{
    "ok": true,
    "domain": "af.mil",
    "generated_at": "2026-08-08T20:43:36-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 25,
        "label": "Critical",
        "categories": {
            "dns": 45,
            "mail": 50,
            "security": 0,
            "network": 0,
            "availability": 20
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30,
                "detail": "0 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "6 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20,
                "detail": "0 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20,
                "detail": "No tested DKIM selector responded."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 0,
                "lost_points": 55,
                "detail": "No valid certificate was retrieved."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "0 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30,
                "detail": "PTR not detected."
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 0,
                "lost_points": 40,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 0,
                "lost_points": 40,
                "detail": "No successful HTTP response."
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "error",
                "title": "IPv4 (A)",
                "detail": "0 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "6 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "error",
                "title": "MX records",
                "detail": "0 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "DKIM",
                "detail": "No tested DKIM selector responded.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "Valid TLS certificate",
                "detail": "No valid certificate was retrieved.",
                "category": "security",
                "max_points": 55,
                "earned_points": 0,
                "lost_points": 55
            },
            {
                "level": "error",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "error",
                "title": "HTTP security headers",
                "detail": "0 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "error",
                "title": "PTR reverse DNS",
                "detail": "PTR not detected.",
                "category": "network",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30
            },
            {
                "level": "error",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "error",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 0,
                "lost_points": 40
            },
            {
                "level": "error",
                "title": "HTTP response",
                "detail": "No successful HTTP response.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 0,
                "lost_points": 40
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [],
            "AAAA": [],
            "CNAME": [],
            "MX": [],
            "TXT": [
                "\"smartsheet-gov-site-validation=zf9qEwM_dzagq7JhTmddVhaBJOdurnTZ\"",
                "\"tqjuins0baoi1g7o9pbek5voct\"",
                "\"identrust_validation=P6GYbtErWX9t6c1VhUx0yfEWeypJGSZqTq8OCGsw8Ouw\"",
                "\"_yy7yb8ltldoyj1yz734yq117ax3399d\"",
                "\"_8lvyc5mip5t1ttm1a5qdllna29xwaei\"",
                "\"v=spf1 mx include:_spf.eemsg.mail.mil -all\"",
                "\"_910b8dc8s9jgdz1dxqjaei6fskb2lyf\"",
                "\"_rpv0d1ie0issfw0dc58uydyuk8zq6jg\"",
                "\"google-site-verification=-p8dPDWcbHi_CLgyC9FgmvHgerc1tah_HIFIsKvqN-k\""
            ],
            "NS": [
                "ramstein-ns2.afnoc.af.mil.",
                "yokota-ns10.afnoc.af.mil.",
                "osan-ns10.afnoc.af.mil.",
                "hickam-ns2.afnoc.af.mil.",
                "gunter-ns2.afnoc.af.mil.",
                "lackland-ns2.afnoc.af.mil."
