{
"ok": true,
"domain": "wfp.org",
"generated_at": "2026-08-09T00:08:14-05:00",
"cache": {
"hit": true,
"ttl": 0
},
"score": {
"total": 84,
"label": "Good",
"categories": {
"dns": 70,
"mail": 90,
"security": 84,
"network": 65,
"availability": 100
},
"category_weights": {
"dns": 25,
"mail": 20,
"security": 25,
"network": 10,
"availability": 20
},
"items": [
{
"category": "dns",
"title": "IPv4 (A)",
"max_points": 30,
"earned_points": 30,
"lost_points": 0,
"detail": "2 IPv4 address(es) detected."
},
{
"category": "dns",
"title": "IPv6 (AAAA)",
"max_points": 10,
"earned_points": 0,
"lost_points": 10,
"detail": "0 IPv6 address(es) detected."
},
{
"category": "dns",
"title": "Name server redundancy",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "4 NS record(s); 2 or more required."
},
{
"category": "dns",
"title": "SOA record",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Authoritative zone record."
},
{
"category": "dns",
"title": "DNSSEC chain",
"max_points": 15,
"earned_points": 0,
"lost_points": 15,
"detail": "Both DS and DNSKEY are required."
},
{
"category": "dns",
"title": "CAA policy",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "Certificate authority restriction."
},
{
"category": "dns",
"title": "DNS propagation",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Agreement between public resolvers."
},
{
"category": "mail",
"title": "MX records",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "1 MX record(s)."
},
{
"category": "mail",
"title": "SPF",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "SPF policy published."
},
{
"category": "mail",
"title": "DMARC",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "DMARC policy published."
},
{
"category": "mail",
"title": "DKIM",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "A DKIM selector was verified."
},
{
"category": "mail",
"title": "MTA-STS",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "Mail transport policy."
},
{
"category": "mail",
"title": "TLS-RPT",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "TLS reporting policy."
},
{
"category": "security",
"title": "Valid TLS certificate",
"max_points": 55,
"earned_points": 55,
"lost_points": 0,
"detail": "68 day(s) remaining."
},
{
"category": "security",
"title": "Certificate lifetime",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Full points require at least 30 days remaining."
},
{
"category": "security",
"title": "HTTP security headers",
"max_points": 35,
"earned_points": 19,
"lost_points": 16,
"detail": "5 of 9 evaluated headers detected."
},
{
"category": "network",
"title": "PTR reverse DNS",
"max_points": 30,
"earned_points": 30,
"lost_points": 0,
"detail": "PTR: ec2-52-214-191-221.eu-west-1.compute.amazonaws.com"
},
{
"category": "network",
"title": "IPv4 diversity",
"max_points": 35,
"earned_points": 35,
"lost_points": 0,
"detail": "Two or more IPv4 addresses receive full points."
},
{
"category": "network",
"title": "IPv6 connectivity",
"max_points": 35,
"earned_points": 0,
"lost_points": 35,
"detail": "AAAA availability."
},
{
"category": "availability",
"title": "DNS resolution",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "At least one address family must resolve."
},
{
"category": "availability",
"title": "HTTP response",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "HTTP/2 200 "
},
{
"category": "availability",
"title": "HTTPS final URL",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "Final URL uses HTTPS."
