{
"ok": true,
"domain": "aspca.org",
"generated_at": "2026-08-09T01:33:03-05:00",
"cache": {
"hit": true,
"ttl": 0
},
"score": {
"total": 77,
"label": "Good",
"categories": {
"dns": 70,
"mail": 90,
"security": 77,
"network": 20,
"availability": 100
},
"category_weights": {
"dns": 25,
"mail": 20,
"security": 25,
"network": 10,
"availability": 20
},
"items": [
{
"category": "dns",
"title": "IPv4 (A)",
"max_points": 30,
"earned_points": 30,
"lost_points": 0,
"detail": "1 IPv4 address(es) detected."
},
{
"category": "dns",
"title": "IPv6 (AAAA)",
"max_points": 10,
"earned_points": 0,
"lost_points": 10,
"detail": "0 IPv6 address(es) detected."
},
{
"category": "dns",
"title": "Name server redundancy",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "2 NS record(s); 2 or more required."
},
{
"category": "dns",
"title": "SOA record",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Authoritative zone record."
},
{
"category": "dns",
"title": "DNSSEC chain",
"max_points": 15,
"earned_points": 0,
"lost_points": 15,
"detail": "Both DS and DNSKEY are required."
},
{
"category": "dns",
"title": "CAA policy",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "Certificate authority restriction."
},
{
"category": "dns",
"title": "DNS propagation",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Agreement between public resolvers."
},
{
"category": "mail",
"title": "MX records",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "2 MX record(s)."
},
{
"category": "mail",
"title": "SPF",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "SPF policy published."
},
{
"category": "mail",
"title": "DMARC",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "DMARC policy published."
},
{
"category": "mail",
"title": "DKIM",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "A DKIM selector was verified."
},
{
"category": "mail",
"title": "MTA-STS",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "Mail transport policy."
},
{
"category": "mail",
"title": "TLS-RPT",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "TLS reporting policy."
},
{
"category": "security",
"title": "Valid TLS certificate",
"max_points": 55,
"earned_points": 55,
"lost_points": 0,
"detail": "50 day(s) remaining."
},
{
"category": "security",
"title": "Certificate lifetime",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Full points require at least 30 days remaining."
},
{
"category": "security",
"title": "HTTP security headers",
"max_points": 35,
"earned_points": 12,
"lost_points": 23,
"detail": "3 of 9 evaluated headers detected."
},
{
"category": "network",
"title": "PTR reverse DNS",
"max_points": 30,
"earned_points": 0,
"lost_points": 30,
"detail": "PTR not detected."
},
{
"category": "network",
"title": "IPv4 diversity",
"max_points": 35,
"earned_points": 20,
"lost_points": 15,
"detail": "Two or more IPv4 addresses receive full points."
},
{
"category": "network",
"title": "IPv6 connectivity",
"max_points": 35,
"earned_points": 0,
"lost_points": 35,
"detail": "AAAA availability."
},
{
"category": "availability",
"title": "DNS resolution",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "At least one address family must resolve."
},
{
"category": "availability",
"title": "HTTP response",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "HTTP/2 200 "
},
{
"category": "availability",
"title": "HTTPS final URL",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "Final URL uses HTTPS."