            ],
            "SOA": [
                "gunter-ns2.afnoc.af.mil. dnsman.us.af.mil. 2024250566 3600 360 604800 500"
            ],
            "CAA": [],
            "DS": [
                "64894 8 1 502101A31C359DCD744DE8D8F69FF72BADCA268C",
                "64894 8 2 FC06636260F0EBFA3F1D1206FA09D5A8F0FA95F722606CA7A23083BB 917860D0"
            ],
            "DNSKEY": [
                "256 3 8 AwEAAbc3PkZh+AxeF90zqzZolcZw6KQCaA7Smf/wCzmLx6j+d0L4UgOi Y+mI9uq4QZbE2TaUfhUXEIdGo87AYUEbTmEB9E2cAJcqMS233ogm13qZ 2/kdqz3vnFGOLsfRH6luuOwhs0WOnNshTUbddVTZS6R0QzDekgNCgSjX HVcVqxvArpAuk2qB4BKnchWJRsqv0gLmw1z4K5AucFBPGYjGvAoFWr1O XmIvoIM4/LCb3z/jsk08Bo7DOSSG5KCEjqSSgPkPlskA4wNpjpcpdaUA Tg5eZqKqrigQtfI7IXl1ANDaR75xRfj4jEEzXU6n5/aZVoDz0HJBmg46 I5xdq8k8Up0=",
                "257 3 8 AwEAAcEBm0szeFHwHLwEiQP7K4ZYjyzsq1VdOJSDPgflgJ4qA2MVQ/fL jMJjiBqO0jnKQgL0Q8nrLuvRsBFPVunWl3Cc10oiLVxsefBuB8nu2dJ7 1o8RbND/9swcCUKs64TcRMM9j6pyFf3pCh9gE/QrAbzcM5Yw/ex3q7tI 2UPwJV+aoR12UYTR2W/j3gzRDEU8NidNKwhts9NNGNyLFFpIhAO2JjDj Tf6hb7CYw0/uvwoz1TQr7OMDzZTCx3qAnwaeSQdjfO+GvrwjAUHMCcN3 LFPJjBvnZq1gxdTY2x/r3+4GoBt7jyUgVGJnlpqCAQ65/eAYXjy5VYNa qJQsgLSYQ2c=",
                "257 3 8 AwEAAcdFAnwGytHzZ8dRLROXd1tg4lV/vYVg9EXSlwRDHVw6ZSQFlicq Ce7r0f7N2cvbq1RCy2lKJu9eoA/NDcBTF5YmixL214pzhxD8W6PZFZvh O8jgyM7aC+2jmqaowwugqIN7K8N4StYZGa5F0m0MLIZPo9i7G4wLCpBb zweh/kSd4Pp2SDmdSxqWYS74Ra+NkBTYkg9ubX/HsHYfA4wUrE9G4K0Q 0JAc5RbA+O76CaJ9CMzWHou8svXSDGUJnVyDyEjRU5F1E3N2xg6vZsAt yugELKDXADIEfQvsNAdXSCC0xQAPEs1cgyo8LsG00/MghMvrUSROT9Is wBEnCIzHIPc=",
                "256 3 8 AwEAAa5gMUFOzMaISHiA6/2b9ART6Kwp+gcut6UoWefSJ+bbUW4+HEU+ TDoWYcHdY3hxp3MmvAvP0w5l4BplpeZBScmmauK3eBhruj8ZTTotwkud KO7C9UdRvtb1N2Y3wiIomkSWZlB6yxbEOvtBHoJySDz42QLFNgQFOyVj +aJUseGtTbb8Rc6Ci2Z7mtXd1omvnInhT+32sRHBlzur57XXXLdbFcsk VihmQl7MMQ/fh/GUS+Ogq7tBt8x945PqUEcZZVjdAp3Ns7O+s8b1YOQR W+1Lb1vfWryKHLtOJBIHUxi+cow+g+o4dxH65Ulbf5+u4N8ZaaNjdxtc kgEwagBEZH0="
            ],
            "RRSIG": [
                "SOA 8 2 3600 20260813013154 20260809003154 495 af.mil. idJt2i0eWjBRC6gg+02Cn5drgJcySqX9koZsQvjknrilHjBH62mKwK5N HB3oCb4xd/DqbTWC2g+ikMQlBIfNTp1X3ntcaPQC3yBeWte4Xfpx7ARg 0pYFZCOyaQqJDDUhy0HpqzBI/J5yoUoHnIj9Qv4TXYnE8cikJczv+LZV ueGdobzJhtgG4cF/YkyAoMCXoj/vw44LsSULE42UXjKj4pbnzfjKp92r LNfdqwnSO67jTEO9Q2JTi2M8wMlfpARw58ZeG3ubWq/yVUellCDexEVz e31Zxcoh/Ei9CR9sO3DPqq82bXboWTUQCs49O2BtfBMUUHQ7MAc8kxQZ JOUGxw==",
                "NS 8 2 3600 20260812170616 20260808162344 495 af.mil. sylWq0UDnyjnuv+BHCav3xCaS0rL/3ZgQFaj0NTUBYRb/EL4vaTTLVHH 3NroKkeGXUcYVjEUy2VwE3wD9ZeEExMBYqJ4+RJ3HRGZPYiDH/Sy/amA +Seug5cHiBvUGmum5iI+ttRqOPJTyexoN107VHKezeffvyRThItrwF3T 1LKYKz51AwBhO+3yF54pfrLNgsQvo/vEKSGsZxWA0xvRVSvF0GMxyDEZ 7ClzBz/miAc8BrW7i0r3OEm9ytyENRdhgwPLjTHke1qtl8+FAOWv5WWQ xlyDUHQkzPlERvGid/OTYtz92iqo/WdvzB+8ct95SgUjowW/VOOvJVAd Y8QgcA==",
                "TXT 8 2 300 20260812164051 20260808154622 495 af.mil. Odbg8Y7+R80Kw51v7N0CA6xq4NXLebUnZQ8BmWmM5lb/ICUfOMpiuHqM iMTE8YV4+2bwM9N5w3u0Mvqhimfx8U3lBNmrYyB9wvfxaI3uieQ9vTzf dmUr+YsrkhcDbw+I74ihLSNRgfjWE19qSFbVSzAFJkc1gbmaiKQMegqW YKEsRZJ8bdzu9MsbQnMdUFvaISjRA5ZDL4xa/FgaObnuqYhAvPapSq3J MfJRJjYzor3ios56Jhj9uyvbMd2M1cUd19SzZwqG4hWdT98n4/5F6wm5 kAE/r/8IAY2Pfg49C1GjQP0vo1RDQCrTPE7leALJr04EGcLeNthYbVUP y8wDIw==",
