{ "ok": true, "domain": "rescuetime.com", "generated_at": "2026-08-10T00:10:27-05:00", "cache": { "hit": true, "ttl": 0 }, "score": { "total": 79, "label": "Good", "categories": { "dns": 75, "mail": 70, "security": 84, "network": 50, "availability": 100 }, "category_weights": { "dns": 25, "mail": 20, "security": 25, "network": 10, "availability": 20 }, "items": [ { "category": "dns", "title": "IPv4 (A)", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "1 IPv4 address(es) detected." }, { "category": "dns", "title": "IPv6 (AAAA)", "max_points": 10, "earned_points": 0, "lost_points": 10, "detail": "0 IPv6 address(es) detected." }, { "category": "dns", "title": "Name server redundancy", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "2 NS record(s); 2 or more required." }, { "category": "dns", "title": "SOA record", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Authoritative zone record." }, { "category": "dns", "title": "DNSSEC chain", "max_points": 15, "earned_points": 0, "lost_points": 15, "detail": "Both DS and DNSKEY are required." }, { "category": "dns", "title": "CAA policy", "max_points": 5, "earned_points": 5, "lost_points": 0, "detail": "Certificate authority restriction." }, { "category": "dns", "title": "DNS propagation", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Agreement between public resolvers." }, { "category": "mail", "title": "MX records", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "5 MX record(s)." }, { "category": "mail", "title": "SPF", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "SPF policy published." }, { "category": "mail", "title": "DMARC", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "DMARC policy published." }, { "category": "mail", "title": "DKIM", "max_points": 20, "earned_points": 0, "lost_points": 20, "detail": "No tested DKIM selector responded." }, { "category": "mail", "title": "MTA-STS", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Mail transport policy." }, { "category": "mail", "title": "TLS-RPT", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "TLS reporting policy." }, { "category": "security", "title": "Valid TLS certificate", "max_points": 55, "earned_points": 55, "lost_points": 0, "detail": "114 day(s) remaining." }, { "category": "security", "title": "Certificate lifetime", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Full points require at least 30 days remaining." }, { "category": "security", "title": "HTTP security headers", "max_points": 35, "earned_points": 19, "lost_points": 16, "detail": "5 of 9 evaluated headers detected." }, { "category": "network", "title": "PTR reverse DNS", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "PTR: ec2-3-213-224-209.compute-1.amazonaws.com" }, { "category": "network", "title": "IPv4 diversity", "max_points": 35, "earned_points": 20, "lost_points": 15, "detail": "Two or more IPv4 addresses receive full points." }, { "category": "network", "title": "IPv6 connectivity", "max_points": 35, "earned_points": 0, "lost_points": 35, "detail": "AAAA availability." }, { "category": "availability", "title": "DNS resolution", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "At least one address family must resolve." }, { "category": "availability", "title": "HTTP response", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "HTTP/1.1 200 OK" }, { "category": "availability", "title": "HTTPS final URL", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "Final URL uses HTTPS." } ], "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.", "diagnostics": [ { "level": "ok", "title": "IPv4 (A)", "detail": "1 IPv4 address(es) detected.", "category": "dns", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "error", "title": "IPv6 (AAAA)", "detail": "0 IPv6 address(es) detected.", "category": "dns", "max_points": 10, "earned_points": 0, "lost_points": 10 }, { "level": "ok", "title": "Name server redundancy", "detail": "2 NS record(s); 2 or more required.", "category": "dns", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SOA record", "detail": "Authoritative zone record.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "error", "title": "DNSSEC chain", "detail": "Both DS and DNSKEY are required.", "category": "dns", "max_points": 15, "earned_points": 0, "lost_points": 15 }, { "level": "ok", "title": "CAA policy", "detail": "Certificate authority restriction.", "category": "dns", "max_points": 5, "earned_points": 5, "lost_points": 0 }, { "level": "ok", "title": "DNS propagation", "detail": "Agreement between public resolvers.