Generated: 2026-08-09T13:02:47-05:00
| Status | Check | Points | Details |
|---|---|---|---|
| OK | IPv4 (A) | 30/30 | 2 IPv4 address(es) detected. |
| OK | IPv6 (AAAA) | 10/10 | 2 IPv6 address(es) detected. |
| OK | Name server redundancy | 20/20 | 2 NS record(s); 2 or more required. |
| OK | SOA record | 10/10 | Authoritative zone record. |
| ERROR | DNSSEC chain | 0/15 | Both DS and DNSKEY are required. |
| OK | CAA policy | 5/5 | Certificate authority restriction. |
| OK | DNS propagation | 10/10 | Agreement between public resolvers. |
| OK | MX records | 20/20 | 2 MX record(s). |
| OK | SPF | 25/25 | SPF policy published. |
| OK | DMARC | 25/25 | DMARC policy published. |
| OK | DKIM | 20/20 | A DKIM selector was verified. |
| ERROR | MTA-STS | 0/5 | Mail transport policy. |
| ERROR | TLS-RPT | 0/5 | TLS reporting policy. |
| OK | Valid TLS certificate | 55/55 | 56 day(s) remaining. |
| OK | Certificate lifetime | 10/10 | Full points require at least 30 days remaining. |
| WARNING | HTTP security headers | 12/35 | 3 of 9 evaluated headers detected. |
| ERROR | PTR reverse DNS | 0/30 | PTR not detected. |
| OK | IPv4 diversity | 35/35 | Two or more IPv4 addresses receive full points. |
| OK | IPv6 connectivity | 35/35 | AAAA availability. |
| OK | DNS resolution | 40/40 | At least one address family must resolve. |
| OK | HTTP response | 40/40 | HTTP/2 200 |
| OK | HTTPS final URL | 20/20 | Final URL uses HTTPS. |
| Tipo | Values |
|---|---|
| A | 172.66.154.166 104.20.18.55 |
| AAAA | 2606:4700:10::ac42:9aa6 2606:4700:10::6814:1237 |
| CNAME | |
| MX | 5 d198744a.ess.barracudanetworks.com. 5 d198744b.ess.barracudanetworks.com. |
| TXT | "google-site-verification=OwmGPBC6bSbhUmA3E0w_9Tos2mcRaS9Ho5lFFSmguwg" "MS=ms41014790" "google-site-verification=sZa1_JmyHVJAtUEUZnlA9dQgeLQZeWXAPlgtWNJQA1U" "v=spf1 include:UniversalSpf.org ~include:x.UniversalSpf.org ip4:216.158.24.6 ip4:216.158.1.185 ip4:104.130.24.136 ip4:216.158.1.183 ip4:74.205.52.93 ip4:98.129.167.76 ip4:98.129.167.77 ip4:13.68.221.152 ip4:13.68.221.191 include:spf2.constitutioncenter.or" "g -all" "ZA=UniK274qaeGOlWnC1JmnIMVqxCZgzRJ5x7UCEgjwJCw=" "_pi13wey6dotth8qadx20u4izru0wf6q" "google-site-verification=AbhammSAMKKAySs144jK3zTb1BJEwJ418VyzyNiUk8c" "yahoo-verification-key=jWWdxxlVI6sewLyymooYaKGfPFvBKPkz2UXI8f6mddY=" "apple-domain-verification=A25ShSHlvKfyPVXG" "google-site-verification=le8T8ktXS7qCc3vDHRZA-DCDTbP-_Wh7VpAKwqoAil4" "UVb50JV4db+xFPy2WPP99sTY0MTyJTVn3eXE+w9DnPakEm+lR6bFihm/4WjiXD2rRMBC+zE0TAequZEddqotmA==" |
| NS | kate.ns.cloudflare.com. jake.ns.cloudflare.com. |
| SOA | jake.ns.cloudflare.com. dns.cloudflare.com. 2410500092 10000 2400 604800 1800 |
| CAA | 0 issuewild "pki.goog; cansignhttpexchanges=yes" 0 iodef "mailto:jbarber@constitutioncenter.org" 0 issue "letsencrypt.org" 0 issue "pki.goog; cansignhttpexchanges=yes" 0 issuewild "ssl.com" 0 issuewild "letsencrypt.org" 0 issue "comodoca.com" 0 issue "amazon.com" 0 issue "ssl.com" 0 issuewild "digicert.com; cansignhttpexchanges=yes" 0 issuewild "comodoca.com" 0 issue "digicert.com; cansignhttpexchanges=yes" |
| DS | |
| DNSKEY | |
| RRSIG | |
| NSEC | |
| NSEC3 | |
| SRV | |
| NAPTR | |
| TLSA | |
| SSHFP |