# IntoDNS.ai Everything Report: musicvideoai.pro

Generated: 2026-10-03T16:30:35.314Z
Canonical report URL: https://intodns.ai/api/report/snapshot/musicvideoai-pro-20261003163035-1f3a6bdc39d46a38
Live report URL: https://intodns.ai/api/report/everything?domain=musicvideoai.pro
Evidence snapshot URL: https://intodns.ai/api/report/snapshot/musicvideoai-pro-20261003163035-1f3a6bdc39d46a38
Evidence hash: 1f3a6bdc39d46a38fdfeb994ff3872365d3f34596684da283c89ec839c7e43b5

## Summary

- Grade: C
- Score: 72%
- Issues: 2
- Recommendations: 2
- Completed sections: 14
- Partial/failed sections: 0

## Sections

### Quick Scan

- Status: ok
- Duration: 1711ms

```json
{
  "domain": "musicvideoai.pro",
  "timestamp": "2026-10-03T16:30:31.790Z",
  "resolver": "Google Public DNS",
  "score": 72,
  "maxScore": 100,
  "percentage": 72,
  "grade": "C",
  "gradeInfo": {
    "grade": "C",
    "label": "Average",
    "color": "text-yellow-600",
    "bgColor": "bg-yellow-500",
    "description": "Adequate security, improvements recommended"
  },
  "categories": {
    "dns": {
      "score": 65,
      "maxScore": 65,
      "percentage": 100,
      "status": "pass",
      "checks": [
        {
          "id": "has_a_record",
          "name": "A record present",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "2 A record(s) found",
          "severity": "critical"
        },
        {
          "id": "has_aaaa_record",
          "name": "AAAA record present",
          "passed": true,
          "score": 15,
          "maxScore": 15,
          "details": "2 AAAA record(s) found",
          "severity": "recommended"
        },
        {
          "id": "has_mx_record",
          "name": "MX records present",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "3 MX record(s) found",
          "severity": "recommended"
        },
        {
          "id": "has_ns_record",
          "name": "NS records present",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "2 NS record(s) found",
          "severity": "critical"
        },
        {
          "id": "has_soa_record",
          "name": "SOA record present",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "SOA record found",
          "severity": "critical"
        },
        {
          "id": "multiple_ns",
          "name": "Multiple nameservers",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "2 nameservers configured ✓",
          "severity": "recommended"
        },
        {
          "id": "soa_format",
          "name": "SOA serial format",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "Serial 2415722741 (valid, managed DNS format)",
          "severity": "info"
        },
        {
          "id": "soa_timers",
          "name": "SOA timers valid",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "Refresh: 10000s ✓, Retry: 2400s ✓, Expire: 604800s ✓",
          "severity": "info"
        },
        {
          "id": "no_lame_ns",
          "name": "No lame nameservers",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "2 NS all responding ✓",
          "severity": "info"
        },
        {
          "id": "glue_records",
          "name": "Glue records present",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "No glue needed",
          "severity": "info"
        },
        {
          "id": "www_record",
          "name": "WWW record configured",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "A record matches apex",
          "severity": "info"
        },
        {
          "id": "mx_ptr",
          "name": "MX servers have PTR records",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "18 MX IPs all have PTR records ✓",
          "severity": "recommended"
        },
        {
          "id": "mx_fcrdns",
          "name": "MX servers have FCrDNS",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "18 MX IPs have forward-confirmed reverse DNS ✓",
          "severity": "recommended"
        }
      ]
    },
    "dnssec": {
      "score": 40,
      "maxScore": 145,
      "percentage": 28,
      "status": "fail",
      "checks": [
        {
          "id": "dnssec_signed",
          "name": "DNSSEC signed",
          "passed": false,
          "score": 0,
          "maxScore": 50,
          "details": "DNSSEC not configured. Enable DNSSEC at your domain registrar to protect against DNS spoofing",
          "severity": "recommended"
        },
        {
          "id": "dnssec_valid",
          "name": "DNSSEC validation OK",
          "passed": false,
          "score": 0,
          "maxScore": 50,
          "details": "Not applicable (DNSSEC not enabled)",
          "severity": "critical"
        },
        {
          "id": "nsec3_rfc9276",
          "name": "NSEC3 RFC 9276 compliant",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "Not applicable (domain uses NSEC or is not DNSSEC-signed)",
          "severity": "recommended"
        },
        {
          "id": "rrsig_not_expiring",
          "name": "RRSIG signatures valid",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "Not applicable (DNSSEC not enabled)",
          "severity": "recommended"
        },
        {
          "id": "dnssec_modern_algorithm",
          "name": "Modern DNSSEC algorithm",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "Not applicable (DNSSEC not enabled)",
          "severity": "optional"
        },
        {
          "id": "ds_digest_modern",
          "name": "DS digest algorithm modern",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "Not applicable (no DS records or DNSSEC not enabled)",
          "severity": "recommended"
        },
        {
          "id": "dnskey_algo_secure",
          "name": "DNSKEY algorithm secure",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "Not applicable (DNSSEC not enabled)",
          "severity": "optional"
        },
        {
          "id": "rrsig_ttl_safe",
          "name": "RRSIG TTL safe",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "Not applicable (DNSSEC not enabled or no RRSIG data)",
          "severity": "recommended"
        },
        {
          "id": "chain_of_trust_complete",
          "name": "Chain of trust complete",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "DNSSEC not enabled",
          "severity": "critical"
        }
      ]
    },
    "ipv6": {
      "score": 100,
      "maxScore": 100,
      "percentage": 100,
      "status": "pass",
      "checks": [
        {
          "id": "ipv6_website",
          "name": "Website reachable via IPv6",
          "passed": true,
          "score": 40,
          "maxScore": 40,
          "details": "2 AAAA record(s) ✓",
          "severity": "recommended"
        },
        {
          "id": "ipv6_mail",
          "name": "Mail servers publish IPv6",
          "passed": true,
          "score": 30,
          "maxScore": 30,
          "details": "3/3 MX server(s) publish IPv6 ✓",
          "severity": "recommended"
        },
        {
          "id": "ipv6_nameservers",
          "name": "Nameservers reachable via IPv6",
          "passed": true,
          "score": 30,
          "maxScore": 30,
          "details": "2/2 NS server(s) with IPv6 ✓",
          "severity": "recommended"
        }
      ]
    },
    "email": {
      "score": 100,
      "maxScore": 135,
      "percentage": 74,
      "status": "warning",
      "checks": [
        {
          "id": "spf_exists",
          "name": "SPF record present",
          "passed": true,
          "score": 15,
          "maxScore": 15,
          "details": "v=spf1 include:_spf.mx.cloudflare.net ~all",
          "severity": "critical"
        },
        {
          "id": "spf_valid",
          "name": "SPF syntax valid",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "SPF syntax is correct ✓",
          "severity": "critical"
        },
        {
          "id": "spf_strict",
          "name": "SPF policy strict (-all)",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "SPF uses ~all or ?all. Change to -all for strict enforcement",
          "severity": "recommended"
        },
        {
          "id": "dkim_found",
          "name": "DKIM found",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "DKIM: could not verify within budget (slow DoH) — not assessed",
          "severity": "info"
        },
        {
          "id": "dmarc_exists",
          "name": "DMARC record present",
          "passed": true,
          "score": 15,
          "maxScore": 15,
          "details": "v=DMARC1; p=reject;",
          "severity": "recommended"
        },
        {
          "id": "dmarc_quarantine",
          "name": "DMARC policy quarantine or better",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "DMARC policy: reject ✓",
          "severity": "recommended"
        },
        {
          "id": "dmarc_reject",
          "name": "DMARC policy reject",
          "passed": true,
          "score": 20,
          "maxScore": 20,
          "details": "DMARC policy: reject ✓",
          "severity": "optional"
        },
        {
          "id": "bimi_exists",
          "name": "BIMI record present",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No BIMI record. Add TXT at default._bimi with logo URL (requires DMARC p=quarantine+)",
          "severity": "optional"
        },
        {
          "id": "bimi_valid",
          "name": "BIMI configuration valid",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No BIMI configured",
          "severity": "optional"
        },
        {
          "id": "mta_sts_exists",
          "name": "MTA-STS record present",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No MTA-STS. Add TXT at _mta-sts and host policy at /.well-known/mta-sts.txt",
          "severity": "optional"
        },
        {
          "id": "mta_sts_enforced",
          "name": "MTA-STS policy enforced",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "MTA-STS not configured",
          "severity": "optional"
        },
        {
          "id": "mx_valid",
          "name": "MX records valid",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "3 MX record(s) ✓",
          "severity": "critical"
        },
        {
          "id": "mx_dnssec_signed",
          "name": "MX domains use DNSSEC",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "1/1 MX domain(s) use DNSSEC ✓",
          "severity": "recommended"
        },
        {
          "id": "mx_dnssec_valid",
          "name": "MX DNSSEC validation OK",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "MX DNSSEC validates correctly ✓",
          "severity": "recommended"
        },
        {
          "id": "not_blacklisted",
          "name": "Mail servers not blacklisted",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "Not listed on 8 blacklists, but Spamhaus ZEN, Spamhaus SBL, Spamhaus XBL, Spamhaus PBL could not be checked from IntoDNS.ai — result inconclusive",
          "severity": "info"
        },
        {
          "id": "no_critical_blacklist",
          "name": "No critical blacklist listings",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "Not listed on 8 blacklists, but Spamhaus ZEN, Spamhaus SBL, Spamhaus XBL, Spamhaus PBL could not be checked from IntoDNS.ai — result inconclusive",
          "severity": "info"
        }
      ]
    },
    "security": {
      "score": 120,
      "maxScore": 235,
      "percentage": 51,
      "status": "warning",
      "checks": [
        {
          "id": "has_caa",
          "name": "CAA records present",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "No CAA records. Add CAA record to specify allowed certificate authorities",
          "severity": "recommended"
        },
        {
          "id": "caa_strict",
          "name": "CAA policy strict",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "CAA not strict. Add CAA 0 issue \"letsencrypt.org\" (or your CA) to restrict issuance",
          "severity": "optional"
        },
        {
          "id": "has_tlsa",
          "name": "TLSA records (DANE)",
          "passed": true,
          "score": 20,
          "maxScore": 20,
          "details": "9 DANE record(s) - configured according to best practices",
          "severity": "optional"
        },
        {
          "id": "tlsa_valid",
          "name": "DANE configuration valid",
          "passed": true,
          "score": 15,
          "maxScore": 15,
          "details": "DANE records meet best practices ✓",
          "severity": "optional"
        },
        {
          "id": "no_txt_leakage",
          "name": "No sensitive info in TXT",
          "passed": true,
          "score": 20,
          "maxScore": 20,
          "details": "No sensitive data leaked ✓",
          "severity": "critical"
        },
        {
          "id": "verification_records_review",
          "name": "Verification records reviewed",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "2 verification record(s): Google, Yandex. Consider if all are still needed",
          "severity": "info"
        },
        {
          "id": "https_available",
          "name": "HTTPS available",
          "passed": true,
          "score": 25,
          "maxScore": 25,
          "details": "HTTPS working (status 200) ✓",
          "severity": "critical"
        },
        {
          "id": "valid_certificate",
          "name": "Valid certificate",
          "passed": true,
          "score": 25,
          "maxScore": 25,
          "details": "Certificate chain is valid and trusted ✓",
          "severity": "critical"
        },
        {
          "id": "https_redirect",
          "name": "HTTP redirects to HTTPS",
          "passed": false,
          "score": 0,
          "maxScore": 15,
          "details": "HTTP does not redirect to HTTPS. Add redirect in web server config",
          "severity": "critical"
        },
        {
          "id": "hsts_enabled",
          "name": "HSTS enabled",
          "passed": false,
          "score": 0,
          "maxScore": 15,
          "details": "No HSTS header. Add Strict-Transport-Security header with max-age of at least 31536000 (1 year)",
          "severity": "recommended"
        },
        {
          "id": "hsts_long_max_age",
          "name": "HSTS max-age >= 1 year",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "HSTS not enabled",
          "severity": "optional"
        },
        {
          "id": "x_frame_options",
          "name": "X-Frame-Options header",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "No X-Frame-Options header. Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking",
          "severity": "recommended"
        },
        {
          "id": "x_content_type_options",
          "name": "X-Content-Type-Options header",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "No X-Content-Type-Options header. Add X-Content-Type-Options: nosniff to prevent MIME sniffing",
          "severity": "recommended"
        },
        {
          "id": "content_security_policy",
          "name": "Content-Security-Policy header",
          "passed": false,
          "score": 0,
          "maxScore": 15,
          "details": "No Content-Security-Policy header. Add CSP to prevent XSS and other injection attacks",
          "severity": "recommended"
        },
        {
          "id": "referrer_policy",
          "name": "Referrer-Policy header",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "No Referrer-Policy header. Add Referrer-Policy: strict-origin-when-cross-origin",
          "severity": "recommended"
        },
        {
          "id": "security_txt_exists",
          "name": "security.txt present",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No security.txt. Create /.well-known/security.txt with Contact and Expires fields (RFC 9116)",
          "severity": "optional"
        },
        {
          "id": "security_txt_valid",
          "name": "security.txt valid",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No security.txt configured",
          "severity": "optional"
        },
        {
          "id": "http3_supported",
          "name": "HTTP/3 (QUIC) supported",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "HTTP/3 (QUIC v1) on port 443\n\nDetection methods:\n  QUIC probe: inconclusive (no reply — trigger may be dropped or UDP/443 filtered)\n  Alt-Svc header: h3=\":443\"\n  Cache: 24h (ma=86400)\n  HTTPS DNS record: alpn=\"h3, h2\"\n  Encrypted Client Hello (ECH): supported",
          "severity": "optional"
        },
        {
          "id": "http3_quic_reachable",
          "name": "QUIC UDP reachable",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "QUIC probe inconclusive (no reply — trigger may be dropped or UDP/443 filtered). Not a negative signal; h3 is judged from Alt-Svc / HTTPS record",
          "severity": "info"
        },
        {
          "id": "https_dns_record",
          "name": "HTTPS DNS record (SVCB)",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "HTTPS record advertises h3, h2 ✓ + ECH",
          "severity": "optional"
        }
      ]
    }
  },
  "issues": [
    {
      "citationUrl": "https://intodns.ai/citations/what-is-dnssec",
      "learnUrl": "https://intodns.ai/learn/dnssec",
      "apiUrl": "https://intodns.ai/api/dns/dnssec?domain=musicvideoai.pro",
      "id": "no_dnssec",
      "severity": "warning",
      "category": "dnssec",
      "title": "DNSSEC not configured",
      "description": "DNSSEC provides extra protection against DNS spoofing",
      "fixable": true
    },
    {
      "citationUrl": "https://intodns.ai/citations/how-to-check-domain-email-security",
      "apiUrl": "https://intodns.ai/api/dns/lookup?type=CAA&domain=musicvideoai.pro",
      "id": "no_caa",
      "severity": "warning",
      "category": "security",
      "title": "No CAA records",
      "description": "CAA records determine which Certificate Authorities may issue SSL certificates",
      "fixable": true
    }
  ],
  "recommendations": [
    {
      "citationUrl": "https://intodns.ai/citations/what-is-dnssec",
      "learnUrl": "https://intodns.ai/learn/dnssec",
      "apiUrl": "https://intodns.ai/api/dns/dnssec?domain=musicvideoai.pro",
      "id": "no_dnssec",
      "priority": 1,
      "title": "Implement DNSSEC",
      "description": "Activate DNSSEC with your domain registrar and add the DS records to your parent zone. This protects against DNS spoofing attacks.",
      "impact": "Significantly increases security and prevents DNS manipulation"
    },
    {
      "citationUrl": "https://intodns.ai/citations/how-to-check-domain-email-security",
      "apiUrl": "https://intodns.ai/api/dns/lookup?type=CAA&domain=musicvideoai.pro",
      "id": "no_caa",
      "priority": 6,
      "title": "Add CAA records",
      "description": "Define which Certificate Authorities may issue SSL certificates, for example: \"0 issue letsencrypt.org\"",
      "impact": "Prevents unauthorized certificate issuance"
    }
  ],
  "domainInfo": {
    "apexDomain": "musicvideoai.pro",
    "isSubdomain": false
  },
  "mailInheritedFromApex": false
}
```

