{
"ok": true,
"domain": "propublica.org",
"generated_at": "2026-08-08T21:07:55-05:00",
"cache": {
"hit": true,
"ttl": 0
},
"score": {
"total": 86,
"label": "Good",
"categories": {
"dns": 80,
"mail": 90,
"security": 73,
"network": 100,
"availability": 100
},
"category_weights": {
"dns": 25,
"mail": 20,
"security": 25,
"network": 10,
"availability": 20
},
"items": [
{
"category": "dns",
"title": "IPv4 (A)",
"max_points": 30,
"earned_points": 30,
"lost_points": 0,
"detail": "5 IPv4 address(es) detected."
},
{
"category": "dns",
"title": "IPv6 (AAAA)",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "5 IPv6 address(es) detected."
},
{
"category": "dns",
"title": "Name server redundancy",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "4 NS record(s); 2 or more required."
},
{
"category": "dns",
"title": "SOA record",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Authoritative zone record."
},
{
"category": "dns",
"title": "DNSSEC chain",
"max_points": 15,
"earned_points": 0,
"lost_points": 15,
"detail": "Both DS and DNSKEY are required."
},
{
"category": "dns",
"title": "CAA policy",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "Certificate authority restriction."
},
{
"category": "dns",
"title": "DNS propagation",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Agreement between public resolvers."
},
{
"category": "mail",
"title": "MX records",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "5 MX record(s)."
},
{
"category": "mail",
"title": "SPF",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "SPF policy published."
},
{
"category": "mail",
"title": "DMARC",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "DMARC policy published."
},
{
"category": "mail",
"title": "DKIM",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "A DKIM selector was verified."
},
{
"category": "mail",
"title": "MTA-STS",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "Mail transport policy."
},
{
"category": "mail",
"title": "TLS-RPT",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "TLS reporting policy."
},
{
"category": "security",
"title": "Valid TLS certificate",
"max_points": 55,
"earned_points": 55,
"lost_points": 0,
"detail": "185 day(s) remaining."
},
{
"category": "security",
"title": "Certificate lifetime",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Full points require at least 30 days remaining."
},
{
"category": "security",
"title": "HTTP security headers",
"max_points": 35,
"earned_points": 8,
"lost_points": 27,
"detail": "2 of 9 evaluated headers detected."
},
{
"category": "network",
"title": "PTR reverse DNS",
"max_points": 30,
"earned_points": 30,
"lost_points": 0,
"detail": "PTR: ec2-44-215-190-130.compute-1.amazonaws.com"
},
{
"category": "network",
"title": "IPv4 diversity",
"max_points": 35,
"earned_points": 35,
"lost_points": 0,
"detail": "Two or more IPv4 addresses receive full points."
},
{
"category": "network",
"title": "IPv6 connectivity",
"max_points": 35,
"earned_points": 35,
"lost_points": 0,
"detail": "AAAA availability."
},
{
"category": "availability",
"title": "DNS resolution",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "At least one address family must resolve."
},
{
"category": "availability",
"title": "HTTP response",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "HTTP/2 200 "
},
{
"category": "availability",
"title": "HTTPS final URL",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "Final URL uses HTTPS."
