-14 | |
| Constant ContactSpf | SPFsuffix: spf.constantcontact.com
suffix: _int.constantcontact.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| Constant Contact / SharpSpringMarketing automation | CNAMEsuffix: marketingautomation.services | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| CourseraCustomer education | TXT^coursera-domain-verification\s*= | Coursera organization domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| CursorAi workspace | TXT^cursor-domain-verification(?:-[a-z0-9]+)?\s*= | Cursor organization domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| Customer.ioCustomer messaging | CNAMEsuffix: customeriomail.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | |
| DealerSocketSpf | SPFsuffix: _spf.dealersocket.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| DoceboCustomer education | CNAMEsuffix: docebosaas.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| DocusignBusiness software | TXT^docusign\s*=\s*\S+ | Docusign organization domainA Docusign domain-verification record is published. It does not establish completed verification, enabled SSO, paid seats, or recent activity. | mediumRule reviewed 2026-10-14 | |
| DrataSecurity compliance | CNAMEexact: trust.cname.drata.com | Drata trust centerDNS points to Drata Trust Center hosting. It does not establish certification, licensed compliance modules, or current activity. | highRule reviewed 2026-10-14 | |
| DriftMarketing automation | TXT^drift-domain-verification\s*= | Drift domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| DropboxBusiness software | TXT^dropbox-domain-verification\s*= | Dropbox organization domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| Duo SSOIdentity access | TXT^duo_sso_verification\s*= | Duo Single Sign-On permitted email domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| DynatraceBusiness software | TXT^dynatrace-site-verification\s*=\s*\S+ | Dynatrace domain verificationA Dynatrace domain-verification record is published. It does not establish completed verification, enabled SSO, a current subscription, or recent activity. | mediumRule reviewed 2026-10-15 | |
| Email Signatures 365Spf | SPFsuffix: spf.emailsignatures365.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| Emma by MarigoldSpf | SPFsuffix: e2ma.net | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| Emma by MarigoldMarketing automation | TXT^e2ma-verification\s*= | Emma sending-domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| Fireflies.aiMeeting intelligence | TXT^fireflies-verification\s*=\s*\S+ | Fireflies domain verificationA Fireflies domain-verification record is published. It does not establish completed verification, enabled SSO, a paid subscription, or meeting-recording activity. | mediumRule reviewed 2026-10-14 | |
| FreshserviceIt service management | CNAMEsuffix: freshservice.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | |
| FreshworksSpf | SPFsuffix: freshemail.io
suffix: email.freshservice.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| FrontifyBrand management | CNAMEsuffix: frontify.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| GammaBusiness software | TXT^gamma-domain-verification(?:-[a-z0-9]+)?\s*= | Gamma domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| GC AIAi workspace | TXT^gc-ai-domain-verification(?:-[a-z0-9]+)?\s*= | GC AI organization domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| GlobalSignIdentity access | TXT^_globalsign-domain-verification\s*= | GlobalSign domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| GoldcastEvents webinars | CNAMEsuffix: goldcast.io | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | |
| Gong EngageSales engagement | CNAMEsuffix: email-composer-webhooks.gong.io | Gong engage link trackingThis identifies Gong Engage branded link tracking, not Gong call recording, active seats, or recent activity. | highRule reviewed 2026-10-14 | |
| Gong EngageSales engagement | CNAMEexact: email-composer-webhooks.gong.io.cdn.cloudflare.net | Gong engage link trackingThis exact CDN alias is corroborated by Gong's documented tracking endpoint and public DNS. It identifies branded link tracking, not Gong call recording or recent activity. | mediumRule reviewed 2026-10-14 | |
| GoogleBusiness software | TXT^google-site-verification\s*= | Google site or domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| Google WorkspaceDkim | DKIMsuffix: _domainkey.google.com | Mail-signing infrastructurePublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| Google WorkspaceSpf | SPFsuffix: _spf.google.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| GoTo / LogMeInBusiness software | TXT^logmein-(?:verification-code|verify-code)\s*= | GoTo organization domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| GreenhouseSpf | SPFsuffix: mg-spf.greenhouse.io | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| HackerOneBusiness software | TXT^h1-domain-verification\s*= | HackerOne domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| HashiCorp Cloud PlatformBusiness software | TXT^hcp-domain-verification\s*= | HashiCorp Cloud Platform domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| Help ScoutCustomer support | CNAMEsuffix: helpscoutdocs.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | |
| Help ScoutSpf | SPFsuffix: helpscoutemail.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| Higher Logic VanillaCustomer community | CNAMEsuffix: onvanilla.net | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| HubSpotMarketing automation | CNAMEsuffix: hubspot.net
suffix: hscoscdn.net | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| HubSpotDkim | DKIMsuffix: hubspotemail.net | Mail-signing infrastructurePublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| HubSpotSpf | SPFsuffix: hubspotemail.net | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| HubSpotMarketing automation | TXT^hubspot-(?:domain|dns|developer)-verification\s*= | HubSpot domain, DNS, or developer ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| IntercomCustomer support | CNAMEexact: custom.intercom.help
exact: custom.eu.intercom.help
exact: custom.au.intercom.help
suffix: intercomhelpcenter.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | |
| IterableCustomer messaging | CNAMEexact: links.iterable.com
exact: links.eu.iterable.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | |
| JamfBusiness software | TXT^jamf-site-verification\s*= | Jamf organization domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| KhorosCustomer community | CNAMEsuffix: lithium.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| KlaviyoMarketing automation | CNAMEsuffix: klaviyodns.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| KlaviyoDkim | DKIMsuffix: klaviyodns.com | Mail-signing infrastructurePublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| KlaviyoMarketing automation | TXT^klaviyo-site-verification\s*= | Klaviyo branded sending domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| KnowBe4Spf | SPFsuffix: _spf.psm.knowbe4.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| KnowBe4Security compliance | TXT^knowbe4-site-verification\s*= | KnowBe4 security-awareness domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| LaunchDarklyBusiness software | TXT^launchdarkly-domain-verification\s*= | LaunchDarkly organization domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| LinearBusiness software | TXT^linear-domain-verification\s*= | Linear workspace domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| LinkedInBusiness software | TXT^linkedin-site-verification\s*= | LinkedIn organization domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| LovableAi workspace | TXT^lovable_verification\s*=\s*\S+ | Lovable workspace domainA Lovable domain-verification record is published. It does not establish completed verification, enabled SSO, paid seats, or recent activity. | mediumRule reviewed 2026-10-14 | |
| MailChannelsSpf | SPFsuffix: relay.mailchannels.net | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| MailchimpSpf | SPFsuffix: servers.mcsv.net
suffix: mandrillapp.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| MailerLiteSpf | SPFsuffix: _spf.mlsend.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| MailgunEmail delivery | CNAMEsuffix: mailgun.org | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| MailgunDkim | DKIMsuffix: mailgun.org | Mail-signing infrastructurePublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| MailgunSpf | SPFsuffix: mailgun.org | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| MailgunEmail delivery | TXT^mgverify\s*= | Mailgun sending domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| MetaAdvertising abm | TXT^facebook-domain-verification\s*= | Meta Business domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| MicrosoftBusiness software | TXT^MS=ms[a-z0-9]+$ | Microsoft domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| Microsoft 365Mail productivity | CNAMEexact: autodiscover.outlook.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | |
| Microsoft 365Dkim | DKIMsuffix: onmicrosoft.com | Mail-signing infrastructurePublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| Microsoft 365Spf | SPFsuffix: spf.protection.outlook.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| Microsoft Dynamics 365Crm or hosted site | CNAMEsuffix: dynamics.com