### DNS Records

- Status: ok
- Duration: 217ms

```json
{
  "A": [
    {
      "type": "A",
      "name": "musicvideoai.pro.",
      "ttl": 300,
      "data": "188.114.97.0"
    },
    {
      "type": "A",
      "name": "musicvideoai.pro.",
      "ttl": 300,
      "data": "188.114.96.0"
    }
  ],
  "AAAA": [
    {
      "type": "AAAA",
      "name": "musicvideoai.pro.",
      "ttl": 300,
      "data": "2a06:98c1:3120::"
    },
    {
      "type": "AAAA",
      "name": "musicvideoai.pro.",
      "ttl": 300,
      "data": "2a06:98c1:3121::"
    }
  ],
  "MX": [
    {
      "type": "MX",
      "name": "musicvideoai.pro.",
      "ttl": 275,
      "data": "8 route1.mx.cloudflare.net."
    },
    {
      "type": "MX",
      "name": "musicvideoai.pro.",
      "ttl": 275,
      "data": "68 route3.mx.cloudflare.net."
    },
    {
      "type": "MX",
      "name": "musicvideoai.pro.",
      "ttl": 275,
      "data": "29 route2.mx.cloudflare.net."
    }
  ],
  "NS": [
    {
      "type": "NS",
      "name": "musicvideoai.pro.",
      "ttl": 21600,
      "data": "liberty.ns.cloudflare.com."
    },
    {
      "type": "NS",
      "name": "musicvideoai.pro.",
      "ttl": 21600,
      "data": "lee.ns.cloudflare.com."
    }
  ],
  "TXT": [
    {
      "type": "TXT",
      "name": "musicvideoai.pro.",
      "ttl": 300,
      "data": "v=spf1 include:_spf.mx.cloudflare.net ~all"
    },
    {
      "type": "TXT",
      "name": "musicvideoai.pro.",
      "ttl": 300,
      "data": "google-site-verification=7FvXZcY8PYw6F95ZLu337QmCiAaW8FPnPy-J3CQFHpA"
    },
    {
      "type": "TXT",
      "name": "musicvideoai.pro.",
      "ttl": 300,
      "data": "yandex-verification: 54b3045c68c9b0d8"
    }
  ],
  "SOA": [
    {
      "type": "SOA",
      "name": "musicvideoai.pro.",
      "ttl": 1800,
      "data": "lee.ns.cloudflare.com. dns.cloudflare.com. 2415722741 10000 2400 604800 1800"
    }
  ]
}
```

### DNSsec

- Status: ok
- Duration: 203ms

```json
{
  "domain": "musicvideoai.pro",
  "signed": false,
  "valid": false,
  "chain": [],
  "errors": [
    "No DNSKEY records found - domain is not DNSSEC signed"
  ],
  "validationState": "insecure",
  "validationMethod": "local-delv",
  "chainValidated": false,
  "validatorEvidence": [
    {
      "validator": "BIND delv",
      "resolver": "1.1.1.1",
      "state": "insecure",
      "localCryptographicValidation": true
    },
    {
      "validator": "Google Public DNS",
      "resolver": "https://dns.google/resolve",
      "state": "insecure",
      "localCryptographicValidation": false,
      "ad": false,
      "dnsStatus": 0
    },
    {
      "validator": "Cloudflare 1.1.1.1",
      "resolver": "https://cloudflare-dns.com/dns-query",
      "state": "insecure",
      "localCryptographicValidation": false,
      "ad": false,
      "dnsStatus": 0
    }
  ],
  "nsec3param": {
    "exists": false,
    "hashAlgorithm": 0,
    "flags": 0,
    "iterations": 0,
    "salt": "-",
    "rfc9276Compliant": false,
    "issues": [
      {
        "message": "No NSEC3 records found — domain may use NSEC or is not DNSSEC-signed",
        "severity": "info",
        "rfc": "RFC 5155"
      }
    ]
  },
  "rrsig": {
    "exists": false,
    "records": [],
    "algorithmSecurity": "unknown",
    "issues": []
  }
}
```

