{
  "domain": "lumrait.se",
  "score": 100,
  "grade": "A",
  "groups": [
    {
      "key": "mail",
      "label": "Mejlsäkerhet",
      "checks": [
        {
          "key": "dmarc",
          "label": "DMARC",
          "status": "ok",
          "detail": "DMARC avvisar förfalskad mejl (p=reject), starkaste nivån.",
          "fix": "",
          "meta": {
            "dmarcPolicy": "reject",
            "dmarcPct": 100
          },
          "raw": {
            "records": [
              {
                "name": "_dmarc.lumrait.se",
                "type": "TXT",
                "value": "v=DMARC1; p=reject; pct=100; rua=mailto:rua@dmarc.brevo.com; adkim=r; aspf=r"
              }
            ],
            "resolver": "127.0.0.53",
            "at": "2026-09-20T13:14:21.326Z"
          }
        },
        {
          "key": "spf",
          "label": "SPF",
          "status": "ok",
          "detail": "SPF finns och avvisar hårt allt utanför listan (-all).",
          "fix": "",
          "meta": {
            "spfAll": "-",
            "spfCount": 1,
            "spfLookups": 2,
            "spfM365": true
          },
          "raw": {
            "records": [
              {
                "name": "lumrait.se",
                "type": "TXT",
                "value": "v=spf1 include:spf.protection.outlook.com include:spf.brevo.com -all"
              }
            ],
            "resolver": "127.0.0.53",
            "at": "2026-09-20T13:14:21.326Z"
          }
        },
        {
          "key": "dkim",
          "label": "DKIM",
          "status": "ok",
          "detail": "DKIM hittad (selektor \"selector1\", 2048-bitars nyckel). Utgående mejl kan signeras och verifieras.",
          "fix": "",
          "meta": {
            "dkimFound": true,
            "dkimBits": 2048,
            "dkimType": "rsa"
          },
          "raw": {
            "records": [
              {
                "name": "selector1._domainkey.lumrait.se",
                "type": "TXT",
                "value": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ml9DOv+IpH5Rcg8DhyctiryyupgWfgb/eOyV0oAJ3iYWX7aUNrjEn9z2vMM8DdRGQREN9LEVuulYYCALwH0+86UPLs+BZ7gCV/LRnLlyo4Ru8jn/jNc+nFaIxcugi2foFUXsYLTc+sdmnAY3ekZk4Ynwlv7qWZ25gZ58iblVjovUySLqgHh8Qwsdy9AxXgMy2xddT2Urp0JdaJXd/mL6B1346+zc48Ox+tZoa+ewZ5X96OlQG0UtUi3H0jcJwEUFubOVSr70F8J8p0fwjulpg5e0xrdJgTJuJbC2x4XYkviF/LKRraX9iVyki1NMQk6mO4qdPOFHtuiUrkZT9KykQIDAQAB;"
              }
            ],
            "resolver": "127.0.0.53",
            "at": "2026-09-20T13:14:21.335Z",
            "note": "Provade selektorer: selector1"
          }
        },
        {
          "key": "mx",
          "label": "MX (mejlmottagning)",
          "status": "ok",
          "detail": "Mejl hanteras av Microsoft 365 (lumrait-se.mail.protection.outlook.com).",
          "fix": "",
          "meta": {
            "mxHost": "lumrait-se.mail.protection.outlook.com",
            "mxProvider": "Microsoft 365",
            "mxExo": true
          },
          "raw": {
            "records": [
              {
                "name": "lumrait.se",
                "type": "MX",
                "value": "1 lumrait-se.mail.protection.outlook.com"
              }
            ],
            "resolver": "127.0.0.53",
            "at": "2026-09-20T13:14:21.325Z"
          }
        },
        {
          "key": "blacklist",
          "label": "Svartlista",
          "status": "ok",
          "detail": "Domänens IP-adress (188.114.97.1) är inte listad (kontrollerade SpamCop, Spamhaus, Barracuda).",
          "fix": "",
          "raw": {
            "records": [
              {
                "name": "lumrait.se",
                "type": "A",
                "value": "188.114.97.1"
              },
              {
                "name": "188.114.97.1",
                "type": "DNSBL",
                "value": "SpamCop: inte listad"
              },
              {
                "name": "188.114.97.1",
                "type": "DNSBL",
                "value": "Spamhaus: inte listad"
              },
              {
                "name": "188.114.97.1",
                "type": "DNSBL",
                "value": "Barracuda: inte listad"
              }
            ],
            "resolver": "127.0.0.53",
            "at": "2026-09-20T13:14:21.462Z"
          }
        }
      ],
      "score": 100,
      "grade": "A"
    },
    {
      "key": "dns",
      "label": "DNS och domän",
      "checks": [
        {
          "key": "ns",
          "label": "Namnservrar (NS)",
          "status": "ok",
