Generated: 2026-08-09T11:29:29-05:00
| Status | Check | Points | Details |
|---|---|---|---|
| OK | IPv4 (A) | 30/30 | 1 IPv4 address(es) detected. |
| OK | IPv6 (AAAA) | 10/10 | 1 IPv6 address(es) detected. |
| OK | Name server redundancy | 20/20 | 6 NS record(s); 2 or more required. |
| OK | SOA record | 10/10 | Authoritative zone record. |
| ERROR | DNSSEC chain | 0/15 | Both DS and DNSKEY are required. |
| OK | CAA policy | 5/5 | Certificate authority restriction. |
| OK | DNS propagation | 10/10 | Agreement between public resolvers. |
| OK | MX records | 20/20 | 3 MX record(s). |
| OK | SPF | 25/25 | SPF policy published. |
| OK | DMARC | 25/25 | DMARC policy published. |
| OK | DKIM | 20/20 | A DKIM selector was verified. |
| ERROR | MTA-STS | 0/5 | Mail transport policy. |
| ERROR | TLS-RPT | 0/5 | TLS reporting policy. |
| OK | Valid TLS certificate | 55/55 | 32 day(s) remaining. |
| OK | Certificate lifetime | 10/10 | Full points require at least 30 days remaining. |
| WARNING | HTTP security headers | 16/35 | 4 of 9 evaluated headers detected. |
| OK | PTR reverse DNS | 30/30 | PTR: myshopify.com |
| WARNING | IPv4 diversity | 20/35 | Two or more IPv4 addresses receive full points. |
| OK | IPv6 connectivity | 35/35 | AAAA availability. |
| OK | DNS resolution | 40/40 | At least one address family must resolve. |
| OK | HTTP response | 40/40 | HTTP/2 200 |
| OK | HTTPS final URL | 20/20 | Final URL uses HTTPS. |
| Tipo | Values |
|---|---|
| A | 23.227.38.65 |
| AAAA | 2620:127:f00f:5:: |
| CNAME | |
| MX | 15 indigo-ca.mail.eo.outlook.com. 10 indigo-ca.mail.protection.outlook.com. 20 mail.indigo.ca. |
| TXT | "MS=ms80684486"
"apple-domain-verification=W1B0JfiitmLMyjeAApJaIiG0bSW62KdsqB1bbjTNgUY"
"shopify-verification-code=XyATURMZXYMqZwsi9yQA0UfS14zSMu"
"v=spf1 ip4:4.205.225.208 ip4:4.206.180.244 ip4:20.63.81.83 exists:%{i}.spf.rnmk.com include:spf.protection.outlook.com include:eskerondemand.com include:aspmx.sailthru.com include:ultipro.ca include:_spf.psm.knowbe4.com include:sendgrid.net -all"
"unk3k2vog4n366jd513b1bcdpp"
"google-site-verification=JyBCMzfiyxWXYAlt1dT1sHRJUaaewpb7QNjXISOL1xw"
"google-site-verification=vh5zAbb2cHvpxGQeyeeO2T0AVEbon-v-1pws8vX7swM"
"google-site-verification=GvjxbzriLzdvlaycMwJvRd6lXJgZ8K6a022YXmhY-d4"
"amazonses:+RX0nbWMdajtY1UHqd9V+EZSmv+dVIsWFm6qx4p3+3c="
"google-site-verification=--GWhnkVSWcPLI07v89MiwVbd5n5Dn2blJ7fSi_oYWE"
"atlassian-domain-verification=cR3B66YYD9Lk6lEAwdiYwbnmc/6selx6u0kM0F6RoCmjj6+FxdYAEKf0SCpE704b"
"google-site-verification=L5_t07XoArNvyip3IvPp49st1xbMMuj5KbGkPMpRA_U"
"yahoo-verification-key=5ll/wHK+WW9dGraJMZz+TvzxF0NA+FxZ5qvqcO7r1Jk="
"google-site-verification=YSTx0KFpP9m1icrU92xKlB27MO0qixtdJDxp3ZpNfSQ"
"adobe-idp-site-verification=ad918265-090f-421d-bf1a-22f9b4bdd679"
"duo_sso_verification=EZqX070z5wafg3jOxWx9kiKeBraHJsUxz7uM9kd0rfENfaWeQcaf9seZHlmNb93L"
"cursor-domain-verification-frqsw4=MLGXBBBbaf1JojCIzFeNWLiuf"
"google-site-verification=gqi-3gFes1hsBkye5LWwKZfT8zHbhNerUfp2iXH6ME8"
"apple-domain-verification=YkUpqy041zEtDijL"
"91c95c60932ae84bfd688fd5180a692dc05b7b7f575b5e5e18"
"twilio-domain-verification=06e2f7bf02932d694e507c5e974c9ef1"
"y2by4w7yhxqcxwvttr647f3q23rs34vy"
"google-gws-recovery-domain-verification=67569433"
"facebook-domain-verification=n1aegg3pjdu934u61lcdgbkfwlkneu"
"segment-site-verification=dFLiIGHn6VOX44UcKgFINGISw57WKW3F"
"miro-verification=d7cf5031448590950f43e07d354fe2d17ad135c6"
"SsQP/IDiKnxzu6ftZYFiosGVaY+yqwN2ANXho/ytSVLjfRekmLWPoewulYHJX4tZs+qfZc7FfYAfYQ+W+XKBeQ=="
"have-i-been-pwned-verification=95c44bdbf3822dd68474d57992bbef15"
"slack-domain-verification=r6rABg5htCf402TGs60d3l3YpRcEOTXGNyVcEZ3r"
"new-relic-domain-verification=80356bc264e6475b8e45d3be88b30621" |
| NS | a13-65.akam.net. a16-66.akam.net. a3-64.akam.net. a1-97.akam.net. a26-67.akam.net. a12-64.akam.net. |
| SOA | a1-97.akam.net. hostmaster.akamai.com. 2022021835 300 300 1209600 300 |
| CAA | 0 iodef "mailto:it-security@indigo.ca" 0 issue "pki.goog" 0 issue "ssl.com" 0 issue "microsoft.com" 0 issue "godaddy.com" 0 issue "letsencrypt.org" 0 issue "amazon.com" 0 issue "digicert.com" 0 issue "globalsign.com" |
| DS | |
| DNSKEY | |
| RRSIG | |
| NSEC | |
| NSEC3 | |
| SRV | |
| NAPTR | |
| TLSA | |
| SSHFP |