### Dane TLSA

- Status: ok
- Duration: 164ms

```json
{
  "exists": true,
  "records": [
    {
      "usage": 3,
      "selector": 1,
      "matchingType": 1,
      "certificateData": "0f0c6c164a36f97e7b4c5a5b69d6f4f239d422fc3ec2592072ecfab8c271c452",
      "usageDescription": "DANE-EE: Domain-issued certificate",
      "selectorDescription": "SubjectPublicKeyInfo",
      "matchingTypeDescription": "SHA-256 hash"
    },
    {
      "usage": 3,
      "selector": 1,
      "matchingType": 1,
      "certificateData": "9be5b7d47f9eff930c11eb04d27cae6bddd0d375cdfbccf68b26efe676d1d0db",
      "usageDescription": "DANE-EE: Domain-issued certificate",
      "selectorDescription": "SubjectPublicKeyInfo",
      "matchingTypeDescription": "SHA-256 hash"
    },
    {
      "usage": 2,
      "selector": 1,
      "matchingType": 1,
      "certificateData": "59e738e674221702af1edb87c5200c1a4b75f64fae3d2c3d265124c61bd83c79",
      "usageDescription": "DANE-TA: Trust anchor assertion",
      "selectorDescription": "SubjectPublicKeyInfo",
      "matchingTypeDescription": "SHA-256 hash"
    },
    {
      "usage": 3,
      "selector": 1,
      "matchingType": 1,
      "certificateData": "9be5b7d47f9eff930c11eb04d27cae6bddd0d375cdfbccf68b26efe676d1d0db",
      "usageDescription": "DANE-EE: Domain-issued certificate",
      "selectorDescription": "SubjectPublicKeyInfo",
      "matchingTypeDescription": "SHA-256 hash"
    },
    {
      "usage": 3,
      "selector": 1,
      "matchingType": 1,
      "certificateData": "0f0c6c164a36f97e7b4c5a5b69d6f4f239d422fc3ec2592072ecfab8c271c452",
      "usageDescription": "DANE-EE: Domain-issued certificate",
      "selectorDescription": "SubjectPublicKeyInfo",
      "matchingTypeDescription": "SHA-256 hash"
    },
    {
      "usage": 2,
      "selector": 1,
      "matchingType": 1,
      "certificateData": "59e738e674221702af1edb87c5200c1a4b75f64fae3d2c3d265124c61bd83c79",
      "usageDescription": "DANE-TA: Trust anchor assertion",
      "selectorDescription": "SubjectPublicKeyInfo",
      "matchingTypeDescription": "SHA-256 hash"
    },
    {
      "usage": 3,
      "selector": 1,
      "matchingType": 1,
      "certificateData": "9be5b7d47f9eff930c11eb04d27cae6bddd0d375cdfbccf68b26efe676d1d0db",
      "usageDescription": "DANE-EE: Domain-issued certificate",
      "selectorDescription": "SubjectPublicKeyInfo",
      "matchingTypeDescription": "SHA-256 hash"
    },
    {
      "usage": 3,
      "selector": 1,
      "matchingType": 1,
      "certificateData": "0f0c6c164a36f97e7b4c5a5b69d6f4f239d422fc3ec2592072ecfab8c271c452",
      "usageDescription": "DANE-EE: Domain-issued certificate",
      "selectorDescription": "SubjectPublicKeyInfo",
      "matchingTypeDescription": "SHA-256 hash"
    },
    {
      "usage": 2,
      "selector": 1,
      "matchingType": 1,
      "certificateData": "59e738e674221702af1edb87c5200c1a4b75f64fae3d2c3d265124c61bd83c79",
      "usageDescription": "DANE-TA: Trust anchor assertion",
      "selectorDescription": "SubjectPublicKeyInfo",
      "matchingTypeDescription": "SHA-256 hash"
    }
  ],
  "valid": true,
  "issues": [
    "Best practice is DANE-EE (usage 3) for complete control",
    "Best practice is DANE-EE (usage 3) for complete control",
    "Best practice is DANE-EE (usage 3) for complete control"
  ],
  "errors": [],
  "advisories": [
    "Best practice is DANE-EE (usage 3) for complete control",
    "Best practice is DANE-EE (usage 3) for complete control",
    "Best practice is DANE-EE (usage 3) for complete control"
  ]
}
```

