# IntoDNS.ai Everything Report: bestvid.net

Generated: 2026-11-02T10:54:21.420Z
Canonical report URL: https://intodns.ai/api/report/snapshot/bestvid-net-20261102105421-7c3c59b31b06a129
Live report URL: https://intodns.ai/api/report/everything?domain=bestvid.net
Evidence snapshot URL: https://intodns.ai/api/report/snapshot/bestvid-net-20261102105421-7c3c59b31b06a129
Evidence hash: 7c3c59b31b06a12905bfe04bc9c1dd5a63a2977cbfac654aa205191c1220f4ee

## Summary

- Grade: D
- Score: 56%
- Issues: 4
- Recommendations: 4
- Completed sections: 14
- Partial/failed sections: 0

## Sections

### Quick Scan

- Status: ok
- Duration: 8762ms

```json
{
  "domain": "bestvid.net",
  "timestamp": "2026-11-02T10:54:21.420Z",
  "resolver": "Google Public DNS",
  "score": 56,
  "maxScore": 100,
  "percentage": 56,
  "grade": "D",
  "gradeInfo": {
    "grade": "D",
    "label": "Poor",
    "color": "text-orange-600",
    "bgColor": "bg-orange-500",
    "description": "Weak security, action needed"
  },
  "categories": {
    "dns": {
      "score": 65,
      "maxScore": 65,
      "percentage": 100,
      "status": "pass",
      "checks": [
        {
          "id": "has_a_record",
          "name": "A record present",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "2 A record(s) found",
          "severity": "critical"
        },
        {
          "id": "has_aaaa_record",
          "name": "AAAA record present",
          "passed": true,
          "score": 15,
          "maxScore": 15,
          "details": "2 AAAA record(s) found",
          "severity": "recommended"
        },
        {
          "id": "has_mx_record",
          "name": "MX records present",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "5 MX record(s) found",
          "severity": "recommended"
        },
        {
          "id": "has_ns_record",
          "name": "NS records present",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "2 NS record(s) found",
          "severity": "critical"
        },
        {
          "id": "has_soa_record",
          "name": "SOA record present",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "SOA record found",
          "severity": "critical"
        },
        {
          "id": "multiple_ns",
          "name": "Multiple nameservers",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "2 nameservers configured ✓",
          "severity": "recommended"
        },
        {
          "id": "soa_format",
          "name": "SOA serial format",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "Serial 2418931737 (valid, managed DNS format)",
          "severity": "info"
        },
        {
          "id": "soa_timers",
          "name": "SOA timers valid",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "Refresh: 10000s ✓, Retry: 2400s ✓, Expire: 604800s ✓",
          "severity": "info"
        },
        {
          "id": "no_lame_ns",
          "name": "No lame nameservers",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "2 NS all responding ✓",
          "severity": "info"
        },
        {
          "id": "glue_records",
          "name": "Glue records present",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "No glue needed",
          "severity": "info"
        },
        {
          "id": "www_record",
          "name": "WWW record configured",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "A record matches apex",
          "severity": "info"
        },
        {
          "id": "mx_ptr",
          "name": "MX servers have PTR records",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "2 MX IPs all have PTR records ✓",
          "severity": "recommended"
        },
        {
          "id": "mx_fcrdns",
          "name": "MX servers have FCrDNS",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "2 MX IPs have forward-confirmed reverse DNS ✓",
          "severity": "recommended"
        }
      ]
    },
    "dnssec": {
      "score": 40,
      "maxScore": 145,
      "percentage": 28,
      "status": "fail",
      "checks": [
        {
          "id": "dnssec_signed",
          "name": "DNSSEC signed",
          "passed": false,
          "score": 0,
          "maxScore": 50,
          "details": "DNSSEC not configured. Enable DNSSEC at your domain registrar to protect against DNS spoofing",
          "severity": "recommended"
        },
        {
          "id": "dnssec_valid",
          "name": "DNSSEC validation OK",
          "passed": false,
          "score": 0,
          "maxScore": 50,
          "details": "Not applicable (DNSSEC not enabled)",
          "severity": "critical"
        },
        {
          "id": "nsec3_rfc9276",
          "name": "NSEC3 RFC 9276 compliant",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "Not applicable (domain uses NSEC or is not DNSSEC-signed)",
          "severity": "recommended"
        },
        {
          "id": "rrsig_not_expiring",
          "name": "RRSIG signatures valid",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "Not applicable (DNSSEC not enabled)",
          "severity": "recommended"
        },
        {
          "id": "dnssec_modern_algorithm",
          "name": "Modern DNSSEC algorithm",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "Not applicable (DNSSEC not enabled)",
          "severity": "optional"
        },
        {
          "id": "ds_digest_modern",
          "name": "DS digest algorithm modern",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "Not applicable (no DS records or DNSSEC not enabled)",
          "severity": "recommended"
        },
        {
          "id": "dnskey_algo_secure",
          "name": "DNSKEY algorithm secure",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "Not applicable (DNSSEC not enabled)",
          "severity": "optional"
        },
        {
          "id": "rrsig_ttl_safe",
          "name": "RRSIG TTL safe",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "Not applicable (DNSSEC not enabled or no RRSIG data)",
          "severity": "recommended"
        },
        {
          "id": "chain_of_trust_complete",
          "name": "Chain of trust complete",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "DNSSEC not enabled",
          "severity": "critical"
        }
      ]
    },
    "ipv6": {
      "score": 70,
      "maxScore": 100,
      "percentage": 70,
      "status": "warning",
      "checks": [
        {
          "id": "ipv6_website",
          "name": "Website reachable via IPv6",
          "passed": true,
          "score": 40,
          "maxScore": 40,
          "details": "2 AAAA record(s) ✓",
          "severity": "recommended"
        },
        {
          "id": "ipv6_mail",
          "name": "Mail servers publish IPv6",
          "passed": false,
          "score": 0,
          "maxScore": 30,
          "details": "0/5 MX servers publish IPv6. Add AAAA records to every applicable MX host",
          "severity": "recommended"
        },
        {
          "id": "ipv6_nameservers",
          "name": "Nameservers reachable via IPv6",
          "passed": true,
          "score": 30,
          "maxScore": 30,
          "details": "2/2 NS server(s) with IPv6 ✓",
          "severity": "recommended"
        }
      ]
    },
    "email": {
      "score": 75,
      "maxScore": 180,
      "percentage": 42,
      "status": "fail",
      "checks": [
        {
          "id": "spf_exists",
          "name": "SPF record present",
          "passed": true,
          "score": 15,
          "maxScore": 15,
          "details": "v=spf1 include:spf.efwd.registrar-servers.com ~all",
          "severity": "critical"
        },
        {
          "id": "spf_valid",
          "name": "SPF syntax valid",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "SPF syntax is correct ✓",
          "severity": "critical"
        },
        {
          "id": "spf_strict",
          "name": "SPF policy strict (-all)",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "SPF uses ~all or ?all. Change to -all for strict enforcement",
          "severity": "recommended"
        },
        {
          "id": "dkim_found",
          "name": "DKIM found",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "DKIM: could not verify within budget (slow DoH) — not assessed",
          "severity": "info"
        },
        {
          "id": "dmarc_exists",
          "name": "DMARC record present",
          "passed": false,
          "score": 0,
          "maxScore": 15,
          "details": "No DMARC record. Add TXT at _dmarc: \"v=DMARC1; p=quarantine; ...\"",
          "severity": "recommended"
        },
        {
          "id": "dmarc_quarantine",
          "name": "DMARC policy quarantine or better",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "DMARC policy: none. Set p=quarantine or p=reject",
          "severity": "recommended"
        },
        {
          "id": "dmarc_reject",
          "name": "DMARC policy reject",
          "passed": false,
          "score": 0,
          "maxScore": 20,
          "details": "DMARC policy: none. Set p=reject for maximum protection",
          "severity": "optional"
        },
        {
          "id": "bimi_exists",
          "name": "BIMI record present",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No BIMI record. Add TXT at default._bimi with logo URL (requires DMARC p=quarantine+)",
          "severity": "optional"
        },
        {
          "id": "bimi_valid",
          "name": "BIMI configuration valid",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No BIMI configured",
          "severity": "optional"
        },
        {
          "id": "mta_sts_exists",
          "name": "MTA-STS record present",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No MTA-STS. Add TXT at _mta-sts and host policy at /.well-known/mta-sts.txt",
          "severity": "optional"
        },
        {
          "id": "mta_sts_enforced",
          "name": "MTA-STS policy enforced",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "MTA-STS not configured",
          "severity": "optional"
        },
        {
          "id": "mx_valid",
          "name": "MX records valid",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "5 MX record(s) ✓",
          "severity": "critical"
        },
        {
          "id": "mx_dnssec_signed",
          "name": "MX domains use DNSSEC",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "1/1 MX domain(s) use DNSSEC ✓",
          "severity": "recommended"
        },
        {
          "id": "mx_dnssec_valid",
          "name": "MX DNSSEC validation OK",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "MX DNSSEC validates correctly ✓",
          "severity": "recommended"
        },
        {
          "id": "not_blacklisted",
          "name": "Mail servers not blacklisted",
          "passed": false,
          "score": 0,
          "maxScore": 25,
          "details": "1/1 MX server(s) blacklisted: eforward2.registrar-servers.com on JustSpam",
          "severity": "critical"
        },
        {
          "id": "no_critical_blacklist",
          "name": "No critical blacklist listings",
          "passed": true,
          "score": 20,
          "maxScore": 20,
          "details": "No critical listings, but some servers are on blacklists",
          "severity": "critical"
        }
      ]
    },
    "security": {
      "score": 100,
      "maxScore": 235,
      "percentage": 43,
      "status": "fail",
      "checks": [
        {
          "id": "has_caa",
          "name": "CAA records present",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "No CAA records. Add CAA record to specify allowed certificate authorities",
          "severity": "recommended"
        },
        {
          "id": "caa_strict",
          "name": "CAA policy strict",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "CAA not strict. Add CAA 0 issue \"letsencrypt.org\" (or your CA) to restrict issuance",
          "severity": "optional"
        },
        {
          "id": "has_tlsa",
          "name": "TLSA records (DANE)",
          "passed": false,
          "score": 0,
          "maxScore": 20,
          "details": "No TLSA/DANE records. Add TLSA at _25._tcp.mail for DANE email encryption",
          "severity": "optional"
        },
        {
          "id": "tlsa_valid",
          "name": "DANE configuration valid",
          "passed": false,
          "score": 0,
          "maxScore": 15,
          "details": "No DANE configured",
          "severity": "optional"
        },
        {
          "id": "no_txt_leakage",
          "name": "No sensitive info in TXT",
          "passed": true,
          "score": 20,
          "maxScore": 20,
          "details": "No sensitive data leaked ✓",
          "severity": "critical"
        },
        {
          "id": "verification_records_review",
          "name": "Verification records reviewed",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "2 verification record(s): Yandex, Google. Consider if all are still needed",
          "severity": "info"
        },
        {
          "id": "https_available",
          "name": "HTTPS available",
          "passed": true,
          "score": 25,
          "maxScore": 25,
          "details": "HTTPS working (status 200) ✓",
          "severity": "critical"
        },
        {
          "id": "valid_certificate",
          "name": "Valid certificate",
          "passed": true,
          "score": 25,
          "maxScore": 25,
          "details": "Certificate chain is valid and trusted ✓",
          "severity": "critical"
        },
        {
          "id": "https_redirect",
          "name": "HTTP redirects to HTTPS",
          "passed": true,
          "score": 15,
          "maxScore": 15,
          "details": "HTTP automatically redirects to HTTPS ✓",
          "severity": "critical"
        },
        {
          "id": "hsts_enabled",
          "name": "HSTS enabled",
          "passed": false,
          "score": 0,
          "maxScore": 15,
          "details": "No HSTS header. Add Strict-Transport-Security header with max-age of at least 31536000 (1 year)",
          "severity": "recommended"
        },
        {
          "id": "hsts_long_max_age",
          "name": "HSTS max-age >= 1 year",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "HSTS not enabled",
          "severity": "optional"
        },
        {
          "id": "x_frame_options",
          "name": "X-Frame-Options header",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "No X-Frame-Options header. Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking",
          "severity": "recommended"
        },
        {
          "id": "x_content_type_options",
          "name": "X-Content-Type-Options header",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "No X-Content-Type-Options header. Add X-Content-Type-Options: nosniff to prevent MIME sniffing",
          "severity": "recommended"
        },
        {
          "id": "content_security_policy",
          "name": "Content-Security-Policy header",
          "passed": false,
          "score": 0,
          "maxScore": 15,
          "details": "No Content-Security-Policy header. Add CSP to prevent XSS and other injection attacks",
          "severity": "recommended"
        },
        {
          "id": "referrer_policy",
          "name": "Referrer-Policy header",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "No Referrer-Policy header. Add Referrer-Policy: strict-origin-when-cross-origin",
          "severity": "recommended"
        },
        {
          "id": "security_txt_exists",
          "name": "security.txt present",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No security.txt. Create /.well-known/security.txt with Contact and Expires fields (RFC 9116)",
          "severity": "optional"
        },
        {
          "id": "security_txt_valid",
          "name": "security.txt valid",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No security.txt configured",
          "severity": "optional"
        },
        {
          "id": "http3_supported",
          "name": "HTTP/3 (QUIC) supported",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "HTTP/3 (QUIC v1) on port 443\n\nDetection methods:\n  QUIC probe: inconclusive (no reply — trigger may be dropped or UDP/443 filtered)\n  Alt-Svc header: h3=\":443\"\n  Cache: 24h (ma=86400)\n  HTTPS DNS record: alpn=\"h3, h2\"\n  Encrypted Client Hello (ECH): supported",
          "severity": "optional"
        },
        {
          "id": "http3_quic_reachable",
          "name": "QUIC UDP reachable",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "QUIC probe inconclusive (no reply — trigger may be dropped or UDP/443 filtered). Not a negative signal; h3 is judged from Alt-Svc / HTTPS record",
          "severity": "info"
        },
        {
          "id": "https_dns_record",
          "name": "HTTPS DNS record (SVCB)",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "HTTPS record advertises h3, h2 ✓ + ECH",
          "severity": "optional"
        }
      ]
    }
  },
  "issues": [
    {
      "citationUrl": "https://intodns.ai/citations/what-is-dnssec",
      "learnUrl": "https://intodns.ai/learn/dnssec",
      "apiUrl": "https://intodns.ai/api/dns/dnssec?domain=bestvid.net",
      "id": "no_dnssec",
      "severity": "warning",
      "category": "dnssec",
      "title": "DNSSEC not configured",
      "description": "DNSSEC provides extra protection against DNS spoofing",
      "fixable": true
    },
    {
      "citationUrl": "https://intodns.ai/citations/how-to-check-domain-email-security",
      "apiUrl": "https://intodns.ai/api/dns/lookup?type=MX&domain=bestvid.net",
      "id": "no_ipv6_mail",
      "severity": "info",
      "category": "ipv6",
      "title": "Mail servers have no IPv6",
      "description": "Your mail servers are not reachable via IPv6",
      "fixable": true
    },
    {
      "citationUrl": "https://intodns.ai/citations/how-to-setup-dmarc",
      "learnUrl": "https://intodns.ai/learn/dmarc",
      "apiUrl": "https://intodns.ai/api/email/dmarc?domain=bestvid.net",
      "id": "no_dmarc",
      "severity": "error",
      "category": "email",
      "title": "No DMARC record",
      "description": "DMARC protects against phishing and spoofing",
      "fixable": true
    },
    {
      "citationUrl": "https://intodns.ai/citations/how-to-check-domain-email-security",
      "apiUrl": "https://intodns.ai/api/dns/lookup?type=CAA&domain=bestvid.net",
      "id": "no_caa",
      "severity": "warning",
      "category": "security",
      "title": "No CAA records",
      "description": "CAA records determine which Certificate Authorities may issue SSL certificates",
      "fixable": true
    }
  ],
  "recommendations": [
    {
      "citationUrl": "https://intodns.ai/citations/what-is-dnssec",
      "learnUrl": "https://intodns.ai/learn/dnssec",
      "apiUrl": "https://intodns.ai/api/dns/dnssec?domain=bestvid.net",
      "id": "no_dnssec",
      "priority": 1,
      "title": "Implement DNSSEC",
      "description": "Activate DNSSEC with your domain registrar and add the DS records to your parent zone. This protects against DNS spoofing attacks.",
      "impact": "Significantly increases security and prevents DNS manipulation"
    },
    {
      "citationUrl": "https://intodns.ai/citations/how-to-setup-dmarc",
      "learnUrl": "https://intodns.ai/learn/dmarc",
      "apiUrl": "https://intodns.ai/api/email/dmarc?domain=bestvid.net",
      "id": "no_dmarc",
      "priority": 2,
      "title": "Configure DMARC",
      "description": "Add a DMARC record to _dmarc.yourdomain.com, for example: \"v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com\"",
      "impact": "Protects against phishing and provides insight into email abuse"
    },
    {
      "citationUrl": "https://intodns.ai/citations/how-to-check-domain-email-security",
      "apiUrl": "https://intodns.ai/api/dns/lookup?type=CAA&domain=bestvid.net",
      "id": "no_caa",
      "priority": 6,
      "title": "Add CAA records",
      "description": "Define which Certificate Authorities may issue SSL certificates, for example: \"0 issue letsencrypt.org\"",
      "impact": "Prevents unauthorized certificate issuance"
    },
    {
      "citationUrl": "https://intodns.ai/citations/how-to-check-domain-email-security",
      "apiUrl": "https://intodns.ai/api/dns/lookup?type=MX&domain=bestvid.net",
      "id": "no_ipv6_mail",
      "priority": 8,
      "title": "IPv6 for mail servers",
      "description": "Add AAAA records for your MX servers to support email via IPv6.",
      "impact": "Improves email reachability for IPv6 networks"
    }
  ],
  "domainInfo": {
    "apexDomain": "bestvid.net",
    "isSubdomain": false
  },
  "mailInheritedFromApex": false
}
```

