{
    "ok": true,
    "domain": "bayern.de",
    "generated_at": "2026-08-08T21:20:37-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 82,
        "label": "Good",
        "categories": {
            "dns": 90,
            "mail": 70,
            "security": 81,
            "network": 50,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "4 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "1 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20,
                "detail": "No tested DKIM selector responded."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "83 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 16,
                "lost_points": 19,
                "detail": "4 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: rvr-prx-187.bayern.de"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/1.1 200 OK"
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "4 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "1 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "DKIM",
                "detail": "No tested DKIM selector responded.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "83 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "4 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 16,
                "lost_points": 19
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: rvr-prx-187.bayern.de",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/1.1 200 OK",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "195.200.71.187"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "10 mail.bayern.de."
            ],
            "TXT": [
                "\"v=spf1 ip4:195.200.70.64/26 ip4:193.34.207.156/31 ip4:193.34.207.154/31 ip4:46.29.101.1/32 ip4:46.29.101.2/32 ip4:217.150.155.10/32 ip4:217.150.155.12/32 -all\""
            ],
            "NS": [
                "ns.bayern.de.",
                "ns3.m-online.net.",
                "ns4.m-online.net.",
                "ns2.bayern.de."
            ],
            "SOA": [
                "ns.bayern.de. noc.bayern.de. 2026160159 10800 3600 2419200 3600"
            ],
            "CAA": [
                "0 issue \"eunetic.de\"",
                "0 issuewild \"digicert.com\"",
                "0 issuewild \"globalsign.com\"",
                "0 issue \"telesec.de\"",
                "0 issue \"letsencrypt.org\"",
                "0 issue \"sectigo.com\"",
                "0 issue \"globalsign.com\"",
                "0 issuewild \"sectigo.com\"",
                "0 issuewild \"telesec.de\"",
                "0 issue \"digicert.com\"",
                "0 issuewild \"letsencrypt.org\""
            ],
            "DS": [
                "18628 13 2 6256E89538C930C18B8C5755712241B53C920572AEC74CD1DBCDF0F2 EED55D3C"
            ],
            "DNSKEY": [
                "256 3 13 hDV0j8EqLqE+GpFOvv1bQx5ZPIPqTmU1dbramvleGy7lk4yxYh9i+eIx zGdT/zaWptwQHlZ9+mi0HGuTrqYFrQ==",
                "257 3 13 3+/0GTf7o1voItVYkdXcvwYyJApnX287OW75DD6zZY3By8IWDSg1urRE 5+5C2eOhJNTJCVdmIVrdhk6lhUDwMg=="
            ],
            "RRSIG": [
                "A 13 2 3600 20260820000517 20260805235243 12797 bayern.de. a0K9KijLf07qGJT7+QxKbmRrDpjTX8sOfpibkZzqo0jidFgBjco/IAFr SnjWi7DaflebulEpZjMPqsx3sANXuA==",
                "DNSKEY 13 2 3600 20260822050454 20260808045512 18628 bayern.de. fUfcLZ4Kuqj22wnItTc+8KcTpR8peD7S+y4X22HJap251MGs5E2NVxVN +MeM96cTtcd1POqqLbHDpr3VbhAW/Q==",
                "NS 13 2 86400 20260822234230 20260808230100 12797 bayern.de. C3YRC6B5+TzfOj+VdYs/8EFeDk1bLFkxVssi6c+NuImAhy1xAwt9FXa5 paSNsO+2wyCNDtCnuBR0gWRcYtjagA==",
                "SOA 13 2 86400 20260823021939 20260809011939 12797 bayern.de. jJz9lNjG6REpiwAVQPui4wrxgS0xHxbZkr4pU4tmd54hMaEAr2t5HzYE pEOBB54dIQNrSgtLdLv8GD1jixU0Jg==",
                "TXT 13 2 3600 20260819230123 20260805223606 12797 bayern.de. RHCyGyvQfIH8iSXTZHuhcwAvzztzAjaakrFc6DR3ofD7jvgbCWgKF0L0 K43M+xr8ZgMZVPeFpruDA/wgs/F2VQ==",
                "MX 13 2 3600 20260820013325 20260806011505 12797 bayern.de. 7wIuK2dJb6jZp2+C/sL3KzOT0H9/g/jLnADft89tgWNd1GFEzrbfR59D SUKwF7u2S7rbc7K30oRWUNkL0oye2A==",
                "DS 8 2 86400 20260817120903 20260803103903 32911 de. Rj5pBTKKz/x2m+iVL/ro/wK+bTzkU2h+2kXBIqXLcfS4cyFyqjsVaFzO pUXEUwqvA7Fxuk+hXQT3tlacLNzU1frvWspquiSklfKvcL0olRj/zhhS IBRLT5lhO9jElNFxxMmfnHEqDW+VumsNYT6kpvIVGtuBIBpPGJsiHJ+4 0m8=",
                "CDS 13 2 3600 20260822050454 20260808045512 18628 bayern.de. vzk7PCDAX4fxb1IhI7IylbCc0VwvaxQupeGkg4MNYIkz3YS8my/btAFg lbn9+jB5naSjZZhlxkVo/5uCqoMPGg==",
