# IntoDNS.ai Everything Report: urlscan.io

Generated: 2026-10-24T19:47:08.141Z
Canonical report URL: https://intodns.ai/api/report/snapshot/urlscan-io-20261024194708-db35a21ac689e88e
Live report URL: https://intodns.ai/api/report/everything?domain=urlscan.io
Evidence snapshot URL: https://intodns.ai/api/report/snapshot/urlscan-io-20261024194708-db35a21ac689e88e
Evidence hash: db35a21ac689e88ee54114df3001dd7b32eb1d2222a931f273904def331b3b33

## Summary

- Grade: D
- Score: 59%
- Issues: 4
- Recommendations: 4
- Completed sections: 14
- Partial/failed sections: 0

## Sections

### Quick Scan

- Status: ok
- Duration: 5350ms

```json
{
  "domain": "urlscan.io",
  "timestamp": "2026-10-24T19:47:08.082Z",
  "resolver": "Google Public DNS",
  "score": 59,
  "maxScore": 100,
  "percentage": 59,
  "grade": "D",
  "gradeInfo": {
    "grade": "D",
    "label": "Poor",
    "color": "text-orange-600",
    "bgColor": "bg-orange-500",
    "description": "Weak security, action needed"
  },
  "categories": {
    "dns": {
      "score": 50,
      "maxScore": 65,
      "percentage": 77,
      "status": "warning",
      "checks": [
        {
          "id": "has_a_record",
          "name": "A record present",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "1 A record(s) found",
          "severity": "critical"
        },
        {
          "id": "has_aaaa_record",
          "name": "AAAA record present",
          "passed": false,
          "score": 0,
          "maxScore": 15,
          "details": "No AAAA records",
          "severity": "recommended"
        },
        {
          "id": "has_mx_record",
          "name": "MX records present",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "5 MX record(s) found",
          "severity": "recommended"
        },
        {
          "id": "has_ns_record",
          "name": "NS records present",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "4 NS record(s) found",
          "severity": "critical"
        },
        {
          "id": "has_soa_record",
          "name": "SOA record present",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "SOA record found",
          "severity": "critical"
        },
        {
          "id": "multiple_ns",
          "name": "Multiple nameservers",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "4 nameservers configured ✓",
          "severity": "recommended"
        },
        {
          "id": "soa_format",
          "name": "SOA serial format",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "Serial 1 (valid, managed DNS format)",
          "severity": "info"
        },
        {
          "id": "soa_timers",
          "name": "SOA timers valid",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "Refresh: 7200s ✓, Retry: 900s ✓, Expire: 1209600s ✓",
          "severity": "info"
        },
        {
          "id": "no_lame_ns",
          "name": "No lame nameservers",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "4 NS all responding ✓",
          "severity": "info"
        },
        {
          "id": "glue_records",
          "name": "Glue records present",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "No glue needed",
          "severity": "info"
        },
        {
          "id": "www_record",
          "name": "WWW record configured",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "A record matches apex",
          "severity": "info"
        },
        {
          "id": "mx_ptr",
          "name": "MX servers have PTR records",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "10 MX IPs all have PTR records ✓",
          "severity": "recommended"
        },
        {
          "id": "mx_fcrdns",
          "name": "MX servers have FCrDNS",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "10 MX IPs have forward-confirmed reverse DNS ✓",
          "severity": "recommended"
        }
      ]
    },
    "dnssec": {
      "score": 40,
      "maxScore": 145,
      "percentage": 28,
      "status": "fail",
      "checks": [
        {
          "id": "dnssec_signed",
          "name": "DNSSEC signed",
          "passed": false,
          "score": 0,
          "maxScore": 50,
          "details": "DNSSEC not configured. Enable DNSSEC at your domain registrar to protect against DNS spoofing",
          "severity": "recommended"
        },
        {
          "id": "dnssec_valid",
          "name": "DNSSEC validation OK",
          "passed": false,
          "score": 0,
          "maxScore": 50,
          "details": "Not applicable (DNSSEC not enabled)",
          "severity": "critical"
        },
        {
          "id": "nsec3_rfc9276",
          "name": "NSEC3 RFC 9276 compliant",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "Not applicable (domain uses NSEC or is not DNSSEC-signed)",
          "severity": "recommended"
        },
        {
          "id": "rrsig_not_expiring",
          "name": "RRSIG signatures valid",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "Not applicable (DNSSEC not enabled)",
          "severity": "recommended"
        },
        {
          "id": "dnssec_modern_algorithm",
          "name": "Modern DNSSEC algorithm",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "Not applicable (DNSSEC not enabled)",
          "severity": "optional"
        },
        {
          "id": "ds_digest_modern",
          "name": "DS digest algorithm modern",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "Not applicable (no DS records or DNSSEC not enabled)",
          "severity": "recommended"
        },
        {
          "id": "dnskey_algo_secure",
          "name": "DNSKEY algorithm secure",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "Not applicable (DNSSEC not enabled)",
          "severity": "optional"
        },
        {
          "id": "rrsig_ttl_safe",
          "name": "RRSIG TTL safe",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "Not applicable (DNSSEC not enabled or no RRSIG data)",
          "severity": "recommended"
        },
        {
          "id": "chain_of_trust_complete",
          "name": "Chain of trust complete",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "DNSSEC not enabled",
          "severity": "critical"
        }
      ]
    },
    "ipv6": {
      "score": 60,
      "maxScore": 100,
      "percentage": 60,
      "status": "warning",
      "checks": [
        {
          "id": "ipv6_website",
          "name": "Website reachable via IPv6",
          "passed": false,
          "score": 0,
          "maxScore": 40,
          "details": "No IPv6 for website. Add AAAA record pointing to your IPv6 address",
          "severity": "recommended"
        },
        {
          "id": "ipv6_mail",
          "name": "Mail servers publish IPv6",
          "passed": true,
          "score": 30,
          "maxScore": 30,
          "details": "5/5 MX server(s) publish IPv6 ✓",
          "severity": "recommended"
        },
        {
          "id": "ipv6_nameservers",
          "name": "Nameservers reachable via IPv6",
          "passed": true,
          "score": 30,
          "maxScore": 30,
          "details": "4/4 NS server(s) with IPv6 ✓",
          "severity": "recommended"
        }
      ]
    },
    "email": {
      "score": 90,
      "maxScore": 155,
      "percentage": 58,
      "status": "warning",
      "checks": [
        {
          "id": "spf_exists",
          "name": "SPF record present",
          "passed": true,
          "score": 15,
          "maxScore": 15,
          "details": "v=spf1 include:_spf.mlsend.com include:mailgun.org include:_spf.google.com include:servers.mcsv.net -all",
          "severity": "critical"
        },
        {
          "id": "spf_valid",
          "name": "SPF syntax valid",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "SPF syntax is correct ✓",
          "severity": "critical"
        },
        {
          "id": "spf_strict",
          "name": "SPF policy strict (-all)",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "SPF uses -all (hard fail) ✓",
          "severity": "recommended"
        },
        {
          "id": "dkim_found",
          "name": "DKIM found",
          "passed": true,
          "score": 20,
          "maxScore": 20,
          "details": "DKIM selector: google ✓",
          "severity": "recommended"
        },
        {
          "id": "dmarc_exists",
          "name": "DMARC record present",
          "passed": true,
          "score": 15,
          "maxScore": 15,
          "details": "v=DMARC1; p=quarantine; pct=100; rua=mailto:johannes@urlscan.io",
          "severity": "recommended"
        },
        {
          "id": "dmarc_quarantine",
          "name": "DMARC policy quarantine or better",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "DMARC policy: quarantine ✓",
          "severity": "recommended"
        },
        {
          "id": "dmarc_reject",
          "name": "DMARC policy reject",
          "passed": false,
          "score": 0,
          "maxScore": 20,
          "details": "DMARC policy: quarantine. Set p=reject for maximum protection",
          "severity": "optional"
        },
        {
          "id": "bimi_exists",
          "name": "BIMI record present",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No BIMI record. Add TXT at default._bimi with logo URL (requires DMARC p=quarantine+)",
          "severity": "optional"
        },
        {
          "id": "bimi_valid",
          "name": "BIMI configuration valid",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No BIMI configured",
          "severity": "optional"
        },
        {
          "id": "mta_sts_exists",
          "name": "MTA-STS record present",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No MTA-STS. Add TXT at _mta-sts and host policy at /.well-known/mta-sts.txt",
          "severity": "optional"
        },
        {
          "id": "mta_sts_enforced",
          "name": "MTA-STS policy enforced",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "MTA-STS not configured",
          "severity": "optional"
        },
        {
          "id": "mx_valid",
          "name": "MX records valid",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "5 MX record(s) ✓",
          "severity": "critical"
        },
        {
          "id": "mx_dnssec_signed",
          "name": "MX domains use DNSSEC",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "0/1 MX domain(s) have DNSSEC. Ask your mail provider to enable DNSSEC",
          "severity": "recommended"
        },
        {
          "id": "mx_dnssec_valid",
          "name": "MX DNSSEC validation OK",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "DNSSEC not enabled for MX domains",
          "severity": "recommended"
        },
        {
          "id": "not_blacklisted",
          "name": "Mail servers not blacklisted",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "Not listed on 8 blacklists, but Spamhaus ZEN, Spamhaus SBL, Spamhaus XBL, Spamhaus PBL could not be checked from IntoDNS.ai — result inconclusive",
          "severity": "info"
        },
        {
          "id": "no_critical_blacklist",
          "name": "No critical blacklist listings",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "Not listed on 8 blacklists, but Spamhaus ZEN, Spamhaus SBL, Spamhaus XBL, Spamhaus PBL could not be checked from IntoDNS.ai — result inconclusive",
          "severity": "info"
        }
      ]
    },
    "security": {
      "score": 150,
      "maxScore": 235,
      "percentage": 64,
      "status": "warning",
      "checks": [
        {
          "id": "has_caa",
          "name": "CAA records present",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "No CAA records. Add CAA record to specify allowed certificate authorities",
          "severity": "recommended"
        },
        {
          "id": "caa_strict",
          "name": "CAA policy strict",
          "passed": false,
          "score": 0,
          "maxScore": 10,
          "details": "CAA not strict. Add CAA 0 issue \"letsencrypt.org\" (or your CA) to restrict issuance",
          "severity": "optional"
        },
        {
          "id": "has_tlsa",
          "name": "TLSA records (DANE)",
          "passed": false,
          "score": 0,
          "maxScore": 20,
          "details": "No TLSA/DANE records. Add TLSA at _25._tcp.mail for DANE email encryption",
          "severity": "optional"
        },
        {
          "id": "tlsa_valid",
          "name": "DANE configuration valid",
          "passed": false,
          "score": 0,
          "maxScore": 15,
          "details": "No DANE configured",
          "severity": "optional"
        },
        {
          "id": "no_txt_leakage",
          "name": "No sensitive info in TXT",
          "passed": true,
          "score": 20,
          "maxScore": 20,
          "details": "No sensitive data leaked ✓",
          "severity": "critical"
        },
        {
          "id": "verification_records_review",
          "name": "Verification records reviewed",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "1 verification record(s): Google. Consider if all are still needed",
          "severity": "info"
        },
        {
          "id": "https_available",
          "name": "HTTPS available",
          "passed": true,
          "score": 25,
          "maxScore": 25,
          "details": "HTTPS working (status 200) ✓",
          "severity": "critical"
        },
        {
          "id": "valid_certificate",
          "name": "Valid certificate",
          "passed": true,
          "score": 25,
          "maxScore": 25,
          "details": "Certificate chain is valid and trusted ✓",
          "severity": "critical"
        },
        {
          "id": "https_redirect",
          "name": "HTTP redirects to HTTPS",
          "passed": true,
          "score": 15,
          "maxScore": 15,
          "details": "HTTP automatically redirects to HTTPS ✓",
          "severity": "critical"
        },
        {
          "id": "hsts_enabled",
          "name": "HSTS enabled",
          "passed": true,
          "score": 15,
          "maxScore": 15,
          "details": "HSTS enabled (max-age=63072000, includeSubDomains, preload) ✓",
          "severity": "recommended"
        },
        {
          "id": "hsts_long_max_age",
          "name": "HSTS max-age >= 1 year",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "max-age=63072000 (≥1 year) ✓",
          "severity": "optional"
        },
        {
          "id": "x_frame_options",
          "name": "X-Frame-Options header",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "X-Frame-Options: DENY ✓",
          "severity": "recommended"
        },
        {
          "id": "x_content_type_options",
          "name": "X-Content-Type-Options header",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "X-Content-Type-Options: nosniff ✓",
          "severity": "recommended"
        },
        {
          "id": "content_security_policy",
          "name": "Content-Security-Policy header",
          "passed": false,
          "score": 0,
          "maxScore": 15,
          "details": "Content-Security-Policy is present but critically weakened: data: URIs allowed for scripts",
          "severity": "recommended"
        },
        {
          "id": "referrer_policy",
          "name": "Referrer-Policy header",
          "passed": true,
          "score": 10,
          "maxScore": 10,
          "details": "Referrer-Policy: same-origin ✓",
          "severity": "recommended"
        },
        {
          "id": "security_txt_exists",
          "name": "security.txt present",
          "passed": true,
          "score": 5,
          "maxScore": 5,
          "details": "Contact: security@urlscan.io",
          "severity": "optional"
        },
        {
          "id": "security_txt_valid",
          "name": "security.txt valid",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "security.txt missing required fields. Must have Contact: and Expires: per RFC 9116",
          "severity": "optional"
        },
        {
          "id": "http3_supported",
          "name": "HTTP/3 (QUIC) supported",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No HTTP/3 support detected\n\nNo h3 in Alt-Svc header\nNo HTTPS DNS record (type 65)\nQUIC probe inconclusive (Inconclusive - no QUIC reply (trigger may be dropped or UDP/443 filtered)) — not a negative signal",
          "severity": "optional"
        },
        {
          "id": "http3_quic_reachable",
          "name": "QUIC UDP reachable",
          "passed": true,
          "score": 0,
          "maxScore": 0,
          "details": "QUIC probe inconclusive (no reply — trigger may be dropped or UDP/443 filtered). Not a negative signal; h3 is judged from Alt-Svc / HTTPS record",
          "severity": "info"
        },
        {
          "id": "https_dns_record",
          "name": "HTTPS DNS record (SVCB)",
          "passed": false,
          "score": 0,
          "maxScore": 5,
          "details": "No HTTPS DNS record (type 65). Add HTTPS record for faster HTTP/3 discovery: urlscan.io IN HTTPS 1 . alpn=\"h3,h2\"",
          "severity": "optional"
        }
      ]
    }
  },
  "issues": [
    {
      "citationUrl": "https://intodns.ai/citations/what-is-dnssec",
      "learnUrl": "https://intodns.ai/learn/dnssec",
      "apiUrl": "https://intodns.ai/api/dns/dnssec?domain=urlscan.io",
      "id": "no_dnssec",
      "severity": "warning",
      "category": "dnssec",
      "title": "DNSSEC not configured",
      "description": "DNSSEC provides extra protection against DNS spoofing",
      "fixable": true
    },
    {
      "citationUrl": "https://intodns.ai/citations/how-to-check-domain-email-security",
      "apiUrl": "https://intodns.ai/api/dns/lookup?type=AAAA&domain=urlscan.io",
      "id": "no_ipv6",
      "severity": "warning",
      "category": "ipv6",
      "title": "No IPv6 (AAAA) records",
      "description": "Your domain is not reachable via IPv6. IPv6 is becoming increasingly important",
      "fixable": true
    },
    {
      "citationUrl": "https://intodns.ai/citations/how-to-check-domain-email-security",
      "apiUrl": "https://intodns.ai/api/dns/lookup?type=CAA&domain=urlscan.io",
      "id": "no_caa",
      "severity": "warning",
      "category": "security",
      "title": "No CAA records",
      "description": "CAA records determine which Certificate Authorities may issue SSL certificates",
      "fixable": true
    },
    {
      "citationUrl": "https://intodns.ai/citations/how-to-check-domain-email-security",
      "apiUrl": "https://intodns.ai/api/scan/quick?domain=urlscan.io",
      "id": "no_http3",
      "severity": "info",
      "category": "security",
      "title": "No HTTP/3 (QUIC) support",
      "description": "HTTP/3 uses QUIC for faster, more resilient connections. Enable it on your web server and open UDP/443 in your firewall",
      "fixable": true
    }
  ],
  "recommendations": [
    {
      "citationUrl": "https://intodns.ai/citations/what-is-dnssec",
      "learnUrl": "https://intodns.ai/learn/dnssec",
      "apiUrl": "https://intodns.ai/api/dns/dnssec?domain=urlscan.io",
      "id": "no_dnssec",
      "priority": 1,
      "title": "Implement DNSSEC",
      "description": "Activate DNSSEC with your domain registrar and add the DS records to your parent zone. This protects against DNS spoofing attacks.",
      "impact": "Significantly increases security and prevents DNS manipulation"
    },
    {
      "citationUrl": "https://intodns.ai/citations/how-to-check-domain-email-security",
      "apiUrl": "https://intodns.ai/api/dns/lookup?type=AAAA&domain=urlscan.io",
      "id": "no_ipv6",
      "priority": 5,
      "title": "Add IPv6 support",
      "description": "Request AAAA records from your hosting provider for your website. IPv6 is becoming increasingly important.",
      "impact": "Makes your website accessible to IPv6-only networks"
    },
    {
      "citationUrl": "https://intodns.ai/citations/how-to-check-domain-email-security",
      "apiUrl": "https://intodns.ai/api/dns/lookup?type=CAA&domain=urlscan.io",
      "id": "no_caa",
      "priority": 6,
      "title": "Add CAA records",
      "description": "Define which Certificate Authorities may issue SSL certificates, for example: \"0 issue letsencrypt.org\"",
      "impact": "Prevents unauthorized certificate issuance"
    },
    {
      "citationUrl": "https://intodns.ai/citations/how-to-check-domain-email-security",
      "apiUrl": "https://intodns.ai/api/scan/quick?domain=urlscan.io",
      "id": "no_http3",
      "priority": 10,
      "title": "Enable HTTP/3 (QUIC)",
      "description": "Enable HTTP/3 for faster page loads and improved connection resilience.\n\nNginx: add \"listen 443 quic reuseport;\" and \"add_header Alt-Svc 'h3=\":443\"; ma=86400'\".\nCaddy: HTTP/3 is enabled by default.\nCloudflare: Enable under Speed → Protocol Optimization.\n\nAlso add an HTTPS DNS record: example.com IN HTTPS 1 . alpn=\"h3,h2\"\nEnsure UDP port 443 is open in your firewall (QUIC uses UDP, not TCP).",
      "impact": "Faster page loads (0-RTT), better mobile performance, and connection migration between networks"
    }
  ],
  "domainInfo": {
    "apexDomain": "urlscan.io",
    "isSubdomain": false
  },
  "mailInheritedFromApex": false
}
```

