# IntoDNS.ai Everything Report: abnamro.nl

Generated: 2026-08-27T12:13:57.619Z
Canonical report URL: https://intodns.ai/api/report/snapshot/abnamro-nl-20260827121357-deca7498b552cced
Live report URL: https://intodns.ai/api/report/everything?domain=abnamro.nl
Evidence snapshot URL: https://intodns.ai/api/report/snapshot/abnamro-nl-20260827121357-deca7498b552cced
Evidence hash: deca7498b552cced59f897ae6467675149bd3a3fbcf8020213f67066ff037196

## Summary

- Grade: C
- Score: 89%
- Issues: 1
- Recommendations: 1
- Completed sections: 14
- Partial/failed sections: 0

## Sections

### Quick Scan

- Status: ok
- Duration: 1084ms

```json
{
  "domain": "abnamro.nl",
  "timestamp": "2026-08-27T12:13:53.313Z",
  "resolver": "Google Public DNS",
  "score": 89,
  "maxScore": 100,
  "percentage": 89,
  "grade": "C",
  "gradeInfo": {
    "grade": "C",
    "label": "Average",
    "color": "text-yellow-600",
    "bgColor": "bg-yellow-500",
    "description": "Adequate security, improvements recommended"
  },
  "categories": {
    "dns": {
      "score": 65,
      "maxScore": 65,
      "percentage": 100,
      "status": "pass",
      "checks": [
        {
          "id": "has_a_record",
          "name": "A record present",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "2 A record(s) found",
          "severity": "critical"
        },
        {
          "id": "has_aaaa_record",
          "name": "AAAA record present",
          "passed": true,
          "score": 15,
          "maxScore": 15,
          "details": "2 AAAA record(s) found",
          "severity": "recommended"
        },
        {
          "id": "has_mx_record",
          "name": "MX records present",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "1 MX record(s) found",
          "severity": "recommended"
        },
        {
          "id": "has_ns_record",
          "name": "NS records present",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "6 NS record(s) found",
          "severity": "critical"
        },
        {
          "id": "has_soa_record",
          "name": "SOA record present",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "SOA record found",
          "severity": "critical"
        },
        {
          "id": "multiple_ns",
          "name": "Multiple nameservers",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "6 nameservers configured ✓",
          "severity": "recommended"
        },
        {
          "id": "soa_format",
          "name": "SOA serial format",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "Serial 2009092217 (YYYYMMDDnn format)",
          "severity": "info"
        },
        {
          "id": "soa_timers",
          "name": "SOA timers valid",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "Refresh: 1800s ✓, Retry: 900s ✓, Expire: 604800s ✓",
          "severity": "info"
        },
        {
          "id": "no_lame_ns",
          "name": "No lame nameservers",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "6 NS all responding ✓",
          "severity": "info"
        },
        {
          "id": "glue_records",
          "name": "Glue records present",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "No glue needed",
          "severity": "info"
        },
        {
          "id": "www_record",
          "name": "WWW record configured",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "A record matches apex",
          "severity": "info"
        },
        {
          "id": "mx_ptr",
          "name": "MX servers have PTR records",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "8 MX IPs all have PTR records ✓",
          "severity": "recommended"
        },
        {
          "id": "mx_fcrdns",
          "name": "MX servers have FCrDNS",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "8 MX IPs have forward-confirmed reverse DNS ✓",
          "severity": "recommended"
        }
      ]
    },
    "dnssec": {
      "score": 145,
      "maxScore": 145,
      "percentage": 100,
      "status": "pass",
      "checks": [
        {
          "id": "dnssec_signed",
          "name": "DNSSEC signed",
          "passed": true,
          "score": 50,
          "maxScore": 50,
          "details": "DNSSEC is enabled ✓",
          "severity": "recommended"
        },
        {
          "id": "dnssec_valid",
          "name": "DNSSEC validation OK",
          "passed": true,
          "score": 50,
          "maxScore": 50,
          "details": "DNSSEC validates correctly ✓",
          "severity": "critical"
        },
        {
          "id": "nsec3_rfc9276",
          "name": "NSEC3 RFC 9276 compliant",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "NSEC3 iterations=0, salt=empty — RFC 9276 compliant ✓",
          "severity": "recommended"
        },
        {
          "id": "rrsig_not_expiring",
          "name": "RRSIG signatures valid",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "RRSIG signature expires in 2 days — renewal needed",
          "severity": "recommended"
        },
        {
          "id": "dnssec_modern_algorithm",
          "name": "Modern DNSSEC algorithm",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "ECDSA P-256 (algorithm 13) — modern ✓",
          "severity": "optional"
        },
        {
          "id": "ds_digest_modern",
          "name": "DS digest algorithm modern",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "DS digest: SHA-256 — modern ✓",
          "severity": "recommended"
        },
        {
          "id": "dnskey_algo_secure",
          "name": "DNSKEY algorithm secure",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "DNSKEY: ECDSA P-256 — modern ✓",
          "severity": "optional"
        },
        {
          "id": "rrsig_ttl_safe",
          "name": "RRSIG TTL safe",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "Record TTLs do not exceed RRSIG validity periods ✓",
          "severity": "recommended"
        },
        {
          "id": "chain_of_trust_complete",
          "name": "Chain of trust complete",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "Cryptographic chain validated to the root trust anchor with local BIND delv ✓",
          "severity": "critical"
        }
      ]
    },
    "ipv6": {
      "score": 100,
      "maxScore": 100,
      "percentage": 100,
      "status": "pass",
      "checks": [
        {
          "id": "ipv6_website",
          "name": "Website reachable via IPv6",
          "passed": true,
          "score": 40,
          "maxScore": 40,
          "details": "2 AAAA record(s) ✓",
          "severity": "recommended"
        },
        {
          "id": "ipv6_mail",
          "name": "Mail servers publish IPv6",
          "passed": true,
          "score": 30,
          "maxScore": 30,
          "details": "1/1 MX server(s) publish IPv6 ✓",
          "severity": "recommended"
        },
        {
          "id": "ipv6_nameservers",
          "name": "Nameservers reachable via IPv6",
          "passed": true,
          "score": 30,
          "maxScore": 30,
          "details": "6/6 NS server(s) with IPv6 ✓",
          "severity": "recommended"
        }
      ]
    },
    "email": {
      "score": 175,
      "maxScore": 200,
      "percentage": 88,
      "status": "pass",
      "checks": [
        {
          "id": "spf_exists",
          "name": "SPF record present",
          "passed": true,
          "score": 15,
          "maxScore": 15,
          "details": "v=spf1 include:spf.protection.outlook.com include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email -all",
          "severity": "critical"
        },
        {
          "id": "spf_valid",
          "name": "SPF syntax valid",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "SPF syntax is correct ✓",
          "severity": "critical"
        },
        {
          "id": "spf_strict",
          "name": "SPF policy strict (-all)",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "SPF uses -all (hard fail) ✓",
          "severity": "recommended"
        },
        {
          "id": "dkim_found",
          "name": "DKIM found",
          "passed": true,
          "score": 20,
          "maxScore": 20,
          "details": "DKIM selector: selector1 ✓",
          "severity": "recommended"
        },
        {
          "id": "dmarc_exists",
          "name": "DMARC record present",
          "passed": true,
          "score": 15,
          "maxScore": 15,
          "details": "v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email; ruf=mailto:dmarc2@nl.abnamro.com; fo=1",
          "severity": "recommended"
        },
        {
          "id": "dmarc_quarantine",
          "name": "DMARC policy quarantine or better",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "DMARC policy: reject ✓",
          "severity": "recommended"
        },
        {
          "id": "dmarc_reject",
          "name": "DMARC policy reject",
          "passed": true,
          "score": 20,
          "maxScore": 20,
          "details": "DMARC policy: reject ✓",
          "severity": "optional"
        },
        {
          "id": "bimi_exists",
