Generated: 2026-08-10T04:37:46-05:00
| Status | Check | Points | Details |
|---|---|---|---|
| OK | IPv4 (A) | 30/30 | 2 IPv4 address(es) detected. |
| OK | IPv6 (AAAA) | 10/10 | 2 IPv6 address(es) detected. |
| OK | Name server redundancy | 20/20 | 2 NS record(s); 2 or more required. |
| OK | SOA record | 10/10 | Authoritative zone record. |
| ERROR | DNSSEC chain | 0/15 | Both DS and DNSKEY are required. |
| OK | CAA policy | 5/5 | Certificate authority restriction. |
| OK | DNS propagation | 10/10 | Agreement between public resolvers. |
| OK | MX records | 20/20 | 2 MX record(s). |
| OK | SPF | 25/25 | SPF policy published. |
| OK | DMARC | 25/25 | DMARC policy published. |
| OK | DKIM | 20/20 | A DKIM selector was verified. |
| ERROR | MTA-STS | 0/5 | Mail transport policy. |
| ERROR | TLS-RPT | 0/5 | TLS reporting policy. |
| OK | Valid TLS certificate | 55/55 | 55 day(s) remaining. |
| OK | Certificate lifetime | 10/10 | Full points require at least 30 days remaining. |
| WARNING | HTTP security headers | 12/35 | 3 of 9 evaluated headers detected. |
| ERROR | PTR reverse DNS | 0/30 | PTR not detected. |
| OK | IPv4 diversity | 35/35 | Two or more IPv4 addresses receive full points. |
| OK | IPv6 connectivity | 35/35 | AAAA availability. |
| OK | DNS resolution | 40/40 | At least one address family must resolve. |
| OK | HTTP response | 40/40 | HTTP/2 200 |
| OK | HTTPS final URL | 20/20 | Final URL uses HTTPS. |
| Tipo | Values |
|---|---|
| A | 104.20.29.76 172.66.158.240 |
| AAAA | 2606:4700:10::ac42:9ef0 2606:4700:10::6814:1d4c |
| CNAME | |
| MX | 10 us-smtp-inbound-2.mimecast.com. 10 us-smtp-inbound-1.mimecast.com. |
| TXT | "v=spf1 ip4:74.209.160.164 ip4:168.245.32.225 include:mailerhdz.ricksteves.com include:spf.protection.outlook.com include:em3350.ricksteves.com include:email.ricksteves.com include:us._netblocks.mimecast.com mx mx:email.ricksteves." "com -all" "atlassian-domain-verification=Udv3qaObeuewmRx4bFLx2I/A0HeQvaxE8oUfmaneYPwaG4LFVIYqfHlbNH/0zmtx" "facebook-domain-verification=2buobwl4s0jp0e37o6ftn5gceufy7q" "MS=ms81925690" "V+gXqgOh8KlmY1eZcZiaBrTp02sisZNwX0DQ1Vbballm0X57V1Ls2P4HWmIr2BEhn7q4Du7fby24TuJg8ZQIJg==" "atlassian-sending-domain-verification=1f60d665-bb82-4d33-a08a-55248317960d" "google-site-verification=00tphlScLrAdmLGYmvUNV394AHf7_pyQE0EPpB_96CU" "anthropic-domain-verification-h5xqeq=HYEXRmyNziejVLvsHBTR7gMIn" "google-site-verification=s8GOjuvAxU6pPbERKhG6ubmJPcWwYO0TDqHC0cRk-Gg" "apple-domain-verification=44bh4PwJI5LaQ2Nj" |
| NS | sydney.ns.cloudflare.com. gabriel.ns.cloudflare.com. |
| SOA | gabriel.ns.cloudflare.com. dns.cloudflare.com. 2411622749 10000 2400 604800 1800 |
| CAA | 0 issue "digicert.com; cansignhttpexchanges=yes" 0 issuewild "ssl.com" 0 issuewild "comodoca.com" 0 issue "ssl.com" 0 issue "letsencrypt.org" 0 issuewild "pki.goog; cansignhttpexchanges=yes" 0 issue "sectigo.com" 0 issuewild "digicert.com; cansignhttpexchanges=yes" 0 issuewild "letsencrypt.org" 0 issue "comodoca.com" 0 issuewild "sectigo.com" 0 issue "pki.goog; cansignhttpexchanges=yes" |
| DS | |
| DNSKEY | |
| RRSIG | |
| NSEC | |
| NSEC3 | |
| SRV | |
| NAPTR | |
| TLSA | |
| SSHFP |