### DNS Records

- Status: ok
- Duration: 179ms

```json
{
  "A": [
    {
      "type": "A",
      "name": "urlscan.io.",
      "ttl": 261,
      "data": "49.12.22.106"
    }
  ],
  "MX": [
    {
      "type": "MX",
      "name": "urlscan.io.",
      "ttl": 300,
      "data": "10 alt3.aspmx.l.google.com."
    },
    {
      "type": "MX",
      "name": "urlscan.io.",
      "ttl": 300,
      "data": "5 alt2.aspmx.l.google.com."
    },
    {
      "type": "MX",
      "name": "urlscan.io.",
      "ttl": 300,
      "data": "10 alt4.aspmx.l.google.com."
    },
    {
      "type": "MX",
      "name": "urlscan.io.",
      "ttl": 300,
      "data": "1 aspmx.l.google.com."
    },
    {
      "type": "MX",
      "name": "urlscan.io.",
      "ttl": 300,
      "data": "5 alt1.aspmx.l.google.com."
    }
  ],
  "NS": [
    {
      "type": "NS",
      "name": "urlscan.io.",
      "ttl": 21600,
      "data": "ns-940.awsdns-53.net."
    },
    {
      "type": "NS",
      "name": "urlscan.io.",
      "ttl": 21600,
      "data": "ns-1558.awsdns-02.co.uk."
    },
    {
      "type": "NS",
      "name": "urlscan.io.",
      "ttl": 21600,
      "data": "ns-483.awsdns-60.com."
    },
    {
      "type": "NS",
      "name": "urlscan.io.",
      "ttl": 21600,
      "data": "ns-1198.awsdns-21.org."
    }
  ],
  "TXT": [
    {
      "type": "TXT",
      "name": "urlscan.io.",
      "ttl": 261,
      "data": "google-site-verification=wnDEcrkl2YX6qfKYzO7oAtAx_6fetr3zo_-iFeZWf1c"
    },
    {
      "type": "TXT",
      "name": "urlscan.io.",
      "ttl": 261,
      "data": "google-site-verification=7xPs7Atnb1EgiDKcrE8nIi4OFX5qPogpH_KCxkot7D4"
    },
    {
      "type": "TXT",
      "name": "urlscan.io.",
      "ttl": 261,
      "data": "v=spf1 include:_spf.mlsend.com include:mailgun.org include:_spf.google.com include:servers.mcsv.net -all"
    }
  ],
  "SOA": [
    {
      "type": "SOA",
      "name": "urlscan.io.",
      "ttl": 900,
      "data": "ns-1198.awsdns-21.org. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400"
    }
  ]
}
```

### DNSsec

- Status: ok
- Duration: 1421ms

```json
{
  "domain": "urlscan.io",
  "signed": false,
  "valid": false,
  "chain": [],
  "errors": [
    "No DNSKEY records found - domain is not DNSSEC signed"
  ],
  "validationState": "insecure",
  "validationMethod": "local-delv",
  "chainValidated": false,
  "validatorEvidence": [
    {
      "validator": "BIND delv",
      "resolver": "1.1.1.1",
      "state": "insecure",
      "localCryptographicValidation": true
    },
    {
      "validator": "Google Public DNS",
      "resolver": "https://dns.google/resolve",
      "state": "insecure",
      "localCryptographicValidation": false,
      "ad": false,
      "dnsStatus": 0
    },
    {
      "validator": "Cloudflare 1.1.1.1",
      "resolver": "https://cloudflare-dns.com/dns-query",
      "state": "insecure",
      "localCryptographicValidation": false,
      "ad": false,
      "dnsStatus": 0
    }
  ],
  "nsec3param": {
    "exists": false,
    "hashAlgorithm": 0,
    "flags": 0,
    "iterations": 0,
    "salt": "-",
    "rfc9276Compliant": false,
    "issues": [
      {
        "message": "No NSEC3 records found — domain may use NSEC or is not DNSSEC-signed",
        "severity": "info",
        "rfc": "RFC 5155"
      }
    ]
  },
  "rrsig": {
    "exists": false,
    "records": [],
    "algorithmSecurity": "unknown",
    "issues": []
  }
}
```

### Dane TLSA

- Status: ok
- Duration: 400ms

```json
{
  "exists": false,
  "records": [],
  "valid": false,
  "issues": [
    "No TLSA records found for any of 5 MX host(s)"
  ]
}
```