          "detail": "2 namnservrar, vilket ger redundans om en inte svarar.",
          "fix": "",
          "raw": {
            "records": [
              {
                "name": "lumrait.se",
                "type": "NS",
                "value": "albert.ns.cloudflare.com"
              },
              {
                "name": "lumrait.se",
                "type": "NS",
                "value": "athena.ns.cloudflare.com"
              }
            ],
            "resolver": "127.0.0.53",
            "at": "2026-09-20T13:14:21.326Z"
          }
        },
        {
          "key": "soa",
          "label": "SOA (zonens grunddata)",
          "status": "ok",
          "detail": "Zonen styrs av albert.ns.cloudflare.com, kontakt dns.cloudflare.com.",
          "fix": "",
          "raw": {
            "records": [
              {
                "name": "lumrait.se",
                "type": "SOA",
                "value": "albert.ns.cloudflare.com dns.cloudflare.com 2415304954 10000 2400 604800 1800"
              }
            ],
            "resolver": "127.0.0.53",
            "at": "2026-09-20T13:14:21.326Z"
          }
        },
        {
          "key": "a",
          "label": "Adress (A/AAAA)",
          "status": "ok",
          "detail": "Domänen pekar på en server (2 IPv4, 2 IPv6).",
          "fix": "",
          "raw": {
            "records": [
              {
                "name": "lumrait.se",
                "type": "A",
                "value": "188.114.96.1",
                "ttl": 299
              },
              {
                "name": "lumrait.se",
                "type": "A",
                "value": "188.114.97.1",
                "ttl": 299
              },
              {
                "name": "lumrait.se",
                "type": "AAAA",
                "value": "2a06:98c1:3121::1",
                "ttl": 299
              },
              {
                "name": "lumrait.se",
                "type": "AAAA",
                "value": "2a06:98c1:3120::1",
                "ttl": 299
              }
            ],
            "resolver": "127.0.0.53",
            "at": "2026-09-20T13:14:21.335Z"
          }
        },
        {
          "key": "dnssec",
          "label": "DNSSEC",
          "status": "ok",
          "detail": "DNSSEC är aktiverat, DNS-svaren är signerade och svårare att förfalska.",
          "fix": "",
          "raw": {
            "records": [
              {
                "name": "lumrait.se.",
                "type": "DS",
                "value": "2371 13 2 AFE6844BB0755D977B42A19267F58CDDE461C36C0ECE7EF2E00D4F6CBEA5FD30",
                "ttl": 3600
              }
            ],
            "resolver": "dns.google (DoH)",
            "at": "2026-09-20T13:14:21.342Z",
            "note": "AD=1"
          }
        },
        {
          "key": "caa",
          "label": "CAA (certifikatutfärdare)",
          "status": "ok",
          "detail": "CAA-poster finns, vilket begränsar vilka som får utfärda certifikat för domänen.",
          "fix": "",
          "raw": {
            "records": [
              {
                "name": "lumrait.se",
                "type": "CAA",
                "value": "0 issuewild \"ssl.com\""
              },
              {
                "name": "lumrait.se",
                "type": "CAA",
                "value": "0 issuewild \"letsencrypt.org\""
              },
              {
                "name": "lumrait.se",
                "type": "CAA",
                "value": "0 issuewild \"pki.goog; cansignhttpexchanges=yes\""
              },
              {
                "name": "lumrait.se",
                "type": "CAA",
                "value": "0 iodef \"mailto:support@lumrait.se\""
              },
              {
                "name": "lumrait.se",
                "type": "CAA",
                "value": "0 issue \"digicert.com; cansignhttpexchanges=yes\""
              },
              {
                "name": "lumrait.se",
                "type": "CAA",
                "value": "0 issue \"comodoca.com\""
              },
              {
                "name": "lumrait.se",
                "type": "CAA",
                "value": "0 issue \"ssl.com\""
              },
              {
                "name": "lumrait.se",
                "type": "CAA",
                "value": "0 issuewild \"comodoca.com\""
              },
              {
                "name": "lumrait.se",
                "type": "CAA",
                "value": "0 issuewild \"digicert.com; cansignhttpexchanges=yes\""
              },
              {
                "name": "lumrait.se",
