{
    "ok": true,
    "domain": "asm.org",
    "generated_at": "2026-08-08T22:24:37-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 78,
        "label": "Good",
        "categories": {
            "dns": 70,
            "mail": 90,
            "security": 69,
            "network": 50,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "2 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 0,
                "lost_points": 15,
                "detail": "Both DS and DNSKEY are required."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "1 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "137 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 4,
                "lost_points": 31,
                "detail": "1 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: ec2-23-23-98-209.compute-1.amazonaws.com"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/2 200 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "2 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "DNSSEC chain",
                "detail": "Both DS and DNSKEY are required.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 0,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "1 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "137 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "1 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 4,
                "lost_points": 31
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: ec2-23-23-98-209.compute-1.amazonaws.com",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/2 200 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "23.23.98.209"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "0 asmteam365.mail.protection.outlook.com."
            ],
            "TXT": [
                "\"n6qog63enhljfmdsvhdpca9a7p\"",
                "\"ca3-da71195c29c84ce1b51386c94318236c\"",
                "\"facebook-domain-verification=8f525ur4h034bfbo1xqrvzbv3i4p2p\"",
                "\"0ed1fe018ac79a8f1ba2f54f45937f2b\"",
                "\"21orm3n9gto7m5oukd12dng6nb\"",
                "\"j5vh5h8dkeih2a7acvul3d9m4d\"",
                "\"ca3-84129b3e58bb410287c74489b488e9f2\"",
                "\"MS=ms13160843\"",
                "\"v=spf1 include:_u.asm.org._spf.dmarcly.com -all\"",
                "\"google-site-verification=C-yHBkaxm75yixz8pQPyZYcbsLQFkB9-un7Km1aw3K4\"",
                "\"1g4lu8a8nsqc4sg167mu2ici74\"",
                "\"0ed1fe018a6066f24eb1824ca89b3c834437e31c9e\"",
                "\"hgitfdamul21p8q0uiqsubv4qn\"",
                "\"ca3-dc754b7db990480fb219adaf83c2429f\"",
                "\"google-site-verification=ipFIIcYII9rJz0TjvrEiduEqaLFxbD2WX1qutH79Z68\"",
                "\"ZOOM_verify_KKFzkHDMRJWcS5pFhAUWzw\""
            ],
            "NS": [
                "ns1.dnsbycomodo.net.",
                "ns2.dnsbycomodo.net."
            ],
            "SOA": [
                "ns1.dnsbycomodo.net. admin.dns.com. 2026062401 10800 864000 7200 7200"
            ],
            "CAA": [],
            "DS": [],
            "DNSKEY": [],
            "RRSIG": [],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "23.23.98.209"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 include:_u.asm.org._spf.dmarcly.com -all",
        "dmarc": "v=DMARC1; p=quarantine; sp=none; rua=mailto:re+1bbd68a24512@inbound.dmarcdigests.com; pct=100",
        "dkim_selector": "selector1",
        "dkim_host": "selector1._domainkey.asm.org",
        "dkim": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8dxBR7Xn0B8lp1qZ2QKXDGj0iso/iejYQgHIlp67y7gM1HT9pGrEWkZZ7N3Nfb258DZQ2M24OjObq0eJlxF8UC+gAN4K08kBg7cSmskkDwBvZQgWxPC/zlAPDl+ZU6WI5vu/IF5Z4+15nMjfQ0OxgXYFsbaIyY3GxFXXhIDERmql3bysbCwLJhYDB/YKXdd63dS3HmkFdySVRxngJQ2l11cVEVcWGYoBTseNV1JQ/B4CrhA7AN+uSWKJ+FrQ4KaRighE9Auiv8rtOTeIZbu+IhytdRucOirDowTG24DZ5eUU/zZ66Ln1Bdp/9/cNuV1G/oRhJEFVn7rePAvHTZYGQIDAQAB;",
        "spf_analysis": {
            "valid": true,
            "lookups": 1,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "quarantine"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "ec2-23-23-98-209.compute-1.amazonaws.com",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "23.23.98.209"
                    ],
                    "time_ms": 58.52
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "23.23.98.209"
                    ],
                    "time_ms": 45.07
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "23.23.98.209"
                    ],
                    "time_ms": 284.86
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "23.23.98.209"
                    ],
                    "time_ms": 67.5
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "23.23.98.209"
                    ],
                    "time_ms": 569.03
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "GoDaddy.com",
        "subject": "*.asm.org",
        "valid_from": "2026-06-09T07:30:40-05:00",
        "valid_to": "2026-12-24T06:30:40-06:00",
        "days_remaining": 137,
        "san": [
            "*.asm.org",
            "asm.org"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_256_GCM_SHA384"
    },
    "http": {
        "url": "https://asm.org/",
        "status": "HTTP/2 200 ",
        "http_version": "3",
        "headers": {
            "cache-control": "private",
            "content-length": "78806",
            "content-type": "text/html; charset=utf-8",
            "server": "Microsoft-IIS/10.0",
            "x-aspnetmvc-version": "5.2",
            "x-aspnet-version": "4.0.30319",
            "request-context": "appId=cid-v1:2c79acfd-d2cf-4fd8-9f75-ae0765117c19",