}
],
"methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
"diagnostics": [
{
"level": "ok",
"title": "IPv4 (A)",
"detail": "5 IPv4 address(es) detected.",
"category": "dns",
"max_points": 30,
"earned_points": 30,
"lost_points": 0
},
{
"level": "ok",
"title": "IPv6 (AAAA)",
"detail": "5 IPv6 address(es) detected.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "Name server redundancy",
"detail": "4 NS record(s); 2 or more required.",
"category": "dns",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SOA record",
"detail": "Authoritative zone record.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "error",
"title": "DNSSEC chain",
"detail": "Both DS and DNSKEY are required.",
"category": "dns",
"max_points": 15,
"earned_points": 0,
"lost_points": 15
},
{
"level": "error",
"title": "CAA policy",
"detail": "Certificate authority restriction.",
"category": "dns",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "ok",
"title": "DNS propagation",
"detail": "Agreement between public resolvers.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "MX records",
"detail": "5 MX record(s).",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SPF",
"detail": "SPF policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DMARC",
"detail": "DMARC policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DKIM",
"detail": "A DKIM selector was verified.",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "error",
"title": "MTA-STS",
"detail": "Mail transport policy.",
"category": "mail",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "error",
"title": "TLS-RPT",
"detail": "TLS reporting policy.",
"category": "mail",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "ok",
"title": "Valid TLS certificate",
"detail": "185 day(s) remaining.",
"category": "security",
"max_points": 55,
"earned_points": 55,
"lost_points": 0
},
{
"level": "ok",
"title": "Certificate lifetime",
"detail": "Full points require at least 30 days remaining.",
"category": "security",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "warning",
"title": "HTTP security headers",
"detail": "2 of 9 evaluated headers detected.",
"category": "security",
"max_points": 35,
"earned_points": 8,
"lost_points": 27
},
{
"level": "ok",
"title": "PTR reverse DNS",
"detail": "PTR: ec2-44-215-190-130.compute-1.amazonaws.com",
"category": "network",
"max_points": 30,
"earned_points": 30,
"lost_points": 0
},
{
"level": "ok",
"title": "IPv4 diversity",
"detail": "Two or more IPv4 addresses receive full points.",
"category": "network",
"max_points": 35,
"earned_points": 35,
"lost_points": 0
},
{
"level": "ok",
"title": "IPv6 connectivity",
"detail": "AAAA availability.",
"category": "network",
"max_points": 35,
"earned_points": 35,
"lost_points": 0
},
{
"level": "ok",
"title": "DNS resolution",
"detail": "At least one address family must resolve.",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTP response",
"detail": "HTTP/2 200 ",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTPS final URL",
"detail": "Final URL uses HTTPS.",
"category": "availability",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
}
]
},
"dns": {
"records": {
"A": [
"44.215.190.130",
"100.51.16.150",
"18.204.145.74",
"54.85.244.33",
"52.20.189.67"
],
"AAAA": [
"2600:1f18:12d2:f302:b922:cae4:b4b2:e767",
"2600:1f18:12d2:f304:e00e:2af9:a504:308b",
"2600:1f18:12d2:f303:b25:a34a:f8d7:faa8",
"2600:1f18:12d2:f300:be63:ce01:9b29:4ac5",
"2600:1f18:12d2:f301:32bb:10ff:bb07:c1ba"
],
"CNAME": [],
"MX": [
"5 alt1.aspmx.l.google.com.",
"10 alt4.aspmx.l.google.com.",
"5 alt2.aspmx.l.google.com.",
"1 aspmx.l.google.com.",
"10 alt3.aspmx.l.google.com."
],
"TXT": [
"\"TAILSCALE-urHi9btZyi8vhQ0APxKN\"",
"\"pardot_125411_*=1aa3d6ad52182561be9c1b967da2072a1c3e1227753d13eeee8b687a242a7bda\"",
"\"google-site-verification=bBRJ2Er5YwKMewt-73zOZq2x8kaXkEwuS0VBQtnZAQI\"",
"\"google-site-verification=qQTlqqAr1kB0vPTTh7Vuc1wxu-Ze7BwbXPtRusKnIdQ\"",
"\"facebook-domain-verification=35f20bpg5z4pwh0ss771f0c438nhn7\"",
"\"teamviewer-sso-verification=24d7cbe3dfbb43faa01eeaf8bbb58e53\"",
"\"0ed1fe018a58be0cc9d3db48979cbb213368839b6c\"",
"\"_globalsign-domain-verification=l_BNpBAnk-rKZRyXJ9UkBfv9o6EEuuenkBrGpYNYo0\"",
"\"slack-domain-verification=HRPmIaKGZvbwOvMvVQ2HO6BQBmawIYvPzLcgmzYp\"",
"\"google-site-verification=fMmhKvSb9hn3Zk41NHgEIaodFWBkEHS5FIg3UBZrwW4\"",
"\"yahoo-verification-key=DQXJxzfQob2+3xUCoJZvO+rITzy7Ndxmy89T1yD8kIc=\"",
"\"v=spf1 include:amazonses.com include:mailgun.org include:_spf.google.com include:_spf.salesforce.com include:mta.salesforce.com include:aspmx.sailthru.com ~all\"",
"\"globalsign-domain-verification=Wq9iztGUzQcBBi1OLrEOlXtefwOzX7yfvhbsw-CVdo\"",
"\"atlassian-domain-verification=KRxX3SVwEajBuo9tVFY4UX93RJGykoOj2Mwu5YBgH7i5PrnXhOoYh9pXIamlCkt5\"",
"\"google-site-verification=IF5DM6X9HkvPI2_D-EOS4ve1KhyGPsK7F0mUGGds8_Y\"",
"\"uifsetUnclzIxoSei++Sstd9TMvxzaiwprVMQc7m2NUmL9Bo/47roB0byjwEomGExhuVYigRDeg3tl38obINRw==\"",
"\"canva-site-verification=SQ99tiVmP9pHCdEMJpCivQ\"",
"\"google-site-verification=KLhGyr2GK7mPJhnJktjUfJBbAI32e7RU5L5gD2Z4Ayc\"",
"\"MS=ms52164794\""
],
"NS": [
"ns-406.awsdns-50.com.",
"ns-1190.awsdns-20.org.",
"ns-607.awsdns-11.net.",
"ns-1885.awsdns-43.co.uk."
