{
    "ok": true,
    "domain": "bridgew.edu",
    "generated_at": "2026-08-11T04:25:44-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 80,
        "label": "Good",
        "categories": {
            "dns": 70,
            "mail": 90,
            "security": 77,
            "network": 50,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "4 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 0,
                "lost_points": 15,
                "detail": "Both DS and DNSKEY are required."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "1 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "154 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 12,
                "lost_points": 23,
                "detail": "3 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: ec2-184-73-245-212.compute-1.amazonaws.com"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/2 200 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "4 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "DNSSEC chain",
                "detail": "Both DS and DNSKEY are required.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 0,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "1 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "154 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "3 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 12,
                "lost_points": 23
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: ec2-184-73-245-212.compute-1.amazonaws.com",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/2 200 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "184.73.245.212"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "5 bridgew-edu.mail.protection.outlook.com."
            ],
            "TXT": [
                "\"autodesk-domain-verification=uHMlFp-EMCwLhk8YpqR1\"",
                "\"openai-domain-verification=dv-daMdiKEYFV1EVnlTlVVELVTJ\"",
                "\"ACE1804B8B9AE2BA92B05926891D7EBC0F8292E1FFB1948F64662162EF0C7345\"",
                "\"tjjz9j0zqd5grc5bqfsryd281s52nck6\"",
                "\"MS=ms93272571\"",
                "\"apple-domain-verification=SD3hZvlLgSnBhKdg\"",
                "\"atlassian-domain-verification=IutHBulJSojaxlzE/2aMa8kEuTags9EGtQZdD0NfRnbFpS2RvDnwQ895hVK7HrCJ\"",
                "\"anthropic-domain-verification-7zvttx=yVjvA17QptvJXEyLwsNw0SfQk\"",
                "\"_fu981kb8o2acz6t34jyzvdgs78ki0os\"",
                "\"v=spf1 include:spf.protection.outlook.com include:_spfa.bridgew.edu include:_spfb.bridgew.edu include:_spfc.bridgew.edu -all\"",
                "\"jamf-site-verification=M4cFw7KZG_Y15TWV1Es7aQ\"",
                "\"33xSmEx32PMi44FHHob6QBLTzN8uExJZT5bChn/gZteUk4kou/dhKDNkxCZ2+8kvMSOd7HHidqKFjzFMIXXJuw==\"",
                "\"obcrstgu3976bst29juktik155\"",
                "\"_9lhgumvlsq0ngee6jr5swaqbj3s5r0f\"",
                "\"zapier-domain-verification-challenge=a111aba9-f47a-4d2f-a8e9-7967e9cda044\"",
                "\"tk35j16sm8sbqsvd0c7zpczbnkh9w0km\"",
                "\"adobe-idp-site-verification=e000c3bbf8d5e0e2b56d65f2c39dd33887f1ac56f13aa8126c6338fe1a91db58\"",
                "\"egACqiu+mtB1VER3nOb9fG/qv4OxJdKMVOKsYiLqYRbMQpURrjN/RmNtnwbZi8Z8aQXMQMxdF7c1+vHczsBNng==\""
            ],
            "NS": [
                "ns2-06.azure-dns.net.",
                "ns1-06.azure-dns.com.",
                "ns3-06.azure-dns.org.",
                "ns4-06.azure-dns.info."
            ],
            "SOA": [
                "ns1-06.azure-dns.com. telecomm.bridgew.edu. 1292432686 7200 3600 604800 38400"
            ],
            "CAA": [],
            "DS": [],
            "DNSKEY": [],
            "RRSIG": [],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "184.73.245.212"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 include:spf.protection.outlook.com include:_spfa.bridgew.edu include:_spfb.bridgew.edu include:_spfc.bridgew.edu -all",
        "dmarc": "v=DMARC1; p=quarantine; rua=mailto:842f79a9bd4e515@rep.dmarcanalyzer.com; ruf=mailto:842f79a9bd4e515@for.dmarcanalyzer.com; fo=1;",
        "dkim_selector": "selector1",
        "dkim_host": "selector1._domainkey.bridgew.edu",
        "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3vrDKek3Kf0IxHzQ3uzIcOx3NmYdqAPmVYvROM9sg3uzEVrSzFAT50AOwgS+0ZYYpHLrFzoEn8mcZhoz5GRciOb/t+0myv5cKkdRDflqZ90mVizj0TAWCMAymR3FnveW2+hhElXQdJYvkchaFAX+QNX4Xju6gENTHDkhiZSfmvwIDAQAB; n=1024,1453255667,1468980467",
        "spf_analysis": {
            "valid": true,
            "lookups": 4,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "quarantine"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "ec2-184-73-245-212.compute-1.amazonaws.com",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "184.73.245.212"
                    ],
                    "time_ms": 58.59
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "184.73.245.212"
