{ "ok": true, "domain": "bucknell.edu", "generated_at": "2026-08-09T15:24:56-05:00", "cache": { "hit": true, "ttl": 0 }, "score": { "total": 87, "label": "Good", "categories": { "dns": 95, "mail": 90, "security": 77, "network": 55, "availability": 100 }, "category_weights": { "dns": 25, "mail": 20, "security": 25, "network": 10, "availability": 20 }, "items": [ { "category": "dns", "title": "IPv4 (A)", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "1 IPv4 address(es) detected." }, { "category": "dns", "title": "IPv6 (AAAA)", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "2 IPv6 address(es) detected." }, { "category": "dns", "title": "Name server redundancy", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "4 NS record(s); 2 or more required." }, { "category": "dns", "title": "SOA record", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Authoritative zone record." }, { "category": "dns", "title": "DNSSEC chain", "max_points": 15, "earned_points": 15, "lost_points": 0, "detail": "DS and DNSKEY detected." }, { "category": "dns", "title": "CAA policy", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Certificate authority restriction." }, { "category": "dns", "title": "DNS propagation", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Agreement between public resolvers." }, { "category": "mail", "title": "MX records", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "6 MX record(s)." }, { "category": "mail", "title": "SPF", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "SPF policy published." }, { "category": "mail", "title": "DMARC", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "DMARC policy published." }, { "category": "mail", "title": "DKIM", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "A DKIM selector was verified." }, { "category": "mail", "title": "MTA-STS", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Mail transport policy." }, { "category": "mail", "title": "TLS-RPT", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "TLS reporting policy." }, { "category": "security", "title": "Valid TLS certificate", "max_points": 55, "earned_points": 55, "lost_points": 0, "detail": "51 day(s) remaining." }, { "category": "security", "title": "Certificate lifetime", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Full points require at least 30 days remaining." }, { "category": "security", "title": "HTTP security headers", "max_points": 35, "earned_points": 12, "lost_points": 23, "detail": "3 of 9 evaluated headers detected." }, { "category": "network", "title": "PTR reverse DNS", "max_points": 30, "earned_points": 0, "lost_points": 30, "detail": "PTR not detected." }, { "category": "network", "title": "IPv4 diversity", "max_points": 35, "earned_points": 20, "lost_points": 15, "detail": "Two or more IPv4 addresses receive full points." }, { "category": "network", "title": "IPv6 connectivity", "max_points": 35, "earned_points": 35, "lost_points": 0, "detail": "AAAA availability." }, { "category": "availability", "title": "DNS resolution", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "At least one address family must resolve." }, { "category": "availability", "title": "HTTP response", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "HTTP/2 200 " }, { "category": "availability", "title": "HTTPS final URL", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "Final URL uses HTTPS." } ], "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.", "diagnostics": [ { "level": "ok", "title": "IPv4 (A)", "detail": "1 IPv4 address(es) detected.", "category": "dns", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "ok", "title": "IPv6 (AAAA)", "detail": "2 IPv6 address(es) detected.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "Name server redundancy", "detail": "4 NS record(s); 2 or more required.", "category": "dns", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SOA record", "detail": "Authoritative zone record.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "DNSSEC chain", "detail": "DS and DNSKEY detected.", "category": "dns", "max_points": 15, "earned_points": 15, "lost_points": 0 }, { "level": "error", "title": "CAA policy", "detail": "Certificate authority restriction.", "category": "dns", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "DNS propagation", "detail": "Agreement between public resolvers.