# Subnautica2Maps email / MX remediation

Time: 2026-05-21T08:53:46Z
Task: t_171f29bf
Domain: subnautica2maps.com
Public contact mailbox: hello@subnautica2maps.com

## Change applied

Configured Cloudflare Email Routing for subnautica2maps.com.

Routing rule:
- hello@subnautica2maps.com -> verified owner destination inbox (redacted: xj***@gmail.com)
- Provider: Cloudflare Email Routing
- Rule status: enabled
- Zone email routing status: enabled=true, status=ready

DNS records created by Cloudflare Email Routing:

```text
24 route2.mx.cloudflare.net.
37 route3.mx.cloudflare.net.
92 route1.mx.cloudflare.net.
TXT subnautica2maps.com "v=spf1 include:_spf.mx.cloudflare.net ~all"
TXT cf2024-1._domainkey.subnautica2maps.com "v=DKIM1; h=sha256; k=rsa; p=..."
```

## Verification

Command:

```bash
dig +short MX subnautica2maps.com @1.1.1.1
```

Output:

```text
24 route2.mx.cloudflare.net.
37 route3.mx.cloudflare.net.
92 route1.mx.cloudflare.net.
```

Command:

```bash
dig +short TXT subnautica2maps.com @1.1.1.1 | grep 'v=spf1'
```

Output:

```text
"v=spf1 include:_spf.mx.cloudflare.net ~all"
```

DKIM authoritative verification:

```bash
dig +short TXT cf2024-1._domainkey.subnautica2maps.com @nico.ns.cloudflare.com.
dig +short TXT cf2024-1._domainkey.subnautica2maps.com @coraline.ns.cloudflare.com.
```

Both authoritative Cloudflare nameservers returned the DKIM TXT record. Public resolver 1.1.1.1 had not returned DKIM at first check; this is expected propagation lag for the new TXT record.

Cloudflare API verification:

```json
{
  "email_routing": {"enabled": true, "status": "ready", "errors": null},
  "rule": {
    "match": "hello@subnautica2maps.com",
    "action": "forward",
    "destination": "verified owner inbox (redacted)",
    "enabled": true,
    "priority": 0
  }
}
```

## Smoke test

A direct SMTP socket smoke test to Cloudflare MX from this host timed out, so no end-to-end send/receive test was completed from the worker environment. DNS + Cloudflare Email Routing API status are both verified.

## Caveat

MX is already visible via 1.1.1.1. DKIM/TXT propagation may take a short window on recursive resolvers, but the record exists on both authoritative Cloudflare nameservers.