{ "ok": true, "domain": "tiktok.com", "generated_at": "2026-08-08T16:57:26-05:00", "cache": { "hit": true, "ttl": 0 }, "score": { "total": 81, "label": "Good", "categories": { "dns": 60, "mail": 90, "security": 84, "network": 65, "availability": 100 }, "category_weights": { "dns": 25, "mail": 20, "security": 25, "network": 10, "availability": 20 }, "items": [ { "category": "dns", "title": "IPv4 (A)", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "4 IPv4 address(es) detected." }, { "category": "dns", "title": "IPv6 (AAAA)", "max_points": 10, "earned_points": 0, "lost_points": 10, "detail": "0 IPv6 address(es) detected." }, { "category": "dns", "title": "Name server redundancy", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "6 NS record(s); 2 or more required." }, { "category": "dns", "title": "SOA record", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Authoritative zone record." }, { "category": "dns", "title": "DNSSEC chain", "max_points": 15, "earned_points": 0, "lost_points": 15, "detail": "Both DS and DNSKEY are required." }, { "category": "dns", "title": "CAA policy", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Certificate authority restriction." }, { "category": "dns", "title": "DNS propagation", "max_points": 10, "earned_points": 0, "lost_points": 10, "detail": "Agreement between public resolvers." }, { "category": "mail", "title": "MX records", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "3 MX record(s)." }, { "category": "mail", "title": "SPF", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "SPF policy published." }, { "category": "mail", "title": "DMARC", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "DMARC policy published." }, { "category": "mail", "title": "DKIM", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "A DKIM selector was verified." }, { "category": "mail", "title": "MTA-STS", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Mail transport policy." }, { "category": "mail", "title": "TLS-RPT", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "TLS reporting policy." }, { "category": "security", "title": "Valid TLS certificate", "max_points": 55, "earned_points": 55, "lost_points": 0, "detail": "117 day(s) remaining." }, { "category": "security", "title": "Certificate lifetime", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Full points require at least 30 days remaining." }, { "category": "security", "title": "HTTP security headers", "max_points": 35, "earned_points": 19, "lost_points": 16, "detail": "5 of 9 evaluated headers detected." }, { "category": "network", "title": "PTR reverse DNS", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "PTR: a23-54-76-147.deploy.static.akamaitechnologies.com" }, { "category": "network", "title": "IPv4 diversity", "max_points": 35, "earned_points": 35, "lost_points": 0, "detail": "Two or more IPv4 addresses receive full points." }, { "category": "network", "title": "IPv6 connectivity", "max_points": 35, "earned_points": 0, "lost_points": 35, "detail": "AAAA availability." }, { "category": "availability", "title": "DNS resolution", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "At least one address family must resolve." }, { "category": "availability", "title": "HTTP response", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "HTTP/2 200 " }, { "category": "availability", "title": "HTTPS final URL", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "Final URL uses HTTPS." } ], "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.", "diagnostics": [ { "level": "ok", "title": "IPv4 (A)", "detail": "4 IPv4 address(es) detected.", "category": "dns", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "error", "title": "IPv6 (AAAA)", "detail": "0 IPv6 address(es) detected.", "category": "dns", "max_points": 10, "earned_points": 0, "lost_points": 10 }, { "level": "ok", "title": "Name server redundancy", "detail": "6 NS record(s); 2 or more required.", "category": "dns", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SOA record", "detail": "Authoritative zone record.