}
],
"methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
"diagnostics": [
{
"level": "ok",
"title": "IPv4 (A)",
"detail": "1 IPv4 address(es) detected.",
"category": "dns",
"max_points": 30,
"earned_points": 30,
"lost_points": 0
},
{
"level": "error",
"title": "IPv6 (AAAA)",
"detail": "0 IPv6 address(es) detected.",
"category": "dns",
"max_points": 10,
"earned_points": 0,
"lost_points": 10
},
{
"level": "ok",
"title": "Name server redundancy",
"detail": "2 NS record(s); 2 or more required.",
"category": "dns",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SOA record",
"detail": "Authoritative zone record.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "error",
"title": "DNSSEC chain",
"detail": "Both DS and DNSKEY are required.",
"category": "dns",
"max_points": 15,
"earned_points": 0,
"lost_points": 15
},
{
"level": "error",
"title": "CAA policy",
"detail": "Certificate authority restriction.",
"category": "dns",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "ok",
"title": "DNS propagation",
"detail": "Agreement between public resolvers.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "MX records",
"detail": "2 MX record(s).",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SPF",
"detail": "SPF policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DMARC",
"detail": "DMARC policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DKIM",
"detail": "A DKIM selector was verified.",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "error",
"title": "MTA-STS",
"detail": "Mail transport policy.",
"category": "mail",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "error",
"title": "TLS-RPT",
"detail": "TLS reporting policy.",
"category": "mail",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "ok",
"title": "Valid TLS certificate",
"detail": "50 day(s) remaining.",
"category": "security",
"max_points": 55,
"earned_points": 55,
"lost_points": 0
},
{
"level": "ok",
"title": "Certificate lifetime",
"detail": "Full points require at least 30 days remaining.",
"category": "security",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "warning",
"title": "HTTP security headers",
"detail": "3 of 9 evaluated headers detected.",
"category": "security",
"max_points": 35,
"earned_points": 12,
"lost_points": 23
},
{
"level": "error",
"title": "PTR reverse DNS",
"detail": "PTR not detected.",
"category": "network",
"max_points": 30,
"earned_points": 0,
"lost_points": 30
},
{
"level": "warning",
"title": "IPv4 diversity",
"detail": "Two or more IPv4 addresses receive full points.",
"category": "network",
"max_points": 35,
"earned_points": 20,
"lost_points": 15
},
{
"level": "error",
"title": "IPv6 connectivity",
"detail": "AAAA availability.",
"category": "network",
"max_points": 35,
"earned_points": 0,
"lost_points": 35
},
{
"level": "ok",
"title": "DNS resolution",
"detail": "At least one address family must resolve.",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTP response",
"detail": "HTTP/2 200 ",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTPS final URL",
"detail": "Final URL uses HTTPS.",
"category": "availability",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
}
]
},
"dns": {
"records": {
"A": [
"23.185.0.2"
],
"AAAA": [],
"CNAME": [],
"MX": [
"5 mxa-00643b01.gslb.pphosted.com.",
"5 mxb-00643b01.gslb.pphosted.com."
],
"TXT": [
"\"sE+XeCGRj3TDfNoxA7oDUwkQ1paLnOWABOurZepKTJbDGQPxuhPetY9L22VpIcom6Xs1FfARiaQLd+R1bEtygQ==\"",
"\"amazonses:MfXUShochINkGpI8UP60qYlQowY4PW+A5HhH5HvV4TM=\"",
"\"docusign=e4d7fe35-fe2e-4203-985a-c8862362b3d4\"",
"\"v=spf1 include:44788773.spf06.hubspotemail.net include:spf.protection.outlook.com include:spf-00643b01.pphosted.com include:_spf.e-activist.com ~all\"",
"\"atlassian-domain-verification=WqLnXzAP5LY4XAjxMh6El9UVvkmuHHMF7ncvXWyx/1huT7v8MldmzvgNSeUCpVy3\"",
"\"canva-site-verification=w4bZXtlDs-aYHyO0Ups-KQ\"",
"\"docusign=7bad53e4-4dc5-4886-a129-3078f2b1e40a\"",
"\"google-site-verification=bIdBJ6kyzzKTuErqfv2oCa-7vHe6VNAoUVibrV7vlUY\"",
"\"apple-domain-verification=K6D1JwllwvMtlBb1\"",
"\"google-gws-recovery-domain-verification=73563932\"",
"\"onetrust-domain-verification=7039d9d64d3e4e3bb7e86b9764e2db28\"",
"\"ZOOM_verify_V7nZAztPSH290wJxRNK_Gw\"",
"\"anthropic-domain-verification-c045n0=TCIigeAc3O9vNnATh5WuPhlkG\"",
"\"hubspot-domain-verification=MmVlYWI3ZWMtYjBhNy00NDc1LTgxYjktODVhMTExMzZmOWZh\""
],
"NS": [
"auth1.dns.cogentco.com.",
"auth2.dns.cogentco.com."