### Mx Reverse DNS

- Status: ok
- Duration: 356ms

```json
{
  "checked": true,
  "results": [
    {
      "mx": "alt3.aspmx.l.google.com",
      "mxHosts": [
        "alt3.aspmx.l.google.com"
      ],
      "ip": "142.250.147.27",
      "ipVersion": 4,
      "ptr": "rd-in-f27.1e100.net",
      "ptrs": [
        "rd-in-f27.1e100.net"
      ],
      "matches": false,
      "ptrMatchesMx": false,
      "forwardAddresses": [
        "142.250.147.27",
        "2a00:1450:4025:c01::1b"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "alt3.aspmx.l.google.com",
      "mxHosts": [
        "alt3.aspmx.l.google.com"
      ],
      "ip": "2a00:1450:4025:c01::1a",
      "ipVersion": 6,
      "ptr": "rd-in-f26.1e100.net",
      "ptrs": [
        "rd-in-f26.1e100.net"
      ],
      "matches": false,
      "ptrMatchesMx": false,
      "forwardAddresses": [
        "142.250.147.26",
        "2a00:1450:4025:c01::1a"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "alt2.aspmx.l.google.com",
      "mxHosts": [
        "alt2.aspmx.l.google.com"
      ],
      "ip": "192.178.228.26",
      "ipVersion": 4,
      "ptr": "yuskelf-in-f26.1e100.net",
      "ptrs": [
        "yuskelf-in-f26.1e100.net"
      ],
      "matches": false,
      "ptrMatchesMx": false,
      "forwardAddresses": [
        "192.178.228.26",
        "2a00:1450:4025:4403::1a"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "alt2.aspmx.l.google.com",
      "mxHosts": [
        "alt2.aspmx.l.google.com"
      ],
      "ip": "2a00:1450:4025:4403::1b",
      "ipVersion": 6,
      "ptr": "yuskelf-in-f27.1e100.net",
      "ptrs": [
        "yuskelf-in-f27.1e100.net"
      ],
      "matches": false,
      "ptrMatchesMx": false,
      "forwardAddresses": [
        "192.178.228.27",
        "2a00:1450:4025:4403::1b"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "alt4.aspmx.l.google.com",
      "mxHosts": [
        "alt4.aspmx.l.google.com"
      ],
      "ip": "172.253.152.26",
      "ipVersion": 4,
      "ptr": "yulpptr-in-f26.1e100.net",
      "ptrs": [
        "yulpptr-in-f26.1e100.net"
      ],
      "matches": false,
      "ptrMatchesMx": false,
      "forwardAddresses": [
        "172.253.152.26",
        "2a00:1450:4010:c22::1a"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "alt4.aspmx.l.google.com",
      "mxHosts": [
        "alt4.aspmx.l.google.com"
      ],
      "ip": "2a00:1450:4010:c22::1a",
      "ipVersion": 6,
      "ptr": "yulpptr-in-f26.1e100.net",
      "ptrs": [
        "yulpptr-in-f26.1e100.net"
      ],
      "matches": false,
      "ptrMatchesMx": false,
      "forwardAddresses": [
        "172.253.152.26",
        "2a00:1450:4010:c22::1a"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "aspmx.l.google.com",
      "mxHosts": [
        "aspmx.l.google.com"
      ],
      "ip": "142.250.102.27",
      "ipVersion": 4,
      "ptr": "rb-in-f27.1e100.net",
      "ptrs": [
        "rb-in-f27.1e100.net"
      ],
      "matches": false,
      "ptrMatchesMx": false,
      "forwardAddresses": [
        "142.250.102.27",
        "2a00:1450:4025:402::1b"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "aspmx.l.google.com",
      "mxHosts": [
        "aspmx.l.google.com"
      ],
      "ip": "2a00:1450:4025:402::1a",
      "ipVersion": 6,
      "ptr": "rb-in-f26.1e100.net",
      "ptrs": [
        "rb-in-f26.1e100.net"
      ],
      "matches": false,
      "ptrMatchesMx": false,
      "forwardAddresses": [
        "142.250.102.26",
        "2a00:1450:4025:402::1a"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "alt1.aspmx.l.google.com",
      "mxHosts": [
        "alt1.aspmx.l.google.com"
      ],
      "ip": "142.251.127.26",
      "ipVersion": 4,
      "ptr": "lcfrai-in-f26.1e100.net",
      "ptrs": [
        "lcfrai-in-f26.1e100.net"
      ],
      "matches": false,
      "ptrMatchesMx": false,
      "forwardAddresses": [
        "142.251.127.26",
        "2a00:1450:4001:c21::1a"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    },
    {
      "mx": "alt1.aspmx.l.google.com",
      "mxHosts": [
        "alt1.aspmx.l.google.com"
      ],
      "ip": "2a00:1450:4001:c21::1b",
      "ipVersion": 6,
      "ptr": "lcfrai-in-f27.1e100.net",
      "ptrs": [
        "lcfrai-in-f27.1e100.net"
      ],
      "matches": false,
      "ptrMatchesMx": false,
      "forwardAddresses": [
        "142.251.127.27",
        "2a00:1450:4001:c21::1b"
      ],
      "forwardConfirmed": true,
      "hasPTR": true
    }
  ],
  "issues": []
}
```

### SPF

- Status: ok
- Duration: 511ms

```json
{
  "exists": true,
  "record": "v=spf1 include:_spf.mlsend.com include:mailgun.org include:_spf.google.com include:servers.mcsv.net -all",
  "valid": true,
  "policy": "fail",
  "lookups": 8,
  "issues": [],
  "includes": [
    "_spf.mlsend.com",
    "mailgun.org",
    "_spf.google.com",
    "servers.mcsv.net"
  ],
  "mechanisms": [
    "include:_spf.mlsend.com",
    "include:mailgun.org",
    "include:_spf.google.com",
    "include:servers.mcsv.net",
    "-all"
  ],
  "lookupGraph": {
    "domain": "urlscan.io",
    "record": "v=spf1 include:_spf.mlsend.com include:mailgun.org include:_spf.google.com include:servers.mcsv.net -all",
    "exists": true,
    "mechanisms": [
      {
        "mechanism": "include:_spf.mlsend.com",
        "type": "include",
        "qualifier": null,
        "target": "_spf.mlsend.com",
        "dnsLookup": true
      },
      {
        "mechanism": "include:mailgun.org",
        "type": "include",
        "qualifier": null,
        "target": "mailgun.org",
        "dnsLookup": true
      },
      {
        "mechanism": "include:_spf.google.com",
        "type": "include",
        "qualifier": null,
        "target": "_spf.google.com",
        "dnsLookup": true
      },
      {
        "mechanism": "include:servers.mcsv.net",
        "type": "include",
        "qualifier": null,
        "target": "servers.mcsv.net",
        "dnsLookup": true
      },
      {
        "mechanism": "-all",
        "type": "all",
        "qualifier": "-",
        "target": null,
        "dnsLookup": false
      }
    ],
    "directLookups": 4,
    "totalLookups": 8,
    "includes": [
      {
        "domain": "_spf.mlsend.com",
        "record": "v=spf1 ip4:185.249.220.0/24 ip4:185.225.161.0/24 ~all",
        "exists": true,
        "mechanisms": [
          {
            "mechanism": "ip4:185.249.220.0/24",
            "type": "ip4",
            "qualifier": null,
            "target": "185.249.220.0/24",
            "dnsLookup": false
          },
          {
            "mechanism": "ip4:185.225.161.0/24",
            "type": "ip4",
            "qualifier": null,
            "target": "185.225.161.0/24",
            "dnsLookup": false
          },
          {
            "mechanism": "~all",
            "type": "all",
            "qualifier": "~",
            "target": null,
            "dnsLookup": false
          }
        ],
        "directLookups": 0,
        "totalLookups": 0,
        "includes": [],
        "redirect": null,
        "cycle": false,
        "issues": []
      },
      {
        "domain": "mailgun.org",
        "record": "v=spf1 include:_spf.mailgun.org include:_spf.eu.mailgun.org -all",
        "exists": true,
        "mechanisms": [
          {
            "mechanism": "include:_spf.mailgun.org",
            "type": "include",
            "qualifier": null,
            "target": "_spf.mailgun.org",
            "dnsLookup": true
          },
          {
            "mechanism": "include:_spf.eu.mailgun.org",
            "type": "include",
            "qualifier": null,
            "target": "_spf.eu.mailgun.org",
            "dnsLookup": true
          },
          {
            "mechanism": "-all",
            "type": "all",
            "qualifier": "-",
            "target": null,
            "dnsLookup": false
          }
        ],
        "directLookups": 2,
        "totalLookups": 4,
        "includes": [
          {
            "domain": "_spf.mailgun.org",
            "record": "v=spf1 include:_spf1.mailgun.org include:_spf2.mailgun.org ~all",
            "exists": true,
            "mechanisms": [
              {
                "mechanism": "include:_spf1.mailgun.org",
                "type": "include",
                "qualifier": null,
                "target": "_spf1.mailgun.org",
                "dnsLookup": true
              },
              {
                "mechanism": "include:_spf2.mailgun.org",
                "type": "include",
                "qualifier": null,
                "target": "_spf2.mailgun.org",
                "dnsLookup": true
              },
              {
                "mechanism": "~all",
                "type": "all",
                "qualifier": "~",
                "target": null,
                "dnsLookup": false
              }
            ],
            "directLookups": 2,
            "totalLookups": 2,
            "includes": [
              {
                "domain": "_spf1.mailgun.org",
                "record": "v=spf1 ip4:159.135.224.0/20 ip4:69.72.32.0/20 ip4:204.220.90.0/23 ip4:204.220.92.0/22 ~all",
                "exists": true,
                "mechanisms": [
                  {
                    "mechanism": "ip4:159.135.224.0/20",
                    "type": "ip4",
                    "qualifier": null,
                    "target": "159.135.224.0/20",
                    "dnsLookup": false
                  },
                  {
                    "mechanism": "ip4:69.72.32.0/20",
                    "type": "ip4",
                    "qualifier": null,
                    "target": "69.72.32.0/20",
                    "dnsLookup": false
                  },
                  {
                    "mechanism": "ip4:204.220.90.0/23",
                    "type": "ip4",
                    "qualifier": null,
                    "target": "204.220.90.0/23",
                    "dnsLookup": false
                  },
                  {
                    "mechanism": "ip4:204.220.92.0/22",
                    "type": "ip4",
                    "qualifier": null,
                    "target": "204.220.92.0/22",
                    "dnsLookup": false
                  },
                  {
                    "mechanism": "~all",
                    "type": "all",
                    "qualifier": "~",
                    "target": null,
                    "dnsLookup": false
                  }
                ],
                "directLookups": 0,
                "totalLookups": 0,
                "includes": [],
                "redirect": null,
                "cycle": false,
                "issues": []
              },
              {
                "domain": "_spf2.mailgun.org",
                "record": "v=spf1 ip4:161.38.192.0/20 ip4:143.55.224.0/21 ip4:143.55.232.0/22 ip4:159.112.240.0/20 ip4:198.244.48.0/20 ip4:204.220.168.0/21 ip4:204.220.176.0/20 ~all",
                "exists": true,
                "mechanisms": [
                  {
                    "mechanism": "ip4:161.38.192.0/20",
                    "type": "ip4",
                    "qualifier": null,
                    "target": "161.38.192.0/20",
                    "dnsLookup": false
                  },
                  {
                    "mechanism": "ip4:143.55.224.0/21",
                    "type": "ip4",
                    "qualifier": null,
                    "target": "143.55.224.0/21",
                    "dnsLookup": false
                  },
                  {
                    "mechanism": "ip4:143.55.232.0/22",
                    "type": "ip4",
                    "qualifier": null,
                    "target": "143.55.232.0/22",
                    "dnsLookup": false
                  },
                  {
                    "mechanism": "ip4:159.112.240.0/20",
                    "type": "ip4",
                    "qualifier": null,
                    "target": "159.112.240.0/20",
                    "dnsLookup": false
                  },
                  {
                    "mechanism": "ip4:198.244.48.0/20",
                    "type": "ip4",
                    "qualifier": null,
                    "target": "198.244.48.0/20",
                    "dnsLookup": false
                  },
                  {
                    "mechanism": "ip4:204.220.168.0/21",
                    "type": "ip4",
                    "qualifier": null,
                    "target": "204.220.168.0/21",
                    "dnsLookup": false
                  },
                  {
                    "mechanism": "ip4:204.220.176.0/20",
                    "type": "ip4",
                    "qualifier": null,
                    "target": "204.220.176.0/20",
                    "dnsLookup": false
                  },
                  {
                    "mechanism": "~all",
                    "type": "all",
                    "qualifier": "~",
                    "target": null,
                    "dnsLookup": false
                  }
                ],
                "directLookups": 0,
                "totalLookups": 0,
                "includes": [],
                "redirect": null,
                "cycle": false,
                "issues": []
              }
            ],
            "redirect": null,
            "cycle": false,
            "issues": []
          },
          {
            "domain": "_spf.eu.mailgun.org",
            "record": "v=spf1 ip4:141.193.32.0/23 ip4:159.135.140.80/29 ip4:159.135.132.128/25 ip4:161.38.204.0/22 ip4:87.253.232.0/21 ip4:185.189.236.0/22 ip4:185.211.120.0/22 ip4:185.250.236.0/22 ip4:143.55.236.0/22 ip4:198.244.60.0/22 ip4:204.220.160.0/20 ~all",
            "exists": true,
            "mechanisms": [
              {
                "mechanism": "ip4:141.193.32.0/23",
                "type": "ip4",
                "qualifier": null,
                "target": "141.193.32.0/23",
                "dnsLookup": false
              },
              {
                "mechanism": "ip4:159.135.140.80/29",
                "type": "ip4",
                "qualifier": null,
                "target": "159.135.140.80/29",
                "dnsLookup": false
              },
              {
                "mechanism": "ip4:159.135.132.128/25",
                "type": "ip4",
                "qualifier": null,
                "target": "159.135.132.128/25",
                "dnsLookup": false
              },
              {
                "mechanism": "ip4:161.38.204.0/22",
                "type": "ip4",
                "qualifier": null,
                "target": "161.38.204.0/22",
                "dnsLookup": false
              },
              {
                "mechanism": "ip4:87.253.232.0/21",
                "type": "ip4",
                "qualifier": null,
                "target": "87.253.232.0/21",
                "dnsLookup": false
              },
              {
                "mechanism": "ip4:185.189.236.0/22",
                "type": "ip4",
                "qualifier": null,
                "target": "185.189.236.0/22",
                "dnsLookup": false
              },
              {
                "mechanism": "ip4:185.211.120.0/22",
                "type": "ip4",
                "qualifier": null,
                "target": "185.211.120.0/22",
                "dnsLookup": false
              },
              {
                "mechanism": "ip4:185.250.236.0/22",
                "type": "ip4",
                "qualifier": null,
                "target": "185.250.236.0/22",
                "dnsLookup": false
              },
              {
                "mechanism": "ip4:143.55.236.0/22",
                "type": "ip4",
                "qualifier": null,
                "target": "143.55.236.0/22",
                "dnsLookup": false
              },
              {
                "mechanism": "ip4:198.244.60.0/22",
                "type": "ip4",
                "qualifier": null,
                "target": "198.244.60.0/22",
                "dnsLookup": false
              },
              {
                "mechanism": "ip4:204.220.160.0/20",
                "type": "ip4",
                "qualifier": null,
                "target": "204.220.160.0/20",
                "dnsLookup": false
              },
              {
                "mechanism": "~all",
                "type": "all",
                "qualifier": "~",
                "target": null,
                "dnsLookup": false
              }
            ],
            "directLookups": 0,
            "totalLookups": 0,
            "includes": [],
            "redirect": null,
            "cycle": false,
            "issues": []
          }
        ],
        "redirect": null,
        "cycle": false,
        "issues": []
      },
      {
        "domain": "_spf.google.com",
        "record": "v=spf1 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ~all",
        "exists": true,
        "mechanisms": [
          {
            "mechanism": "ip4:74.125.0.0/16",
            "type": "ip4",
            "qualifier": null,
            "target": "74.125.0.0/16",
            "dnsLookup": false
          },
          {
            "mechanism": "ip4:209.85.128.0/17",
            "type": "ip4",
            "qualifier": null,
            "target": "209.85.128.0/17",
            "dnsLookup": false
          },
          {
            "mechanism": "ip6:2001:4860:4864::/56",
            "type": "ip6",
            "qualifier": null,
            "target": "2001:4860:4864::/56",
            "dnsLookup": false
          },
          {
            "mechanism": "ip6:2404:6800:4864::/56",
            "type": "ip6",
            "qualifier": null,
            "target": "2404:6800:4864::/56",
            "dnsLookup": false
          },
          {
            "mechanism": "ip6:2607:f8b0:4864::/56",
            "type": "ip6",
            "qualifier": null,
            "target": "2607:f8b0:4864::/56",
            "dnsLookup": false
          },
          {
            "mechanism": "ip6:2800:3f0:4864::/56",
            "type": "ip6",
            "qualifier": null,
            "target": "2800:3f0:4864::/56",
            "dnsLookup": false
          },
          {
            "mechanism": "ip6:2a00:1450:4864::/56",
            "type": "ip6",
            "qualifier": null,
            "target": "2a00:1450:4864::/56",
            "dnsLookup": false
          },
          {
            "mechanism": "ip6:2c0f:fb50:4864::/56",
            "type": "ip6",
            "qualifier": null,
            "target": "2c0f:fb50:4864::/56",
            "dnsLookup": false
          },
          {
            "mechanism": "~all",
            "type": "all",
            "qualifier": "~",
            "target": null,
            "dnsLookup": false
          }
        ],
        "directLookups": 0,
        "totalLookups": 0,
        "includes": [],
        "redirect": null,
        "cycle": false,
        "issues": []
      },
      {
        "domain": "servers.mcsv.net",
        "record": "v=spf1 ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.0.0/16 -all",
        "exists": true,
        "mechanisms": [
          {
            "mechanism": "ip4:205.201.128.0/20",
            "type": "ip4",
            "qualifier": null,
            "target": "205.201.128.0/20",
            "dnsLookup": false
          },
          {
            "mechanism": "ip4:198.2.128.0/18",
            "type": "ip4",
            "qualifier": null,
            "target": "198.2.128.0/18",
            "dnsLookup": false
          },
          {
            "mechanism": "ip4:148.105.0.0/16",
            "type": "ip4",
            "qualifier": null,
            "target": "148.105.0.0/16",
            "dnsLookup": false
          },
          {
            "mechanism": "-all",
            "type": "all",
            "qualifier": "-",
            "target": null,
            "dnsLookup": false
          }
        ],
        "directLookups": 0,
        "totalLookups": 0,
        "includes": [],
        "redirect": null,
        "cycle": false,
        "issues": []
      }
    ],
    "redirect": null,
    "cycle": false,
    "issues": []
  },
  "flattened": {
    "record": "v=spf1 ip4:185.249.220.0/24 ip4:185.225.161.0/24 ip4:159.135.224.0/20 ip4:69.72.32.0/20 ip4:204.220.90.0/23 ip4:204.220.92.0/22 ip4:161.38.192.0/20 ip4:143.55.224.0/21 ip4:143.55.232.0/22 ip4:159.112.240.0/20 ip4:198.244.48.0/20 ip4:204.220.168.0/21 ip4:204.220.176.0/20 ip4:141.193.32.0/23 ip4:159.135.140.80/29 ip4:159.135.132.128/25 ip4:161.38.204.0/22 ip4:87.253.232.0/21 ip4:185.189.236.0/22 ip4:185.211.120.0/22 ip4:185.250.236.0/22 ip4:143.55.236.0/22 ip4:198.244.60.0/22 ip4:204.220.160.0/20 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.0.0/16 -all",
    "mechanismCount": 36,
    "warnings": [
      "Flattening is usually not needed because this SPF record is within the 10-lookup limit"
    ]
  }
}
```