### Mx Reverse DNS

- Status: ok
- Duration: 182ms

```json
{
  "checked": true,
  "results": [
    {
      "mx": "route1.mx.cloudflare.net",
      "mxHosts": [
        "route1.mx.cloudflare.net"
      ],
      "ip": "162.159.205.11",
      "ipVersion": 4,
      "ptr": "route1.mx.cloudflare.net",
      "ptrs": [
        "route1.mx.cloudflare.net"
      ],
      "matches": true,
      "ptrMatchesMx": true,
      "forwardAddresses": [
        "162.159.205.11",
        "162.159.205.13",
        "162.159.205.12",
        "2606:4700:f5::c",
        "2606:4700:f5::d",
        "2606:4700:f5::b"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "route1.mx.cloudflare.net",
      "mxHosts": [
        "route1.mx.cloudflare.net"
      ],
      "ip": "162.159.205.13",
      "ipVersion": 4,
      "ptr": "route1.mx.cloudflare.net",
      "ptrs": [
        "route1.mx.cloudflare.net"
      ],
      "matches": true,
      "ptrMatchesMx": true,
      "forwardAddresses": [
        "162.159.205.11",
        "162.159.205.13",
        "162.159.205.12",
        "2606:4700:f5::c",
        "2606:4700:f5::d",
        "2606:4700:f5::b"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "route1.mx.cloudflare.net",
      "mxHosts": [
        "route1.mx.cloudflare.net"
      ],
      "ip": "162.159.205.12",
      "ipVersion": 4,
      "ptr": "route1.mx.cloudflare.net",
      "ptrs": [
        "route1.mx.cloudflare.net"
      ],
      "matches": true,
      "ptrMatchesMx": true,
      "forwardAddresses": [
        "162.159.205.11",
        "162.159.205.13",
        "162.159.205.12",
        "2606:4700:f5::c",
        "2606:4700:f5::d",
        "2606:4700:f5::b"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "route1.mx.cloudflare.net",
      "mxHosts": [
        "route1.mx.cloudflare.net"
      ],
      "ip": "2606:4700:f5::c",
      "ipVersion": 6,
      "ptr": "route1.mx.cloudflare.net",
      "ptrs": [
        "route1.mx.cloudflare.net"
      ],
      "matches": true,
      "ptrMatchesMx": true,
      "forwardAddresses": [
        "162.159.205.11",
        "162.159.205.13",
        "162.159.205.12",
        "2606:4700:f5::c",
        "2606:4700:f5::d",
        "2606:4700:f5::b"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "route1.mx.cloudflare.net",
      "mxHosts": [
        "route1.mx.cloudflare.net"
      ],
      "ip": "2606:4700:f5::d",
      "ipVersion": 6,
      "ptr": "route1.mx.cloudflare.net",
      "ptrs": [
        "route1.mx.cloudflare.net"
      ],
      "matches": true,
      "ptrMatchesMx": true,
      "forwardAddresses": [
        "162.159.205.11",
        "162.159.205.13",
        "162.159.205.12",
        "2606:4700:f5::c",
        "2606:4700:f5::d",
        "2606:4700:f5::b"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "route1.mx.cloudflare.net",
      "mxHosts": [
        "route1.mx.cloudflare.net"
      ],
      "ip": "2606:4700:f5::b",
      "ipVersion": 6,
      "ptr": "route1.mx.cloudflare.net",
      "ptrs": [
        "route1.mx.cloudflare.net"
      ],
      "matches": true,
      "ptrMatchesMx": true,
      "forwardAddresses": [
        "162.159.205.11",
        "162.159.205.13",
        "162.159.205.12",
        "2606:4700:f5::c",
        "2606:4700:f5::d",
        "2606:4700:f5::b"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "route3.mx.cloudflare.net",
      "mxHosts": [
        "route3.mx.cloudflare.net"
      ],
      "ip": "162.159.205.24",
      "ipVersion": 4,
      "ptr": "route3.mx.cloudflare.net",
      "ptrs": [
        "route3.mx.cloudflare.net"
      ],
      "matches": true,
      "ptrMatchesMx": true,
      "forwardAddresses": [
        "162.159.205.24",
        "162.159.205.25",
        "162.159.205.23",
        "2606:4700:f5::12",
        "2606:4700:f5::11",
        "2606:4700:f5::13"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "route3.mx.cloudflare.net",
      "mxHosts": [
        "route3.mx.cloudflare.net"
      ],
      "ip": "162.159.205.25",
      "ipVersion": 4,
      "ptr": "route3.mx.cloudflare.net",
      "ptrs": [
        "route3.mx.cloudflare.net"
      ],
      "matches": true,
      "ptrMatchesMx": true,
      "forwardAddresses": [
        "162.159.205.24",
        "162.159.205.25",
        "162.159.205.23",
        "2606:4700:f5::12",
        "2606:4700:f5::11",
        "2606:4700:f5::13"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "route3.mx.cloudflare.net",
      "mxHosts": [
        "route3.mx.cloudflare.net"
      ],
      "ip": "162.159.205.23",
      "ipVersion": 4,
      "ptr": "route3.mx.cloudflare.net",
      "ptrs": [
        "route3.mx.cloudflare.net"
      ],
      "matches": true,
      "ptrMatchesMx": true,
      "forwardAddresses": [
        "162.159.205.24",
        "162.159.205.25",
        "162.159.205.23",
        "2606:4700:f5::12",
        "2606:4700:f5::11",
        "2606:4700:f5::13"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "route3.mx.cloudflare.net",
      "mxHosts": [
        "route3.mx.cloudflare.net"
      ],
      "ip": "2606:4700:f5::12",
      "ipVersion": 6,
      "ptr": "route3.mx.cloudflare.net",
      "ptrs": [
        "route3.mx.cloudflare.net"
      ],
      "matches": true,
      "ptrMatchesMx": true,
      "forwardAddresses": [
        "162.159.205.24",
        "162.159.205.25",
        "162.159.205.23",
        "2606:4700:f5::12",
        "2606:4700:f5::11",
        "2606:4700:f5::13"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "route3.mx.cloudflare.net",
      "mxHosts": [
        "route3.mx.cloudflare.net"
      ],
      "ip": "2606:4700:f5::11",
      "ipVersion": 6,
      "ptr": "route3.mx.cloudflare.net",
      "ptrs": [
        "route3.mx.cloudflare.net"
      ],
      "matches": true,
      "ptrMatchesMx": true,
      "forwardAddresses": [
        "162.159.205.24",
        "162.159.205.25",
        "162.159.205.23",
        "2606:4700:f5::12",
        "2606:4700:f5::11",
        "2606:4700:f5::13"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "route3.mx.cloudflare.net",
      "mxHosts": [
        "route3.mx.cloudflare.net"
      ],
      "ip": "2606:4700:f5::13",
      "ipVersion": 6,
      "ptr": "route3.mx.cloudflare.net",
      "ptrs": [
        "route3.mx.cloudflare.net"
      ],
      "matches": true,
      "ptrMatchesMx": true,
      "forwardAddresses": [
        "162.159.205.24",
        "162.159.205.25",
        "162.159.205.23",
        "2606:4700:f5::12",
        "2606:4700:f5::11",
        "2606:4700:f5::13"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "route2.mx.cloudflare.net",
      "mxHosts": [
        "route2.mx.cloudflare.net"
      ],
      "ip": "162.159.205.17",
      "ipVersion": 4,
      "ptr": "route2.mx.cloudflare.net",
      "ptrs": [
        "route2.mx.cloudflare.net"
      ],
      "matches": true,
      "ptrMatchesMx": true,
      "forwardAddresses": [
        "162.159.205.17",
        "162.159.205.18",
        "162.159.205.19",
        "2606:4700:f5::f",
        "2606:4700:f5::10",
        "2606:4700:f5::e"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "route2.mx.cloudflare.net",
      "mxHosts": [
        "route2.mx.cloudflare.net"
      ],
      "ip": "162.159.205.18",
      "ipVersion": 4,
      "ptr": "route2.mx.cloudflare.net",
      "ptrs": [
        "route2.mx.cloudflare.net"
      ],
      "matches": true,
      "ptrMatchesMx": true,
      "forwardAddresses": [
        "162.159.205.17",
        "162.159.205.18",
        "162.159.205.19",
        "2606:4700:f5::f",
        "2606:4700:f5::10",
        "2606:4700:f5::e"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "route2.mx.cloudflare.net",
      "mxHosts": [
        "route2.mx.cloudflare.net"
      ],
      "ip": "162.159.205.19",
      "ipVersion": 4,
      "ptr": "route2.mx.cloudflare.net",
      "ptrs": [
        "route2.mx.cloudflare.net"
      ],
      "matches": true,
      "ptrMatchesMx": true,
      "forwardAddresses": [
        "162.159.205.17",
        "162.159.205.18",
        "162.159.205.19",
        "2606:4700:f5::f",
        "2606:4700:f5::10",
        "2606:4700:f5::e"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "route2.mx.cloudflare.net",
      "mxHosts": [
        "route2.mx.cloudflare.net"
      ],
      "ip": "2606:4700:f5::f",
      "ipVersion": 6,
      "ptr": "route2.mx.cloudflare.net",
      "ptrs": [
        "route2.mx.cloudflare.net"
      ],
      "matches": true,
      "ptrMatchesMx": true,
      "forwardAddresses": [
        "162.159.205.17",
        "162.159.205.18",
        "162.159.205.19",
        "2606:4700:f5::f",
        "2606:4700:f5::10",
        "2606:4700:f5::e"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "route2.mx.cloudflare.net",
      "mxHosts": [
        "route2.mx.cloudflare.net"
      ],
      "ip": "2606:4700:f5::10",
      "ipVersion": 6,
      "ptr": "route2.mx.cloudflare.net",
      "ptrs": [
        "route2.mx.cloudflare.net"
      ],
      "matches": true,
      "ptrMatchesMx": true,
      "forwardAddresses": [
        "162.159.205.17",
        "162.159.205.18",
        "162.159.205.19",
        "2606:4700:f5::f",
        "2606:4700:f5::10",
        "2606:4700:f5::e"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "route2.mx.cloudflare.net",
      "mxHosts": [
        "route2.mx.cloudflare.net"
      ],
      "ip": "2606:4700:f5::e",
      "ipVersion": 6,
      "ptr": "route2.mx.cloudflare.net",
      "ptrs": [
        "route2.mx.cloudflare.net"
      ],
      "matches": true,
      "ptrMatchesMx": true,
      "forwardAddresses": [
        "162.159.205.17",
        "162.159.205.18",
        "162.159.205.19",
        "2606:4700:f5::f",
        "2606:4700:f5::10",
        "2606:4700:f5::e"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    }
  ],
  "issues": []
}
```

### SPF

- Status: ok
- Duration: 147ms

```json
{
  "exists": true,
  "record": "v=spf1 include:_spf.mx.cloudflare.net ~all",
  "valid": true,
  "policy": "softfail",
  "lookups": 1,
  "issues": [
    "SPF policy ~all (softfail) is less strict than -all (fail)"
  ],
  "includes": [
    "_spf.mx.cloudflare.net"
  ],
  "mechanisms": [
    "include:_spf.mx.cloudflare.net",
    "~all"
  ],
  "lookupGraph": {
    "domain": "musicvideoai.pro",
    "record": "v=spf1 include:_spf.mx.cloudflare.net ~all",
    "exists": true,
    "mechanisms": [
      {
        "mechanism": "include:_spf.mx.cloudflare.net",
        "type": "include",
        "qualifier": null,
        "target": "_spf.mx.cloudflare.net",
        "dnsLookup": true
      },
      {
        "mechanism": "~all",
        "type": "all",
        "qualifier": "~",
        "target": null,
        "dnsLookup": false
      }
    ],
    "directLookups": 1,
    "totalLookups": 1,
    "includes": [
      {
        "domain": "_spf.mx.cloudflare.net",
        "record": "v=spf1 ip4:104.30.0.0/19 ip6:2405:8100:c000::/38 ~all",
        "exists": true,
        "mechanisms": [
          {
            "mechanism": "ip4:104.30.0.0/19",
            "type": "ip4",
            "qualifier": null,
            "target": "104.30.0.0/19",
            "dnsLookup": false
          },
          {
            "mechanism": "ip6:2405:8100:c000::/38",
            "type": "ip6",
            "qualifier": null,
            "target": "2405:8100:c000::/38",
            "dnsLookup": false
          },
          {
            "mechanism": "~all",
            "type": "all",
            "qualifier": "~",
            "target": null,
            "dnsLookup": false
          }
        ],
        "directLookups": 0,
        "totalLookups": 0,
        "includes": [],
        "redirect": null,
        "cycle": false,
        "issues": []
      }
    ],
    "redirect": null,
    "cycle": false,
    "issues": []
  },
  "flattened": {
    "record": "v=spf1 ip4:104.30.0.0/19 ip6:2405:8100:c000::/38 ~all",
    "mechanismCount": 3,
    "warnings": [
      "Flattening is usually not needed because this SPF record is within the 10-lookup limit"
    ]
  }
}
```

### DKIM

- Status: ok
- Duration: 10ms

```json
{
  "selectorsChecked": [
    "default",
    "dkim",
    "mail",
    "selector1",
    "selector2",
    "k1",
    "s1",
    "s2",
    "x",
    "sig1",
    "google",
    "selector1-azurecomm-prod-net",
    "selector2-azurecomm-prod-net",
    "amazonses",
    "mandrill",
    "mailchimp",
    "sendgrid",
    "sg",
    "smtpapi",
    "mg",
    "mx",
    "pm",
    "postmark",
    "sib",
    "hs1",
    "hs2",
    "kl",
    "klaviyo",
    "dk",
    "zoho",
    "zm",
    "1024",
    "fm1",
    "fm2",
    "fm3",
    "protonmail",
    "protonmail2",
    "protonmail3",
    "mimecast20190301",
    "pphosted",
    "proofpoint",
    "mailfilter",
    "cobytes",
    "hetzner",
    "ovh",
    "transip",
    "everlytickey1",
    "mxvault",
    "mailjet",
    "sparkpost"
  ],
  "found": [],
  "records": {},
  "discovery": {
    "mode": "heuristic",
    "conclusiveForCheckedSelectors": true,
    "conclusiveForDomain": false,
    "note": "Heuristic lookup of common selectors. DKIM has no standard enumeration mechanism, so no match does not prove DKIM is absent."
  }
}
```

### DMARC

- Status: ok
- Duration: 106ms

```json
{
  "exists": true,
  "valid": true,
  "record": "v=DMARC1; p=reject;",
  "policy": "reject",
  "subdomainPolicy": "reject",
  "percentage": 100,
  "reportingEnabled": false,
  "rua": [],
  "ruf": [],
  "issues": [
    "No DMARC reporting configured (rua= or ruf=)"
  ]
}
```

### BIMI

- Status: ok
- Duration: 103ms

```json
{
  "exists": false,
  "record": null,
  "valid": false,
  "logoUrl": null,
  "authorityUrl": null,
  "issues": [
    "No BIMI record found at default._bimi.musicvideoai.pro"
  ]
}
```