],
"SOA": [
"ns-1190.awsdns-20.org. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400"
],
"CAA": [],
"DS": [],
"DNSKEY": [],
"RRSIG": [],
"NSEC": [],
"NSEC3": [],
"SRV": [],
"NAPTR": [],
"TLSA": [],
"SSHFP": []
},
"ipv4": [
"44.215.190.130",
"100.51.16.150",
"18.204.145.74",
"54.85.244.33",
"52.20.189.67"
],
"ipv6": [
"2600:1f18:12d2:f302:b922:cae4:b4b2:e767",
"2600:1f18:12d2:f304:e00e:2af9:a504:308b",
"2600:1f18:12d2:f303:b25:a34a:f8d7:faa8",
"2600:1f18:12d2:f300:be63:ce01:9b29:4ac5",
"2600:1f18:12d2:f301:32bb:10ff:bb07:c1ba"
]
},
"mail": {
"spf": "v=spf1 include:amazonses.com include:mailgun.org include:_spf.google.com include:_spf.salesforce.com include:mta.salesforce.com include:aspmx.sailthru.com ~all",
"dmarc": "v=DMARC1; p=quarantine; sp=none; rua=mailto:re+a94fe8404527@inbound.dmarcdigests.com; aspf=r; pct=100",
"dkim_selector": "selector1",
"dkim_host": "selector1._domainkey.propublica.org",
"dkim": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDBXlUjuSAM3To/4aUy+gdaF6If8CgAE+t9RcqfuEJZ56PUdzNZBcv0AoFZgHI9k6d3ZgbQRkTPe/5ahms+6++MyiTigkTD2amBP8uYd4wS3QAraD7u6P+ef1P6arsTEOxlCCFs5AnXWrMl8yS3a1ugtNY5aVZXOGAjwK3deizy0nny8zjHS9BPCe2hQ5qr4gc8awgjZfJik7PdcgVb/cYov9Iq35QjAHCZeNzry6yNvO6LRsfWj7fWN8ggp1c0aNVP+i6K60SexIO68DO3x5nJXAhrNdo49/41A8J5EqctfB3xFsHb3Q5U6L03NIOV+qbFnu+jBoA1HkekzGZ4gAQIDAQAB;",
"spf_analysis": {
"valid": true,
"lookups": 6,
"final": "~all",
"message": "Within the estimated limit"
},
"dmarc_analysis": {
"valid": true,
"policy": "quarantine"
},
"bimi": "",
"mta_sts": "",
"tls_rpt": ""
},
"advanced": {
"ptr": "ec2-44-215-190-130.compute-1.amazonaws.com",
"propagation": {
"consistent": true,
"results": [
{
"provider": "Google",
"server": "8.8.8.8",
"result": [
"100.51.16.150",
"18.204.145.74",
"44.215.190.130",
"52.20.189.67",
"54.85.244.33"
],
"time_ms": 56.52
},
{
"provider": "Cloudflare",
"server": "1.1.1.1",
"result": [
"100.51.16.150",
"18.204.145.74",
"44.215.190.130",
"52.20.189.67",
"54.85.244.33"
],
"time_ms": 43.75
},
{
"provider": "Quad9",
"server": "9.9.9.9",
"result": [
"100.51.16.150",
"18.204.145.74",
"44.215.190.130",
"52.20.189.67",
"54.85.244.33"
],
"time_ms": 34.42
},
{
"provider": "OpenDNS",
"server": "208.67.222.222",
"result": [
"100.51.16.150",
"18.204.145.74",
"44.215.190.130",
"52.20.189.67",
"54.85.244.33"
],
"time_ms": 85.47
},
{
"provider": "AdGuard",
"server": "94.140.14.14",
"result": [
"100.51.16.150",
"18.204.145.74",
"44.215.190.130",
"52.20.189.67",
"54.85.244.33"
],
"time_ms": 335.58
}
]
}
},
"ssl": {
"available": true,
"issuer": "Amazon",
"subject": "redir.propublica.org",
"valid_from": "2026-01-11T18:00:00-06:00",
"valid_to": "2027-02-10T17:59:59-06:00",
"days_remaining": 185,
"san": [
"redir.propublica.org",
"www.propublicast.org",
"propublica.org",
"projects.p8a.cc",
"www.publicinterestjournalism.org",
"www.propublica.net",
