{ "ok": true, "domain": "ilo.org", "generated_at": "2026-08-08T19:01:06-05:00", "cache": { "hit": true, "ttl": 0 }, "score": { "total": 90, "label": "Excellent", "categories": { "dns": 80, "mail": 90, "security": 100, "network": 70, "availability": 100 }, "category_weights": { "dns": 25, "mail": 20, "security": 25, "network": 10, "availability": 20 }, "items": [ { "category": "dns", "title": "IPv4 (A)", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "2 IPv4 address(es) detected." }, { "category": "dns", "title": "IPv6 (AAAA)", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "2 IPv6 address(es) detected." }, { "category": "dns", "title": "Name server redundancy", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "4 NS record(s); 2 or more required." }, { "category": "dns", "title": "SOA record", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Authoritative zone record." }, { "category": "dns", "title": "DNSSEC chain", "max_points": 15, "earned_points": 0, "lost_points": 15, "detail": "Both DS and DNSKEY are required." }, { "category": "dns", "title": "CAA policy", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Certificate authority restriction." }, { "category": "dns", "title": "DNS propagation", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Agreement between public resolvers." }, { "category": "mail", "title": "MX records", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "1 MX record(s)." }, { "category": "mail", "title": "SPF", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "SPF policy published." }, { "category": "mail", "title": "DMARC", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "DMARC policy published." }, { "category": "mail", "title": "DKIM", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "A DKIM selector was verified." }, { "category": "mail", "title": "MTA-STS", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Mail transport policy." }, { "category": "mail", "title": "TLS-RPT", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "TLS reporting policy." }, { "category": "security", "title": "Valid TLS certificate", "max_points": 55, "earned_points": 55, "lost_points": 0, "detail": "59 day(s) remaining." }, { "category": "security", "title": "Certificate lifetime", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Full points require at least 30 days remaining." }, { "category": "security", "title": "HTTP security headers", "max_points": 35, "earned_points": 35, "lost_points": 0, "detail": "9 of 9 evaluated headers detected." }, { "category": "network", "title": "PTR reverse DNS", "max_points": 30, "earned_points": 0, "lost_points": 30, "detail": "PTR not detected." }, { "category": "network", "title": "IPv4 diversity", "max_points": 35, "earned_points": 35, "lost_points": 0, "detail": "Two or more IPv4 addresses receive full points." }, { "category": "network", "title": "IPv6 connectivity", "max_points": 35, "earned_points": 35, "lost_points": 0, "detail": "AAAA availability." }, { "category": "availability", "title": "DNS resolution", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "At least one address family must resolve." }, { "category": "availability", "title": "HTTP response", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "HTTP/2 200 " }, { "category": "availability", "title": "HTTPS final URL", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "Final URL uses HTTPS." } ], "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.", "diagnostics": [ { "level": "ok", "title": "IPv4 (A)", "detail": "2 IPv4 address(es) detected.", "category": "dns", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "ok", "title": "IPv6 (AAAA)", "detail": "2 IPv6 address(es) detected.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "Name server redundancy", "detail": "4 NS record(s); 2 or more required.", "category": "dns", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SOA record", "detail": "Authoritative zone record.