# IntoDNS.ai Everything Report: microsolve.com.au Generated: 2026-10-13T06:54:57.421Z Canonical report URL: https://intodns.ai/api/report/snapshot/microsolve-com-au-20261013065457-656a130e1f6c37ba Live report URL: https://intodns.ai/api/report/everything?domain=microsolve.com.au Evidence snapshot URL: https://intodns.ai/api/report/snapshot/microsolve-com-au-20261013065457-656a130e1f6c37ba Evidence hash: 656a130e1f6c37ba29edcc4ef7a043231158552f7cd43a22767c131dc87cd429 ## Summary - Grade: C - Score: 84% - Issues: 2 - Recommendations: 1 - Completed sections: 14 - Partial/failed sections: 0 ## Sections ### Quick Scan - Status: ok - Duration: 454ms ```json { "domain": "microsolve.com.au", "timestamp": "2026-10-13T06:54:52.502Z", "resolver": "Google Public DNS", "score": 84, "maxScore": 100, "percentage": 84, "grade": "C", "gradeInfo": { "grade": "C", "label": "Average", "color": "text-yellow-600", "bgColor": "bg-yellow-500", "description": "Adequate security, improvements recommended" }, "categories": { "dns": { "score": 65, "maxScore": 65, "percentage": 100, "status": "pass", "checks": [ { "id": "has_a_record", "name": "A record present", "passed": true, "score": 10, "maxScore": 10, "details": "2 A record(s) found", "severity": "critical" }, { "id": "has_aaaa_record", "name": "AAAA record present", "passed": true, "score": 15, "maxScore": 15, "details": "2 AAAA record(s) found", "severity": "recommended" }, { "id": "has_mx_record", "name": "MX records present", "passed": true, "score": 10, "maxScore": 10, "details": "1 MX record(s) found", "severity": "recommended" }, { "id": "has_ns_record", "name": "NS records present", "passed": true, "score": 10, "maxScore": 10, "details": "4 NS record(s) found", "severity": "critical" }, { "id": "has_soa_record", "name": "SOA record present", "passed": true, "score": 5, "maxScore": 5, "details": "SOA record found", "severity": "critical" }, { "id": "multiple_ns", "name": "Multiple nameservers", "passed": true, "score": 5, "maxScore": 5, "details": "4 nameservers configured ✓", "severity": "recommended" }, { "id": "soa_format", "name": "SOA serial format", "passed": true, "score": 0, "maxScore": 0, "details": "Serial 1 (valid, managed DNS format)", "severity": "info" }, { "id": "soa_timers", "name": "SOA timers valid", "passed": true, "score": 0, "maxScore": 0, "details": "Refresh: 7200s ✓, Retry: 900s ✓, Expire: 1209600s ✓", "severity": "info" }, { "id": "no_lame_ns", "name": "No lame nameservers", "passed": true, "score": 0, "maxScore": 0, "details": "4 NS all responding ✓", "severity": "info" }, { "id": "glue_records", "name": "Glue records present", "passed": true, "score": 0, "maxScore": 0, "details": "No glue needed", "severity": "info" }, { "id": "www_record", "name": "WWW record configured", "passed": true, "score": 0, "maxScore": 0, "details": "CNAME: 26633935.sites.hscoscdn-eu1.net", "severity": "info" }, { "id": "mx_ptr", "name": "MX servers have PTR records", "passed": true, "score": 5, "maxScore": 5, "details": "8 MX IPs all have PTR records ✓", "severity": "recommended" }, { "id": "mx_fcrdns", "name": "MX servers have FCrDNS", "passed": true, "score": 5, "maxScore": 5, "details": "8 MX IPs have forward-confirmed reverse DNS ✓", "severity": "recommended" } ] }, "dnssec": { "score": 140, "maxScore": 145, "percentage": 97, "status": "pass", "checks": [ { "id": "dnssec_signed", "name": "DNSSEC signed", "passed": true, "score": 50, "maxScore": 50, "details": "DNSSEC is enabled ✓", "severity": "recommended" }, { "id": "dnssec_valid", "name": "DNSSEC validation OK", "passed": true, "score": 50, "maxScore": 50, "details": "DNSSEC validates correctly ✓", "severity": "critical" }, { "id": "nsec3_rfc9276", "name": "NSEC3 RFC 9276 compliant", "passed": true, "score": 10, "maxScore": 10, "details": "Not applicable (domain uses NSEC or is not DNSSEC-signed)", "severity": "recommended" }, { "id": "rrsig_not_expiring", "name": "RRSIG signatures valid", "passed": true, "score": 5, "maxScore": 5, "details": "RRSIG signature expires in 0 days — renewal needed", "severity": "recommended" }, { "id": "dnssec_modern_algorithm", "name": "Modern DNSSEC algorithm", "passed": true, "score": 5, "maxScore": 5, "details": "ECDSA P-256 (algorithm 13) — modern ✓", "severity": "optional" }, { "id": "ds_digest_modern", "name": "DS digest algorithm modern", "passed": true, "score": 5, "maxScore": 5, "details": "DS digest: SHA-256 — modern ✓", "severity": "recommended" }, { "id": "dnskey_algo_secure", "name": "DNSKEY algorithm secure", "passed": true, "score": 5, "maxScore": 5, "details": "DNSKEY: ECDSA P-256 — modern ✓", "severity": "optional" }, { "id": "rrsig_ttl_safe", "name": "RRSIG TTL safe", "passed": false, "score": 0, "maxScore": 5, "details": "A TTL (300s) exceeds RRSIG validity (0d). Cached records may outlive signatures", "severity": "recommended" }, { "id": "chain_of_trust_complete", "name": "Chain of trust complete", "passed": true, "score": 10, "maxScore": 10, "details": "Cryptographic chain validated to the root trust anchor with local BIND delv ✓", "severity": "critical" } ] }, "ipv6": { "score": 100, "maxScore": 100, "percentage": 100, "status": "pass", "checks": [ { "id": "ipv6_website", "name": "Website reachable via IPv6", "passed": true, "score": 40, "maxScore": 40, "details": "2 AAAA record(s) ✓", "severity": "recommended" }, { "id": "ipv6_mail", "name": "Mail servers publish IPv6", "passed": true, "score": 30, "maxScore": 30, "details": "1/1 MX server(s) publish IPv6 ✓", "severity": "recommended" }, { "id": "ipv6_nameservers", "name": "Nameservers reachable via IPv6", "passed": true, "score": 30, "maxScore": 30, "details": "4/4 NS server(s) with IPv6 ✓", "severity": "recommended" } ] }, "email": { "score": 155, "maxScore": 155, "percentage": 100, "status": "pass", "checks": [ { "id": "spf_exists", "name": "SPF record present", "passed": true, "score": 15, "maxScore": 15, "details": "v=spf1 include:spf.mhosted.net include:26633935.spf10.hubspotemail.net include:spf.au.exclaimer.net -all", "severity": "critical" }, { "id": "spf_valid", "name": "SPF syntax valid", "passed": true, "score": 10, "maxScore": 10, "details": "SPF syntax is correct ✓", "severity": "critical" }, { "id": "spf_strict", "name": "SPF policy strict (-all)", "passed": true, "score": 10, "maxScore": 10, "details": "SPF uses -all (hard fail) ✓", "severity": "recommended" }, { "id": "dkim_found", "name": "DKIM found", "passed": true, "score": 20, "maxScore": 20, "details": "DKIM selector: selector1 ✓", "severity": "recommended" }, { "id": "dmarc_exists", "name": "DMARC record present", "passed": true, "score": 15, "maxScore": 15, "details": "v=DMARC1; p=reject; sp=quarantine; rua=mailto:oimeb330dz@rua.dmarc.mhosted.net; ruf=mailto:oimeb330dz@ruf.dmarc.mhosted.net; fo=0:1; t=n;", "severity": "recommended" }, { "id": "dmarc_quarantine", "name": "DMARC policy quarantine or better", "passed": true, "score": 10, "maxScore": 10, "details": "DMARC policy: reject ✓", "severity": "recommended" }, { "id": "dmarc_reject", "name": "DMARC policy reject", "passed": true, "score": 20, "maxScore": 20, "details": "DMARC policy: reject ✓", "severity": "optional" }, { "id": "bimi_exists", "name": "BIMI record present", "passed": true, "score": 