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "MX records", "detail": "5 MX record(s).", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SPF", "detail": "SPF policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DMARC", "detail": "DMARC policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "error", "title": "DKIM", "detail": "No tested DKIM selector responded.", "category": "mail", "max_points": 20, "earned_points": 0, "lost_points": 20 }, { "level": "error", "title": "MTA-STS", "detail": "Mail transport policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "TLS-RPT", "detail": "TLS reporting policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "Valid TLS certificate", "detail": "114 day(s) remaining.", "category": "security", "max_points": 55, "earned_points": 55, "lost_points": 0 }, { "level": "ok", "title": "Certificate lifetime", "detail": "Full points require at least 30 days remaining.", "category": "security", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "warning", "title": "HTTP security headers", "detail": "5 of 9 evaluated headers detected.", "category": "security", "max_points": 35, "earned_points": 19, "lost_points": 16 }, { "level": "ok", "title": "PTR reverse DNS", "detail": "PTR: ec2-3-213-224-209.compute-1.amazonaws.com", "category": "network", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "warning", "title": "IPv4 diversity", "detail": "Two or more IPv4 addresses receive full points.", "category": "network", "max_points": 35, "earned_points": 20, "lost_points": 15 }, { "level": "error", "title": "IPv6 connectivity", "detail": "AAAA availability.", "category": "network", "max_points": 35, "earned_points": 0, "lost_points": 35 }, { "level": "ok", "title": "DNS resolution", "detail": "At least one address family must resolve.", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTP response", "detail": "HTTP/1.1 200 OK", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTPS final URL", "detail": "Final URL uses HTTPS.", "category": "availability", "max_points": 20, "earned_points": 20, "lost_points": 0 } ] }, "dns": { "records": { "A": [ "3.213.224.209" ], "AAAA": [], "CNAME": [], "MX": [ "40 aspmx2.googlemail.com.", "50 aspmx3.googlemail.com.", "10 aspmx.l.google.com.", "30 alt2.aspmx.l.google.com.", "20 alt1.aspmx.l.google.com." ], "TXT": [ "\"v=spf1 a mx include:amazonses.com include:_spf.google.com include:servers.mcsv.net -all\"", "\"MS=ms12032021\"", "\"google-site-verification=icuUblP7RNg0gnzFTz8xphWMsqopr2H9ysofEbQOw_Q\"", "\"y8qyvy6ds3ldmmwlvsq66sswzrb5r8k4\"", "\"MS=1775CD7F2C4771500CFC85FFF9278255CC023D77\"" ], "NS": [ "dns2.rescuetime.com.", "dns1.rescuetime.com." ], "SOA": [ "dns-master.rescuetime.com. ops.rescuetime.com. 2026080500 10800 3600 604800 3600" ], "CAA": [ "0 iodef \"mailto:operator@rescuetime.com\"", "0 issue \"digicert.com\"", "0 issuewild \"sectigo.com\"", "0 issuewild \"amazontrust.com\"", "0 issue \"sectigo.com\"" ], "DS": [], "DNSKEY": [], "RRSIG": [], "NSEC": [], "NSEC3": [], "SRV": [], "NAPTR": [], "TLSA": [], "SSHFP": [] }, "ipv4": [ "3.213.224.209" ], "ipv6": [] }, "mail": { "spf": "v=spf1 a mx include:amazonses.com include:_spf.google.com include:servers.mcsv.net -all", "dmarc": "v=DMARC1;p=none;pct=100;rua=mailto:operator@rescuetime.com", "dkim_selector": "x", "dkim_host": "", "dkim": "", "spf_analysis": { "valid": true, "lookups": 5, "final": "-all", "message": "Within the estimated limit" }, "dmarc_analysis": { "valid": true, "policy": "none" }, "bimi": "", "mta_sts": "", "tls_rpt": "" }, "advanced": { "ptr": "ec2-3-213-224-209.compute-1.amazonaws.com", "propagation": { "consistent": true, "results": [ { "provider": "Google", "server": "8.8.8.8", "result": [ "3.213.224.209" ], "time_ms": 83.17 }, { "provider": "Cloudflare", "server": "1.1.1.1", "result": [ "3.213.224.209" ], "time_ms": 87.39 }, { "provider": "Quad9", "server": "9.9.9.9", "result": [ "3.213.224.209" ], "time_ms": 49.39 }, { "provider": "OpenDNS", "server": "208.67.222.222", "result": [ "3.213.224.209" ], "time_ms": 60.65 }, { "provider": "AdGuard", "server": "94.140.14.14", "result": [ "3.213.224.209" ], "time_ms": 61.12 } ] } }, "ssl": { "available": true, "issuer": "Sectigo Limited", "subject": "*.rescuetime.com", "valid_from": "2026-05-17T19:00:00-05:00", "valid_to": "2026-12-02T17:59:59-06:00", "days_remaining": 114, "san": [ "*.rescuetime.com", "rescuetime.com" ], "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384" }, "http": { "url": "https://www.rescuetime.com/", "status": "HTTP/1.1 200 OK", "http_version": "2", "headers": { "server": "nginx", "date": "Mon, 10 Aug 2026 05:10:18 GMT", "content-type": "text/html; charset=utf-8", "content-length": "0", "connection": "keep-alive", "location": "https://www.rescuetime.com/", "strict-transport-security": "max-age=31536000", "cache-control": "no-store", "content-security-policy": "default-src 'none'; base-uri 'self' docs.helpscout.net; child-src 'self' assets.braintreegateway.com assets.rescuetime.com assets-dev.rescuetime.com c.paypal.com www.youtube.com player.vimeo.com fast.wistia.net moz-extension://* chrome-extension://*; connect-src 'self' www.rescuetime.com dev.rescuetime.com d3ccrbqtj64zhq.cloudfront.net support-media.rescuetime.com d1tc833ex4oc93.cloudfront.net assets.rescuetime.com assets-dev.rescuetime.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.sandbox.braintreegateway.com client-analytics.braintreegateway.com *.braintree-api.com *.paypal.com *.google-analytics.com *.googletagmanager.com *.google.com *.linkedin.com connect.facebook.net www.facebook.com ysxtsrzt2b4s.statuspage.io rescuetime.helpscoutdocs.com secure.helpscout.net api.ipify.org beaconapi.helpscout.net chatapi.helpscout.net d3hb14vkzrxvla.cloudfront.net stats.g.doubleclick.net *.sumologic.com sentry.io *.ingest.sentry.io *.sentry-cdn.com wss: wss://*.pusher.com slack.com *.asana.com trello.com *.atlassian.com github.com exist.io *.visualwebsiteoptimizer.com app.vwo.com *.ubembed.com *.userleap.com *.sprig.com *.usersnap.com *.gist.build blog.rescuetime.com *.fontawesome.com *.getharvest.com; font-src 'self' data: d1tc833ex4oc93.cloudfront.net www.rescuetime.com dev.rescuetime.com assets.rescuetime.com assets-dev.rescuetime.com fonts.gstatic.com app.vwo.com *.ubembed.com *.userleap.com *.sprig.com *.usersnap.com *.gist.build *.fontawesome.com; form-action 'self' www.rescuetime.com dev.rescuetime.com community.rescuetime.com blog.rescuetime.com *.welltory.com slack.com *.asana.com trello.com *.atlassian.com github.com *.github.com google.com *.google.com appleid.apple.com *.microsoftonline.com twitter.com *.twitter.com facebook.com *.facebook.com linkedin.com *.linkedin.com spotify.com *.spotify.com getharvest.com *.getharvest.com; frame-ancestors moz-extension://* chrome-extension://*; frame-src 'self' www.rescuetime.com dev.rescuetime.com d3ccrbqtj64zhq.cloudfront.net support-media.rescuetime.com d1tc833ex4oc93.cloudfront.net assets.rescuetime.com assets-dev.rescuetime.com assets.braintreegateway.com *.paypal.com djtflbt20bdde.cloudfront.net beacon-v2.helpscout.net platform.twitter.com *.googletagmanager.com accounts.google.com appleid.apple.com www.google.com bid.g.doubleclick.net *.facebook.com tst.kaptcha.com ssl.kaptcha.com www.youtube.com moz-extension://* chrome-extension://* ifttt.com *.vimeo.com app.vwo.com *.ubembed.com *.userleap.com *.sprig.com *.usersnap.com *.userreport.com *.gist.build; img-src 'self' www.rescuetime.com dev.rescuetime.com data: d3ccrbqtj64zhq.cloudfront.net support-media.rescuetime.com d1tc833ex4oc93.cloudfront.net assets.rescuetime.com assets-dev.rescuetime.com assets.braintreegateway.com *.paypal.com platform.twitter.com pbs.twimg.com appleid.apple.com accounts.google.com *.google-analytics.com *.googletagmanager.com www.google.com googleads.g.doubleclick.net connect.facebook.net *.facebook.com d33v4339jhl8k0.cloudfront.net moz-extension://* chrome-extension://* via.placeholder.com ifttt.com api.producthunt.com zapier.com cdn.zapier.com *.adsymptotic.com *.visualwebsiteoptimizer.com *.ads.linkedin.com app.vwo.com track.customer.io secure.gravatar.com *.ubembed.com *.userleap.com *.sprig.com *.usersnap.com *.scdn.co *.userreport.com *.gist.build *.spotify.com *.spotifycdn.com *.ytimg.com *.linkedin.com snap.licdn.com; manifest-src 'self'; media-src 'self' www.rescuetime.com dev.rescuetime.com beacon-v2.helpscout.net support-media-storage.s3.amazonaws.com d3ccrbqtj64zhq.cloudfront.net support-media.rescuetime.com d1tc833ex4oc93.cloudfront.net assets.rescuetime.com assets-dev.rescuetime.com; object-src 'self' www.rescuetime.com dev.rescuetime.com djtflbt20bdde.cloudfront.net beacon-v2.helpscout.net assets.rescuetime.com assets-dev.rescuetime.