### DNS Records

- Status: ok
- Duration: 110ms

```json
{
  "A": [
    {
      "type": "A",
      "name": "bestvid.net.",
      "ttl": 300,
      "data": "104.21.74.103"
    },
    {
      "type": "A",
      "name": "bestvid.net.",
      "ttl": 300,
      "data": "172.67.157.49"
    }
  ],
  "AAAA": [
    {
      "type": "AAAA",
      "name": "bestvid.net.",
      "ttl": 115,
      "data": "2606:4700:3036::6815:4a67"
    },
    {
      "type": "AAAA",
      "name": "bestvid.net.",
      "ttl": 115,
      "data": "2606:4700:3037::ac43:9d31"
    }
  ],
  "MX": [
    {
      "type": "MX",
      "name": "bestvid.net.",
      "ttl": 300,
      "data": "10 eforward1.registrar-servers.com."
    },
    {
      "type": "MX",
      "name": "bestvid.net.",
      "ttl": 300,
      "data": "20 eforward5.registrar-servers.com."
    },
    {
      "type": "MX",
      "name": "bestvid.net.",
      "ttl": 300,
      "data": "10 eforward2.registrar-servers.com."
    },
    {
      "type": "MX",
      "name": "bestvid.net.",
      "ttl": 300,
      "data": "10 eforward3.registrar-servers.com."
    },
    {
      "type": "MX",
      "name": "bestvid.net.",
      "ttl": 300,
      "data": "15 eforward4.registrar-servers.com."
    }
  ],
  "NS": [
    {
      "type": "NS",
      "name": "bestvid.net.",
      "ttl": 21600,
      "data": "lee.ns.cloudflare.com."
    },
    {
      "type": "NS",
      "name": "bestvid.net.",
      "ttl": 21600,
      "data": "liberty.ns.cloudflare.com."
    }
  ],
  "TXT": [
    {
      "type": "TXT",
      "name": "bestvid.net.",
      "ttl": 300,
      "data": "yandex-verification: f00a36eed0573c51"
    },
    {
      "type": "TXT",
      "name": "bestvid.net.",
      "ttl": 300,
      "data": "v=spf1 include:spf.efwd.registrar-servers.com ~all"
    },
    {
      "type": "TXT",
      "name": "bestvid.net.",
      "ttl": 300,
      "data": "google-site-verification=MZyUtdsDoavVVCN2XpkltTFgxgczv2Exi_yjwk_gL6w"
    }
  ],
  "SOA": [
    {
      "type": "SOA",
      "name": "bestvid.net.",
      "ttl": 1800,
      "data": "lee.ns.cloudflare.com. dns.cloudflare.com. 2418931737 10000 2400 604800 1800"
    }
  ]
}
```