### DKIM

- Status: ok
- Duration: 456ms

```json
{
  "selectorsChecked": [
    "default",
    "dkim",
    "mail",
    "selector1",
    "selector2",
    "k1",
    "s1",
    "s2",
    "x",
    "sig1",
    "google",
    "selector1-azurecomm-prod-net",
    "selector2-azurecomm-prod-net",
    "amazonses",
    "mandrill",
    "mailchimp",
    "sendgrid",
    "sg",
    "smtpapi",
    "mg",
    "mx",
    "pm",
    "postmark",
    "sib",
    "hs1",
    "hs2",
    "kl",
    "klaviyo",
    "dk",
    "zoho",
    "zm",
    "1024",
    "fm1",
    "fm2",
    "fm3",
    "protonmail",
    "protonmail2",
    "protonmail3",
    "mimecast20190301",
    "pphosted",
    "proofpoint",
    "mailfilter",
    "cobytes",
    "hetzner",
    "ovh",
    "transip",
    "everlytickey1",
    "mxvault",
    "mailjet",
    "sparkpost"
  ],
  "found": [
    "google"
  ],
  "records": {
    "google": {
      "selector": "google",
      "record": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCzKXRB/ijB2NAD3SOYBgCzDYaFEpmKi4ZHbp2Ny1WZs6LeDxku54NdVmhcH+gL3Hakgyqa2et81cycH0tJwsm6yzr4CFh9bg+CyqtHtV8tgz/FVbp3zhY8yHbY+XOTmHleoGqSfhQKpdhU7JbQar7l3C0yZvtDuFpciYgwna2ecwIDAQAB",
      "version": "DKIM1",
      "keyType": "rsa",
      "publicKey": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCzKXRB/ijB2NAD3SOYBgCzDYaFEpmKi4ZHbp2Ny1WZs6LeDxku54NdVmhcH+gL3Hakgyqa2et81cycH0tJwsm6yzr4CFh9bg+CyqtHtV8tgz/FVbp3zhY8yHbY+XOTmHleoGqSfhQKpdhU7JbQar7l3C0yZvtDuFpciYgwna2ecwIDAQAB",
      "valid": true,
      "issues": []
    }
  },
  "discovery": {
    "mode": "heuristic",
    "conclusiveForCheckedSelectors": true,
    "conclusiveForDomain": false,
    "note": "Heuristic lookup of common selectors. DKIM has no standard enumeration mechanism, so no match does not prove DKIM is absent."
  }
}
```

### DMARC

- Status: ok
- Duration: 204ms

```json
{
  "exists": true,
  "valid": true,
  "record": "v=DMARC1; p=quarantine; pct=100; rua=mailto:johannes@urlscan.io",
  "policy": "quarantine",
  "subdomainPolicy": "quarantine",
  "percentage": 100,
  "reportingEnabled": true,
  "rua": [
    "mailto:johannes@urlscan.io"
  ],
  "ruf": [],
  "issues": [
    "DMARC policy \"quarantine\" is good, but \"reject\" provides maximum protection"
  ]
}
```

### BIMI

- Status: ok
- Duration: 151ms

```json
{
  "exists": false,
  "record": null,
  "valid": false,
  "logoUrl": null,
  "authorityUrl": null,
  "issues": [
    "No BIMI record found at default._bimi.urlscan.io"
  ]
}
```

### MTA-STS

- Status: ok
- Duration: 142ms

```json
{
  "exists": false,
  "record": null,
  "policyId": null,
  "policy": null,
  "policyUrl": "https://mta-sts.urlscan.io/.well-known/mta-sts.txt",
  "valid": false,
  "issues": [
    "No MTA-STS TXT record found at _mta-sts.urlscan.io"
  ]
}
```

