{
  "observed_at": "2026-09-28T21:31:03.968839+00:00",
  "scope": "Local BIND authoritative DNS answers over TCP; synthetic agency.test zone",
  "limitations": [
    "No public delegation or resolver cache test",
    "No DNSSEC validation",
    "No SMTP, SPF/DKIM/DMARC evaluation or mail delivery",
    "No TLS or MTA-STS policy fetch"
  ],
  "versions": {
    "named": "BIND 9.20.29 (Stable Release) <id:c3d4465>",
    "dig": "DiG 9.20.29"
  },
  "source_sha256": "d5aadc514e4a956df8b1e60cc71651b7a9dc0e299077ec336ccc6cdeef554eb3",
  "snapshots": {
    "old": {
      "answers": {
        "@ MX": ["10 mail.agency.test."],
        "mail A": ["192.0.2.25"],
        "mail AAAA": ["2001:db8::25"],
        "@ TXT": ["\"v=spf1 ip4:192.0.2.25 -all\""],
        "selector1._domainkey CNAME": ["selector1.mail.test."],
        "_dmarc TXT": ["\"v=DMARC1; p=reject; rua=mailto:dmarc@agency.test\""],
        "autodiscover CNAME": ["autodiscover.mail.test."],
        "_mta-sts TXT": ["\"v=STSv1; id=20260928\""],
        "mta-sts A": ["192.0.2.26"],
        "_smtp._tls TXT": ["\"v=TLSRPTv1; rua=mailto:tls@agency.test\""],
        "@ A": ["192.0.2.10"],
        "@ NS": ["ns-old.agency.test."]
      },
      "zone_sha256": "d064258f8205b7b158cdf5ecf6f7dba52de5f7686bb7c0fdd3d3ac953ccba3d6"
    },
    "broken": {
      "answers": {
        "@ MX": ["10 wrong.mail.test."],
        "mail A": ["192.0.2.25"],
        "mail AAAA": ["2001:db8::25"],
        "@ TXT": ["\"v=spf1 ip4:192.0.2.25 -all\""],
        "selector1._domainkey CNAME": [],
        "_dmarc TXT": ["\"v=DMARC1; p=reject; rua=mailto:dmarc@agency.test\""],
        "autodiscover CNAME": ["autodiscover.mail.test."],
        "_mta-sts TXT": ["\"v=STSv1; id=20260928\""],
        "mta-sts A": ["192.0.2.26"],
        "_smtp._tls TXT": ["\"v=TLSRPTv1; rua=mailto:tls@agency.test\""],
        "@ A": ["198.51.100.10"],
        "@ NS": ["ns-new.agency.test."]
      },
      "zone_sha256": "2208f88960d277633a0db3d16f318a285ced06c185da82629d0514d8d223608c"
    },
    "fixed": {
      "answers": {
        "@ MX": ["10 mail.agency.test."],
        "mail A": ["192.0.2.25"],
        "mail AAAA": ["2001:db8::25"],
        "@ TXT": ["\"v=spf1 ip4:192.0.2.25 -all\""],
        "selector1._domainkey CNAME": ["selector1.mail.test."],
        "_dmarc TXT": ["\"v=DMARC1; p=reject; rua=mailto:dmarc@agency.test\""],
        "autodiscover CNAME": ["autodiscover.mail.test."],
        "_mta-sts TXT": ["\"v=STSv1; id=20260928\""],
        "mta-sts A": ["192.0.2.26"],
        "_smtp._tls TXT": ["\"v=TLSRPTv1; rua=mailto:tls@agency.test\""],
        "@ A": ["198.51.100.10"],
        "@ NS": ["ns-new.agency.test."]
      },
      "zone_sha256": "be9ec79bfa9c52ffd254dfd1b68b9e0bc2d28681d394c2a6c6ddf4cba50bac60"
    }
  },
  "checks": [
    {
      "name": "baseline: @ MX",
      "passed": true
    },
    {
      "name": "preserved: @ MX",
      "passed": true
    },
    {
      "name": "baseline: mail A",
      "passed": true
    },
    {
      "name": "preserved: mail A",
      "passed": true
    },
    {
      "name": "baseline: mail AAAA",
      "passed": true
    },
    {
      "name": "preserved: mail AAAA",
      "passed": true
    },
    {
      "name": "baseline: @ TXT",
      "passed": true
    },
    {
      "name": "preserved: @ TXT",
      "passed": true
    },
    {
      "name": "baseline: selector1._domainkey CNAME",
      "passed": true
    },
    {
      "name": "preserved: selector1._domainkey CNAME",
      "passed": true
    },
    {
      "name": "baseline: _dmarc TXT",
      "passed": true
    },
    {
      "name": "preserved: _dmarc TXT",
      "passed": true
    },
    {
      "name": "baseline: autodiscover CNAME",
      "passed": true
    },
    {
      "name": "preserved: autodiscover CNAME",
      "passed": true
    },
    {
      "name": "baseline: _mta-sts TXT",
      "passed": true
    },
    {
      "name": "preserved: _mta-sts TXT",
      "passed": true
    },
    {
      "name": "baseline: mta-sts A",
      "passed": true
    },
    {
      "name": "preserved: mta-sts A",
      "passed": true
    },
    {
      "name": "baseline: _smtp._tls TXT",
      "passed": true
    },
    {
      "name": "preserved: _smtp._tls TXT",
      "passed": true
    },
    {
      "name": "missing DKIM selector detected",
      "passed": true
    },
    {
      "name": "wrong MX detected",
      "passed": true
    },
    {
      "name": "website address changed",
      "passed": true
    },
    {
      "name": "nameserver changed",
      "passed": true
    }
  ],
  "passed": 24
}