{ "ok": true, "domain": "ba.gov.br", "generated_at": "2026-08-09T10:18:37-05:00", "cache": { "hit": true, "ttl": 0 }, "score": { "total": 76, "label": "Good", "categories": { "dns": 90, "mail": 45, "security": 77, "network": 50, "availability": 100 }, "category_weights": { "dns": 25, "mail": 20, "security": 25, "network": 10, "availability": 20 }, "items": [ { "category": "dns", "title": "IPv4 (A)", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "1 IPv4 address(es) detected." }, { "category": "dns", "title": "IPv6 (AAAA)", "max_points": 10, "earned_points": 0, "lost_points": 10, "detail": "0 IPv6 address(es) detected." }, { "category": "dns", "title": "Name server redundancy", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "4 NS record(s); 2 or more required." }, { "category": "dns", "title": "SOA record", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Authoritative zone record." }, { "category": "dns", "title": "DNSSEC chain", "max_points": 15, "earned_points": 15, "lost_points": 0, "detail": "DS and DNSKEY detected." }, { "category": "dns", "title": "CAA policy", "max_points": 5, "earned_points": 5, "lost_points": 0, "detail": "Certificate authority restriction." }, { "category": "dns", "title": "DNS propagation", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Agreement between public resolvers." }, { "category": "mail", "title": "MX records", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "1 MX record(s)." }, { "category": "mail", "title": "SPF", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "SPF policy published." }, { "category": "mail", "title": "DMARC", "max_points": 25, "earned_points": 0, "lost_points": 25, "detail": "DMARC policy not found." }, { "category": "mail", "title": "DKIM", "max_points": 20, "earned_points": 0, "lost_points": 20, "detail": "No tested DKIM selector responded." }, { "category": "mail", "title": "MTA-STS", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Mail transport policy." }, { "category": "mail", "title": "TLS-RPT", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "TLS reporting policy." }, { "category": "security", "title": "Valid TLS certificate", "max_points": 55, "earned_points": 55, "lost_points": 0, "detail": "109 day(s) remaining." }, { "category": "security", "title": "Certificate lifetime", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Full points require at least 30 days remaining." }, { "category": "security", "title": "HTTP security headers", "max_points": 35, "earned_points": 12, "lost_points": 23, "detail": "3 of 9 evaluated headers detected." }, { "category": "network", "title": "PTR reverse DNS", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "PTR: cpu008446.ba.gov.br" }, { "category": "network", "title": "IPv4 diversity", "max_points": 35, "earned_points": 20, "lost_points": 15, "detail": "Two or more IPv4 addresses receive full points." }, { "category": "network", "title": "IPv6 connectivity", "max_points": 35, "earned_points": 0, "lost_points": 35, "detail": "AAAA availability." }, { "category": "availability", "title": "DNS resolution", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "At least one address family must resolve." }, { "category": "availability", "title": "HTTP response", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "HTTP/1.1 200 OK" }, { "category": "availability", "title": "HTTPS final URL", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "Final URL uses HTTPS." } ], "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.", "diagnostics": [ { "level": "ok", "title": "IPv4 (A)", "detail": "1 IPv4 address(es) detected.", "category": "dns", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "error", "title": "IPv6 (AAAA)", "detail": "0 IPv6 address(es) detected.", "category": "dns", "max_points": 10, "earned_points": 0, "lost_points": 10 }, { "level": "ok", "title": "Name server redundancy", "detail": "4 NS record(s); 2 or more required.", "category": "dns", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SOA record", "detail": "Authoritative zone record.