suffix: microsoftcrmportals.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| Microsoft Power PagesPower platform hosted site | CNAMEsuffix: powerappsportals.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| MixmaxSales engagement | CNAMEsuffix: mixmax.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| MixpanelProduct analytics | TXT^mixpanel-domain-verify\s*= | Mixpanel organization domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| Monday.comBusiness software | TXT^monday-com-verification\s*= | Monday.com organization domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| MongoDBBusiness software | TXT^mongodb-site-verification\s*= | MongoDB organization domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| NooksSales engagement | CNAMEsuffix: nooks.in | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| OktaIdentity access | CNAMEsuffix: okta.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| OpenAIAi workspace | TXT^openai-domain-verification\s*= | OpenAI workspace domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| Oracle EloquaMarketing automation | CNAMEsuffix: eloqua.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| OutreachSales engagement | CNAMEsuffix: outrch.com
suffix: outreach.io
suffix: outreach-mail.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| PandaDocBusiness software | TXT^pandadoc-domain-verification\s*=\s*\S+ | Pandadoc sso domainA PandaDoc domain-verification record is published. It does not establish completed verification, enabled SSO, paid seats, or recent activity. | mediumRule reviewed 2026-10-14 | |
| PendoProduct analytics | TXT^pendo-domain-verification\s*= | Pendo subscription domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| PostmanBusiness software | TXT^postman-domain-verification\s*= | Postman organization domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| Proton MailSpf | SPFsuffix: _spf.protonmail.ch
suffix: _spf2.protonmail.ch | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | |
| Proton MailMail productivity | TXT^protonmail-verification\s*= | Proton Mail custom-domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| ReachdeskAdvertising abm | TXT^reachdesk-verification\s*=\s*\S+ | Reachdesk email domain verificationA Reachdesk domain-verification record is published for branded correspondence. It does not establish completed verification, active campaigns, or gifts sent. | mediumRule reviewed 2026-10-14 | |
| Read AIMeeting intelligence | TXT^read-ai-verification\s*=\s*\S+ | Read ai domain verificationA Read AI workspace domain-verification record is published. It does not establish completed verification, a paid subscription, or meeting-recording activity. | mediumRule reviewed 2026-10-14 | |
| RemoteBusiness software | TXT^remote-domain-verification\s*=\s*\S+ | Remote sso domainA Remote domain-verification record is published. It does not establish completed verification, enabled SSO, paid seats, or recent activity. | mediumRule reviewed 2026-10-14 | |
| RipplingBusiness software | TXT^rippling-domain-verification\s*= | Rippling organization domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| SafeBaseSecurity compliance | CNAMEsuffix: portals.safebase.io | Safebase trust centerDNS points to SafeBase Trust Center hosting. It does not establish certification, use of Drata's compliance platform, or current activity. | highRule reviewed 2026-10-14 | |
| Sage IntacctBusiness software | TXT^intacct-esk\s*=\s*\S+ | Sage intacct email sender keyA Sage Intacct email sender key is published. This indicates email-domain setup, not completed verification, licensed accounting modules, or current sending activity. | mediumRule reviewed 2026-10-14 | |
| SalesforceCrm or hosted site | CNAMEsuffix: siteforce.com
suffix: force.com
suffix: salesforce.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| SalesforceDkim | DKIMsuffix: salesforce.com | Mail-signing infrastructurePublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| SalesforceSpf | SPFsuffix: _spf.salesforce.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| SalesforceCrm | TXT^salesforce-domain-verification\s*= | Salesforce domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| Salesforce Marketing Cloud EngagementMarketing automation | CNAMEsuffix: sfmc-content.com
suffix: exacttarget.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| Salesforce Marketing Cloud EngagementMarketing automation | Delegated NSsuffix: exacttarget.com | Delegated DNS infrastructurePublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | |
| Salesforce Marketing Cloud EngagementSpf | SPFsuffix: cust-spf.exacttarget.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| Salesforce PardotMarketing automation | CNAMEsuffix: pardot.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| Salesforce PardotSpf | SPFsuffix: aspmx.pardot.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| SalesloftSales engagement | CNAMEsuffix: salesloft.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| SegmentCustomer data | TXT^segment-site-verification\s*= | Twilio Segment workspace domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| SendGridEmail delivery | CNAMEsuffix: sendgrid.net | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| SendGridDkim | DKIMsuffix: sendgrid.net | Mail-signing infrastructurePublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| SendGridSpf | SPFsuffix: sendgrid.net | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| ServiceTitanCrm or hosted site | CNAMEsuffix: servicetitan.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| Showroom LogicAdvertising abm | CNAMEexact: retargeting.showroomlogic.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| SimplePartSpf | SPFsuffix: dospf.simplepart.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | lowReview date not recorded | Source not recorded in this legacy rule |