            "access-control-expose-headers": "Request-Context",
            "x-powered-by": "ASP.NET",
            "content-security-policy": "default-src 'self' *.windows.net *.osano.com *.bluemod.me *.asm.org *.googletagmanager.com *.votervoice.net;    frame-src 'self' *.azurewebsites.net *.asm.org *.youtube.com *.bluemod.me *.google.com *.osano.com asm.quorum.us              td.doubleclick.net *.googletagmanager.com html5-player.libsyn.com *.outgrow.us *.vimeo.com vimeo.com              *.sched.com *.votervoice.net *.soundcloud.com wss://api.smooch.io               *.propfuel.com              'unsafe-eval' 'unsafe-inline';    media-src 'self' *.windows.net *.azurewebsites.net *.asm.org *.youtube.com *.bluemod.me *.osano.com *.google.com;    worker-src 'self' *.windows.net *.azurewebsites.net *.asm.org *.youtube.com *.bluemod.me *.osano.com *.google.com              blob: 'unsafe-eval' 'unsafe-inline';    img-src 'self' *.cloudflare.com *.windows.net *.azurewebsites.net *.asm.org *.youtube.com *.osano.com *.bluemod.me            *.google.com maps.gstatic.com data: *.googletagmanager.com cdn.ckeditor.com www.google-analytics.com      sp.analytics.yahoo.com            ws1.postescanada-canadapost.ca px.ads.linkedin.com ib.adnxs.com dyv6f9ner1ir9.cloudfront.net *.facebook.com            dlvkyia8i4zmz.cloudfront.net *.linkedin.com wss://api.smooch.io *.zdassets.com 'unsafe-eval' 'unsafe-inline';    connect-src 'self' *.windows.net *.azurewebsites.net *.asm.org *.youtube.com *.bluemod.me *.osano.com *.azure.com                             *.magnetmail.net *.fontawesome.com *.google.com maps.googleapis.com www.google-analytics.com               s.yimg.com/wi/config/10212178.json               google-analytics.com *.fontawesome.com ws1.postescanada-canadapost.ca asmusa.informz.net                googleads.g.doubleclick.net px.ads.linkedin.com ib.adnxs.com script.crazyegg.com tracking.crazyegg.com                *.googlesyndication.com *.doubleclick.net *.zdassets.com *.zendesk.com *.propfuel.com               wss://api.smooch.io zendesk-eu.my.sentry.io 'unsafe-eval' 'unsafe-inline' blob:;    font-src 'self' *.typekit.net *.windows.net *.azurewebsites.net *.asm.org *.youtube.com *.bluemod.me *.osano.com *.google.com            fonts.googleapis.com fonts.gstatic.com ws1.postescanada-canadapost.ca *.fontawesome.com *.unpkg.com             unpkg.com data: 'unsafe-eval' 'unsafe-inline';    style-src 'self' *.typekit.net *.windows.net *.azurewebsites.net *.asm.org use.fontawesome.com *.youtube.com *.bluemod.me *.osano.com              *.google.com fonts.googleapis.com ws1.postescanada-canadapost.ca stackpath.bootstrapcdn.com asm.quorum.us              gitcdn.github.io stackpath.bootstrapcdn.com cdnjs.cloudflare.com cdn.ckeditor.com *.monitor.azure.com               ajax.googleapis.com api.ipify.org tracking.magnetmail.net cdn.informz.net snap.licdn.com               script.crazyegg.com connect.facebook.net acdn.adnxs.com www.w3schools.com *.unpkg.com unpkg.com              'unsafe-eval' 'unsafe-inline';    script-src 'self' *.windows.net *.azurewebsites.net *.asm.org use.fontawesome.com *.youtube.com *.bluemod.me               *.propfuel.com s.yimg.com/wi/ytc.js googleads.g.doubleclick.net js.adsrvr.org/up_loader.3.0.0.js asm.quorum.us              *.osano.com *.google.com gitcdn.github.io kit.fontawesome.com stackpath.bootstrapcdn.com cdn.jsdelivr.net               cdnjs.cloudflare.com maps.googleapis.com www.google.com code.jquery.com www.googletagmanager.com               cdn.ckeditor.com ws1.postescanada-canadapost.ca www.gstatic.com www.google-analytics.com script.crazyegg.com               *.monitor.azure.com acdn.adnxs.com ajax.googleapis.com api.ipify.org tracking.magnetmail.net cdn.informz.net               snap.licdn.com static.oktopost.com connect.facebook.net okt.to dyv6f9ner1ir9.cloudfront.net *.sched.com               assets.adobedtm.com *.votervoice.net *.zdassets.com wss://api.smooch.io zendesk-eu.my.sentry.io *.smooch.io               *.unpkg.com unpkg.com blob: 'unsafe-eval' 'unsafe-inline';    frame-ancestors 'self' *.azurewebsites.net *.asm.org *.youtube.com *.bluemod.me *.google.com *.osano.com asm.quorum.us;",
            "date": "Sun, 09 Aug 2026 03:24:28 GMT"
        },
        "security_checks": {
            "strict-transport-security": false,
            "content-security-policy": true,
            "x-content-type-options": false,
            "x-frame-options": false,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "Microsoft-IIS/10.0",
        "powered_by": "ASP.NET"
    },
    "webpage": {
        "url": "https://asm.org/",
        "title": "ASM - Microbes Make Our World",
        "description": "ASM is the oldest and largest single life science membership organization in the world. Membership has grown from 59 scientists in 1899 to more than 32,000 members today, with more than one third located outside the United States. The members represent 26 disciplines of microbiological specialization plus a division for microbiology educators.",
        "success": true,
        "error": "",
        "status": 200
    },
    "network": {
        "23.23.98.209": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "asmteam365.mail.protection.outlook.com",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 36.7,
                "banner": "",
                "error": "Network is unreachable"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4020.8,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4045.8,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 111.32
}