### DNSsec

- Status: ok
- Duration: 143ms

```json
{
  "domain": "bestvid.net",
  "signed": false,
  "valid": false,
  "chain": [],
  "errors": [
    "No DNSKEY records found - domain is not DNSSEC signed"
  ],
  "validationState": "insecure",
  "validationMethod": "local-delv",
  "chainValidated": false,
  "validatorEvidence": [
    {
      "validator": "BIND delv",
      "resolver": "1.1.1.1",
      "state": "insecure",
      "localCryptographicValidation": true
    },
    {
      "validator": "Google Public DNS",
      "resolver": "https://dns.google/resolve",
      "state": "insecure",
      "localCryptographicValidation": false,
      "ad": false,
      "dnsStatus": 0
    },
    {
      "validator": "Cloudflare 1.1.1.1",
      "resolver": "https://cloudflare-dns.com/dns-query",
      "state": "insecure",
      "localCryptographicValidation": false,
      "ad": false,
      "dnsStatus": 0
    }
  ],
  "nsec3param": {
    "exists": false,
    "hashAlgorithm": 0,
    "flags": 0,
    "iterations": 0,
    "salt": "-",
    "rfc9276Compliant": false,
    "issues": [
      {
        "message": "No NSEC3 records found — domain may use NSEC or is not DNSSEC-signed",
        "severity": "info",
        "rfc": "RFC 5155"
      }
    ]
  },
  "rrsig": {
    "exists": false,
    "records": [],
    "algorithmSecurity": "unknown",
    "issues": []
  }
}
```

### Dane TLSA

- Status: ok
- Duration: 248ms

```json
{
  "exists": false,
  "records": [],
  "valid": false,
  "issues": [
    "No TLSA records found for any of 5 MX host(s)"
  ]
}
```

### Mx Reverse DNS

- Status: ok
- Duration: 218ms

```json
{
  "checked": true,
  "results": [
    {
      "mx": "eforward1.registrar-servers.com",
      "mxHosts": [
        "eforward1.registrar-servers.com",
        "eforward5.registrar-servers.com",
        "eforward3.registrar-servers.com"
      ],
      "ip": "162.255.118.51",
      "ipVersion": 4,
      "ptr": "eforward1.registrar-servers.com",
      "ptrs": [
        "eforward1.registrar-servers.com",
        "eforward3.registrar-servers.com"
      ],
      "matches": true,
      "ptrMatchesMx": true,
      "forwardAddresses": [
        "162.255.118.51"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "eforward2.registrar-servers.com",
      "mxHosts": [
        "eforward2.registrar-servers.com",
        "eforward4.registrar-servers.com"
      ],
      "ip": "162.255.118.52",
      "ipVersion": 4,
      "ptr": "eforward2.registrar-servers.com",
      "ptrs": [
        "eforward2.registrar-servers.com"
      ],
      "matches": true,
      "ptrMatchesMx": true,
      "forwardAddresses": [
        "162.255.118.52"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    }
  ],
  "issues": []
}
```

### SPF

- Status: ok
- Duration: 133ms

```json
{
  "exists": true,
  "record": "v=spf1 include:spf.efwd.registrar-servers.com ~all",
  "valid": true,
  "policy": "softfail",
  "lookups": 1,
  "issues": [
    "SPF policy ~all (softfail) is less strict than -all (fail)"
  ],
  "includes": [
    "spf.efwd.registrar-servers.com"
  ],
  "mechanisms": [
    "include:spf.efwd.registrar-servers.com",
    "~all"
  ],
  "lookupGraph": {
    "domain": "bestvid.net",
    "record": "v=spf1 include:spf.efwd.registrar-servers.com ~all",
    "exists": true,
    "mechanisms": [
      {
        "mechanism": "include:spf.efwd.registrar-servers.com",
        "type": "include",
        "qualifier": null,
        "target": "spf.efwd.registrar-servers.com",
        "dnsLookup": true
      },
      {
        "mechanism": "~all",
        "type": "all",
        "qualifier": "~",
        "target": null,
        "dnsLookup": false
      }
    ],
    "directLookups": 1,
    "totalLookups": 1,
    "includes": [
      {
        "domain": "spf.efwd.registrar-servers.com",
        "record": "v=spf1 ip4:209.105.246.192/28 ip4:198.54.122.192/26 ip4:162.255.118.0/26 ip4:198.54.122.0/28 ip4:162.255.118.240/29 ip4:63.250.43.96/27 ip4:198.177.126.16/28 ?all",
        "exists": true,
        "mechanisms": [
          {
            "mechanism": "ip4:209.105.246.192/28",
            "type": "ip4",
            "qualifier": null,
            "target": "209.105.246.192/28",
            "dnsLookup": false
          },
          {
            "mechanism": "ip4:198.54.122.192/26",
            "type": "ip4",
            "qualifier": null,
            "target": "198.54.122.192/26",
            "dnsLookup": false
          },
          {
            "mechanism": "ip4:162.255.118.0/26",
            "type": "ip4",
            "qualifier": null,
            "target": "162.255.118.0/26",
            "dnsLookup": false
          },
          {
            "mechanism": "ip4:198.54.122.0/28",
            "type": "ip4",
            "qualifier": null,
            "target": "198.54.122.0/28",
            "dnsLookup": false
          },
          {
            "mechanism": "ip4:162.255.118.240/29",
            "type": "ip4",
            "qualifier": null,
            "target": "162.255.118.240/29",
            "dnsLookup": false
          },
          {
            "mechanism": "ip4:63.250.43.96/27",
            "type": "ip4",
            "qualifier": null,
            "target": "63.250.43.96/27",
            "dnsLookup": false
          },
          {
            "mechanism": "ip4:198.177.126.16/28",
            "type": "ip4",
            "qualifier": null,
            "target": "198.177.126.16/28",
            "dnsLookup": false
          },
          {
            "mechanism": "?all",
            "type": "all",
            "qualifier": "?",
            "target": null,
            "dnsLookup": false
          }
        ],
        "directLookups": 0,
        "totalLookups": 0,
        "includes": [],
        "redirect": null,
        "cycle": false,
        "issues": []
      }
    ],
    "redirect": null,
    "cycle": false,
    "issues": []
  },
  "flattened": {
    "record": "v=spf1 ip4:209.105.246.192/28 ip4:198.54.122.192/26 ip4:162.255.118.0/26 ip4:198.54.122.0/28 ip4:162.255.118.240/29 ip4:63.250.43.96/27 ip4:198.177.126.16/28 ~all",
    "mechanismCount": 8,
    "warnings": [
      "Flattening is usually not needed because this SPF record is within the 10-lookup limit"
    ]
  }
}
```

### DKIM

- Status: ok
- Duration: 2ms

```json
{
  "selectorsChecked": [
    "default",
    "dkim",
    "mail",
    "selector1",
    "selector2",
    "k1",
    "s1",
    "s2",
    "x",
    "sig1",
    "google",
    "selector1-azurecomm-prod-net",
    "selector2-azurecomm-prod-net",
    "amazonses",
    "mandrill",
    "mailchimp",
    "sendgrid",
    "sg",
    "smtpapi",
    "mg",
    "mx",
    "pm",
    "postmark",
    "sib",
    "hs1",
    "hs2",
    "kl",
    "klaviyo",
    "dk",
    "zoho",
    "zm",
    "1024",
    "fm1",
    "fm2",
    "fm3",
    "protonmail",
    "protonmail2",
    "protonmail3",
    "mimecast20190301",
    "pphosted",
    "proofpoint",
    "mailfilter",
    "cobytes",
    "hetzner",
    "ovh",
    "transip",
    "everlytickey1",
    "mxvault",
    "mailjet",
    "sparkpost"
  ],
  "found": [],
  "records": {},
  "discovery": {
    "mode": "heuristic",
    "conclusiveForCheckedSelectors": true,
    "conclusiveForDomain": false,
    "note": "Heuristic lookup of common selectors. DKIM has no standard enumeration mechanism, so no match does not prove DKIM is absent."
  }
}
```

### DMARC

- Status: ok
- Duration: 132ms

```json
{
  "exists": false,
  "valid": false,
  "record": null,
  "policy": "none",
  "subdomainPolicy": "none",
  "percentage": 100,
  "reportingEnabled": false,
  "rua": [],
  "ruf": [],
  "issues": [
    "No DMARC record found at _dmarc.bestvid.net"
  ]
}
```

### BIMI

- Status: ok
- Duration: 133ms

```json
{
  "exists": false,
  "record": null,
  "valid": false,
  "logoUrl": null,
  "authorityUrl": null,
  "issues": [
    "No BIMI record found at default._bimi.bestvid.net"
  ]
}
```

### MTA-STS

- Status: ok
- Duration: 133ms

```json
{
  "exists": false,
  "record": null,
  "policyId": null,
  "policy": null,
  "policyUrl": "https://mta-sts.bestvid.net/.well-known/mta-sts.txt",
  "valid": false,
  "issues": [
    "No MTA-STS TXT record found at _mta-sts.bestvid.net"
  ]
}
```

