; ============================================================
; OBSERVED RECORDS SNAPSHOT (RECONSTRUCTED)
; ============================================================
; Domain:     hirt.dev
; Generated:  2026-03-12T07:49:12Z
; Tool:       DNS Tool v26.36.06
; Source:     Public DNS resolution (not authoritative zone transfer)
;
; IMPORTANT DISCLAIMERS:
; - This is NOT an authoritative zone file
; - Records were observed via public DNS queries, not zone transfer
; - This snapshot may be incomplete — only queried record types are shown
; - TTL values reflect resolver cache state at query time
; - Internal/unpublished records will not appear
; - Use for comparison and documentation purposes only
; ============================================================

$ORIGIN hirt.dev.

; --- A Records ---
hirt.dev.    300    IN    A    104.21.15.16
hirt.dev.    300    IN    A    172.67.161.4

; --- AAAA Records ---
hirt.dev.    300    IN    AAAA    2606:4700:3031::6815:f10
hirt.dev.    300    IN    AAAA    2606:4700:3037::ac43:a104

; --- MX Records ---
hirt.dev.    300    IN    MX    10 mail.protonmail.ch.
hirt.dev.    300    IN    MX    20 mailsec.protonmail.ch.

; --- NS Records ---
hirt.dev.    21600    IN    NS    elisabeth.ns.cloudflare.com.
hirt.dev.    21600    IN    NS    tom.ns.cloudflare.com.

; --- TXT Records (SPF, DMARC, DKIM, etc.) ---
hirt.dev.    300    IN    TXT    "v=spf1 include:_spf.protonmail.ch mx ~all"
hirt.dev.    300    IN    TXT    "protonmail-verification=79d06f74b7ab79f654b74b3ab1f3ee87b9d5833c"
_dmarc.hirt.dev.    3600    IN    TXT    "v=DMARC1; p=reject; adkim=s; aspf=s; rua=mailto:jochen+dmarcreports@hirt.dev"
_mta-sts.hirt.dev.    3600    IN    TXT    "v=STSv1; id=hirt.dev"
_smtp._tls.hirt.dev.    3600    IN    TXT    "v=TLSRPTv1; rua=mailto:tls-reports@hirt.dev"

; --- SOA Record ---
hirt.dev.    1800    IN    SOA    elisabeth.ns.cloudflare.com. dns.cloudflare.com. 2397825196 10000 2400 604800 1800

; --- CAA Records ---
hirt.dev.    3600    IN    CAA    0 issuewild "digicert.com; cansignhttpexchanges=yes"
hirt.dev.    3600    IN    CAA    0 issue "pki.goog; cansignhttpexchanges=yes"
hirt.dev.    3600    IN    CAA    0 issuewild "letsencrypt.org"
hirt.dev.    3600    IN    CAA    0 issuewild "ssl.com"
hirt.dev.    3600    IN    CAA    0 issuewild "pki.goog; cansignhttpexchanges=yes"
hirt.dev.    3600    IN    CAA    0 issue "comodoca.com"
hirt.dev.    3600    IN    CAA    0 issue "ssl.com"
hirt.dev.    3600    IN    CAA    0 issuewild "comodoca.com"
hirt.dev.    3600    IN    CAA    0 issue "digicert.com; cansignhttpexchanges=yes"
hirt.dev.    3600    IN    CAA    0 issue "letsencrypt.org"

; --- SRV Records ---
; (none discovered)

; --- CNAME Records ---
; (none discovered)

; ============================================================
; END OF OBSERVED RECORDS SNAPSHOT
; Integrity: SHA-3-512 hash of this document: 3c56674f049fa484c3b1e1ab2102f3d73011b0bde963f842f9969200b2979f3061c4ff13780e69684c34985b7d9a88e6d02f5c29ff7107f7b82df1a584a76f8c
; ============================================================