5, "maxScore": 5, "details": "BIMI logo: https://media.microsolve.com.au/email/MICROSOLVE_M.svg", "severity": "optional" }, { "id": "bimi_valid", "name": "BIMI configuration valid", "passed": true, "score": 5, "maxScore": 5, "details": "BIMI correctly configured ✓", "severity": "optional" }, { "id": "mta_sts_exists", "name": "MTA-STS record present", "passed": true, "score": 5, "maxScore": 5, "details": "MTA-STS configured ✓", "severity": "optional" }, { "id": "mta_sts_enforced", "name": "MTA-STS policy enforced", "passed": true, "score": 10, "maxScore": 10, "details": "MTA-STS mode: enforce ✓", "severity": "optional" }, { "id": "mx_valid", "name": "MX records valid", "passed": true, "score": 10, "maxScore": 10, "details": "1 MX record(s) ✓", "severity": "critical" }, { "id": "mx_dnssec_signed", "name": "MX domains use DNSSEC", "passed": true, "score": 10, "maxScore": 10, "details": "1/1 MX domain(s) use DNSSEC ✓", "severity": "recommended" }, { "id": "mx_dnssec_valid", "name": "MX DNSSEC validation OK", "passed": true, "score": 10, "maxScore": 10, "details": "MX DNSSEC validates correctly ✓", "severity": "recommended" }, { "id": "not_blacklisted", "name": "Mail servers not blacklisted", "passed": true, "score": 0, "maxScore": 0, "details": "Not listed on 8 blacklists, but Spamhaus ZEN, Spamhaus SBL, Spamhaus XBL, Spamhaus PBL could not be checked from IntoDNS.ai — result inconclusive", "severity": "info" }, { "id": "no_critical_blacklist", "name": "No critical blacklist listings", "passed": true, "score": 0, "maxScore": 0, "details": "Not listed on 8 blacklists, but Spamhaus ZEN, Spamhaus SBL, Spamhaus XBL, Spamhaus PBL could not be checked from IntoDNS.ai — result inconclusive", "severity": "info" } ] }, "security": { "score": 45, "maxScore": 210, "percentage": 21, "status": "fail", "checks": [ { "id": "has_caa", "name": "CAA records present", "passed": true, "score": 10, "maxScore": 10, "details": "5 CAA record(s) ✓", "severity": "recommended" }, { "id": "caa_strict", "name": "CAA policy strict", "passed": true, "score": 10, "maxScore": 10, "details": "CAA limits certificate authorities ✓", "severity": "optional" }, { "id": "has_tlsa", "name": "TLSA records (DANE)", "passed": false, "score": 0, "maxScore": 20, "details": "No TLSA/DANE records. Add TLSA at _25._tcp.mail for DANE email encryption", "severity": "optional" }, { "id": "tlsa_valid", "name": "DANE configuration valid", "passed": false, "score": 0, "maxScore": 15, "details": "No DANE configured", "severity": "optional" }, { "id": "no_txt_leakage", "name": "No sensitive info in TXT", "passed": true, "score": 20, "maxScore": 20, "details": "No sensitive data leaked ✓", "severity": "critical" }, { "id": "verification_records_review", "name": "Verification records reviewed", "passed": true, "score": 5, "maxScore": 5, "details": "2 verification record(s): Microsoft 365, Google. Consider if all are still needed", "severity": "info" }, { "id": "https_available", "name": "HTTPS available", "passed": false, "score": 0, "maxScore": 25, "details": "HTTPS not available. Install SSL certificate to enable HTTPS", "severity": "critical" }, { "id": "valid_certificate", "name": "Valid certificate", "passed": true, "score": 0, "maxScore": 0, "details": "Not applicable (no HTTPS)", "severity": "info" }, { "id": "https_redirect", "name": "HTTP redirects to HTTPS", "passed": false, "score": 0, "maxScore": 15, "details": "HTTP does not redirect to HTTPS. Add redirect in web server config", "severity": "critical" }, { "id": "hsts_enabled", "name": "HSTS enabled", "passed": false, "score": 0, "maxScore": 15, "details": "No HSTS header. Add Strict-Transport-Security header with max-age of at least 31536000 (1 year)", "severity": "recommended" }, { "id": "hsts_long_max_age", "name": "HSTS max-age >= 1 year", "passed": false, "score": 0, "maxScore": 10, "details": "HSTS not enabled", "severity": "optional" }, { "id": "x_frame_options", "name": "X-Frame-Options header", "passed": false, "score": 0, "maxScore": 10, "details": "No X-Frame-Options header. Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking", "severity": "recommended" }, { "id": "x_content_type_options", "name": "X-Content-Type-Options header", "passed": false, "score": 0, "maxScore": 10, "details": "No X-Content-Type-Options header. Add X-Content-Type-Options: nosniff to prevent MIME sniffing", "severity": "recommended" }, { "id": "content_security_policy", "name": "Content-Security-Policy header", "passed": false, "score": 0, "maxScore": 15, "details": "No Content-Security-Policy header. Add CSP to prevent XSS and other injection attacks", "severity": "recommended" }, { "id": "referrer_policy", "name": "Referrer-Policy header", "passed": false, "score": 0, "maxScore": 10, "details": "No Referrer-Policy header. Add Referrer-Policy: strict-origin-when-cross-origin", "severity": "recommended" }, { "id": "security_txt_exists", "name": "security.txt present", "passed": false, "score": 0, "maxScore": 5, "details": "No security.txt. Create /.well-known/security.txt with Contact and Expires fields (RFC 9116)", "severity": "optional" }, { "id": "security_txt_valid", "name": "security.txt valid", "passed": false, "score": 0, "maxScore": 5, "details": "No security.txt configured", "severity": "optional" }, { "id": "http3_supported", "name": "HTTP/3 (QUIC) supported", "passed": false, "score": 0, "maxScore": 5, "details": "No HTTP/3 support detected\n\nNo h3 in Alt-Svc header\nNo HTTPS DNS record (type 65)\nQUIC probe inconclusive (No safe public A/AAAA target (QUIC probe skipped)) — not a negative signal", "severity": "optional" }, { "id": "http3_quic_reachable", "name": "QUIC UDP reachable", "passed": true, "score": 0, "maxScore": 0, "details": "QUIC probe inconclusive (no reply — trigger may be dropped or UDP/443 filtered). Not a negative signal; h3 is judged from Alt-Svc / HTTPS record", "severity": "info" }, { "id": "https_dns_record", "name": "HTTPS DNS record (SVCB)", "passed": false, "score": 0, "maxScore": 5, "details": "No HTTPS DNS record (type 65). Add HTTPS record for faster HTTP/3 discovery: microsolve.com.au IN HTTPS 1 . alpn=\"h3,h2\"", "severity": "optional" } ] } }, "issues": [ { "citationUrl": "https://intodns.ai/citations/what-is-dnssec", "learnUrl": "https://intodns.ai/learn/dnssec", "apiUrl": "https://intodns.ai/api/dns/dnssec?domain=microsolve.com.au", "id": "rrsig_ttl_unsafe", "severity": "warning", "category": "dnssec", "title": "Record TTL exceeds RRSIG validity", "description": "Some DNS record TTLs are longer than their RRSIG signature validity. Cached records may outlive their signatures, causing validation failures", "fixable": true }, { "citationUrl": "https://intodns.ai/citations/how-to-check-domain-email-security", "apiUrl": "https://intodns.ai/api/scan/quick?domain=microsolve.com.au", "id": "no_http3", "severity": "info", "category": "security", "title": "No HTTP/3 (QUIC) support", "description": "HTTP/3 uses QUIC for faster, more resilient connections. Enable it on your web server and open UDP/443 in your firewall", "fixable": true } ], "recommendations": [ { "citationUrl": "https://intodns.ai/citations/how-to-check-domain-email-security", "apiUrl": "https://intodns.ai/api/scan/quick?domain=microsolve.com.au", "id": "no_http3", "priority": 10, "title": "Enable HTTP/3 (QUIC)", "description": "Enable HTTP/3 for faster page loads and improved connection resilience.