}
],
"methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
"diagnostics": [
{
"level": "ok",
"title": "IPv4 (A)",
"detail": "2 IPv4 address(es) detected.",
"category": "dns",
"max_points": 30,
"earned_points": 30,
"lost_points": 0
},
{
"level": "error",
"title": "IPv6 (AAAA)",
"detail": "0 IPv6 address(es) detected.",
"category": "dns",
"max_points": 10,
"earned_points": 0,
"lost_points": 10
},
{
"level": "ok",
"title": "Name server redundancy",
"detail": "4 NS record(s); 2 or more required.",
"category": "dns",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SOA record",
"detail": "Authoritative zone record.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "error",
"title": "DNSSEC chain",
"detail": "Both DS and DNSKEY are required.",
"category": "dns",
"max_points": 15,
"earned_points": 0,
"lost_points": 15
},
{
"level": "error",
"title": "CAA policy",
"detail": "Certificate authority restriction.",
"category": "dns",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "ok",
"title": "DNS propagation",
"detail": "Agreement between public resolvers.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "MX records",
"detail": "1 MX record(s).",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SPF",
"detail": "SPF policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DMARC",
"detail": "DMARC policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DKIM",
"detail": "A DKIM selector was verified.",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "error",
"title": "MTA-STS",
"detail": "Mail transport policy.",
"category": "mail",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "error",
"title": "TLS-RPT",
"detail": "TLS reporting policy.",
"category": "mail",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "ok",
"title": "Valid TLS certificate",
"detail": "68 day(s) remaining.",
"category": "security",
"max_points": 55,
"earned_points": 55,
"lost_points": 0
},
{
"level": "ok",
"title": "Certificate lifetime",
"detail": "Full points require at least 30 days remaining.",
"category": "security",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "warning",
"title": "HTTP security headers",
"detail": "5 of 9 evaluated headers detected.",
"category": "security",
"max_points": 35,
"earned_points": 19,
"lost_points": 16
},
{
"level": "ok",
"title": "PTR reverse DNS",
"detail": "PTR: ec2-52-214-191-221.eu-west-1.compute.amazonaws.com",
"category": "network",
"max_points": 30,
"earned_points": 30,
"lost_points": 0
},
{
"level": "ok",
"title": "IPv4 diversity",
"detail": "Two or more IPv4 addresses receive full points.",
"category": "network",
"max_points": 35,
"earned_points": 35,
"lost_points": 0
},
{
"level": "error",
"title": "IPv6 connectivity",
"detail": "AAAA availability.",
"category": "network",
"max_points": 35,
"earned_points": 0,
"lost_points": 35
},
{
"level": "ok",
"title": "DNS resolution",
"detail": "At least one address family must resolve.",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTP response",
"detail": "HTTP/2 200 ",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTPS final URL",
"detail": "Final URL uses HTTPS.",
"category": "availability",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
}
]
},
"dns": {
"records": {
"A": [
"52.214.191.221",
"34.249.251.225"
],
"AAAA": [],
"CNAME": [],
"MX": [
"5 wfp-org.mail.protection.outlook.com."
],
"TXT": [
"\"E/2JYshht83MCxyJK+qr4VPRvmVoUUEDT13YB1B64on/bGbxy6wg1ZFRlBYc0X0+IwdUuFK8n7b2gg310rNkMQ==\"",
"\"slack-domain-verification=SbRERE2PMV0k884zZqsgKRQWkojbrLlxjjhxsy5Z\"",
"\"atlassian-domain-verification=aUsw8AKVGgofrZwtQMacjhPK0LtLZvqGkjT4cfjSUKYlX3aFO2VWNquvr4dpK3IQ\"",
"\"v=spf1 include:_u.wfp.org._spf.smart.ondmarc.com ~all\"",
"\"canva-site-verification=0g0R_pwIyvO3mWxIomp-KA\"",
"\"docusign=067086f7-2298-4d93-b7cb-39863515f515\"",
"\"onetrust-domain-verification=bc00c1809bdf4da0ae8bb77749167419\"",
"\"MS=ms94975635\"",
"\"google-site-verification=Qp-w_gxWHI_MdKFJbR3jZ933JosZsG3rZ5rHGpexPnw\"",
"\"pexip-ms-tenant-domain-verification=a73e99ad-4889-49d6-b7dc-168e9f24fc86\"",
"\"CisionOne SAML=47853f22216c5dcac6bcbab490420c185591ee2b6f099ffd6c83b8d355a6f299\"",
"\"jamf-site-verification=DFvdPvj6MsvnyB4-lXsiGg\""
],
"NS": [
"ns-799.awsdns-35.net.",
"ns-232.awsdns-29.com.",
"ns-1160.awsdns-17.org.",
"ns-1636.awsdns-12.co.uk."
