{ "ok": true, "domain": "bentley.com", "generated_at": "2026-08-09T19:57:37-05:00", "cache": { "hit": true, "ttl": 0 }, "score": { "total": 81, "label": "Good", "categories": { "dns": 70, "mail": 90, "security": 84, "network": 35, "availability": 100 }, "category_weights": { "dns": 25, "mail": 20, "security": 25, "network": 10, "availability": 20 }, "items": [ { "category": "dns", "title": "IPv4 (A)", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "2 IPv4 address(es) detected." }, { "category": "dns", "title": "IPv6 (AAAA)", "max_points": 10, "earned_points": 0, "lost_points": 10, "detail": "0 IPv6 address(es) detected." }, { "category": "dns", "title": "Name server redundancy", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "4 NS record(s); 2 or more required." }, { "category": "dns", "title": "SOA record", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Authoritative zone record." }, { "category": "dns", "title": "DNSSEC chain", "max_points": 15, "earned_points": 0, "lost_points": 15, "detail": "Both DS and DNSKEY are required." }, { "category": "dns", "title": "CAA policy", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Certificate authority restriction." }, { "category": "dns", "title": "DNS propagation", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Agreement between public resolvers." }, { "category": "mail", "title": "MX records", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "1 MX record(s)." }, { "category": "mail", "title": "SPF", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "SPF policy published." }, { "category": "mail", "title": "DMARC", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "DMARC policy published." }, { "category": "mail", "title": "DKIM", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "A DKIM selector was verified." }, { "category": "mail", "title": "MTA-STS", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Mail transport policy." }, { "category": "mail", "title": "TLS-RPT", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "TLS reporting policy." }, { "category": "security", "title": "Valid TLS certificate", "max_points": 55, "earned_points": 55, "lost_points": 0, "detail": "34 day(s) remaining." }, { "category": "security", "title": "Certificate lifetime", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Full points require at least 30 days remaining." }, { "category": "security", "title": "HTTP security headers", "max_points": 35, "earned_points": 19, "lost_points": 16, "detail": "5 of 9 evaluated headers detected." }, { "category": "network", "title": "PTR reverse DNS", "max_points": 30, "earned_points": 0, "lost_points": 30, "detail": "PTR not detected." }, { "category": "network", "title": "IPv4 diversity", "max_points": 35, "earned_points": 35, "lost_points": 0, "detail": "Two or more IPv4 addresses receive full points." }, { "category": "network", "title": "IPv6 connectivity", "max_points": 35, "earned_points": 0, "lost_points": 35, "detail": "AAAA availability." }, { "category": "availability", "title": "DNS resolution", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "At least one address family must resolve." }, { "category": "availability", "title": "HTTP response", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "HTTP/2 200 " }, { "category": "availability", "title": "HTTPS final URL", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "Final URL uses HTTPS." } ], "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.", "diagnostics": [ { "level": "ok", "title": "IPv4 (A)", "detail": "2 IPv4 address(es) detected.", "category": "dns", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "error", "title": "IPv6 (AAAA)", "detail": "0 IPv6 address(es) detected.", "category": "dns", "max_points": 10, "earned_points": 0, "lost_points": 10 }, { "level": "ok", "title": "Name server redundancy", "detail": "4 NS record(s); 2 or more required.", "category": "dns", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SOA record", "detail": "Authoritative zone record.