fastly.net
Number 31 of the Top 100 · Tranco rank 35
fastly.net is the domain of Fastly's content delivery network. Many large sites serve through it, and names like dualstack.….fastly.net are Fastly edge servers. Seeing it means a site you visited is served by Fastly.
Can fastly.net be forged?
Can fastly.net be forged?
Partly. Forged mail goes to the spam folder, where people still find it.
- The exact name
- quarantine · subdomains quarantine · reports to Valimail
- Names that copy
- 37 registered lookalikes can send mail. DMARC never sees them. See them →
What we noticed
- The DMARC policy sends failing mail to the spam folder. A policy of reject stops it.
Senders it names none named
- Google Workspace runs its mail hosts
These are the services the records name. A record can name a service no longer used, and a sender can sign without being named.
SPF-all · 0 of 10 lookups · 0 addresses
Refuses others · 0 of 10 lookups · 0 of 2 void lookups · 0 IPv4 addresses · 0 IPv6 blocks · Includes of its senders
Every term and include
DKIM1 key found
- google._domainkey · rsa 2048· Google Workspace
We look under the selectors of the services the records name. A domain can have keys we do not find.
Sending names 1 name, 0 at reject
| Name | Policy | SPF lookups | Reports to |
|---|---|---|---|
| www.fastly.net | quarantine (inherited) | 0 | — |
ReportsValimail
Aggregate reports (rua) go to mailto:mailauth-reports@fastly.com, mailto:dmarc_agg@vali.email. No failure reports are asked for.
Transport MTA-STS none · TLS-RPT none · BIMI none
MTA-STS asks senders to deliver to fastly.net over encrypted connections only. TLS-RPT asks for reports when they cannot. BIMI shows a logo beside mail that passes DMARC at quarantine or reject.
Read on Oct 28, 2026. Check it again yourself →
Watch your own domain's mail this way: Sender Security · the DMARC Report