Files
claudetools/wiki/clients/putt-land-surveying.md
Winter Williams 670d5ad94c wiki: update putt-land-surveying with DKIM records + onmicrosoft domain
Added DKIM selector CNAMEs from Exchange Online (status: Valid), confirmed
onmicrosoft.com domain (puttsurveying.onmicrosoft.com), and expanded DNS wipe
section with full 6-record restoration checklist.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-10 16:27:25 -07:00

7.2 KiB

type, name, display_name, last_compiled, compiled_by, sources, backlinks
type name display_name last_compiled compiled_by sources backlinks
client putt-land-surveying PUTT LAND SURVEYING, INC. 2026-06-10 GURU-BEAST-ROG/discord-bot
clients/putt-land-surveying/session-logs/2026-06/2026-06-10-discord-bot-dns-wipe-investigation.md

PUTT LAND SURVEYING, INC.

Profile

  • Syncro ID: 7180175
  • Contract type: Managed services — $223.92/mo recurring (from 2026-01-01)
  • Managed devices: 7 (PLS-SERVER, PLS-FRONT, PLS-ONE, PLS-TWO, PLS-THREE, PLS-FOUR, PLS-LAPTOP)
  • Billing rate: $175/hr onsite; $150/hr remote (verify)
  • Key contacts:
  • Office: 4817 East 5th Street, Tucson, AZ 85711
  • Phone: 520-240-8373 (main), 520-240-2423 (secondary)
  • Active tickets: #32404 (open), #31865 (open — likely resolved, status not updated)

Infrastructure

Servers & Services

Host IP Role OS Notes
PLS-SERVER (verify) On-site server (verify)
PLS-FRONT (verify) Front-desk workstation (verify)
PLS-ONE (verify) Workstation (verify)
PLS-TWO (verify) Workstation (verify)
PLS-THREE (verify) Workstation (verify)
PLS-FOUR (verify) Workstation (verify)
PLS-LAPTOP (verify) Laptop (verify) New hardware, set up Dec 2025

Email & Identity

  • M365 tenant: puttsurveying.onmicrosoft.com (tenant ID: 25008634-91b4-40aa-8113-78ea03826156)
  • Tenant display name: Putt Land Surveying Inc
  • Namespace type: Managed (direct M365, not GoDaddy-federated)
  • Mailboxes: 8 cloud-only mailboxes (no on-premises sync) as of 2026-06-10
  • Licenses: 2x Microsoft 365 Business Basic, 5x Microsoft 365 Business Premium
  • MX target: puttsurveying-com.mail.protection.outlook.com
  • SPF: v=spf1 include:spf.protection.outlook.com -all
  • Autodiscover CNAME: autodiscover.outlook.com
  • DKIM selector1 CNAME: selector1-puttsurveying-com._domainkey.puttsurveying.onmicrosoft.com (status: Valid)
  • DKIM selector2 CNAME: selector2-puttsurveying-com._domainkey.puttsurveying.onmicrosoft.com (status: Valid)
  • Email security: M365-native only — no Mailprotector, not in CloudFilter
  • MFA status: (verify)
  • Remediation tools: Onboarded 2026-06-10 — all 5 apps consented (Security Investigator, Exchange Operator, User Manager, Tenant Admin, Defender Add-on)

Domain & DNS

  • Domain: puttsurveying.com
  • Registrar: GoDaddy (Wild West Domains LLC) — NOT in ACG's GoDaddy account
  • Nameservers: ns45/ns47/ns48.domaincontrol.com
  • Domain expiry: 2031-01-31
  • Domain locks: clientDeleteProhibited, clientRenewProhibited, clientTransferProhibited, clientUpdateProhibited
  • Website hosting: GoDaddy shared hosting — correct A record: 50.63.7.186
  • [WARNING] DNS wipe event 2026-06-09: All DNS records deleted (MX, SPF TXT, autodiscover CNAME, DKIM CNAMEs, website A record). DNS serial 2026060900 confirmed. Current A records pointing to GoDaddy parking IPs (15.197.148.33, 3.33.130.190). Email and website down as of 2026-06-10. Remediation in progress per ticket #32404.
  • Full record set to restore:
    • A: @50.63.7.186 (GoDaddy shared hosting)
    • MX: @puttsurveying-com.mail.protection.outlook.com (priority 0)
    • TXT: @v=spf1 include:spf.protection.outlook.com -all
    • CNAME: autodiscoverautodiscover.outlook.com
    • CNAME: selector1._domainkeyselector1-puttsurveying-com._domainkey.puttsurveying.onmicrosoft.com
    • CNAME: selector2._domainkeyselector2-puttsurveying-com._domainkey.puttsurveying.onmicrosoft.com