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "DNSSEC chain", "detail": "DS and DNSKEY detected.", "category": "dns", "max_points": 15, "earned_points": 15, "lost_points": 0 }, { "level": "ok", "title": "CAA policy", "detail": "Certificate authority restriction.", "category": "dns", "max_points": 5, "earned_points": 5, "lost_points": 0 }, { "level": "ok", "title": "DNS propagation", "detail": "Agreement between public resolvers.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "MX records", "detail": "1 MX record(s).", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SPF", "detail": "SPF policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "error", "title": "DMARC", "detail": "DMARC policy not found.", "category": "mail", "max_points": 25, "earned_points": 0, "lost_points": 25 }, { "level": "error", "title": "DKIM", "detail": "No tested DKIM selector responded.", "category": "mail", "max_points": 20, "earned_points": 0, "lost_points": 20 }, { "level": "error", "title": "MTA-STS", "detail": "Mail transport policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "TLS-RPT", "detail": "TLS reporting policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "Valid TLS certificate", "detail": "109 day(s) remaining.", "category": "security", "max_points": 55, "earned_points": 55, "lost_points": 0 }, { "level": "ok", "title": "Certificate lifetime", "detail": "Full points require at least 30 days remaining.", "category": "security", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "warning", "title": "HTTP security headers", "detail": "3 of 9 evaluated headers detected.", "category": "security", "max_points": 35, "earned_points": 12, "lost_points": 23 }, { "level": "ok", "title": "PTR reverse DNS", "detail": "PTR: cpu008446.ba.gov.br", "category": "network", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "warning", "title": "IPv4 diversity", "detail": "Two or more IPv4 addresses receive full points.", "category": "network", "max_points": 35, "earned_points": 20, "lost_points": 15 }, { "level": "error", "title": "IPv6 connectivity", "detail": "AAAA availability.", "category": "network", "max_points": 35, "earned_points": 0, "lost_points": 35 }, { "level": "ok", "title": "DNS resolution", "detail": "At least one address family must resolve.", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTP response", "detail": "HTTP/1.1 200 OK", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTPS final URL", "detail": "Final URL uses HTTPS.", "category": "availability", "max_points": 20, "earned_points": 20, "lost_points": 0 } ] }, "dns": { "records": { "A": [ "200.187.32.253" ], "AAAA": [], "CNAME": [], "MX": [ "0 ba-gov-br.mail.protection.outlook.com." ], "TXT": [ "\"v=spf1 ip4:200.187.0.0/18 ip4:200.223.114.0/24 ip4:200.223.122.0/24 ip4:200.223.118.0/24 ip4:200.223.117.0/24 ip4:201.18.167.0/24 ip4:201.18.227.0/24 ip4:201.38.125.0/24 include:spf.protection.outlook.com -all include:_spf.psm.knowbe4.com ~all\"", "\"MS=ms61588289\"", "\"adobe-idp-site-verification=dfe1deffaa8ded48240899135e8e8ea369983a7591b3b34e3a463966781957af\"", "\"7WVhjAWk5RqmM5f79x2JV4qh0pt+iuOv3ofJmfzTOeI9QQ8TPrM5saXdrt1U9Ij6mYObmujATApW0IQM/dzt9g==\"", "\"google-site-verification=iGgobxneKNE43Ay8sjrUjyiZCNtvPDa3taELXf41HU0\"" ], "NS": [ "cpu0034.ba.gov.br.", "ns1.pop-ba.rnp.br.", "cpu0020.prodeb.gov.br.", "ns2.pop-ba.rnp.br." ], "SOA": [ "cpu0034.ba.gov.br. registro.ba.gov.br. 2026080702 10800 900 604800 86400" ], "CAA": [ "0 issue \"globalsign.com\"", "0 issue \"cybertrust.ne.jp\"", "0 issue \"pki.goog\"", "0 issue \"certsign.ro\"", "0 issue \"certificados.serpro.gov.br\"", "0 issue \"geotrust.com\"", "0 issue \"amazon.com\"", "0 issue \"digicert.ne.jp\"", "0 issue \"digicert.com\"", "0 issue \"rapidssl.com\"", "0 issue \"comodoca.com\"", "0 issue \"actalis.it\"", "0 issue \"godaddy.com\"", "0 issue \"ssl.com\"", "0 issue \"thawte.com\"", "0 issue \"symantec.