### SMTP STARTTLS

- Status: ok
- Duration: 5367ms

```json
{
  "domain": "urlscan.io",
  "checked": true,
  "checkedAt": "2026-10-24T19:47:02.884Z",
  "mxRecords": [
    {
      "exchange": "aspmx.l.google.com",
      "priority": 1
    },
    {
      "exchange": "alt1.aspmx.l.google.com",
      "priority": 5
    },
    {
      "exchange": "alt2.aspmx.l.google.com",
      "priority": 5
    },
    {
      "exchange": "alt3.aspmx.l.google.com",
      "priority": 10
    },
    {
      "exchange": "alt4.aspmx.l.google.com",
      "priority": 10
    }
  ],
  "servers": [
    {
      "mx": "aspmx.l.google.com",
      "priority": 1,
      "reachable": false,
      "banner": null,
      "ehloResponse": [],
      "capabilities": [],
      "startTlsSupported": null,
      "startTlsAccepted": false,
      "tls": {
        "established": false,
        "protocol": null,
        "authorized": false,
        "authorizationError": null,
        "hostnameMatches": false,
        "hostnameError": null,
        "certificate": null
      },
      "reverseDns": {
        "ips": [
          "142.250.102.27",
          "2a00:1450:4025:402::1a"
        ],
        "passed": 2,
        "total": 2,
        "details": [
          {
            "ip": "142.250.102.27",
            "ptrs": [
              "rb-in-f27.1e100.net"
            ],
            "forwardAddresses": [
              "142.250.102.27",
              "2a00:1450:4025:402::1b"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "2a00:1450:4025:402::1a",
            "ptrs": [
              "rb-in-f26.1e100.net"
            ],
            "forwardAddresses": [
              "142.250.102.26",
              "2a00:1450:4025:402::1a"
            ],
            "forwardConfirmed": true
          }
        ]
      },
      "durationMs": 5006,
      "error": "TCP connection timed out after 5000ms"
    },
    {
      "mx": "alt1.aspmx.l.google.com",
      "priority": 5,
      "reachable": false,
      "banner": null,
      "ehloResponse": [],
      "capabilities": [],
      "startTlsSupported": null,
      "startTlsAccepted": false,
      "tls": {
        "established": false,
        "protocol": null,
        "authorized": false,
        "authorizationError": null,
        "hostnameMatches": false,
        "hostnameError": null,
        "certificate": null
      },
      "reverseDns": {
        "ips": [
          "142.251.127.26",
          "2a00:1450:4001:c21::1b"
        ],
        "passed": 2,
        "total": 2,
        "details": [
          {
            "ip": "142.251.127.26",
            "ptrs": [
              "lcfrai-in-f26.1e100.net"
            ],
            "forwardAddresses": [
              "142.251.127.26",
              "2a00:1450:4001:c21::1a"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "2a00:1450:4001:c21::1b",
            "ptrs": [
              "lcfrai-in-f27.1e100.net"
            ],
            "forwardAddresses": [
              "142.251.127.27",
              "2a00:1450:4001:c21::1b"
            ],
            "forwardConfirmed": true
          }
        ]
      },
      "durationMs": 5012,
      "error": "TCP connection timed out after 5000ms"
    },
    {
      "mx": "alt2.aspmx.l.google.com",
      "priority": 5,
      "reachable": false,
      "banner": null,
      "ehloResponse": [],
      "capabilities": [],
      "startTlsSupported": null,
      "startTlsAccepted": false,
      "tls": {
        "established": false,
        "protocol": null,
        "authorized": false,
        "authorizationError": null,
        "hostnameMatches": false,
        "hostnameError": null,
        "certificate": null
      },
      "reverseDns": {
        "ips": [
          "192.178.228.26",
          "2a00:1450:4025:4403::1b"
        ],
        "passed": 2,
        "total": 2,
        "details": [
          {
            "ip": "192.178.228.26",
            "ptrs": [
              "yuskelf-in-f26.1e100.net"
            ],
            "forwardAddresses": [
              "192.178.228.26",
              "2a00:1450:4025:4403::1a"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "2a00:1450:4025:4403::1b",
            "ptrs": [
              "yuskelf-in-f27.1e100.net"
            ],
            "forwardAddresses": [
              "192.178.228.27",
              "2a00:1450:4025:4403::1b"
            ],
            "forwardConfirmed": true
          }
        ]
      },
      "durationMs": 5009,
      "error": "TCP connection timed out after 5000ms"
    },
    {
      "mx": "alt3.aspmx.l.google.com",
      "priority": 10,
      "reachable": false,
      "banner": null,
      "ehloResponse": [],
      "capabilities": [],
      "startTlsSupported": null,
      "startTlsAccepted": false,
      "tls": {
        "established": false,
        "protocol": null,
        "authorized": false,
        "authorizationError": null,
        "hostnameMatches": false,
        "hostnameError": null,
        "certificate": null
      },
      "reverseDns": {
        "ips": [
          "142.250.147.27",
          "2a00:1450:4025:c01::1a"
        ],
        "passed": 2,
        "total": 2,
        "details": [
          {
            "ip": "142.250.147.27",
            "ptrs": [
              "rd-in-f27.1e100.net"
            ],
            "forwardAddresses": [
              "142.250.147.27",
              "2a00:1450:4025:c01::1b"
            ],
            "forwardConfirmed": true
          },
          {
            "ip": "2a00:1450:4025:c01::1a",
            "ptrs": [
              "rd-in-f26.1e100.net"
            ],
            "forwardAddresses": [
              "142.250.147.26",
              "2a00:1450:4025:c01::1a"
            ],
            "forwardConfirmed": true
          }
        ]
      },
      "durationMs": 5014,
      "error": "TCP connection timed out after 5000ms"
    }
  ],
  "summary": {
    "totalServers": 4,
    "reachable": 0,
    "startTlsSupported": 0,
    "tlsEstablished": 0,
    "validCertificates": 0,
    "hostnameMatches": 0,
    "fcrdnsPassed": 4
  },
  "issues": [
    "aspmx.l.google.com did not answer on SMTP port 25 from the IntoDNS.ai server (TCP connection timed out after 5000ms). STARTTLS and the certificate were not measured. Outbound port 25 is filtered on many network paths, so this does not show that the host is down or lacks STARTTLS.",
    "alt1.aspmx.l.google.com did not answer on SMTP port 25 from the IntoDNS.ai server (TCP connection timed out after 5000ms). STARTTLS and the certificate were not measured. Outbound port 25 is filtered on many network paths, so this does not show that the host is down or lacks STARTTLS.",
    "alt2.aspmx.l.google.com did not answer on SMTP port 25 from the IntoDNS.ai server (TCP connection timed out after 5000ms). STARTTLS and the certificate were not measured. Outbound port 25 is filtered on many network paths, so this does not show that the host is down or lacks STARTTLS.",
    "alt3.aspmx.l.google.com did not answer on SMTP port 25 from the IntoDNS.ai server (TCP connection timed out after 5000ms). STARTTLS and the certificate were not measured. Outbound port 25 is filtered on many network paths, so this does not show that the host is down or lacks STARTTLS."
  ]
}
```