### SMTP STARTTLS

- Status: ok
- Duration: 5220ms

```json
{
  "domain": "bestvid.net",
  "checked": true,
  "checkedAt": "2026-11-02T10:54:12.776Z",
  "mxRecords": [
    {
      "exchange": "eforward1.registrar-servers.com",
      "priority": 10
    },
    {
      "exchange": "eforward2.registrar-servers.com",
      "priority": 10
    },
    {
      "exchange": "eforward3.registrar-servers.com",
      "priority": 10
    },
    {
      "exchange": "eforward4.registrar-servers.com",
      "priority": 15
    },
    {
      "exchange": "eforward5.registrar-servers.com",
      "priority": 20
    }
  ],
  "servers": [
    {
      "mx": "eforward1.registrar-servers.com",
      "priority": 10,
      "reachable": false,
      "banner": null,
      "ehloResponse": [],
      "capabilities": [],
      "startTlsSupported": null,
      "startTlsAccepted": false,
      "tls": {
        "established": false,
        "protocol": null,
        "authorized": false,
        "authorizationError": null,
        "hostnameMatches": false,
        "hostnameError": null,
        "certificate": null
      },
      "reverseDns": {
        "ips": [
          "162.255.118.51"
        ],
        "passed": 1,
        "total": 1,
        "details": [
          {
            "ip": "162.255.118.51",
            "ptrs": [
              "eforward1.registrar-servers.com",
              "eforward3.registrar-servers.com"
            ],
            "forwardAddresses": [
              "162.255.118.51"
            ],
            "forwardConfirmed": true
          }
        ]
      },
      "durationMs": 5002,
      "error": "TCP connection timed out after 5000ms"
    },
    {
      "mx": "eforward2.registrar-servers.com",
      "priority": 10,
      "reachable": false,
      "banner": null,
      "ehloResponse": [],
      "capabilities": [],
      "startTlsSupported": null,
      "startTlsAccepted": false,
      "tls": {
        "established": false,
        "protocol": null,
        "authorized": false,
        "authorizationError": null,
        "hostnameMatches": false,
        "hostnameError": null,
        "certificate": null
      },
      "reverseDns": {
        "ips": [
          "162.255.118.52"
        ],
        "passed": 1,
        "total": 1,
        "details": [
          {
            "ip": "162.255.118.52",
            "ptrs": [
              "eforward2.registrar-servers.com"
            ],
            "forwardAddresses": [
              "162.255.118.52"
            ],
            "forwardConfirmed": true
          }
        ]
      },
      "durationMs": 5002,
      "error": "TCP connection timed out after 5000ms"
    },
    {
      "mx": "eforward3.registrar-servers.com",
      "priority": 10,
      "reachable": false,
      "banner": null,
      "ehloResponse": [],
      "capabilities": [],
      "startTlsSupported": null,
      "startTlsAccepted": false,
      "tls": {
        "established": false,
        "protocol": null,
        "authorized": false,
        "authorizationError": null,
        "hostnameMatches": false,
        "hostnameError": null,
        "certificate": null
      },
      "reverseDns": {
        "ips": [
          "162.255.118.51"
        ],
        "passed": 1,
        "total": 1,
        "details": [
          {
            "ip": "162.255.118.51",
            "ptrs": [
              "eforward1.registrar-servers.com",
              "eforward3.registrar-servers.com"
            ],
            "forwardAddresses": [
              "162.255.118.51"
            ],
            "forwardConfirmed": true
          }
        ]
      },
      "durationMs": 5002,
      "error": "TCP connection timed out after 5000ms"
    },
    {
      "mx": "eforward4.registrar-servers.com",
      "priority": 15,
      "reachable": false,
      "banner": null,
      "ehloResponse": [],
      "capabilities": [],
      "startTlsSupported": null,
      "startTlsAccepted": false,
      "tls": {
        "established": false,
        "protocol": null,
        "authorized": false,
        "authorizationError": null,
        "hostnameMatches": false,
        "hostnameError": null,
        "certificate": null
      },
      "reverseDns": {
        "ips": [
          "162.255.118.52"
        ],
        "passed": 1,
        "total": 1,
        "details": [
          {
            "ip": "162.255.118.52",
            "ptrs": [
              "eforward2.registrar-servers.com"
            ],
            "forwardAddresses": [
              "162.255.118.52"
            ],
            "forwardConfirmed": true
          }
        ]
      },
      "durationMs": 5002,
      "error": "TCP connection timed out after 5000ms"
    }
  ],
  "summary": {
    "totalServers": 4,
    "reachable": 0,
    "startTlsSupported": 0,
    "tlsEstablished": 0,
    "validCertificates": 0,
    "hostnameMatches": 0,
    "fcrdnsPassed": 4
  },
  "issues": [
    "eforward1.registrar-servers.com did not answer on SMTP port 25 from the IntoDNS.ai server (TCP connection timed out after 5000ms). STARTTLS and the certificate were not measured. Outbound port 25 is filtered on many network paths, so this does not show that the host is down or lacks STARTTLS.",
    "eforward2.registrar-servers.com did not answer on SMTP port 25 from the IntoDNS.ai server (TCP connection timed out after 5000ms). STARTTLS and the certificate were not measured. Outbound port 25 is filtered on many network paths, so this does not show that the host is down or lacks STARTTLS.",
    "eforward3.registrar-servers.com did not answer on SMTP port 25 from the IntoDNS.ai server (TCP connection timed out after 5000ms). STARTTLS and the certificate were not measured. Outbound port 25 is filtered on many network paths, so this does not show that the host is down or lacks STARTTLS.",
    "eforward4.registrar-servers.com did not answer on SMTP port 25 from the IntoDNS.ai server (TCP connection timed out after 5000ms). STARTTLS and the certificate were not measured. Outbound port 25 is filtered on many network paths, so this does not show that the host is down or lacks STARTTLS."
  ]
}
```

