{ "ok": true, "domain": "bjs.com", "generated_at": "2026-08-11T15:45:21-05:00", "cache": { "hit": true, "ttl": 0 }, "score": { "total": 71, "label": "Fair", "categories": { "dns": 60, "mail": 90, "security": 77, "network": 65, "availability": 60 }, "category_weights": { "dns": 25, "mail": 20, "security": 25, "network": 10, "availability": 20 }, "items": [ { "category": "dns", "title": "IPv4 (A)", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "2 IPv4 address(es) detected." }, { "category": "dns", "title": "IPv6 (AAAA)", "max_points": 10, "earned_points": 0, "lost_points": 10, "detail": "0 IPv6 address(es) detected." }, { "category": "dns", "title": "Name server redundancy", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "6 NS record(s); 2 or more required." }, { "category": "dns", "title": "SOA record", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Authoritative zone record." }, { "category": "dns", "title": "DNSSEC chain", "max_points": 15, "earned_points": 0, "lost_points": 15, "detail": "Both DS and DNSKEY are required." }, { "category": "dns", "title": "CAA policy", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Certificate authority restriction." }, { "category": "dns", "title": "DNS propagation", "max_points": 10, "earned_points": 0, "lost_points": 10, "detail": "Agreement between public resolvers." }, { "category": "mail", "title": "MX records", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "2 MX record(s)." }, { "category": "mail", "title": "SPF", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "SPF policy published." }, { "category": "mail", "title": "DMARC", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "DMARC policy published." }, { "category": "mail", "title": "DKIM", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "A DKIM selector was verified." }, { "category": "mail", "title": "MTA-STS", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Mail transport policy." }, { "category": "mail", "title": "TLS-RPT", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "TLS reporting policy." }, { "category": "security", "title": "Valid TLS certificate", "max_points": 55, "earned_points": 55, "lost_points": 0, "detail": "95 day(s) remaining." }, { "category": "security", "title": "Certificate lifetime", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Full points require at least 30 days remaining." }, { "category": "security", "title": "HTTP security headers", "max_points": 35, "earned_points": 12, "lost_points": 23, "detail": "3 of 9 evaluated headers detected." }, { "category": "network", "title": "PTR reverse DNS", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "PTR: a23-54-76-140.deploy.static.akamaitechnologies.com" }, { "category": "network", "title": "IPv4 diversity", "max_points": 35, "earned_points": 35, "lost_points": 0, "detail": "Two or more IPv4 addresses receive full points." }, { "category": "network", "title": "IPv6 connectivity", "max_points": 35, "earned_points": 0, "lost_points": 35, "detail": "AAAA availability." }, { "category": "availability", "title": "DNS resolution", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "At least one address family must resolve." }, { "category": "availability", "title": "HTTP response", "max_points": 40, "earned_points": 0, "lost_points": 40, "detail": "HTTP/2 403 " }, { "category": "availability", "title": "HTTPS final URL", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "Final URL uses