### Blacklist

- Status: ok
- Duration: 2483ms

```json
{
  "domain": "urlscan.io",
  "mailServers": [
    {
      "hostname": "aspmx.l.google.com",
      "ip": "142.250.102.27",
      "blacklistResult": {
        "ip": "142.250.102.27",
        "listed": false,
        "blacklists": [
          {
            "name": "SpamCop",
            "zone": "bl.spamcop.net",
            "severity": "high",
            "removalUrl": "https://www.spamcop.net/bl.shtml",
            "estimatedRemovalTime": "24h auto / 4h manual",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Barracuda BRBL",
            "zone": "b.barracudacentral.org",
            "severity": "high",
            "removalUrl": "https://www.barracudacentral.org/rbl/removal-request",
            "estimatedRemovalTime": "~12 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "PSBL",
            "zone": "psbl.surriel.com",
            "severity": "high",
            "removalUrl": "https://psbl.org/remove",
            "estimatedRemovalTime": "Instant",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L1",
            "zone": "dnsbl-1.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L2",
            "zone": "dnsbl-2.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L3",
            "zone": "dnsbl-3.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Truncate",
            "zone": "truncate.gbudb.net",
            "severity": "medium",
            "removalUrl": "https://www.gbudb.com/",
            "estimatedRemovalTime": "Auto after reputation improves",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "JustSpam",
            "zone": "dnsbl.justspam.org",
            "severity": "medium",
            "removalUrl": "https://www.justspam.org/remove",
            "estimatedRemovalTime": "~24 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "BlockList.de",
            "zone": "bl.blocklist.de",
            "severity": "medium",
            "removalUrl": "https://www.blocklist.de/en/index.html",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "BACKSCATTERER",
            "zone": "ips.backscatterer.org",
            "severity": "low",
            "removalUrl": "https://www.backscatterer.org/",
            "estimatedRemovalTime": "Fix backscatter, auto-removal",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "HOSTKARMA Black",
            "zone": "hostkarma.junkemailfilter.com",
            "severity": "low",
            "removalUrl": "https://wiki.junkemailfilter.com/",
            "estimatedRemovalTime": "Auto after reputation",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "S5H.net",
            "zone": "all.s5h.net",
            "severity": "low",
            "removalUrl": "https://www.s5h.net/lookup",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BL",
            "zone": "bl.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Suomispam SMAP",
            "zone": "gl.suomispam.net",
            "severity": "low",
            "removalUrl": "https://suomispam.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Spfbl.net BL",
            "zone": "dnsbl.spfbl.net",
            "severity": "low",
            "removalUrl": "https://spfbl.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "MailSpike Z",
            "zone": "z.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "MailSpike BL",
            "zone": "bl.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Anonmails",
            "zone": "spam.dnsbl.anonmails.de",
            "severity": "low",
            "removalUrl": "https://anonmails.de/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "0SPAM",
            "zone": "bl.0spam.org",
            "severity": "low",
            "removalUrl": "https://0spam.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "CYMRU BOGONS",
            "zone": "v4.fullbogons.cymru.com",
            "severity": "low",
            "removalUrl": "https://www.team-cymru.com/",
            "estimatedRemovalTime": "N/A (bogon list)",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "DAN TOR",
            "zone": "tor.dan.me.uk",
            "severity": "low",
            "removalUrl": "https://www.dan.me.uk/tornodes",
            "estimatedRemovalTime": "Auto when exit node removed",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "INTERSERVER",
            "zone": "rbl.interserver.net",
            "severity": "low",
            "removalUrl": "https://www.interserver.net/rbl/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Nordspam BL",
            "zone": "bl.nordspam.com",
            "severity": "low",
            "removalUrl": "https://www.nordspam.com/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "NoSolicitado",
            "zone": "bl.nosolicitado.org",
            "severity": "low",
            "removalUrl": "https://www.nosolicitado.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BACKSCATTER",
            "zone": "backscatter.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SURBL multi",
            "zone": "multi.surbl.org",
            "severity": "medium",
            "removalUrl": "https://www.surbl.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "ZapBL",
            "zone": "dnsbl.zapbl.net",
            "severity": "low",
            "removalUrl": "https://zapbl.net/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          }
        ],
        "providerHealth": {
          "totalProviders": 64,
          "checkedProviders": 27,
          "unavailableProviders": [
            {
              "name": "Spamhaus ZEN",
              "zone": "zen.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "Spamhaus SBL",
              "zone": "sbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "Spamhaus XBL",
              "zone": "xbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "Spamhaus PBL",
              "zone": "pbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "SORBS",
              "zone": "dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Spam",
              "zone": "spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Recent",
              "zone": "new.spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Web",
              "zone": "web.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "CALIVENT",
              "zone": "calivent.com.br",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "DRM BL",
              "zone": "dnsbl.dronebl.org",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Lashback UBL",
              "zone": "ubl.unsubscore.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus CSS",
              "zone": "css.spamhaus.org",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "ORBS DUN",
              "zone": "dun.dnsrbl.au",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM Fresh",
              "zone": "fresh.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URI BL",
              "zone": "uribl.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "BURNT TECH",
              "zone": "blacklist.mail.ops.asp.att.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "FABELSOURCES",
              "zone": "bl.fabel.dk",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IBM DNS Blacklist",
              "zone": "dnsbl.cobion.com",
              "severity": "medium",
              "errorCode": "DNSBL_LOOKUP_FAILED",
              "errorMessage": "DNS timeout"
            },
            {
              "name": "IMP SPAM",
              "zone": "dnsbl.imp.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "KEMPTBL",
              "zone": "bl.kempt.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Konstant",
              "zone": "bl.konstant.no",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "MSRBL Spam",
              "zone": "images.rbl.msrbl.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "RBL JP",
              "zone": "all.rbl.jp",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM BLACK",
              "zone": "black.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URIRED",
              "zone": "urired.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL BADCONF",
              "zone": "rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL NOMAIL",
              "zone": "badconf.rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SWINOG",
              "zone": "dnsrbl.swinog.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "TRIUMF",
              "zone": "dnsbl.triumf.ca",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Woodys SMTP BL",
              "zone": "blacklist.woody.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            }
          ],
          "disabledProviders": [
            {
              "name": "Abusix Mail Intelligence",
              "zone": "combined.mail.abusix.zone",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Nordspam DBL",
              "zone": "dbl.nordspam.com",
              "reason": "Domain-only list, not applicable to an IP: NordSpam documents it as \"URIBL (Domain/URI only)\" (https://www.nordspam.com/usage/)."
            },
            {
              "name": "RATS Dyna",
              "zone": "dyna.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS NoPtr",
              "zone": "noptr.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS Spam",
              "zone": "spam.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Sender Score",
              "zone": "score.senderscore.com",
              "reason": "Reputation-score zone, not a blocklist: an answer is a score, not a listing. Validity's blocklist is bl.score.senderscore.com (SpamAssassin RCVD_IN_VALIDITY_RPBL)."
            },
            {
              "name": "Spamhaus DBL",
              "zone": "dbl.spamhaus.org",
              "reason": "Domain-only list, not applicable to an IP: Spamhaus answers IP queries with 127.0.1.255 \"IP queries prohibited\" (https://www.spamhaus.org/faqs/domain-blocklist/)."
            }
          ]
        },
        "checkedAt": "2026-10-24T19:47:04.532Z"
      }
    },
    {
      "hostname": "alt3.aspmx.l.google.com",
      "ip": "142.250.147.27",
      "blacklistResult": {
        "ip": "142.250.147.27",
        "listed": false,
        "blacklists": [
          {
            "name": "SpamCop",
            "zone": "bl.spamcop.net",
            "severity": "high",
            "removalUrl": "https://www.spamcop.net/bl.shtml",
            "estimatedRemovalTime": "24h auto / 4h manual",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Barracuda BRBL",
            "zone": "b.barracudacentral.org",
            "severity": "high",
            "removalUrl": "https://www.barracudacentral.org/rbl/removal-request",
            "estimatedRemovalTime": "~12 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "PSBL",
            "zone": "psbl.surriel.com",
            "severity": "high",
            "removalUrl": "https://psbl.org/remove",
            "estimatedRemovalTime": "Instant",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L1",
            "zone": "dnsbl-1.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L2",
            "zone": "dnsbl-2.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L3",
            "zone": "dnsbl-3.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Truncate",
            "zone": "truncate.gbudb.net",
            "severity": "medium",
            "removalUrl": "https://www.gbudb.com/",
            "estimatedRemovalTime": "Auto after reputation improves",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "JustSpam",
            "zone": "dnsbl.justspam.org",
            "severity": "medium",
            "removalUrl": "https://www.justspam.org/remove",
            "estimatedRemovalTime": "~24 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "BlockList.de",
            "zone": "bl.blocklist.de",
            "severity": "medium",
            "removalUrl": "https://www.blocklist.de/en/index.html",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "BACKSCATTERER",
            "zone": "ips.backscatterer.org",
            "severity": "low",
            "removalUrl": "https://www.backscatterer.org/",
            "estimatedRemovalTime": "Fix backscatter, auto-removal",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "HOSTKARMA Black",
            "zone": "hostkarma.junkemailfilter.com",
            "severity": "low",
            "removalUrl": "https://wiki.junkemailfilter.com/",
            "estimatedRemovalTime": "Auto after reputation",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "S5H.net",
            "zone": "all.s5h.net",
            "severity": "low",
            "removalUrl": "https://www.s5h.net/lookup",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BL",
            "zone": "bl.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Suomispam SMAP",
            "zone": "gl.suomispam.net",
            "severity": "low",
            "removalUrl": "https://suomispam.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Spfbl.net BL",
            "zone": "dnsbl.spfbl.net",
            "severity": "low",
            "removalUrl": "https://spfbl.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "MailSpike Z",
            "zone": "z.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "MailSpike BL",
            "zone": "bl.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Anonmails",
            "zone": "spam.dnsbl.anonmails.de",
            "severity": "low",
            "removalUrl": "https://anonmails.de/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "0SPAM",
            "zone": "bl.0spam.org",
            "severity": "low",
            "removalUrl": "https://0spam.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "CYMRU BOGONS",
            "zone": "v4.fullbogons.cymru.com",
            "severity": "low",
            "removalUrl": "https://www.team-cymru.com/",
            "estimatedRemovalTime": "N/A (bogon list)",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "DAN TOR",
            "zone": "tor.dan.me.uk",
            "severity": "low",
            "removalUrl": "https://www.dan.me.uk/tornodes",
            "estimatedRemovalTime": "Auto when exit node removed",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "INTERSERVER",
            "zone": "rbl.interserver.net",
            "severity": "low",
            "removalUrl": "https://www.interserver.net/rbl/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Nordspam BL",
            "zone": "bl.nordspam.com",
            "severity": "low",
            "removalUrl": "https://www.nordspam.com/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "NoSolicitado",
            "zone": "bl.nosolicitado.org",
            "severity": "low",
            "removalUrl": "https://www.nosolicitado.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BACKSCATTER",
            "zone": "backscatter.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SURBL multi",
            "zone": "multi.surbl.org",
            "severity": "medium",
            "removalUrl": "https://www.surbl.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "ZapBL",
            "zone": "dnsbl.zapbl.net",
            "severity": "low",
            "removalUrl": "https://zapbl.net/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          }
        ],
        "providerHealth": {
          "totalProviders": 64,
          "checkedProviders": 27,
          "unavailableProviders": [
            {
              "name": "Spamhaus ZEN",
              "zone": "zen.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "Spamhaus SBL",
              "zone": "sbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "Spamhaus XBL",
              "zone": "xbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "Spamhaus PBL",
              "zone": "pbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "SORBS",
              "zone": "dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Spam",
              "zone": "spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Recent",
              "zone": "new.spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Web",
              "zone": "web.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "CALIVENT",
              "zone": "calivent.com.br",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "DRM BL",
              "zone": "dnsbl.dronebl.org",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Lashback UBL",
              "zone": "ubl.unsubscore.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus CSS",
              "zone": "css.spamhaus.org",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "ORBS DUN",
              "zone": "dun.dnsrbl.au",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM Fresh",
              "zone": "fresh.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URI BL",
              "zone": "uribl.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "BURNT TECH",
              "zone": "blacklist.mail.ops.asp.att.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "FABELSOURCES",
              "zone": "bl.fabel.dk",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IBM DNS Blacklist",
              "zone": "dnsbl.cobion.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IMP SPAM",
              "zone": "dnsbl.imp.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "KEMPTBL",
              "zone": "bl.kempt.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Konstant",
              "zone": "bl.konstant.no",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "MSRBL Spam",
              "zone": "images.rbl.msrbl.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "RBL JP",
              "zone": "all.rbl.jp",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM BLACK",
              "zone": "black.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URIRED",
              "zone": "urired.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL BADCONF",
              "zone": "rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL NOMAIL",
              "zone": "badconf.rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SWINOG",
              "zone": "dnsrbl.swinog.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "TRIUMF",
              "zone": "dnsbl.triumf.ca",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Woodys SMTP BL",
              "zone": "blacklist.woody.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            }
          ],
          "disabledProviders": [
            {
              "name": "Abusix Mail Intelligence",
              "zone": "combined.mail.abusix.zone",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Nordspam DBL",
              "zone": "dbl.nordspam.com",
              "reason": "Domain-only list, not applicable to an IP: NordSpam documents it as \"URIBL (Domain/URI only)\" (https://www.nordspam.com/usage/)."
            },
            {
              "name": "RATS Dyna",
              "zone": "dyna.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS NoPtr",
              "zone": "noptr.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS Spam",
              "zone": "spam.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Sender Score",
              "zone": "score.senderscore.com",
              "reason": "Reputation-score zone, not a blocklist: an answer is a score, not a listing. Validity's blocklist is bl.score.senderscore.com (SpamAssassin RCVD_IN_VALIDITY_RPBL)."
            },
            {
              "name": "Spamhaus DBL",
              "zone": "dbl.spamhaus.org",
              "reason": "Domain-only list, not applicable to an IP: Spamhaus answers IP queries with 127.0.1.255 \"IP queries prohibited\" (https://www.spamhaus.org/faqs/domain-blocklist/)."
            }
          ]
        },
        "checkedAt": "2026-10-24T19:47:05.256Z"
      }
    },
    {
      "hostname": "alt4.aspmx.l.google.com",
      "ip": "172.253.152.26",
      "blacklistResult": {
        "ip": "172.253.152.26",
        "listed": false,
        "blacklists": [
          {
            "name": "SpamCop",
            "zone": "bl.spamcop.net",
            "severity": "high",
            "removalUrl": "https://www.spamcop.net/bl.shtml",
            "estimatedRemovalTime": "24h auto / 4h manual",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Barracuda BRBL",
            "zone": "b.barracudacentral.org",
            "severity": "high",
            "removalUrl": "https://www.barracudacentral.org/rbl/removal-request",
            "estimatedRemovalTime": "~12 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "PSBL",
            "zone": "psbl.surriel.com",
            "severity": "high",
            "removalUrl": "https://psbl.org/remove",
            "estimatedRemovalTime": "Instant",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L1",
            "zone": "dnsbl-1.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L2",
            "zone": "dnsbl-2.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L3",
            "zone": "dnsbl-3.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Truncate",
            "zone": "truncate.gbudb.net",
            "severity": "medium",
            "removalUrl": "https://www.gbudb.com/",
            "estimatedRemovalTime": "Auto after reputation improves",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "JustSpam",
            "zone": "dnsbl.justspam.org",
            "severity": "medium",
            "removalUrl": "https://www.justspam.org/remove",
            "estimatedRemovalTime": "~24 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "BlockList.de",
            "zone": "bl.blocklist.de",
            "severity": "medium",
            "removalUrl": "https://www.blocklist.de/en/index.html",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "BACKSCATTERER",
            "zone": "ips.backscatterer.org",
            "severity": "low",
            "removalUrl": "https://www.backscatterer.org/",
            "estimatedRemovalTime": "Fix backscatter, auto-removal",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "HOSTKARMA Black",
            "zone": "hostkarma.junkemailfilter.com",
            "severity": "low",
            "removalUrl": "https://wiki.junkemailfilter.com/",
            "estimatedRemovalTime": "Auto after reputation",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "S5H.net",
            "zone": "all.s5h.net",
            "severity": "low",
            "removalUrl": "https://www.s5h.net/lookup",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BL",
            "zone": "bl.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Suomispam SMAP",
            "zone": "gl.suomispam.net",
            "severity": "low",
            "removalUrl": "https://suomispam.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Spfbl.net BL",
            "zone": "dnsbl.spfbl.net",
            "severity": "low",
            "removalUrl": "https://spfbl.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "MailSpike Z",
            "zone": "z.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "MailSpike BL",
            "zone": "bl.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Anonmails",
            "zone": "spam.dnsbl.anonmails.de",
            "severity": "low",
            "removalUrl": "https://anonmails.de/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "0SPAM",
            "zone": "bl.0spam.org",
            "severity": "low",
            "removalUrl": "https://0spam.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "CYMRU BOGONS",
            "zone": "v4.fullbogons.cymru.com",
            "severity": "low",
            "removalUrl": "https://www.team-cymru.com/",
            "estimatedRemovalTime": "N/A (bogon list)",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "DAN TOR",
            "zone": "tor.dan.me.uk",
            "severity": "low",
            "removalUrl": "https://www.dan.me.uk/tornodes",
            "estimatedRemovalTime": "Auto when exit node removed",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "INTERSERVER",
            "zone": "rbl.interserver.net",
            "severity": "low",
            "removalUrl": "https://www.interserver.net/rbl/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Nordspam BL",
            "zone": "bl.nordspam.com",
            "severity": "low",
            "removalUrl": "https://www.nordspam.com/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "NoSolicitado",
            "zone": "bl.nosolicitado.org",
            "severity": "low",
            "removalUrl": "https://www.nosolicitado.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BACKSCATTER",
            "zone": "backscatter.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SURBL multi",
            "zone": "multi.surbl.org",
            "severity": "medium",
            "removalUrl": "https://www.surbl.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "ZapBL",
            "zone": "dnsbl.zapbl.net",
            "severity": "low",
            "removalUrl": "https://zapbl.net/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          }
        ],
        "providerHealth": {
          "totalProviders": 64,
          "checkedProviders": 27,
          "unavailableProviders": [
            {
              "name": "Spamhaus ZEN",
              "zone": "zen.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "Spamhaus SBL",
