3 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
All common DNS records for a domain in one call: A, AAAA, MX, TXT, NS, SOA, CNAME, CAA and HTTPS, plus DNSSEC validation state. A complete DNS snapshot for audits, migrations and change tracking. $0.01 per domain.
SPF all mechanism(s) for a domain: the catch-all qualifier (-all fail, ~all softfail, ?all neutral, +all pass-everything). Reads the SPF TXT record (Cloudflare DoH) and returns just the all entries with their qualifiers,...
Change watch for spf mechanism all: runs the check, compares it with the result from your previous call for the same domain (kept 90 days) and returns the current answer, changed true/false, the fields that changed with...