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "error", "title": "DNSSEC chain", "detail": "Both DS and DNSKEY are required.", "category": "dns", "max_points": 15, "earned_points": 0, "lost_points": 15 }, { "level": "error", "title": "CAA policy", "detail": "Certificate authority restriction.", "category": "dns", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "DNS propagation", "detail": "Agreement between public resolvers.", "category": "dns", "max_points": 10, "earned_points": 0, "lost_points": 10 }, { "level": "ok", "title": "MX records", "detail": "3 MX record(s).", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SPF", "detail": "SPF policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DMARC", "detail": "DMARC policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DKIM", "detail": "A DKIM selector was verified.", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "error", "title": "MTA-STS", "detail": "Mail transport policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "TLS-RPT", "detail": "TLS reporting policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "Valid TLS certificate", "detail": "117 day(s) remaining.", "category": "security", "max_points": 55, "earned_points": 55, "lost_points": 0 }, { "level": "ok", "title": "Certificate lifetime", "detail": "Full points require at least 30 days remaining.", "category": "security", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "warning", "title": "HTTP security headers", "detail": "5 of 9 evaluated headers detected.", "category": "security", "max_points": 35, "earned_points": 19, "lost_points": 16 }, { "level": "ok", "title": "PTR reverse DNS", "detail": "PTR: a23-54-76-147.deploy.static.akamaitechnologies.com", "category": "network", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "ok", "title": "IPv4 diversity", "detail": "Two or more IPv4 addresses receive full points.", "category": "network", "max_points": 35, "earned_points": 35, "lost_points": 0 }, { "level": "error", "title": "IPv6 connectivity", "detail": "AAAA availability.", "category": "network", "max_points": 35, "earned_points": 0, "lost_points": 35 }, { "level": "ok", "title": "DNS resolution", "detail": "At least one address family must resolve.", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTP response", "detail": "HTTP/2 200 ", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTPS final URL", "detail": "Final URL uses HTTPS.", "category": "availability", "max_points": 20, "earned_points": 20, "lost_points": 0 } ] }, "dns": { "records": { "A": [ "23.54.76.147", "23.54.76.142", "23.54.76.155", "23.54.76.141" ], "AAAA": [], "CNAME": [], "MX": [ "30 mx3.tiktok.com.", "10 mx1.tiktok.com.", "20 mx2.tiktok.com." ], "TXT": [ "\"_globalsign-domain-verification=FUJcu1hWja0wxluxlVKRWITCKMvR1CzjjxYcugM_gM\"", "\"google-site-verification=StaGWBpu1eRwm0dUSA-24OmzeXAqkQitecePeqLQ0fc\"", "\"google-site-verification=6qNNoqXIzco_ObM8QE5IZfz2kLnLQkG-llKLL_HudVI\"", "\"_f3zsp3jcr9843f36xnpbfib409nlhjt\"", "\"_7sllfzryqu5thoyj9665cgevrcbi38m\"", "\"google-site-verification=2ZTMDlDhN4fD3hIKVj_1LnDKhTvf4NVhT23o-edCEVw\"", "\"google-site-verification=heUwjUSZGdrUk6gp54Bxe8zNWMepAUdI3eECZ7zzNuQ\"", "\"apple-domain-verification=hXgMRIDdysM4HJYw\"", "\"MS=ms80039204\"", "\"google-site-verification=UlwaFhsh7mBJzb0eTyZBibPg6HQ6doHO8-_tkmjBo4E\"", "\"pinterest-site-verification=7d9fc044e28c4992dffda772e8ca2bdc\"", "\"MS=ms14857357\"", "\"v=spf1 include:_spf.google.com include:mail.zendesk.com include:spf.bytedance.com include:mail.stibee.com -all\"", "\"klaviyo-site-verification=STK9xy\"", "\"google-site-verification=9aMOY6RF3QT8X2ACpo04BZ4CSdjPWxRJgncABZtHRYY\"", "\"_hvpbov9c2s6s8d9hj5w2njkjbpj35op\"", "\"facebook-domain-verification=iec6txjjw8r35xhq5swdem8tpa5mzw\"", "\"google-site-verification=-pibSb_VhK-cZP1CQSaH7s43WbBkpzjhUwAgyc3YDH4\"", "\"hubspot-developer-verification=YzdjZDc2ZDEtMDRmNS00MWQyLWJlNzUtY2Q4YmQyN2E0NDFl\"", "\"google-site-verification=spKY3sgLfx2ShlMQbs-jaGpfyhukOMBQ9fV_cR8yKII\"", "\"google-site-verification=ot5hoJ0_9g-FO6j5YX6aoLZpNM7N0y988ua0zsCDr88\"", "\"facebook-domain-verification=wo9l655kzm8rfqm1st3qe7gqduoqav\"", "\"mailru-verification: c0f4705a229bd0c6\"", "\"verification-code-site-edm-va=GkLVdrouyEyNQGsN0X0W\"" ], "NS": [ "a1-97.akam.net.", "a6-65.akam.net.", "a9-66.akam.net.", "a12-66.akam.net.", "a13-67.akam.net.", "a18-64.akam.net." ], "SOA": [ "a9-66.akam.net. hostmaster.akamai.com. 1554957926 43200 7200 604800 7200" ], "CAA": [], "DS": [], "DNSKEY": [], "RRSIG": [], "NSEC": [], "NSEC3": [], "SRV": [], "NAPTR": [], "TLSA": [], "SSHFP": [] }, "ipv4": [ "23.54.76.147", "23.54.76.142", "23.54.76.155", "23.54.76.141" ], "ipv6": [] }, "mail": { "spf": "v=spf1 include:_spf.google.com include:mail.zendesk.com include:spf.bytedance.com include:mail.stibee.com -all", "dmarc": "v=DMARC1; p=reject; pct=100;", "dkim_selector": "google", "dkim_host": "google._domainkey.tiktok.com", "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCR9Y52A8acjvWsey8O+hIQTbSIEx26cJ7jg9JcZbNxe3shc2EzFI/5XboSTgQA0i2Tvo7IoJP7XkZRg53V4tKrnDSy7m+JBR7RPy8Dy4FgEbdDiNKYayW4dAWhPpYNz3q2puvK8l2RK4g0QmeomKHRz2YgfVUwAVDeKwsCv49nmwIDAQAB", "spf_analysis": { "valid": true, "lookups": 4, "final": "-all", "message": "Within the estimated limit" }, "dmarc_analysis": { "valid": true, "policy": "reject" }, "bimi": "v=BIMI1;l=https://vmc.digicert.com/876e1283-d94c-4294-bc96-f3c49bdeaf7b.svg;a=https://vmc.digicert.com/876e1283-d94c-4294-bc96-f3c49bdeaf7b.pem", "mta_sts": "", "tls_rpt": "" }, "advanced": { "ptr": "a23-54-76-147.deploy.static.akamaitechnologies.com", "propagation": { "consistent": false, "results": [ { "provider": "Google", "server": "8.8.8.8", "result": [ "23.54.76.141", "23.54.76.142", "23.54.76.146", "23.54.76.147", "23.54.76.148", "23.54.76.155" ], "time_ms": 73.66 }, { "provider": "Cloudflare", "server": "1.1.1.1", "result": [ "23.213.186.196", "23.213.186.210" ], "time_ms": 46.45 }, { "provider": "Quad9", "server": "9.9.9.9", "result": [ "23.211.127.45", "23.211.127.53", "23.211.127.54", "23.211.127.60", "23.211.127.63", "23.211.127.64", "23.211.127.70", "23.211.127.81" ], "time_ms": 168.44 }, { "provider": "OpenDNS", "server": "208.67.222.222", "result": [ "23.54.76.141", "23.54.76.142", "23.54.76.146", "23.54.76.147", "23.54.76.148", "23.54.76.155" ], "time_ms": 74.39 }, { "provider": "AdGuard", "server": "94.140.14.14", "result": [ "23.48.224.199", "23.48.224.200", "23.48.224.206", "23.48.224.207", "23.48.224.209", "23.48.224.210" ], "time_ms": 69.42 } ] } }, "ssl": { "available": true, "issuer": "DigiCert Inc", "subject": "*.tiktok.com", "valid_from": "2026-05-18T19:00:00-05:00", "valid_to": "2026-12-03T17:59:59-06:00", "days_remaining": 117, "san": [ "*.tiktok.com", "tiktok.com" ], "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384" }, "http": { "url": "https://www.tiktok.com/", "status": "HTTP/2 200 ", "http_version": "3", "headers": { "server": "nginx", "content-length": "0", "location": "https://www.tiktok.com/", "expires": "Sat, 08 Aug 2026 21:57:17 GMT", "cache-control": "max-age=0, no-cache, no-store", "pragma": "no-cache", "date": "Sat, 08 Aug 2026 21:57:17 GMT", "x-cache": "TCP_MISS from a2-17-209-16.deploy.akamaitechnologies.com (AkamaiGHost/22.6.0-b8e8d824213d94d5c52a9e9e0de0fd20) (-)", "x-tt-trace-tag": "id=16;cdn-cache=miss;type=dyn", "server-timing": "inner; dur=171", "x-akamai-request-id": "41e172ee.80d0967", "content-type": "text/html; charset=utf-8", "feature-policy": "microphone 'none'; geolocation 'none'", "referrer-policy": "strict-origin-when-cross-origin", "strict-transport-security": "max-age=31536000; includeSubdomains", "x-bytefaas-enable-stream": "true", "x-bytefaas-execution-duration": "169.25", "x-bytefaas-request-id": "2026080821571701DEBE8A168C26B8EDAF", "x-content-type-options": "nosniff", "x-download-options": "noopen", "x-frame-options": "SAMEORIGIN", "x-gw-dst-psm": "serverless.tiktok.desktop", "x-powered-by": "Goofy