{ "ok": true, "domain": "pandora.com", "generated_at": "2026-08-08T21:58:44-05:00", "cache": { "hit": true, "ttl": 0 }, "score": { "total": 85, "label": "Good", "categories": { "dns": 80, "mail": 90, "security": 73, "network": 85, "availability": 100 }, "category_weights": { "dns": 25, "mail": 20, "security": 25, "network": 10, "availability": 20 }, "items": [ { "category": "dns", "title": "IPv4 (A)", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "1 IPv4 address(es) detected." }, { "category": "dns", "title": "IPv6 (AAAA)", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "1 IPv6 address(es) detected." }, { "category": "dns", "title": "Name server redundancy", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "4 NS record(s); 2 or more required." }, { "category": "dns", "title": "SOA record", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Authoritative zone record." }, { "category": "dns", "title": "DNSSEC chain", "max_points": 15, "earned_points": 0, "lost_points": 15, "detail": "Both DS and DNSKEY are required." }, { "category": "dns", "title": "CAA policy", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Certificate authority restriction." }, { "category": "dns", "title": "DNS propagation", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Agreement between public resolvers." }, { "category": "mail", "title": "MX records", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "2 MX record(s)." }, { "category": "mail", "title": "SPF", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "SPF policy published." }, { "category": "mail", "title": "DMARC", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "DMARC policy published." }, { "category": "mail", "title": "DKIM", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "A DKIM selector was verified." }, { "category": "mail", "title": "MTA-STS", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Mail transport policy." }, { "category": "mail", "title": "TLS-RPT", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "TLS reporting policy." }, { "category": "security", "title": "Valid TLS certificate", "max_points": 55, "earned_points": 55, "lost_points": 0, "detail": "46 day(s) remaining." }, { "category": "security", "title": "Certificate lifetime", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Full points require at least 30 days remaining." }, { "category": "security", "title": "HTTP security headers", "max_points": 35, "earned_points": 8, "lost_points": 27, "detail": "2 of 9 evaluated headers detected." }, { "category": "network", "title": "PTR reverse DNS", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "PTR: www-dc6.gslb.pandora.com" }, { "category": "network", "title": "IPv4 diversity", "max_points": 35, "earned_points": 20, "lost_points": 15, "detail": "Two or more IPv4 addresses receive full points." }, { "category": "network", "title": "IPv6 connectivity", "max_points": 35, "earned_points": 35, "lost_points": 0, "detail": "AAAA availability." }, { "category": "availability", "title": "DNS resolution", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "At least one address family must resolve." }, { "category": "availability", "title": "HTTP response", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "HTTP/2 200 " }, { "category": "availability", "title": "HTTPS final URL", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "Final URL uses HTTPS." } ], "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.", "diagnostics": [ { "level": "ok", "title": "IPv4 (A)", "detail": "1 IPv4 address(es) detected.", "category": "dns", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "ok", "title": "IPv6 (AAAA)", "detail": "1 IPv6 address(es) detected.