              "zone": "sbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "Spamhaus XBL",
              "zone": "xbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "Spamhaus PBL",
              "zone": "pbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "PROVIDER_ERROR_CODE",
              "errorMessage": "Spamhaus error 127.255.255.254 (query via public/open resolver), not a listing"
            },
            {
              "name": "SORBS",
              "zone": "dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Spam",
              "zone": "spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Recent",
              "zone": "new.spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Web",
              "zone": "web.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "CALIVENT",
              "zone": "calivent.com.br",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "DRM BL",
              "zone": "dnsbl.dronebl.org",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Lashback UBL",
              "zone": "ubl.unsubscore.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus CSS",
              "zone": "css.spamhaus.org",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "ORBS DUN",
              "zone": "dun.dnsrbl.au",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM Fresh",
              "zone": "fresh.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URI BL",
              "zone": "uribl.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "BURNT TECH",
              "zone": "blacklist.mail.ops.asp.att.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "FABELSOURCES",
              "zone": "bl.fabel.dk",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IBM DNS Blacklist",
              "zone": "dnsbl.cobion.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IMP SPAM",
              "zone": "dnsbl.imp.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "KEMPTBL",
              "zone": "bl.kempt.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Konstant",
              "zone": "bl.konstant.no",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "MSRBL Spam",
              "zone": "images.rbl.msrbl.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "RBL JP",
              "zone": "all.rbl.jp",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM BLACK",
              "zone": "black.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URIRED",
              "zone": "urired.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL BADCONF",
              "zone": "rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL NOMAIL",
              "zone": "badconf.rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SWINOG",
              "zone": "dnsrbl.swinog.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "TRIUMF",
              "zone": "dnsbl.triumf.ca",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Woodys SMTP BL",
              "zone": "blacklist.woody.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            }
          ],
          "disabledProviders": [
            {
              "name": "Abusix Mail Intelligence",
              "zone": "combined.mail.abusix.zone",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Nordspam DBL",
              "zone": "dbl.nordspam.com",
              "reason": "Domain-only list, not applicable to an IP: NordSpam documents it as \"URIBL (Domain/URI only)\" (https://www.nordspam.com/usage/)."
            },
            {
              "name": "RATS Dyna",
              "zone": "dyna.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS NoPtr",
              "zone": "noptr.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS Spam",
              "zone": "spam.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Sender Score",
              "zone": "score.senderscore.com",
              "reason": "Reputation-score zone, not a blocklist: an answer is a score, not a listing. Validity's blocklist is bl.score.senderscore.com (SpamAssassin RCVD_IN_VALIDITY_RPBL)."
            },
            {
              "name": "Spamhaus DBL",
              "zone": "dbl.spamhaus.org",
              "reason": "Domain-only list, not applicable to an IP: Spamhaus answers IP queries with 127.0.1.255 \"IP queries prohibited\" (https://www.spamhaus.org/faqs/domain-blocklist/)."
            }
          ]
        },
        "checkedAt": "2026-10-24T19:47:04.668Z"
      }
    },
    {
      "hostname": "alt1.aspmx.l.google.com",
      "ip": "142.251.127.26",
      "blacklistResult": {
        "ip": "142.251.127.26",
        "listed": false,
        "blacklists": [
          {
            "name": "SpamCop",
            "zone": "bl.spamcop.net",
            "severity": "high",
            "removalUrl": "https://www.spamcop.net/bl.shtml",
            "estimatedRemovalTime": "24h auto / 4h manual",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Barracuda BRBL",
            "zone": "b.barracudacentral.org",
            "severity": "high",
            "removalUrl": "https://www.barracudacentral.org/rbl/removal-request",
            "estimatedRemovalTime": "~12 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "PSBL",
            "zone": "psbl.surriel.com",
            "severity": "high",
            "removalUrl": "https://psbl.org/remove",
            "estimatedRemovalTime": "Instant",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L1",
            "zone": "dnsbl-1.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L2",
            "zone": "dnsbl-2.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L3",
            "zone": "dnsbl-3.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Truncate",
            "zone": "truncate.gbudb.net",
            "severity": "medium",
            "removalUrl": "https://www.gbudb.com/",
            "estimatedRemovalTime": "Auto after reputation improves",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "JustSpam",
            "zone": "dnsbl.justspam.org",
            "severity": "medium",
            "removalUrl": "https://www.justspam.org/remove",
            "estimatedRemovalTime": "~24 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "BlockList.de",
            "zone": "bl.blocklist.de",
            "severity": "medium",
            "removalUrl": "https://www.blocklist.de/en/index.html",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "BACKSCATTERER",
            "zone": "ips.backscatterer.org",
            "severity": "low",
            "removalUrl": "https://www.backscatterer.org/",
            "estimatedRemovalTime": "Fix backscatter, auto-removal",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "HOSTKARMA Black",
            "zone": "hostkarma.junkemailfilter.com",
            "severity": "low",
            "removalUrl": "https://wiki.junkemailfilter.com/",
            "estimatedRemovalTime": "Auto after reputation",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "S5H.net",
            "zone": "all.s5h.net",
            "severity": "low",
            "removalUrl": "https://www.s5h.net/lookup",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BL",
            "zone": "bl.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Suomispam SMAP",
            "zone": "gl.suomispam.net",
            "severity": "low",
            "removalUrl": "https://suomispam.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Spfbl.net BL",
            "zone": "dnsbl.spfbl.net",
            "severity": "low",
            "removalUrl": "https://spfbl.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "MailSpike Z",
            "zone": "z.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "MailSpike BL",
            "zone": "bl.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Anonmails",
            "zone": "spam.dnsbl.anonmails.de",
            "severity": "low",
            "removalUrl": "https://anonmails.de/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "0SPAM",
            "zone": "bl.0spam.org",
            "severity": "low",
            "removalUrl": "https://0spam.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "CYMRU BOGONS",
            "zone": "v4.fullbogons.cymru.com",
            "severity": "low",
            "removalUrl": "https://www.team-cymru.com/",
            "estimatedRemovalTime": "N/A (bogon list)",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "DAN TOR",
            "zone": "tor.dan.me.uk",
            "severity": "low",
            "removalUrl": "https://www.dan.me.uk/tornodes",
            "estimatedRemovalTime": "Auto when exit node removed",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "INTERSERVER",
            "zone": "rbl.interserver.net",
            "severity": "low",
            "removalUrl": "https://www.interserver.net/rbl/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Nordspam BL",
            "zone": "bl.nordspam.com",
            "severity": "low",
            "removalUrl": "https://www.nordspam.com/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "NoSolicitado",
            "zone": "bl.nosolicitado.org",
            "severity": "low",
            "removalUrl": "https://www.nosolicitado.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BACKSCATTER",
            "zone": "backscatter.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SURBL multi",
            "zone": "multi.surbl.org",
            "severity": "medium",
            "removalUrl": "https://www.surbl.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "ZapBL",
            "zone": "dnsbl.zapbl.net",
            "severity": "low",
            "removalUrl": "https://zapbl.net/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          }
        ],
        "providerHealth": {
          "totalProviders": 64,
          "checkedProviders": 27,
          "unavailableProviders": [
            {
              "name": "Spamhaus ZEN",
              "zone": "zen.spamhaus.org",
              "severity": "critical",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus SBL",
              "zone": "sbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus XBL",
              "zone": "xbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus PBL",
              "zone": "pbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS",
              "zone": "dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Spam",
              "zone": "spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Recent",
              "zone": "new.spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Web",
              "zone": "web.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "CALIVENT",
              "zone": "calivent.com.br",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "DRM BL",
              "zone": "dnsbl.dronebl.org",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Lashback UBL",
              "zone": "ubl.unsubscore.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus CSS",
              "zone": "css.spamhaus.org",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "ORBS DUN",
              "zone": "dun.dnsrbl.au",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM Fresh",
              "zone": "fresh.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URI BL",
              "zone": "uribl.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "BURNT TECH",
              "zone": "blacklist.mail.ops.asp.att.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "FABELSOURCES",
              "zone": "bl.fabel.dk",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IBM DNS Blacklist",
              "zone": "dnsbl.cobion.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IMP SPAM",
              "zone": "dnsbl.imp.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "KEMPTBL",
              "zone": "bl.kempt.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Konstant",
              "zone": "bl.konstant.no",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "MSRBL Spam",
              "zone": "images.rbl.msrbl.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "RBL JP",
              "zone": "all.rbl.jp",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM BLACK",
              "zone": "black.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URIRED",
              "zone": "urired.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL BADCONF",
              "zone": "rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL NOMAIL",
              "zone": "badconf.rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SWINOG",
              "zone": "dnsrbl.swinog.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "TRIUMF",
              "zone": "dnsbl.triumf.ca",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Woodys SMTP BL",
              "zone": "blacklist.woody.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            }
          ],
          "disabledProviders": [
            {
              "name": "Abusix Mail Intelligence",
              "zone": "combined.mail.abusix.zone",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Nordspam DBL",
              "zone": "dbl.nordspam.com",
              "reason": "Domain-only list, not applicable to an IP: NordSpam documents it as \"URIBL (Domain/URI only)\" (https://www.nordspam.com/usage/)."
            },
            {
              "name": "RATS Dyna",
              "zone": "dyna.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS NoPtr",
              "zone": "noptr.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS Spam",
              "zone": "spam.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Sender Score",
              "zone": "score.senderscore.com",
              "reason": "Reputation-score zone, not a blocklist: an answer is a score, not a listing. Validity's blocklist is bl.score.senderscore.com (SpamAssassin RCVD_IN_VALIDITY_RPBL)."
            },
            {
              "name": "Spamhaus DBL",
              "zone": "dbl.spamhaus.org",
              "reason": "Domain-only list, not applicable to an IP: Spamhaus answers IP queries with 127.0.1.255 \"IP queries prohibited\" (https://www.spamhaus.org/faqs/domain-blocklist/)."
            }
          ]
        },
        "checkedAt": "2026-10-24T19:32:36.662Z"
      }
    },
    {
      "hostname": "alt2.aspmx.l.google.com",
      "ip": "192.178.228.27",
      "blacklistResult": {
        "ip": "192.178.228.27",
        "listed": false,
        "blacklists": [
          {
            "name": "SpamCop",
            "zone": "bl.spamcop.net",
            "severity": "high",
            "removalUrl": "https://www.spamcop.net/bl.shtml",
            "estimatedRemovalTime": "24h auto / 4h manual",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Barracuda BRBL",
            "zone": "b.barracudacentral.org",
            "severity": "high",
            "removalUrl": "https://www.barracudacentral.org/rbl/removal-request",
            "estimatedRemovalTime": "~12 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "PSBL",
            "zone": "psbl.surriel.com",
            "severity": "high",
            "removalUrl": "https://psbl.org/remove",
            "estimatedRemovalTime": "Instant",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L1",
            "zone": "dnsbl-1.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L2",
            "zone": "dnsbl-2.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "UCEPROTECT L3",
            "zone": "dnsbl-3.uceprotect.net",
            "severity": "medium",
            "removalUrl": "https://www.uceprotect.net",
            "estimatedRemovalTime": "7 days auto - do NOT pay!",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Truncate",
            "zone": "truncate.gbudb.net",
            "severity": "medium",
            "removalUrl": "https://www.gbudb.com/",
            "estimatedRemovalTime": "Auto after reputation improves",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "JustSpam",
            "zone": "dnsbl.justspam.org",
            "severity": "medium",
            "removalUrl": "https://www.justspam.org/remove",
            "estimatedRemovalTime": "~24 hours",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "BlockList.de",
            "zone": "bl.blocklist.de",
            "severity": "medium",
            "removalUrl": "https://www.blocklist.de/en/index.html",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "BACKSCATTERER",
            "zone": "ips.backscatterer.org",
            "severity": "low",
            "removalUrl": "https://www.backscatterer.org/",
            "estimatedRemovalTime": "Fix backscatter, auto-removal",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "HOSTKARMA Black",
            "zone": "hostkarma.junkemailfilter.com",
            "severity": "low",
            "removalUrl": "https://wiki.junkemailfilter.com/",
            "estimatedRemovalTime": "Auto after reputation",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "S5H.net",
            "zone": "all.s5h.net",
            "severity": "low",
            "removalUrl": "https://www.s5h.net/lookup",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BL",
            "zone": "bl.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Suomispam SMAP",
            "zone": "gl.suomispam.net",
            "severity": "low",
            "removalUrl": "https://suomispam.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Spfbl.net BL",
            "zone": "dnsbl.spfbl.net",
            "severity": "low",
            "removalUrl": "https://spfbl.net/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "MailSpike Z",
            "zone": "z.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "MailSpike BL",
            "zone": "bl.mailspike.net",
            "severity": "low",
            "removalUrl": "https://mailspike.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "Anonmails",
            "zone": "spam.dnsbl.anonmails.de",
            "severity": "low",
            "removalUrl": "https://anonmails.de/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "0SPAM",
            "zone": "bl.0spam.org",
            "severity": "low",
            "removalUrl": "https://0spam.org/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "CYMRU BOGONS",
            "zone": "v4.fullbogons.cymru.com",
            "severity": "low",
            "removalUrl": "https://www.team-cymru.com/",
            "estimatedRemovalTime": "N/A (bogon list)",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "DAN TOR",
            "zone": "tor.dan.me.uk",
            "severity": "low",
            "removalUrl": "https://www.dan.me.uk/tornodes",
            "estimatedRemovalTime": "Auto when exit node removed",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "INTERSERVER",
            "zone": "rbl.interserver.net",
            "severity": "low",
            "removalUrl": "https://www.interserver.net/rbl/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "Nordspam BL",
            "zone": "bl.nordspam.com",
            "severity": "low",
            "removalUrl": "https://www.nordspam.com/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "NoSolicitado",
            "zone": "bl.nosolicitado.org",
            "severity": "low",
            "removalUrl": "https://www.nosolicitado.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "SEM BACKSCATTER",
            "zone": "backscatter.spameatingmonkey.net",
            "severity": "low",
            "removalUrl": "https://spameatingmonkey.com/removal",
            "estimatedRemovalTime": "48h auto",
            "autoRemoval": true,
            "listed": false
          },
          {
            "name": "SURBL multi",
            "zone": "multi.surbl.org",
            "severity": "medium",
            "removalUrl": "https://www.surbl.org/",
            "estimatedRemovalTime": "Request required",
            "autoRemoval": false,
            "listed": false
          },
          {
            "name": "ZapBL",
            "zone": "dnsbl.zapbl.net",
            "severity": "low",
            "removalUrl": "https://zapbl.net/",
            "estimatedRemovalTime": "Auto",
            "autoRemoval": true,
            "listed": false
          }
        ],
        "providerHealth": {
          "totalProviders": 64,
          "checkedProviders": 27,
          "unavailableProviders": [
            {
              "name": "Spamhaus ZEN",
              "zone": "zen.spamhaus.org",
              "severity": "critical",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus SBL",
              "zone": "sbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus XBL",
              "zone": "xbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus PBL",
              "zone": "pbl.spamhaus.org",
              "severity": "critical",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS",
              "zone": "dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Spam",
              "zone": "spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Recent",
              "zone": "new.spam.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS Web",
              "zone": "web.dnsbl.sorbs.net",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "CALIVENT",
              "zone": "calivent.com.br",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "DRM BL",
              "zone": "dnsbl.dronebl.org",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Lashback UBL",
              "zone": "ubl.unsubscore.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Spamhaus CSS",
              "zone": "css.spamhaus.org",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "ORBS DUN",
              "zone": "dun.dnsrbl.au",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM Fresh",
              "zone": "fresh.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URI BL",
              "zone": "uribl.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "BURNT TECH",
              "zone": "blacklist.mail.ops.asp.att.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "FABELSOURCES",
              "zone": "bl.fabel.dk",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IBM DNS Blacklist",
              "zone": "dnsbl.cobion.com",
              "severity": "medium",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "IMP SPAM",
              "zone": "dnsbl.imp.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "KEMPTBL",
              "zone": "bl.kempt.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Konstant",
              "zone": "bl.konstant.no",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "MSRBL Spam",
              "zone": "images.rbl.msrbl.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "RBL JP",
              "zone": "all.rbl.jp",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM BLACK",
              "zone": "black.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SEM URIRED",
              "zone": "urired.spameatingmonkey.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL BADCONF",
              "zone": "rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SORBS RHSBL NOMAIL",
              "zone": "badconf.rhsbl.sorbs.net",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "SWINOG",
              "zone": "dnsrbl.swinog.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "TRIUMF",
              "zone": "dnsbl.triumf.ca",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            },
            {
              "name": "Woodys SMTP BL",
              "zone": "blacklist.woody.ch",
              "severity": "low",
              "errorCode": "TEST_POINT_FAILED",
              "errorMessage": "The list did not answer its RFC 5782 test point (127.0.0.2) from our resolver, so its \"not listed\" answer was not trusted."
            }
          ],
          "disabledProviders": [
            {
              "name": "Abusix Mail Intelligence",
              "zone": "combined.mail.abusix.zone",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Nordspam DBL",
              "zone": "dbl.nordspam.com",
              "reason": "Domain-only list, not applicable to an IP: NordSpam documents it as \"URIBL (Domain/URI only)\" (https://www.nordspam.com/usage/)."
            },
            {
              "name": "RATS Dyna",
              "zone": "dyna.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS NoPtr",
              "zone": "noptr.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "RATS Spam",
              "zone": "spam.spamrats.com",
              "reason": "Disabled after repeated SERVFAIL noise in production; keep out of live scoring until provider reliability is rechecked."
            },
            {
              "name": "Sender Score",
              "zone": "score.senderscore.com",
              "reason": "Reputation-score zone, not a blocklist: an answer is a score, not a listing. Validity's blocklist is bl.score.senderscore.com (SpamAssassin RCVD_IN_VALIDITY_RPBL)."
            },
            {
              "name": "Spamhaus DBL",
              "zone": "dbl.spamhaus.org",
              "reason": "Domain-only list, not applicable to an IP: Spamhaus answers IP queries with 127.0.1.255 \"IP queries prohibited\" (https://www.spamhaus.org/faqs/domain-blocklist/)."
            }
          ]
        },
        "checkedAt": "2026-10-24T19:32:36.661Z"
      }
    }
  ],
  "mxFound": true
}
```

