{
    "ok": true,
    "domain": "aiaa.org",
    "generated_at": "2026-08-09T16:51:34-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 76,
        "label": "Good",
        "categories": {
            "dns": 70,
            "mail": 90,
            "security": 65,
            "network": 35,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "2 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "4 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 0,
                "lost_points": 15,
                "detail": "Both DS and DNSKEY are required."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "1 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "38 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "0 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30,
                "detail": "PTR not detected."
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/2 200 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "2 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "4 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "DNSSEC chain",
                "detail": "Both DS and DNSKEY are required.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 0,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "1 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "38 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "HTTP security headers",
                "detail": "0 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "error",
                "title": "PTR reverse DNS",
                "detail": "PTR not detected.",
                "category": "network",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30
            },
            {
                "level": "ok",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/2 200 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "141.193.213.21",
                "141.193.213.20"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "0 aiaa-org.mail.protection.outlook.com."
            ],
            "TXT": [
                "\"v=spf1 include:_spf.psm.knowbe4.com include:_spf.intacct.com include:spf.literatumonline.com include:spf.protection.outlook.com include:mail1.wpengine.com include:sendgrid.secure-platform.com ip4:64.211.221.85 ip4:167.68.16.1 ip4:167.68.16.2 ip4:216.230.1\" \"24.68 ip4:216.230.113.107 ip4:192.254.116.40 ip4:149.72.129.100 ip4:168.245.114.230 ip4:149.72.193.199 ip4:63.143.55.162 ip4:64.31.50.152 ~all\"",
                "\"asv=7099b6c1bb1c54c58e7e1bee2cc8dfe8\""
            ],
            "NS": [
                "ns1-33.azure-dns.com.",
                "ns2-33.azure-dns.net.",
                "ns3-33.azure-dns.org.",
                "ns4-33.azure-dns.info."
            ],
            "SOA": [
                "ns1-33.azure-dns.com. azuredns-hostmaster.microsoft.com. 2026042701 3600 300 2419200 300"
            ],
            "CAA": [],
            "DS": [],
            "DNSKEY": [],
            "RRSIG": [],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "141.193.213.21",
            "141.193.213.20"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 include:_spf.psm.knowbe4.com include:_spf.intacct.com include:spf.literatumonline.com include:spf.protection.outlook.com include:mail1.wpengine.com include:sendgrid.secure-platform.com ip4:64.211.221.85 ip4:167.68.16.1 ip4:167.68.16.2 ip4:216.230.124.68 ip4:216.230.113.107 ip4:192.254.116.40 ip4:149.72.129.100 ip4:168.245.114.230 ip4:149.72.193.199 ip4:63.143.55.162 ip4:64.31.50.152 ~all",
        "dmarc": "v=DMARC1; p=quarantine; rua=mailto:7f146a02@mxtoolbox.dmarc-report.com,mailto:dmarc_agg@vali.email; ruf=mailto:7f146a02@forensics.dmarc-report.com; pct=0",
        "dkim_selector": "selector1",
        "dkim_host": "selector1._domainkey.aiaa.org",
        "dkim": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwur4h4w0t58SegCniqIEsJM5ITI2Z2gCgIWR1p1jdKUxu+Jmoik+7QIxhwTD5KlYucIKM1ias78S1tZJmGNKEj10Zk7oHouecuz3SO3o502slTpoYQozK/v/q2Im4Xtt8wxWms3w5fieo1zCgg77SAlzd7UoPqN19wFED6X/vFQ6gA/5Z8Avb4x91mpSJPbDIQdtW/t+jb0cCnIsRZQ7LJRMkRDHd+UjD3KBADcwF20l767f5oaey3icDipNuF3cf3WO/jLwpMHMjVFmRQ1WF9GL/HqHRDdhH4hXc9kgPWrXOo48Pg/x9bFQlnrFK7p5sNAAW5s4Ro/g4lSNSKQqoQIDAQAB;",
        "spf_analysis": {
            "valid": true,
            "lookups": 6,
            "final": "~all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "quarantine"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "141.193.213.20",
                        "141.193.213.21"
                    ],
                    "time_ms": 43.68
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "141.193.213.20",
                        "141.193.213.21"
                    ],
                    "time_ms": 26.22
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "141.193.213.20",
                        "141.193.213.21"
                    ],
                    "time_ms": 23.25
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "141.193.213.20",
                        "141.193.213.21"
                    ],
                    "time_ms": 26.94
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "141.193.213.20",
                        "141.193.213.21"
                    ],
                    "time_ms": 302.35
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "Google Trust Services",
        "subject": "aiaa.org",
        "valid_from": "2026-06-19T15:47:39-05:00",
        "valid_to": "2026-09-17T16:47:30-05:00",
        "days_remaining": 38,
        "san": [
            "aiaa.org"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_256_GCM_SHA384"
    },
    "http": {
        "url": "https://aiaa.org/",
        "status": "HTTP/2 200 ",
        "http_version": "3",
        "headers": {
            "date": "Sun, 09 Aug 2026 21:51:25 GMT",
            "content-type": "text/html; charset=UTF-8",
            "server": "cloudflare",
            "cf-cache-status": "BYPASS",
            "vary": "Accept-Encoding",
            "link": "<https://aiaa.org/>; rel=shortlink",
            "x-powered-by": "WP Engine",
            "x-cacheable": "NO:Set Known Cookie",
            "cache-control": "max-age=0, must-revalidate, private",
            "x-cache": "MISS",
            "x-cache-group": "normal",
            "set-cookie": "__cf_bm=GteYWlTu_HJ2PTUEYLdkqR9V.0GL9FTzVckA7c6fS1w-1786312285.1996708-1.0.1.1-huv0F0go3OxzIINoIm1IhfnmOPwCFQAm3gzZunnZdBiX2vDVXiQvyDr0.vTabLAclB9KaBCqnGGVzVNo1bJGFvqV5DCKMdFOkytu4_3JxHXmRwOL88RWaIF8fZ4._oh9; HttpOnly; SameSite=None; Secure; Path=/; Domain=aiaa.org; Expires=Sun, 09 Aug 2026 22:21:25 GMT",
            "cf-ray": "a289fb667dc73ff1-STL",
            "alt-svc": "h3=\":443\"; ma=86400"
        },
        "security_checks": {
            "strict-transport-security": false,
            "content-security-policy": false,
            "x-content-type-options": false,
            "x-frame-options": false,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "cloudflare",
        "powered_by": "WP Engine"
    },
    "webpage": {
        "url": "https://aiaa.org/",
        "title": "Home | AIAA",
        "description": "AIAA is the world’s largest aerospace technical society. With nearly 30,000 individual members from 85 countries, and 95 corporate members, AIAA brings together industry, academia, and government to advance engineering and science in aviation, space, and defense.",
        "success": true,
        "error": "",
        "status": 206
    },
    "network": {
        "141.193.213.21": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        },
        "141.193.213.20": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "aiaa-org.mail.protection.outlook.com",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 36.6,
                "banner": "",
                "error": "Network is unreachable"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4018.1,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4033.7,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 82.16
}