Home › Web & Hosting › DNS Records Cheat Sheet
Web & Hosting
DNS Records Cheat Sheet
Get the exact DNS records to point your domain at a Cloudflare Pages site — apex and www — plus anti-spoofing email records so nobody can forge mail from your domain. A clean, secure DNS setup in one copy-paste.
Try it now
💡 Good to know: A domain that never sends email is a prime spoofing target — a null-MX plus strict SPF/DMARC tells mail servers to reject forged messages.
Worked example
# DNS records for example.com (add in your Cloudflare / registrar dashboard)
# Type Name Content Proxy
# --- Point the site at Cloudflare Pages (HTTPS is automatic) ---
CNAME @ my-site.pages.dev Proxied (apex via CNAME flattening)
CNAME www my-site.pages.dev Proxied
# --- No email on this domain: anti-spoof lock (reject all forged mail) ---
MX @ 0 . DNS only (null MX)
TXT @ "v=spf1 -all" DNS only
TXT _dmarc "v=DMARC1; p=reject;" DNS only
Inputs
- Your domain
example.com - Pages project host
my-site.pages.dev - Email on this domain?
No mail (anti-spoof lock) / Google Workspace / SPF only
Frequently asked
What's the anti-spoof lock?
If your domain doesn't send email, a null-MX plus a strict SPF and DMARC record tell the world to reject any mail claiming to be from you — a common, cheap security win.
Apex CNAME — is that allowed?
On Cloudflare it is: CNAME flattening lets you point the apex (@) at your Pages host.