HTTPS." } ], "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.", "diagnostics": [ { "level": "ok", "title": "IPv4 (A)", "detail": "2 IPv4 address(es) detected.", "category": "dns", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "error", "title": "IPv6 (AAAA)", "detail": "0 IPv6 address(es) detected.", "category": "dns", "max_points": 10, "earned_points": 0, "lost_points": 10 }, { "level": "ok", "title": "Name server redundancy", "detail": "6 NS record(s); 2 or more required.", "category": "dns", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SOA record", "detail": "Authoritative zone record.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "error", "title": "DNSSEC chain", "detail": "Both DS and DNSKEY are required.", "category": "dns", "max_points": 15, "earned_points": 0, "lost_points": 15 }, { "level": "error", "title": "CAA policy", "detail": "Certificate authority restriction.", "category": "dns", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "DNS propagation", "detail": "Agreement between public resolvers.", "category": "dns", "max_points": 10, "earned_points": 0, "lost_points": 10 }, { "level": "ok", "title": "MX records", "detail": "2 MX record(s).", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SPF", "detail": "SPF policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DMARC", "detail": "DMARC policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DKIM", "detail": "A DKIM selector was verified.", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "error", "title": "MTA-STS", "detail": "Mail transport policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "TLS-RPT", "detail": "TLS reporting policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "Valid TLS certificate", "detail": "95 day(s) remaining.", "category": "security", "max_points": 55, "earned_points": 55, "lost_points": 0 }, { "level": "ok", "title": "Certificate lifetime", "detail": "Full points require at least 30 days remaining.", "category": "security", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "warning", "title": "HTTP security headers", "detail": "3 of 9 evaluated headers detected.", "category": "security", "max_points": 35, "earned_points": 12, "lost_points": 23 }, { "level": "ok", "title": "PTR reverse DNS", "detail": "PTR: a23-54-76-140.deploy.static.akamaitechnologies.com", "category": "network", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "ok", "title": "IPv4 diversity", "detail": "Two or more IPv4 addresses receive full points.", "category": "network", "max_points": 35, "earned_points": 35, "lost_points": 0 }, { "level": "error", "title": "IPv6 connectivity", "detail": "AAAA availability.", "category": "network", "max_points": 35, "earned_points": 0, "lost_points": 35 }, { "level": "ok", "title": "DNS resolution", "detail": "At least one address family must resolve.", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "error", "title": "HTTP response", "detail": "HTTP/2 403 ", "category": "availability", "max_points": 40, "earned_points": 0, "lost_points": 40 }, { "level": "ok", "title": "HTTPS final URL", "detail": "Final URL uses HTTPS.", "category": "availability", "max_points": 20, "earned_points": 20, "lost_points": 0 } ] }, "dns": { "records": { "A": [ "23.54.76.140", "23.54.76.142" ], "AAAA": [], "CNAME": [], "MX": [ "10 mxb-00185201.gslb.pphosted.com.", "10 mxa-00185201.gslb.pphosted.com." ], "TXT": [ "\"_z8e42yto7wc20cwt6kxazgkl97snc2y\"", "\"intersight=\" \"bb27f6436d17dd58f6d584018feab5eac4599bda4fcec75a6e4fa62bde831b62\"", "\"onetrust-domain-verification=16f9a908a417496d9ad7946192d18c97\"", "\"sending_domain1080313=fef137037e5a94675796f97861ad50a5f987a8abaeaa0e97966fb1f574f96224\"", "\"facebook-domain-verification=yhbi2knspjl0pp598jps2e9yqiuzqe\"", "\"MS=ms91334944\"", "\"_ufe1bdky3nvhdjs6h7r7r8yxeitw06h\"", "\"_7yil46b64zsiaaga0izc0n6nsm3rko8\"", "\"+AEwY8OO3mwdkKCICOfxUe6a646DXJNGgB5KabbtL/fl0qkQ21jf+5m8ZJWRp+UqlpO0xhtYwSegNkUxRC9ZHw==\"", "\"atlassian-domain-verification=EMus5LvCBbSIR/kQV4b8sJRrZszlmXdQaFUo9GXsFONUQ3nXGKCLLBonraLIMjBv\"", "\"hibp-verify=dweb_9u2wg2agngfsizu5lgynkhc0\"", "\"anthropic-domain-verification-764hwa=hszjDR4JKYDDZ7anmcT1gfZp1\"", "\"_397rmht1k9sblvgfyn2m2pjcndp8l8s\"", "\"stripe-verification=8C04373334A807FA7AE6679B8A574848CC133173C7097DACE2A13EE021684F3E\"", "\"safetyculture-domain-verification=51118735-3321-4a56-b282-ad2dc2d38540\"", "\"_cm0m6lhnv84dayxudje0v4jkxd958je\"", "\"infoblox-domain-mastery=bdcb184f8e2c46a58df3831b8286c6388ad17db8567f36cf7d84f41f246c2a899f\"", "\"openai-domain-verification=dv-yPwOn06zbvtQ2uBNZhbcqID9\"", "\"MS=ms95009833\"", "\"facebook-domain-verification=6leb5xf6faejzf2ls9xfkj0l6ztzfb\"", "\"v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all\"", "\"00nhpcp57nc1txpn2hlw8gw3k0pdwnhd\"", "\"2qk51v4778vj2nf9lfnv2b3stnvmv0dj\"", "\"google-site-verification=M8MnRoJEQjccNyiAJleUnWg9qDhNJdKklYetlqPSL3c\"", "\"ibmid=f6d6dbae-6172-4cee-af88-0fc3ecb140df\"", "\"docusign=d53ea727-cf7f-4c4c-b79c-c3c4420c1ee5\"", "\"bjs.com=hvs5mdjzmh7nvsgttdxdlz16cx2qqqwl\"", "\"z71y4tw115z24yjmztfck4sdf82dmqq5\"", "\"vc9s4m3xjxn3zn39rztmkb2r09xy0bxt\"", "\"docusign=31a4b16f-5c2f-4e56-9fdc-ee1dd06b5bf2\"", "\"apple-domain-verification=EHs1l5GZifslTsMd\"", "\"adobe-idp-site-verification=19268c957df4a1a3ad016dda9890a54175d302768eb33d318e103880a8bd411f\"", "\"_havg3wli0727ttftyem4gyeml6i89hr\"", "\"flexera-domain-verification-hbpxinwsrtcfpqki\"", "\"_i8uj88ww25a6841p6w0jkxage01780v\"" ], "NS": [ "a12-65.akam.net.", "a7-64.akam.net.", "a14-67.akam.net.", "a13-67.akam.net.", "a1-71.akam.net.", "a16-67.akam.net." ], "SOA": [ "a1-71.akam.net. hostmaster.akamai.com. 2019122227 10800 300 604800 120" ], "CAA": [], "DS": [], "DNSKEY": [], "RRSIG": [], "NSEC": [], "NSEC3": [], "SRV": [], "NAPTR": [], "TLSA": [], "SSHFP": [] }, "ipv4": [ "23.54.76.140", "23.54.76.142" ], "ipv6": [] }, "mail": { "spf": "v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all", "dmarc": "v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com", "dkim_selector": "s1", "dkim_host": "s1._domainkey.bjs.com", "dkim": "k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuq/ixwBR/ZE+yhs5ZXax50WuttGWq9+E30ViF1X10LMbEvrNIbMBvHCdtbcyrWNUvTLQ23GoMZi0VTjRvIuGgLi+v/ibcDffCRVvTP39hNCW7hLcQp3CmUaYJNoE6FGwLNqtNHT/fuysMNnqegzxyWBTuccJnRGTk9uV/xaMWYsMdonFOKtUTjXNGL1gMQ5qR6/8ZW9Yiw2IFPrVvoPx1WFEXJJLCrhL2mVHBrC5iZW5LPzW0nBwHeb7ysbqbtGe081JdfpzGQ4jgDL4gYqmdPxt3ZieOQ4I7qMnPIzlxurI55JXZfzX4PYWSGDXOlqb3GD+ar1DiqbVOb1skw2hwIDAQAB", "spf_analysis": { "valid": true, "lookups": 1, "final": "~all", "message": "Within the estimated limit" }, "dmarc_analysis": { "valid": true, "policy": "reject" }, "bimi": "v=BIMI1; l=https://bimi-assets.has.pphosted.com/default._bimi.bjs.com.svg; a=https://bimi-assets.has.pphosted.com/default._bimi.bjs.com.pem", "mta_sts": "", "tls_rpt": "" }, "advanced": { "ptr": "a23-54-76-140.deploy.static.akamaitechnologies.com", "propagation": { "consistent": false, "results": [ { "provider": "Google", "server": "8.8.8.8", "result": [ "23.54.76.140", "23.54.76.142" ], "time_ms": 47.13 }, { "provider": "Cloudflare", "server": "1.1.1.1", "result": [ "23.200.156.79", "23.200.156.88" ], "time_ms": 32.37 }, { "provider": "Quad9", "server": "9.9.9.9", "result": [ "23.222.241.83", "23.222.241.90" ], "time_ms": 166.34 }, { "provider": "OpenDNS", "server": "208.67.222.222", "result": [ "23.54.76.140", "23.54.76.142" ], "time_ms": 31.55 }, { "provider": "AdGuard", "server": "94.140.14.14", "result": [ "23.48.224.203", "23.48.224.205", "23.48.224.206" ], "time_ms": 61.87 } ] } }, "ssl": { "available": true, "issuer": "DigiCert Inc", "subject": "www.bjs.com", "valid_from": "2026-04-29T19:00:00-05:00", "valid_to": "2026-11-14T17:59:59-06:00", "days_remaining": 95, "san": [ "www.bjs.com", "api.bjs.com", "b2bsales.bjs.com", "bjs.com", "optical.bjs.com" ], "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384" }, "http": { "url": "https://www.bjs.com/", "status": "HTTP/2 403 ", "http_version": "3", "headers": { "server": "AkamaiGHost", "content-length": "365", "location": "https://www.bjs.com/", "expires": "Tue, 11 Aug 2026 20:45:20 GMT", "cache-control": "max-age=0, no-cache, private", "pragma": "no-cache", "date": "Tue, 11 Aug 2026 20:45:20 GMT", "connection": "keep-alive", "mime-version": "1.0", "content-type": "text/html", "set-cookie": "FE_SA=true; path=/; secure", "content-security-policy": "default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: cdn.cs.1worldsync.com cs.1worldsync.com wss://*.app.delight.ai wss://*.sendbird.com ws.cs.1worldsync.com *.vs.assist.247-inc.net api.cloud.247-inc.net bjs.vs.assist.247-inc.net tie.cloud.247-inc.net *.demdex.net demdex.net *.adobedtm.com adobedtm.com *.scene7.com bjs.scene7.com s7d6.scene7.com scene7.com p11.techlab-cdn.com arttrk.com intel-srt-v2.s3.us-east-2.amazonaws.com intel-srt.s3.us-west-2.amazonaws.com mczbf.com s3.us-east-1.amazonaws.com adnxs.com ib.adnxs.com trkn.us cnv.event.prod.bidr.io prod.bidr.io bttrack.com bat.bing.com bat.bing.net bing.com www.bing.com *.bjs.com api.bjs.com bjs-sandbox.ms.tagdelivery.com bjs.com bjs.ms.tagdelivery.com qa1-preview.bjs.com share.bjs.com smetrics.bjs.com sv.bjs.com www.bjs.com *.bloomreach.io bjs.bloomreach.io bloomreach.io *.btttag.com bjswholesale3278871x.btttag.com bjswholesale3278871z.btttag.com btttag.com d.btttag.com maxcdn.bootstrapcdn.com *.braintreegateway.com api.braintreegateway.com cdn.ivaws.com *.creativecdn.com cdnjs.cloudflare.com cloudflare.com d1af033869koo7.cloudfront.net d9hhrg4mnvzow.cloudfront.net *.cloudinary.com cloudinary.com res.cloudinary.com cdn-live.conductor.com *.cnstrc.com ac.cnstrc.com cnstrc.com *.criteo.com *.criteo.net criteo.com criteo.net pixelconnector.adready.com *.fls.doubleclick.net ad.doubleclick.net cm.g.doubleclick.net g.doubleclick.net googleads.g.doubleclick.net doubleclick.net td.doubleclick.net 11619108.fls.doubleclick.net 12615026.fls.doubleclick.net dual-pixelconnector.pixeltracker.co pixelconnector.pixeltracker.co tracker.pixeltracker.co *.facebook.com *.facebook.net *.flix360.com *.flix360.io *.flixfacts.com assets-jpcust.jwpsrv.com content.jwplatform.com d3np41mctoibfu.cloudfront.net media.flixcar.com media.flixfacts.com media.flixsyndication.net media.pointandplace.com player.pointandplace.com ssl.p.jwpcdn.com syndication.flix360.com t.pointandplace.com use.fontawesome.com mpsnare.iesnare.com fonts.gstatic.com google.com maps.gstatic.com translate.google.com www.google.com