Cloudflare Email Security receives mail for 12 of 9,971 popular domains we measured in November 2026. Below: the records it needs and how its customers actually set them.
MX hosts are mxa/mxb under global.inbound.cf-emailsecurity.net (or a regional equivalent) as given in the Cloudflare dashboard.
Publish a TXT record at _dmarc.<domain> once SPF and DKIM pass for all mail you send, start with p=none and a reporting address, then move to p=quarantine or p=reject:
v=DMARC1; p=reject; rua=mailto:dmarc-reports@<domain>Provider site: https://www.cloudflare.com/zero-trust/products/email-security/
12 customer domains in the sample (accent bars) compared with all 9,971 measured domains (grey bars).
The highest-ranked domains in the sample whose MX records point to Cloudflare Email Security.
Check one yourself:
Customer-specific parts replaced by <domain> and digits by <n>.
| MX host pattern | Domains |
|---|---|
mxa.global.inbound.cf-emailsecurity.net | 10 |
mxb.global.inbound.cf-emailsecurity.net | 10 |
mxa.germany.inbound.cf-emailsecurity.net | 2 |
mxb.germany.inbound.cf-emailsecurity.net | 2 |
mxa-canary.global.inbound.cf-emailsecurity.net | 1 |
mxb-canary.global.inbound.cf-emailsecurity.net | 1 |
mxb.us.inbound.cf-emailsecurity.net | 1 |
mxa.us.inbound.cf-emailsecurity.net | 1 |
Source: our own scan of November 2026 (2026-11-11), 9,971 of the top 10,000 domains of the Tranco list Y895G that answered in DNS. Method and data.