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "error", "title": "DNSSEC chain", "detail": "Both DS and DNSKEY are required.", "category": "dns", "max_points": 15, "earned_points": 0, "lost_points": 15 }, { "level": "error", "title": "CAA policy", "detail": "Certificate authority restriction.", "category": "dns", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "DNS propagation", "detail": "Agreement between public resolvers.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "MX records", "detail": "1 MX record(s).", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SPF", "detail": "SPF policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DMARC", "detail": "DMARC policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DKIM", "detail": "A DKIM selector was verified.", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "error", "title": "MTA-STS", "detail": "Mail transport policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "TLS-RPT", "detail": "TLS reporting policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "Valid TLS certificate", "detail": "34 day(s) remaining.", "category": "security", "max_points": 55, "earned_points": 55, "lost_points": 0 }, { "level": "ok", "title": "Certificate lifetime", "detail": "Full points require at least 30 days remaining.", "category": "security", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "warning", "title": "HTTP security headers", "detail": "5 of 9 evaluated headers detected.", "category": "security", "max_points": 35, "earned_points": 19, "lost_points": 16 }, { "level": "error", "title": "PTR reverse DNS", "detail": "PTR not detected.", "category": "network", "max_points": 30, "earned_points": 0, "lost_points": 30 }, { "level": "ok", "title": "IPv4 diversity", "detail": "Two or more IPv4 addresses receive full points.", "category": "network", "max_points": 35, "earned_points": 35, "lost_points": 0 }, { "level": "error", "title": "IPv6 connectivity", "detail": "AAAA availability.", "category": "network", "max_points": 35, "earned_points": 0, "lost_points": 35 }, { "level": "ok", "title": "DNS resolution", "detail": "At least one address family must resolve.", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTP response", "detail": "HTTP/2 200 ", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTPS final URL", "detail": "Final URL uses HTTPS.", "category": "availability", "max_points": 20, "earned_points": 20, "lost_points": 0 } ] }, "dns": { "records": { "A": [ "141.193.213.21", "141.193.213.20" ], "AAAA": [], "CNAME": [], "MX": [ "10 bentley-com.mail.protection.outlook.com." ], "TXT": [ "\"mongodb-site-verification=1aegMh3ApdQMm3DBNdTAByyK2Rjkhlzx\"", "\"_globalsign-domain-verification=Ooy8oIS6d2Dww0zvpoDYXX531JdMCfb5DHoR02aLKM\"", "\"globalsign-domain-verification=XyQC0DRy7_MH3um8RWtVx63vWm_bbxtolJZwahw3FD\"", "\"google-site-verification=O4uxPfB5fNmZkTRyANRvSKirbtvIVVylHG9suZi5l1I\"", "\"teamviewer-sso-verification=06a3fc58c81344ea835ac6cfeea33da5\"", "\"autodesk-domain-verification=kQKkW4S6abgIoOB5Hhnq\"", "\"atlassian-domain-verification=HY5HE4d3a6xrhW5O72L6vi45gxa6zOXEitMCn/ArvSIC62hIKAOMHCkqs5Y24fjc\"", "\"fastly-domain-delegation-3409jvq30bhn0n-680940-20230723\"", "\"matillion:bentley-com-saml\"", "\"_mz1nu1agy361a0gkfkpl0p8wys7emyg\"", "\"apple-domain-verification=yRANHNFndempjiL6\"", "\"globalsign-domain-verification=ac3e12ca5ad68b4a36838d206e283894\"", "\"nm3bstjfvs2z1n7hh0nqz4cfs3m44jrv\"", "\"zFrOppoar6QpdPkpQK1+VzVf+PGFPxcuXP4IS21mZIT3Tv6cTCHPOpfwr46j9OqOVMpPzzDM7uwCNZMw/RFIWQ==\"", "\"mindmanager-verification=69e12ad8d81d0bd47d7d685004db3b46bd25c259e12cf0a17cabd2962efcd638\"", "\"parallels-domain-verification=3241a3e794204a71abd84d86fc1d072f5819de4c5a3046d3bf3d0fe75427c11c\"", "\"canva-site-verification=NCKjQRFO3zfYKIM9cfpH4A\"", "\"v=spf1 