          "name": "BIMI record present",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No BIMI record. Add TXT at default._bimi with logo URL (requires DMARC p=quarantine+)",
          "severity": "optional"
        },
        {
          "id": "bimi_valid",
          "name": "BIMI configuration valid",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No BIMI configured",
          "severity": "optional"
        },
        {
          "id": "mta_sts_exists",
          "name": "MTA-STS record present",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No MTA-STS. Add TXT at _mta-sts and host policy at /.well-known/mta-sts.txt",
          "severity": "optional"
        },
        {
          "id": "mta_sts_enforced",
          "name": "MTA-STS policy enforced",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "MTA-STS not configured",
          "severity": "optional"
        },
        {
          "id": "mx_valid",
          "name": "MX records valid",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "1 MX record(s) ✓",
          "severity": "critical"
        },
        {
          "id": "mx_dnssec_signed",
          "name": "MX domains use DNSSEC",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "1/1 MX domain(s) use DNSSEC ✓",
          "severity": "recommended"
        },
        {
          "id": "mx_dnssec_valid",
          "name": "MX DNSSEC validation OK",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "MX DNSSEC validates correctly ✓",
          "severity": "recommended"
        },
        {
          "id": "not_blacklisted",
          "name": "Mail servers not blacklisted",
          "passed": true,
          "score": 25,
          "maxScore": 25,
          "details": "1 MX server(s) checked against 16 blacklists - clean ✓",
          "severity": "critical"
        },
        {
          "id": "no_critical_blacklist",
          "name": "No critical blacklist listings",
          "passed": true,
          "score": 20,
          "maxScore": 20,
          "details": "No blacklist listings ✓",
          "severity": "critical"
        }
      ]
    },
    "security": {
      "score": 155,
      "maxScore": 235,
      "percentage": 66,
      "status": "warning",
      "checks": [
        {
          "id": "has_caa",
          "name": "CAA records present",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "6 CAA record(s) ✓",
          "severity": "recommended"
        },
        {
          "id": "caa_strict",
          "name": "CAA policy strict",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "CAA limits certificate authorities ✓",
          "severity": "optional"
        },
        {
          "id": "has_tlsa",
          "name": "TLSA records (DANE)",
          "passed": true,
          "score": 20,
          "maxScore": 20,
          "details": "4 DANE record(s) - configured according to best practices",
          "severity": "optional"
        },
        {
          "id": "tlsa_valid",
          "name": "DANE configuration valid",
          "passed": true,
          "score": 15,
          "maxScore": 15,
          "details": "DANE records meet best practices ✓",
          "severity": "optional"
        },
        {
          "id": "no_txt_leakage",
          "name": "No sensitive info in TXT",
          "passed": true,
          "score": 20,
          "maxScore": 20,
          "details": "No sensitive data leaked ✓",
          "severity": "critical"
        },
        {
          "id": "verification_records_review",
          "name": "Verification records reviewed",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "4 verification record(s): Google, Apple, Microsoft 365, Facebook/Meta. Consider if all are still needed",
          "severity": "info"
        },
        {
          "id": "https_available",
          "name": "HTTPS available",
          "passed": true,
          "score": 25,
          "maxScore": 25,
          "details": "HTTPS working (status 503) ✓",
          "severity": "critical"
        },
        {
          "id": "valid_certificate",
          "name": "Valid certificate",
          "passed": true,
          "score": 25,
          "maxScore": 25,
          "details": "Certificate chain is valid and trusted ✓",
          "severity": "critical"
        },
        {
          "id": "https_redirect",
          "name": "HTTP redirects to HTTPS",
          "passed": false,
          "score": 0,
          "maxScore": 15,
          "details": "HTTP does not redirect to HTTPS. Add redirect in web server config",
          "severity": "critical"
        },
        {
          "id": "hsts_enabled",
          "name": "HSTS enabled",
          "passed": true,
          "score": 15,
          "maxScore": 15,
          "details": "HSTS enabled (max-age=31536000) ✓",
          "severity": "recommended"
        },
        {
          "id": "hsts_long_max_age",
          "name": "HSTS max-age >= 1 year",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "max-age=31536000 (≥1 year) ✓",
          "severity": "optional"
        },
        {
          "id": "x_frame_options",
          "name": "X-Frame-Options header",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "No X-Frame-Options header. Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking",
          "severity": "recommended"
        },
        {
          "id": "x_content_type_options",
          "name": "X-Content-Type-Options header",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "No X-Content-Type-Options header. Add X-Content-Type-Options: nosniff to prevent MIME sniffing",
          "severity": "recommended"
        },
        {
          "id": "content_security_policy",
          "name": "Content-Security-Policy header",
          "passed": false,
          "score": 0,
          "maxScore": 15,
          "details": "No Content-Security-Policy header. Add CSP to prevent XSS and other injection attacks",
          "severity": "recommended"
        },
        {
          "id": "referrer_policy",
          "name": "Referrer-Policy header",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "No Referrer-Policy header. Add Referrer-Policy: strict-origin-when-cross-origin",
          "severity": "recommended"
        },
        {
          "id": "security_txt_exists",
          "name": "security.txt present",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No security.txt. Create /.well-known/security.txt with Contact and Expires fields (RFC 9116)",
          "severity": "optional"
        },
        {
          "id": "security_txt_valid",
          "name": "security.txt valid",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No security.txt configured",
          "severity": "optional"
        },
        {
          "id": "http3_supported",
          "name": "HTTP/3 (QUIC) supported",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No HTTP/3 support detected\n\nNo h3 in Alt-Svc header\nNo HTTPS DNS record (type 65)\nQUIC probe inconclusive (Inconclusive - no QUIC reply (trigger may be dropped or UDP/443 filtered)) — not a negative signal",
          "severity": "optional"
        },
        {
          "id": "http3_quic_reachable",
          "name": "QUIC UDP reachable",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "QUIC probe inconclusive (no reply — trigger may be dropped or UDP/443 filtered). Not a negative signal; h3 is judged from Alt-Svc / HTTPS record",
          "severity": "info"
        },
        {
          "id": "https_dns_record",
          "name": "HTTPS DNS record (SVCB)",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No HTTPS DNS record (type 65). Add HTTPS record for faster HTTP/3 discovery: abnamro.nl IN HTTPS 1 . alpn=\"h3,h2\"",
          "severity": "optional"
        }
      ]
    }
  },
  "issues": [
    {
      "citationUrl": "https://intodns.ai/citations/how-to-check-domain-email-security",
      "apiUrl": "https://intodns.ai/api/scan/quick?domain=abnamro.nl",
      "id": "no_http3",
      "severity": "info",
      "category": "security",
      "title": "No HTTP/3 (QUIC) support",
      "description": "HTTP/3 uses QUIC for faster, more resilient connections. Enable it on your web server and open UDP/443 in your firewall",
      "fixable": true
    }
  ],
  "recommendations": [
    {
      "citationUrl": "https://intodns.ai/citations/how-to-check-domain-email-security",
      "apiUrl": "https://intodns.ai/api/scan/quick?domain=abnamro.nl",
      "id": "no_http3",
      "priority": 10,
      "title": "Enable HTTP/3 (QUIC)",
      "description": "Enable HTTP/3 for faster page loads and improved connection resilience.\n\nNginx: add \"listen 443 quic reuseport;\" and \"add_header Alt-Svc 'h3=\":443\"; ma=86400'\".\nCaddy: HTTP/3 is enabled by default.\nCloudflare: Enable under Speed → Protocol Optimization.\n\nAlso add an HTTPS DNS record: example.com IN HTTPS 1 . alpn=\"h3,h2\"\nEnsure UDP port 443 is open in your firewall (QUIC uses UDP, not TCP).",
      "impact": "Faster page loads (0-RTT), better mobile performance, and connection migration between networks"
    }
  ],
  "domainInfo": {
    "apexDomain": "abnamro.nl",
    "isSubdomain": false
  },
  "mailInheritedFromApex": false
}
```