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"startcomca.com\"", "0 issue \"sectigo.com\"" ], "DS": [ "50863 13 2 C2E73306203E5B21A7B6D859927971CA94D3E7CA23F31577154D0080 DAA9D7E1" ], "DNSKEY": [ "257 3 13 ZHTzNExwwSjYMlDkpyC0ZxDp4/737Ez673XVYqLDUBTByQ+qhparrLWy MCICokktbxMSm4gDx/TV0jqN0uL8+g==" ], "RRSIG": [ "DNSKEY 13 3 3600 20260906172201 20260807172201 50863 ba.gov.br. fpSF2T9wIFg/kL4Pm6T2qto7yvHzG0eoRVXmITz9XsvQr1Y7vFnO7iyK GAxy1QhvbxjHBt2i7G518cxUcchxWA==", "TXT 13 3 3600 20260906172201 20260807172201 50863 ba.gov.br. KQ+abN6VsgpO4+gwNzX/3AIca7M/EjOs2PXZ8gpvDVRjSMsN2Lg1xhAi IUo+3eEuBA3ZqjE1G7U23nUmYYe11w==", "NS 13 3 3600 20260906172201 20260807172201 50863 ba.gov.br. YIkDuIpJW5FLUU7qvMy0o67x9wNONRhBEylGUB/fi962sP0ldXfIwPcE BCuf55QO9/edKf/XdmrId2X5S74lcg==", "MX 13 3 3600 20260906172201 20260807172201 50863 ba.gov.br. 8PqdyOpPP42oZaEo+8NadmSHHkN1tqnft/ysDyRwy+HaJopysKLah/mz wmfszyp14Kwu4MfFIpKjuis6IhOVFw==", "DS 13 3 3600 20260819170005 20260805160005 18646 gov.br. k7AsO3/39XAKNOHDUGvJ7RtgJ++eYXUvvUIR2SIlopTT7973nJ9yRxS3 lEW/PMPke1rBKeMfTi5G31SEIMmW5A==" ], "NSEC": [ "sadf.20143.ba.gov.br. A NS SOA MX TXT RRSIG NSEC DNSKEY CAA" ], "NSEC3": [], "SRV": [], "NAPTR": [], "TLSA": [], "SSHFP": [] }, "ipv4": [ "200.187.32.253" ], "ipv6": [] }, "mail": { "spf": "v=spf1 ip4:200.187.0.0/18 ip4:200.223.114.0/24 ip4:200.223.122.0/24 ip4:200.223.118.0/24 ip4:200.223.117.0/24 ip4:201.18.167.0/24 ip4:201.18.227.0/24 ip4:201.38.125.0/24 include:spf.protection.outlook.com -all include:_spf.psm.knowbe4.com ~all", "dmarc": "", "dkim_selector": "x", "dkim_host": "", "dkim": "", "spf_analysis": { "valid": true, "lookups": 2, "final": "~all", "message": "Within the estimated limit" }, "dmarc_analysis": { "valid": false, "policy": "" }, "bimi": "", "mta_sts": "", "tls_rpt": "" }, "advanced": { "ptr": "cpu008446.ba.gov.br", "propagation": { "consistent": true, "results": [ { "provider": "Google", "server": "8.8.8.8", "result": [ "200.187.32.253" ], "time_ms": 223.21 }, { "provider": "Cloudflare", "server": "1.1.1.1", "result": [ "200.187.32.253" ], "time_ms": 2501.11 }, { "provider": "Quad9", "server": "9.9.9.9", "result": [ "200.187.32.253" ], "time_ms": 192.7 }, { "provider": "OpenDNS", "server": "208.67.222.222", "result": [ "200.187.32.253" ], "time_ms": 157.48 }, { "provider": "AdGuard", "server": "94.140.14.14", "result": [ "200.187.32.253" ], "time_ms": 46.77 } ] } }, "ssl": { "available": true, "issuer": "DigiCert Inc", "subject": "ba.gov.br", "valid_from": "2026-05-11T19:00:00-05:00", "valid_to": "2026-11-26T17:59:59-06:00", "days_remaining": 109, "san": [ "ba.gov.br", "www.ba.gov.br" ], "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384" }, "http": { "url": "https://www.ba.gov.br/", "status": "HTTP/1.1 200 OK", "http_version": "2", "headers": { "cache-control": "private", "content-length": "56126", "location": "https://www.ba.gov.br/", "set-cookie": "cookiesession1=678B28C6792E17BFAC4954B9CC747345;Expires=Mon, 09 Aug 2027 15:18:28 GMT;Path=/;HttpOnly", "date": "Sun, 09 Aug 2026 15:18:28 GMT", "content-type": "text/html; charset=utf-8", "last-modified": "Tue, 04 Aug 2026 11:51:16 GMT", "etag": "\"6a71d234-db3e\"", "accept-ranges": "bytes", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "content-security-policy": "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://kit.fontawesome.com https://vlibras.gov.br https://www.vlibras.gov.br