include:spf.protection.outlook.com ip4:65.221.8.29/32 ip4:65.221.12.128/32 ip4:65.221.12.148 ip4:104.209.255.75/32 include:_spf1.bentley.com -all\"", "\"elevenlabs=wWLl1tT5cC8Hh9r1HFp6F5TjTn0GF1GczsdErNrLP9Q\"", "\"miro-verification=ba78d1467c3cb2a0c25915f5efbf7941c042bd8b\"", "\"bw=7vYO9bRlUD5oS4Va056mEkmZJ5sc87DTyPKPJfDD2L6P\"", "\"pendo-domain-verification=4c57d89b-5d80-4b61-b69f-d5e8dc106144\"" ], "NS": [ "ns4-07.azure-dns.info.", "ns3-07.azure-dns.org.", "ns2-07.azure-dns.net.", "ns1-07.azure-dns.com." ], "SOA": [ "ns1-07.azure-dns.com. dnsadmin.bentley.com. 2009095760 1200 300 1209600 300" ], "CAA": [], "DS": [], "DNSKEY": [], "RRSIG": [], "NSEC": [], "NSEC3": [], "SRV": [], "NAPTR": [], "TLSA": [], "SSHFP": [] }, "ipv4": [ "141.193.213.21", "141.193.213.20" ], "ipv6": [] }, "mail": { "spf": "v=spf1 include:spf.protection.outlook.com ip4:65.221.8.29/32 ip4:65.221.12.128/32 ip4:65.221.12.148 ip4:104.209.255.75/32 include:_spf1.bentley.com -all", "dmarc": "v=DMARC1;p=quarantine;pct=100;rua=mailto:9b8818af@mxtoolbox.dmarc-report.com;ruf=mailto:9b8818af@forensics.dmarc-report.com;fo=1;", "dkim_selector": "selector1", "dkim_host": "selector1._domainkey.bentley.com", "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCx8rGpfQPtq3yDyK8B2usvIZ9AUcnlYw1Ki/8pozZ96VVjS+X7AjiR3YFN2GXNpRjOI7cbLIqayvblgiZ+x/PWxzSbe7KhSAeAghZ4uUhk0dApdxeRSm7ZNnTE+ihG5vOFvinjs7Nrl2JFuB+g4rMw4M1D2wyEI/MtTqschDbxqwIDAQAB; n=1024,1457684670,1", "spf_analysis": { "valid": true, "lookups": 2, "final": "-all", "message": "Within the estimated limit" }, "dmarc_analysis": { "valid": true, "policy": "quarantine" }, "bimi": "", "mta_sts": "", "tls_rpt": "" }, "advanced": { "ptr": "", "propagation": { "consistent": true, "results": [ { "provider": "Google", "server": "8.8.8.8", "result": [ "141.193.213.20", "141.193.213.21" ], "time_ms": 58.3 }, { "provider": "Cloudflare", "server": "1.1.1.1", "result": [ "141.193.213.20", "141.193.213.21" ], "time_ms": 53.35 }, { "provider": "Quad9", "server": "9.9.9.9", "result": [ "141.193.213.20", "141.193.213.21" ], "time_ms": 50.38 }, { "provider": "OpenDNS", "server": "208.67.222.222", "result": [ "141.193.213.20", "141.193.213.21" ], "time_ms": 53.64 }, { "provider": "AdGuard", "server": "94.140.14.14", "result": [ "141.193.213.20", "141.193.213.21" ], "time_ms": 74.8 } ] } }, "ssl": { "available": true, "issuer": "Google Trust Services", "subject": "bentley.com", "valid_from": "2026-06-15T13:41:00-05:00", "valid_to": "2026-09-13T14:40:57-05:00", "days_remaining": 34, "san": [ "bentley.com" ], "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384" }, "http": { "url": "https://www.bentley.com/", "status": "HTTP/2 200 ", "http_version": "3", "headers": { "date": "Mon, 10 Aug 2026 00:57:27 GMT", "content-type": "text/html; charset=UTF-8", "location": "https://www.bentley.com/", "server": "cloudflare", "cf-cache-status": "DYNAMIC", "cache-control": "max-age=600, must-revalidate", "expires": "Thu, 19 Nov 1981 08:52:00 GMT", "feature-policy": "camera=(), microphone=()", "permissions-policy": "camera=(), microphone=()", "pragma": "no-cache", "referrer-policy": "no-referrer-when-downgrade", "status": "301 Moved