                "DS 8 2 10800 20260814230220 20260807230220 43458 mil. kXHL1pJxrpPT29b7GUZ7bVPxOZhx78IwSW1bAVGCz7lIQV7EiC9pAyQd NctYBnl6lraxfznhHDTgSw2MXnVBfzuvf1hEoQNX97kBEzNmetztuUn8 2NRqolnwHSIEbM6n+MZ87EIA7HHV4lQtG1MphWs9cHC/bevf4r0Gj8F1 ciY="
            ],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 mx include:_spf.eemsg.mail.mil -all",
        "dmarc": "v=DMARC1;p=reject;sp=reject;rua=mailto:dmarc_reports@mail.mil",
        "dkim_selector": "x",
        "dkim_host": "",
        "dkim": "",
        "spf_analysis": {
            "valid": true,
            "lookups": 2,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "reject"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "",
        "propagation": {
            "consistent": false,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [],
                    "time_ms": 75.89
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [],
                    "time_ms": 64.47
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [],
                    "time_ms": 54.43
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [],
                    "time_ms": 222.9
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [],
                    "time_ms": 295.99
                }
            ]
        }
    },
    "ssl": {
        "available": false,
        "issuer": "",
        "subject": "",
        "valid_from": "",
        "valid_to": "",
        "days_remaining": null,
        "san": [],
        "protocol": "",
        "cipher": "",
        "error": "php_network_getaddresses: getaddrinfo failed: No address associated with hostname"
    },
    "http": {
        "url": "https://af.mil/",
        "status": "",
        "http_version": "0",
        "headers": [],
        "security_checks": {
            "strict-transport-security": false,
            "content-security-policy": false,
            "x-content-type-options": false,
            "x-frame-options": false,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://af.mil/",
        "title": "",
        "description": "",
        "success": false,
        "error": "Could not resolve host: af.mil"
    },
    "network": [],
    "smtp": {
        "host": "af.mil",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 2.7,
                "banner": "",
                "error": "php_network_getaddresses: getaddrinfo failed: No address associated with hostname"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 21.7,
                "banner": "",
                "error": "php_network_getaddresses: getaddrinfo failed: No address associated with hostname"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 2.7,
                "banner": "",
                "error": "php_network_getaddresses: getaddrinfo failed: No address associated with hostname"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 81.52
}