{
    "ok": true,
    "domain": "banquedesterritoires.fr",
    "generated_at": "2026-08-12T03:25:20-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 77,
        "label": "Good",
        "categories": {
            "dns": 70,
            "mail": 70,
            "security": 84,
            "network": 35,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "2 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "7 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 0,
                "lost_points": 15,
                "detail": "Both DS and DNSKEY are required."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "4 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20,
                "detail": "No tested DKIM selector responded."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "101 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 19,
                "lost_points": 16,
                "detail": "5 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30,
                "detail": "PTR not detected."
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/2 200 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "2 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "7 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "DNSSEC chain",
                "detail": "Both DS and DNSKEY are required.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 0,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "4 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "DKIM",
                "detail": "No tested DKIM selector responded.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "101 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "5 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 19,
                "lost_points": 16
            },
            {
                "level": "error",
                "title": "PTR reverse DNS",
                "detail": "PTR not detected.",
                "category": "network",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30
            },
            {
                "level": "ok",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/2 200 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "45.60.154.6",
                "45.60.166.6"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "10 mail3.caissedesdepots.fr.",
                "10 mail1.caissedesdepots.fr.",
                "10 mail2.caissedesdepots.fr.",
                "10 mail4.caissedesdepots.fr."
            ],
            "TXT": [
                "\"v=spf1 include:_spf.caissedesdepots.fr -all\"",
                "\"adobe-idp-site-verification=d78276d34ccbb5c650d9aeb805244aeeb4f5d0b1a4822e32749261dc4f47693a\"",
                "\"AV9OWBR6VifHAGmxfxfaRR1Jl6cz+5ogWJWjb4iImWc=\""
            ],
            "NS": [
                "nsb.perf1.com.",
                "dns3.caissedesdepots.fr.",
                "dns.caissedesdepots.fr.",
                "nsc.perf1.com.",
                "nsa.perf1.fr.",
                "dns5.caissedesdepots.fr.",
                "dns2.caissedesdepots.fr."
            ],
            "SOA": [
                "dns.caissedesdepots.fr. dnsmaster.caissedesdepots.fr. 159 300 300 1209600 900"
            ],
            "CAA": [],
            "DS": [],
            "DNSKEY": [],
            "RRSIG": [],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "45.60.154.6",
            "45.60.166.6"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 include:_spf.caissedesdepots.fr -all",
        "dmarc": "v=DMARC1; p=quarantine; fo=0; rua=mailto:DMARC@caissedesdepots.fr; ruf=mailto:DMARC@caissedesdepots.fr",
        "dkim_selector": "x",
        "dkim_host": "",
        "dkim": "",
        "spf_analysis": {
            "valid": true,
            "lookups": 1,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "quarantine"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "45.60.154.6",
                        "45.60.166.6"
                    ],
                    "time_ms": 69.23
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "45.60.154.6",
                        "45.60.166.6"
                    ],
                    "time_ms": 137
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "45.60.154.6",
                        "45.60.166.6"
                    ],
                    "time_ms": 65.46
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "45.60.154.6",
                        "45.60.166.6"
                    ],
                    "time_ms": 55.32
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "45.60.154.6",
                        "45.60.166.6"
                    ],
                    "time_ms": 322.66
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "DigiCert Inc",
        "subject": "www.banquedesterritoires.fr",
        "valid_from": "2025-10-20T19:00:00-05:00",
        "valid_to": "2026-11-21T17:59:59-06:00",
        "days_remaining": 101,
        "san": [
            "www.banquedesterritoires.fr",
            "banquedesterritoires.fr"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_128_GCM_SHA256"
    },
    "http": {
        "url": "https://www.banquedesterritoires.fr/",
        "status": "HTTP/2 200 ",
        "http_version": "3",
        "headers": {
            "location": "https://www.banquedesterritoires.fr/",
            "content-length": "0",
            "connection": "close",
            "cache-control": "max-age=31536000, public",
            "content-language": "fr",
            "x-content-type-options": "nosniff",
            "expires": "Sun, 19 Nov 1978 05:00:00 GMT",
            "content-security-policy-report-only": "object-src 'none'; script-src 'self' https://api.mapbox.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com unpkg.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem * 'unsafe-inline'; style-src 'self' cdnjs.cloudflare.com https://api.mapbox.com https://cdnjs.cloudflare.com https://unpkg.com unpkg.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem * 'unsafe-inline'; frame-ancestors 'self'",
            "content-security-policy": "object-src 'none'; frame-ancestors 'self'",