Node", "x-pumbaa-web-avail": "1", "x-tt-logid": "2026080821571701DEBE8A168C26B8EDAF", "x-xss-protection": "1; mode=block", "access-control-expose-headers": "x-tt-traceflag,x-tt-logid", "x-tt-trace-host": "01d8664ad8694ae4e9dad87f6f255ded469e1274d659f1fb3dcb26d2589c63dcd648d80b4c78bbc07c9897796957018477f0cd867d823541d258fcc3e5f029fadbdf4487a4e6047cdd1ba5e7689746286a534f7298f2be881f882f1605793027fef97c420bde855414d9c5abc1f5a1e91c", "x-tt-trace-id": "00-26080821571701DEBE8A168C26B8EDAF-60CEBA1952E2D672-00", "reporting-endpoints": "csp-endpoint=\"https://mon16-normal-useast5.tiktokv.us/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=oAwsdSRvQQk4fDXvkPF5PR&v=4&s=392&b=oab\"", "content-security-policy": "report-uri https://mon16-normal-useast5.tiktokv.us/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=oAwsdSRvQQk4fDXvkPF5PR&v=4&s=392&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsintegrity.net *.akamaized.net *.amazonaws.com *.bing.com *.bitssec.com *.braintree-api.com *.braintreegateway.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttcdn-us.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com media.ticketmaster.eu play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com unpkg.com vimeo.com lf-tiktok-web-bak.tiktokcdn-us.com; connect-src * 'unsafe-inline' blob: data:; frame-ancestors tea-va.bytedance.net www.tiktok.com; frame-src bytedance: *.kakao.com *.tiktok.com access.line.me accounts.google.com api.twitter.com appleid.apple.com assets.braintreegateway.com client-api.arkoselabs.com h.online-metrix.net lf16-web.tiktokcdn.com newassets.hcaptcha.com recaptcha.google.com tx41v.arkoselabs.com www.facebook.com www.google.com; script-src 'report-sample' 'unsafe-eval' 'inline-speculation-rules' 'wasm-unsafe-eval' *.tiktokcdn-us.com accounts.google.com apis.google.com billshark-cdn.s3.amazonaws.com c.paypal.com cdnjs.cloudflare.com client-api.arkoselabs.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net js-cdn.music.apple.com/musickit/v3/musickit.js js.braintreegateway.com js.hcaptcha.com js.hsforms.net recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/bric-captcha-ttweb/core-captcha/ static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.facebook.net www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com lf-tiktok-web-bak.tiktokcdn-us.com lf16-tiktok-web.tiktokcdn-us.com/obj/tiktok-web-tx/obj/waf-aiso/ appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/", "x-origin-response-time": "177,23.53.12.9", "set-cookie": "tt_chain_token=m1Pm3n7fJiE2aDBCbn6tog==; path=/; expires=Thu, 04 Feb 2027 21:57:17 GMT; domain=.tiktok.com; secure; httponly", "x-cache-remote": "TCP_MISS from a23-53-12-9.deploy.akamaitechnologies.com (AkamaiGHost/22.6.1-4597402fd555c12a7378e2f925ec0cc9) (-)", "x-parent-response-time": "196,2.17.209.16" }, "security_checks": { "strict-transport-security": true, "content-security-policy": true, "x-content-type-options": true, "x-frame-options": true, "referrer-policy": true, "permissions-policy": false, "cross-origin-opener-policy": false, "cross-origin-embedder-policy": false, "cross-origin-resource-policy": false }, "server": "nginx", "powered_by": "Goofy Node" }, "webpage": { "url": "https://www.tiktok.com/", "title": "TikTok - Make Your Day", "description": "", "success": true, "error": "", "status": 200 }, "network": { "23.54.76.147": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" }, "23.54.76.142": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" }, "23.54.76.155": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" }, "23.54.76.141": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" } }, "smtp": { "host": "mx3.tiktok.com", "ports": [ { "port": 25, "open": false, "time_ms": 9.4, "banner": "", "error": "Connection refused" }, { "port": 465, "open": false, "time_ms": 4028.7, "banner": "", "error": "Connection timed out" }, { "port": 587, "open": false, "time_ms": 4030.2, "banner": "", "error": "Connection timed out" } ] }, "visitor": { "ip": "216.73.217.62", "reverse": "", "country": "", "country_code": "", "region": "", "city": "", "latitude": null, "longitude": null, "isp": "", "organization": "", "asn": "", "timezone": "", "browser": "Other", "os": "Other", "language": "", "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "is_bot": true, "cloudflare": false }, "analysis_time_ms": 101.59 }