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "error", "title": "DNSSEC chain", "detail": "Both DS and DNSKEY are required.", "category": "dns", "max_points": 15, "earned_points": 0, "lost_points": 15 }, { "level": "error", "title": "CAA policy", "detail": "Certificate authority restriction.", "category": "dns", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "DNS propagation", "detail": "Agreement between public resolvers.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "MX records", "detail": "1 MX record(s).", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SPF", "detail": "SPF policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DMARC", "detail": "DMARC policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DKIM", "detail": "A DKIM selector was verified.", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "error", "title": "MTA-STS", "detail": "Mail transport policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "TLS-RPT", "detail": "TLS reporting policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "Valid TLS certificate", "detail": "59 day(s) remaining.", "category": "security", "max_points": 55, "earned_points": 55, "lost_points": 0 }, { "level": "ok", "title": "Certificate lifetime", "detail": "Full points require at least 30 days remaining.", "category": "security", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "HTTP security headers", "detail": "9 of 9 evaluated headers detected.", "category": "security", "max_points": 35, "earned_points": 35, "lost_points": 0 }, { "level": "error", "title": "PTR reverse DNS", "detail": "PTR not detected.", "category": "network", "max_points": 30, "earned_points": 0, "lost_points": 30 }, { "level": "ok", "title": "IPv4 diversity", "detail": "Two or more IPv4 addresses receive full points.", "category": "network", "max_points": 35, "earned_points": 35, "lost_points": 0 }, { "level": "ok", "title": "IPv6 connectivity", "detail": "AAAA availability.", "category": "network", "max_points": 35, "earned_points": 35, "lost_points": 0 }, { "level": "ok", "title": "DNS resolution", "detail": "At least one address family must resolve.", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTP response", "detail": "HTTP/2 200 ", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTPS final URL", "detail": "Final URL uses HTTPS.", "category": "availability", "max_points": 20, "earned_points": 20, "lost_points": 0 } ] }, "dns": { "records": { "A": [ "104.21.26.207", "172.67.168.139" ], "AAAA": [ "2606:4700:3037::ac43:a88b", "2606:4700:3037::6815:1acf" ], "CNAME": [], "MX": [ "10 iloprod.mail.protection.outlook.com." ], "TXT": [ "\"4c92cxqhzpyswwmvytbpvqz6zyg2xn2k\"", "\"google-site-verification=Az9u5z_7kbzviEQHtpkbT1ik_BaMpP-rqZ7SOQ5U3HE\"", "\"docusign=d9d52c66-97ac-4fa4-8137-0265d35ac6c2\"", "\"docusign=ee49c747-71d4-4aaa-9d41-f750460e272c\"", "\"73ptpluqmise981bjtn1gu3j1v\"", "\"v=spf1 ip4:193.134.192.0/21 include:spf-other.%{d} include:spf-uniccspf.%{d} include:exlibrisgroupspf.%{d} include:spf.protection.outlook.com include:sendersrv.com include:_spf-dc33.sapsf.eu include:sendgrid.net -all\"", "\"atlassian-domain-verification=14cmYakhgWPiJs9Ba8VfSBLpC2fMwMd1Tybdc/8iBOhZP8rZbGjctXUMCtE/9/1/\"", "\"linkedin-site-verification=ee7865bc-0d5a-43e8-b1f7-4e5414e0f8a7\"", "\"_6fcnvbis4pbap2xcfuya44q9azda5li\"", "\"5hn4en6t18rvlstl5vnlr9jlns\"", "\"MS=ms58449652\"", "\"72bb662b198b797a42fff562bf8fcf7f\"", "\"atlassian-sending-domain-verification=dbb52602-4c43-4f05-8821-d258aab55487\"", "\"8m56k8d8fh5onhv5r7q68qkm5n\"" ], "NS": [ "ns1-08.azure-dns.com.", "ns4-08.azure-dns.info.", "ns3-08.azure-dns.org.", "ns2-08.azure-dns.net." ], "SOA": [ "ns1-08.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 3600 300 2419200 300" ], "CAA": [], "DS": [], "DNSKEY": [], "RRSIG": [], "NSEC": [], "NSEC3": [], "SRV": [], "NAPTR": [], "TLSA": [], "SSHFP": [] }, "ipv4": [ "104.21.26.207", "172.67.168.139" ], "ipv6": [ "2606:4700:3037::ac43:a88b", "2606:4700:3037::6815:1acf" ] }, "mail": { "spf": "v=spf1 ip4:193.134.192.0/21 include:spf-other.%{d} include:spf-uniccspf.%{d} include:exlibrisgroupspf.