{
"ok": true,
"domain": "labour.org.uk",
"generated_at": "2026-08-10T14:34:16-05:00",
"cache": {
"hit": true,
"ttl": 0
},
"score": {
"total": 84,
"label": "Good",
"categories": {
"dns": 80,
"mail": 100,
"security": 69,
"network": 70,
"availability": 100
},
"category_weights": {
"dns": 25,
"mail": 20,
"security": 25,
"network": 10,
"availability": 20
},
"items": [
{
"category": "dns",
"title": "IPv4 (A)",
"max_points": 30,
"earned_points": 30,
"lost_points": 0,
"detail": "2 IPv4 address(es) detected."
},
{
"category": "dns",
"title": "IPv6 (AAAA)",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "2 IPv6 address(es) detected."
},
{
"category": "dns",
"title": "Name server redundancy",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "2 NS record(s); 2 or more required."
},
{
"category": "dns",
"title": "SOA record",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Authoritative zone record."
},
{
"category": "dns",
"title": "DNSSEC chain",
"max_points": 15,
"earned_points": 0,
"lost_points": 15,
"detail": "Both DS and DNSKEY are required."
},
{
"category": "dns",
"title": "CAA policy",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "Certificate authority restriction."
},
{
"category": "dns",
"title": "DNS propagation",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Agreement between public resolvers."
},
{
"category": "mail",
"title": "MX records",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "1 MX record(s)."
},
{
"category": "mail",
"title": "SPF",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "SPF policy published."
},
{
"category": "mail",
"title": "DMARC",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "DMARC policy published."
},
{
"category": "mail",
"title": "DKIM",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "A DKIM selector was verified."
},
{
"category": "mail",
"title": "MTA-STS",
"max_points": 5,
"earned_points": 5,
"lost_points": 0,
"detail": "Mail transport policy."
},
{
"category": "mail",
"title": "TLS-RPT",
"max_points": 5,
"earned_points": 5,
"lost_points": 0,
"detail": "TLS reporting policy."
},
{
"category": "security",
"title": "Valid TLS certificate",
"max_points": 55,
"earned_points": 55,
"lost_points": 0,
"detail": "57 day(s) remaining."
},
{
"category": "security",
"title": "Certificate lifetime",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Full points require at least 30 days remaining."
},
{
"category": "security",
"title": "HTTP security headers",
"max_points": 35,
"earned_points": 4,
"lost_points": 31,
"detail": "1 of 9 evaluated headers detected."
},
{
"category": "network",
"title": "PTR reverse DNS",
"max_points": 30,
"earned_points": 0,
"lost_points": 30,
"detail": "PTR not detected."
},
{
"category": "network",
"title": "IPv4 diversity",
"max_points": 35,
"earned_points": 35,
"lost_points": 0,
"detail": "Two or more IPv4 addresses receive full points."
},
{
"category": "network",
"title": "IPv6 connectivity",
"max_points": 35,
"earned_points": 35,
"lost_points": 0,
"detail": "AAAA availability."
},
{
"category": "availability",
"title": "DNS resolution",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "At least one address family must resolve."
},
{
"category": "availability",
"title": "HTTP response",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "HTTP/2 200 "
},
{
"category": "availability",
"title": "HTTPS final URL",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "Final URL uses HTTPS."