| SkilljarCustomer education | CNAMEsuffix: skilljarapp.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| SlackBusiness software | TXT^slack-domain-verification\s*= | Slack organization domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| SmartsheetBusiness software | TXT^smartsheet-site-validation\s*=\s*\S+ | Smartsheet domain verificationA Smartsheet domain-verification record is published. It does not establish completed verification, enabled SSO, a current subscription, or recent activity. | mediumRule reviewed 2026-10-15 | |
| SMTP2GOEmail delivery | CNAMEsuffix: smtp2go.net | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| SnowflakeBusiness software | TXT^snowflake-verification\s*=\s*\S+ | Snowflake organization email domainA Snowflake domain-verification record is published. It does not establish completed verification, enabled SSO, paid seats, or recent activity. | mediumRule reviewed 2026-10-14 | |
| SophosSpf | SPFsuffix: prod.hydra.sophos.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| SophosSecurity compliance | TXT^sophos-domain-verification\s*= | Sophos federated or Phish Threat domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| SparkPostEmail delivery | CNAMEsuffix: sparkpostmail.com
suffix: spgo.io
suffix: mail.e.sparkpost.com
suffix: et.e.sparkpost.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| StripeCommerce payments | TXT^stripe-verification\s*= | Stripe domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| TeamViewerBusiness software | TXT^teamviewer-sso-verification\s*=\s*\S+ | Teamviewer sso domain verificationA TeamViewer domain-verification record is published. It does not establish completed verification, enabled SSO, a current subscription, or recent activity. | mediumRule reviewed 2026-10-15 | |
| TwilioBusiness software | TXT^twilio-domain-verification\s*=\s*\S+ | Twilio organization domainA Twilio domain-verification record is published. It does not establish completed verification, enabled SSO, paid seats, or recent activity. | mediumRule reviewed 2026-10-14 | |
| Uber for BusinessBusiness software | TXT^uber-domain-verification\s*= | Uber organization domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| UnbounceLanding pages | CNAMEsuffix: unbouncepages.com
suffix: ubpages.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| UserledAdvertising abm | CNAMEsuffix: userled.io | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| VantaSecurity compliance | CNAMEsuffix: cname.vantatrust.com | Vanta trust centerDNS points to Vanta Trust Center hosting. It does not establish certification, licensed compliance modules, or current activity. | highRule reviewed 2026-10-14 | |
| VercelWebsite hosting | CNAMEsuffix: vercel-dns.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| VercelBusiness software | TXT^vercel-domain-verification(?:-[a-z0-9]+)?\s*= | Vercel domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| WebflowWebsite cms | CNAMEsuffix: webflow.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| WixWebsite cms | CNAMEsuffix: wixdns.net | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| WorkOSIdentity access | CNAMEsuffix: workos-dns.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| WP EngineWebsite cms | CNAMEsuffix: wpengine.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | Source not recorded in this legacy rule |
| YunoCommerce payments | TXT^yuno-domain-verification(?:-[a-z0-9]+)?\s*= | Yuno domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| ZapierBusiness software | TXT^zapier-domain-verification-challenge\s*= | Zapier organization domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| ZendeskCustomer support | CNAMEsuffix: zendesk.com | Vendor-attributable hosted domainPublished DNS supports configuration or a domain relationship; not current licensing or activity. | highReview date not recorded | |
| ZendeskSpf | SPFsuffix: mail.zendesk.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | Profile-dependentReview date not recorded | Source not recorded in this legacy rule |
| ZohoSpf | SPFsuffix: spf.zoho.com
suffix: spf.zohomail.com
suffix: popspf.zohomail.com | Published email-sending authorizationPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | |
| ZohoMail productivity | TXT^zoho-verification\s*= | Zoho custom-domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |
| ZoomBusiness software | TXT^(?:zoom-domain-verification|zoom_verify_)\s*[=:] | Zoom domain ownershipPublished DNS supports configuration or a domain relationship; not current licensing or activity. | mediumReview date not recorded | Source not recorded in this legacy rule |