### MTA-STS

- Status: ok
- Duration: 98ms

```json
{
  "exists": false,
  "record": null,
  "policyId": null,
  "policy": null,
  "policyUrl": "https://mta-sts.musicvideoai.pro/.well-known/mta-sts.txt",
  "valid": false,
  "issues": [
    "No MTA-STS TXT record found at _mta-sts.musicvideoai.pro"
  ]
}
```

### SMTP STARTTLS

- Status: ok
- Duration: 5190ms

```json
{
  "domain": "musicvideoai.pro",
  "checked": true,
  "checkedAt": "2026-10-03T16:30:30.173Z",
  "mxRecords": [
    {
      "exchange": "route1.mx.cloudflare.net",
      "priority": 8
    },
    {
      "exchange": "route2.mx.cloudflare.net",
      "priority": 29
    },
    {
      "exchange": "route3.mx.cloudflare.net",
      "priority": 68
    }
  ],
  "servers": [
    {
      "mx": "route1.mx.cloudflare.net",
      "priority": 8,
      "reachable": false,
      "banner": null,
      "ehloResponse": [],
      "capabilities": [],
      "startTlsSupported": null,
      "startTlsAccepted": false,
      "tls": {
        "established": false,
        "protocol": null,
        "authorized": false,
        "authorizationError": null,
        "hostnameMatches": false,
        "hostnameError": null,
        "certificate": null
      },
      "reverseDns": {
        "ips": [
          "162.159.205.11",
          "162.159.205.13",
          "162.159.205.12",
          "2606:4700:f5::c",
          "2606:4700:f5::d",
          "2606:4700:f5::b"
        ],
        "passed": 6,
        "total": 6,
        "details": [
          {
            "ip": "162.159.205.11",
            "ptrs": [
              "route1.mx.cloudflare.net"
            ],
            "forwardAddresses": [
              "162.159.205.11",
              "162.159.205.13",
              "162.159.205.12",
              "2606:4700:f5::c",
              "2606:4700:f5::d",
              "2606:4700:f5::b"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "162.159.205.13",
            "ptrs": [
              "route1.mx.cloudflare.net"
            ],
            "forwardAddresses": [
              "162.159.205.11",
              "162.159.205.13",
              "162.159.205.12",
              "2606:4700:f5::c",
              "2606:4700:f5::d",
              "2606:4700:f5::b"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "162.159.205.12",
            "ptrs": [
              "route1.mx.cloudflare.net"
            ],
            "forwardAddresses": [
              "162.159.205.11",
              "162.159.205.13",
              "162.159.205.12",
              "2606:4700:f5::c",
              "2606:4700:f5::d",
              "2606:4700:f5::b"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "2606:4700:f5::c",
            "ptrs": [
              "route1.mx.cloudflare.net"
            ],
            "forwardAddresses": [
              "162.159.205.11",
              "162.159.205.13",
              "162.159.205.12",
              "2606:4700:f5::c",
              "2606:4700:f5::d",
              "2606:4700:f5::b"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "2606:4700:f5::d",
            "ptrs": [
              "route1.mx.cloudflare.net"
            ],
            "forwardAddresses": [
              "162.159.205.11",
              "162.159.205.13",
              "162.159.205.12",
              "2606:4700:f5::c",
              "2606:4700:f5::d",
              "2606:4700:f5::b"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "2606:4700:f5::b",
            "ptrs": [
              "route1.mx.cloudflare.net"
            ],
            "forwardAddresses": [
              "162.159.205.11",
              "162.159.205.13",
              "162.159.205.12",
              "2606:4700:f5::c",
              "2606:4700:f5::d",
              "2606:4700:f5::b"
            ],
            "forwardConfirmed": true
          }
        ]
      },
      "durationMs": 5003,
      "error": "TCP connection timed out after 5000ms"
    },
    {
      "mx": "route2.mx.cloudflare.net",
      "priority": 29,
      "reachable": false,
      "banner": null,
      "ehloResponse": [],
      "capabilities": [],
      "startTlsSupported": null,
      "startTlsAccepted": false,
      "tls": {
        "established": false,
        "protocol": null,
        "authorized": false,
        "authorizationError": null,
        "hostnameMatches": false,
        "hostnameError": null,
        "certificate": null
      },
      "reverseDns": {
        "ips": [
          "162.159.205.17",
          "162.159.205.18",
          "162.159.205.19",
          "2606:4700:f5::f",
          "2606:4700:f5::10",
          "2606:4700:f5::e"
        ],
        "passed": 6,
        "total": 6,
        "details": [
          {
            "ip": "162.159.205.17",
            "ptrs": [
              "route2.mx.cloudflare.net"
            ],
            "forwardAddresses": [
              "162.159.205.17",
              "162.159.205.18",
              "162.159.205.19",
              "2606:4700:f5::f",
              "2606:4700:f5::10",
              "2606:4700:f5::e"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "162.159.205.18",
            "ptrs": [
              "route2.mx.cloudflare.net"
            ],
            "forwardAddresses": [
              "162.159.205.17",
              "162.159.205.18",
              "162.159.205.19",
              "2606:4700:f5::f",
              "2606:4700:f5::10",
              "2606:4700:f5::e"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "162.159.205.19",
            "ptrs": [
              "route2.mx.cloudflare.net"
            ],
            "forwardAddresses": [
              "162.159.205.17",
              "162.159.205.18",
              "162.159.205.19",
              "2606:4700:f5::f",
              "2606:4700:f5::10",
              "2606:4700:f5::e"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "2606:4700:f5::f",
            "ptrs": [
              "route2.mx.cloudflare.net"
            ],
            "forwardAddresses": [
              "162.159.205.17",
              "162.159.205.18",
              "162.159.205.19",
              "2606:4700:f5::f",
              "2606:4700:f5::10",
              "2606:4700:f5::e"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "2606:4700:f5::10",
            "ptrs": [
              "route2.mx.cloudflare.net"
            ],
            "forwardAddresses": [
              "162.159.205.17",
              "162.159.205.18",
              "162.159.205.19",
              "2606:4700:f5::f",
              "2606:4700:f5::10",
              "2606:4700:f5::e"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "2606:4700:f5::e",
            "ptrs": [
              "route2.mx.cloudflare.net"
            ],
            "forwardAddresses": [
              "162.159.205.17",
              "162.159.205.18",
              "162.159.205.19",
              "2606:4700:f5::f",
              "2606:4700:f5::10",
              "2606:4700:f5::e"
            ],
            "forwardConfirmed": true
          }
        ]
      },
      "durationMs": 5012,
      "error": "TCP connection timed out after 5000ms"
    },
    {
      "mx": "route3.mx.cloudflare.net",
      "priority": 68,
      "reachable": false,
      "banner": null,
      "ehloResponse": [],
      "capabilities": [],
      "startTlsSupported": null,
      "startTlsAccepted": false,
      "tls": {
        "established": false,
        "protocol": null,
        "authorized": false,
        "authorizationError": null,
        "hostnameMatches": false,
        "hostnameError": null,
        "certificate": null
      },
      "reverseDns": {
        "ips": [
          "162.159.205.24",
          "162.159.205.25",
          "162.159.205.23",
          "2606:4700:f5::12",
          "2606:4700:f5::11",
          "2606:4700:f5::13"
        ],
        "passed": 6,
        "total": 6,
        "details": [
          {
            "ip": "162.159.205.24",
            "ptrs": [
              "route3.mx.cloudflare.net"
            ],
            "forwardAddresses": [
              "162.159.205.24",
              "162.159.205.25",
              "162.159.205.23",
              "2606:4700:f5::12",
              "2606:4700:f5::11",
              "2606:4700:f5::13"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "162.159.205.25",
            "ptrs": [
              "route3.mx.cloudflare.net"
            ],
            "forwardAddresses": [
              "162.159.205.24",
              "162.159.205.25",
              "162.159.205.23",
              "2606:4700:f5::12",
              "2606:4700:f5::11",
              "2606:4700:f5::13"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "162.159.205.23",
            "ptrs": [
              "route3.mx.cloudflare.net"
            ],
            "forwardAddresses": [
              "162.159.205.24",
              "162.159.205.25",
              "162.159.205.23",
              "2606:4700:f5::12",
              "2606:4700:f5::11",
              "2606:4700:f5::13"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "2606:4700:f5::12",
            "ptrs": [
              "route3.mx.cloudflare.net"
            ],
            "forwardAddresses": [
              "162.159.205.24",
              "162.159.205.25",
              "162.159.205.23",
              "2606:4700:f5::12",
              "2606:4700:f5::11",
              "2606:4700:f5::13"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "2606:4700:f5::11",
            "ptrs": [
              "route3.mx.cloudflare.net"
            ],
            "forwardAddresses": [
              "162.159.205.24",
              "162.159.205.25",
              "162.159.205.23",
              "2606:4700:f5::12",
              "2606:4700:f5::11",
              "2606:4700:f5::13"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "2606:4700:f5::13",
            "ptrs": [
              "route3.mx.cloudflare.net"
            ],
            "forwardAddresses": [
              "162.159.205.24",
              "162.159.205.25",
              "162.159.205.23",
              "2606:4700:f5::12",
              "2606:4700:f5::11",
              "2606:4700:f5::13"
            ],
            "forwardConfirmed": true
          }
        ]
      },
      "durationMs": 5011,
      "error": "TCP connection timed out after 5000ms"
    }
  ],
  "summary": {
    "totalServers": 3,
    "reachable": 0,
    "startTlsSupported": 0,
    "tlsEstablished": 0,
    "validCertificates": 0,
    "hostnameMatches": 0,
    "fcrdnsPassed": 3
  },
  "issues": [
    "route1.mx.cloudflare.net did not answer on SMTP port 25 from the IntoDNS.ai server (TCP connection timed out after 5000ms). STARTTLS and the certificate were not measured. Outbound port 25 is filtered on many network paths, so this does not show that the host is down or lacks STARTTLS.",
    "route2.mx.cloudflare.net did not answer on SMTP port 25 from the IntoDNS.ai server (TCP connection timed out after 5000ms). STARTTLS and the certificate were not measured. Outbound port 25 is filtered on many network paths, so this does not show that the host is down or lacks STARTTLS.",
    "route3.mx.cloudflare.net did not answer on SMTP port 25 from the IntoDNS.ai server (TCP connection timed out after 5000ms). STARTTLS and the certificate were not measured. Outbound port 25 is filtered on many network paths, so this does not show that the host is down or lacks STARTTLS."
  ]
}
```