}
],
"methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
"diagnostics": [
{
"level": "ok",
"title": "IPv4 (A)",
"detail": "2 IPv4 address(es) detected.",
"category": "dns",
"max_points": 30,
"earned_points": 30,
"lost_points": 0
},
{
"level": "ok",
"title": "IPv6 (AAAA)",
"detail": "2 IPv6 address(es) detected.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "Name server redundancy",
"detail": "2 NS record(s); 2 or more required.",
"category": "dns",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SOA record",
"detail": "Authoritative zone record.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "error",
"title": "DNSSEC chain",
"detail": "Both DS and DNSKEY are required.",
"category": "dns",
"max_points": 15,
"earned_points": 0,
"lost_points": 15
},
{
"level": "error",
"title": "CAA policy",
"detail": "Certificate authority restriction.",
"category": "dns",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "ok",
"title": "DNS propagation",
"detail": "Agreement between public resolvers.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "MX records",
"detail": "1 MX record(s).",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SPF",
"detail": "SPF policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DMARC",
"detail": "DMARC policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DKIM",
"detail": "A DKIM selector was verified.",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "MTA-STS",
"detail": "Mail transport policy.",
"category": "mail",
"max_points": 5,
"earned_points": 5,
"lost_points": 0
},
{
"level": "ok",
"title": "TLS-RPT",
"detail": "TLS reporting policy.",
"category": "mail",
"max_points": 5,
"earned_points": 5,
"lost_points": 0
},
{
"level": "ok",
"title": "Valid TLS certificate",
"detail": "57 day(s) remaining.",
"category": "security",
"max_points": 55,
"earned_points": 55,
"lost_points": 0
},
{
"level": "ok",
"title": "Certificate lifetime",
"detail": "Full points require at least 30 days remaining.",
"category": "security",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "warning",
"title": "HTTP security headers",
"detail": "1 of 9 evaluated headers detected.",
"category": "security",
"max_points": 35,
"earned_points": 4,
"lost_points": 31
},
{
"level": "error",
"title": "PTR reverse DNS",
"detail": "PTR not detected.",
"category": "network",
"max_points": 30,
"earned_points": 0,
"lost_points": 30
},
{
"level": "ok",
"title": "IPv4 diversity",
"detail": "Two or more IPv4 addresses receive full points.",
"category": "network",
"max_points": 35,
"earned_points": 35,
"lost_points": 0
},
{
"level": "ok",
"title": "IPv6 connectivity",
"detail": "AAAA availability.",
"category": "network",
"max_points": 35,
"earned_points": 35,
"lost_points": 0
},
{
"level": "ok",
"title": "DNS resolution",
"detail": "At least one address family must resolve.",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTP response",
"detail": "HTTP/2 200 ",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTPS final URL",
"detail": "Final URL uses HTTPS.",
"category": "availability",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
}
]
},
"dns": {
"records": {
"A": [
"104.18.7.235",
"104.18.6.235"
],
"AAAA": [
"2606:4700::6812:7eb",
"2606:4700::6812:6eb"
],
"CNAME": [],
"MX": [
"0 labour-org-uk.mail.protection.outlook.com."
],
"TXT": [
"\"adobe-idp-site-verification=4309901c747f0d35c5b46e1664d8c30b587d2f7c93573c2ce2a629183b2b2c0d\"",
"\"teamviewer-sso-verification=3009afdf29c343d9a8f95e3a742da52a\"",
"\"heroku-domain-verification=tdssfa3vgbcnvtefpabclxtr5kqdlbt3ncanhg4e/na\"",
"\"2D8C29A940\"",
"\"MS=ms50938186\"",
"\"v=spf1 include:sendgrid.net include:spf.protection.outlook.com include:mailgun.org include:servers.mcsv.net include:_spf.e-activist.com include:amazonses.com ip4:208.84.65.213 ip4:67.231.157.1 ip4:157.231.208.92 ip4:82.132.239.215 ip4:62.232.209.16/28 ip4\" \":89.197.173.200/29 ip4:37.130.251.32/28 ip4:62.232.254.40/29 ip4:89.197.176.200/30 ip4:91.186.188.61 ip4:205.220.182.52/24 ip4:91.186.188.231 ip4:35.214.53.2 ip4:45.157.41.101 ip4:92.207.79.8/30 ip4:205.220.170.52 ip4:205.220.182.52 ip4:89.197.145.244/30 \" \"ip4:62.232.209.120/29 ip4:212.38.173.36 ip4:205.139.105.160/27 ip4:205.139.105.192/28 ~all\"",
"\"apple-domain-verification=X3852bK30hHjgGst\"",
"\"google-site-verification=9wLtKHQirRUdOMVZO53EtX9PAgk-C5PBEwnN8E9SBRA\"",
"\"airtable-verification=33c9c6bd9069f82c92b9ed261e335f83\"",
"\"jamf-site-verification=un6HriO7Pz1mvUSbyLASeQ\"",
"\"v1ysnksr6m261swr7vvx6pcb2bwvbvtx\"",
"\"atlassian-sending-domain-verification=24f07fce-ca24-4b8e-8b6f-e870f82538e3\"",
"\"google-site-verification=XRaLTGWoJqEcCho17Z1tS69MytR4nzwbwf5MEmGz-YU\"",
"\"access-domain-verification=308a56ad0306c9c984282d7ea15cfb5cd869b1687a33a4a4f049dc30e250544a\"",
"\"9d6db4c590b08043c7b8ead5a82f12514f082da76834a3f77a4b9e63fae32af0\"",
"\"google-site-verification=C0ywrlv4SMuvIXLvjlLxuxQM3LipIY9p06Jngr5lftE\"",
"\"anthropic-domain-verification-tsndb6=ZFSVfscIr6vB8ZiZpw189WcTP\"",
"\"openai-domain-verification=dv-jLLsjDtyBau3WeMsY0Y7ulpX\"",
"\"google-site-verification=PhwewA9yIp7oO2La4yUrBYUHgf7TOdRY284xjYkMhOo\"",
"\"google-site-verification=-2nGISIzgNjfyVi2lr2Qbtn-LBvCPsfWSqhDDh4X_ZY\"",
"\"ZOOM_verify_fK5sHnI9ExKVHD3KY8zQBh\""
],
"NS": [
"arya.ns.cloudflare.com.",
"nile.ns.cloudflare.com."