],
"SOA": [
"ns-799.awsdns-35.net. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400"
],
"CAA": [],
"DS": [],
"DNSKEY": [],
"RRSIG": [],
"NSEC": [],
"NSEC3": [],
"SRV": [],
"NAPTR": [],
"TLSA": [],
"SSHFP": []
},
"ipv4": [
"52.214.191.221",
"34.249.251.225"
],
"ipv6": []
},
"mail": {
"spf": "v=spf1 include:_u.wfp.org._spf.smart.ondmarc.com ~all",
"dmarc": "v=DMARC1; p=reject; pct=100; sp=reject; rua=mailto:30771c77@inbox.ondmarc.com,mailto:dmarc-agreports@wfp.org; ruf=mailto:30771c77@inbox.ondmarc.com,mailto:dmarc-aforeports@wfp.org; adkim=r; aspf=r; fo=1; rf=afrf; ri=3600",
"dkim_selector": "selector2",
"dkim_host": "selector2._domainkey.wfp.org",
"dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD36xwTmz/6V/pNGaDuesN8NvvjKx2ajB0JaxqY43qld1meQ9KLvyjYuuJRpYSmLMh1O+nUNpW+qYSZ6T6eV2R+6Uoj1yibPUNz1tiIzBaZjh/HUntpZlflZMXun0ZzIDgXEQQ7jK8DlOo+jbphHTwws9ogAMrEsVEvbfNm5TjYCQIDAQAB;",
"spf_analysis": {
"valid": true,
"lookups": 1,
"final": "~all",
"message": "Within the estimated limit"
},
"dmarc_analysis": {
"valid": true,
"policy": "reject"
},
"bimi": "",
"mta_sts": "",
"tls_rpt": ""
},
"advanced": {
"ptr": "ec2-52-214-191-221.eu-west-1.compute.amazonaws.com",
"propagation": {
"consistent": true,
"results": [
{
"provider": "Google",
"server": "8.8.8.8",
"result": [
"34.249.251.225",
"52.214.191.221"
],
"time_ms": 61.62
},
{
"provider": "Cloudflare",
"server": "1.1.1.1",
"result": [
"34.249.251.225",
"52.214.191.221"
],
"time_ms": 52.93
},
{
"provider": "Quad9",
"server": "9.9.9.9",
"result": [
"34.249.251.225",
"52.214.191.221"
],
"time_ms": 86.92
},
{
"provider": "OpenDNS",
"server": "208.67.222.222",
"result": [
"34.249.251.225",
"52.214.191.221"
],
"time_ms": 135.32
},
{
"provider": "AdGuard",
"server": "94.140.14.14",
"result": [
"34.249.251.225",
"52.214.191.221"
],
"time_ms": 266.99
}
]
}
},
"ssl": {
"available": true,
"issuer": "Amazon",
"subject": "wfp.org",
"valid_from": "2026-04-01T19:00:00-05:00",
"valid_to": "2026-10-16T18:59:59-05:00",
"days_remaining": 68,
"san": [
"wfp.org"
],
"protocol": "TLSv1.2",
"cipher": "ECDHE-RSA-AES128-GCM-SHA256"
},
"http": {
"url": "https://www.wfp.org/",
"status": "HTTP/2 200 ",
"http_version": "3",
"headers": {
"server": "Apache",
"date": "Sun, 09 Aug 2026 05:08:05 GMT",
"content-type": "text/html; charset=UTF-8",
"content-length": "0",
"location": "https://www.wfp.org/",
"cache-control": "must-revalidate, no-cache, private",
"content-language": "en",
"x-content-type-options": "nosniff",
"x-frame-options": "SAMEORIGIN",
"expires": "Sun, 19 Nov 1978 05:00:00 GMT",
"content-security-policy": "default-src 'self'; script-src 'self' analytics.tiktok.com wcs.naver.net *.spring.wfp.org cdn.wfp.org *.jwplatform.com www.google.com *.googletagmanager.com tagmanager.google.com *.google-analytics.com survey.g.doubleclick.net *.doubleclick.net *.adalyser.com *.jwpcdn.com www.gstatic.com adservice.google.com connect.facebook.net www.facebook.com squizlabs.github.io cdnjs.cloudflare.com unpkg.com cdn.sparkcentral.com *.smooch.io *.user1st.info www.googleadservices.com bat.bing.com sixeleven.involve.me assets.juicer.io *.typekit.net *.hotjar.com *.hotjar.io platform.twitter.com *.optimizely.com optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.onetrust.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.spring.wfp.org cdn.wfp.org tagmanager.google.com fonts.googleapis.com *.bootstrapcdn.com squizlabs.github.io cdn.sparkcentral.com *.user1st.info assets.juicer.io *.typekit.net https://*.onetrust.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com; img-src 'self' blob: https: data:; media-src 'self' content.jwplatform.com *.jwpsrv.com cdn.jwplayer.com cdn.sparkcentral.com *.user1st.info blob:; frame-src 'self' *.jwpsrv.com www.google.com survey.g.doubleclick.net *.doubleclick.net cdn.knightlab.com forms.office.com content.jwplatform.com *.user1st.info www.youtube-nocookie.com sixeleven.involve.me saveful.com *.hotjar.com *.hotjar.io datawrapper.dwcdn.net platform.twitter.com a26943920264.cdn.optimizely.com a26943920264.cdn-pci.optimizely.com https://www.googletagmanager.com https://*.onetrust.