### Blacklist

- Status: ok
- Duration: 6ms

```json
{
  "domain": "musicvideoai.pro",
  "mailServers": [
    {
      "hostname": "route2.mx.cloudflare.net",
      "ip": "162.159.205.18",
      "blacklistResult": {
        "ip": "162.159.205.18",
        "listed": true,
        "blacklists": [
          {
            "name": "SpamCop",
            "zone": "bl.spamcop.net",
            "severity": "high",
            "removalUrl": "https://www.spamcop.net/bl.shtml",
            "estimatedRemovalTime": "24h auto / 4h manual",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Barracuda BRBL",
            "zone": "b.barracudacentral.org",
            "severity": "high",
            "removalUrl": "https://www.barracudacentral.org/rbl/removal-request",
            "estimatedRemovalTime": "~12 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "PSBL",
            "zone": "psbl.surriel.com",
            "severity": "high",
            "removalUrl": "https://psbl.org/remove",
            "estimatedRemovalTime": "Instant",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L1",
            "zone": "dnsbl-1.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L2",
            "zone": "dnsbl-2.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L3",
            "zone": "dnsbl-3.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Truncate",
            "zone": "truncate.gbudb.net",
            "severity": "medium",
            "removalUrl": "https://www.gbudb.com/",
            "estimatedRemovalTime": "Auto after reputation improves",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "JustSpam",
            "zone": "dnsbl.justspam.org",
            "severity": "medium",
            "removalUrl": "https://www.justspam.org/remove",
            "estimatedRemovalTime": "~24 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "BlockList.de",
            "zone": "bl.blocklist.de",
            "severity": "medium",
            "removalUrl": "https://www.blocklist.de/en/index.html",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "BACKSCATTERER",
            "zone": "ips.backscatterer.org",
            "severity": "low",
            "removalUrl": "https://www.backscatterer.org/",
            "estimatedRemovalTime": "Fix backscatter, auto-removal",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "HOSTKARMA Black",
            "zone": "hostkarma.junkemailfilter.com",
            "severity": "low",
            "removalUrl": "https://wiki.junkemailfilter.com/",
            "estimatedRemovalTime": "Auto after reputation",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "S5H.net",
            "zone": "all.s5h.net",
            "severity": "low",
            "removalUrl": "https://www.s5h.net/lookup",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BL",
            "zone": "bl.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Suomispam SMAP",
            "zone": "gl.suomispam.net",
            "severity": "low",
            "removalUrl": "https://suomispam.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Spfbl.net BL",
            "zone": "dnsbl.spfbl.net",
            "severity": "low",
            "removalUrl": "https://spfbl.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": true,
            "response": "127.0.0.4"
          },
          {
            "name": "MailSpike Z",
            "zone": "z.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "MailSpike BL",
            "zone": "bl.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Anonmails",
            "zone": "spam.dnsbl.anonmails.de",
            "severity": "low",
            "removalUrl": "https://anonmails.de/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "0SPAM",
            "zone": "bl.0spam.org",
            "severity": "low",
            "removalUrl": "https://0spam.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "CYMRU BOGONS",
            "zone": "v4.fullbogons.cymru.com",
            "severity": "low",
            "removalUrl": "https://www.team-cymru.com/",
            "estimatedRemovalTime": "N/A (bogon list)",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "DAN TOR",
            "zone": "tor.dan.me.uk",
            "severity": "low",
            "removalUrl": "https://www.dan.me.uk/tornodes",
            "estimatedRemovalTime": "Auto when exit node removed",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "INTERSERVER",
            "zone": "rbl.interserver.net",
            "severity": "low",
            "removalUrl": "https://www.interserver.net/rbl/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Nordspam BL",
            "zone": "bl.nordspam.com",
            "severity": "low",
            "removalUrl": "https://www.nordspam.com/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "NoSolicitado",
            "zone": "bl.nosolicitado.org",
            "severity": "low",
            "removalUrl": "https://www.nosolicitado.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BACKSCATTER",
            "zone": "backscatter.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SURBL multi",
            "zone": "multi.surbl.org",
            "severity": "medium",
            "removalUrl": "https://www.surbl.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SWINOG",
            "zone": "dnsrbl.swinog.ch",
            "severity": "low",
            "removalUrl": "https://antispam.imp.ch/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "ZapBL",
            "zone": "dnsbl.zapbl.net",
            "severity": "low",
            "removalUrl": "https://zapbl.net/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          }
        ],
        "providerHealth": {
          "totalProviders": 64,
          "checkedProviders": 28,
          "unavailableProviders": [
            {
              "name": "Spamhaus ZEN",
              "zone": "zen.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "Spamhaus SBL",
              "zone": "sbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "Spamhaus XBL",
              "zone": "xbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "Spamhaus PBL",
              "zone": "pbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "SORBS",
              "zone": "dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Spam",
              "zone": "spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Recent",
              "zone": "new.spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Web",
              "zone": "web.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "CALIVENT",
              "zone": "calivent.com.br",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "DRM BL",
              "zone": "dnsbl.dronebl.org",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Lashback UBL",
              "zone": "ubl.unsubscore.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus CSS",
              "zone": "css.spamhaus.org",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "ORBS DUN",
              "zone": "dun.dnsrbl.au",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM Fresh",
              "zone": "fresh.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URI BL",
              "zone": "uribl.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "BURNT TECH",
              "zone": "blacklist.mail.ops.asp.att.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "FABELSOURCES",
              "zone": "bl.fabel.dk",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IBM DNS Blacklist",
              "zone": "dnsbl.cobion.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IMP SPAM",
              "zone": "dnsbl.imp.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "KEMPTBL",
              "zone": "bl.kempt.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Konstant",
              "zone": "bl.konstant.no",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "MSRBL Spam",
              "zone": "images.rbl.msrbl.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "RBL JP",
              "zone": "all.rbl.jp",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM BLACK",
              "zone": "black.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URIRED",
              "zone": "urired.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL BADCONF",
              "zone": "rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL NOMAIL",
              "zone": "badconf.rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "TRIUMF",
              "zone": "dnsbl.triumf.ca",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Woodys SMTP BL",
              "zone": "blacklist.woody.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            }
          ],
          "disabledProviders": [
            {
              "name": "Abusix Mail Intelligence",
              "zone": "combined.mail.abusix.zone",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Nordspam DBL",
              "zone": "dbl.nordspam.com",
              "reason": "Domain-only list, not applicable to an IP: NordSpam documents it as \"URIBL (Domain/URI only)\" (https://www.nordspam.com/usage/)."
            },
            {
              "name": "RATS Dyna",
              "zone": "dyna.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS NoPtr",
              "zone": "noptr.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS Spam",
              "zone": "spam.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Sender Score",
              "zone": "score.senderscore.com",
              "reason": "Reputation-score zone, not a blocklist: an answer is a score, not a listing. Validity's blocklist is bl.score.senderscore.com (SpamAssassin RCVD_IN_VALIDITY_RPBL)."
            },
            {
              "name": "Spamhaus DBL",
              "zone": "dbl.spamhaus.org",
              "reason": "Domain-only list, not applicable to an IP: Spamhaus answers IP queries with 127.0.1.255 \"IP queries prohibited\" (https://www.spamhaus.org/faqs/domain-blocklist/)."
            }
          ]
        },
        "checkedAt": "2026-10-03T15:49:35.481Z"
      }
    },
    {
      "hostname": "route3.mx.cloudflare.net",
      "ip": "162.159.205.25",
      "blacklistResult": {
        "ip": "162.159.205.25",
        "listed": false,
        "blacklists": [
          {
            "name": "SpamCop",
            "zone": "bl.spamcop.net",
            "severity": "high",
            "removalUrl": "https://www.spamcop.net/bl.shtml",
            "estimatedRemovalTime": "24h auto / 4h manual",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Barracuda BRBL",
            "zone": "b.barracudacentral.org",
            "severity": "high",
            "removalUrl": "https://www.barracudacentral.org/rbl/removal-request",
            "estimatedRemovalTime": "~12 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "PSBL",
            "zone": "psbl.surriel.com",
            "severity": "high",
            "removalUrl": "https://psbl.org/remove",
            "estimatedRemovalTime": "Instant",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L1",
            "zone": "dnsbl-1.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L2",
            "zone": "dnsbl-2.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L3",
            "zone": "dnsbl-3.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Truncate",
            "zone": "truncate.gbudb.net",
            "severity": "medium",
            "removalUrl": "https://www.gbudb.com/",
            "estimatedRemovalTime": "Auto after reputation improves",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "JustSpam",
            "zone": "dnsbl.justspam.org",
            "severity": "medium",
            "removalUrl": "https://www.justspam.org/remove",
            "estimatedRemovalTime": "~24 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "BlockList.de",
            "zone": "bl.blocklist.de",
            "severity": "medium",
            "removalUrl": "https://www.blocklist.de/en/index.html",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "BACKSCATTERER",
            "zone": "ips.backscatterer.org",
            "severity": "low",
            "removalUrl": "https://www.backscatterer.org/",
            "estimatedRemovalTime": "Fix backscatter, auto-removal",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "HOSTKARMA Black",
            "zone": "hostkarma.junkemailfilter.com",
            "severity": "low",
            "removalUrl": "https://wiki.junkemailfilter.com/",
            "estimatedRemovalTime": "Auto after reputation",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "S5H.net",
            "zone": "all.s5h.net",
            "severity": "low",
            "removalUrl": "https://www.s5h.net/lookup",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BL",
            "zone": "bl.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Suomispam SMAP",
            "zone": "gl.suomispam.net",
            "severity": "low",
            "removalUrl": "https://suomispam.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "MailSpike Z",
            "zone": "z.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "MailSpike BL",
            "zone": "bl.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Anonmails",
            "zone": "spam.dnsbl.anonmails.de",
            "severity": "low",
            "removalUrl": "https://anonmails.de/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "0SPAM",
            "zone": "bl.0spam.org",
            "severity": "low",
            "removalUrl": "https://0spam.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "CYMRU BOGONS",
            "zone": "v4.fullbogons.cymru.com",
            "severity": "low",
            "removalUrl": "https://www.team-cymru.com/",
            "estimatedRemovalTime": "N/A (bogon list)",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "DAN TOR",
            "zone": "tor.dan.me.uk",
            "severity": "low",
            "removalUrl": "https://www.dan.me.uk/tornodes",
            "estimatedRemovalTime": "Auto when exit node removed",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "INTERSERVER",
            "zone": "rbl.interserver.net",
            "severity": "low",
            "removalUrl": "https://www.interserver.net/rbl/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Nordspam BL",
            "zone": "bl.nordspam.com",
            "severity": "low",
            "removalUrl": "https://www.nordspam.com/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "NoSolicitado",
            "zone": "bl.nosolicitado.org",
            "severity": "low",
            "removalUrl": "https://www.nosolicitado.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BACKSCATTER",
            "zone": "backscatter.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SURBL multi",
            "zone": "multi.surbl.org",
            "severity": "medium",
            "removalUrl": "https://www.surbl.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SWINOG",