],
"SOA": [
"auth1.dns.cogentco.com. dns.cogentco.com. 2026072300 10800 3600 604800 600"
],
"CAA": [],
"DS": [],
"DNSKEY": [],
"RRSIG": [],
"NSEC": [],
"NSEC3": [],
"SRV": [],
"NAPTR": [],
"TLSA": [],
"SSHFP": []
},
"ipv4": [
"23.185.0.2"
],
"ipv6": []
},
"mail": {
"spf": "v=spf1 include:44788773.spf06.hubspotemail.net include:spf.protection.outlook.com include:spf-00643b01.pphosted.com include:_spf.e-activist.com ~all",
"dmarc": "v=DMARC1; p=quarantine; fo=1; rua=mailto:dmarc@aspca.org,mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc@aspca.org,mailto:dmarc_ruf@emaildefense.proofpoint.com; aspf=r; adkim=r;",
"dkim_selector": "selector1",
"dkim_host": "selector1._domainkey.aspca.org",
"dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7wo343EGTn/K7sub7NooDob4QXdDRWyRtcyEWHyUjALZJdFB9db1+6ItopkkNt9Sw/P21SQxN/kGggJrlWiS9fockdy883cNFyLcBelK59HKpgZMkAoeiqcaQB7ziFFY+U7zRcxEoJZogT4oGkLYsTKS0eicpyenXenLIaavvqQIDAQAB; n=1024,1452970147,1468694947",
"spf_analysis": {
"valid": true,
"lookups": 4,
"final": "~all",
"message": "Within the estimated limit"
},
"dmarc_analysis": {
"valid": true,
"policy": "quarantine"
},
"bimi": "",
"mta_sts": "",
"tls_rpt": ""
},
"advanced": {
"ptr": "",
"propagation": {
"consistent": true,
"results": [
{
"provider": "Google",
"server": "8.8.8.8",
"result": [
"23.185.0.2"
],
"time_ms": 90.61
},
{
"provider": "Cloudflare",
"server": "1.1.1.1",
"result": [
"23.185.0.2"
],
"time_ms": 95.41
},
{
"provider": "Quad9",
"server": "9.9.9.9",
"result": [
"23.185.0.2"
],
"time_ms": 103.34
},
{
"provider": "OpenDNS",
"server": "208.67.222.222",
"result": [
"23.185.0.2"
],
"time_ms": 107.56
},
{
"provider": "AdGuard",
"server": "94.140.14.14",
"result": [
"23.185.0.2"
],
"time_ms": 417.42
}
]
}
},
"ssl": {
"available": true,
"issuer": "Let's Encrypt",
"subject": "aspca.org",
"valid_from": "2026-06-30T04:13:56-05:00",
"valid_to": "2026-09-28T04:13:55-05:00",
"days_remaining": 50,
"san": [
"aspca.org",
"dev-cloudflare.aspca.org",
"www.aspca.org"
],
"protocol": "TLSv1.3",
"cipher": "TLS_AES_128_GCM_SHA256"
},
"http": {
"url": "https://www.aspca.org/",
"status": "HTTP/2 200 ",
"http_version": "3",
"headers": {
"content-type": "text/html; charset=utf-8",
"location": "https://www.aspca.org/",
"server": "cloudflare",
"strict-transport-security": "max-age=300",
"x-pantheon-styx-hostname": "styx-us-a-7ffbcf568d-9jxmh",
"x-styx-req-id": "2bf373e2-93bc-11f1-8ead-96ef8c72797c",
"cache-control": "no-cache, must-revalidate",
"age": "0",
"accept-ranges": "bytes",
"via": "1.1 varnish, 1.1 varnish, 1.1 varnish",
"x-geo-region": "MO",
"date": "Sun, 09 Aug 2026 06:33:02 GMT",
"x-served-by": "cache-chi-kmdw8640058-CHI, cache-chi-klot8100145-CHI, cache-chi-klot8100145-CHI",
"x-cache": "MISS, MISS, MISS",
"x-cache-hits": "0, 0, 0",
"x-timer": "S1786257183.558158,VS0,VE370",
"vary": "Accept-Encoding, X-Geo-Region,User-Agent, Cookie",