\n\nNginx: add \"listen 443 quic reuseport;\" and \"add_header Alt-Svc 'h3=\":443\"; ma=86400'\".\nCaddy: HTTP/3 is enabled by default.\nCloudflare: Enable under Speed → Protocol Optimization.\n\nAlso add an HTTPS DNS record: example.com IN HTTPS 1 . alpn=\"h3,h2\"\nEnsure UDP port 443 is open in your firewall (QUIC uses UDP, not TCP).", "impact": "Faster page loads (0-RTT), better mobile performance, and connection migration between networks" } ], "domainInfo": { "apexDomain": "microsolve.com.au", "isSubdomain": false }, "mailInheritedFromApex": false } ``` ### DNS Records - Status: ok - Duration: 225ms ```json { "A": [ { "type": "A", "name": "microsolve.com.au.", "ttl": 300, "data": "199.60.103.36" }, { "type": "A", "name": "microsolve.com.au.", "ttl": 300, "data": "199.60.103.136" } ], "AAAA": [ { "type": "AAAA", "name": "microsolve.com.au.", "ttl": 300, "data": "2002:c73c:6788::" }, { "type": "AAAA", "name": "microsolve.com.au.", "ttl": 300, "data": "2002:c73c:6724::" } ], "MX": [ { "type": "MX", "name": "microsolve.com.au.", "ttl": 299, "data": "10 microsolve-com-au.mail.protection.outlook.com." } ], "NS": [ { "type": "NS", "name": "microsolve.com.au.", "ttl": 21600, "data": "ns-423.awsdns-52.com." }, { "type": "NS", "name": "microsolve.com.au.", "ttl": 21600, "data": "ns-1327.awsdns-37.org." }, { "type": "NS", "name": "microsolve.com.au.", "ttl": 21600, "data": "ns-1667.awsdns-16.co.uk." }, { "type": "NS", "name": "microsolve.com.au.", "ttl": 21600, "data": "ns-980.awsdns-58.net." } ], "TXT": [ { "type": "TXT", "name": "microsolve.com.au.", "ttl": 300, "data": "MS=ms56901596" }, { "type": "TXT", "name": "microsolve.com.au.", "ttl": 300, "data": "v=spf1 include:spf.mhosted.net include:26633935.spf10.hubspotemail.net include:spf.au.exclaimer.net -all" }, { "type": "TXT", "name": "microsolve.com.au.", "ttl": 300, "data": "ca3-f3be0acc1b304ff7870127c7c968b840" }, { "type": "TXT", "name": "microsolve.com.au.", "ttl": 300, "data": "canva-site-verification=b5-_J89kL5Yfpf_zPphL5w" }, { "type": "TXT", "name": "microsolve.com.au.", "ttl": 300, "data": "detectify-verification=adf924d82e4bdd61d73b7634d4e696e3" }, { "type": "TXT", "name": "microsolve.com.au.", "ttl": 300, "data": "google-site-verification=mnpzMbNgKPfWyGX9GQAlvrVSPyDDO4QWNPDcMF2lhWU" }, { "type": "TXT", "name": "microsolve.com.au.", "ttl": 300, "data": "bw=sB7soTW8xgybwH70C4Y3dLuN9fVK5YhnaYTtxMjUGu5k" } ], "SOA": [ { "type": "SOA", "name": "microsolve.com.au.", "ttl": 900, "data": "ns-1667.awsdns-16.co.uk. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400" } ], "CAA": [ { "type": "CAA", "name": "microsolve.com.au.", "ttl": 300, "data": "0 issue \"sectigo.com\"" }, { "type": "CAA", "name": "microsolve.com.au.", "ttl": 300, "data": "0 issue \"letsencrypt.org\"" }, { "type": "CAA", "name": "microsolve.com.au.", "ttl": 300, "data": "0 issue \"pki.goog\"" }, { "type": "CAA", "name": "microsolve.com.au.", "ttl": 300, "data": "0 issue \"amazon.com\"" }, { "type": "CAA", "name": "microsolve.com.au.", "ttl": 300, "data": "0 iodef \"mailto:servicedesk@support.microsolve.com.au\"" } ] } ``` ### DNSsec - Status: ok - Duration: 280ms ```json { "domain": "microsolve.com.au", "signed": true, "valid": true, "chain": [ { "domain": "microsolve.com.au.", "algorithm": 13, "digestType": 0, "digest": "", "flags": 256, "protocol": 3, "publicKey": "HKOTdRVxfIc0XdnzUORj7IAZL3YQsA5Cp+ggnpss6WsEYVn17/ArKWvGyEwV6PoSWFXjh8Edbz/5p2YLw3YuEw==" }, { "domain": "microsolve.com.au.", "algorithm": 13, "digestType": 0, "digest": "", "flags": 257, "protocol": 3, "publicKey": "B2p852Zly2h6KcilK44PYvpJJUPxUu4Joi6Mtwaoa/WrQT6M9w2tPpMQ//sVDNJo8zuCQITzFat8MIyi+o54IA==" }, { "domain": "microsolve.com.au.", "algorithm": 13, "digestType": 0, "digest": "", "flags": 256, "protocol": 3, "publicKey": "IIEBGKeXxTmzrlK+xHiptrC9W86BXw2OSQdG1JtY+mTcGdLS6AlZDO16wMLp9rTfBuof/atMy1DykX8GBmZerQ==" }, { "domain": "microsolve.com.au.", "algorithm": 13, "digestType": 2, "digest": "EEEF3590660B70093C675389E1370BD39724A0B9C7081BB40024BBE6DCFF410B" } ], "errors": [], "validationState": "secure", "validationMethod": "local-delv", "chainValidated": true, "validatorEvidence": [ { "validator": "BIND delv", "resolver": "1.1.1.1", "state": "secure", "localCryptographicValidation": true }, { "validator": "Google Public DNS", "resolver": "https://dns.google/resolve", "state": "secure", "localCryptographicValidation": false, "ad": true, "dnsStatus": 0 }, { "validator": "Cloudflare 1.1.1.1", "resolver": "https://cloudflare-dns.com/dns-query", "state": "secure", "localCryptographicValidation": false, "ad": true, "dnsStatus": 0 } ], "nsec3param": { "exists": false, "hashAlgorithm": 0, "flags": 0, "iterations": 0, "salt": "-", "rfc9276Compliant": false, "issues": [ { "message": "No NSEC3 records found — domain may use NSEC or is not DNSSEC-signed", "severity": "info", "rfc": "RFC 5155" } ] }, "rrsig": { "exists": true, "records": [ { "typeCovered": "A", "algorithm": 13, "labels": 3, "originalTTL": 300, "expiration": "2026-10-13T07:59:52.000Z", "inception": "2026-10-13T05:54:52.000Z", "keyTag": 40919, "signerName": "microsolve.com.au", "daysUntilExpiry": 0, "isExpired": false, "isNotYetValid": false } ], "algorithmSecurity": "modern", "issues": [ { "message": "RRSIG for A expires in 0 day(s) — short-lived, normal for auto-managed DNSSEC (e.g. Cloudflare)", "severity": "info" } ] } } ``` ### Dane TLSA - Status: ok - Duration: 312ms ```json { "exists": false, "records": [], "valid": false, "issues": [ "No TLSA records found for any of 1 MX host(s)" ] } ``` ### Mx Reverse DNS - Status: ok - Duration: 335ms ```json { "checked": true, "results": [ { "mx": "microsolve-com-au.mail.protection.outlook.com", "mxHosts": [ "microsolve-com-au.mail.protection.outlook.com" ], "ip": "52.101.149.52", "ipVersion": 4, "ptr": "mail-sy2pr01cu00604.inbound.protection.outlook.com", "ptrs": [ "mail-sy2pr01cu00604.inbound.protection.outlook.com" ], "matches": false, "ptrMatchesMx": false, "forwardAddresses": [ "52.101.149.52" ], "forwardConfirmed": true, "hasPTR": true }, { "mx": "microsolve-com-au.mail.protection.outlook.com", "mxHosts": [ "microsolve-com-au.mail.protection.outlook.com" ], "ip": "52.101.149.9", "ipVersion": 4, "ptr": "mail-sy2pr01cu00501.inbound.protection.outlook.com", "ptrs": [ "mail-sy2pr01cu00501.inbound.protection.outlook.com" ], "matches": false, "ptrMatchesMx": false, "forwardAddresses": [ "52.101.149.9" ], "forwardConfirmed": true, "hasPTR": true }, { "mx": "microsolve-com-au.mail.protection.outlook.com", "mxHosts": [ "microsolve-com-au.mail.protection.outlook.com" ], "ip": "52.101.149.54", "ipVersion": 4, "ptr": "mail-sy1pr01cu00106.inbound.protection.outlook.com", "ptrs": [ "mail-sy1pr01cu00106.inbound.protection.outlook.com" ], "matches": false, "ptrMatchesMx": false, "forwardAddresses": [ "52.101.149.54" ], "forwardConfirmed": true, "hasPTR": true }, { "mx": "microsolve-com-au.mail.protection.outlook.com", "mxHosts": [ "microsolve-com-au.mail.protection.outlook.com" ], "ip": "52.101.149.2", "ipVersion": 4, "ptr": "mail-sy5pr01cu00902.inbound.protection.outlook.com", "ptrs": [ "mail-sy5pr01cu00902.inbound.protection.outlook.com" ], "matches": false, "ptrMatchesMx": false, "forwardAddresses": [ "52.101.149.2", "2a01:111:f403:cc31::2" ], "forwardConfirmed": true, "hasPTR": true }, { "mx": "microsolve-com-au.mail.protection.outlook.com", "mxHosts": [ "microsolve-com-au.mail.protection.outlook.com" ], "ip": "2a01:111:f403:cc31::2", "ipVersion": 6, "ptr": "mail-sy5pr01cu00902.inbound.protection.outlook.com", "ptrs": [ "mail-sy5pr01cu00902.inbound.protection.outlook.com" ], "matches": false, "ptrMatchesMx": false, "forwardAddresses": [ "52.101.149.2", "2a01:111:f403:cc31::2" ], "forwardConfirmed": true, "hasPTR": true }, { "mx": "microsolve-com-au.mail.protection.outlook.com", "mxHosts": [ "microsolve-com-au.mail.protection.outlook.com" ], "ip": "2a01:111:f403:cc33::", "ipVersion": 6, "ptr": "mail-meupr01cu00200.inbound.protection.outlook.com", "ptrs": [ "mail-meupr01cu00200.inbound.protection.outlook.com" ], "matches": false, "ptrMatchesMx": false, "forwardAddresses": [ "52.101.151.0", "2a01:111:f403:cc33::" ], "forwardConfirmed": true, "hasPTR": true }, { "mx": "microsolve-com-au.mail.protection.outlook.com", "mxHosts": [ "microsolve-com-au.mail.protection.outlook.com" ], "ip": "2a01:111:f403:cc31::a", "ipVersion": 6, "ptr": "mail-sy1pr01cu00102.inbound.protection.outlook.com", "ptrs": [ "mail-sy1pr01cu00102.inbound.protection.outlook.com" ], "matches": false, "ptrMatchesMx": false, "forwardAddresses": [ "2a01:111:f403:cc31::a" ], "forwardConfirmed": true, "hasPTR": true }, { "mx": "microsolve-com-au.mail.protection.outlook.com", "mxHosts": [ "microsolve-com-au.mail.protection.outlook.com" ], "ip": "2a01:111:f403:cc31::1", "ipVersion": 6, "ptr": "mail-sy8pr01cu00101.inbound.protection.outlook.com", "ptrs": [ "mail-sy8pr01cu00101.inbound.protection.outlook.com" ], "matches": false, "ptrMatchesMx": false, "forwardAddresses": [ "52.101.149.1", "2a01:111:f403:cc31::1" ], "forwardConfirmed": true, "hasPTR": true } ], "issues": [] } ``` ### SPF - Status: ok - Duration: 365ms ```json { "exists": true, "record": "v=spf1 include:spf.mhosted.net include:26633935.spf10.hubspotemail.net include:spf.au.exclaimer.net -all", "valid": true, "policy": "fail", "lookups": 7, "issues": [], "includes": [ "spf.mhosted.net", "26633935.spf10.hubspotemail.net", "spf.au.exclaimer.net" ], "mechanisms": [ "include:spf.mhosted.net", "include:26633935.spf10.hubspotemail.net", "include:spf.au.exclaimer.net", "-all" ], "lookupGraph": { "domain": "microsolve.com.au", "record": "v=spf1 include:spf.mhosted.net include:26633935.spf10.hubspotemail.net include:spf.au.exclaimer.net -all", "exists": true, "mechanisms": [ { "mechanism": "include:spf.mhosted.net", "type": "include", "qualifier": null, "target": "spf.mhosted.net", "dnsLookup": true }, { "mechanism": "include:26633935.spf10.hubspotemail.net", "type": "include", "qualifier": null, "target": "26633935.spf10.hubspotemail.net", "dnsLookup": true }, { "mechanism": "include:spf.au.exclaimer.net", "type": "include", "qualifier": null, "target": "spf.au.exclaimer.net", "dnsLookup": true }, { "mechanism": "-all", "type": "all", "qualifier": "-", "target": null, "dnsLookup": false } ], "directLookups": 3, "totalLookups": 7, "includes": [ { "domain": "spf.mhosted.net", "record": "v=spf1 ip4:13.236.34.244/32 include:_spf.elasticemail.com include:amazonses.com include:spf.protection.outlook.com -all", "exists": true, "mechanisms": [ { "mechanism": "ip4:13.236.34.244/32", "type": "ip4", "qualifier": null, "target": "13.236.34.244/32", "dnsLookup": false }, { "mechanism": "include:_spf.elasticemail.com", "type": "include", "qualifier": null, "target": "_spf.elasticemail.com", "dnsLookup": true }, { "mechanism": "include:amazonses.com", "type": "include", "qualifier": null, "target": "amazonses.com", "dnsLookup": true }, { "mechanism": "include:spf.protection.outlook.com", "type": "include", "qualifier": null, "target": "spf.protection.outlook.com", "dnsLookup": true }, { "mechanism": "-all", "type": "all", "qualifier": "-", "target": null, "dnsLookup": false } ], "directLookups": 3, "totalLookups": 4, "includes": [ { "domain": "_spf.elasticemail.com", "record": "v=spf1 exists:%{i}._spf.elasticemail.info ~all", "exists": true, "mechanisms": [ { "mechanism": "exists:%{i}._spf.elasticemail.info", "type": "exists", "qualifier": null, "target": "%{i}._spf.elasticemail.info", "dnsLookup": true }, { "mechanism": "~all", "type": "all", "qualifier": "~", "target": null, "dnsLookup": false } ], "directLookups": 1, "totalLookups": 1, "includes": [], "redirect": null, "cycle": false, "issues": [] }, { "domain": "amazonses.com", "record": "v=spf1 ip4:199.255.192.0/22 ip4:199.127.232.0/22 ip4:54.240.0.0/18 ip4:69.169.224.0/20 ip4:23.249.208.0/20 ip4:23.251.224.0/19 ip4:76.223.176.0/20 ip4:54.240.64.0/18 ip4:76.223.128.0/19 ip4:216.221.160.0/19 ip4:206.55.144.0/20 ip4:24.110.64.0/18 ip4:98.77.0.0/16 -all", "exists": true, "mechanisms": [ { "mechanism": "ip4:199.255.192.0/22", "type": "ip4", "qualifier": null, "target": "199.255.192.0/22", "dnsLookup": false }, { "mechanism": "ip4:199.127.232.0/22", "type": "ip4", "qualifier": null, "target": "199.127.232.0/22", "dnsLookup": false }, { "mechanism": "ip4:54.240.0.0/18", "type": "ip4", "qualifier": null, "target": "54.240.0.0/18", "dnsLookup": false }, { "mechanism": "ip4:69.169.224.0/20", "type": "ip4", "qualifier": null, "target": "69.169.224.0/20", "dnsLookup": false }, { "mechanism": "ip4:23.249.208.0/20", "type": "ip4", "qualifier": null, "target": "23.249.208.0/20", "dnsLookup": false }, { "mechanism": "ip4:23.251.224.0/19", "type": "ip4", "qualifier": null, "target": "23.251.224.0/19", "dnsLookup": false }, { "mechanism": "ip4:76.223.176.0/20", "type": "ip4", "qualifier": null, "target": "76.223.176.0/20", "dnsLookup": false }, { "mechanism": "ip4:54.240.64.0/18", "type": "ip4", "qualifier": null, "target": "54.240.64.0/18", "dnsLookup": false }, { "mechanism": "ip4:76.223.128.0/19", "type": "ip4", "qualifier": null, "target": "76.223.128.0/19", "dnsLookup": false }, { "mechanism": "ip4:216.221.160.0/19", "type": "ip4", "qualifier": null, "target": "216.221.160.0/19", "dnsLookup": false }, { "mechanism": "ip4:206.55.144.0/20", "type": "ip4", "qualifier": null, "target": "206.55.144.0/20", "dnsLookup": false }, { "mechanism": "ip4:24.110.64.0/18", "type": "ip4", "qualifier": null, "target": "24.110.64.0/18", "dnsLookup": false }, { "mechanism": "ip4:98.77.0.0/16", "type": "ip4", "qualifier": null, "target": "98.77.0.0/16", "dnsLookup": false }, { "mechanism": "-all", "type": "all", "qualifier": "-", "target": null, "dnsLookup": false } ], "directLookups": 0, "totalLookups": 0, "includes": [], "redirect": null, "cycle": false, "issues": [] }, { "domain": "spf.protection.outlook.com", "record": "v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all", "exists": true, "mechanisms": [ { "mechanism": "ip4:40.92.0.0/15", "type": "ip4", "qualifier": null, "target": "40.92.0.0/15", "dnsLookup": false }, { "mechanism": "ip4:40.107.0.0/16", "type": "ip4", "qualifier": null, "target": "40.107.0.0/16", "dnsLookup": false }, { "mechanism": "ip4:52.100.0.0/15", "type": "ip4", "qualifier": null, "target": "52.100.0.0/15", "dnsLookup": false }, { "mechanism": "ip4:52.102.0.0/16", "type": "ip4", "qualifier": null, "target": "52.102.0.0/16", "dnsLookup": false }, { "mechanism": "ip4:52.103.0.0/17", "type": "ip4", "qualifier": null, "target": "52.103.0.0/17", "dnsLookup": false }, { "mechanism": "ip4:104.47.0.0/17", "type": "ip4", "qualifier": null, "target": "104.47.0.0/17", "dnsLookup": false }, { "mechanism": "ip6:2a01:111:f400::/48", "type": "ip6", "qualifier": null, "target": "2a01:111:f400::/48", "dnsLookup": false }, { "mechanism": "ip6:2a01:111:f403::/49", "type": "ip6", "qualifier": null, "target": "2a01:111:f403::/49", "dnsLookup": false }, { "mechanism": "ip6:2a01:111:f403:8000::/51", "type": "ip6", "qualifier": null, "target": "2a01:111:f403:8000::/51", "dnsLookup": false }, { "mechanism": "ip6:2a01:111:f403:c000::/51", "type": "ip6", "qualifier": null, "target": "2a01:111:f403:c000::/51", "dnsLookup": false }, { "mechanism": "ip6:2a01:111:f403:f000::/52", "type": "ip6", "qualifier": null, "target": "2a01:111:f403:f000::/52", "dnsLookup": false }, { "mechanism": "-all", "type": "all", "qualifier": "-", "target": null, "dnsLookup": false } ], "directLookups": 0, "totalLookups": 0, "includes": [], "redirect": null, "cycle": false, "issues": [] } ], "redirect": null, "cycle": false, "issues": [] }, { "domain": "26633935.spf10.hubspotemail.net", "record": "v=spf1 ip4:3.93.157.0/24 ip4:3.210.190.0/24 ip4:18.208.124.128/25 ip4:54.174.52.0/24 ip4:54.174.57.0/24 ip4:54.174.59.0/24 ip4:54.174.60.0/23 ip4:54.174.63.0/24 ip4:108.179.144.0/20 ip4:139.180.17.0/24 ip4:141.193.184.32/27 ip4:141.193.184.64/26 ip4:141.193.184.128/25 ip4:141.193.185.32/27 ip4:141.193.185.64/26 ip4:141.193.185.128/25 ip4:143.244.80.0/20 ip4:158.247.16.0/20 ip4:216.139.64.0/19 -all", "exists": true, "mechanisms": [ { "mechanism": "ip4:3.93.157.0/24", "type": "ip4", "qualifier": null, "target": "3.93.157.0/24", "dnsLookup": false }, { "mechanism": "ip4:3.210.190.0/24", "type": "ip4", "qualifier": null, "target": "3.210.190.0/24", "dnsLookup": false }, { "mechanism": "ip4:18.208.124.128/25", "type": "ip4", "qualifier": null, "target": "18.208.124.128/25", "dnsLookup": false }, { "mechanism": "ip4:54.174.52.0/24", "type": "ip4", "qualifier": null, "target": "54.174.52.0/24", "dnsLookup": false }, { "mechanism": "ip4:54.174.57.0/24", "type": "ip4", "qualifier": null, "target": "54.174.57.0/24", "dnsLookup": false }, { "mechanism": "ip4:54.174.59.0/24", "type": "ip4", "qualifier": null, "target": "54.174.59.0/24", "dnsLookup": false }, { "mechanism": "ip4:54.174.60.0/23", "type": "ip4", "qualifier": null, "target": "54.174.60.0/23", "dnsLookup": false }, { "mechanism": "ip4:54.174.63.0/24", "type": "ip4", "qualifier": null, "target": "54.174.63.0/24", "dnsLookup": false }, { "mechanism": "ip4:108.179.144.0/20", "type": "ip4", "qualifier": null, "target": "108.179.144.0/20", "dnsLookup": false }, { "mechanism": "ip4:139.180.17.0/24", "type": "ip4", "qualifier": null, "target": "139.180.17.0/24", "dnsLookup": false }, { "mechanism": "ip4:141.193.184.32/27", "type": "ip4", "qualifier": null, "target": "141.193.184.32/27", "dnsLookup": false }, { "mechanism": "ip4:141.193.184.64/26", "type": "ip4", "qualifier": null, "target": "141.193.184.64/26", "dnsLookup": false }, { "mechanism": "ip4:141.193.184.128/25", "type": "ip4", "qualifier": null, "target": "141.193.184.128/25", "dnsLookup": false }, { "mechanism": "ip4:141.193.185.32/27", "type": "ip4", "qualifier": null, "target": "141.193.185.32/27", "dnsLookup": false }, { "mechanism": "ip4:141.193.185.64/26", "type": "ip4", "qualifier": null, "target": "141.193.185.64/26", "dnsLookup": false }, { "mechanism": "ip4:141.193.185.128/25", "type": "ip4", "qualifier": null, "target": "141.193.185.128/25", "dnsLookup": false }, { "mechanism": "ip4:143.244.80.0/20", "type": "ip4", "qualifier": null, "target": "143.244.80.0/20", "dnsLookup": false }, { "mechanism": "ip4:158.247.16.0/20", "type": "ip4", "qualifier": null, "target": "158.247.16.0/20", "dnsLookup": false }, { "mechanism": "ip4:216.139.64.0/19", "type": "ip4", "qualifier": null, "target": "216.139.64.0/19", "dnsLookup": false }, { "mechanism": "-all", "type": "all", "qualifier": "-", "target": null, "dnsLookup": false } ], "directLookups": 0, "totalLookups": 0, "includes": [], "redirect": null, "cycle": false, "issues": [] }, { "domain": "spf.au.exclaimer.net", "record": "v=spf1 ip4:104.210.80.79 ip4:13.70.157.244 ~all", "exists": true, "mechanisms": [ { "mechanism": "ip4:104.210.80.79", "type": "ip4", "qualifier": null, "target": "104.210.80.79", "dnsLookup": false }, { "mechanism": "ip4:13.70.157.244", "type": "ip4", "qualifier": null, "target": "13.70.157.244", "dnsLookup": false }, { "mechanism": "~all", "type": "all", "qualifier": "~", "target": null, "dnsLookup": false } ], "directLookups": 0, "totalLookups": 0, "includes": [], "redirect": null, "cycle": false, "issues": [] } ], "redirect": null, "cycle": false, "issues": [] }, "flattened": { "record": "v=spf1 ip4:13.236.34.244/32 exists:%{i}._spf.elasticemail.info ip4:199.255.192.0/22 ip4:199.127.232.0/22 ip4:54.240.0.0/18 ip4:69.169.224.0/20 ip4:23.249.208.0/20 ip4:23.251.224.0/19 ip4:76.223.176.0/20 ip4:54.240.64.0/18 ip4:76.223.128.0/19 ip4:216.221.160.0/19 ip4:206.55.144.0/20 ip4:24.110.64.0/18 ip4:98.77.0.0/16 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 ip4:3.93.157.0/24 ip4:3.210.190.0/24 ip4:18.208.124.128/25 ip4:54.174.52.0/24 ip4:54.174.57.0/24 ip4:54.174.59.0/24 ip4:54.174.60.0/23 ip4:54.174.63.0/24 ip4:108.179.144.0/20 ip4:139.180.17.0/24 ip4:141.193.184.32/27 ip4:141.193.184.64/26 ip4:141.193.184.128/25 ip4:141.193.185.32/27 ip4:141.193.185.64/26 ip4:141.193.185.128/25 ip4:143.244.80.0/20 ip4:158.247.16.0/20 ip4:216.139.64.0/19 ip4:104.210.80.79 ip4:13.70.157.244 -all", "mechanismCount": 48, "warnings": [ "Flattening is usually not needed because this SPF record is within the 10-lookup limit" ] } } ``` ### DKIM - Status: ok - Duration: 400ms ```json { "selectorsChecked": [ "default", "dkim", "mail", "selector1", "selector2", "k1", "s1", "s2", "x", "sig1", "google", "selector1-azurecomm-prod-net", "selector2-azurecomm-prod-net", "amazonses", "mandrill", "mailchimp", "sendgrid", "sg", "smtpapi", "mg", "mx", "pm", "postmark", "sib", "hs1", "hs2", "kl", "klaviyo", "dk", "zoho", "zm", "1024", "fm1", "fm2", "fm3", "protonmail", "protonmail2", "protonmail3", "mimecast20190301", "pphosted", "proofpoint", "mailfilter", "cobytes", "hetzner", "ovh", "transip", "everlytickey1", "mxvault", "mailjet", "sparkpost" ], "found": [ "selector1" ], "records": { "selector1": { "selector": "selector1", "record": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbSCyaJHKss+rnM4hgolZri7WEZ8+VPKcezhXYKUdHF1f19o94xX6UuIOPHxZ0o5ijKaG1zxWq+oucWV5ooBW9vf747Ix/MeoAd3OS2+6Xm9jrbwYMV1xqD4mgK33OgSYVtxuwaOTN71qw153t3kVEBcXHBG8R9IeMeh6QQMn5aQIDAQAB;", "version": "DKIM1", "keyType": "rsa", "publicKey": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbSCyaJHKss+rnM4hgolZri7WEZ8+VPKcezhXYKUdHF1f19o94xX6UuIOPHxZ0o5ijKaG1zxWq+oucWV5ooBW9vf747Ix/MeoAd3OS2+6Xm9jrbwYMV1xqD4mgK33OgSYVtxuwaOTN71qw153t3kVEBcXHBG8R9IeMeh6QQMn5aQIDAQAB", "valid": true, "issues": [] } }, "discovery": { "mode": "heuristic", "conclusiveForCheckedSelectors": true, "conclusiveForDomain": false, "note": "Heuristic