Permanently", "strict-transport-security": "max-age=31536000", "x-content-type-options": "nosniff", "x-powered-by": "WP Engine", "x-redirect-by": "WordPress", "x-ua-compatible": "IE=edge", "x-cacheable": "SHORT", "x-cache": "HIT: 273", "x-cache-group": "normal", "set-cookie": "__cf_bm=f_ZWNfL1o6D8fgJ4Vng_SZzvqgwcV06QJdgT51sWkIs-1786323447.3977165-1.0.1.1-bjGrOzq0iR3P4AXpWiYfn5vmu9VYDjasf7iJ_XVOfC.0qTUCmu8dhjztqyiuHPlmk0wAtu5ThuvEkvsGQ2AMoa_y2x23fiZkU9PBR6sL8ZqNblbjrvuZTSllmjqoMv4f; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.bentley.com; Expires=Mon, 10 Aug 2026 01:27:27 GMT", "access-control-allow-credentials": "true", "access-control-allow-origin": "*", "content-security-policy": "default-src 'self' blob:; script-src 'self' 'report-sample' 'unsafe-eval' 'unsafe-inline' blob: data: analytics.o11.tech *.amplitude.com app-ab56.marketo.com *.optimonk.com cdn.jsdelivr.net d2c7xlmseob604.cloudfront.net *.impartner.live *.intentsify.io js.hs-scripts.com munchkin.marketo.net translate.google.com/translate_a/element.js web.bentley.com *.ads.linkedin.com *.ads-twitter.com *.amazonaws.com *.bentley.com *.bing.com *.brightcove.net *.byspotify.com cdn.optimizely.com *.optimizely.com www.clarity.ms *.cloudflare.com *.cloudfront.net *.company-target.com *.demandbase.com *.drift.com *.driftt.com *.doubleclick.net *.excentos.com *.facebook.net *.feedbackify.com *.flockler.com *.getsmartling.com *.github.io *.google-analytics.com *.google.com googleads.g.doubleclick.net *.googleadservices.com *.googleapis.com *.googletagmanager.com www.google-analytics.com www.google.com *.gstatic.cn *.gstatic.com *.hsforms.net *.intentsify.io *.jotform.com *.marketo.com *.marketo.net *.mouseflow.com *.onetrust.com *.optimonk.com packages.prmcdn.io *.pagespeed-mod.com *.pingdom.net pixel.byspotify.com pvdpix.com qvdt3feo.com *.recaptcha.net *.redditstatic.com static.hsappstatic.net/MeetingsEmbed/ex/MeetingsEmbedCode.js *.salesloft.com *.siteintercept.qualtrics.com *.surveysparrow.com tags.srv.stackadapt.com *.tailwindcss.com *.tourial.com *.twitter.com *.usbrowserspeed.com *.userway.org *.zencdn.net 1.safecdn01.com accessibilityserver.org api.hubspot.com bat.bing.com/bat.js beacon-v2.helpscout.net/ bentleypocstg.wpengine.com blibok.com c.itaozi.cn cdn.cookielaw.org cdn.mathjax.org cdn.mouseflow.com click.easypower.com client.prod.mplat-ppcprotect.com connect.facebook.net conoret.com cookie-cdn.cookiepro.com d2c7xlmseob604.cloudfront.net fast.wistia.com form.jotform.com/static/feedback.js forms.hubspot.com gateway.on24.com images.uc.cn js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hscollectforms.net js.hsforms.net js.hsleadflows.net js.hubspot.com js.usemessages.com mstat.acestream.net munchkin.marketo.net ob.segreencolumn.com pixel.byspotify.com players.brightcove.net relatedgamesnet-a.akamaihd.net scout-cdn.salesloft.com search.imtt.qq.com service.excentos.com snap.licdn.com snap.licdn.com/li.lms-analytics/insight.min.js static.ads-twitter.com tag.demandbase.com tags.srv.stackadapt.com ucads-cdn.ucweb.com unpkg.com unpkg.zhimg.com vjs.zencdn.net w8o39.m70vee7.com *.youtube.com *.visualwebsiteoptimizer.com app.vwo.com *.optimonk.com *.onsite.optimonk.com cdn-asset.optimonk.com https://bentleysystems.my.site.com; style-src 'self' 'report-sample' 'unsafe-inline' data: app-ab56.marketo.com *.bentley.com *.googleapis.com *.googletagmanager.com cdn.jsdelivr.net cdnjs.cloudflare.com *.easypower.com packages.prmcdn.io *.excentos.com *.optimonk.com https://bentleysystems.my.site.com/ESWLiveChatprod1757717595345/assets/styles/bootstrap.min.css s3.amazonaws.com tags.srv.stackadapt.com *.visualwebsiteoptimizer.com app.vwo.com *.userway.org web.bentley.com; object-src 'self' *.brightcove.net; connect-src 