%{d} include:spf.protection.outlook.com include:sendersrv.com include:_spf-dc33.sapsf.eu include:sendgrid.net -all", "dmarc": "v=DMARC1;p=reject;rua=mailto:2ec7dbda72@rua.easydmarc.eu;ruf=mailto:2ec7dbda72@ruf.easydmarc.eu;fo=1;", "dkim_selector": "selector1", "dkim_host": "selector1._domainkey.ilo.org", "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCmL1Io26jnwcAkel4LXK6He2DLFfhKJro/vjaDYIpDBZz8MBjYbjmr6eI+c50JrACurF/UECPF0TC0vuAhc+WIigP1gc8vzUQwwbFIrCE5MN9IWkT5sS6DyZD7AoR5umCtE0Wr0DZKzrcaB7gf/1N5DMM78pIIzN2VEcl5Bu3WLwIDAQAB;", "spf_analysis": { "valid": true, "lookups": 7, "final": "-all", "message": "Within the estimated limit" }, "dmarc_analysis": { "valid": true, "policy": "reject" }, "bimi": "", "mta_sts": "", "tls_rpt": "" }, "advanced": { "ptr": "", "propagation": { "consistent": true, "results": [ { "provider": "Google", "server": "8.8.8.8", "result": [ "104.21.26.207", "172.67.168.139" ], "time_ms": 56.83 }, { "provider": "Cloudflare", "server": "1.1.1.1", "result": [ "104.21.26.207", "172.67.168.139" ], "time_ms": 32.63 }, { "provider": "Quad9", "server": "9.9.9.9", "result": [ "104.21.26.207", "172.67.168.139" ], "time_ms": 43.56 }, { "provider": "OpenDNS", "server": "208.67.222.222", "result": [ "104.21.26.207", "172.67.168.139" ], "time_ms": 61.72 }, { "provider": "AdGuard", "server": "94.140.14.14", "result": [ "104.21.26.207", "172.67.168.139" ], "time_ms": 403.93 } ] } }, "ssl": { "available": true, "issuer": "Google Trust Services", "subject": "ilo.org", "valid_from": "2026-07-09T01:45:32-05:00", "valid_to": "2026-10-07T02:45:14-05:00", "days_remaining": 59, "san": [ "ilo.org" ], "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384" }, "http": { "url": "https://www.ilo.org/", "status": "HTTP/2 200 ", "http_version": "3", "headers": { "date": "Sun, 09 Aug 2026 00:00:58 GMT", "content-type": "text/html; charset=UTF-8", "location": "https://www.ilo.org/", "server": "cloudflare", "cf-ray": "a2827bcadc604342-STL", "cache-control": "max-age=86400, public", "x-drupal-dynamic-cache": "HIT", "content-language": "en", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "expires": "Sun, 19 Nov 1978 05:00:00 GMT", "x-consumer-id": "default_consumer", "surrogate-key": "sgka 2qb4 fa8f 2b3q qrj0 9mud ecpb 54ls p0qp 1a50 rcsn tqnm tut3 ibth jbl8 aj6m 5d41 v0k1 ln39 7dv9 45fp 8ljl hrlq f3l1 r76k ebf6 bp1k jg68 gq0d flpt kt1n burn 5ksb jd76 8p05 nfur takt r93a 4cv4 uk7q pmql h643 7h23 dthf qhbh d93v 0o0m ni16 1oi1 7l8l k4ld 4c22 8u7p kkb1 r9kl vns9 q5mg rqsa 1bl0 ohe6 9jek 883u ha27 80a3 3q1a pn8p klve sd17 16co gsjd 6rl0 ofkg ggnj gh35 7h4t 9005 rkij ca5r hon2 qf6p aj4e mlot g7ob qn8v hm2i onfr cq7i bqtu 8un4 vcuj l6oj 7pnd jvin qq4g ereh 6ck8 9776 7ri3 425u 752l bl2k p42m 5okr dmkf ihgp 0103 n5ec 6325 i44p gn3h agdq", "content-security-policy": "default-src 'none'; manifest-src 'self'; worker-src 'self'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://js-agent.newrelic.com https://bam.nr-data.net https://connect.facebook.net https://platform.twitter.com https://embedr.flickr.com https://widgets.flickr.com https://www.youtube.com https://player.vimeo.com/api/player.js https://*.vimeocdn.com https://p.trellocdn.com https://*.clarity.ms https://s.go-mpulse.net https://datawrapper.dwcdn.net https://public.flourish.studio https://static.cloudflareinsights.com https://www.google-analytics.com/analytics.js https://w.soundcloud.com/player/api.js; object-src 'none'; style-src 'self' 'report-sample' 'unsafe-inline' https://fonts.googleapis.com https://platform.twitter.com https://cdnjs.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://vjs.zencdn.net https://pt.dwcdn.net https://datawrapper.dwcdn.net https://public.flourish.studio; img-src 'self' data: https://www.googletagmanager.com https://fonts.gstatic.com https://geoservices.un.org https://i.ytimg.com https://syndication.twitter.com https://pbs.twimg.com https://embedr.flickr.com https://*.staticflickr.com https://*.vimeocdn.com https://*.vimeo.com https://*.clarity.ms https://c.bing.com https://static.dwcdn.net https://datawrapper.dwcdn.net https://public.flourish.studio; media-src 'self' data:; form-action 'self'; frame-src 'self' https://*.soundcloud.com https://*.dwcdn.net https://*.x.com https://*.tiktok.com https://*.walls.io https://www.youtube.com https://www.youtube-nocookie.com https://*.youku.com https://youtu.be https://www.facebook.com https://*.instagram.com https://*.linkedin.com