{ "ok": true, "domain": "hrc.org", "generated_at": "2026-08-09T03:51:22-05:00", "cache": { "hit": true, "ttl": 0 }, "score": { "total": 82, "label": "Good", "categories": { "dns": 70, "mail": 90, "security": 77, "network": 65, "availability": 100 }, "category_weights": { "dns": 25, "mail": 20, "security": 25, "network": 10, "availability": 20 }, "items": [ { "category": "dns", "title": "IPv4 (A)", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "3 IPv4 address(es) detected." }, { "category": "dns", "title": "IPv6 (AAAA)", "max_points": 10, "earned_points": 0, "lost_points": 10, "detail": "0 IPv6 address(es) detected." }, { "category": "dns", "title": "Name server redundancy", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "4 NS record(s); 2 or more required." }, { "category": "dns", "title": "SOA record", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Authoritative zone record." }, { "category": "dns", "title": "DNSSEC chain", "max_points": 15, "earned_points": 0, "lost_points": 15, "detail": "Both DS and DNSKEY are required." }, { "category": "dns", "title": "CAA policy", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Certificate authority restriction." }, { "category": "dns", "title": "DNS propagation", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Agreement between public resolvers." }, { "category": "mail", "title": "MX records", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "1 MX record(s)." }, { "category": "mail", "title": "SPF", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "SPF policy published." }, { "category": "mail", "title": "DMARC", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "DMARC policy published." }, { "category": "mail", "title": "DKIM", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "A DKIM selector was verified." }, { "category": "mail", "title": "MTA-STS", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Mail transport policy." }, { "category": "mail", "title": "TLS-RPT", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "TLS reporting policy." }, { "category": "security", "title": "Valid TLS certificate", "max_points": 55, "earned_points": 55, "lost_points": 0, "detail": "125 day(s) remaining." }, { "category": "security", "title": "Certificate lifetime", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Full points require at least 30 days remaining." }, { "category": "security", "title": "HTTP security headers", "max_points": 35, "earned_points": 12, "lost_points": 23, "detail": "3 of 9 evaluated headers detected." }, { "category": "network", "title": "PTR reverse DNS", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "PTR: ec2-52-13-129-17.us-west-2.compute.amazonaws.com" }, { "category": "network", "title": "IPv4 diversity", "max_points": 35, "earned_points": 35, "lost_points": 0, "detail": "Two or more IPv4 addresses receive full points." }, { "category": "network", "title": "IPv6 connectivity", "max_points": 35, "earned_points": 0, "lost_points": 35, "detail": "AAAA availability." }, { "category": "availability", "title": "DNS resolution", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "At least one address family must resolve." }, { "category": "availability", "title": "HTTP response", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "HTTP/2 200 " }, { "category": "availability", "title": "HTTPS final URL", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "Final URL uses HTTPS." } ], "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.", "diagnostics": [ { "level": "ok", "title": "IPv4 (A)", "detail": "3 IPv4 address(es) detected.", "category": "dns", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "error", "title": "IPv6 (AAAA)", "detail": "0 IPv6 address(es) detected.", "category": "dns", "max_points": 10, "earned_points": 0, "lost_points": 10 }, { "level": "ok", "title": "Name server redundancy", "detail": "4 NS record(s); 2 or more required.", "category": "dns", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SOA record", "detail": "Authoritative zone record.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "error", "title": "DNSSEC chain", "detail": "Both DS and DNSKEY are required.", "category": "dns", "max_points": 15, "earned_points": 0, "lost_points": 15 }, { "level": "error", "title": "CAA policy", "detail": "Certificate authority restriction.", "category": "dns", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "DNS propagation", "detail": "Agreement between public resolvers.