### DNS Records

- Status: ok
- Duration: 150ms

```json
{
  "A": [
    {
      "type": "A",
      "name": "abnamro.nl.",
      "ttl": 20,
      "data": "2.16.6.132"
    },
    {
      "type": "A",
      "name": "abnamro.nl.",
      "ttl": 20,
      "data": "2.16.6.141"
    }
  ],
  "AAAA": [
    {
      "type": "AAAA",
      "name": "abnamro.nl.",
      "ttl": 20,
      "data": "2a02:26f0:1180:32::210:68d"
    },
    {
      "type": "AAAA",
      "name": "abnamro.nl.",
      "ttl": 20,
      "data": "2a02:26f0:1180:32::210:684"
    }
  ],
  "MX": [
    {
      "type": "MX",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "10 abnamro-nl.o-v1.mx.microsoft."
    }
  ],
  "NS": [
    {
      "type": "NS",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "a16-66.akam.net."
    },
    {
      "type": "NS",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "a20-67.akam.net."
    },
    {
      "type": "NS",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "a7-65.akam.net."
    },
    {
      "type": "NS",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "a9-66.akam.net."
    },
    {
      "type": "NS",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "a1-47.akam.net."
    },
    {
      "type": "NS",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "a4-64.akam.net."
    }
  ],
  "TXT": [
    {
      "type": "TXT",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "google-site-verification=u6lnC9ps_-dZlnUO9t6338U6SI26EClp_ot_atFIv1s"
    },
    {
      "type": "TXT",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "google-site-verification=gTVXzy5AKjJXPQJ6IUN30iaGuzJTEmmqM1qyB7e4nm0"
    },
    {
      "type": "TXT",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "apple-domain-verification=hCpOjduisBoMN7rV"
    },
    {
      "type": "TXT",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "1de1f07f-ae4a-4d87-90ec-f743e30783d8"
    },
    {
      "type": "TXT",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "0de79250-2d69-4a1a-8068-fe6794c67555-05072018"
    },
    {
      "type": "TXT",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "google-site-verification=rek3LlAZWt8AnpMYPvahjqdNf1xCvkbCZ8vVOrlnOlg"
    },
    {
      "type": "TXT",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "MS=ms46102912"
    },
    {
      "type": "TXT",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "ABN AMRO Bank Nederland"
    },
    {
      "type": "TXT",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "dtm-domain-verification=eWgzAKJk7qXUmgUO7gsJLZXe0YqR-uWmem5GAwEDZ08"
    },
    {
      "type": "TXT",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "v=spf1 include:spf.protection.outlook.com include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email -all"
    },
    {
      "type": "TXT",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "facebook-domain-verification=3e7i6b3rp25mbxg145986ub6f7husd"
    },
    {
      "type": "TXT",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "dtm-domain-verification=jeGCF6gYhaTi_NbqB0p5LRYlFjpf_bzzWXijKqaIl18"
    }
  ],
  "SOA": [
    {
      "type": "SOA",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "a1-47.akam.net. domainmanagement.nl.abnamro.com. 2009092217 1800 900 604800 600"
    }
  ],
  "CAA": [
    {
      "type": "CAA",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "0 issue \"kpn.com\""
    },
    {
      "type": "CAA",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "0 contactemail \"domainmanagement@nl.abnamro.com\""
    },
    {
      "type": "CAA",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "0 issuewild \";\""
    },
    {
      "type": "CAA",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "0 iodef \"mailto:domainmanagement@nl.abnamro.com\""
    },
    {
      "type": "CAA",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "0 issue \"sectigo.com\""
    },
    {
      "type": "CAA",
      "name": "abnamro.nl.",
      "ttl": 300,
      "data": "0 issue \"entrust.net\""
    }
  ]
}
```

### DNSsec

- Status: ok
- Duration: 133ms

```json
{
  "domain": "abnamro.nl",
  "signed": true,
  "valid": true,
  "chain": [
    {
      "domain": "abnamro.nl.",
      "algorithm": 13,
      "digestType": 0,
      "digest": "",
      "flags": 257,
      "protocol": 3,
      "publicKey": "Xq2gBOfp9A4AEeIz7LNleMCA2wjz6LrzpsLoPFn+krvJn9QTkzPL0FLbLSuy2Ix7/PCyktw0k9q8ayL7JvuzWQ=="
    },
    {
      "domain": "abnamro.nl.",
      "algorithm": 13,
      "digestType": 0,
      "digest": "",
      "flags": 257,
      "protocol": 3,
      "publicKey": "I5jcpk4nVywuSf/ioYgmyNOSe/xysqmTtxVcpGJ0iQS4k4x2W6ButLc13MgMPWpt+921dCOjZgW3hGsv/m3G9g=="
    },
    {
      "domain": "abnamro.nl.",
      "algorithm": 13,
      "digestType": 0,
      "digest": "",
      "flags": 256,
      "protocol": 3,
      "publicKey": "t8nf9R9ES210K2uPzdiXCulNpCT1W9akbDfMOw7suKNt+akvJLxMkga5i7fkbDQ9rrfHFYPoafHNqavp54q6nw=="
    },
    {
      "domain": "abnamro.nl.",
      "algorithm": 13,
      "digestType": 0,
      "digest": "",
      "flags": 256,
      "protocol": 3,
      "publicKey": "l8jMUeck1gL0TGe3LTobktFzfclGeFVhjz1FTIFaEWFadeyJRXKY3bK55k3nczUVdZbN1Q55hEHPhH5TtWEqcQ=="
    },
    {
      "domain": "abnamro.nl.",
      "algorithm": 13,
      "digestType": 2,
      "digest": "BD61905834F224007E2C9011C58DCD7568D300BB1BF7A6CD22D87A6EA4DDEDA4"
    }
  ],
  "errors": [],
  "validationState": "secure",
  "validationMethod": "local-delv",
  "chainValidated": true,
  "validatorEvidence": [
    {
      "validator": "BIND delv",
      "resolver": "1.1.1.1",
      "state": "secure",
      "localCryptographicValidation": true
    },
    {
      "validator": "Google Public DNS",
      "resolver": "https://dns.google/resolve",
      "state": "secure",
      "localCryptographicValidation": false,
      "ad": true,
      "dnsStatus": 0
    },
    {
      "validator": "Cloudflare 1.1.1.1",
      "resolver": "https://cloudflare-dns.com/dns-query",
      "state": "secure",
      "localCryptographicValidation": false,
      "ad": true,
      "dnsStatus": 0
    }
  ],
  "nsec3param": {
    "exists": true,
    "hashAlgorithm": 1,
    "flags": 0,
    "iterations": 0,
    "salt": "-",
    "rfc9276Compliant": true,
    "issues": []
  },
  "rrsig": {
    "exists": true,
    "records": [
      {
        "typeCovered": "A",
        "algorithm": 13,
        "labels": 2,
        "originalTTL": 20,
        "expiration": "2026-08-30T09:54:50.000Z",
        "inception": "2026-08-27T08:54:50.000Z",
        "keyTag": 64301,
        "signerName": "abnamro.nl",
        "daysUntilExpiry": 2,
        "isExpired": false,
        "isNotYetValid": false
      }
    ],
    "algorithmSecurity": "modern",
    "issues": [
      {
        "message": "RRSIG for A expires in 2 day(s) — short-lived, normal for auto-managed DNSSEC (e.g. Cloudflare)",
        "severity": "info"
      }
    ]
  }
}
```