            "zone": "dnsrbl.swinog.ch",
            "severity": "low",
            "removalUrl": "https://antispam.imp.ch/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "ZapBL",
            "zone": "dnsbl.zapbl.net",
            "severity": "low",
            "removalUrl": "https://zapbl.net/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          }
        ],
        "providerHealth": {
          "totalProviders": 64,
          "checkedProviders": 27,
          "unavailableProviders": [
            {
              "name": "Spamhaus ZEN",
              "zone": "zen.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "Spamhaus SBL",
              "zone": "sbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "Spamhaus XBL",
              "zone": "xbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "Spamhaus PBL",
              "zone": "pbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "SORBS",
              "zone": "dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Spam",
              "zone": "spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Recent",
              "zone": "new.spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Web",
              "zone": "web.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "CALIVENT",
              "zone": "calivent.com.br",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "DRM BL",
              "zone": "dnsbl.dronebl.org",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Lashback UBL",
              "zone": "ubl.unsubscore.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus CSS",
              "zone": "css.spamhaus.org",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "ORBS DUN",
              "zone": "dun.dnsrbl.au",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM Fresh",
              "zone": "fresh.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URI BL",
              "zone": "uribl.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spfbl.net BL",
              "zone": "dnsbl.spfbl.net",
              "severity": "low",
              "errorCode": "DNSBL_LOOKUP_FAILED",
              "errorMessage": "DNS timeout"
            },
            {
              "name": "BURNT TECH",
              "zone": "blacklist.mail.ops.asp.att.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "FABELSOURCES",
              "zone": "bl.fabel.dk",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IBM DNS Blacklist",
              "zone": "dnsbl.cobion.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IMP SPAM",
              "zone": "dnsbl.imp.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "KEMPTBL",
              "zone": "bl.kempt.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Konstant",
              "zone": "bl.konstant.no",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "MSRBL Spam",
              "zone": "images.rbl.msrbl.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "RBL JP",
              "zone": "all.rbl.jp",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM BLACK",
              "zone": "black.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URIRED",
              "zone": "urired.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL BADCONF",
              "zone": "rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL NOMAIL",
              "zone": "badconf.rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "TRIUMF",
              "zone": "dnsbl.triumf.ca",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Woodys SMTP BL",
              "zone": "blacklist.woody.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            }
          ],
          "disabledProviders": [
            {
              "name": "Abusix Mail Intelligence",
              "zone": "combined.mail.abusix.zone",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Nordspam DBL",
              "zone": "dbl.nordspam.com",
              "reason": "Domain-only list, not applicable to an IP: NordSpam documents it as \"URIBL (Domain/URI only)\" (https://www.nordspam.com/usage/)."
            },
            {
              "name": "RATS Dyna",
              "zone": "dyna.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS NoPtr",
              "zone": "noptr.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS Spam",
              "zone": "spam.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Sender Score",
              "zone": "score.senderscore.com",
              "reason": "Reputation-score zone, not a blocklist: an answer is a score, not a listing. Validity's blocklist is bl.score.senderscore.com (SpamAssassin RCVD_IN_VALIDITY_RPBL)."
            },
            {
              "name": "Spamhaus DBL",
              "zone": "dbl.spamhaus.org",
              "reason": "Domain-only list, not applicable to an IP: Spamhaus answers IP queries with 127.0.1.255 \"IP queries prohibited\" (https://www.spamhaus.org/faqs/domain-blocklist/)."
            }
          ]
        },
        "checkedAt": "2026-10-03T15:49:30.565Z"
      }
    },
    {
      "hostname": "route1.mx.cloudflare.net",
      "ip": "162.159.205.13",
      "blacklistResult": {
        "ip": "162.159.205.13",
        "listed": false,
        "blacklists": [
          {
            "name": "SpamCop",
            "zone": "bl.spamcop.net",
            "severity": "high",
            "removalUrl": "https://www.spamcop.net/bl.shtml",
            "estimatedRemovalTime": "24h auto / 4h manual",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Barracuda BRBL",
            "zone": "b.barracudacentral.org",
            "severity": "high",
            "removalUrl": "https://www.barracudacentral.org/rbl/removal-request",
            "estimatedRemovalTime": "~12 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "PSBL",
            "zone": "psbl.surriel.com",
            "severity": "high",
            "removalUrl": "https://psbl.org/remove",
            "estimatedRemovalTime": "Instant",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L1",
            "zone": "dnsbl-1.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L2",
            "zone": "dnsbl-2.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L3",
            "zone": "dnsbl-3.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Truncate",
            "zone": "truncate.gbudb.net",
            "severity": "medium",
            "removalUrl": "https://www.gbudb.com/",
            "estimatedRemovalTime": "Auto after reputation improves",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "JustSpam",
            "zone": "dnsbl.justspam.org",
            "severity": "medium",
            "removalUrl": "https://www.justspam.org/remove",
            "estimatedRemovalTime": "~24 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "BlockList.de",
            "zone": "bl.blocklist.de",
            "severity": "medium",
            "removalUrl": "https://www.blocklist.de/en/index.html",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "BACKSCATTERER",
            "zone": "ips.backscatterer.org",
            "severity": "low",
            "removalUrl": "https://www.backscatterer.org/",
            "estimatedRemovalTime": "Fix backscatter, auto-removal",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "HOSTKARMA Black",
            "zone": "hostkarma.junkemailfilter.com",
            "severity": "low",
            "removalUrl": "https://wiki.junkemailfilter.com/",
            "estimatedRemovalTime": "Auto after reputation",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "S5H.net",
            "zone": "all.s5h.net",
            "severity": "low",
            "removalUrl": "https://www.s5h.net/lookup",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BL",
            "zone": "bl.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Suomispam SMAP",
            "zone": "gl.suomispam.net",
            "severity": "low",
            "removalUrl": "https://suomispam.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "MailSpike Z",
            "zone": "z.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "MailSpike BL",
            "zone": "bl.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Anonmails",
            "zone": "spam.dnsbl.anonmails.de",
            "severity": "low",
            "removalUrl": "https://anonmails.de/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "0SPAM",
            "zone": "bl.0spam.org",
            "severity": "low",
            "removalUrl": "https://0spam.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "CYMRU BOGONS",
            "zone": "v4.fullbogons.cymru.com",
            "severity": "low",
            "removalUrl": "https://www.team-cymru.com/",
            "estimatedRemovalTime": "N/A (bogon list)",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "DAN TOR",
            "zone": "tor.dan.me.uk",
            "severity": "low",
            "removalUrl": "https://www.dan.me.uk/tornodes",
            "estimatedRemovalTime": "Auto when exit node removed",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "INTERSERVER",
            "zone": "rbl.interserver.net",
            "severity": "low",
            "removalUrl": "https://www.interserver.net/rbl/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Nordspam BL",
            "zone": "bl.nordspam.com",
            "severity": "low",
            "removalUrl": "https://www.nordspam.com/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "NoSolicitado",
            "zone": "bl.nosolicitado.org",
            "severity": "low",
            "removalUrl": "https://www.nosolicitado.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BACKSCATTER",
            "zone": "backscatter.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SURBL multi",
            "zone": "multi.surbl.org",
            "severity": "medium",
            "removalUrl": "https://www.surbl.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SWINOG",
            "zone": "dnsrbl.swinog.ch",
            "severity": "low",
            "removalUrl": "https://antispam.imp.ch/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "ZapBL",
            "zone": "dnsbl.zapbl.net",
            "severity": "low",
            "removalUrl": "https://zapbl.net/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          }
        ],
        "providerHealth": {
          "totalProviders": 64,
          "checkedProviders": 27,
          "unavailableProviders": [
            {
              "name": "Spamhaus ZEN",
              "zone": "zen.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "Spamhaus SBL",
              "zone": "sbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "Spamhaus XBL",
              "zone": "xbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "Spamhaus PBL",
              "zone": "pbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "SORBS",
              "zone": "dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Spam",
              "zone": "spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Recent",
              "zone": "new.spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Web",
              "zone": "web.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "CALIVENT",
              "zone": "calivent.com.br",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "DRM BL",
              "zone": "dnsbl.dronebl.org",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Lashback UBL",
              "zone": "ubl.unsubscore.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus CSS",
              "zone": "css.spamhaus.org",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "ORBS DUN",
              "zone": "dun.dnsrbl.au",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM Fresh",
              "zone": "fresh.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URI BL",
              "zone": "uribl.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spfbl.net BL",
              "zone": "dnsbl.spfbl.net",
              "severity": "low",
              "errorCode": "DNSBL_LOOKUP_FAILED",
              "errorMessage": "DNS timeout"
            },
            {
              "name": "BURNT TECH",
              "zone": "blacklist.mail.ops.asp.att.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "FABELSOURCES",
              "zone": "bl.fabel.dk",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IBM DNS Blacklist",
              "zone": "dnsbl.cobion.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IMP SPAM",
              "zone": "dnsbl.imp.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "KEMPTBL",
              "zone": "bl.kempt.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Konstant",
              "zone": "bl.konstant.no",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "MSRBL Spam",
              "zone": "images.rbl.msrbl.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "RBL JP",
              "zone": "all.rbl.jp",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM BLACK",
              "zone": "black.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URIRED",
              "zone": "urired.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL BADCONF",
              "zone": "rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL NOMAIL",
              "zone": "badconf.rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "TRIUMF",
              "zone": "dnsbl.triumf.ca",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Woodys SMTP BL",
              "zone": "blacklist.woody.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            }
          ],
          "disabledProviders": [
            {
              "name": "Abusix Mail Intelligence",
              "zone": "combined.mail.abusix.zone",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Nordspam DBL",
              "zone": "dbl.nordspam.com",
              "reason": "Domain-only list, not applicable to an IP: NordSpam documents it as \"URIBL (Domain/URI only)\" (https://www.nordspam.com/usage/)."
            },
            {
              "name": "RATS Dyna",
              "zone": "dyna.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS NoPtr",
              "zone": "noptr.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS Spam",
              "zone": "spam.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Sender Score",
              "zone": "score.senderscore.com",
              "reason": "Reputation-score zone, not a blocklist: an answer is a score, not a listing. Validity's blocklist is bl.score.senderscore.com (SpamAssassin RCVD_IN_VALIDITY_RPBL)."
            },
            {
              "name": "Spamhaus DBL",
              "zone": "dbl.spamhaus.org",
              "reason": "Domain-only list, not applicable to an IP: Spamhaus answers IP queries with 127.0.1.255 \"IP queries prohibited\" (https://www.spamhaus.org/faqs/domain-blocklist/)."
            }
          ]
        },
        "checkedAt": "2026-10-03T15:49:30.524Z"
      }
    }
  ],
  "mxFound": true
}
```