                "type": "CAA",
                "value": "0 issue \"pki.goog; cansignhttpexchanges=yes\""
              },
              {
                "name": "lumrait.se",
                "type": "CAA",
                "value": "0 issue \"letsencrypt.org\""
              }
            ],
            "resolver": "127.0.0.53",
            "at": "2026-09-20T13:14:21.326Z"
          }
        },
        {
          "key": "age",
          "label": "Domänens ålder",
          "status": "ok",
          "detail": "Etablerad domän, registrerad 2026-01-21 (8 månader gammal). Ålder är ingen garanti, men nyregistrerade bluffdomäner faller bort här.",
          "fix": "",
          "raw": {
            "records": [
              {
                "name": "lumrait.se",
                "type": "WHOIS created",
                "value": "2026-01-21T00:00:00.000Z"
              }
            ],
            "resolver": "127.0.0.53",
            "at": "2026-09-20T13:14:21.362Z",
            "note": "whois lumrait.se"
          }
        }
      ],
      "score": 100,
      "grade": "A"
    },
    {
      "key": "web",
      "label": "Webb och certifikat",
      "checks": [
        {
          "key": "tls",
          "label": "TLS-certifikat",
          "status": "ok",
          "detail": "Giltigt certifikat, går ut om 87 dagar.",
          "fix": "",
          "raw": {
            "records": [
              {
                "name": "lumrait.se",
                "type": "CERT subject",
                "value": "lumrait.se"
              },
              {
                "name": "lumrait.se",
                "type": "CERT issuer",
                "value": "Let's Encrypt (YE1)"
              },
              {
                "name": "lumrait.se",
                "type": "CERT notBefore",
                "value": "Sep 18 00:50:58 2026 GMT"
              },
              {
                "name": "lumrait.se",
                "type": "CERT notAfter",
                "value": "Dec 17 00:50:57 2026 GMT"
              },
              {
                "name": "lumrait.se",
                "type": "TLS protocol",
                "value": "TLSv1.3"
              }
            ],
            "resolver": "127.0.0.53",
            "at": "2026-09-20T13:14:21.357Z",
            "note": "tls.connect lumrait.se:443 (SNI lumrait.se)"
          }
        },
        {
          "key": "headers",
          "label": "Säkerhetsheaders",
          "status": "ok",
          "detail": "Webbplatsen sätter alla viktiga säkerhetsheaders (HSTS, CSP med flera).",
          "fix": "",
          "raw": {
            "records": [
              {
                "name": "HSTS",
                "type": "HTTP header",
                "value": "max-age=31536000; includeSubDomains; preload"
              },
              {
                "name": "Content-Security-Policy",
                "type": "HTTP header",
                "value": "default-src 'self'; script-src 'self' 'sha256-M0Vf4LnMGNUeekx4XarRq4tVNyzY0EqrjP6rEskOQok=' 'sha256-o07hqXq07RU7eAhydHxQ53Sr1gJtQz62u/+Q0Yfej7k=' 'sha256-zKZ0eYFCAe7X/q6jvHGpXt5RHGHFIavFwbZYSGEW2sM='; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests"
              },
              {
                "name": "X-Frame-Options",
                "type": "HTTP header",
                "value": "SAMEORIGIN"
              },
              {
                "name": "X-Content-Type-Options",
                "type": "HTTP header",
                "value": "nosniff"
              },
              {
                "name": "Referrer-Policy",
                "type": "HTTP header",
                "value": "strict-origin-when-cross-origin"
              }
            ],
            "resolver": "127.0.0.53",
            "at": "2026-09-20T13:14:21.360Z",
            "note": "GET https://lumrait.se/ → HTTP 200",
            "headers": {
              "alt-svc": "h3=\":443\"; ma=86400",
              "cf-cache-status": "DYNAMIC",
              "cf-ray": "a3e117bb5def0d92-ARN",
              "connection": "keep-alive",
              "content-encoding": "br",
              "content-security-policy": "default-src 'self'; script-src 'self' 'sha256-M0Vf4LnMGNUeekx4XarRq4tVNyzY0EqrjP6rEskOQok=' 'sha256-o07hqXq07RU7eAhydHxQ53Sr1gJtQz62u/+Q0Yfej7k=' 'sha256-zKZ0eYFCAe7X/q6jvHGpXt5RHGHFIavFwbZYSGEW2sM='; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests",
              "content-type": "text/html",
              "cross-origin-opener-policy": "same-origin",
              "cross-origin-resource-policy": "same-origin",
              "date": "Sun, 20 Sep 2026 13:14:21 GMT",