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com; child-src 'self' blob:; font-src 'self' cdn.wfp.org *.jwpcdn.com fonts.gstatic.com *.bootstrapcdn.com cdn.sparkcentral.com *.user1st.info static.juicer.io *.typekit.net *.hotjar.com *.hotjar.io data:; connect-src 'self' data: analytics.tiktok.com wcs.naver.com tiles.arcgis.com spring.wfp.org *.spring.wfp.org cdn.wfp.org geonode.wfp.org *.google-analytics.com *.analytics.google.com *.googletagmanager.com analytics.google.com api.mapbox.com geoip.nekudo.com api.ipify.org api.ip2country.info mycountry.picktek.org content.jwplatform.com *.jwpsrv.com cdn.jwplayer.com acr.api.spring.wfp.org cdn.sparkcentral.com *.smooch.io *.user1st.info stats.g.doubleclick.net fh.mg.wfp.org geoip.maxmind.com www.juicer.io juicer.io graph.facebook.com *.typekit.net *.sentry.io bat.bing.com *.hotjar.com *.hotjar.io *.jwpltx.com logx.optimizely.com *.optimizely.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.google.com https://google.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://*.onetrust.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://entitlements.jwplayer.com https://ssl.p.jwpcdn.com 'self' ws: https://o274918.ingest.sentry.io/api/5249464/envelope/; upgrade-insecure-requests",
"x-xss-protection": "1; mode=block",
"strict-transport-security": "max-age=2592000",
"referrer-policy": "no-referrer-when-downgrade",
"x-permitted-cross-domain-policies": "none",
"access-control-expose-headers": "*",
"x-drupal-cache": "HIT",
"vary": "User-Agent,Accept",
"x-drupal-dynamic-cache": "UNCACHEABLE (poor cacheability)",
"link": "; rel=\"alternate\"; hreflang=\"en\", ; rel=\"alternate\"; hreflang=\"ar\", ; rel=\"alternate\"; hreflang=\"fr\", ; rel=\"alternate\"; hreflang=\"es\", ; rel=\"alternate\"; hreflang=\"zh-hans\", ; rel=\"alternate\"; hreflang=\"fa\", ; rel=\"alternate\"; hreflang=\"de\", ; rel=\"alternate\"; hreflang=\"ja\", ; rel=\"alternate\"; hreflang=\"ko\""
},
"security_checks": {
"strict-transport-security": true,
"content-security-policy": true,
"x-content-type-options": true,
"x-frame-options": true,
"referrer-policy": true,
"permissions-policy": false,
"cross-origin-opener-policy": false,
"cross-origin-embedder-policy": false,
"cross-origin-resource-policy": false
},
"server": "Apache",
"powered_by": ""
},
"webpage": {
"url": "https://www.wfp.org/",
"title": "UN World Food Programme (WFP)",
"description": "We are the world’s largest humanitarian organization, saving lives in emergencies and using food assistance to build a pathway to peace, stability and prosperity for people recovering from conflict, disasters and the impact of climate change.",
"success": true,
"error": "",
"status": 206
},
"network": {
"52.214.191.221": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
},
"34.249.251.225": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
}
},
"smtp": {
"host": "wfp-org.mail.protection.outlook.com",
"ports": [
{
"port": 25,
"open": false,
"time_ms": 20.8,
"banner": "",
"error": "Network is unreachable"
},
{
"port": 465,
"open": false,
"time_ms": 4025,
"banner": "",
"error": "Connection timed out"
},
{
"port": 587,
"open": false,
"time_ms": 4055.8,
"banner": "",
"error": "Connection timed out"
}
]
},
"visitor": {
"ip": "216.73.217.62",
"reverse": "",
"country": "",
"country_code": "",
"region": "",
"city": "",
"latitude": null,
"longitude": null,
"isp": "",
"organization": "",
"asn": "",
"timezone": "",
"browser": "Other",
"os": "Other",
"language": "",
"user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
"is_bot": true,
"cloudflare": false
},
"analysis_time_ms": 85.8
}