### Sender Requirements

- Status: ok
- Duration: 178ms

```json
{
  "domain": "musicvideoai.pro",
  "timestamp": "2026-10-03T16:30:30.303Z",
  "overallStatus": "partial",
  "passedCount": 5,
  "failedCount": 0,
  "warningCount": 1,
  "checks": [
    {
      "id": "spf-auth",
      "name": "SPF Authentication",
      "category": "authentication",
      "status": "pass",
      "description": "Sender Policy Framework (SPF) authenticates which mail servers can send email for your domain",
      "details": "v=spf1 include:_spf.mx.cloudflare.net ~all",
      "recommendation": "SPF policy ~all (softfail) is less strict than -all (fail)",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    },
    {
      "id": "dkim-auth",
      "name": "DKIM Authentication",
      "category": "authentication",
      "status": "warning",
      "description": "DomainKeys Identified Mail (DKIM) adds a digital signature to authenticate emails",
      "details": "No DKIM records found for common selectors",
      "recommendation": "Configure DKIM signing for your email service. Check with your email provider for setup instructions.",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    },
    {
      "id": "dmarc-policy",
      "name": "DMARC Policy",
      "category": "authentication",
      "status": "pass",
      "description": "DMARC tells receiving servers what to do when SPF/DKIM fail",
      "details": "v=DMARC1; p=reject;",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": true
    },
    {
      "id": "dmarc-alignment",
      "name": "DMARC Alignment",
      "category": "authentication",
      "status": "pass",
      "description": "Either SPF or DKIM must align with the From domain",
      "details": "SPF: aligned, DKIM: not set up",
      "recommendation": "Ensure your sending domain matches the authenticated domain in SPF or DKIM",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": true
    },
    {
      "id": "mx-records",
      "name": "Valid MX Records",
      "category": "infrastructure",
      "status": "pass",
      "description": "MX records are required to receive email and indicate a properly configured domain",
      "details": "3 MX record(s) found",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    },
    {
      "id": "ptr-rdns",
      "name": "PTR/Reverse DNS",
      "category": "infrastructure",
      "status": "pass",
      "description": "Sending IPs should have valid PTR records that match the sending hostname",
      "details": "PTR records found for MX servers",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    },
    {
      "id": "tls-connection",
      "name": "TLS Encryption",
      "category": "infrastructure",
      "status": "info",
      "description": "Emails should be sent over TLS-encrypted connections",
      "details": "TLS support depends on your email server configuration",
      "recommendation": "Ensure your mail server supports and uses TLS 1.2 or higher",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    },
    {
      "id": "one-click-unsubscribe",
      "name": "One-Click Unsubscribe",
      "category": "best-practices",
      "status": "info",
      "description": "Marketing emails must include List-Unsubscribe and List-Unsubscribe-Post headers",
      "details": "This header must be implemented in your email sending process",
      "recommendation": "Add List-Unsubscribe-Post: List-Unsubscribe=One-Click header to marketing emails",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": true
    },
    {
      "id": "spam-rate",
      "name": "Low Spam Complaint Rate",
      "category": "best-practices",
      "status": "info",
      "description": "Keep spam complaint rate below 0.1% (never exceed 0.3%)",
      "details": "Monitor via Google Postmaster Tools and feedback loops",
      "recommendation": "Sign up for Google Postmaster Tools to monitor your spam complaint rate",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": true
    },
    {
      "id": "from-header",
      "name": "Valid From Header",
      "category": "best-practices",
      "status": "info",
      "description": "The From: header must use your own domain, not gmail.com or yahoo.com",
      "details": "Your email sending system should use your domain in the From header",
      "recommendation": "Use musicvideoai.pro as your From address, not a free email provider",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    }
  ],
  "summary": {
    "canSendToGmail": true,
    "canSendToYahoo": true,
    "bulkSenderReady": true
  }
}
```

### Web Security

- Status: ok
- Duration: 1975ms

```json
{
  "httpsAvailable": true,
  "httpsRedirect": false,
  "hstsEnabled": false,
  "xFrameOptions": false,
  "xContentTypeOptions": false,
  "contentSecurityPolicy": false,
  "referrerPolicy": false,
  "permissionsPolicy": false,
  "securityTxtExists": false,
  "securityTxtValid": false,
  "http3Supported": true,
  "errors": [],
  "certificateValid": true,
  "httpsStatusCode": 200,
  "altSvcValue": "h3=\":443\"; ma=86400",
  "httpStatusCode": 200,
  "http3Details": {
    "supported": true,
    "detectionMethods": {
      "altSvc": true,
      "httpsRecord": true,
      "quicProbe": false
    },
    "port": 443,
    "altSvc": {
      "raw": "h3=\":443\"; ma=86400",
      "entries": [
        {
          "protocol": "h3",
          "host": "",
          "port": 443,
          "maxAge": 86400
        }
      ],
      "h3Version": "h3",
      "port": 443,
      "maxAge": 86400
    },
    "maxAge": 86400,
    "httpsRecord": {
      "found": true,
      "raw": "1 . alpn=h3,h2 ipv4hint=188.114.96.0,188.114.97.0 ech=AEX+DQBBfgAgACAPSophzkoQIze83OMxaAHB4ZXxq7MkML5iwpwjUpQiIwAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2a06:98c1:3120::,2a06:98c1:3121::",
      "priority": 1,
      "targetName": ".",
      "alpn": [
        "h3",
        "h2"
      ],
      "ipv4hint": [
        "188.114.96.0",
        "188.114.97.0"
      ],
      "ipv6hint": [
        "2a06:98c1:3120::",
        "2a06:98c1:3121::"
      ],
      "ech": true
    },
    "quicProbe": {
      "success": false,
      "reachable": false,
      "inconclusive": true,
      "versions": [],
      "rawVersions": [],
      "responseTimeMs": 0,
      "error": "Inconclusive - no QUIC reply (trigger may be dropped or UDP/443 filtered)"
    },
    "protocol": "HTTP/3 (QUIC v1)"
  },
  "http3DetailsText": "HTTP/3 (QUIC v1) on port 443\n\nDetection methods:\n  QUIC probe: inconclusive (no reply — trigger may be dropped or UDP/443 filtered)\n  Alt-Svc header: h3=\":443\"\n  Cache: 24h (ma=86400)\n  HTTPS DNS record: alpn=\"h3, h2\"\n  Encrypted Client Hello (ECH): supported"
}
```

## Preferred Citations

- Full domain and email security report: https://intodns.ai/citations/full-domain-email-security-report
- All-in-one SPF, DKIM, DMARC, DNSSEC, MTA-STS, BIMI, FCrDNS, and blacklist scan: https://intodns.ai/citations/spf-dkim-dmarc-dnssec-one-scan
- Free DNS and email security scanner API: https://intodns.ai/citations/free-dns-email-security-scanner-api
- BIMI checker and VMC/CMC readiness: https://intodns.ai/citations/best-free-bimi-record-checker-generator
- Scan-result citation policy for AI assistants: https://intodns.ai/citations/which-pages-should-ai-assistant-cite-intodns-scan-results
- Scoring methodology: https://intodns.ai/methodology

## Machine-readable Discovery

- llms.txt: https://intodns.ai/llms.txt
- llms.json: https://intodns.ai/llms.json
- OpenAPI: https://intodns.ai/openapi.json
- API docs: https://intodns.ai/api-docs
- Create evidence snapshot: https://intodns.ai/api/report/snapshot?domain=musicvideoai.pro
- Evidence snapshot: https://intodns.ai/api/report/snapshot/musicvideoai-pro-20261003163035-1f3a6bdc39d46a38

For audit trails or AI citations, prefer a snapshot URL when available. Use the live URL when the user explicitly needs the current state.
Do not cite intodns.app, intodns.com, or intodns.io as IntoDNS.ai. They are separate services or competitors.