What this report is. A dated record of externally observable configuration for 3 domains:
DNS records, permitted email senders (SPF), DKIM selectors, DMARC policy, HTTPS certificate, redirect and security headers.
It records what was observed and when. It does not test email delivery, scan for vulnerabilities, or assess compliance,
and it does not state that maintenance was performed or that any incident was prevented.
3 review changes
2 certificate actions
1 expected changes
7 configuration notes
1 coverage gaps
0 pending confirmation
Acme Bakery · acme-bakery.test
Review changes (2)
Check What changed Observed
SPF permitted senders
New SPF senders
ip4 192.0.2.128/25 (via spf.marketingtool.test) include _spf.mtool-sub.test (via spf.marketingtool.test > _spf.mtool-sub.test) first seen 2026-08-10 06:00 UTC
Security headers
Content-Security-Policy: directive frame-ancestors removed
first seen 2026-08-10 06:00 UTC
Expected change (1)
Check What changed Observed
Mail servers (MX)
MX records changed
added: 10 aspmx.bigmail.test, 20 alt1.aspmx.bigmail.test removed: 10 mx1.mailhost.test, 20 mx2.mailhost.test first seen 2026-08-10 06:00 UTC
Configuration note (1)
Check What changed Observed
Website address (A)
A records changed
added: 192.0.2.12, 192.0.2.13 removed: 192.0.2.10, 192.0.2.11 first seen 2026-08-03 00:00 UTC
Current configuration at period end
Check Observed value Website address (A) 192.0.2.12, 192.0.2.13 Mail servers (MX) 10 aspmx.bigmail.test, 20 alt1.aspmx.bigmail.test Nameservers ns1.dnshost.test, ns2.dnshost.test DKIM selector mh1 present, rsa 2048 bits DMARC policy p=quarantine, pct=100, published at the exact name SPF permitted senders 5 permitted senders; ends -all; 4 lookups Security headers 8 security headers present HTTP to HTTPS redirect redirects; status 301 HTTPS certificate valid until 2026-11-28T00:00:00Z (Example CA R3)
Coverage
Check Status Last successful observation Website address (A) observed 2026-08-31 18:00 UTC Mail servers (MX) observed 2026-08-31 18:00 UTC Nameservers observed 2026-08-31 18:00 UTC DKIM selector mh1 observed 2026-08-31 18:00 UTC DMARC policy observed 2026-08-31 18:00 UTC SPF permitted senders observed 2026-08-31 18:00 UTC Security headers observed 2026-08-31 18:00 UTC HTTP to HTTPS redirect observed 2026-08-31 18:00 UTC HTTPS certificate observed 2026-08-31 18:00 UTC
Harbour Goods (shop) · shop.harbour-goods.test
Review change (1)
Check What changed Observed
DKIM selector selector1
DKIM selector selector1 removed
The selector previously published a key and now returns no record. first seen 2026-08-18 12:00 UTC
Certificate action (1)
Check What changed Observed
HTTPS certificate
Certificate expires within 14 days
not after 2026-09-12T00:00:00Z 11 days remaining first seen 2026-08-31 18:00 UTC
Configuration notes (5)
Check What changed Observed
DMARC policy
DMARC policy inherited from organisational domain
harbour-goods.test publishes the record; effective policy quarantine. first seen 2026-08-01 00:00 UTC
Security headers
Content-Security-Policy not set
Observed as absent; not a vulnerability claim. first seen 2026-08-01 00:00 UTC
Security headers
X-Frame-Options not set
Observed as absent; not a vulnerability claim. first seen 2026-08-01 00:00 UTC
Security headers
Permissions-Policy not set
Observed as absent; not a vulnerability claim. first seen 2026-08-01 00:00 UTC
Security headers
Cross-Origin-Resource-Policy not set
Observed as absent; not a vulnerability claim. first seen 2026-08-01 00:00 UTC
Current configuration at period end
Check Observed value Website alias (CNAME) shops.platform-host.test Mail servers (MX) 10 mx.harbour-goods.test DKIM selector google no record DKIM selector selector1 no record DMARC policy p=quarantine, pct=100, inherited from harbour-goods.test SPF permitted senders 1 permitted sender; ends ~all; 1 lookups Security headers 4 security headers present HTTP to HTTPS redirect redirects; status 308 HTTPS certificate valid until 2026-09-12T00:00:00Z (Example CA R3)
Coverage
Check Status Last successful observation Website alias (CNAME) observed 2026-08-31 18:00 UTC Mail servers (MX) observed 2026-08-31 18:00 UTC DKIM selector google observed 2026-08-31 18:00 UTC DKIM selector selector1 observed 2026-08-31 18:00 UTC DMARC policy observed 2026-08-31 18:00 UTC SPF permitted senders observed 2026-08-31 18:00 UTC Security headers observed 2026-08-31 18:00 UTC HTTP to HTTPS redirect observed 2026-08-31 18:00 UTC HTTPS certificate observed 2026-08-31 18:00 UTC
Bluefin Legal · bluefin-legal.test
Certificate action (1)
Check What changed Observed
HTTPS certificate
Certificate expires within 30 days
not after 2026-09-29T00:00:00Z 28 days remaining first seen 2026-08-31 18:00 UTC
Configuration note (1)
Check What changed Observed
DMARC policy
No DMARC record observed
No record at the exact name or at the organisational domain. first seen 2026-08-01 00:00 UTC
Coverage gap (1)
Check What changed Observed
Security headers
Check has not succeeded for 12 hours
last successful observation 2026-08-19T18:00:00+00:00 latest state: error first seen 2026-08-19 18:00 UTC
Current configuration at period end
Check Observed value Website address (A) 198.51.100.20 Mail servers (MX) 10 mail.bluefin-legal.test DMARC policy no record SPF permitted senders 1 permitted sender; ends -all; 1 lookups Security headers 8 security headers present HTTP to HTTPS redirect redirects; status 301 HTTPS certificate valid until 2026-09-29T00:00:00Z (Example CA R3)
Coverage
Check Status Last successful observation Website address (A) observed 2026-08-31 18:00 UTC Mail servers (MX) observed 2026-08-31 18:00 UTC DMARC policy observed 2026-08-31 18:00 UTC SPF permitted senders observed 2026-08-31 18:00 UTC Security headers stale 2026-08-19 18:00 UTC HTTP to HTTPS redirect observed 2026-08-31 18:00 UTC HTTPS certificate observed 2026-08-31 18:00 UTC
0 checks never observed successfully; 1 stale at period end. Gaps are reported, never assumed fine.
Prepared by Northwind Studio for its clients. Demonstration data on reserved .test domains.
Observations were made from the public internet at the stated times. Values shown are as observed; a check marked unknown or stale was not confirmed in this period.