                    ],
                    "time_ms": 55.4
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "184.73.245.212"
                    ],
                    "time_ms": 110.55
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "184.73.245.212"
                    ],
                    "time_ms": 72.6
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "184.73.245.212"
                    ],
                    "time_ms": 77.17
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "DigiCert Inc",
        "subject": "*.bridgew.edu",
        "valid_from": "2026-01-29T18:00:00-06:00",
        "valid_to": "2027-01-12T17:59:59-06:00",
        "days_remaining": 154,
        "san": [
            "*.bridgew.edu",
            "*.campus.bridgew.edu",
            "bridgew.edu",
            "campus.bridgew.edu"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_256_GCM_SHA384"
    },
    "http": {
        "url": "https://www.bridgew.edu/",
        "status": "HTTP/2 200 ",
        "http_version": "3",
        "headers": {
            "server": "nginx",
            "date": "Tue, 11 Aug 2026 09:25:36 GMT",
            "content-type": "text/html; charset=utf-8",
            "content-length": "172762",
            "location": "https://www.bridgew.edu/",
            "x-content-type-options": "nosniff",
            "cache-control": "max-age=31536000, public",
            "expires": "Sun, 19 Nov 1978 05:00:00 GMT",
            "x-request-id": "v-53c7612c-9529-11f1-ba45-238a138dbd61",
            "age": "26320",
            "via": "varnish",
            "x-cache": "HIT",
            "x-cache-hits": "3014",
            "connection": "keep-alive",
            "x-drupal-dynamic-cache": "UNCACHEABLE (poor cacheability)",
            "content-language": "en",
            "x-frame-options": "SAMEORIGIN",
            "vary": "Cookie,Accept-Encoding",
            "x-generator": "Drupal 11 (https://www.drupal.org)",
            "surrogate-key": "hprb h1t7 1tad sllk loui 4lpr jc7b 6cpq bhhm v9gq dnld vo91 m93g 89vg 9rgn tr7t 9403 s1m8 4u11 ar3h dg3k k8po eq3h 3c6p h3k1 jue7 i5ib bmeu 8h24 6tk4 bii1 f9oe 568r 9pho 19me v61p b92d eucr dci3 0apq 0hev gq9a o6ih 998n vf79 ae27 cfvq 9dcv e5q2 m0jr k4lo vdem 3bn6 99pj lkqe 1juv 4gqf j2qu dc91 atln anbk de6r lr6r ga2n ol6h bqt3 kmqb lprp ps9d 0sk7 ghd7 1vvm bjmn pc5r 74tr lq1c 4spq 11hj tbf2 40f8 8eip d6r5 99u4 3h7b tdqu 9m1s uvc1 p0p9 hdtj 9k5n kqro 8e6q sslm f7r8 kkn9 2elp ghsc c32g 69k3 80j7 p4ss lkje 9bqr s6r4 8s6a vsl3 e2oo nemg 0to8 riil uatr uvjb vr35 h8pe 02o3 bnum 6lb6 lug8 hrc3 6c7g b2o1 gjbm k7rb 9ftu gvt1 8hdt 7rko skb6 p3r7 g5j5 gnar bbou enl0 phsj crrd 6sik bfo4 lho1 rb6h 4pbu 7cah nhpe vea2 esj0 o9vu un3u julu 7gv4 u9b3 t01a 2tl1 jnoo iol3 i382 7gbb 31hi kueh 7d1l 5sb0 klam o6qq 38hm 3nt7 6aff bpqk 3r0l 5rl7 tci1 6vi6 avis ccup vb9g k78a 3s1m 2tgv 988o tboi e97s 62ep 8nh5 t811 lhcu e1h7 ea5t gavt aigt db9r uhr4 idov plnn m3ti n3nl rfen 8tgs 3h2u tgg0 05no 4n0j km75 h8gn 3air q62q f6t6 73gm 9v25 3iak 9did vj29 ojmn vqqn v24c dokr p86b m82u gcf8 lb62 oo4b mvnf 76c8 sdq1 250j p6m1 uicm q843 h1mf 70bm 3pt5 s105 l7nd 7ut9 nnrt d6ou n4hk mq1l gp14 689c 86tr mloo ge19 7s7o 2afe vrgm kldh d1eo 19t6 u5pi k71b s76h aq0v njqs f2gs 2v20 2tjb jugd 9vuk 7kkt 9onr b6f9 egvq natn mcsk kh3s t8c2 v9f1 e60e 3bc1 8m4q qp44 2nhr hh5v l1el o32h ghlb 8lvs un4e 5vdb 5596 rtm0 emfc fh6v",
            "x-xss-protection": "1; mode=block",
            "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
            "x-drupal-cache": "HIT",
            "access-control-allow-origin": "*",
            "last-modified": "Tue, 11 Aug 2026 02:06:30 GMT",
            "x-ah-environment": "prod",
            "etag": "W/\"1786413990-gzip\"",
            "accept-ranges": "bytes"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": false,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "nginx",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.bridgew.edu/",
        "title": "Bridgewater State University",
        "description": "Bridgewater State University offers high quality and affordable undergraduate and graduate programs. We invite you to visit our main campus in Bridgewater, Massachusetts ideally located between Providence and Boston. Whether you take a campus walking tour or attend an info session, you'll get a sense of why our Bears call this place home.",
        "success": true,
        "error": "",
        "status": 206
    },
    "network": {
        "184.73.245.212": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "bridgew-edu.mail.protection.outlook.com",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 35.2,
                "banner": "",
                "error": "Network is unreachable"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4045.1,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4010.3,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 115.35
}