### Dane TLSA

- Status: ok
- Duration: 201ms

```json
{
  "exists": true,
  "records": [
    {
      "usage": 2,
      "selector": 0,
      "matchingType": 1,
      "certificateData": "c1ad7778796d20bca65c889a2655021156528bb62ff5fa43e1b8e5a83e3d2eaa",
      "usageDescription": "DANE-TA: Trust anchor assertion",
      "selectorDescription": "Full certificate",
      "matchingTypeDescription": "SHA-256 hash"
    },
    {
      "usage": 3,
      "selector": 1,
      "matchingType": 1,
      "certificateData": "54883cc5f1849331e6bf5002c3129d2020bfb60937e7389b363bb01b91f3d096",
      "usageDescription": "DANE-EE: Domain-issued certificate",
      "selectorDescription": "SubjectPublicKeyInfo",
      "matchingTypeDescription": "SHA-256 hash"
    },
    {
      "usage": 3,
      "selector": 1,
      "matchingType": 1,
      "certificateData": "803f7447cc75b208dbca042346f5d8df3f542f1d062f4c90a7ec9f2c86211c1b",
      "usageDescription": "DANE-EE: Domain-issued certificate",
      "selectorDescription": "SubjectPublicKeyInfo",
      "matchingTypeDescription": "SHA-256 hash"
    },
    {
      "usage": 2,
      "selector": 0,
      "matchingType": 1,
      "certificateData": "ea7a25255d111fc3ce4cb8fabe3adf9c27bbe6db203f955066bab4c5a71f3d08",
      "usageDescription": "DANE-TA: Trust anchor assertion",
      "selectorDescription": "Full certificate",
      "matchingTypeDescription": "SHA-256 hash"
    }
  ],
  "valid": true,
  "issues": [
    "Best practice is DANE-EE (usage 3) for complete control",
    "Best practice is SubjectPublicKeyInfo (selector 1) for key rotation flexibility",
    "Best practice is DANE-EE (usage 3) for complete control",
    "Best practice is SubjectPublicKeyInfo (selector 1) for key rotation flexibility"
  ],
  "errors": [],
  "advisories": [
    "Best practice is DANE-EE (usage 3) for complete control",
    "Best practice is SubjectPublicKeyInfo (selector 1) for key rotation flexibility",
    "Best practice is DANE-EE (usage 3) for complete control",
    "Best practice is SubjectPublicKeyInfo (selector 1) for key rotation flexibility"
  ]
}
```

### Mx Reverse DNS

- Status: ok
- Duration: 347ms

```json
{
  "checked": true,
  "results": [
    {
      "mx": "abnamro-nl.o-v1.mx.microsoft",
      "mxHosts": [
        "abnamro-nl.o-v1.mx.microsoft"
      ],
      "ip": "52.101.103.140",
      "ipVersion": 4,
      "ptr": "mail-miypr02cu00204.inbound.protection.outlook.com",
      "ptrs": [
        "mail-miypr02cu00204.inbound.protection.outlook.com"
      ],
      "matches": false,
      "ptrMatchesMx": false,
      "forwardAddresses": [
        "52.101.103.140"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "abnamro-nl.o-v1.mx.microsoft",
      "mxHosts": [
        "abnamro-nl.o-v1.mx.microsoft"
      ],
      "ip": "52.101.73.28",
      "ipVersion": 4,
      "ptr": "mail-am7pr05cu00204.inbound.protection.outlook.com",
      "ptrs": [
        "mail-am7pr05cu00204.inbound.protection.outlook.com"
      ],
      "matches": false,
      "ptrMatchesMx": false,
      "forwardAddresses": [
        "52.101.73.28"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "abnamro-nl.o-v1.mx.microsoft",
      "mxHosts": [
        "abnamro-nl.o-v1.mx.microsoft"
      ],
      "ip": "52.101.73.24",
      "ipVersion": 4,
      "ptr": "mail-as8pr05cu00300.inbound.protection.outlook.com",
      "ptrs": [
        "mail-as8pr05cu00300.inbound.protection.outlook.com"
      ],
      "matches": false,
      "ptrMatchesMx": false,
      "forwardAddresses": [
        "52.101.73.24"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "abnamro-nl.o-v1.mx.microsoft",
      "mxHosts": [
        "abnamro-nl.o-v1.mx.microsoft"
      ],
      "ip": "52.101.68.3",
      "ipVersion": 4,
      "ptr": "mail-db7pr03cu00403.inbound.protection.outlook.com",
      "ptrs": [
        "mail-db7pr03cu00403.inbound.protection.outlook.com"
      ],
      "matches": false,
      "ptrMatchesMx": false,
      "forwardAddresses": [
        "52.101.68.3"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "abnamro-nl.o-v1.mx.microsoft",
      "mxHosts": [
        "abnamro-nl.o-v1.mx.microsoft"
      ],
      "ip": "2a01:111:f403:ca04::a",
      "ipVersion": 6,
      "ptr": "mail-du0pr03cu00102.inbound.protection.outlook.com",
      "ptrs": [
        "mail-du0pr03cu00102.inbound.protection.outlook.com"
      ],
      "matches": false,
      "ptrMatchesMx": false,
      "forwardAddresses": [
        "2a01:111:f403:ca04::a"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "abnamro-nl.o-v1.mx.microsoft",
      "mxHosts": [
        "abnamro-nl.o-v1.mx.microsoft"
      ],
      "ip": "2a01:111:f403:ca09::26",
      "ipVersion": 6,
      "ptr": "mail-am8pr83cu00106.inbound.protection.outlook.com",
      "ptrs": [
        "mail-am8pr83cu00106.inbound.protection.outlook.com"
      ],
      "matches": false,
      "ptrMatchesMx": false,
      "forwardAddresses": [
        "52.101.73.126",
        "2a01:111:f403:ca09::26"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "abnamro-nl.o-v1.mx.microsoft",
      "mxHosts": [
        "abnamro-nl.o-v1.mx.microsoft"
      ],
      "ip": "2a01:111:f403:ca09::e",
      "ipVersion": 6,
      "ptr": "mail-am7pr05cu00206.inbound.protection.outlook.com",
      "ptrs": [
        "mail-am7pr05cu00206.inbound.protection.outlook.com"
      ],
      "matches": false,
      "ptrMatchesMx": false,
      "forwardAddresses": [
        "2a01:111:f403:ca09::e"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "abnamro-nl.o-v1.mx.microsoft",
      "mxHosts": [
        "abnamro-nl.o-v1.mx.microsoft"
      ],
      "ip": "2a01:111:f403:ca09::2",
      "ipVersion": 6,
      "ptr": "mail-am0pr83cu00402.inbound.protection.outlook.com",
      "ptrs": [
        "mail-am0pr83cu00402.inbound.protection.outlook.com"
      ],
      "matches": false,
      "ptrMatchesMx": false,
      "forwardAddresses": [
        "2a01:111:f403:ca09::2"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    }
  ],
  "issues": []
}
```