"propublica.io",
"propublica.net",
"www.propublicast.net",
"www.propublication.org"
],
"protocol": "TLSv1.2",
"cipher": "ECDHE-RSA-AES128-GCM-SHA256"
},
"http": {
"url": "https://www.propublica.org:443/",
"status": "HTTP/2 200 ",
"http_version": "3",
"headers": {
"server": "cloudflare",
"date": "Sun, 09 Aug 2026 02:07:46 GMT",
"content-type": "text/html; charset=UTF-8",
"content-length": "134",
"location": "https://www.propublica.org:443/",
"strict-transport-security": "max-age=31536000; includeSubDomains; preload",
"link": "; rel=\"https://api.w.org/\", ; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", ; rel=shortlink",
"cf-ray": "a283358ba83de9ee-STL",
"cf-cache-status": "DYNAMIC",
"accept-ranges": "bytes",
"cache-control": "private",
"host-header": "a9130478a60e5f9135f765b23f26593b",
"x-cache": "HIT",
"x-frame-options": "SAMEORIGIN",
"x-hacker": "If you're reading this, you should visit https://join.a8c.com/viphacker and apply to join the fun, mention this header.",
"x-powered-by": "WordPress VIP ",
"x-rq": "mdw1 181 249 80",
"vary": "accept-encoding",
"alt-svc": "h3=\":443\"; ma=86400"
},
"security_checks": {
"strict-transport-security": true,
"content-security-policy": false,
"x-content-type-options": false,
"x-frame-options": true,
"referrer-policy": false,
"permissions-policy": false,
"cross-origin-opener-policy": false,
"cross-origin-embedder-policy": false,
"cross-origin-resource-policy": false
},
"server": "cloudflare",
"powered_by": "WordPress VIP "
},
"webpage": {
"url": "https://www.propublica.org:443/",
"title": "ProPublica — Investigative Journalism and News in the Public Interest",
"description": "ProPublica is an independent, non-profit newsroom that produces investigative journalism in the public interest.",
"success": true,
"error": "",
"status": 200
},
"network": {
"44.215.190.130": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
},
"100.51.16.150": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
},
"18.204.145.74": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
},
"54.85.244.33": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
}
},
"smtp": {
"host": "alt1.aspmx.l.google.com",
"ports": [
{
"port": 25,
"open": false,
"time_ms": 1.8,
"banner": "",
"error": "Network is unreachable"
},
{
"port": 465,
"open": false,
"time_ms": 4020.8,
"banner": "",
"error": "Connection timed out"
},
{
"port": 587,
"open": false,
"time_ms": 4039.6,
"banner": "",
"error": "Connection timed out"
}
]
},
"visitor": {
"ip": "216.73.217.62",
"reverse": "",
"country": "",
"country_code": "",
"region": "",
"city": "",
"latitude": null,
"longitude": null,
"isp": "",
"organization": "",
"asn": "",
"timezone": "",
"browser": "Other",
"os": "Other",
"language": "",
"user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
"is_bot": true,
"cloudflare": false
},
"analysis_time_ms": 138.56
}