https://trello.com https://player.vimeo.com https://platform.twitter.com https://syndication.twitter.com https://www.flickr.com https://datawrapper.dwcdn.net https://www.googletagmanager.com https://public.flourish.studio https://flo.uri.sh; frame-ancestors 'self'; child-src 'self' https://*.soundcloud.com https://*.dwcdn.net https://*.x.com https://*.tiktok.com https://*.walls.io https://www.youtube.com https://www.youtube-nocookie.com https://*.youku.com https://youtu.be https://www.facebook.com https://*.instagram.com https://*.linkedin.com https://trello.com https://player.vimeo.com https://platform.twitter.com https://syndication.twitter.com https://www.flickr.com https://datawrapper.dwcdn.net https://public.flourish.studio; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://static.dwcdn.net; connect-src 'self' https://www.google.com https://www.googletagmanager.com https://*.google-analytics.com https://maps.googleapis.com https://embedr.flickr.com https://vimeo.com https://bam.nr-data.net https://*.clarity.ms https://c.go-mpulse.net https://datawrapper.dwcdn.net https://public.flourish.studio; base-uri 'self'; report-uri https://ilopublic.report-uri.com/r/d/csp/enforce; upgrade-insecure-requests", "report-to": "{'group':'default','max_age':31536000,'endpoints':[{'url':'https://ilopublic.report-uri.com/a/d/g '}],'include_subdomains':true}", "cross-origin-embedder-policy": "unsafe-none;report-to=\"default\"", "cross-origin-opener-policy": "same-origin; report-to=\"default\"", "cross-origin-resource-policy": "same-origin", "x-permitted-cross-domain-policies": "none", "x-xss-protection": "0", "strict-transport-security": "max-age=31536000; includeSubDomains", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "accelerometer=(), autoplay=(self \"https://www.youtube.com/embed\"), camera=(), clipboard-read=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()", "x-drupal-cache": "HIT", "last-modified": "Sat, 08 Aug 2026 13:23:12 GMT", "set-cookie": "__cf_bm=iyaoqAcuh5_dh3m3h5NBq1gH.EbqjBERo5OSYEy2iaI-1786233658.0570374-1.0.1.1-b9ISkdqS3bYo5VgmVjxwkG2rJLSgrPsBfYUidrL_Vxrbe4ECa8zxy2Kx3m4S2Na7mS7_DO85jRb_yw63JhKTFxB5ErwmI6Q.Ha1Q3KjqzVY4JLV03.ptTMBk9c2PsF9.; HttpOnly; SameSite=None; Secure; Path=/; Domain=ilo.org; Expires=Sun, 09 Aug 2026 00:30:58 GMT", "x-request-id": "v-b8a6e3b4-932c-11f1-b70d-e3559a062be2", "x-ah-environment": "prod", "x-geo-country": "US", "vary": "Cookie,X-Consumer-ID,Accept-Encoding,X-Geo-Country", "age": "38087", "via": "varnish", "x-cache": "HIT", "x-cache-hits": "6782", "cf-cache-status": "DYNAMIC" }, "security_checks": { "strict-transport-security": true, "content-security-policy": true, "x-content-type-options": true, "x-frame-options": true, "referrer-policy": true, "permissions-policy": true, "cross-origin-opener-policy": true, "cross-origin-embedder-policy": true, "cross-origin-resource-policy": true }, "server": "cloudflare", "powered_by": "" }, "webpage": { "url": "https://www.ilo.org/", "title": "ILO Homepage | International Labour Organization", "description": "The official website of the International Labour Organization (ILO), dedicated to promoting social justice and internationally recognized human and labour rights.", "success": true, "error": "", "status": 206 }, "network": { "104.21.26.207": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" }, "172.67.168.139": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" } }, "smtp": { "host": "iloprod.mail.protection.outlook.com", "ports": [ { "port": 25, "open": false, "time_ms": 18.4, "banner": "", "error": "Network is unreachable" }, { "port": 465, "open": false, "time_ms": 4032, "banner": "", "error": "Connection timed out" }, { "port": 587, "open": false, "time_ms": 4018.7, "banner": "", "error": "Connection timed out" } ] }, "visitor": { "ip": "216.73.217.62", "reverse": "", "country": "", "country_code": "", "region": "", "city": "", "latitude": null, "longitude": null, "isp": "", "organization": "", "asn": "", "timezone": "", "browser": "Other", "os": "Other", "language": "", "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "is_bot": true, "cloudflare": false }, "analysis_time_ms": 82.4 }