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "MX records", "detail": "1 MX record(s).", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SPF", "detail": "SPF policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DMARC", "detail": "DMARC policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DKIM", "detail": "A DKIM selector was verified.", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "error", "title": "MTA-STS", "detail": "Mail transport policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "TLS-RPT", "detail": "TLS reporting policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "Valid TLS certificate", "detail": "125 day(s) remaining.", "category": "security", "max_points": 55, "earned_points": 55, "lost_points": 0 }, { "level": "ok", "title": "Certificate lifetime", "detail": "Full points require at least 30 days remaining.", "category": "security", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "warning", "title": "HTTP security headers", "detail": "3 of 9 evaluated headers detected.", "category": "security", "max_points": 35, "earned_points": 12, "lost_points": 23 }, { "level": "ok", "title": "PTR reverse DNS", "detail": "PTR: ec2-52-13-129-17.us-west-2.compute.amazonaws.com", "category": "network", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "ok", "title": "IPv4 diversity", "detail": "Two or more IPv4 addresses receive full points.", "category": "network", "max_points": 35, "earned_points": 35, "lost_points": 0 }, { "level": "error", "title": "IPv6 connectivity", "detail": "AAAA availability.", "category": "network", "max_points": 35, "earned_points": 0, "lost_points": 35 }, { "level": "ok", "title": "DNS resolution", "detail": "At least one address family must resolve.", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTP response", "detail": "HTTP/2 200 ", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTPS final URL", "detail": "Final URL uses HTTPS.", "category": "availability", "max_points": 20, "earned_points": 20, "lost_points": 0 } ] }, "dns": { "records": { "A": [ "52.13.129.17", "44.232.138.75", "52.13.99.105" ], "AAAA": [], "CNAME": [], "MX": [ "0 hrc-org.mail.protection.outlook.com." ], "TXT": [ "\"canva-site-verification=BU27z66eZ1H3uSRJoHTE4w\"", "\"anthropic-domain-verification-yyvecr=91YrGVJww56QIsK7pdKRsh0BU\"", "\"yahoo-verification-key=USbK3EUCmrL++C8e4o9cR5pMKm2rRAwVIU28x3RuZww=\"", "\"validity-domain-monitoring=8GySauzDP4E6yVmUnJCODVPzZ\"", "\"mentimeter-5be229f2-30ba-466d-ae47-f7b708e4045b\"", "\"u/1JjvUHe7qT1wXfawRv9WVHi8eTHO/vMvbq7YWZ9Ok=.\"", "\"v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:spf.protection.outlook.com ~all\"", "\"google-site-verification=ZdTfSUGbYtx25b0fbZvTSOPE-7hwRtd8hfwQIrxngjg\"" ], "NS": [ "ns-1711.awsdns-21.co.uk.", "ns-1411.awsdns-48.org.", "ns-816.awsdns-38.net.", "ns-2.awsdns-00.com." ], "SOA": [ "ns-816.awsdns-38.net. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400" ], "CAA": [], "DS": [], "DNSKEY": [], "RRSIG": [], "NSEC": [], "NSEC3": [], "SRV": [], "NAPTR": [], "TLSA": [], "SSHFP": [] }, "ipv4": [ "52.13.129.17", "44.232.138.75", "52.13.99.105" ], "ipv6": [] }, "mail": { "spf": "v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:spf.protection.outlook.com ~all", "dmarc": "v=DMARC1; p=quarantine; pct=100; adkim=r; aspf=r; rua=mailto:dmarc_agg@vali.email,mailto:dmarc_agg@dmarc.250ok.net; ruf=mailto:dmarc_fr@dmarc.250ok.net; fo=1; rf=afrf", "dkim_selector": "selector1", "dkim_host": "selector1._domainkey.hrc.org", "dkim": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukhER9yqF21TvDUc7FH/tyKtGv6Y4ZoYDc52Vjrm71dgdJuSgnt0GlopkTj4W477Ip7R5NVo8fGS3jVerakszbIHt2d38WGSreNIoIiqn26sIxClq7Nkv59nmOScpp0ABRdCFYElk+m7xGF2sn3oOWhMFdshphG8UqT75t/8gCBDqzg0HV9u16FoQFKfwjMMIG5KQWe5poSnJsWrJLwsfF+/T+6eBJNhm7syIOYe9FJQz+BhHhBxQ+0j86G62ra2PlR25tq/j8po5CMrZOrxx5GAu0awvzSFitd93Mn83Npro+K/F9G8El/DdcUfHR5V319ycUAGfOQ01rRVgO9xoQIDAQAB;", "spf_analysis": { "valid": true, "lookups": 2, "final": "~all", "message": "Within the estimated limit" }, "dmarc_analysis": { "valid": true, "policy": "quarantine" }, "bimi": "v=BIMI1; l=https://bimi-host.250ok.com/56889_hrc_org.svg; a=https://bimi.entrust.net/hrc.org/certchain.pem;", "mta_sts": "", "tls_rpt": "" }, "advanced": { "ptr": "ec2-52-13-129-17.us-west-2.compute.amazonaws.com", "propagation": { "consistent": true, "results": [ { "provider": "Google", "server": "8.8.8.8", "result": [ "44.232.138.75", "52.13.129.17", "52.13.99.105" ], "time_ms": 48.61 }, { "provider": "Cloudflare", "server": "1.1.1.1", "result": [ "44.232.138.75", "52.13.129.17", "52.13.99.105" ], "time_ms": 25.49 }, { "provider": "Quad9", "server": "9.9.9.9", "result": [ "44.232.138.75", "52.13.129.17", "52.13.99.105" ], "time_ms": 86.57 }, { "provider": "OpenDNS", "server": "208.67.222.222", "result": [ "44.232.138.75", "52.13.129.17", "52.13.99.105" ], "time_ms": 104.8 }, { "provider": "AdGuard", "server": "94.140.14.14", "result": [ "44.232.138.75", "52.13.129.17", "52.13.99.105" ], "time_ms": 169.16 } ] } }, "ssl": { "available": true, "issuer": "Amazon", "subject": "hrc.org", "valid_from": "2026-05-28T19:00:00-05:00", "valid_to": "2026-12-12T17:59:59-06:00", "days_remaining": 125, "san": [ "hrc.org", "*.hrc.org" ], "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256" }, "http": { "url": "https://www.hrc.org/", "status": "HTTP/2 200 ", "http_version": "3", "headers": { "date": "Sun, 09 Aug 2026 08:51:13 GMT", "content-type": "text/html; charset=UTF-8", "content-length": "162", "location": "https://www.hrc.org/", "server": "nginx", "content-security-policy": "frame-ancestors 'self' www.hrc.org hrc.org www.thehrcfoundation.org thehrcfoundation.org hrcvirtualevent.org www.hrcvirtualevent.org timetothrive.org www.timetothrive.org reports.hrc.org chefsforequality.org www.chefsforequality.org thelei.org www.thelei.org welcomingschools.org www.welcomingschools.org mybodymyhealth.org www.mybodymyhealth.org transvisibility.day www.transvisibility.day removewalters.com www.removewalters.com comingout.day nonbinary.day pride.day pronouns.day atlanta.hrc.org austin.hrc.org chicago.hrc.org cincinnati.hrc.org cleveland.hrc.org colorado.hrc.org columbus.hrc.org dc.hrc.org dfw.hrc.org greaterny.hrc.org houston.hrc.org jackson.hrc.org kansascity.hrc.org la.hrc.org lasvegas.hrc.org minnesota.hrc.org nashville.hrc.org newengland.hrc.org nola.hrc.org northcarolina.hrc.org oclb.hrc.org orlando.hrc.org philadelphia.hrc.org phoenix.hrc.org portland.hrc.org palmspringscv.hrc.org sanantonio.hrc.org sandiego.hrc.org seattle.hrc.org sfbayarea.hrc.org southflorida.hrc.org stlouis.hrc.org utah.hrc.org wcny.hrc.org hrcnationaldinner.org www.hrcnationaldinner.org hrcnationaldinner.com www.hrcnationaldinner.com", "x-content-type-options": "nosniff", "x-xss-protection": "1; mode=block", "vary": "Accept-Encoding", "x-powered-by": "Craft CMS", "x-robots-tag": "all", "link": "; rel='canonical'", "referrer-policy": "no-referrer-when-downgrade", "x-cache": "EXPIRED" }, "security_checks": { "strict-transport-security": false, "content-security-policy": true, "x-content-type-options": true, "x-frame-options": false, "referrer-policy": true, "permissions-policy": false, "cross-origin-opener-policy": false, "cross-origin-embedder-policy": false, "cross-origin-resource-policy": false }, "server": "nginx", "powered_by": "Craft CMS" }, "webpage": { "url": "https://www.hrc.org/", "title": "HRC | Human Rights Campaign", "description": "Since 1980, we’ve led the way in fighting for LGBTQ+ equality and inclusion.", "success": true, "error": "", "status": 200 }, "network": { "52.13.129.17": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" }, "44.232.138.75": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" }, "52.13.99.105": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" } }, "smtp": { "host": "hrc-org.mail.protection.outlook.com", "ports": [ { "port": 25, "open": false, "time_ms": 25.1, "banner": "", "error": "Network is unreachable" }, { "port": 465, "open": false, "time_ms": 4020.7, "banner": "", "error": "Connection timed out" }, { "port": 587, "open": false, "time_ms": 4021.3, "banner": "", "error": "Connection timed out" } ] }, "visitor": { "ip": "216.73.217.62", "reverse": "", "country": "", "country_code": "", "region": "", "city": "", "latitude": null, "longitude": null, "isp": "", "organization": "", "asn": "", "timezone": "", "browser": "Other", "os": "Other", "language": "", "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "is_bot": true, "cloudflare": false }, "analysis_time_ms": 84.05 }