                "CDNSKEY 13 2 3600 20260822050454 20260808045512 18628 bayern.de. ze9TGFloBD5PFzrUC+j1HlTO7xY/+Yl/mjDJsvUAgizw8N6xqvaJwWrT LrvwpAr3SHYj9VbjaCwKOX50w/4A+A==",
                "CAA 13 2 3600 20260817095532 20260803091714 12797 bayern.de. y4E+LNqfvYng5B3zZAqRaFuAcal2XClhj3FoJViDuUAseVivHeXx9Mug QH+KaSsRF/bULTfA6prgXOKmkMuJfg==",
                "NSEC3PARAM 13 2 0 20260814042321 20260731035017 12797 bayern.de. 4Uarl9Vg42rWiHDTP5UOSUEdT2rQW8c9b2hxwnlQ9DA3qRqQPxuxcZgN SK9bRzlZ70demcFwoTwfn6xVpeD6Og=="
            ],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "195.200.71.187"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 ip4:195.200.70.64/26 ip4:193.34.207.156/31 ip4:193.34.207.154/31 ip4:46.29.101.1/32 ip4:46.29.101.2/32 ip4:217.150.155.10/32 ip4:217.150.155.12/32 -all",
        "dmarc": "v=DMARC1; p=reject; aspf=r; adkim=r; pct=100; rf=afrf; ri=86400",
        "dkim_selector": "x",
        "dkim_host": "",
        "dkim": "",
        "spf_analysis": {
            "valid": true,
            "lookups": 0,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "reject"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "rvr-prx-187.bayern.de",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "195.200.71.187"
                    ],
                    "time_ms": 151.27
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "195.200.71.187"
                    ],
                    "time_ms": 144.06
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "195.200.71.187"
                    ],
                    "time_ms": 144.17
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "195.200.71.187"
                    ],
                    "time_ms": 259.06
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "195.200.71.187"
                    ],
                    "time_ms": 229.3
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "Let's Encrypt",
        "subject": "bayern.de",
        "valid_from": "2026-08-02T18:25:58-05:00",
        "valid_to": "2026-10-31T18:25:57-05:00",
        "days_remaining": 83,
        "san": [
            "bayern.de"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_256_GCM_SHA384"
    },
    "http": {
        "url": "https://www.bayern.de/",
        "status": "HTTP/1.1 200 OK",
        "http_version": "2",
        "headers": {
            "date": "Sun, 09 Aug 2026 02:19:23 GMT",
            "server": "CERN httpd",
            "location": "https://www.bayern.de/",
            "content-type": "text/html; charset=UTF-8",
            "strict-transport-security": "max-age=31536000",
            "connection": "close",
            "x-xss-protection": "1; mode=block",
            "link": "<http://www.bayern.de>; rel=shortlink",
            "vary": "Accept-Encoding",
            "x-content-type-options": "nosniff",
            "x-frame-options": "sameorigin",
            "content-security-policy": "default-src 'self' *.bayern.de *.youtube.co *.youtube.com *.whappodo.com *.readspeaker.com *.youtube-nocookie.com *.podigee.io *.podigee-cdn.net *.linguatec.org  'unsafe-inline' 'unsafe-eval' data:",
            "x-varnish": "241638649 241683093",
            "age": "59",
            "via": "1.1 varnish (Varnish/5.2)",
            "accept-ranges": "bytes",
            "transfer-encoding": "chunked",
            "set-cookie": "TS01ee0451=018dc401359d965a334bfd5263b09c52e65d7db3812913f2e6934234420a34f22858e2498ea2383bccdc9e75604d841c48bee9f59f; Path=/"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": true,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "CERN httpd",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.bayern.de/",
        "title": "Bayerisches Landesportal – Das Landesportal des Freistaats Bayern und der Bayerischen Staatsregierung",
        "description": "Offizielles Landesportal der Bayerischen Staatsregierung: Aktuelle Meldungen, Infos zum Freistaat Bayern, Politikthemen.",
        "success": true,
        "error": "",
        "status": 206
    },
    "network": {
        "195.200.71.187": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "mail.bayern.de",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 113.5,
                "banner": "",
                "error": "Connection refused"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4020.5,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4020.6,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 91.63
}