              "last-modified": "Thu, 17 Sep 2026 10:21:30 GMT",
              "nel": "{\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}",
              "permissions-policy": "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()",
              "referrer-policy": "strict-origin-when-cross-origin",
              "report-to": "{\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zOOhDhK9occWNcNfbP8yWVWqRQjO6WF2jmIFQZZAld1Fj9hCyg6OrGICPTyXKPQa6FXmBjbFAogyBsa2dAmLusXdSe0XrmMMUXjzSIHuSY4xG4mO4f4pDKDVjsGT\"}]}",
              "server": "cloudflare",
              "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
              "transfer-encoding": "chunked",
              "vary": "accept-encoding",
              "x-content-type-options": "nosniff",
              "x-dns-prefetch-control": "off",
              "x-download-options": "noopen",
              "x-frame-options": "SAMEORIGIN",
              "x-permitted-cross-domain-policies": "none",
              "x-xss-protection": "0"
            }
          }
        },
        {
          "key": "takeover",
          "label": "Underdomän-kapning",
          "status": "ok",
          "detail": "Inga kapningsbara underdomäner hittades bland de 14 vanliga vi testade.",
          "fix": "",
          "raw": {
            "records": [],
            "resolver": "127.0.0.53",
            "at": "2026-09-20T13:14:21.373Z",
            "note": "Testade: www.lumrait.se, mail.lumrait.se, blog.lumrait.se, shop.lumrait.se, app.lumrait.se, dev.lumrait.se, test.lumrait.se, staging.lumrait.se, cdn.lumrait.se, status.lumrait.se, docs.lumrait.se, portal.lumrait.se, m.lumrait.se, api.lumrait.se"
          }
        }
      ],
      "score": 100,
      "grade": "A"
    }
  ],
  "toFix": 0,
  "generatedAt": "2026-09-20T13:14:21.462Z",
  "spoof": {
    "tone": "ok",
    "title": "Nej, er avsändaradress är skyddad",
    "detail": "SPF avvisar hårt allt utanför listan (-all) och DMARC avvisar förfalskad mejl (p=reject). Tillsammans gör de det mycket svårt att skicka mejl i ert namn. DKIM-signering finns och stärker skyddet.",
    "fix": ""
  },
  "m365": true,
  "spf": {
    "tree": {
      "domain": "lumrait.se",
      "record": "v=spf1 include:spf.protection.outlook.com include:spf.brevo.com -all",
      "via": "root",
      "terms": [
        "include:spf.protection.outlook.com",
        "include:spf.brevo.com",
        "-all"
      ],
      "lookups": 2,
      "children": [
        {
          "domain": "spf.protection.outlook.com",
          "record": "v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all",
          "via": "include",
          "terms": [
            "ip4:40.92.0.0/15",
            "ip4:40.107.0.0/16",
            "ip4:52.100.0.0/15",
            "ip4:52.102.0.0/16",
            "ip4:52.103.0.0/17",
            "ip4:104.47.0.0/17",
            "ip6:2a01:111:f400::/48",
            "ip6:2a01:111:f403::/49",
            "ip6:2a01:111:f403:8000::/51",
            "ip6:2a01:111:f403:c000::/51",
            "ip6:2a01:111:f403:f000::/52",
            "-all"
          ],
          "lookups": 0,
          "children": []
        },
        {
          "domain": "spf.brevo.com",
          "record": "v=spf1 ip4:185.41.28.0/22 ip4:94.143.16.0/21 ip4:185.24.144.0/22 ip4:153.92.224.0/19 ip4:213.32.128.0/18 ip4:185.107.232.0/22 ip4:77.32.128.0/18 ip4:77.32.192.0/19 ip4:212.146.192.0/18 ip4:172.246.0.0/18 -all",
          "via": "include",
          "terms": [
            "ip4:185.41.28.0/22",
            "ip4:94.143.16.0/21",
            "ip4:185.24.144.0/22",
            "ip4:153.92.224.0/19",
            "ip4:213.32.128.0/18",
            "ip4:185.107.232.0/22",
            "ip4:77.32.128.0/18",
            "ip4:77.32.192.0/19",
            "ip4:212.146.192.0/18",
            "ip4:172.246.0.0/18",
            "-all"
          ],
          "lookups": 0,
          "children": []
        }
      ]
    },
    "totalLookups": 2,
    "capped": false,
    "services": [
      "Microsoft 365",
      "Brevo"
    ],
    "unknownIncludes": [],
    "hasOwnServers": true,
    "at": "2026-09-20T13:14:21.337Z"
  },
  "dmarc": {
    "record": "v=DMARC1; p=reject; pct=100; rua=mailto:rua@dmarc.brevo.com; adkim=r; aspf=r",
    "policy": "reject",
    "subdomainPolicy": null,
    "pct": 100,
    "adkim": "r",
    "aspf": "r",
    "rua": [
      "rua@dmarc.brevo.com"
    ],
    "ruf": [],
    "ruaThirdParty": [
      "rua@dmarc.brevo.com"
    ],
    "fo": null,
    "ri": null
  },
  "api": {
    "version": 1,
    "raw": true,
    "docs": "https://kollen.lumrait.se/guider/api"
  }
}