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "Name server redundancy", "detail": "4 NS record(s); 2 or more required.", "category": "dns", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SOA record", "detail": "Authoritative zone record.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "error", "title": "DNSSEC chain", "detail": "Both DS and DNSKEY are required.", "category": "dns", "max_points": 15, "earned_points": 0, "lost_points": 15 }, { "level": "error", "title": "CAA policy", "detail": "Certificate authority restriction.", "category": "dns", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "DNS propagation", "detail": "Agreement between public resolvers.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "MX records", "detail": "2 MX record(s).", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SPF", "detail": "SPF policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DMARC", "detail": "DMARC policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DKIM", "detail": "A DKIM selector was verified.", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "error", "title": "MTA-STS", "detail": "Mail transport policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "TLS-RPT", "detail": "TLS reporting policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "Valid TLS certificate", "detail": "46 day(s) remaining.", "category": "security", "max_points": 55, "earned_points": 55, "lost_points": 0 }, { "level": "ok", "title": "Certificate lifetime", "detail": "Full points require at least 30 days remaining.", "category": "security", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "warning", "title": "HTTP security headers", "detail": "2 of 9 evaluated headers detected.", "category": "security", "max_points": 35, "earned_points": 8, "lost_points": 27 }, { "level": "ok", "title": "PTR reverse DNS", "detail": "PTR: www-dc6.gslb.pandora.com", "category": "network", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "warning", "title": "IPv4 diversity", "detail": "Two or more IPv4 addresses receive full points.", "category": "network", "max_points": 35, "earned_points": 20, "lost_points": 15 }, { "level": "ok", "title": "IPv6 connectivity", "detail": "AAAA availability.", "category": "network", "max_points": 35, "earned_points": 35, "lost_points": 0 }, { "level": "ok", "title": "DNS resolution", "detail": "At least one address family must resolve.", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTP response", "detail": "HTTP/2 200 ", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTPS final URL", "detail": "Final URL uses HTTPS.", "category": "availability", "max_points": 20, "earned_points": 20, "lost_points": 0 } ] }, "dns": { "records": { "A": [ "199.116.164.229" ], "AAAA": [ "2620:106:e001:f00d::e7" ], "CNAME": [], "MX": [ "3 mx0b-0051e301.pphosted.com.", "3 mx0a-0051e301.pphosted.com." ], "TXT": [ "\"drift-domain-verification=7dcb7704b70c0f98d5f1188a55e7fe4c1a0d0a5c8474f0b5d7feaf2a17ddaf8b\"", "\"v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all\"", "\"apple-domain-verification=GVC0xaZwt2Sv9Ivm\"", "\"stripe-verification=eb9cdfa80af377c6421610f8153fd4151acb46fe9414e78a4ce90c2d0d82f93a\"", "\"zapier-domain-verification-challenge=0c6f32b8-f62f-4918-aa85-11e2476e37ec\"", "\"google-site-verification=7rxKTJwaOBuE3vNSi4Yl0fG04rCK2xr4rYvsy2yMPgs\"", "\"stripe-verification=a2efa4b173f85f9b16a2fe262a5d7fa95a0b18f0ba884723050e917033a5af28\"", "\"MS=ms48003601\"", "\"stripe-verification=9afcd9b96859582b2edf39640758f0a7ca9bbbc04fc0acd4eda69d964978923b\"", "\"stripe-verification=6151a13c2e26e26166de3da9cbc43b4b418109e806e0fef941a34da28edc06ca\"", "\"atlassian-domain-verification=suALAhcWjB6Eq0SuX424kLGZ8kMs8yfsj4LDWz6QHyorTk7BzUFfbXXgI4pyznZy\"", "\"webexdomainverification.4C675B8AC948B136E053AB06FC0A3F65=c8670c99-cf44-4da5-a347-0e378903bd08\"", "\"shopify-verification-code=QZZP4RdLtXmhnyVfqGJxOtDrTJwdHv\"", "\"monday-com-verification=Y7tba9sDRtLGwJrmA-A2bxVKMIOuhp5g9YnzcMJifOo\"", "\"google-site-verification=ZmhaVAHHT8AaKg7hP9Mmd3mrk8AMaSh90uPg77P-Gyo\"", "\"/4SPMALLPHvERsW46Wt5HeyzV7tWXyqSCVio3D+e46JOIQ1Lx4ayzLacYa2Nani5VZLIsG6QzSbAxqQorgT8Pw==\"", "\"stripe-verification=eef61a09f3c1c4f6890acce9bff70c102c0c389cc77e9970a3b2a17e582f3b27\"", "\"jetbrains-domain-verification=1erv1ckkr599h7o8n4nnatntx\"", "\"stripe-verification=b7edf88636d477ae4501df1dbebcda1b9f3eb5f895d94a5dcaa35715fd8525a7\"", "\"airtable-verification=92001d7da07339e0b17a973f2faaa71b\"", "\"stripe-verification=46db797e734d25037c8a1966048d4d0a26f34600f23375c9ab8f1b327dc5b023\"", "\"anthropic-domain-verification-cehw0s=Q6GJ2C5R4orf8oDA6ntjc8jiI\"", "\"bugcrowd-verification=9224a322abc2e3e36bf6aef0cf1d2977\"", "\"docker-verification=09663cec-b2f4-4ce1-92a8-9bdc828efd88\"", "\"Pandora\"", "\"stripe-verification=47c5a8c489eea6dc578dfd12d08d3b7accf87c7729c8958144a35f50361cc92a\"", "\"facebook-domain-verification=nn42grx580r7pjlyzjzxv3mrnn5lpx\"", "\"onetrust-domain-verification=52ed295d1cc747c8b4a923ee0d52bb89\"", "\"stripe-verification=9ac87819ed1e8c4c43fb4806e46ee7ac5135b3ac5eb80fc1ceca8ec0bf1fd7c0\"", "\"openai-domain-verification=dv-MtwM2KzO6fmabwatU3A5suMJ\"", "\"stripe-verification=7700e585bc13984d32505fc0743dd1742a7b00ab8f89fd43edbb64b7e86eb3df\"", "\"_9ax3ucie5r4ihbdbsi4tuuy6jex2x7y\"", "\"liveramp-site-verification=3auN45Pf2H9Obu6SoSX-izAUSRjBnVPQbEnXgyJK8MQ\"", "\"make-domain-verification=0d44a7b3-d8f7-4bc0-bf24-53609a1f2fe7\"" ], "NS": [ "ns4.pandora.com.", "ns2.pandora.com.", "dns1.p05.nsone.net.", "dns2.p05.nsone.net." ], "SOA": [ "ns.savagebeast.com. sysad.savagebeast.com. 2016102653 1800 1800 43200 1800" ], "CAA": [], "DS": [], "DNSKEY": [], "RRSIG": [], "NSEC": [], "NSEC3": [], "SRV": [], "NAPTR": [], "TLSA": [], "SSHFP": [] }, "ipv4": [ "199.116.164.229" ], "ipv6": [ "2620:106:e001:f00d::e7" ] }, "mail": { "spf": "v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all", "dmarc": "v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;", "dkim_selector": "s1", "dkim_host": "s1._domainkey.pandora.com", "dkim": "k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OzWYmqlhln1Z8BTIW80AKrZZAPsRRB0VHGPR4oVUlJcZBRoIQJ4iyQ0ZKUsiXI7FDUcDyAj1PYgTqawq9LMRHjM5HR34GdisuEhpqKiZB65jl/b8ZF4/R5GHWdlMRb0pJqnmSf8Mf8y2GIWAZVovuJBVgdfPk7fTN4+KedtuCuijeVcquSTtTKM8dHTuI6qSDfmxMSKxI2lhlBR0IvA6XmvBRa0GCfsM0UTIixsx5hmRsbbMUJf3vfRs8ymOhVB0IN2vCjTY5rDgUkV9RgaUuLkif3Gd+RU2GKWGTulG1oYwC5fURSfngi4AjPEtm6QNSNeUEKdDKZNt+KaXL+yewIDAQAB", "spf_analysis": { "valid": true, "lookups": 1, "final": "~all", "message": "Within the estimated limit" }, "dmarc_analysis": { "valid": true, "policy": "reject" }, "bimi": "v=BIMI1; l=https://vmc.digicert.com/d2663bee-fea7-4267-aaaf-d044b8b6da37.svg; a=https://vmc.digicert.com/d2663bee-fea7-4267-aaaf-d044b8b6da37.pem; avp=brand;", "mta_sts": "", "tls_rpt": "" }, "advanced": { "ptr": "www-dc6.gslb.pandora.com", "propagation": { "consistent": true, "results": [ { "provider": "Google", "server": "8.8.8.8", "result": [ "199.116.164.229" ], "time_ms": 37.97 }, { "provider": "Cloudflare", "server": "1.1.1.1", "result": [ "199.116.164.229" ], "time_ms": 25.36 }, { "provider": "Quad9", "server": "9.9.9.9", "result": [ "199.116.164.229" ], "time_ms": 27.97 }, { "provider": "OpenDNS", "server": "208.67.222.222", "result": [ "199.116.164.229" ], "time_ms": 43.85 }, { "provider": "AdGuard", "server": "94.140.14.14", "result": [ "199.116.164.229" ], "time_ms": 66.9 } ] } }, "ssl": { "available": true, "issuer": "DigiCert