### SPF

- Status: ok
- Duration: 330ms

```json
{
  "exists": true,
  "record": "v=spf1 include:spf.protection.outlook.com include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email -all",
  "valid": false,
  "policy": "fail",
  "lookups": 2,
  "issues": [
    "Invalid mechanism: include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email"
  ],
  "includes": [
    "spf.protection.outlook.com",
    "%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email"
  ],
  "mechanisms": [
    "include:spf.protection.outlook.com",
    "include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email",
    "-all"
  ],
  "lookupGraph": {
    "domain": "abnamro.nl",
    "record": "v=spf1 include:spf.protection.outlook.com include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email -all",
    "exists": true,
    "mechanisms": [
      {
        "mechanism": "include:spf.protection.outlook.com",
        "type": "include",
        "qualifier": null,
        "target": "spf.protection.outlook.com",
        "dnsLookup": true
      },
      {
        "mechanism": "include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email",
        "type": "include",
        "qualifier": null,
        "target": "%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email",
        "dnsLookup": true
      },
      {
        "mechanism": "-all",
        "type": "all",
        "qualifier": "-",
        "target": null,
        "dnsLookup": false
      }
    ],
    "directLookups": 2,
    "totalLookups": 2,
    "includes": [
      {
        "domain": "spf.protection.outlook.com",
        "record": "v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all",
        "exists": true,
        "mechanisms": [
          {
            "mechanism": "ip4:40.92.0.0/15",
            "type": "ip4",
            "qualifier": null,
            "target": "40.92.0.0/15",
            "dnsLookup": false
          },
          {
            "mechanism": "ip4:40.107.0.0/16",
            "type": "ip4",
            "qualifier": null,
            "target": "40.107.0.0/16",
            "dnsLookup": false
          },
          {
            "mechanism": "ip4:52.100.0.0/15",
            "type": "ip4",
            "qualifier": null,
            "target": "52.100.0.0/15",
            "dnsLookup": false
          },
          {
            "mechanism": "ip4:52.102.0.0/16",
            "type": "ip4",
            "qualifier": null,
            "target": "52.102.0.0/16",
            "dnsLookup": false
          },
          {
            "mechanism": "ip4:52.103.0.0/17",
            "type": "ip4",
            "qualifier": null,
            "target": "52.103.0.0/17",
            "dnsLookup": false
          },
          {
            "mechanism": "ip4:104.47.0.0/17",
            "type": "ip4",
            "qualifier": null,
            "target": "104.47.0.0/17",
            "dnsLookup": false
          },
          {
            "mechanism": "ip6:2a01:111:f400::/48",
            "type": "ip6",
            "qualifier": null,
            "target": "2a01:111:f400::/48",
            "dnsLookup": false
          },
          {
            "mechanism": "ip6:2a01:111:f403::/49",
            "type": "ip6",
            "qualifier": null,
            "target": "2a01:111:f403::/49",
            "dnsLookup": false
          },
          {
            "mechanism": "ip6:2a01:111:f403:8000::/51",
            "type": "ip6",
            "qualifier": null,
            "target": "2a01:111:f403:8000::/51",
            "dnsLookup": false
          },
          {
            "mechanism": "ip6:2a01:111:f403:c000::/51",
            "type": "ip6",
            "qualifier": null,
            "target": "2a01:111:f403:c000::/51",
            "dnsLookup": false
          },
          {
            "mechanism": "ip6:2a01:111:f403:f000::/52",
            "type": "ip6",
            "qualifier": null,
            "target": "2a01:111:f403:f000::/52",
            "dnsLookup": false
          },
          {
            "mechanism": "-all",
            "type": "all",
            "qualifier": "-",
            "target": null,
            "dnsLookup": false
          }
        ],
        "directLookups": 0,
        "totalLookups": 0,
        "includes": [],
        "redirect": null,
        "cycle": false,
        "issues": []
      },
      {
        "domain": "%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email",
        "record": "v=spf1 -all",
        "exists": true,
        "mechanisms": [
          {
            "mechanism": "-all",
            "type": "all",
            "qualifier": "-",
            "target": null,
            "dnsLookup": false
          }
        ],
        "directLookups": 0,
        "totalLookups": 0,
        "includes": [],
        "redirect": null,
        "cycle": false,
        "issues": []
      }
    ],
    "redirect": null,
    "cycle": false,
    "issues": []
  },
  "flattened": {
    "record": "v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all",
    "mechanismCount": 12,
    "warnings": [
      "Flattening is usually not needed because this SPF record is within the 10-lookup limit"
    ]
  }
}
```

### DKIM

- Status: ok
- Duration: 486ms

```json
{
  "selectorsChecked": [
    "default",
    "dkim",
    "mail",
    "selector1",
    "selector2",
    "k1",
    "s1",
    "s2",
    "x",
    "sig1",
    "google",
    "selector1-azurecomm-prod-net",
    "selector2-azurecomm-prod-net",
    "amazonses",
    "mandrill",
    "mailchimp",
    "sendgrid",
    "sg",
    "smtpapi",
    "mg",
    "mx",
    "pm",
    "postmark",
    "sib",
    "hs1",
    "hs2",
    "kl",
    "klaviyo",
    "dk",
    "zoho",
    "zm",
    "1024",
    "fm1",
    "fm2",
    "fm3",
    "protonmail",
    "protonmail2",
    "protonmail3",
    "mimecast20190301",
    "pphosted",
    "proofpoint",
    "mailfilter",
    "cobytes",
    "hetzner",
    "ovh",
    "transip",
    "everlytickey1",
    "mxvault",
    "mailjet",
    "sparkpost"
  ],
  "found": [
    "selector1"
  ],
  "records": {
    "selector1": {
      "selector": "selector1",
      "record": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqSl5MVksXvDFRZAUJlWMg5iARcJhpV4MGohmzkM887snaa0eHeTahqqv9eBWYLTQrq7GUH+K2nXAjWwfy8/BKafJ7c/amYfWZ3U96C1ecnNLgH/1wRJp6H4QQvxYgXYofgBYbnn0dU6wdg2m+Dnk/N/jnFTMRoYrXQ1gNC23MfRADukVm7wjM6x9MonZMcKN36W4Brrq8kqhDU/7O2/skdE0KIFE9Hx6vSjEnVgfWOniH44gVv67Cb4DmZu+Y+RY2mLNj2IG2KAV1j3Cv0zdt7B8pnGrg1c0Lp892GQj73prhpjdF2U1PORFpVGCfz8BVNL006/koeHZgQLa1JP4QIDAQAB;",
      "version": "DKIM1",
      "keyType": "rsa",
      "publicKey": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqSl5MVksXvDFRZAUJlWMg5iARcJhpV4MGohmzkM887snaa0eHeTahqqv9eBWYLTQrq7GUH+K2nXAjWwfy8/BKafJ7c/amYfWZ3U96C1ecnNLgH/1wRJp6H4QQvxYgXYofgBYbnn0dU6wdg2m+Dnk/N/jnFTMRoYrXQ1gNC23MfRADukVm7wjM6x9MonZMcKN36W4Brrq8kqhDU/7O2/skdE0KIFE9Hx6vSjEnVgfWOniH44gVv67Cb4DmZu+Y+RY2mLNj2IG2KAV1j3Cv0zdt7B8pnGrg1c0Lp892GQj73prhpjdF2U1PORFpVGCfz8BVNL006/koeHZgQLa1JP4QIDAQAB",
      "valid": true,
      "issues": []
    }
  },
  "discovery": {
    "mode": "heuristic",
    "conclusiveForCheckedSelectors": true,
    "conclusiveForDomain": false,
    "note": "Heuristic lookup of common selectors. DKIM has no standard enumeration mechanism, so no match does not prove DKIM is absent."
  }
}
```

