Checking DNSSEC, CAA, NS, MX, RDAP expiry, and 4 mail blacklists...
Checking DNSSEC, CAA, NS, MX, RDAP expiry, and 4 mail blacklists...
DNS health for
Checked 5/14/2026, 11:59:40 PM · 447ms
Some critical hardenings missing.
No CAA records published. Any CA can issue certs for this domain.
checked IP: 52.101.9.12 (MX fidelity-com.mail.protection.outlook.com), 52.101.11.2 (MX fidelity-com.mail.protection.outlook.com), 40.93.192.4 (MX fidelity-com.mail.protection.outlook.com), 52.101.10.2 (MX fidelity-com.mail.protection.outlook.com)
Domain intel on fidelity.com
✓ Malware / phishing intel: clean
Domain is not on any malware-distribution feed we track.
✓ Active threat intel: clean
No active C2 / botnet IOCs against this domain.
Registered 1996-08-31 - established
Established domains rarely host phishing infrastructure.
for fidelity.com
Let's Encrypt is the most common free CA. If you also use a paid CA (Sectigo, DigiCert, etc.), add additional `0 issue "<ca-host>"` records for each.
@0 issue "letsencrypt.org"Authorise wildcard cert issuance. Drop this record if you never need wildcard certs.
@0 issuewild "letsencrypt.org"Where to send incident reports if a CA detects an unauthorised issuance attempt. Point at a real mailbox.
@0 iodef "mailto:[email protected]"AI-assisted remediation
Wiredepth Pro sends this report to our AI engine and streams back a 30-day rollout plan tailored to fidelity.com, with provider-specific tips when we can infer them from the data. 10 playbooks per month on Pro, 100 on MSP.
Or share this URL with the team that owns the records.