            "cache-tags": "config:block_list config:block.block.themebdtneva_pagetitle node:114716 config:block.block.themebdtneva_offreurs config:block.block.themebdtneva_bdt_messages config:block.block.themebdtneva_bdt_mainpagecontent config:block.block.srjfblock_view config:block.block.seeallthematicslocaltisrss config:block.block.pagetitle config:block.block.offererlistheaderblock config:block.block.localtisblock config:block.block.collabspaceblock config:block.block.newslettertcblock config:block.block.breadcrumb config:block.block.menulocaltis config:block.block.localtismenuheaderblock config:block.block.quefaisonsnous config:block.block.nosmissions config:block.block.whitepaperformblock config:block.block.confirmationdedesabonnementauxalertes config:block.block.hubterritoriesblock config:block.block.themebdtneva_marquedusite config:block.block.navigationprincipale config:block.block.headersearchblock config:block.block.connexionbuttonblock_account config:block.block.themebdtneva_bdt_tabs config:block.block.themebdtneva_bdt_primaryadminactions config:block.block.themebdtneva_bdt_help config:block.block.socialmedialinks_footer config:block.block.menufooter config:block.block.footercommun config:block.block.footersegment config:block.block.searchtabscontainerblock config:block.block.searchbar. config:block.block.resetfacets_2 config:block.block.itemsperpage. config:block.block.filter_summary config:block.block.current_view_facets config:block.block.curent_view_exposed_filters config:block.block.bdtlinktodrmaponsolutionpage config:block.block.bdtlinktodrinprivateportal config:block.block.blockcontent404 block_content:11 config:block.block.menusegments config:block.block.icons_menu config:block.block.bdtalert config:lazy.settings config:extlink.settings block_view node_view paragraph_view paragraph:42965 config:paragraphs.settings paragraph:42962 paragraph:42961 paragraph:42960 paragraph:42964 paragraph:42963 paragraph:43622 node:122886 taxonomy_term:12689 taxonomy_term:99 taxonomy_term:12683 media_view media:39152 config:image.style.compressed file:58981 user:2213 paragraph:43621 node:122454 taxonomy_term:62 media:39032 file:58843 user:2212 paragraph:43629 config:filter.format.full_html paragraph:42957 paragraph:42959 node:96886 user:0 paragraph:43628 node:122644 paragraph:43630 node:96801 user:1353 paragraph:43626 paragraph:42958 node:120223 paragraph:43627 node:120229 user:2210 paragraph:43625 node:121536 paragraph:43624 paragraph:42956 node:110932 media:19245 file:36207 user:2132 paragraph:43623 node:113670 media:19250 file:36212 user:2140 paragraph:43620 node:110413 media:19268 file:36230 user:2146 paragraph:42954 paragraph:42955 paragraph:43608 config:filter.format.basic_html paragraph:42952 paragraph:47495 paragraph:49401 paragraph:45859 paragraph:51118 paragraph:42951 user:2149 block_content_list config:system.menu.icons-menu config:system.site rendered http_response config:user.role.anonymous config:system.menu.common-footer node:20 node:21 node:16 node:17 node:86666 node:97938 config:system.menu.menu-footer node:96782 node:92034 config:system.menu.segments-menu node:1 node:96627 node:96686 node:13 node:14 node:110085 node:110086 node:110096 node:110153 node:106951 config:system.menu.main node:110840 node:96679 node:117458 node:117459 node:117460 node:117461 node:117462 node:117464 node:117465 node:117466 node:117467 node:117468 node:117469 node:99357 node:109837 node:96682 node:119406 node:119965 node:110051 node:120371 node:99113 node:121075 node:121291 node:119581 node:95508 node:95801 node:115790 node:106373 node:94533 node:101518 node:114120 node:110971 node:96704 node:110044 node:110043 node:110045 node:117944 node:110048 node:105308 node:110005 node:110046 node:110047 node:112795 node:96754 node:89407 node:107970 node:90824 node:92078 node:93555 node:96759 node:98736 paragraph:26199 paragraph:26200 paragraph:26198 media:25204 config:image.style.logo_list file:43265 paragraph:26197 paragraph:26195 media:27730 file:46233 paragraph:39244 paragraph:39243 paragraph:39115 media:31436 file:50390 paragraph:26190 media:26592 file:44906 paragraph:39237 paragraph:38922 media:37597 file:57253 local_task config:workflows.workflow.create_tobepublished_published scheduled_transitions_for:node:114716 config:csp.settings library_info",
            "strict-transport-security": "max-age=15768000; includeSubDomains; preload",
            "last-modified": "Wed, 12 Aug 2026 07:16:01 GMT",
            "etag": "\"1786518961-gzip\"",
            "x-xss-protection": "1; mode=block",
            "x-permitted-cross-domain-policies": "none",
            "referrer-policy": "same-origin",
            "content-type": "text/html; charset=UTF-8",
            "x-cache-hits": "0",
            "x-frame-options": "SAMEORIGIN",
            "x-cdn": "Imperva",
            "x-iinfo": "17-7884202-7908286 NNNN CT(104 106 0) RT(1786518538364 422895) q(0 0 2 9) r(6 6) U24",
            "date": "Wed, 12 Aug 2026 08:25:12 GMT"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": true,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": true,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.banquedesterritoires.fr/",
        "title": "Banque des Territoires | Groupe Caisse Des dépôts",
        "description": "La Banque des Territoires accompagne les acteurs territoriaux dans l’élaboration et le déploiement de leurs projets d’avenir.",
        "success": true,
        "error": "",
        "status": 206
    },
    "network": {
        "45.60.154.6": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        },
        "45.60.166.6": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "mail3.caissedesdepots.fr",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 39.3,
                "banner": "",
                "error": "Connection refused"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4020.8,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4028.6,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.216.212",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 96.58
}