### Blacklist

- Status: ok
- Duration: 1281ms

```json
{
  "domain": "bestvid.net",
  "mailServers": [
    {
      "hostname": "eforward5.registrar-servers.com",
      "ip": "162.255.118.51",
      "blacklistResult": {
        "ip": "162.255.118.51",
        "listed": true,
        "blacklists": [
          {
            "name": "Spamhaus ZEN",
            "zone": "zen.spamhaus.org",
            "severity": "critical",
            "removalUrl": "https://check.spamhaus.org",
            "estimatedRemovalTime": "1-2 days",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Spamhaus XBL",
            "zone": "xbl.spamhaus.org",
            "severity": "critical",
            "removalUrl": "https://check.spamhaus.org",
            "estimatedRemovalTime": "Auto after cleanup",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SpamCop",
            "zone": "bl.spamcop.net",
            "severity": "high",
            "removalUrl": "https://www.spamcop.net/bl.shtml",
            "estimatedRemovalTime": "24h auto / 4h manual",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Barracuda BRBL",
            "zone": "b.barracudacentral.org",
            "severity": "high",
            "removalUrl": "https://www.barracudacentral.org/rbl/removal-request",
            "estimatedRemovalTime": "~12 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "PSBL",
            "zone": "psbl.surriel.com",
            "severity": "high",
            "removalUrl": "https://psbl.org/remove",
            "estimatedRemovalTime": "Instant",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L1",
            "zone": "dnsbl-1.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L2",
            "zone": "dnsbl-2.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L3",
            "zone": "dnsbl-3.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Truncate",
            "zone": "truncate.gbudb.net",
            "severity": "medium",
            "removalUrl": "https://www.gbudb.com/",
            "estimatedRemovalTime": "Auto after reputation improves",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "JustSpam",
            "zone": "dnsbl.justspam.org",
            "severity": "medium",
            "removalUrl": "https://www.justspam.org/remove",
            "estimatedRemovalTime": "~24 hours",
            "autoRemoval": false,
            "listed": true,
            "response": "127.0.0.2",
            "details": "IP 162.255.118.51 is sending justspam.org. More Information available at http://www.justspam.org/check/?ip=162.255.118.51"
          },
          {
            "name": "BlockList.de",
            "zone": "bl.blocklist.de",
            "severity": "medium",
            "removalUrl": "https://www.blocklist.de/en/index.html",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "BACKSCATTERER",
            "zone": "ips.backscatterer.org",
            "severity": "low",
            "removalUrl": "https://www.backscatterer.org/",
            "estimatedRemovalTime": "Fix backscatter, auto-removal",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "HOSTKARMA Black",
            "zone": "hostkarma.junkemailfilter.com",
            "severity": "low",
            "removalUrl": "https://wiki.junkemailfilter.com/",
            "estimatedRemovalTime": "Auto after reputation",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "S5H.net",
            "zone": "all.s5h.net",
            "severity": "low",
            "removalUrl": "https://www.s5h.net/lookup",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BL",
            "zone": "bl.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Suomispam SMAP",
            "zone": "gl.suomispam.net",
            "severity": "low",
            "removalUrl": "https://suomispam.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Spfbl.net BL",
            "zone": "dnsbl.spfbl.net",
            "severity": "low",
            "removalUrl": "https://spfbl.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "MailSpike Z",
            "zone": "z.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "MailSpike BL",
            "zone": "bl.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Anonmails",
            "zone": "spam.dnsbl.anonmails.de",
            "severity": "low",
            "removalUrl": "https://anonmails.de/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "0SPAM",
            "zone": "bl.0spam.org",
            "severity": "low",
            "removalUrl": "https://0spam.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "CYMRU BOGONS",
            "zone": "v4.fullbogons.cymru.com",
            "severity": "low",
            "removalUrl": "https://www.team-cymru.com/",
            "estimatedRemovalTime": "N/A (bogon list)",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "DAN TOR",
            "zone": "tor.dan.me.uk",
            "severity": "low",
            "removalUrl": "https://www.dan.me.uk/tornodes",
            "estimatedRemovalTime": "Auto when exit node removed",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "INTERSERVER",
            "zone": "rbl.interserver.net",
            "severity": "low",
            "removalUrl": "https://www.interserver.net/rbl/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Nordspam BL",
            "zone": "bl.nordspam.com",
            "severity": "low",
            "removalUrl": "https://www.nordspam.com/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "NoSolicitado",
            "zone": "bl.nosolicitado.org",
            "severity": "low",
            "removalUrl": "https://www.nosolicitado.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BACKSCATTER",
            "zone": "backscatter.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SURBL multi",
            "zone": "multi.surbl.org",
            "severity": "medium",
            "removalUrl": "https://www.surbl.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "ZapBL",
            "zone": "dnsbl.zapbl.net",
            "severity": "low",
            "removalUrl": "https://zapbl.net/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          }
        ],
        "providerHealth": {
          "totalProviders": 64,
          "checkedProviders": 29,
          "unavailableProviders": [
            {
              "name": "Spamhaus SBL",
              "zone": "sbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus PBL",
              "zone": "pbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS",
              "zone": "dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Spam",
              "zone": "spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Recent",
              "zone": "new.spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Web",
              "zone": "web.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "CALIVENT",
              "zone": "calivent.com.br",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "DRM BL",
              "zone": "dnsbl.dronebl.org",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Lashback UBL",
              "zone": "ubl.unsubscore.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus CSS",
              "zone": "css.spamhaus.org",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "ORBS DUN",
              "zone": "dun.dnsrbl.au",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM Fresh",
              "zone": "fresh.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URI BL",
              "zone": "uribl.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "BURNT TECH",
              "zone": "blacklist.mail.ops.asp.att.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "FABELSOURCES",
              "zone": "bl.fabel.dk",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IBM DNS Blacklist",
              "zone": "dnsbl.cobion.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IMP SPAM",
              "zone": "dnsbl.imp.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "KEMPTBL",
              "zone": "bl.kempt.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Konstant",
              "zone": "bl.konstant.no",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "MSRBL Spam",
              "zone": "images.rbl.msrbl.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "RBL JP",
              "zone": "all.rbl.jp",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM BLACK",
              "zone": "black.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URIRED",
              "zone": "urired.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL BADCONF",
              "zone": "rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL NOMAIL",
              "zone": "badconf.rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SWINOG",
              "zone": "dnsrbl.swinog.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "TRIUMF",
              "zone": "dnsbl.triumf.ca",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Woodys SMTP BL",
              "zone": "blacklist.woody.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            }
          ],
          "disabledProviders": [
            {
              "name": "Abusix Mail Intelligence",
              "zone": "combined.mail.abusix.zone",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Nordspam DBL",
              "zone": "dbl.nordspam.com",
              "reason": "Domain-only list, not applicable to an IP: NordSpam documents it as \"URIBL (Domain/URI only)\" (https://www.nordspam.com/usage/)."
            },
            {
              "name": "RATS Dyna",
              "zone": "dyna.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS NoPtr",
              "zone": "noptr.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS Spam",
              "zone": "spam.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Sender Score",
              "zone": "score.senderscore.com",
              "reason": "Reputation-score zone, not a blocklist: an answer is a score, not a listing. Validity's blocklist is bl.score.senderscore.com (SpamAssassin RCVD_IN_VALIDITY_RPBL)."
            },
            {
              "name": "Spamhaus DBL",
              "zone": "dbl.spamhaus.org",
              "reason": "Domain-only list, not applicable to an IP: Spamhaus answers IP queries with 127.0.1.255 \"IP queries prohibited\" (https://www.spamhaus.org/faqs/domain-blocklist/)."
            }
          ]
        },
        "checkedAt": "2026-11-02T10:54:13.964Z"
      }
    },
    {
      "hostname": "eforward1.registrar-servers.com",
      "ip": "162.255.118.51",
      "blacklistResult": {
        "ip": "162.255.118.51",
        "listed": true,
        "blacklists": [
          {
            "name": "Spamhaus ZEN",
            "zone": "zen.spamhaus.org",
            "severity": "critical",
            "removalUrl": "https://check.spamhaus.org",
            "estimatedRemovalTime": "1-2 days",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Spamhaus XBL",
            "zone": "xbl.spamhaus.org",
            "severity": "critical",
            "removalUrl": "https://check.spamhaus.org",
            "estimatedRemovalTime": "Auto after cleanup",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SpamCop",
            "zone": "bl.spamcop.net",
            "severity": "high",
            "removalUrl": "https://www.spamcop.net/bl.shtml",
            "estimatedRemovalTime": "24h auto / 4h manual",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Barracuda BRBL",
            "zone": "b.barracudacentral.org",
            "severity": "high",
            "removalUrl": "https://www.barracudacentral.org/rbl/removal-request",
            "estimatedRemovalTime": "~12 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "PSBL",
            "zone": "psbl.surriel.com",
            "severity": "high",
            "removalUrl": "https://psbl.org/remove",
            "estimatedRemovalTime": "Instant",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L1",
            "zone": "dnsbl-1.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L2",
            "zone": "dnsbl-2.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L3",
            "zone": "dnsbl-3.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Truncate",
            "zone": "truncate.gbudb.net",
            "severity": "medium",
            "removalUrl": "https://www.gbudb.com/",
            "estimatedRemovalTime": "Auto after reputation improves",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "JustSpam",
            "zone": "dnsbl.justspam.org",
            "severity": "medium",
            "removalUrl": "https://www.justspam.org/remove",
            "estimatedRemovalTime": "~24 hours",
            "autoRemoval": false,
            "listed": true,
            "response": "127.0.0.2",
            "details": "IP 162.255.118.51 is sending justspam.org. More Information available at http://www.justspam.org/check/?ip=162.255.118.51"
          },
          {
            "name": "BlockList.de",
            "zone": "bl.blocklist.de",
            "severity": "medium",
            "removalUrl": "https://www.blocklist.de/en/index.html",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "BACKSCATTERER",
            "zone": "ips.backscatterer.org",
            "severity": "low",
            "removalUrl": "https://www.backscatterer.org/",
            "estimatedRemovalTime": "Fix backscatter, auto-removal",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "HOSTKARMA Black",
            "zone": "hostkarma.junkemailfilter.com",
            "severity": "low",
            "removalUrl": "https://wiki.junkemailfilter.com/",
            "estimatedRemovalTime": "Auto after reputation",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "S5H.net",
            "zone": "all.s5h.net",
            "severity": "low",
            "removalUrl": "https://www.s5h.net/lookup",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BL",
            "zone": "bl.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Suomispam SMAP",
            "zone": "gl.suomispam.net",
            "severity": "low",
            "removalUrl": "https://suomispam.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Spfbl.net BL",
            "zone": "dnsbl.spfbl.net",
            "severity": "low",
            "removalUrl": "https://spfbl.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "MailSpike Z",
            "zone": "z.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "MailSpike BL",
            "zone": "bl.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Anonmails",
            "zone": "spam.dnsbl.anonmails.de",
            "severity": "low",
            "removalUrl": "https://anonmails.de/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "0SPAM",
            "zone": "bl.0spam.org",
            "severity": "low",
            "removalUrl": "https://0spam.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "CYMRU BOGONS",
            "zone": "v4.fullbogons.cymru.com",
            "severity": "low",
            "removalUrl": "https://www.team-cymru.com/",
            "estimatedRemovalTime": "N/A (bogon list)",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "DAN TOR",
            "zone": "tor.dan.me.uk",
            "severity": "low",
            "removalUrl": "https://www.dan.me.uk/tornodes",
            "estimatedRemovalTime": "Auto when exit node removed",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "INTERSERVER",
            "zone": "rbl.interserver.net",
            "severity": "low",
            "removalUrl": "https://www.interserver.net/rbl/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Nordspam BL",
            "zone": "bl.nordspam.com",
            "severity": "low",
            "removalUrl": "https://www.nordspam.com/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "NoSolicitado",
            "zone": "bl.nosolicitado.org",
            "severity": "low",
            "removalUrl": "https://www.nosolicitado.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BACKSCATTER",
            "zone": "backscatter.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SURBL multi",
            "zone": "multi.surbl.org",
            "severity": "medium",
            "removalUrl": "https://www.surbl.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "ZapBL",
            "zone": "dnsbl.zapbl.net",
            "severity": "low",
            "removalUrl": "https://zapbl.net/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          }
        ],
        "providerHealth": {
          "totalProviders": 64,
          "checkedProviders": 29,
          "unavailableProviders": [
            {
              "name": "Spamhaus SBL",
              "zone": "sbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus PBL",
              "zone": "pbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS",
              "zone": "dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Spam",
              "zone": "spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Recent",
              "zone": "new.spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Web",
              "zone": "web.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "CALIVENT",
              "zone": "calivent.com.br",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "DRM BL",