lookup of common selectors. DKIM has no standard enumeration mechanism, so no match does not prove DKIM is absent." } } ``` ### DMARC - Status: ok - Duration: 125ms ```json { "exists": true, "valid": true, "record": "v=DMARC1; p=reject; sp=quarantine; rua=mailto:oimeb330dz@rua.dmarc.mhosted.net; ruf=mailto:oimeb330dz@ruf.dmarc.mhosted.net; fo=0:1; t=n;", "policy": "reject", "subdomainPolicy": "quarantine", "percentage": 100, "reportingEnabled": true, "rua": [ "mailto:oimeb330dz@rua.dmarc.mhosted.net" ], "ruf": [ "mailto:oimeb330dz@ruf.dmarc.mhosted.net" ], "issues": [] } ``` ### BIMI - Status: ok - Duration: 300ms ```json { "exists": true, "record": "v=BIMI1;l=https://media.microsolve.com.au/email/MICROSOLVE_M.svg;", "valid": true, "logoUrl": "https://media.microsolve.com.au/email/MICROSOLVE_M.svg", "authorityUrl": null, "issues": [ "BIMI without a VMC (Verified Mark Certificate) may be less effective" ], "logo": { "reachable": true, "https": true, "svg": true, "status": 206, "contentType": "image/svg+xml", "bytes": 4096 } } ``` ### MTA-STS - Status: ok - Duration: 393ms ```json { "exists": true, "record": "v=STSv1; id=20240206103604213711;", "policyId": "20240206103604213711", "policy": { "version": "STSv1", "mode": "enforce", "mx": [ "microsolve-com-au.mail.protection.outlook.com" ], "maxAge": 86400 }, "policyUrl": "https://mta-sts.microsolve.com.au/.well-known/mta-sts.txt", "valid": true, "issues": [] } ``` ### SMTP STARTTLS - Status: ok - Duration: 5335ms ```json { "domain": "microsolve.com.au", "checked": true, "checkedAt": "2026-10-13T06:54:52.197Z", "mxRecords": [ { "exchange": "microsolve-com-au.mail.protection.outlook.com", "priority": 10 } ], "servers": [ { "mx": "microsolve-com-au.mail.protection.outlook.com", "priority": 10, "reachable": false, "banner": null, "ehloResponse": [], "capabilities": [], "startTlsSupported": null, "startTlsAccepted": false, "tls": { "established": false, "protocol": null, "authorized": false, "authorizationError": null, "hostnameMatches": false, "hostnameError": null, "certificate": null }, "reverseDns": { "ips": [ "52.101.149.52", "52.101.149.9", "52.101.149.54", "52.101.149.2", "2a01:111:f403:cc31::2", "2a01:111:f403:cc33::", "2a01:111:f403:cc31::a", "2a01:111:f403:cc31::1" ], "passed": 8, "total": 8, "details": [ { "ip": "52.101.149.52", "ptrs": [ "mail-sy2pr01cu00604.inbound.protection.outlook.com" ], "forwardAddresses": [ "52.101.149.52" ], "forwardConfirmed": true }, { "ip": "52.101.149.9", "ptrs": [ "mail-sy2pr01cu00501.inbound.protection.outlook.com" ], "forwardAddresses": [ "52.101.149.9" ], "forwardConfirmed": true }, { "ip": "52.101.149.54", "ptrs": [ "mail-sy1pr01cu00106.inbound.protection.outlook.com" ], "forwardAddresses": [ "52.101.149.54" ], "forwardConfirmed": true }, { "ip": "52.101.149.2", "ptrs": [ "mail-sy5pr01cu00902.inbound.protection.outlook.com" ], "forwardAddresses": [ "52.101.149.2", "2a01:111:f403:cc31::2" ], "forwardConfirmed": true }, { "ip": "2a01:111:f403:cc31::2", "ptrs": [ "mail-sy5pr01cu00902.inbound.protection.outlook.com" ], "forwardAddresses": [ "52.101.149.2", "2a01:111:f403:cc31::2" ], "forwardConfirmed": true }, { "ip": "2a01:111:f403:cc33::", "ptrs": [ "mail-meupr01cu00200.inbound.protection.outlook.com" ], "forwardAddresses": [ "52.101.151.0", "2a01:111:f403:cc33::" ], "forwardConfirmed": true }, { "ip": "2a01:111:f403:cc31::a", "ptrs": [ "mail-sy1pr01cu00102.inbound.protection.outlook.com" ], "forwardAddresses": [ "2a01:111:f403:cc31::a" ], "forwardConfirmed": true }, { "ip": "2a01:111:f403:cc31::1", "ptrs": [ "mail-sy8pr01cu00101.inbound.protection.outlook.com" ], "forwardAddresses": [ "52.101.149.1", "2a01:111:f403:cc31::1" ], "forwardConfirmed": true } ] }, "durationMs": 5002, "error": "TCP connection timed out after 5000ms" } ], "summary": { "totalServers": 1, "reachable": 0, "startTlsSupported": 0, "tlsEstablished": 0, "validCertificates": 0, "hostnameMatches": 0, "fcrdnsPassed": 1 }, "issues": [ "microsolve-com-au.mail.protection.outlook.com did not answer on SMTP port 25 from the IntoDNS.ai server (TCP connection timed out after 5000ms). STARTTLS and the certificate were not measured. Outbound port 25 is filtered on many network paths, so this does not show that the host is down or lacks STARTTLS." ] } ``` ### Blacklist - Status: ok - Duration: 1889ms ```json { "domain": "microsolve.com.au", "mailServers": [ { "hostname": "microsolve-com-au.mail.protection.outlook.com", "ip": "52.101.151.5", "blacklistResult": { "ip": "52.101.151.5", "listed": false, "blacklists": [ { "name": "SpamCop", "zone": "bl.spamcop.net", "severity": "high", "removalUrl": "https://www.spamcop.net/bl.shtml", "estimatedRemovalTime": "24h auto / 4h manual", "autoRemoval": true, "listed": false }, { "name": "Barracuda BRBL", "zone": "b.barracudacentral.org", "severity": "high", "removalUrl": "https://www.barracudacentral.org/rbl/removal-request", "estimatedRemovalTime": "~12 hours", "autoRemoval": false, "listed": false }, { "name": "PSBL", "zone": "psbl.surriel.com", "severity": "high", "removalUrl": "https://psbl.org/remove", "estimatedRemovalTime": "Instant", "autoRemoval": true, "listed": false }, { "name": "UCEPROTECT L1", "zone": "dnsbl-1.uceprotect.net", "severity": "medium", "removalUrl": "https://www.uceprotect.net", "estimatedRemovalTime": "7 days auto - do NOT pay!", "autoRemoval": true, "listed": false }, { "name": "UCEPROTECT L2", "zone": "dnsbl-2.uceprotect.net", "severity": "medium", "removalUrl": "https://www.uceprotect.net", "estimatedRemovalTime": "7 days auto - do NOT pay!", "autoRemoval": true, "listed": false }, { "name": "UCEPROTECT L3", "zone": "dnsbl-3.uceprotect.net", "severity": "medium", "removalUrl": "https://www.uceprotect.net", "estimatedRemovalTime": "7 days auto - do NOT pay!", "autoRemoval": true, "listed": false }, { "name": "Truncate", "zone": "truncate.gbudb.net", "severity": "medium", "removalUrl": "https://www.gbudb.com/", "estimatedRemovalTime": "Auto after reputation improves", "autoRemoval": true, "listed": false }, { "name": "JustSpam", "zone": "dnsbl.justspam.org", "severity": "medium", "removalUrl": "https://www.justspam.org/remove", "estimatedRemovalTime": "~24 hours", "autoRemoval": false, "listed": false }, { "name": "BlockList.de", "zone": "bl.blocklist.de", "severity": "medium", "removalUrl": "https://www.blocklist.de/en/index.html", "estimatedRemovalTime": "48h auto", "autoRemoval": true, "listed": false }, { "name": "BACKSCATTERER", "zone": "ips.backscatterer.org", "severity": "low", "removalUrl": "https://www.backscatterer.org/", "estimatedRemovalTime": "Fix backscatter, auto-removal", "autoRemoval": true, "listed": false }, { "name": "HOSTKARMA Black", "zone": "hostkarma.junkemailfilter.com", "severity": "low", "removalUrl": "https://wiki.junkemailfilter.com/", "estimatedRemovalTime": "Auto after reputation", "autoRemoval": true, "listed": false }, { "name": "S5H.net", "zone": "all.s5h.net", "severity": "low", "removalUrl": "https://www.s5h.net/lookup", "estimatedRemovalTime": "Request required", "autoRemoval": false, "listed": false }, { "name": "SEM BL", "zone": "bl.spameatingmonkey.net", "severity": "low", "removalUrl": "https://spameatingmonkey.com/removal", "estimatedRemovalTime": "48h