### DMARC

- Status: ok
- Duration: 117ms

```json
{
  "exists": true,
  "valid": true,
  "record": "v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email; ruf=mailto:dmarc2@nl.abnamro.com; fo=1",
  "policy": "reject",
  "subdomainPolicy": "reject",
  "percentage": 100,
  "reportingEnabled": true,
  "rua": [
    "mailto:dmarc_agg@vali.email"
  ],
  "ruf": [
    "mailto:dmarc2@nl.abnamro.com"
  ],
  "issues": []
}
```

### BIMI

- Status: ok
- Duration: 110ms

```json
{
  "exists": false,
  "record": null,
  "valid": false,
  "logoUrl": null,
  "authorityUrl": null,
  "issues": [
    "No BIMI record found at default._bimi.abnamro.nl"
  ]
}
```

### MTA-STS

- Status: ok
- Duration: 122ms

```json
{
  "exists": false,
  "record": null,
  "policyId": null,
  "policy": null,
  "policyUrl": "https://mta-sts.abnamro.nl/.well-known/mta-sts.txt",
  "valid": false,
  "issues": [
    "No MTA-STS TXT record found at _mta-sts.abnamro.nl"
  ]
}
```

### SMTP STARTTLS

- Status: ok
- Duration: 5356ms

```json
{
  "domain": "abnamro.nl",
  "checked": true,
  "checkedAt": "2026-08-27T12:13:52.385Z",
  "mxRecords": [
    {
      "exchange": "abnamro-nl.o-v1.mx.microsoft",
      "priority": 10
    }
  ],
  "servers": [
    {
      "mx": "abnamro-nl.o-v1.mx.microsoft",
      "priority": 10,
      "reachable": false,
      "banner": null,
      "ehloResponse": [],
      "capabilities": [],
      "startTlsSupported": false,
      "startTlsAccepted": false,
      "tls": {
        "established": false,
        "protocol": null,
        "authorized": false,
        "authorizationError": null,
        "hostnameMatches": false,
        "hostnameError": null,
        "certificate": null
      },
      "reverseDns": {
        "ips": [
          "52.101.103.140",
          "52.101.73.28",
          "52.101.73.24",
          "52.101.68.3",
          "2a01:111:f403:ca04::a",
          "2a01:111:f403:ca09::26",
          "2a01:111:f403:ca09::e",
          "2a01:111:f403:ca09::2"
        ],
        "passed": 8,
        "total": 8,
        "details": [
          {
            "ip": "52.101.103.140",
            "ptrs": [
              "mail-miypr02cu00204.inbound.protection.outlook.com"
            ],
            "forwardAddresses": [
              "52.101.103.140"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "52.101.73.28",
            "ptrs": [
              "mail-am7pr05cu00204.inbound.protection.outlook.com"
            ],
            "forwardAddresses": [
              "52.101.73.28"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "52.101.73.24",
            "ptrs": [
              "mail-as8pr05cu00300.inbound.protection.outlook.com"
            ],
            "forwardAddresses": [
              "52.101.73.24"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "52.101.68.3",
            "ptrs": [
              "mail-db7pr03cu00403.inbound.protection.outlook.com"
            ],
            "forwardAddresses": [
              "52.101.68.3"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "2a01:111:f403:ca04::a",
            "ptrs": [
              "mail-du0pr03cu00102.inbound.protection.outlook.com"
            ],
            "forwardAddresses": [
              "2a01:111:f403:ca04::a"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "2a01:111:f403:ca09::26",
            "ptrs": [
              "mail-am8pr83cu00106.inbound.protection.outlook.com"
            ],
            "forwardAddresses": [
              "52.101.73.126",
              "2a01:111:f403:ca09::26"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "2a01:111:f403:ca09::e",
            "ptrs": [
              "mail-am7pr05cu00206.inbound.protection.outlook.com"
            ],
            "forwardAddresses": [
              "2a01:111:f403:ca09::e"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "2a01:111:f403:ca09::2",
            "ptrs": [
              "mail-am0pr83cu00402.inbound.protection.outlook.com"
            ],
            "forwardAddresses": [
              "2a01:111:f403:ca09::2"
            ],
            "forwardConfirmed": true
          }
        ]
      },
      "durationMs": 5012,
      "error": "TCP connection timed out after 5000ms"
    }
  ],
  "summary": {
    "totalServers": 1,
    "reachable": 0,
    "startTlsSupported": 0,
    "tlsEstablished": 0,
    "validCertificates": 0,
    "hostnameMatches": 0,
    "fcrdnsPassed": 1
  },
  "issues": [
    "abnamro-nl.o-v1.mx.microsoft is not reachable on SMTP port 25: TCP connection timed out after 5000ms"
  ]
}
```