www.gstatic.com googleadservices.com www.googleadservices.com *.googleapis.com maps.googleapis.com pendo-static-5208056809979904.storage.googleapis.com *.googletagmanager.com googletagmanager.com *.google-analytics.com cdn.cpnscdn.com cpnscdn.com 360yield.com code.jquery.com cdn.jsdelivr.net jsdelivr.net ads.linkedin.com px.ads.linkedin.com snap.licdn.com *.liadm.com liadm.com cdn.logrocket.io cdn.lrkt-in.com r.logrocket.io r.lrkt-in.com track.sv.rkdms.com image-creative.promoteiq.com ms.tagdelivery.com *.monetate.net f.monetate.net monetate.net se.monetate.net 3o0h3pqg.micpn.com micpn.com cdn.cookielaw.org cookielaw.org bam-cell.nr-data.net bam.nr-data.net js-agent.newrelic.com newrelic.com ads.nextdoor.com flask.nextdoor.com nextdoor.com *.onetrust.com geolocation.onetrust.com privacyportal.onetrust.com *.braintree-api.com *.paypal.com checkout.paypal.com paypal.com www.paypal.com www.paypalobjects.com cdn.pbbl.co *.pendo.io cdn.pendo.io data.pendo.io pendo.io *.powerreviews.com bjswholesale.co1.qualtrics.com rmp.rakuten.com reddit.com cdn.resonate.com beacon.riskified.com c.riskified.com img.riskified.com riskified.com apps.rokt.com *.rokt-api.com go.launchingdeals.com *.salsify-ecdn.com internal.salsify.com retail-client-events-service.internal.salsify.com salsify-ecdn.com a.sellpoint.net *.app.delight.ai *.sendbird.com *.simpli.fi simpli.fi sc-static.net snapchat.com tr.snapchat.com tr6.snapchat.com wbiprod.storedvalue.com cdn1-res.sundaysky.com *.syndigo.cloud *.syndigo.com app.labelinsight.com attribute-icon-images.labelinsight.com images-v2.labelinsight.com *.tiktok.com adsrvr.org insight.adsrvr.org *.adreadyclick.com *.xtlo.net f.cstpersl.com tagdelivery.com www.mczbf.com www.tire-art.com *.udev1a.net *.usablenet.com *.usablenet.dev bjs.usablenet.com usablenet.com request.eprotect.vantivcnp.com request.eprotect.vantivprelive.com youtube.com aq.flippenterprise.net connect.blockboardtech.com starbucks.jebbit.com s.yimg.com s3-signed-us3.svc.delight.ai;", "strict-transport-security": "max-age=31536000 ; includeSubDomains", "x-frame-options": "SAMEORIGIN" }, "security_checks": { "strict-transport-security": true, "content-security-policy": true, "x-content-type-options": false, "x-frame-options": true, "referrer-policy": false, "permissions-policy": false, "cross-origin-opener-policy": false, "cross-origin-embedder-policy": false, "cross-origin-resource-policy": false }, "server": "AkamaiGHost", "powered_by": "" }, "webpage": { "url": "https://www.bjs.com/", "title": "Access Denied", "description": "", "success": true, "error": "", "status": 403 }, "network": { "23.54.76.140": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" }, "23.54.76.142": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" } }, "smtp": { "host": "mxb-00185201.gslb.pphosted.com", "ports": [ { "port": 25, "open": false, "time_ms": 59, "banner": "", "error": "Connection refused" }, { "port": 465, "open": false, "time_ms": 115.2, "banner": "", "error": "Connection refused" }, { "port": 587, "open": false, "time_ms": 57.4, "banner": "", "error": "Connection refused" } ] }, "visitor": { "ip": "216.73.216.212", "reverse": "", "country": "", "country_code": "", "region": "", "city": "", "latitude": null, "longitude": null, "isp": "", "organization": "", "asn": "", "timezone": "", "browser": "Other", "os": "Other", "language": "", "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "is_bot": true, "cloudflare": false }, "analysis_time_ms": 116.4 }