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "MX records", "detail": "6 MX record(s).", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SPF", "detail": "SPF policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DMARC", "detail": "DMARC policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DKIM", "detail": "A DKIM selector was verified.", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "error", "title": "MTA-STS", "detail": "Mail transport policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "TLS-RPT", "detail": "TLS reporting policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "Valid TLS certificate", "detail": "51 day(s) remaining.", "category": "security", "max_points": 55, "earned_points": 55, "lost_points": 0 }, { "level": "ok", "title": "Certificate lifetime", "detail": "Full points require at least 30 days remaining.", "category": "security", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "warning", "title": "HTTP security headers", "detail": "3 of 9 evaluated headers detected.", "category": "security", "max_points": 35, "earned_points": 12, "lost_points": 23 }, { "level": "error", "title": "PTR reverse DNS", "detail": "PTR not detected.", "category": "network", "max_points": 30, "earned_points": 0, "lost_points": 30 }, { "level": "warning", "title": "IPv4 diversity", "detail": "Two or more IPv4 addresses receive full points.", "category": "network", "max_points": 35, "earned_points": 20, "lost_points": 15 }, { "level": "ok", "title": "IPv6 connectivity", "detail": "AAAA availability.", "category": "network", "max_points": 35, "earned_points": 35, "lost_points": 0 }, { "level": "ok", "title": "DNS resolution", "detail": "At least one address family must resolve.", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTP response", "detail": "HTTP/2 200 ", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTPS final URL", "detail": "Final URL uses HTTPS.", "category": "availability", "max_points": 20, "earned_points": 20, "lost_points": 0 } ] }, "dns": { "records": { "A": [ "23.185.0.2" ], "AAAA": [ "2620:12a:8001::2", "2620:12a:8000::2" ], "CNAME": [], "MX": [ "30 aspmx4.googlemail.com.", "30 aspmx5.googlemail.com.", "30 aspmx3.googlemail.com.", "20 alt1.aspmx.l.google.com.", "30 aspmx2.googlemail.com.", "10 aspmx.l.google.com." ], "TXT": [ "\"google-site-verification=x3JNt1Ya5t6CBDpJ6RmjZ0UfbScdtLu87Lyl_Xwwubg\"", "\"v=spf1 ip4:134.82.129.22/32 ip4:134.82.8.12/32 ip4:74.125.244.0/22 ip4:139.60.0.0/22 ip4:216.248.199.106/32 ip4:52.86.188.131/32 ip4:52.43.50.148/32 ip4:54.240.121.247/32 ip4:54.240.121.248/32\" \" include:_spf.google.com include:_spf.qualtrics.com include:csod.com include:sg.technolutions.net include:symplicity.com include:touchnet.com include:spf.dynect.net include:mail.mythoshq.com include:mailgun.org -all\"", "\"apple-domain-verification=UDhk8Va9mFtTvDzB\"", "\"docusign=8b242838-652a-487c-bf1f-032f4ebc9923\"", "\"f379c09c-e6c3-4837-8101-f3c3e9cde011\"", "\"docusign=bf60af0b-9e6d-4557-bb6b-7080f7c64187\"", "\"e2ma-verification=b7zcb\"", "\"duo_sso_verification=hHhywv1knlFsP6fEtZcNe1pV5noFlwgUWizwoXZnmhPYCVrWRWT0KfkEUKiNYV1o\"", "\"D658B34ED7CD61E1CE0E767658729E83\"", "\"mongodb-site-verification=WpwIgFAKQD0xQC9DdVZrlxxV95gVxUUe\"", "\"ZOOM_verify_LYimDP_hQZuOgzx85JzMtQ\"", "\"MS=B611F7C53A44FA9F724724B63108FA48D72BF09F\"", "\"adobe-idp-site-verification=650b43f8-03b1-40f7-bee4-b3fb16d9b5b0\"" ], "NS": [ "ns-1318.awsdns-36.org.", "ns-1572.awsdns-04.co.uk.", "ns-377.awsdns-47.com.", "ns-940.awsdns-53.net." ], "SOA": [ "ns-377.awsdns-47.com. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400" ], "CAA": [], "DS": [ "1103 13 2 7F946E93227BAB4E50CFF0E9601E770640C1572F72AEB277FEE04B2D 67BB8AE2" ], "DNSKEY": [ "256 3 13 qKgRAKXL2MiAvMd+6PrtrIh2aYNCKmHv+vcvHzCzWh/9POFGQmfoiGKj DVnf1zqjehcAxNcD33fY1H8sU45VPQ==", "256 3 13 T34SWIVe59eKtsv2G1VIhM7ZLBo5exzxFPLT6CipYcdjbhJf9TL5xRp2 Jg8CwXMBwpk63EPMB81g6gzlo5CD/g==", "257 3 13 C1g7Qm4F9F5PEpQVdYUwH7y8OBOvX2ikZPjZ1PfzT5d7DvX8yQQbpxK4 Ii71dD43JHGV2ojeNCqxNGily9If/g==" ], "RRSIG": [ "DNSKEY 13 2 3600 20260810020000 20260809150000 1103 bucknell.edu. pREVneVpK0RNIa/htecYiUlMNjNu4Js36IbdhOcnKtI/87ziHddII3pq WpzyPbC568GsoRzKsqp9S4PB1r80yw==", "SOA 13 2 900 20260809213946 20260809192446 19400 bucknell.edu. j0Hddwfxu/y2UIpj/Vq6NzglON4pMRoBYTXoORZr9jbD7modb6eFVKDk 4DRmxafU7H9dDQ6kBUCLFQMi3fSDNg==", "NS 13 2 172800 20260811212446 20260809192446 19400 bucknell.edu. qM33+NjvbQQk1wCk/oXBKEW0HDTiwaZvTbgHk12uDpITEj29+H8VapZH 5kX15Ss21aT5DH1AcT3wAZy0CEqC+w==", "AAAA 13 2 3600 20260809222446 20260809192446 19400 bucknell.edu. LxEh9rr55Rk+Fl6GYpe+u2FMGMWaY8+uOxDXIPgCGqba9XIO6WClXDKm V04Va3bgr6Co+Sr5hSOtxWUQ4K+GtA==", "DS 13 2 86400 20260816033301 20260809022301 6705 edu. gzL8V6XxzheLn74f6DtfqYriipBEsA8TlGz+rvl0xob3ATo89x+EaXAU 2Y+2qwNyqnebr0s7m/WEb2Uk/d1fSA==" ], "NSEC": [], "NSEC3": [], "SRV": [], "NAPTR": [], "TLSA": [], "SSHFP": [] }, "ipv4": [ "23.185.0.2" ], "ipv6": [ "2620:12a:8001::2", "2620:12a:8000::2" ] }, "mail": { "spf": "v=spf1 ip4:134.82.129.22/32 ip4:134.82.8.12/32 ip4:74.125.244.0/22 ip4:139.60.0.0/22 ip4:216.248.199.106/32 ip4:52.86.188.131/32 ip4:52.43.50.148/32 ip4:54.240.121.247/32 ip4:54.240.121.248/32 include:_spf.google.com include:_spf.qualtrics.com include:csod.com include:sg.technolutions.net include:symplicity.com include:touchnet.com include:spf.dynect.net include:mail.mythoshq.com include:mailgun.org -all", "dmarc": "v=DMARC1;p=none;rua=mailto:dmarc@bucknell.edu", "dkim_selector": "google", "dkim_host": "google._domainkey.bucknell.edu", "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCbnlqTIgclnQS4laLc3B0OFW7Vr26hiZjkQcRqlo/stkjRd4qewzla/dJYX4mIRMt4AQe0s2V8MDoi8v16yZRNYir9sotSLYMn1Fcf+SMg4PCe4R88tTruBTp6d/ulaWT5SRH/PK3W240V6aGpuOFu8kuSI0m9tIfBzGl+0X57bwIDAQAB", "spf_analysis": { "valid": true, "lookups": 9, "final": "-all", "message": "Within the estimated limit" }, "dmarc_analysis": { "valid": true, "policy": "none" }, "bimi": "", "mta_sts": "", "tls_rpt": "" }, "advanced": { "ptr": "", "propagation": { "consistent": true, "results": [ { "provider": "Google", "server": "8.8.8.8", "result": [ "23.185.0.2" ], "time_ms": 74.22 }, { "provider": "Cloudflare", "server": "1.1.1.1", "result": [ "23.185.0.2" ], "time_ms": 60.69 }, { "provider": "Quad9", "server": "9.9.9.9", "result": [ "23.185.0.2" ], "time_ms": 69.48 }, { "provider": "OpenDNS", "server": "208.67.222.222", "result": [ "23.185.0.2" ], "time_ms": 59.48 }, { "provider": "AdGuard", "server": "94.140.14.14", "result": [ "23.185.0.2" ], "time_ms": 58.01 } ] } }, "ssl": { "available": true, "issuer": "Let's Encrypt", "subject": "bucknell.edu", "valid_from": "2026-07-02T07:47:51-05:00", "valid_to": "2026-09-30T07:47:50-05:00", "days_remaining": 51, "san": [ "bucknell.edu", "www.bucknell.edu" ], "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256" }, "http": { "url": "https://www.bucknell.edu/", "status": "HTTP/2 200 ", "http_version": "3", "headers": { "retry-after": "0", "server": "nginx", "location": "https://www.bucknell.edu/", "x-pantheon-redirect": "primary-domain-policy-doc", "date": "Sun, 09 Aug 2026 20:24:48 GMT", "x-served-by": "cache-chi-kigq8000106-CHI, cache-stl760044-STL", "x-cache": "HIT, HIT", "x-cache-hits": "25, 0", "x-timer": "S1786307088.156571,VS0,VE3", "age": "17967", "accept-ranges": "bytes", "via": "1.1 varnish, 1.1 varnish", "content-length": "201890", "cache-control": "max-age=21600, public", "content-language": "en", "content-security-policy-report-only": "default-src 'self'; connect-src 'self' https://www.google.com https://analytics.google.com https://pixel-config.reddit.com https://analytics.ahrefs.com https://ipv4.podscribe.com https://tags.srv.stackadapt.com https://a.klaviyo.com https://r.clarity.ms https://answersstatus.pagescdn.com https://analytics.heyhalda.com https://app.heyhalda.com https://insight.adsrvr.org https://3.212.39.155 https://44.228.85.26 https://34.215.155.61 https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' https://use.typekit.net https://p.typekit.net https://fonts.gstatic.com; frame-src 'self' https://insight.adsrvr.org https://match.adsrvr.org https://www.youtube.com https://answers-embed.bucknell.pagescdn.com; img-src 'self' data: https://fei.pro-market.net https://alb.reddit.com https://verifi.podscribe.com https://c.clarity.ms https://um.simpli.fi https://www.googleadservices.com https://cm.