### Blacklist

- Status: ok
- Duration: 1669ms

```json
{
  "domain": "abnamro.nl",
  "mailServers": [
    {
      "hostname": "abnamro-nl.o-v1.mx.microsoft",
      "ip": "52.101.68.25",
      "blacklistResult": {
        "ip": "52.101.68.25",
        "listed": false,
        "blacklists": [
          {
            "name": "Spamhaus ZEN",
            "zone": "zen.spamhaus.org",
            "severity": "critical",
            "removalUrl": "https://check.spamhaus.org",
            "estimatedRemovalTime": "1-2 days",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Spamhaus SBL",
            "zone": "sbl.spamhaus.org",
            "severity": "critical",
            "removalUrl": "https://check.spamhaus.org",
            "estimatedRemovalTime": "1-2 days",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Spamhaus XBL",
            "zone": "xbl.spamhaus.org",
            "severity": "critical",
            "removalUrl": "https://check.spamhaus.org",
            "estimatedRemovalTime": "Auto after cleanup",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Spamhaus PBL",
            "zone": "pbl.spamhaus.org",
            "severity": "critical",
            "removalUrl": "https://check.spamhaus.org/listed/",
            "estimatedRemovalTime": "Self-service removal",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SpamCop",
            "zone": "bl.spamcop.net",
            "severity": "high",
            "removalUrl": "https://www.spamcop.net/bl.shtml",
            "estimatedRemovalTime": "24h auto / 4h manual",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Barracuda BRBL",
            "zone": "b.barracudacentral.org",
            "severity": "high",
            "removalUrl": "https://www.barracudacentral.org/rbl/removal-request",
            "estimatedRemovalTime": "~12 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "PSBL",
            "zone": "psbl.surriel.com",
            "severity": "high",
            "removalUrl": "https://psbl.org/remove",
            "estimatedRemovalTime": "Instant",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SORBS",
            "zone": "dnsbl.sorbs.net",
            "severity": "medium",
            "removalUrl": "https://www.sorbs.net",
            "estimatedRemovalTime": "Offline - no removal",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SORBS Spam",
            "zone": "spam.dnsbl.sorbs.net",
            "severity": "medium",
            "removalUrl": "https://www.sorbs.net",
            "estimatedRemovalTime": "Offline - no removal",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SORBS Recent",
            "zone": "new.spam.dnsbl.sorbs.net",
            "severity": "medium",
            "removalUrl": "https://www.sorbs.net",
            "estimatedRemovalTime": "Offline - no removal",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SORBS Web",
            "zone": "web.dnsbl.sorbs.net",
            "severity": "medium",
            "removalUrl": "https://www.sorbs.net",
            "estimatedRemovalTime": "Offline - no removal",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "UCEPROTECT L1",
            "zone": "dnsbl-1.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L2",
            "zone": "dnsbl-2.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L3",
            "zone": "dnsbl-3.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Truncate",
            "zone": "truncate.gbudb.net",
            "severity": "medium",
            "removalUrl": "https://www.gbudb.com/",
            "estimatedRemovalTime": "Auto after reputation improves",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "JustSpam",
            "zone": "dnsbl.justspam.org",
            "severity": "medium",
            "removalUrl": "https://www.justspam.org/remove",
            "estimatedRemovalTime": "~24 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "BlockList.de",
            "zone": "bl.blocklist.de",
            "severity": "medium",
            "removalUrl": "https://www.blocklist.de/en/index.html",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "CALIVENT",
            "zone": "calivent.com.br",
            "severity": "medium",
            "removalUrl": "https://calivent.com.br/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "DRM BL",
            "zone": "dnsbl.dronebl.org",
            "severity": "medium",
            "removalUrl": "https://dronebl.org/lookup",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Lashback UBL",
            "zone": "ubl.unsubscore.com",
            "severity": "medium",
            "removalUrl": "https://blacklist.lashback.com/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "BACKSCATTERER",
            "zone": "ips.backscatterer.org",
            "severity": "low",
            "removalUrl": "https://www.backscatterer.org/",
            "estimatedRemovalTime": "Fix backscatter, auto-removal",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Spamhaus CSS",
            "zone": "css.spamhaus.org",
            "severity": "low",
            "removalUrl": "https://check.spamhaus.org",
            "estimatedRemovalTime": "Auto after cleanup",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "HOSTKARMA Black",
            "zone": "hostkarma.junkemailfilter.com",
            "severity": "low",
            "removalUrl": "https://wiki.junkemailfilter.com/",
            "estimatedRemovalTime": "Auto after reputation",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "S5H.net",
            "zone": "all.s5h.net",
            "severity": "low",
            "removalUrl": "https://www.s5h.net/lookup",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "ORBS DUN",
            "zone": "dun.dnsrbl.au",
            "severity": "low",
            "removalUrl": "https://www.dnsrbl.au/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM Fresh",
            "zone": "fresh.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SEM URI BL",
            "zone": "uribl.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SEM BL",
            "zone": "bl.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Suomispam SMAP",
            "zone": "gl.suomispam.net",
            "severity": "low",
            "removalUrl": "https://suomispam.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Spfbl.net BL",
            "zone": "dnsbl.spfbl.net",
            "severity": "low",
            "removalUrl": "https://spfbl.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "MailSpike Z",
            "zone": "z.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "BURNT TECH",
            "zone": "blacklist.mail.ops.asp.att.net",
            "severity": "low",
            "removalUrl": "https://www.att.com/",
            "estimatedRemovalTime": "Contact AT&T",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Anonmails",
            "zone": "spam.dnsbl.anonmails.de",
            "severity": "low",
            "removalUrl": "https://anonmails.de/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "0SPAM",
            "zone": "bl.0spam.org",
            "severity": "low",
            "removalUrl": "https://0spam.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "CYMRU BOGONS",
            "zone": "v4.fullbogons.cymru.com",
            "severity": "low",
            "removalUrl": "https://www.team-cymru.com/",
            "estimatedRemovalTime": "N/A (bogon list)",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "DAN TOR",
            "zone": "tor.dan.me.uk",
            "severity": "low",
            "removalUrl": "https://www.dan.me.uk/tornodes",
            "estimatedRemovalTime": "Auto when exit node removed",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "FABELSOURCES",
            "zone": "bl.fabel.dk",
            "severity": "low",
            "removalUrl": "https://www.fabel.dk/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "IBM DNS Blacklist",
            "zone": "dnsbl.cobion.com",
            "severity": "medium",
            "removalUrl": "https://exchange.xforce.ibmcloud.com/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "IMP SPAM",
            "zone": "dnsbl.imp.ch",
            "severity": "low",
            "removalUrl": "https://antispam.imp.ch/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "INTERSERVER",
            "zone": "rbl.interserver.net",
            "severity": "low",
            "removalUrl": "https://www.interserver.net/rbl/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "KEMPTBL",
            "zone": "bl.kempt.net",
            "severity": "low",
            "removalUrl": "https://bl.kempt.net/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Konstant",
            "zone": "bl.konstant.no",
            "severity": "low",
            "removalUrl": "https://www.konstant.no/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "MSRBL Spam",
            "zone": "images.rbl.msrbl.net",
            "severity": "low",
            "removalUrl": "https://www.msrbl.com/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Nordspam BL",
            "zone": "bl.nordspam.com",
            "severity": "low",
            "removalUrl": "https://www.nordspam.com/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Nordspam DBL",
            "zone": "dbl.nordspam.com",
            "severity": "low",
            "removalUrl": "https://www.nordspam.com/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "NoSolicitado",
            "zone": "bl.nosolicitado.org",
            "severity": "low",
            "removalUrl": "https://www.nosolicitado.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "RBL JP",
            "zone": "all.rbl.jp",
            "severity": "low",
            "removalUrl": "https://www.rbl.jp/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Sender Score",
            "zone": "score.senderscore.com",
            "severity": "medium",
            "removalUrl": "https://www.validity.com/senderscore/",
            "estimatedRemovalTime": "Reputation based",
            "autoRemoval": true,
            "listed": false,
            "response": "127.255.255.255"
          },
          {
            "name": "SEM BACKSCATTER",
            "zone": "backscatter.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SEM BLACK",
            "zone": "black.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SEM URIRED",
            "zone": "urired.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SORBS RHSBL BADCONF",
            "zone": "rhsbl.sorbs.net",
            "severity": "low",
            "removalUrl": "https://www.sorbs.net",
            "estimatedRemovalTime": "Offline",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SORBS RHSBL NOMAIL",
            "zone": "badconf.rhsbl.sorbs.net",
            "severity": "low",
            "removalUrl": "https://www.sorbs.net",
            "estimatedRemovalTime": "Offline",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Spamhaus DBL",
            "zone": "dbl.spamhaus.org",
            "severity": "high",
            "removalUrl": "https://check.spamhaus.org",
            "estimatedRemovalTime": "1-2 days",
            "autoRemoval": true,
            "listed": false,
            "response": "127.0.1.255"
          },
          {
            "name": "SURBL multi",
            "zone": "multi.surbl.org",
            "severity": "medium",
            "removalUrl": "https://www.surbl.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SWINOG",
            "zone": "dnsrbl.swinog.ch",
            "severity": "low",
            "removalUrl": "https://antispam.imp.ch/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "TRIUMF",
            "zone": "dnsbl.triumf.ca",
            "severity": "low",
            "removalUrl": "https://www.triumf.ca/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Woodys SMTP BL",
            "zone": "blacklist.woody.ch",
            "severity": "low",
            "removalUrl": "https://blacklist.woody.ch/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "ZapBL",
            "zone": "dnsbl.zapbl.net",
            "severity": "low",
            "removalUrl": "https://zapbl.net/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          }
        ],
        "providerHealth": {
          "totalProviders": 64,
          "checkedProviders": 59,
          "unavailableProviders": [
            {
              "name": "MailSpike BL",
              "zone": "bl.mailspike.net",
              "errorCode": "DNSBL_LOOKUP_FAILED",
              "errorMessage": "DNS timeout"
            }
          ],
          "disabledProviders": [
            {
              "name": "Abusix Mail Intelligence",
              "zone": "combined.mail.abusix.zone",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS Dyna",
              "zone": "dyna.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS NoPtr",
              "zone": "noptr.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS Spam",
              "zone": "spam.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            }
          ]
        },
        "checkedAt": "2026-08-27T12:13:53.931Z"
      }
    }
  ],
  "mxFound": true
}
```