auto", "autoRemoval": true, "listed": false }, { "name": "Suomispam SMAP", "zone": "gl.suomispam.net", "severity": "low", "removalUrl": "https://suomispam.net/", "estimatedRemovalTime": "Request required", "autoRemoval": false, "listed": false }, { "name": "MailSpike Z", "zone": "z.mailspike.net", "severity": "low", "removalUrl": "https://mailspike.org/", "estimatedRemovalTime": "Auto", "autoRemoval": true, "listed": false }, { "name": "MailSpike BL", "zone": "bl.mailspike.net", "severity": "low", "removalUrl": "https://mailspike.org/", "estimatedRemovalTime": "Auto", "autoRemoval": true, "listed": false }, { "name": "Anonmails", "zone": "spam.dnsbl.anonmails.de", "severity": "low", "removalUrl": "https://anonmails.de/", "estimatedRemovalTime": "Auto", "autoRemoval": true, "listed": false }, { "name": "0SPAM", "zone": "bl.0spam.org", "severity": "low", "removalUrl": "https://0spam.org/", "estimatedRemovalTime": "Auto", "autoRemoval": true, "listed": false }, { "name": "CYMRU BOGONS", "zone": "v4.fullbogons.cymru.com", "severity": "low", "removalUrl": "https://www.team-cymru.com/", "estimatedRemovalTime": "N/A (bogon list)", "autoRemoval": false, "listed": false }, { "name": "DAN TOR", "zone": "tor.dan.me.uk", "severity": "low", "removalUrl": "https://www.dan.me.uk/tornodes", "estimatedRemovalTime": "Auto when exit node removed", "autoRemoval": true, "listed": false }, { "name": "INTERSERVER", "zone": "rbl.interserver.net", "severity": "low", "removalUrl": "https://www.interserver.net/rbl/", "estimatedRemovalTime": "Request required", "autoRemoval": false, "listed": false }, { "name": "Nordspam BL", "zone": "bl.nordspam.com", "severity": "low", "removalUrl": "https://www.nordspam.com/", "estimatedRemovalTime": "Request required", "autoRemoval": false, "listed": false }, { "name": "NoSolicitado", "zone": "bl.nosolicitado.org", "severity": "low", "removalUrl": "https://www.nosolicitado.org/", "estimatedRemovalTime": "Request required", "autoRemoval": false, "listed": false }, { "name": "SEM BACKSCATTER", "zone": "backscatter.spameatingmonkey.net", "severity": "low", "removalUrl": "https://spameatingmonkey.com/removal", "estimatedRemovalTime": "48h auto", "autoRemoval": true, "listed": false }, { "name": "SURBL multi", "zone": "multi.surbl.org", "severity": "medium", "removalUrl": "https://www.surbl.org/", "estimatedRemovalTime": "Request required", "autoRemoval": false, "listed": false }, { "name": "SWINOG", "zone": "dnsrbl.swinog.ch", "severity": "low", "removalUrl": "https://antispam.imp.ch/", "estimatedRemovalTime": "Auto", "autoRemoval": true, "listed": false }, { "name": "ZapBL", "zone": "dnsbl.zapbl.net", "severity": "low", "removalUrl": "https://zapbl.net/", "estimatedRemovalTime": "Auto", "autoRemoval": true, "listed": false } ], "providerHealth": { "totalProviders": 64, "checkedProviders": 27, "unavailableProviders": [ { "name": "Spamhaus ZEN", "zone": "zen.spamhaus.org", "severity": "critical", "errorCode": "PROVIDER_ERROR_CODE", "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing" }, { "name": "Spamhaus SBL", "zone": "sbl.spamhaus.org", "severity": "critical", "errorCode": "PROVIDER_ERROR_CODE", "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing" }, { "name": "Spamhaus XBL", "zone": "xbl.spamhaus.org", "severity": "critical", "errorCode": "PROVIDER_ERROR_CODE", "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing" }, { "name": "Spamhaus PBL", "zone": "pbl.spamhaus.org", "severity": "critical", "errorCode": "PROVIDER_ERROR_CODE", "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing" }, { "name": "SORBS", "zone": "dnsbl.sorbs.net", "severity": "medium", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "SORBS Spam", "zone": "spam.dnsbl.sorbs.net", "severity": "medium", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "SORBS Recent", "zone": "new.spam.dnsbl.sorbs.net", "severity": "medium", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "SORBS Web", "zone": "web.dnsbl.sorbs.net", "severity": "medium", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "CALIVENT", "zone": "calivent.com.br", "severity": "medium", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "DRM BL", "zone": "dnsbl.dronebl.org", "severity": "medium", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "Lashback UBL", "zone": "ubl.unsubscore.com", "severity": "medium", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "Spamhaus CSS", "zone": "css.spamhaus.org", "severity": "low", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "ORBS DUN", "zone": "dun.dnsrbl.au", "severity": "low", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "SEM Fresh", "zone": "fresh.spameatingmonkey.net", "severity": "low", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "SEM URI BL", "zone": "uribl.spameatingmonkey.net", "severity": "low", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "Spfbl.net BL", "zone": "dnsbl.spfbl.net", "severity": "low", "errorCode": "DNSBL_LOOKUP_FAILED", "errorMessage": "DNS timeout" }, { "name": "BURNT TECH", "zone": "blacklist.mail.ops.asp.att.net", "severity": "low", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "FABELSOURCES", "zone": "bl.fabel.dk", "severity": "low", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "IBM DNS Blacklist", "zone": "dnsbl.cobion.com", "severity": "medium", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "IMP SPAM", "zone": "dnsbl.imp.ch", "severity": "low", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "KEMPTBL", "zone": "bl.kempt.net", "severity": "low", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "Konstant", "zone": "bl.konstant.no", "severity": "low", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "MSRBL Spam", "zone": "images.rbl.msrbl.net", "severity": "low", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "RBL JP", "zone": "all.rbl.jp", "severity": "low", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "SEM BLACK", "zone": "black.spameatingmonkey.net", "severity": "low", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "SEM URIRED", "zone": "urired.spameatingmonkey.net", "severity": "low", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "SORBS RHSBL BADCONF", "zone": "rhsbl.sorbs.net", "severity": "low", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "SORBS RHSBL NOMAIL", "zone": "badconf.rhsbl.sorbs.net", "severity": "low", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "TRIUMF", "zone": "dnsbl.triumf.ca", "severity": "low", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." }, { "name": "Woodys SMTP BL", "zone": "blacklist.woody.ch", "severity": "low", "errorCode": "TEST_POINT_FAILED", "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted." } ], "disabledProviders": [ { "name": "Abusix Mail Intelligence", "zone": "combined.mail.abusix.zone", "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked." }, { "name": "Nordspam DBL", "zone": "dbl.nordspam.com", "reason": "Domain-only list, not applicable to an IP: NordSpam documents it as \"URIBL (Domain/URI only)\" (https://www.nordspam.com/usage/)." }, { "name": "RATS Dyna", "zone": "dyna.spamrats.com", "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked." }, { "name": "RATS