Generated: 2026-08-09T06:08:07-05:00
| Status | Check | Points | Details |
|---|---|---|---|
| OK | IPv4 (A) | 30/30 | 2 IPv4 address(es) detected. |
| OK | IPv6 (AAAA) | 10/10 | 2 IPv6 address(es) detected. |
| OK | Name server redundancy | 20/20 | 2 NS record(s); 2 or more required. |
| OK | SOA record | 10/10 | Authoritative zone record. |
| ERROR | DNSSEC chain | 0/15 | Both DS and DNSKEY are required. |
| OK | CAA policy | 5/5 | Certificate authority restriction. |
| OK | DNS propagation | 10/10 | Agreement between public resolvers. |
| OK | MX records | 20/20 | 1 MX record(s). |
| OK | SPF | 25/25 | SPF policy published. |
| OK | DMARC | 25/25 | DMARC policy published. |
| OK | DKIM | 20/20 | A DKIM selector was verified. |
| ERROR | MTA-STS | 0/5 | Mail transport policy. |
| ERROR | TLS-RPT | 0/5 | TLS reporting policy. |
| OK | Valid TLS certificate | 55/55 | 99 day(s) remaining. |
| OK | Certificate lifetime | 10/10 | Full points require at least 30 days remaining. |
| WARNING | HTTP security headers | 19/35 | 5 of 9 evaluated headers detected. |
| ERROR | PTR reverse DNS | 0/30 | PTR not detected. |
| OK | IPv4 diversity | 35/35 | Two or more IPv4 addresses receive full points. |
| OK | IPv6 connectivity | 35/35 | AAAA availability. |
| OK | DNS resolution | 40/40 | At least one address family must resolve. |
| OK | HTTP response | 40/40 | HTTP/2 200 |
| OK | HTTPS final URL | 20/20 | Final URL uses HTTPS. |
| Tipo | Values |
|---|---|
| A | 172.66.153.34 104.20.39.113 |
| AAAA | 2606:4700:10::6814:2771 2606:4700:10::ac42:9922 |
| CNAME | |
| MX | 10 bhf-org-uk.mail.protection.outlook.com. |
| TXT | "globalsign-domain-verification=r9wDp_F3cW1O83TDYUaOfbTz-9d9gc-UVC_rRsJGZS" "_globalsign-domain-verification=qWOHY68P12JaISayP5J1KB-jmWAzPZl99cm4vC8l34" "miro-verification=e4f6d64dd4ea09a01531c91c1c9b23a765bee41e" "1dZHOEVzTLUkDm/4ydUWqNKfsr6Bukd3goJ9Lz2xHxI=" "MS=ms38696446" "_globalsign-domain-verification=AegYB5rxjMw7b3rMy2Nta4KblMAHdB6qPHstf6F0Gi" "atlassian-domain-verification=w80NpvLUbkOyzL2pasTN+rFySFvN1dADQTbUCbPCiail/eVKBb3nr8oNIGxfJOEa" "apple-domain-verification=88Ya8zoFYF3uuU9E" "facebook-domain-verification=m7uax8d4zhnmjroou9eha4xdpbwbmt" "r/pk3KF9B4bVOZ7l8/O5VpdVeqGyY6Y3P8F2pKaNFfE=" "globalsign-domain-verification=7lkcfZFT1-rMbfcXxcLG2kiblzWCBwQlXYjYF4DtBJ" "globalsign-domain-verification=iusKo7whykFJMXR05PSFi7s0-qfIAXIN0xkgUJi_vS" "Nb2glDHwWT3XERyqbR6d4JOQaxWXRG9bN6zJQT9VPJQqWZUQnGJaPrCGYCm6mpPGxF0ka2W8DFXJLuBsCddw4A==" "google-site-verification=abP4QLZyWJ3818CZOLXbWMiJBI5hVOP8SkuBQCfjaeI" "MS=ms42391974" "v=spf1 include:_u.bhf.org.uk._spf.smart.ondmarc.com ~all" |
| NS | udns1.cscdns.net. udns2.cscdns.uk. |
| SOA | udns1.cscdns.net. hostmaster.cscdns.net. 2019100726 28800 7200 604800 86400 |
| CAA | 0 issue "amazon.com" 0 issue "pki.goog; cansignhttpexchanges=yes" 0 issue "globalsign.com" 0 issue "sectigo.com" 0 iodef "mailto:web.domains@bhf.org.uk" 0 issue "digicert.com" 0 issue "letsencrypt.org" |
| DS | |
| DNSKEY | |
| RRSIG | |
| NSEC | |
| NSEC3 | |
| SRV | |
| NAPTR | |
| TLSA | |
| SSHFP |