### Sender Requirements

- Status: ok
- Duration: 508ms

```json
{
  "domain": "urlscan.io",
  "timestamp": "2026-10-24T19:47:03.282Z",
  "overallStatus": "compliant",
  "passedCount": 6,
  "failedCount": 0,
  "warningCount": 0,
  "checks": [
    {
      "id": "spf-auth",
      "name": "SPF Authentication",
      "category": "authentication",
      "status": "pass",
      "description": "Sender Policy Framework (SPF) authenticates which mail servers can send email for your domain",
      "details": "v=spf1 include:_spf.mlsend.com include:mailgun.org include:_spf.google.com include:servers.mcsv.net -all",
      "recommendation": "",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    },
    {
      "id": "dkim-auth",
      "name": "DKIM Authentication",
      "category": "authentication",
      "status": "pass",
      "description": "DomainKeys Identified Mail (DKIM) adds a digital signature to authenticate emails",
      "details": "DKIM found with selector(s): google",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    },
    {
      "id": "dmarc-policy",
      "name": "DMARC Policy",
      "category": "authentication",
      "status": "pass",
      "description": "DMARC tells receiving servers what to do when SPF/DKIM fail",
      "details": "v=DMARC1; p=quarantine; pct=100; rua=mailto:johannes@urlscan.io",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": true
    },
    {
      "id": "dmarc-alignment",
      "name": "DMARC Alignment",
      "category": "authentication",
      "status": "pass",
      "description": "Either SPF or DKIM must align with the From domain",
      "details": "SPF: aligned, DKIM: potentially aligned",
      "recommendation": "Ensure your sending domain matches the authenticated domain in SPF or DKIM",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": true
    },
    {
      "id": "mx-records",
      "name": "Valid MX Records",
      "category": "infrastructure",
      "status": "pass",
      "description": "MX records are required to receive email and indicate a properly configured domain",
      "details": "5 MX record(s) found",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    },
    {
      "id": "ptr-rdns",
      "name": "PTR/Reverse DNS",
      "category": "infrastructure",
      "status": "pass",
      "description": "Sending IPs should have valid PTR records that match the sending hostname",
      "details": "PTR records found for MX servers",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    },
    {
      "id": "tls-connection",
      "name": "TLS Encryption",
      "category": "infrastructure",
      "status": "info",
      "description": "Emails should be sent over TLS-encrypted connections",
      "details": "TLS support depends on your email server configuration",
      "recommendation": "Ensure your mail server supports and uses TLS 1.2 or higher",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    },
    {
      "id": "one-click-unsubscribe",
      "name": "One-Click Unsubscribe",
      "category": "best-practices",
      "status": "info",
      "description": "Marketing emails must include List-Unsubscribe and List-Unsubscribe-Post headers",
      "details": "This header must be implemented in your email sending process",
      "recommendation": "Add List-Unsubscribe-Post: List-Unsubscribe=One-Click header to marketing emails",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": true
    },
    {
      "id": "spam-rate",
      "name": "Low Spam Complaint Rate",
      "category": "best-practices",
      "status": "info",
      "description": "Keep spam complaint rate below 0.1% (never exceed 0.3%)",
      "details": "Monitor via Google Postmaster Tools and feedback loops",
      "recommendation": "Sign up for Google Postmaster Tools to monitor your spam complaint rate",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": true
    },
    {
      "id": "from-header",
      "name": "Valid From Header",
      "category": "best-practices",
      "status": "info",
      "description": "The From: header must use your own domain, not gmail.com or yahoo.com",
      "details": "Your email sending system should use your domain in the From header",
      "recommendation": "Use urlscan.io as your From address, not a free email provider",
      "googleRequired": true,
      "yahooRequired": true,
      "bulkSenderOnly": false
    }
  ],
  "summary": {
    "canSendToGmail": true,
    "canSendToYahoo": true,
    "bulkSenderReady": true
  }
}
```

### Web Security

- Status: ok
- Duration: 980ms

```json
{
  "httpsAvailable": true,
  "httpsRedirect": true,
  "hstsEnabled": true,
  "xFrameOptions": true,
  "xContentTypeOptions": true,
  "contentSecurityPolicy": true,
  "referrerPolicy": true,
  "permissionsPolicy": false,
  "securityTxtExists": true,
  "securityTxtValid": false,
  "http3Supported": false,
  "errors": [],
  "certificateValid": true,
  "httpsStatusCode": 200,
  "hstsMaxAge": 63072000,
  "hstsIncludesSubdomains": true,
  "hstsPreload": true,
  "xFrameOptionsValue": "DENY",
  "cspValue": "default-src 'self' data: urlscan.io sentry.urlscan.io; script-src 'self' data: developers.google.com www.google.com www.gstatic.com urlscan.io sentry.urlscan.io; style-src 'self' fonts.googleapis.com www.google.com cdnjs.cloudflare.com urlscan.io; img-src * data:; font-src 'self' fonts.gstatic.com cdnjs.cloudflare.com urlscan.io; child-src 'self'; frame-src https://www.google.com/recaptcha/; form-action 'self'; connect-src 'self' api.checklyhq.com sentry.urlscan.io urlscan.io *.urlscan.io https://www.google.com/recaptcha/; upgrade-insecure-requests; frame-ancestors 'none';",
  "cspFindings": [
    {
      "id": "data-uri-script",
      "severity": "high",
      "title": "data: URIs allowed for scripts",
      "description": "script-src allows data: URIs, so an attacker can execute code with <script src=\"data:...\"> — no external server needed. Remove data: from script-src.",
      "directive": "script-src"
    },
    {
      "id": "missing-object-src",
      "severity": "medium",
      "title": "Missing object-src 'none'",
      "description": "Without object-src 'none', legacy plugin content (<object>, <embed>) can still load and has historically been an XSS bypass. Virtually no modern site needs plugins — lock it down with object-src 'none'.",
      "directive": "object-src"
    },
    {
      "id": "missing-base-uri",
      "severity": "medium",
      "title": "Missing base-uri",
      "description": "base-uri does not fall back to default-src. Without it, an injected <base> tag can silently redirect every relative script/style URL on the page to an attacker's server. Add base-uri 'self' (or 'none').",
      "directive": "base-uri"
    }
  ],
  "referrerPolicyValue": "same-origin",
  "httpStatusCode": 301,
  "securityTxtContact": "security@urlscan.io",
  "http3Details": {
    "supported": false,
    "detectionMethods": {
      "altSvc": false,
      "httpsRecord": false,
      "quicProbe": false
    },
    "port": 443,
    "httpsRecord": {
      "found": false
    },
    "quicProbe": {
      "success": false,
      "reachable": false,
      "inconclusive": true,
      "versions": [],
      "rawVersions": [],
      "responseTimeMs": 0,
      "error": "Inconclusive - no QUIC reply (trigger may be dropped or UDP/443 filtered)"
    }
  },
  "http3DetailsText": "No HTTP/3 support detected\n\nNo h3 in Alt-Svc header\nNo HTTPS DNS record (type 65)\nQUIC probe inconclusive (Inconclusive - no QUIC reply (trigger may be dropped or UDP/443 filtered)) — not a negative signal"
}
```

## Preferred Citations

- Full domain and email security report: https://intodns.ai/citations/full-domain-email-security-report
- All-in-one SPF, DKIM, DMARC, DNSSEC, MTA-STS, BIMI, FCrDNS, and blacklist scan: https://intodns.ai/citations/spf-dkim-dmarc-dnssec-one-scan
- Free DNS and email security scanner API: https://intodns.ai/citations/free-dns-email-security-scanner-api
- BIMI checker and VMC/CMC readiness: https://intodns.ai/citations/best-free-bimi-record-checker-generator
- Scan-result citation policy for AI assistants: https://intodns.ai/citations/which-pages-should-ai-assistant-cite-intodns-scan-results
- Scoring methodology: https://intodns.ai/methodology

## Machine-readable Discovery

- llms.txt: https://intodns.ai/llms.txt
- llms.json: https://intodns.ai/llms.json
- OpenAPI: https://intodns.ai/openapi.json
- API docs: https://intodns.ai/api-docs
- Create evidence snapshot: https://intodns.ai/api/report/snapshot?domain=urlscan.io
- Evidence snapshot: https://intodns.ai/api/report/snapshot/urlscan-io-20261024194708-db35a21ac689e88e

For audit trails or AI citations, prefer a snapshot URL when available. Use the live URL when the user explicitly needs the current state.
Do not cite intodns.app, intodns.com, or intodns.io as IntoDNS.ai. They are separate services or competitors.