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://www.google.co.cr https://x.bidswitch.net https://bcp.crwdcntrl.net https://idsync.rlcdn.com https://simplifi.partners.tremorhub.com https://pixel.tapad.com https://aa.agkn.com https://ps.eyeota.net https://s.ad.smaato.net https://eb2.3lift.com https://sync.1rx.io https://image2.pubmatic.com https://synchroscript.deliveryengine.adswizz.com https://us-u.openx.net https://pixel.rubiconproject.com https://ib.adnxs.com https://sync.intentiq.com https://loadm.exelator.com https://user-sync.fwmrm.net https://ups.analytics.yahoo.com https://sync.bfmio.com https://ce.lijit.com https://ml314.com https://onetag-sys.com https://pippio.com https://c.bing.com https://www.google-analytics.com https://www.googletagmanager.com; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' https://assets.sitescdn.net https://www.googletagmanager.com https://www.redditstatic.com https://js.adsrvr.org https://tags.srv.stackadapt.com https://dx.mountain.com https://px.mountain.com https://gs.mountain.com https://static.klaviyo.com https://static-tracking.klaviyo.com https://www.clarity.ms https://scripts.clarity.ms https://tag.simpli.fi https://i.simpli.fi https://d34r8q7sht0t9k.cloudfront.net https://analytics.ahrefs.com https://www.youtube.com https://app.heyhalda.com calendar.bucknell.edu https://bucknell.photoshelter.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fd.cleantalk.org https://maxcdn.bootstrapcdn.com https://unpkg.com https://www.google.com; style-src 'self' 'unsafe-inline' https://assets.sitescdn.net https://use.typekit.net https://p.typekit.net https://tags.srv.stackadapt.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://unpkg.com https://use.fontawesome.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'", "content-type": "text/html; charset=utf-8", "etag": "W/\"1786271503\"", "expires": "Sun, 19 Nov 1978 05:00:00 GMT", "last-modified": "Sun, 09 Aug 2026 10:31:43 GMT", "strict-transport-security": "max-age=31622400", "x-content-type-options": "nosniff", "x-drupal-cache": "HIT", "x-drupal-dynamic-cache": "UNCACHEABLE (poor cacheability)", "x-frame-options": "ALLOW-FROM https://app.pageproof.com", "x-generator": "Drupal 11 (https://www.drupal.org)", "x-pantheon-styx-hostname": "styx-us-a-7ffbcf568d-f947v", "x-styx-req-id": "887784ef-9406-11f1-a273-069065fb7276", "vary": "Accept-Encoding, Cookie, Cookie, Cookie" }, "security_checks": { "strict-transport-security": true, "content-security-policy": false, "x-content-type-options": true, "x-frame-options": true, "referrer-policy": false, "permissions-policy": false, "cross-origin-opener-policy": false, "cross-origin-embedder-policy": false, "cross-origin-resource-policy": false }, "server": "nginx", "powered_by": "" }, "webpage": { "url": "https://www.bucknell.edu/", "title": "Bucknell University | Liberal Arts, Engineering, & Management Colleges", "description": "Make a decision that will change your life for the better, every day. Choose Bucknell, a place where your faculty will inspire you to take bold steps in learning as you innovate, lead, prepare for your career and form friendships for life on our campus in the heart of Pennsylvania.", "success": true, "error": "", "status": 206 }, "network": { "23.185.0.2": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" } }, "smtp": { "host": "aspmx4.googlemail.com", "ports": [ { "port": 25, "open": false, "time_ms": 23.4, "banner": "", "error": "Network is unreachable" }, { "port": 465, "open": false, "time_ms": 4020.7, "banner": "", "error": "Connection timed out" }, { "port": 587, "open": false, "time_ms": 4021.1, "banner": "", "error": "Connection timed out" } ] }, "visitor": { "ip": "216.73.217.62", "reverse": "", "country": "", "country_code": "", "region": "", "city": "", "latitude": null, "longitude": null, "isp": "", "organization": "", "asn": "", "timezone": "", "browser": "Other", "os": "Other", "language": "", "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "is_bot": true, "cloudflare": false }, "analysis_time_ms": 115.04 }