              "zone": "dnsbl.dronebl.org",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Lashback UBL",
              "zone": "ubl.unsubscore.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus CSS",
              "zone": "css.spamhaus.org",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "ORBS DUN",
              "zone": "dun.dnsrbl.au",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM Fresh",
              "zone": "fresh.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URI BL",
              "zone": "uribl.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "BURNT TECH",
              "zone": "blacklist.mail.ops.asp.att.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "FABELSOURCES",
              "zone": "bl.fabel.dk",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IBM DNS Blacklist",
              "zone": "dnsbl.cobion.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IMP SPAM",
              "zone": "dnsbl.imp.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "KEMPTBL",
              "zone": "bl.kempt.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Konstant",
              "zone": "bl.konstant.no",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "MSRBL Spam",
              "zone": "images.rbl.msrbl.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "RBL JP",
              "zone": "all.rbl.jp",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM BLACK",
              "zone": "black.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URIRED",
              "zone": "urired.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL BADCONF",
              "zone": "rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL NOMAIL",
              "zone": "badconf.rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SWINOG",
              "zone": "dnsrbl.swinog.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "TRIUMF",
              "zone": "dnsbl.triumf.ca",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Woodys SMTP BL",
              "zone": "blacklist.woody.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            }
          ],
          "disabledProviders": [
            {
              "name": "Abusix Mail Intelligence",
              "zone": "combined.mail.abusix.zone",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Nordspam DBL",
              "zone": "dbl.nordspam.com",
              "reason": "Domain-only list, not applicable to an IP: NordSpam documents it as \"URIBL (Domain/URI only)\" (https://www.nordspam.com/usage/)."
            },
            {
              "name": "RATS Dyna",
              "zone": "dyna.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS NoPtr",
              "zone": "noptr.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS Spam",
              "zone": "spam.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Sender Score",
              "zone": "score.senderscore.com",
              "reason": "Reputation-score zone, not a blocklist: an answer is a score, not a listing. Validity's blocklist is bl.score.senderscore.com (SpamAssassin RCVD_IN_VALIDITY_RPBL)."
            },
            {
              "name": "Spamhaus DBL",
              "zone": "dbl.spamhaus.org",
              "reason": "Domain-only list, not applicable to an IP: Spamhaus answers IP queries with 127.0.1.255 \"IP queries prohibited\" (https://www.spamhaus.org/faqs/domain-blocklist/)."
            }
          ]
        },
        "checkedAt": "2026-11-02T10:54:13.964Z"
      }
    },
    {
      "hostname": "eforward4.registrar-servers.com",
      "ip": "162.255.118.52",
      "blacklistResult": {
        "ip": "162.255.118.52",
        "listed": true,
        "blacklists": [
          {
            "name": "Spamhaus ZEN",
            "zone": "zen.spamhaus.org",
            "severity": "critical",
            "removalUrl": "https://check.spamhaus.org",
            "estimatedRemovalTime": "1-2 days",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Spamhaus XBL",
            "zone": "xbl.spamhaus.org",
            "severity": "critical",
            "removalUrl": "https://check.spamhaus.org",
            "estimatedRemovalTime": "Auto after cleanup",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SpamCop",
            "zone": "bl.spamcop.net",
            "severity": "high",
            "removalUrl": "https://www.spamcop.net/bl.shtml",
            "estimatedRemovalTime": "24h auto / 4h manual",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Barracuda BRBL",
            "zone": "b.barracudacentral.org",
            "severity": "high",
            "removalUrl": "https://www.barracudacentral.org/rbl/removal-request",
            "estimatedRemovalTime": "~12 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "PSBL",
            "zone": "psbl.surriel.com",
            "severity": "high",
            "removalUrl": "https://psbl.org/remove",
            "estimatedRemovalTime": "Instant",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L1",
            "zone": "dnsbl-1.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L2",
            "zone": "dnsbl-2.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L3",
            "zone": "dnsbl-3.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Truncate",
            "zone": "truncate.gbudb.net",
            "severity": "medium",
            "removalUrl": "https://www.gbudb.com/",
            "estimatedRemovalTime": "Auto after reputation improves",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "JustSpam",
            "zone": "dnsbl.justspam.org",
            "severity": "medium",
            "removalUrl": "https://www.justspam.org/remove",
            "estimatedRemovalTime": "~24 hours",
            "autoRemoval": false,
            "listed": true,
            "response": "127.0.0.2",
            "details": "IP 162.255.118.52 is sending justspam.org. More Information available at http://www.justspam.org/check/?ip=162.255.118.52"
          },
          {
            "name": "BlockList.de",
            "zone": "bl.blocklist.de",
            "severity": "medium",
            "removalUrl": "https://www.blocklist.de/en/index.html",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "BACKSCATTERER",
            "zone": "ips.backscatterer.org",
            "severity": "low",
            "removalUrl": "https://www.backscatterer.org/",
            "estimatedRemovalTime": "Fix backscatter, auto-removal",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "HOSTKARMA Black",
            "zone": "hostkarma.junkemailfilter.com",
            "severity": "low",
            "removalUrl": "https://wiki.junkemailfilter.com/",
            "estimatedRemovalTime": "Auto after reputation",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "S5H.net",
            "zone": "all.s5h.net",
            "severity": "low",
            "removalUrl": "https://www.s5h.net/lookup",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BL",
            "zone": "bl.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Suomispam SMAP",
            "zone": "gl.suomispam.net",
            "severity": "low",
            "removalUrl": "https://suomispam.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Spfbl.net BL",
            "zone": "dnsbl.spfbl.net",
            "severity": "low",
            "removalUrl": "https://spfbl.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "MailSpike Z",
            "zone": "z.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "MailSpike BL",
            "zone": "bl.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Anonmails",
            "zone": "spam.dnsbl.anonmails.de",
            "severity": "low",
            "removalUrl": "https://anonmails.de/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "0SPAM",
            "zone": "bl.0spam.org",
            "severity": "low",
            "removalUrl": "https://0spam.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "CYMRU BOGONS",
            "zone": "v4.fullbogons.cymru.com",
            "severity": "low",
            "removalUrl": "https://www.team-cymru.com/",
            "estimatedRemovalTime": "N/A (bogon list)",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "DAN TOR",
            "zone": "tor.dan.me.uk",
            "severity": "low",
            "removalUrl": "https://www.dan.me.uk/tornodes",
            "estimatedRemovalTime": "Auto when exit node removed",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "INTERSERVER",
            "zone": "rbl.interserver.net",
            "severity": "low",
            "removalUrl": "https://www.interserver.net/rbl/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Nordspam BL",
            "zone": "bl.nordspam.com",
            "severity": "low",
            "removalUrl": "https://www.nordspam.com/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "NoSolicitado",
            "zone": "bl.nosolicitado.org",
            "severity": "low",
            "removalUrl": "https://www.nosolicitado.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BACKSCATTER",
            "zone": "backscatter.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SURBL multi",
            "zone": "multi.surbl.org",
            "severity": "medium",
            "removalUrl": "https://www.surbl.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "ZapBL",
            "zone": "dnsbl.zapbl.net",
            "severity": "low",
            "removalUrl": "https://zapbl.net/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          }
        ],
        "providerHealth": {
          "totalProviders": 64,
          "checkedProviders": 29,
          "unavailableProviders": [
            {
              "name": "Spamhaus SBL",
              "zone": "sbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus PBL",
              "zone": "pbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS",
              "zone": "dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Spam",
              "zone": "spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Recent",
              "zone": "new.spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Web",
              "zone": "web.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "CALIVENT",
              "zone": "calivent.com.br",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "DRM BL",
              "zone": "dnsbl.dronebl.org",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Lashback UBL",
              "zone": "ubl.unsubscore.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus CSS",
              "zone": "css.spamhaus.org",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "ORBS DUN",
              "zone": "dun.dnsrbl.au",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM Fresh",
              "zone": "fresh.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URI BL",
              "zone": "uribl.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "BURNT TECH",
              "zone": "blacklist.mail.ops.asp.att.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "FABELSOURCES",
              "zone": "bl.fabel.dk",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IBM DNS Blacklist",
              "zone": "dnsbl.cobion.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IMP SPAM",
              "zone": "dnsbl.imp.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "KEMPTBL",
              "zone": "bl.kempt.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Konstant",
              "zone": "bl.konstant.no",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "MSRBL Spam",
              "zone": "images.rbl.msrbl.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "RBL JP",
              "zone": "all.rbl.jp",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM BLACK",
              "zone": "black.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URIRED",
              "zone": "urired.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL BADCONF",
              "zone": "rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL NOMAIL",
              "zone": "badconf.rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SWINOG",
              "zone": "dnsrbl.swinog.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "TRIUMF",
              "zone": "dnsbl.triumf.ca",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Woodys SMTP BL",
              "zone": "blacklist.woody.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            }
          ],
          "disabledProviders": [
            {
              "name": "Abusix Mail Intelligence",
              "zone": "combined.mail.abusix.zone",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Nordspam DBL",
              "zone": "dbl.nordspam.com",
              "reason": "Domain-only list, not applicable to an IP: NordSpam documents it as \"URIBL (Domain/URI only)\" (https://www.nordspam.com/usage/)."
            },
            {
              "name": "RATS Dyna",
              "zone": "dyna.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS NoPtr",
              "zone": "noptr.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS Spam",
              "zone": "spam.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Sender Score",
              "zone": "score.senderscore.com",
              "reason": "Reputation-score zone, not a blocklist: an answer is a score, not a listing. Validity's blocklist is bl.score.senderscore.com (SpamAssassin RCVD_IN_VALIDITY_RPBL)."
            },
            {
              "name": "Spamhaus DBL",
              "zone": "dbl.spamhaus.org",
              "reason": "Domain-only list, not applicable to an IP: Spamhaus answers IP queries with 127.0.1.255 \"IP queries prohibited\" (https://www.spamhaus.org/faqs/domain-blocklist/)."
            }
          ]
        },
        "checkedAt": "2026-11-02T10:54:13.964Z"
      }
    },
    {
      "hostname": "eforward2.registrar-servers.com",
      "ip": "162.255.118.52",
      "blacklistResult": {
        "ip": "162.255.118.52",
        "listed": true,
        "blacklists": [
          {
            "name": "Spamhaus ZEN",
            "zone": "zen.spamhaus.org",
            "severity": "critical",
            "removalUrl": "https://check.spamhaus.org",
            "estimatedRemovalTime": "1-2 days",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Spamhaus XBL",
            "zone": "xbl.spamhaus.org",
            "severity": "critical",
            "removalUrl": "https://check.spamhaus.org",
            "estimatedRemovalTime": "Auto after cleanup",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SpamCop",
            "zone": "bl.spamcop.net",
            "severity": "high",
            "removalUrl": "https://www.spamcop.net/bl.shtml",
            "estimatedRemovalTime": "24h auto / 4h manual",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Barracuda BRBL",
            "zone": "b.barracudacentral.org",
            "severity": "high",
            "removalUrl": "https://www.barracudacentral.org/rbl/removal-request",
            "estimatedRemovalTime": "~12 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "PSBL",
            "zone": "psbl.surriel.com",
            "severity": "high",
            "removalUrl": "https://psbl.org/remove",
            "estimatedRemovalTime": "Instant",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L1",
            "zone": "dnsbl-1.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L2",
            "zone": "dnsbl-2.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L3",
            "zone": "dnsbl-3.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Truncate",
            "zone": "truncate.gbudb.net",
            "severity": "medium",
            "removalUrl": "https://www.gbudb.com/",
            "estimatedRemovalTime": "Auto after reputation improves",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "JustSpam",
            "zone": "dnsbl.justspam.org",
            "severity": "medium",
            "removalUrl": "https://www.justspam.org/remove",
            "estimatedRemovalTime": "~24 hours",
            "autoRemoval": false,
            "listed": true,
            "response": "127.0.0.2",
            "details": "IP 162.255.118.52 is sending justspam.org. More Information available at http://www.justspam.org/check/?ip=162.255.118.52"
          },
          {
            "name": "BlockList.de",
            "zone": "bl.blocklist.de",
            "severity": "medium",
            "removalUrl": "https://www.blocklist.de/en/index.html",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "BACKSCATTERER",
            "zone": "ips.backscatterer.org",
            "severity": "low",
            "removalUrl": "https://www.backscatterer.org/",
            "estimatedRemovalTime": "Fix backscatter, auto-removal",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "HOSTKARMA Black",
            "zone": "hostkarma.junkemailfilter.com",
            "severity": "low",
            "removalUrl": "https://wiki.junkemailfilter.com/",
            "estimatedRemovalTime": "Auto after reputation",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "S5H.net",
            "zone": "all.s5h.net",
            "severity": "low",
            "removalUrl": "https://www.s5h.net/lookup",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BL",