"content-length": "0",
"connection": "keep-alive",
"cf-ray": "a284ba1efe91c48f-ORD",
"content-language": "en",
"expires": "Sun, 19 Nov 1978 05:00:00 GMT",
"link": "; rel=\"canonical\",; rel=\"shortlink\",; rel=\"shortcut icon\",; rel=\"icon_16x16\",; rel=\"icon_32x32\",; rel=\"icon_96x96\",; rel=\"icon_192x192\",; rel=\"apple-touch-icon\",; rel=\"apple-touch-icon_72x72\",; rel=\"apple-touch-icon_76x76\",; rel=\"apple-touch-icon_114x114\",; rel=\"apple-touch-icon_120x120\",; rel=\"apple-touch-icon_144x144\",; rel=\"apple-touch-icon_152x152\",; rel=\"apple-touch-icon_180x180\",; rel=\"apple-touch-icon-precomposed\",; rel=\"apple-touch-icon-precomposed_72x72\",; rel=\"apple-touch-icon-precomposed_76x76\",; rel=\"apple-touch-icon-precomposed_114x114\",; rel=\"apple-touch-icon-precomposed_120x120\",; rel=\"apple-touch-icon-precomposed_144x144\",; rel=\"apple-touch-icon-precomposed_152x152\",; rel=\"apple-touch-icon-precomposed_180x180\"",
"set-cookie": "SSESS7687de9a1ff6a8be0463a7df0b1eec93=NU9dQKXmhOMy8pgHOg4Vtfxs1WIpUTxqHmGPp3ayC74; path=/; domain=.www.aspca.org; secure; HttpOnly",
"x-content-type-options": "nosniff",
"x-drupal-cache": "MISS",
"x-frame-options": "SAMEORIGIN",
"x-generator": "Drupal 7 (https://www.drupal.org)",
"x-ua-compatible": "IE=edge",
"cf-cache-status": "DYNAMIC"
},
"security_checks": {
"strict-transport-security": true,
"content-security-policy": false,
"x-content-type-options": true,
"x-frame-options": true,
"referrer-policy": false,
"permissions-policy": false,
"cross-origin-opener-policy": false,
"cross-origin-embedder-policy": false,
"cross-origin-resource-policy": false
},
"server": "cloudflare",
"powered_by": ""
},
"webpage": {
"url": "https://www.aspca.org/",
"title": "ASPCA | American Society for the Prevention of Cruelty to Animals",
"description": "Learn more about the ASPCA's work to rescue animals from abuse, pass humane laws and share resources with shelters nationwide. Join our fight today!",
"success": true,
"error": "",
"status": 200
},
"network": {
"23.185.0.2": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
}
},
"smtp": {
"host": "mxa-00643b01.gslb.pphosted.com",
"ports": [
{
"port": 25,
"open": false,
"time_ms": 23.1,
"banner": "",
"error": "Connection refused"
},
{
"port": 465,
"open": false,
"time_ms": 48.4,
"banner": "",
"error": "Connection refused"
},
{
"port": 587,
"open": false,
"time_ms": 71.2,
"banner": "",
"error": "Connection refused"
}
]
},
"visitor": {
"ip": "216.73.217.62",
"reverse": "",
"country": "",
"country_code": "",
"region": "",
"city": "",
"latitude": null,
"longitude": null,
"isp": "",
"organization": "",
"asn": "",
"timezone": "",
"browser": "Other",
"os": "Other",
"language": "",
"user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
"is_bot": true,
"cloudflare": false
},
"analysis_time_ms": 98.76
}