],
"SOA": [
"arya.ns.cloudflare.com. dns.cloudflare.com. 2411597149 10000 2400 604800 1800"
],
"CAA": [],
"DS": [],
"DNSKEY": [],
"RRSIG": [],
"NSEC": [],
"NSEC3": [],
"SRV": [],
"NAPTR": [],
"TLSA": [],
"SSHFP": []
},
"ipv4": [
"104.18.7.235",
"104.18.6.235"
],
"ipv6": [
"2606:4700::6812:7eb",
"2606:4700::6812:6eb"
]
},
"mail": {
"spf": "v=spf1 include:sendgrid.net include:spf.protection.outlook.com include:mailgun.org include:servers.mcsv.net include:_spf.e-activist.com include:amazonses.com ip4:208.84.65.213 ip4:67.231.157.1 ip4:157.231.208.92 ip4:82.132.239.215 ip4:62.232.209.16/28 ip4:89.197.173.200/29 ip4:37.130.251.32/28 ip4:62.232.254.40/29 ip4:89.197.176.200/30 ip4:91.186.188.61 ip4:205.220.182.52/24 ip4:91.186.188.231 ip4:35.214.53.2 ip4:45.157.41.101 ip4:92.207.79.8/30 ip4:205.220.170.52 ip4:205.220.182.52 ip4:89.197.145.244/30 ip4:62.232.209.120/29 ip4:212.38.173.36 ip4:205.139.105.160/27 ip4:205.139.105.192/28 ~all",
"dmarc": "v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc-rua@dmarc.service.gov.uk,mailto:dmarc_agg@vali.email;",
"dkim_selector": "selector1",
"dkim_host": "selector1._domainkey.labour.org.uk",
"dkim": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13MsLm3Unws+nCZ5E3wo12uBn35+qWVRqOtYV/1UcV6TnHrxQX3cmrwlLjZ7IA4bqWHGW72RV25um6Zy9F4bLXCwCnJ6ftU8SsxUiSsje0Sxw6uKuStLdNXe2PRGZSICMnj+N1k+lWrZBBQCaGpNjZEawiGi/oVpDCdtlSwqma7e3V9R2Yl/YZ5Zi3b4mbYNJgUEpAmfr6gebN2fsZ4wnWiBcQ0bs1i2xrGsmgZh2Lc0sul8RRCiZ4s5U/P2yBKANnIffMZGj+B9Ag5Ca/vUZ8JlyLtmLiQWDa32y4JhPVhs0eVaLTaB+m0u/WbnYhxCc1bkYqRw44ASFZ6efwKohQIDAQAB;",
"spf_analysis": {
"valid": true,
"lookups": 6,
"final": "~all",
"message": "Within the estimated limit"
},
"dmarc_analysis": {
"valid": true,
"policy": "quarantine"
},
"bimi": "",
"mta_sts": "v=STSv1; id=20240608",
"tls_rpt": "v=TLSRPTv1;rua=mailto:tls-rua@mailcheck.service.ncsc.gov.uk"
},
"advanced": {
"ptr": "",
"propagation": {
"consistent": true,
"results": [
{
"provider": "Google",
"server": "8.8.8.8",
"result": [
"104.18.6.235",
"104.18.7.235"
],
"time_ms": 114.56
},
{
"provider": "Cloudflare",
"server": "1.1.1.1",
"result": [
"104.18.6.235",
"104.18.7.235"
],
"time_ms": 40.32
},
{
"provider": "Quad9",
"server": "9.9.9.9",
"result": [
"104.18.6.235",
"104.18.7.235"
],
"time_ms": 45.13
},
{
"provider": "OpenDNS",
"server": "208.67.222.222",
"result": [
"104.18.6.235",
"104.18.7.235"
],
"time_ms": 169.49
},
{
"provider": "AdGuard",
"server": "94.140.14.14",
"result": [
"104.18.6.235",
"104.18.7.235"
],
"time_ms": 145.57
}
]
}
},
"ssl": {
"available": true,
"issuer": "Let's Encrypt",
"subject": "labour.org.uk",
"valid_from": "2026-07-08T14:54:24-05:00",
"valid_to": "2026-10-06T14:54:23-05:00",
"days_remaining": 57,
"san": [
"labour.org.uk"
],
"protocol": "TLSv1.3",
"cipher": "TLS_AES_256_GCM_SHA384"
},
"http": {
"url": "https://labour.org.uk/",