'self' blob: data: localhost: ad.doubleclick.net gjtrack.ucweb.com https: *.doubleclick.net *.facebook.com *.facebook.net *.hubspot.com adservice.google.com bcbolt446c5271-a.akamaihd.net bcsecure01-a.akamaihd.net forms.hubspot.com manifest.prod.boltdns.net stats.g.doubleclick.net wss://www.bentley.com *.visualwebsiteoptimizer.com app.vwo.com; font-src 'self' data: themes.googleusercontent.com https:; frame-ancestors 'self' *.bentley.com *.docebosaas.com/ bentleysystems.gcs-web.com/ bentleysystems-preview.gcs-web.com/; frame-src blob: 7668309.hs-sites.com/ app-ab56.marketo.com www.facebook.com *.bentley.com *.brightcove.net *.core.windows.net *.doubleclick.net *.facebook.com *.flickr.com *.getsmartling.com *.google.com *.googletagmanager.com *.hs-scripts.com *.hsforms.com *.hsforms.net *.hubspot.com *.jotform.com *.driftt.com *.menlosecurity.com *.on24.com *.onetrust.com outlook.office.com outlook.office365.com *.podbean.com *.recaptcha.net https://pricing-calculator.sensemetrics.com:3000 *.sensemetrics.com *.surveysparrow.com *.tourial.com *.twitter.com *.userway.org *.wpengine.com *.youtube.com *.zscalerthree.net 7rx80283.ibosscloud.com block.opendns.com blocked.freedom.to bpb.opendns.com cdn.cookielaw.org click.easypower.com div.show gateway.zscaler.net gateway.zscalertwo.net gateway.zscloud.net leap13.github.io login.zscloud.net mozbar.moz.com *.statuspage.io remove.video s.company-target.com skytraf.xyz www.ciuvo.com zswpmanager.wip.mmc.com wp-rocket.me/ app.vwo.com *.visualwebsiteoptimizer.com https://bentleysystems.my.site.com/; img-src 'self' blob: data: www.bentley.com https: t.co *.visualwebsiteoptimizer.com chart.googleapis.com wingify-assets.s3.amazonaws.com app.vwo.com; manifest-src 'self' www.bentley.com; media-src 'self' blob: data: https:; report-uri https://6449169ef1e3671a29137d52.endpoint.csper.io?v=7; worker-src 'self' blob:;", "cf-ray": "a28b0bea3bd150eb-STL", "alt-svc": "h3=\":443\"; ma=86400", "vary": "Accept-Encoding,Cookie", "last-modified": "Tue, 26 May 2026 15:48:38 GMT", "link": "; rel=shortlink" }, "security_checks": { "strict-transport-security": true, "content-security-policy": true, "x-content-type-options": true, "x-frame-options": false, "referrer-policy": true, "permissions-policy": true, "cross-origin-opener-policy": false, "cross-origin-embedder-policy": false, "cross-origin-resource-policy": false }, "server": "cloudflare", "powered_by": "WP Engine" }, "webpage": { "url": "https://www.bentley.com/", "title": "Bentley Systems | Infrastructure Engineering Software", "description": "Providing architects, engineers, constructors, and owner-operators with comprehensive architecture and engineering solutions for advancing infrastructure.", "success": true, "error": "", "status": 206 }, "network": { "141.193.213.21": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" }, "141.193.213.20": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" } }, "smtp": { "host": "bentley-com.mail.protection.outlook.com", "ports": [ { "port": 25, "open": false, "time_ms": 27.1, "banner": "", "error": "Network is unreachable" }, { "port": 465, "open": false, "time_ms": 4055.3, "banner": "", "error": "Connection timed out" }, { "port": 587, "open": false, "time_ms": 4035, "banner": "", "error": "Connection timed out" } ] }, "visitor": { "ip": "216.73.217.62", "reverse": "", "country": "", "country_code": "", "region": "", "city": "", "latitude": null, "longitude": null, "isp": "", "organization": "", "asn": "", "timezone": "", "browser": "Other", "os": "Other", "language": "", "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "is_bot": true, "cloudflare": false }, "analysis_time_ms": 80.74 }