Network

  • ISP / WAN: (verify)
  • Firewall: (verify)
  • VPN: Configured for select users (Katherine Brackett set up Nov 2025 for AA Project remote access)

Access

  • RDP: (verify)
  • Admin URL: (verify)
  • Vault path: clients/putt-land-surveying/ (not vaulted — domain in client's own GoDaddy account)

Patterns & Known Issues

  • Email/Outlook failures are recurring. Aug 2025: emergency Outlook login failure after update. Jun 2026: full DNS wipe took down email and website.
  • DNS/domain not ACG-managed. puttsurveying.com is registered under the client's own GoDaddy account. ACG has no direct control; changes require client coordination or delegation.
  • No Mailprotector / no third-party email security. Email protection is M365-native only; no CloudFilter presence.
  • New hardware cycles. Two rounds of new machine setup in 2025 (Sept upgrades to Win11, Dec new laptop setup). Expect ongoing hardware refresh work.
  • M365 user provisioning is periodic. New hire onboarding, email address creation, and VPN/remote access setup recur as the company grows or turns over staff.
  • Ownership transition in progress. New ownership discussed Sept 2025; primary contact shifted to Paul Cote (pcote@puttsurveying.com) by Jan 2026. Old address pls@puttsurveying.com retired 2026-02-01.
  • GoDaddy shared hosting for website. Not ACG-managed hosting; website changes require GoDaddy account access.

Active Work

  • Ticket #32404 [Waiting on Customer] — puttsurveying.com DNS wipe / no MX / email down (opened 2026-06-10). All DNS records were deleted 2026-06-09. Correct records identified (MX, SPF, autodiscover CNAME, website A record 50.63.7.186). Blocked on client providing GoDaddy account access to restore records. Remediation tools onboarded to M365 tenant same day.
  • Ticket #31865 [Customer Reply] — New hire email (@puttsurveying.com) (opened 2026-01-28). Tristan Boren (tboren@puttsurveying.com) provisioned 2026-01-30 per ticket comments. Appears resolved; status not updated in Syncro.

History Highlights

  • 2025-01-03 — Laptop x2 desktop setup (ticket #30576)
  • 2025-04-28 — Remote: intermittent connectivity and OneDrive error investigation (ticket #31035)
  • 2025-08-04 — Emergency remote: Outlook login failure after update; all email inaccessible (ticket #31362)
  • 2025-08-18 — Remote: printer setup for Jill (ticket #31403)
  • 2025-09-03 — New email address set up (ticket #31439)
  • 2025-09-17 — Onsite: two machines upgraded to Windows 11; data backed up; new company ownership discussed (ticket #31471)
  • 2025-11-05 — Remote: VPN and remote access configured for Katherine Brackett for AA Project (ticket #31627)
  • 2025-12-22 — Onsite: new computer setup (ticket #31750)
  • 2025-12-29 — Onsite: file copy and transfer to new computer (ticket #31767)
  • 2026-01-01 — Managed services contract billing began at $223.92/mo
  • 2026-01-28 to 2026-01-30 — New hire Tristan Boren onboarded; tboren@puttsurveying.com provisioned; primary contact updated to Paul Cote (pcote@puttsurveying.com); pls@puttsurveying.com retired 2026-02-01 (ticket #31865)
  • 2026-06-09 — All DNS records for puttsurveying.com wiped (serial 2026060900); email and website taken down
  • 2026-06-10 — DNS wipe confirmed; correct records identified; M365 tenant onboarded to ACG remediation tools (ticket #32404)

(none)