"status": "HTTP/2 200 ",
"http_version": "3",
"headers": {
"date": "Mon, 10 Aug 2026 19:34:08 GMT",
"content-type": "text/html; charset=UTF-8",
"report-to": "{\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t2HZucBb5b6ApniEG7uwSNHp9hnZiDz44%2Fwg0u3RSlkkhSlMTOw1gGyosqxnd052zO44q8%2B%2BBltutXu%2BvViH8dGvnmadZm9n%2F1H%2BWtDTK3yrE0SCInr39y94bgZWacA%3D\"}]}",
"cf-apo-via": "origin,host",
"cf-cache-status": "BYPASS",
"link": "; rel=\"https://api.w.org/\", ; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", ; rel=shortlink",
"server": "cloudflare",
"vary": "Accept-Encoding",
"nel": "{\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}",
"ki-cf-cache-status": "BYPASS",
"ki-edge-o2o": "yes",
"x-content-type-options": "nosniff",
"x-edge-location-klb": "1",
"ki-cache-type": "None",
"ki-edge": "v=28.4.5;mv=99.9.9",
"ki-origin": "o1i",
"x-kinsta-cache": "HIT",
"set-cookie": "__cf_bm=RcOtSlSq504AoLnibhAqEixguWC56Of9bqg42VlmtAA-1786390447.8697715-1.0.1.1-bxjz3iIe5wpqe7ROwYo2zP2fwDl8n5vvgb2YPiFpgbU2S1yjRCuwbdW5BJZlbqZpYK0yAxgznU9kQQNykGvxRnbJlUm6rEgOy1BF6ziQ0tQs4iWB2cw5HaQO4ABdDbl1; HttpOnly; SameSite=None; Secure; Path=/; Domain=labour.org.uk; Expires=Mon, 10 Aug 2026 20:04:08 GMT",
"expires": "Mon, 10 Aug 2026 23:34:08 GMT",
"cache-control": "public, max-age=14400",
"cf-ray": "a2916fab2a914a77-STL"
},
"security_checks": {
"strict-transport-security": false,
"content-security-policy": false,
"x-content-type-options": true,
"x-frame-options": false,
"referrer-policy": false,
"permissions-policy": false,
"cross-origin-opener-policy": false,
"cross-origin-embedder-policy": false,
"cross-origin-resource-policy": false
},
"server": "cloudflare",
"powered_by": ""
},
"webpage": {
"url": "https://labour.org.uk/",
"title": "The Labour Party",
"description": "Labour is delivering our Plan for Change. Get involved today.",
"success": true,
"error": "",
"status": 200
},
"network": {
"104.18.7.235": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
},
"104.18.6.235": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
}
},
"smtp": {
"host": "labour-org-uk.mail.protection.outlook.com",
"ports": [
{
"port": 25,
"open": false,
"time_ms": 25.2,
"banner": "",
"error": "Network is unreachable"
},
{
"port": 465,
"open": false,
"time_ms": 4034.7,
"banner": "",
"error": "Connection timed out"
},
{
"port": 587,
"open": false,
"time_ms": 4057.7,
"banner": "",
"error": "Connection timed out"
}
]
},
"visitor": {
"ip": "216.73.217.62",
"reverse": "",
"country": "",
"country_code": "",
"region": "",
"city": "",
"latitude": null,
"longitude": null,
"isp": "",
"organization": "",
"asn": "",
"timezone": "",
"browser": "Other",
"os": "Other",
"language": "",
"user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
"is_bot": true,
"cloudflare": false
},
"analysis_time_ms": 83.01
}