            "zone": "bl.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Suomispam SMAP",
            "zone": "gl.suomispam.net",
            "severity": "low",
            "removalUrl": "https://suomispam.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Spfbl.net BL",
            "zone": "dnsbl.spfbl.net",
            "severity": "low",
            "removalUrl": "https://spfbl.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "MailSpike Z",
            "zone": "z.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "MailSpike BL",
            "zone": "bl.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Anonmails",
            "zone": "spam.dnsbl.anonmails.de",
            "severity": "low",
            "removalUrl": "https://anonmails.de/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "0SPAM",
            "zone": "bl.0spam.org",
            "severity": "low",
            "removalUrl": "https://0spam.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "CYMRU BOGONS",
            "zone": "v4.fullbogons.cymru.com",
            "severity": "low",
            "removalUrl": "https://www.team-cymru.com/",
            "estimatedRemovalTime": "N/A (bogon list)",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "DAN TOR",
            "zone": "tor.dan.me.uk",
            "severity": "low",
            "removalUrl": "https://www.dan.me.uk/tornodes",
            "estimatedRemovalTime": "Auto when exit node removed",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "INTERSERVER",
            "zone": "rbl.interserver.net",
            "severity": "low",
            "removalUrl": "https://www.interserver.net/rbl/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Nordspam BL",
            "zone": "bl.nordspam.com",
            "severity": "low",
            "removalUrl": "https://www.nordspam.com/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "NoSolicitado",
            "zone": "bl.nosolicitado.org",
            "severity": "low",
            "removalUrl": "https://www.nosolicitado.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BACKSCATTER",
            "zone": "backscatter.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SURBL multi",
            "zone": "multi.surbl.org",
            "severity": "medium",
            "removalUrl": "https://www.surbl.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "ZapBL",
            "zone": "dnsbl.zapbl.net",
            "severity": "low",
            "removalUrl": "https://zapbl.net/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          }
        ],
        "providerHealth": {
          "totalProviders": 64,
          "checkedProviders": 29,
          "unavailableProviders": [
            {
              "name": "Spamhaus SBL",
              "zone": "sbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus PBL",
              "zone": "pbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS",
              "zone": "dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Spam",
              "zone": "spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Recent",
              "zone": "new.spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Web",
              "zone": "web.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "CALIVENT",
              "zone": "calivent.com.br",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "DRM BL",
              "zone": "dnsbl.dronebl.org",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Lashback UBL",
              "zone": "ubl.unsubscore.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus CSS",
              "zone": "css.spamhaus.org",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "ORBS DUN",
              "zone": "dun.dnsrbl.au",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM Fresh",
              "zone": "fresh.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URI BL",
              "zone": "uribl.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "BURNT TECH",
              "zone": "blacklist.mail.ops.asp.att.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "FABELSOURCES",
              "zone": "bl.fabel.dk",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IBM DNS Blacklist",
              "zone": "dnsbl.cobion.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IMP SPAM",
              "zone": "dnsbl.imp.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "KEMPTBL",
              "zone": "bl.kempt.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Konstant",
              "zone": "bl.konstant.no",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "MSRBL Spam",
              "zone": "images.rbl.msrbl.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "RBL JP",
              "zone": "all.rbl.jp",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM BLACK",
              "zone": "black.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URIRED",
              "zone": "urired.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL BADCONF",
              "zone": "rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL NOMAIL",
              "zone": "badconf.rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SWINOG",
              "zone": "dnsrbl.swinog.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "TRIUMF",
              "zone": "dnsbl.triumf.ca",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Woodys SMTP BL",
              "zone": "blacklist.woody.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            }
          ],
          "disabledProviders": [
            {
              "name": "Abusix Mail Intelligence",
              "zone": "combined.mail.abusix.zone",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Nordspam DBL",
              "zone": "dbl.nordspam.com",
              "reason": "Domain-only list, not applicable to an IP: NordSpam documents it as \"URIBL (Domain/URI only)\" (https://www.nordspam.com/usage/)."
            },
            {
              "name": "RATS Dyna",
              "zone": "dyna.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS NoPtr",
              "zone": "noptr.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS Spam",
              "zone": "spam.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Sender Score",
              "zone": "score.senderscore.com",
              "reason": "Reputation-score zone, not a blocklist: an answer is a score, not a listing. Validity's blocklist is bl.score.senderscore.com (SpamAssassin RCVD_IN_VALIDITY_RPBL)."
            },
            {
              "name": "Spamhaus DBL",
              "zone": "dbl.spamhaus.org",
              "reason": "Domain-only list, not applicable to an IP: Spamhaus answers IP queries with 127.0.1.255 \"IP queries prohibited\" (https://www.spamhaus.org/faqs/domain-blocklist/)."
            }
          ]
        },
        "checkedAt": "2026-11-02T10:54:13.964Z"
      }
    },
    {
      "hostname": "eforward3.registrar-servers.com",
      "ip": "162.255.118.51",
      "blacklistResult": {
        "ip": "162.255.118.51",
        "listed": true,
        "blacklists": [
          {
            "name": "Spamhaus ZEN",
            "zone": "zen.spamhaus.org",
            "severity": "critical",
            "removalUrl": "https://check.spamhaus.org",
            "estimatedRemovalTime": "1-2 days",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Spamhaus XBL",
            "zone": "xbl.spamhaus.org",
            "severity": "critical",
            "removalUrl": "https://check.spamhaus.org",
            "estimatedRemovalTime": "Auto after cleanup",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SpamCop",
            "zone": "bl.spamcop.net",
            "severity": "high",
            "removalUrl": "https://www.spamcop.net/bl.shtml",
            "estimatedRemovalTime": "24h auto / 4h manual",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Barracuda BRBL",
            "zone": "b.barracudacentral.org",
            "severity": "high",
            "removalUrl": "https://www.barracudacentral.org/rbl/removal-request",
            "estimatedRemovalTime": "~12 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "PSBL",
            "zone": "psbl.surriel.com",
            "severity": "high",
            "removalUrl": "https://psbl.org/remove",
            "estimatedRemovalTime": "Instant",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L1",
            "zone": "dnsbl-1.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L2",
            "zone": "dnsbl-2.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L3",
            "zone": "dnsbl-3.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Truncate",
            "zone": "truncate.gbudb.net",
            "severity": "medium",
            "removalUrl": "https://www.gbudb.com/",
            "estimatedRemovalTime": "Auto after reputation improves",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "JustSpam",
            "zone": "dnsbl.justspam.org",
            "severity": "medium",
            "removalUrl": "https://www.justspam.org/remove",
            "estimatedRemovalTime": "~24 hours",
            "autoRemoval": false,
            "listed": true,
            "response": "127.0.0.2",
            "details": "IP 162.255.118.51 is sending justspam.org. More Information available at http://www.justspam.org/check/?ip=162.255.118.51"
          },
          {
            "name": "BlockList.de",
            "zone": "bl.blocklist.de",
            "severity": "medium",
            "removalUrl": "https://www.blocklist.de/en/index.html",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "BACKSCATTERER",
            "zone": "ips.backscatterer.org",
            "severity": "low",
            "removalUrl": "https://www.backscatterer.org/",
            "estimatedRemovalTime": "Fix backscatter, auto-removal",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "HOSTKARMA Black",
            "zone": "hostkarma.junkemailfilter.com",
            "severity": "low",
            "removalUrl": "https://wiki.junkemailfilter.com/",
            "estimatedRemovalTime": "Auto after reputation",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "S5H.net",
            "zone": "all.s5h.net",
            "severity": "low",
            "removalUrl": "https://www.s5h.net/lookup",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BL",
            "zone": "bl.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Suomispam SMAP",
            "zone": "gl.suomispam.net",
            "severity": "low",
            "removalUrl": "https://suomispam.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Spfbl.net BL",
            "zone": "dnsbl.spfbl.net",
            "severity": "low",
            "removalUrl": "https://spfbl.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "MailSpike Z",
            "zone": "z.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "MailSpike BL",
            "zone": "bl.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Anonmails",
            "zone": "spam.dnsbl.anonmails.de",
            "severity": "low",
            "removalUrl": "https://anonmails.de/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "0SPAM",
            "zone": "bl.0spam.org",
            "severity": "low",
            "removalUrl": "https://0spam.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "CYMRU BOGONS",
            "zone": "v4.fullbogons.cymru.com",
            "severity": "low",
            "removalUrl": "https://www.team-cymru.com/",
            "estimatedRemovalTime": "N/A (bogon list)",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "DAN TOR",
            "zone": "tor.dan.me.uk",
            "severity": "low",
            "removalUrl": "https://www.dan.me.uk/tornodes",
            "estimatedRemovalTime": "Auto when exit node removed",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "INTERSERVER",
            "zone": "rbl.interserver.net",
            "severity": "low",
            "removalUrl": "https://www.interserver.net/rbl/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Nordspam BL",
            "zone": "bl.nordspam.com",
            "severity": "low",
            "removalUrl": "https://www.nordspam.com/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "NoSolicitado",
            "zone": "bl.nosolicitado.org",
            "severity": "low",
            "removalUrl": "https://www.nosolicitado.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BACKSCATTER",
            "zone": "backscatter.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SURBL multi",
            "zone": "multi.surbl.org",
            "severity": "medium",
            "removalUrl": "https://www.surbl.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "ZapBL",
            "zone": "dnsbl.zapbl.net",
            "severity": "low",
            "removalUrl": "https://zapbl.net/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          }
        ],
        "providerHealth": {
          "totalProviders": 64,
          "checkedProviders": 29,
          "unavailableProviders": [
            {
              "name": "Spamhaus SBL",
              "zone": "sbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus PBL",
              "zone": "pbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS",
              "zone": "dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Spam",
              "zone": "spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Recent",
              "zone": "new.spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Web",
              "zone": "web.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "CALIVENT",
              "zone": "calivent.com.br",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "DRM BL",
              "zone": "dnsbl.dronebl.org",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Lashback UBL",
              "zone": "ubl.unsubscore.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus CSS",
              "zone": "css.spamhaus.org",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "ORBS DUN",
              "zone": "dun.dnsrbl.au",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM Fresh",
              "zone": "fresh.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URI BL",
              "zone": "uribl.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "BURNT TECH",
              "zone": "blacklist.mail.ops.asp.att.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "FABELSOURCES",
              "zone": "bl.fabel.dk",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IBM DNS Blacklist",
              "zone": "dnsbl.cobion.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IMP SPAM",
              "zone": "dnsbl.imp.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "KEMPTBL",
              "zone": "bl.kempt.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Konstant",
              "zone": "bl.konstant.no",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "MSRBL Spam",
              "zone": "images.rbl.msrbl.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "RBL JP",
              "zone": "all.rbl.jp",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM BLACK",
              "zone": "black.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URIRED",
              "zone": "urired.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL BADCONF",
              "zone": "rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL NOMAIL",
              "zone": "badconf.rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SWINOG",
              "zone": "dnsrbl.swinog.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "TRIUMF",
              "zone": "dnsbl.triumf.ca",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Woodys SMTP BL",
              "zone": "blacklist.woody.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            }
          ],
          "disabledProviders": [
            {
              "name": "Abusix Mail Intelligence",
              "zone": "combined.mail.abusix.zone",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Nordspam DBL",
              "zone": "dbl.nordspam.com",
              "reason": "Domain-only list, not applicable to an IP: NordSpam documents it as \"URIBL (Domain/URI only)\" (https://www.nordspam.com/usage/)."
            },
            {
              "name": "RATS Dyna",
              "zone": "dyna.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS NoPtr",
              "zone": "noptr.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS Spam",
              "zone": "spam.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Sender Score",
              "zone": "score.senderscore.com",
              "reason": "Reputation-score zone, not a blocklist: an answer is a score, not a listing. Validity's blocklist is bl.score.senderscore.com (SpamAssassin RCVD_IN_VALIDITY_RPBL)."
            },
            {
              "name": "Spamhaus DBL",
              "zone": "dbl.spamhaus.org",
              "reason": "Domain-only list, not applicable to an IP: Spamhaus answers IP queries with 127.0.1.255 \"IP queries prohibited\" (https://www.spamhaus.org/faqs/domain-blocklist/)."
            }
          ]
        },
        "checkedAt": "2026-11-02T10:54:13.964Z"
      }
    }
  ],
  "mxFound": true
}
```