Inc", "subject": "*.pandora.com", "valid_from": "2026-03-09T19:00:00-05:00", "valid_to": "2026-09-24T18:59:59-05:00", "days_remaining": 46, "san": [ "*.pandora.com", "pandora.com" ], "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES256-GCM-SHA384" }, "http": { "url": "https://www.pandora.com/", "status": "HTTP/2 200 ", "http_version": "3", "headers": { "date": "Sun, 09 Aug 2026 02:58:43 GMT", "server": "Apache", "location": "https://www.pandora.com", "content-type": "text/html;charset=utf-8", "strict-transport-security": "max-age=31536000", "expires": "Thu, 01 Jan 1970 00:00:00 GMT", "x-frame-options": "SAMEORIGIN", "set-cookie": "csrftoken=2c867a16f2edf001;Path=/;Domain=.pandora.com;Secure", "content-security-policy-report-only": "script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' https://*.savagebeast.com https://pandora.com https://*.pandora.com https://staging.cdn-net.com https://cdn.cookielaw.org https://assets.adobedtm.com https://*.adsafeprotected.com https://ep2.adtrafficquality.google https://fundingchoicesmessages.google.com https://*.googlesyndication.com https://*.google-analytics.com https://www.googletagmanager.com https://www.googletagservices.com https://imasdk.googleapis.com https://storage.googleapis.com https://*.doubleclick.net https://*.doubleverify.com https://pagead2.googlesyndication.com https://s0.2mdn.net https://cdn.branch.io https://app.link https://client.px-cloud.net https://connect.facebook.net https://sb.scorecardresearch.com https://secure-us.imrworldwide.com https://z.moatads.com https://lex.33across.com https://s.adroll.com https://d.adroll.com https://*.adswizz.com https://ads.revjet.com https://pix.revjet.com https://seal.verisign.com https://code.jquery.com https://snap.licdn.com; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub16b313e1658347a16504b662a893cd7e&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env%3Aproduction; report-to csp-endpoint;", "reporting-endpoints": "csp-endpoint=\"https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub16b313e1658347a16504b662a893cd7e&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env%3Aproduction\"" }, "security_checks": { "strict-transport-security": true, "content-security-policy": false, "x-content-type-options": false, "x-frame-options": true, "referrer-policy": false, "permissions-policy": false, "cross-origin-opener-policy": false, "cross-origin-embedder-policy": false, "cross-origin-resource-policy": false }, "server": "Apache", "powered_by": "" }, "webpage": { "url": "https://www.pandora.com/", "title": "Music and Podcasts, Free and On-Demand | Pandora", "description": "Play the songs, albums, playlists and podcasts you love on the all-new Pandora. Sign up for a subscription plan to stream ad-free and on-demand. Listen on your mobile phone, desktop, TV, smart speakers or in the car.", "success": true, "error": "", "status": 200 }, "network": { "199.116.164.229": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" } }, "smtp": { "host": "mx0b-0051e301.pphosted.com", "ports": [ { "port": 25, "open": false, "time_ms": 8.4, "banner": "", "error": "Connection refused" }, { "port": 465, "open": false, "time_ms": 21.5, "banner": "", "error": "Connection refused" }, { "port": 587, "open": false, "time_ms": 30.2, "banner": "", "error": "Connection refused" } ] }, "visitor": { "ip": "216.73.217.62", "reverse": "", "country": "", "country_code": "", "region": "", "city": "", "latitude": null, "longitude": null, "isp": "", "organization": "", "asn": "", "timezone": "", "browser": "Other", "os": "Other", "language": "", "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "is_bot": true, "cloudflare": false }, "analysis_time_ms": 95.53 }