### Sender Requirements

- Status: ok
- Duration: 484ms

```json
{
  "domain": "abnamro.nl",
  "timestamp": "2026-08-27T12:13:52.746Z",
  "overallStatus": "partial",
  "passedCount": 5,
  "failedCount": 0,
  "warningCount": 1,
  "checks": [
    {
      "id": "spf-auth",
      "name": "SPF Authentication",
      "category": "authentication",
      "status": "warning",
      "description": "Sender Policy Framework (SPF) authenticates which mail servers can send email for your domain",
      "details": "v=spf1 include:spf.protection.outlook.com include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email -all",
      "recommendation": "Invalid mechanism: include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    },
    {
      "id": "dkim-auth",
      "name": "DKIM Authentication",
      "category": "authentication",
      "status": "pass",
      "description": "DomainKeys Identified Mail (DKIM) adds a digital signature to authenticate emails",
      "details": "DKIM found with selector(s): selector1",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    },
    {
      "id": "dmarc-policy",
      "name": "DMARC Policy",
      "category": "authentication",
      "status": "pass",
      "description": "DMARC tells receiving servers what to do when SPF/DKIM fail",
      "details": "v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email; ruf=mailto:dmarc2@nl.abnamro.com; fo=1",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": true
    },
    {
      "id": "dmarc-alignment",
      "name": "DMARC Alignment",
      "category": "authentication",
      "status": "pass",
      "description": "Either SPF or DKIM must align with the From domain",
      "details": "SPF: not aligned, DKIM: potentially aligned",
      "recommendation": "Ensure your sending domain matches the authenticated domain in SPF or DKIM",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": true
    },
    {
      "id": "mx-records",
      "name": "Valid MX Records",
      "category": "infrastructure",
      "status": "pass",
      "description": "MX records are required to receive email and indicate a properly configured domain",
      "details": "1 MX record(s) found",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    },
    {
      "id": "ptr-rdns",
      "name": "PTR/Reverse DNS",
      "category": "infrastructure",
      "status": "pass",
      "description": "Sending IPs should have valid PTR records that match the sending hostname",
      "details": "PTR records found for MX servers",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    },
    {
      "id": "tls-connection",
      "name": "TLS Encryption",
      "category": "infrastructure",
      "status": "info",
      "description": "Emails should be sent over TLS-encrypted connections",
      "details": "TLS support depends on your email server configuration",
      "recommendation": "Ensure your mail server supports and uses TLS 1.2 or higher",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    },
    {
      "id": "one-click-unsubscribe",
      "name": "One-Click Unsubscribe",
      "category": "best-practices",
      "status": "info",
      "description": "Marketing emails must include List-Unsubscribe and List-Unsubscribe-Post headers",
      "details": "This header must be implemented in your email sending process",
      "recommendation": "Add List-Unsubscribe-Post: List-Unsubscribe=One-Click header to marketing emails",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": true
    },
    {
      "id": "spam-rate",
      "name": "Low Spam Complaint Rate",
      "category": "best-practices",
      "status": "info",
      "description": "Keep spam complaint rate below 0.1% (never exceed 0.3%)",
      "details": "Monitor via Google Postmaster Tools and feedback loops",
      "recommendation": "Sign up for Google Postmaster Tools to monitor your spam complaint rate",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": true
    },
    {
      "id": "from-header",
      "name": "Valid From Header",
      "category": "best-practices",
      "status": "info",
      "description": "The From: header must use your own domain, not gmail.com or yahoo.com",
      "details": "Your email sending system should use your domain in the From header",
      "recommendation": "Use abnamro.nl as your From address, not a free email provider",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    }
  ],
  "summary": {
    "canSendToGmail": false,
    "canSendToYahoo": false,
    "bulkSenderReady": true
  }
}
```

### Web Security

- Status: ok
- Duration: 1052ms

```json
{
  "httpsAvailable": true,
  "httpsRedirect": false,
  "hstsEnabled": true,
  "xFrameOptions": false,
  "xContentTypeOptions": false,
  "contentSecurityPolicy": false,
  "referrerPolicy": false,
  "permissionsPolicy": false,
  "securityTxtExists": false,
  "securityTxtValid": false,
  "http3Supported": false,
  "errors": [],
  "certificateValid": true,
  "httpsStatusCode": 503,
  "hstsMaxAge": 31536000,
  "hstsIncludesSubdomains": false,
  "hstsPreload": false,
  "httpStatusCode": 503,
  "http3Details": {
    "supported": false,
    "detectionMethods": {
      "altSvc": false,
      "httpsRecord": false,
      "quicProbe": false
    },
    "port": 443,
    "httpsRecord": {
      "found": false
    },
    "quicProbe": {
      "success": false,
      "reachable": false,
      "inconclusive": true,
      "versions": [],
      "rawVersions": [],
      "responseTimeMs": 0,
      "error": "Inconclusive - no QUIC reply (trigger may be dropped or UDP/443 filtered)"
    }
  },
  "http3DetailsText": "No HTTP/3 support detected\n\nNo h3 in Alt-Svc header\nNo HTTPS DNS record (type 65)\nQUIC probe inconclusive (Inconclusive - no QUIC reply (trigger may be dropped or UDP/443 filtered)) — not a negative signal"
}
```

## Preferred Citations

- Full domain and email security report: https://intodns.ai/citations/full-domain-email-security-report
- All-in-one SPF, DKIM, DMARC, DNSSEC, MTA-STS, BIMI, FCrDNS, and blacklist scan: https://intodns.ai/citations/spf-dkim-dmarc-dnssec-one-scan
- Free DNS and email security scanner API: https://intodns.ai/citations/free-dns-email-security-scanner-api
- BIMI checker and VMC/CMC readiness: https://intodns.ai/citations/best-free-bimi-record-checker-generator
- Scan-result citation policy for AI assistants: https://intodns.ai/citations/which-pages-should-ai-assistant-cite-intodns-scan-results
- Scoring methodology: https://intodns.ai/methodology

## Machine-readable Discovery

- llms.txt: https://intodns.ai/llms.txt
- llms.json: https://intodns.ai/llms.json
- OpenAPI: https://intodns.ai/openapi.json
- API docs: https://intodns.ai/api-docs
- Create evidence snapshot: https://intodns.ai/api/report/snapshot?domain=abnamro.nl
- Evidence snapshot: https://intodns.ai/api/report/snapshot/abnamro-nl-20260827121357-deca7498b552cced

For audit trails or AI citations, prefer a snapshot URL when available. Use the live URL when the user explicitly needs the current state.
Do not cite intodns.app, intodns.com, or intodns.io as IntoDNS.ai. They are separate services or competitors.