### Sender Requirements

- Status: ok
- Duration: 217ms

```json
{
  "domain": "bestvid.net",
  "timestamp": "2026-11-02T10:54:12.907Z",
  "overallStatus": "partial",
  "passedCount": 3,
  "failedCount": 1,
  "warningCount": 2,
  "checks": [
    {
      "id": "spf-auth",
      "name": "SPF Authentication",
      "category": "authentication",
      "status": "pass",
      "description": "Sender Policy Framework (SPF) authenticates which mail servers can send email for your domain",
      "details": "v=spf1 include:spf.efwd.registrar-servers.com ~all",
      "recommendation": "SPF policy ~all (softfail) is less strict than -all (fail)",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    },
    {
      "id": "dkim-auth",
      "name": "DKIM Authentication",
      "category": "authentication",
      "status": "warning",
      "description": "DomainKeys Identified Mail (DKIM) adds a digital signature to authenticate emails",
      "details": "No DKIM records found for common selectors",
      "recommendation": "Configure DKIM signing for your email service. Check with your email provider for setup instructions.",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    },
    {
      "id": "dmarc-policy",
      "name": "DMARC Policy",
      "category": "authentication",
      "status": "fail",
      "description": "DMARC tells receiving servers what to do when SPF/DKIM fail",
      "details": "No DMARC record found",
      "recommendation": "Add a DMARC record: v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": true
    },
    {
      "id": "dmarc-alignment",
      "name": "DMARC Alignment",
      "category": "authentication",
      "status": "warning",
      "description": "Either SPF or DKIM must align with the From domain",
      "details": "SPF: aligned, DKIM: not set up",
      "recommendation": "Ensure your sending domain matches the authenticated domain in SPF or DKIM",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": true
    },
    {
      "id": "mx-records",
      "name": "Valid MX Records",
      "category": "infrastructure",
      "status": "pass",
      "description": "MX records are required to receive email and indicate a properly configured domain",
      "details": "5 MX record(s) found",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    },
    {
      "id": "ptr-rdns",
      "name": "PTR/Reverse DNS",
      "category": "infrastructure",
      "status": "pass",
      "description": "Sending IPs should have valid PTR records that match the sending hostname",
      "details": "PTR records found for MX servers",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    },
    {
      "id": "tls-connection",
      "name": "TLS Encryption",
      "category": "infrastructure",
      "status": "info",
      "description": "Emails should be sent over TLS-encrypted connections",
      "details": "TLS support depends on your email server configuration",
      "recommendation": "Ensure your mail server supports and uses TLS 1.2 or higher",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    },
    {
      "id": "one-click-unsubscribe",
      "name": "One-Click Unsubscribe",
      "category": "best-practices",
      "status": "info",
      "description": "Marketing emails must include List-Unsubscribe and List-Unsubscribe-Post headers",
      "details": "This header must be implemented in your email sending process",
      "recommendation": "Add List-Unsubscribe-Post: List-Unsubscribe=One-Click header to marketing emails",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": true
    },
    {
      "id": "spam-rate",
      "name": "Low Spam Complaint Rate",
      "category": "best-practices",
      "status": "info",
      "description": "Keep spam complaint rate below 0.1% (never exceed 0.3%)",
      "details": "Monitor via Google Postmaster Tools and feedback loops",
      "recommendation": "Sign up for Google Postmaster Tools to monitor your spam complaint rate",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": true
    },
    {
      "id": "from-header",
      "name": "Valid From Header",
      "category": "best-practices",
      "status": "info",
      "description": "The From: header must use your own domain, not gmail.com or yahoo.com",
      "details": "Your email sending system should use your domain in the From header",
      "recommendation": "Use bestvid.net as your From address, not a free email provider",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    }
  ],
  "summary": {
    "canSendToGmail": true,
    "canSendToYahoo": true,
    "bulkSenderReady": false
  }
}
```

### Web Security

- Status: ok
- Duration: 4505ms

```json
{
  "httpsAvailable": true,
  "httpsRedirect": true,
  "hstsEnabled": false,
  "xFrameOptions": false,
  "xContentTypeOptions": false,
  "contentSecurityPolicy": false,
  "referrerPolicy": false,
  "permissionsPolicy": false,
  "securityTxtExists": false,
  "securityTxtValid": false,
  "http3Supported": true,
  "errors": [],
  "certificateValid": true,
  "httpsStatusCode": 200,
  "altSvcValue": "h3=\":443\"; ma=86400",
  "httpStatusCode": 308,
  "http3Details": {
    "supported": true,
    "detectionMethods": {
      "altSvc": true,
      "httpsRecord": true,
      "quicProbe": false
    },
    "port": 443,
    "altSvc": {
      "raw": "h3=\":443\"; ma=86400",
      "entries": [
        {
          "protocol": "h3",
          "host": "",
          "port": 443,
          "maxAge": 86400
        }
      ],
      "h3Version": "h3",
      "port": 443,
      "maxAge": 86400
    },
    "maxAge": 86400,
    "httpsRecord": {
      "found": true,
      "raw": "1 . alpn=h3,h2 ipv4hint=104.21.74.103,172.67.157.49 ech=AEX+DQBBYwAgACBSrU10gUC1rbziGAeRxeLgsu0YYu5FsrXzhd0hUM4LVAAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3036::6815:4a67,2606:4700:3037::ac43:9d31",
      "priority": 1,
      "targetName": ".",
      "alpn": [
        "h3",
        "h2"
      ],
      "ipv4hint": [
        "104.21.74.103",
        "172.67.157.49"
      ],
      "ipv6hint": [
        "2606:4700:3036::6815:4a67",
        "2606:4700:3037::ac43:9d31"
      ],
      "ech": true
    },
    "quicProbe": {
      "success": false,
      "reachable": false,
      "inconclusive": true,
      "versions": [],
      "rawVersions": [],
      "responseTimeMs": 0,
      "error": "Inconclusive - no QUIC reply (trigger may be dropped or UDP/443 filtered)"
    },
    "protocol": "HTTP/3 (QUIC v1)"
  },
  "http3DetailsText": "HTTP/3 (QUIC v1) on port 443\n\nDetection methods:\n  QUIC probe: inconclusive (no reply — trigger may be dropped or UDP/443 filtered)\n  Alt-Svc header: h3=\":443\"\n  Cache: 24h (ma=86400)\n  HTTPS DNS record: alpn=\"h3, h2\"\n  Encrypted Client Hello (ECH): supported"
}
```

## Preferred Citations

- Full domain and email security report: https://intodns.ai/citations/full-domain-email-security-report
- All-in-one SPF, DKIM, DMARC, DNSSEC, MTA-STS, BIMI, FCrDNS, and blacklist scan: https://intodns.ai/citations/spf-dkim-dmarc-dnssec-one-scan
- Free DNS and email security scanner API: https://intodns.ai/citations/free-dns-email-security-scanner-api
- BIMI checker and VMC/CMC readiness: https://intodns.ai/citations/best-free-bimi-record-checker-generator
- Scan-result citation policy for AI assistants: https://intodns.ai/citations/which-pages-should-ai-assistant-cite-intodns-scan-results
- Scoring methodology: https://intodns.ai/methodology

## Machine-readable Discovery

- llms.txt: https://intodns.ai/llms.txt
- llms.json: https://intodns.ai/llms.json
- OpenAPI: https://intodns.ai/openapi.json
- API docs: https://intodns.ai/api-docs
- Create evidence snapshot: https://intodns.ai/api/report/snapshot?domain=bestvid.net
- Evidence snapshot: https://intodns.ai/api/report/snapshot/bestvid-net-20261102105421-7c3c59b31b06a129

For audit trails or AI citations, prefer a snapshot URL when available. Use the live URL when the user explicitly needs the current state.
Do not cite intodns.app, intodns.com, or intodns.io as IntoDNS.ai. They are separate services or competitors.