ica.gov.pg — Pacific Islands IPv6 Monitor

Score3/4

Overall Dual-stack

Collected2026-10-12 20:33 UTC

Measurement estimates from a single vantage point — not a compliance certification. Guidance below is for operators, not an SLA.

Priority next steps

Publish AAAA records for mail (MX): mx.sendgrid.net.
Enable DNSSEC signing and publish a DNSKEY at the apex. Use DNSViz to validate the full chain.

Dual-stack

[2] 6/6/6 [O]

Meaning: Shows how many authoritative name servers exist, and how many IPv6 endpoints are configured, responsive, and operational.

IPv4 6/6/6 · IPv6 6/6/6 · location O

Host	IPv4	IPv6	Probes
`aron.ns.cloudflare.com` [O]	173.245.58.69, 108.162.192.69, 172.64.32.69	2a06:98c1:50::ac40:2045, 2803:f800:50::6ca2:c045, 2606:4700:50::adf5:3a45	ipv4 173.245.58.69 ok; ipv4 108.162.192.69 ok; ipv4 172.64.32.69 ok; ipv6 2a06:98c1:50::ac40:2045 ok; ipv6 2803:f800:50::6ca2:c045 ok; ipv6 2606:4700:50::adf5:3a45 ok;
`logan.ns.cloudflare.com` [O]	108.162.193.198, 172.64.33.198, 173.245.59.198	2a06:98c1:50::ac40:21c6, 2803:f800:50::6ca2:c1c6, 2606:4700:58::adf5:3bc6	ipv4 108.162.193.198 ok; ipv4 172.64.33.198 ok; ipv4 173.245.59.198 ok; ipv6 2a06:98c1:50::ac40:21c6 ok; ipv6 2803:f800:50::6ca2:c1c6 ok; ipv6 2606:4700:58::adf5:3bc6 ok;

Dual-stack

[6 MX] v4 smtp 14/14/14 v6 smtp 5/5/5 [O]

Meaning: Shows MX footprint and SMTP health per IP family. Operational means an SMTP banner and EHLO exchange succeeded on port 25.

IPv4 SMTP 14/14/14 · IPv6 5/5/5 · location O

Host	IPv4	IPv6	Probes
`mx.sendgrid.net` [O]	16.52.110.174, 16.52.61.209, 18.224.101.244, 44.216.124.122, 3.136.245.72, 3.17.120.38, 13.216.54.185, 34.198.67.24, 15.222.160.229	—	ipv4 16.52.110.174 ok; ipv4 16.52.61.209 ok; ipv4 18.224.101.244 ok; ipv4 44.216.124.122 ok; ipv4 3.136.245.72 ok; ipv4 3.17.120.38 ok; ipv4 13.216.54.185 ok; ipv4 34.198.67.24 ok; ipv4 15.222.160.229 ok;
`aspmx.l.google.com` [O]	173.194.43.27	2607:f8b0:400e:c06::1b	ipv4 173.194.43.27 ok; ipv6 2607:f8b0:400e:c06::1b ok;
`alt1.aspmx.l.google.com` [O]	192.178.231.26	2607:f8b0:4023:200d::1a	ipv4 192.178.231.26 ok; ipv6 2607:f8b0:4023:200d::1a ok;
`alt4.aspmx.l.google.com` [O]	172.253.135.26	2607:f8b0:4023:1015::1b	ipv4 172.253.135.26 ok; ipv6 2607:f8b0:4023:1015::1b ok;
`alt3.aspmx.l.google.com` [O]	172.253.145.26	2607:f8b0:4023:3003::1a	ipv4 172.253.145.26 ok; ipv6 2607:f8b0:4023:3003::1a ok;
`alt2.aspmx.l.google.com` [O]	172.217.216.26	2607:f8b0:4023:2803::1b	ipv4 172.217.216.26 ok; ipv6 2607:f8b0:4023:2803::1b ok;

📌 Action item(s):

Dual-stack

[1] 2/2/2 [I]

Meaning: Shows IPv6 web endpoint readiness for the discovered HTTPS host. Operational means family-specific HTTPS requests complete successfully.

IPv4 2/2/2 · IPv6 2/2/2 · location I

Host	IPv4	IPv6	Probes
`ica.gov.pg` [I]	172.66.42.236, 172.66.41.20	2606:4700:3108::ac42:2aec, 2606:4700:3108::ac42:2914	ipv4 ok; ipv6 ok;

Unsigned

U/-/-

Meaning: Shows whether DNSKEY data is observed at the apex (signed), absent (unsigned), or unavailable due to lookup error.

Apex DNSKEY presence only — not full chain validation.

📌 Action item(s):

Enable DNSSEC signing and publish a DNSKEY at the apex. Use DNSViz to validate the full chain.

p=reject

p=reject — published organizational policy. Strongest published policy (SPF/DKIM alignment still not measured here).

Meaning: Published DMARC policy at _dmarc.ica.gov.pg (DNS TXT). Shows organizational policy (p=) and subdomain policy (sp=) when set.

Record at _dmarc.ica.gov.pg:

v=DMARC1; p=reject; rua=mailto:a.s1i9ljpw@sdmarc.net; adkim=r; aspf=r

Policy publication only — SPF/DKIM not measured. Not part of the 0–4 row score.