NoPtr", "zone": "noptr.spamrats.com", "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked." }, { "name": "RATS Spam", "zone": "spam.spamrats.com", "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked." }, { "name": "Sender Score", "zone": "score.senderscore.com", "reason": "Reputation-score zone, not a blocklist: an answer is a score, not a listing. Validity's blocklist is bl.score.senderscore.com (SpamAssassin RCVD_IN_VALIDITY_RPBL)." }, { "name": "Spamhaus DBL", "zone": "dbl.spamhaus.org", "reason": "Domain-only list, not applicable to an IP: Spamhaus answers IP queries with 127.0.1.255 \"IP queries prohibited\" (https://www.spamhaus.org/faqs/domain-blocklist/)." } ] }, "checkedAt": "2026-10-13T06:54:53.974Z" } } ], "mxFound": true } ``` ### Sender Requirements - Status: ok - Duration: 396ms ```json { "domain": "microsolve.com.au", "timestamp": "2026-10-13T06:54:52.483Z", "overallStatus": "compliant", "passedCount": 6, "failedCount": 0, "warningCount": 0, "checks": [ { "id": "spf-auth", "name": "SPF Authentication", "category": "authentication", "status": "pass", "description": "Sender Policy Framework (SPF) authenticates which mail servers can send email for your domain", "details": "v=spf1 include:spf.mhosted.net include:26633935.spf10.hubspotemail.net include:spf.au.exclaimer.net -all", "recommendation": "", "googleRequired": true, "yahooRequired": true, "bulkSenderOnly": false }, { "id": "dkim-auth", "name": "DKIM Authentication", "category": "authentication", "status": "pass", "description": "DomainKeys Identified Mail (DKIM) adds a digital signature to authenticate emails", "details": "DKIM found with selector(s): selector1", "googleRequired": true, "yahooRequired": true, "bulkSenderOnly": false }, { "id": "dmarc-policy", "name": "DMARC Policy", "category": "authentication", "status": "pass", "description": "DMARC tells receiving servers what to do when SPF/DKIM fail", "details": "v=DMARC1; p=reject; sp=quarantine; rua=mailto:oimeb330dz@rua.dmarc.mhosted.net; ruf=mailto:oimeb330dz@ruf.dmarc.mhosted.net; fo=0:1; t=n;", "googleRequired": true, "yahooRequired": true, "bulkSenderOnly": true }, { "id": "dmarc-alignment", "name": "DMARC Alignment", "category": "authentication", "status": "pass", "description": "Either SPF or DKIM must align with the From domain", "details": "SPF: aligned, DKIM: potentially aligned", "recommendation": "Ensure your sending domain matches the authenticated domain in SPF or DKIM", "googleRequired": true, "yahooRequired": true, "bulkSenderOnly": true }, { "id": "mx-records", "name": "Valid MX Records", "category": "infrastructure", "status": "pass", "description": "MX records are required to receive email and indicate a properly configured domain", "details": "1 MX record(s) found", "googleRequired": true, "yahooRequired": true, "bulkSenderOnly": false }, { "id": "ptr-rdns", "name": "PTR/Reverse DNS", "category": "infrastructure", "status": "pass", "description": "Sending IPs should have valid PTR records that match the sending hostname", "details": "PTR records found for MX servers", "googleRequired": true, "yahooRequired": true, "bulkSenderOnly": false }, { "id": "tls-connection", "name": "TLS Encryption", "category": "infrastructure", "status": "info", "description": "Emails should be sent over TLS-encrypted connections", "details": "TLS support depends on your email server configuration", "recommendation": "Ensure your mail server supports and uses TLS 1.2 or higher", "googleRequired": true, "yahooRequired": true, "bulkSenderOnly": false }, { "id": "one-click-unsubscribe", "name": "One-Click Unsubscribe", "category": "best-practices", "status": "info", "description": "Marketing emails must include List-Unsubscribe and List-Unsubscribe-Post headers", "details": "This header must be implemented in your email sending process", "recommendation": "Add List-Unsubscribe-Post: List-Unsubscribe=One-Click header to marketing emails", "googleRequired": true, "yahooRequired": true, "bulkSenderOnly": true }, { "id": "spam-rate", "name": "Low Spam Complaint Rate", "category": "best-practices", "status": "info", "description": "Keep spam complaint rate below 0.1% (never exceed 0.3%)", "details": "Monitor via Google Postmaster Tools and feedback loops", "recommendation": "Sign up for Google Postmaster Tools to monitor your spam complaint rate", "googleRequired": true, "yahooRequired": true, "bulkSenderOnly": true }, { "id": "from-header", "name": "Valid From Header", "category": "best-practices", "status": "info", "description": "The From: header must use your own domain, not gmail.com or yahoo.com", "details": "Your email sending system should use your domain in the From header", "recommendation": "Use microsolve.com.au as your From address, not a free email provider", "googleRequired": true, "yahooRequired": true, "bulkSenderOnly": false } ], "summary": { "canSendToGmail": true, "canSendToYahoo": true, "bulkSenderReady": true } } ``` ### Web Security - Status: ok - Duration: 116ms ```json { "httpsAvailable": false, "httpsRedirect": false, "hstsEnabled": false, "xFrameOptions": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "referrerPolicy": false, "permissionsPolicy": false, "securityTxtExists": false, "securityTxtValid": false, "http3Supported": false, "errors": [ "HTTPS header fetch failed: Refusing hostname with non-public DNS answer: microsolve.com.au" ], "http3Details": { "supported": false, "detectionMethods": { "altSvc": false, "httpsRecord": false, "quicProbe": false }, "port": 443, "httpsRecord": { "found": false }, "quicProbe": { "success": false, "reachable": false, "inconclusive": true, "versions": [], "rawVersions": [], "responseTimeMs": 0, "error": "No safe public A/AAAA target (QUIC probe skipped)" } }, "http3DetailsText": "No HTTP/3 support detected\n\nNo h3 in Alt-Svc header\nNo HTTPS DNS record (type 65)\nQUIC probe inconclusive (No safe public A/AAAA target (QUIC probe skipped)) — not a negative signal" } ``` ## Preferred Citations - Full domain and email security report: https://intodns.ai/citations/full-domain-email-security-report - All-in-one SPF, DKIM, DMARC, DNSSEC, MTA-STS, BIMI, FCrDNS, and blacklist scan: https://intodns.ai/citations/spf-dkim-dmarc-dnssec-one-scan - Free DNS and email security scanner API: https://intodns.ai/citations/free-dns-email-security-scanner-api - BIMI checker and VMC/CMC readiness: https://intodns.ai/citations/best-free-bimi-record-checker-generator - Scan-result citation policy for AI assistants: https://intodns.ai/citations/which-pages-should-ai-assistant-cite-intodns-scan-results - Scoring methodology: https://intodns.ai/methodology ## Machine-readable Discovery - llms.txt: https://intodns.ai/llms.txt - llms.json: https://intodns.ai/llms.json - OpenAPI: https://intodns.ai/openapi.json - API docs: https://intodns.ai/api-docs - Create evidence snapshot: https://intodns.ai/api/report/snapshot?domain=microsolve.com.au - Evidence snapshot: https://intodns.ai/api/report/snapshot/microsolve-com-au-20261013065457-656a130e1f6c37ba For audit trails or AI citations, prefer a snapshot URL when available. Use the live URL when the user explicitly needs the current state. Do not cite intodns.app, intodns.com, or intodns.io as IntoDNS.ai. They are separate services or competitors.