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.rescuetime.com dev.rescuetime.com d1tc833ex4oc93.cloudfront.net assets.rescuetime.com assets-dev.rescuetime.com js.braintreegateway.com assets.braintreegateway.com www.paypalobjects.com *.paypal.com d12wqas9hcki3z.cloudfront.net d33v4339jhl8k0.cloudfront.net djtflbt20bdde.cloudfront.net beacon-v2.helpscout.net cdn.ravenjs.com platform.twitter.com www.google-analytics.com www.googletagmanager.com accounts.google.com www.google.com www.googleadservices.com googleads.g.doubleclick.net appleid.cdn-apple.com appleid.apple.com www.gstatic.com zapier.com connect.facebook.net dev.visualwebsiteoptimizer.com app.vwo.com cdn.rawgit.com player.vimeo.com assets.customer.io *.licdn.com *.ubembed.com *.userleap.com *.sprig.com *.usersnap.com *.sentry-cdn.com *.gist.build gist-queue-consumer-api.cloud.gist.build ajax.googleapis.com blog.rescuetime.com *.userreport.com *.fontawesome.com *.linkedin.com snap.licdn.com; style-src 'self' 'unsafe-inline' www.rescuetime.com dev.rescuetime.com d1tc833ex4oc93.cloudfront.net assets.rescuetime.com assets-dev.rescuetime.com accounts.google.com appleid.apple.com fonts.googleapis.com beacon-v2.helpscout.net d12wqas9hcki3z.cloudfront.net djtflbt20bdde.cloudfront.net app.vwo.com *.ubembed.com *.userleap.com *.sprig.com *.usersnap.com *.gist.build *.fontawesome.com; upgrade-insecure-requests; worker-src blob:; report-uri https://www.rescuetime.com/csp-report", "etag": "W/\"4eae85e82a1322a57bfe35be3c6bfe0d\"", "expires": "Fri, 01 Jan 1990 00:00:00 GMT", "link": "; rel=preload; as=style; nopush,; rel=preload; as=script; nopush,; rel=preload; as=script; nopush,; rel=preload; as=style; nopush", "pragma": "no-cache", "referrer-policy": "origin-when-cross-origin, strict-origin-when-cross-origin", "set-cookie": "_rescuetime_session_p_2=f5f1bfc7bf52f1a4d9a326e88b935b30; path=/; expires=Wed, 09 Sep 2026 05:10:18 GMT; secure; httponly; samesite=lax", "vary": "Accept", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "DENY", "x-permitted-cross-domain-policies": "none", "x-request-id": "f2bf4c63-468f-4013-8e17-cf5f39a37ddb", "x-rescuetime-release-version": "5134fb2b04321793bb63a3c5ce2da99496d845e3", "x-runtime": "0.028873", "x-xss-protection": "1; mode=block" }, "security_checks": { "strict-transport-security": true, "content-security-policy": true, "x-content-type-options": true, "x-frame-options": true, "referrer-policy": true, "permissions-policy": false, "cross-origin-opener-policy": false, "cross-origin-embedder-policy": false, "cross-origin-resource-policy": false }, "server": "nginx", "powered_by": "" }, "webpage": { "url": "https://www.rescuetime.com/", "title": "Take Control of Your Time: Automatic time tracking with RescueTime!", "description": "Boost productivity with RescueTime's automatic time tracking software and timesheet app for freelancers, small businesses, project management, and employees. Create goals, project tracking, time management, and engaging live guided focus sessions designed to help you manage your time effectively and achieve your goals. Start a free 14-day trial today for you or our your team!", "success": true, "error": "", "status": 200 }, "network": { "3.213.224.209": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" } }, "smtp": { "host": "aspmx2.googlemail.com", "ports": [ { "port": 25, "open": false, "time_ms": 1.1, "banner": "", "error": "Network is unreachable" }, { "port": 465, "open": false, "time_ms": 4020.4, "banner": "", "error": "Connection timed out" }, { "port": 587, "open": false, "time_ms": 4042.7, "banner": "", "error": "Connection timed out" } ] }, "visitor": { "ip": "216.73.217.62", "reverse": "", "country": "", "country_code": "", "region": "", "city": "", "latitude": null, "longitude": null, "isp": "", "organization": "", "asn": "", "timezone": "", "browser": "Other", "os": "Other", "language": "", "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "is_bot": true, "cloudflare": false }, "analysis_time_ms": 100.49 }