https://www.googletagmanager.com https://atlas.microsoft.com https://www.google-analytics.com https://cdn.jsdelivr.net https://www.google.com https://www.gstatic.com https://www.ba.gov.br https://ba.gov.br https://use.fontawesome.com https://www.chatbase.co https://www.instagram.com https://platform.twitter.com https://*.clarity.ms https://code.jquery.com; script-src-elem 'self' 'unsafe-inline' blob: https://kit.fontawesome.com https://vlibras.gov.br https://www.vlibras.gov.br https://www.googletagmanager.com https://atlas.microsoft.com https://www.google-analytics.com https://cdn.jsdelivr.net https://www.google.com https://www.gstatic.com https://apis.google.com https://use.fontawesome.com https://www.chatbase.co https://www.instagram.com https://platform.twitter.com https://unpkg.com https://*.clarity.ms https://regin.pscs.com.br https://code.jquery.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' data: https://fonts.googleapis.com https://www.ba.gov.br https://ba.gov.br https://cdn.jsdelivr.net https://unpkg.com https://ka-f.fontawesome.com https://atlas.microsoft.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com https://cdn.jsdelivr.net https://atlas.microsoft.com https://vlibras.gov.br https://www.vlibras.gov.br https://ka-f.fontawesome.com; connect-src 'self' https://ka-f.fontawesome.com https://atlas.microsoft.com https://servicosaocidadao.ba.gov.br https://www.google-analytics.com https://www.googletagmanager.com https://dc.services.visualstudio.com https://acessos.vlibras.gov.br https://dicionario2.vlibras.gov.br https://vlibras.gov.br https://cdn.jsdelivr.net https://traducao2.vlibras.gov.br https://www.google.com https://apis.google.com https://www.chatbase.co https://saojoaodabahia.ba.gov.br https://*.clarity.ms https://chatbot.pscs.com.br wss://chatbot.pscs.com.br; frame-src 'self' https://www.youtube.com https://www.google.com https://nuvidio.com https://app.powerbi.com https://prodeb-sac-digital.firebaseapp.com https://gestor.meioambiente.ba.gov.br https://www.chatbase.co https://platform.twitter.com https://www.instagram.com https://publicacao.egba.ba.gov.br https://www.transparencia.ba.gov.br https://calendar.google.com https://copilotstudio.microsoft.com https://services.pge.ba.gov.br https://piloto.egba.ba.gov.br https://rtmp.irdeb.ba.gov.br; frame-ancestors 'self' https://www.google.com; worker-src 'self' blob:;", "x-content-type-options": "nosniff" }, "security_checks": { "strict-transport-security": true, "content-security-policy": true, "x-content-type-options": true, "x-frame-options": false, "referrer-policy": false, "permissions-policy": false, "cross-origin-opener-policy": false, "cross-origin-embedder-policy": false, "cross-origin-resource-policy": false }, "server": "", "powered_by": "" }, "webpage": { "url": "https://www.ba.gov.br/", "title": "ba.gov.br", "description": "Portal oficial do Governo da Bahia com serviços públicos online", "success": true, "error": "", "status": 200 }, "network": { "200.187.32.253": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" } }, "smtp": { "host": "ba-gov-br.mail.protection.outlook.com", "ports": [ { "port": 25, "open": false, "time_ms": 23.1, "banner": "", "error": "Connection refused" }, { "port": 465, "open": false, "time_ms": 4021.1, "banner": "", "error": "Connection timed out" }, { "port": 587, "open": false, "time_ms": 4053.6, "banner": "", "error": "Connection timed out" } ] }, "visitor": { "ip": "216.73.217.62", "reverse": "", "country": "", "country_code": "", "region": "", "city": "", "latitude": null, "longitude": null, "isp": "", "organization": "", "asn": "", "timezone": "", "browser": "Other", "os": "Other", "language": "", "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "is_bot": true, "cloudflare": false }, "analysis_time_ms": 98.25 }