{
"ok": true,
"domain": "cabi.org",
"generated_at": "2026-08-10T13:53:55-05:00",
"cache": {
"hit": true,
"ttl": 0
},
"score": {
"total": 81,
"label": "Good",
"categories": {
"dns": 70,
"mail": 100,
"security": 73,
"network": 50,
"availability": 100
},
"category_weights": {
"dns": 25,
"mail": 20,
"security": 25,
"network": 10,
"availability": 20
},
"items": [
{
"category": "dns",
"title": "IPv4 (A)",
"max_points": 30,
"earned_points": 30,
"lost_points": 0,
"detail": "1 IPv4 address(es) detected."
},
{
"category": "dns",
"title": "IPv6 (AAAA)",
"max_points": 10,
"earned_points": 0,
"lost_points": 10,
"detail": "0 IPv6 address(es) detected."
},
{
"category": "dns",
"title": "Name server redundancy",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "4 NS record(s); 2 or more required."
},
{
"category": "dns",
"title": "SOA record",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Authoritative zone record."
},
{
"category": "dns",
"title": "DNSSEC chain",
"max_points": 15,
"earned_points": 0,
"lost_points": 15,
"detail": "Both DS and DNSKEY are required."
},
{
"category": "dns",
"title": "CAA policy",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "Certificate authority restriction."
},
{
"category": "dns",
"title": "DNS propagation",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Agreement between public resolvers."
},
{
"category": "mail",
"title": "MX records",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "1 MX record(s)."
},
{
"category": "mail",
"title": "SPF",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "SPF policy published."
},
{
"category": "mail",
"title": "DMARC",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "DMARC policy published."
},
{
"category": "mail",
"title": "DKIM",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "A DKIM selector was verified."
},
{
"category": "mail",
"title": "MTA-STS",
"max_points": 5,
"earned_points": 5,
"lost_points": 0,
"detail": "Mail transport policy."
},
{
"category": "mail",
"title": "TLS-RPT",
"max_points": 5,
"earned_points": 5,
"lost_points": 0,
"detail": "TLS reporting policy."
},
{
"category": "security",
"title": "Valid TLS certificate",
"max_points": 55,
"earned_points": 55,
"lost_points": 0,
"detail": "137 day(s) remaining."
},
{
"category": "security",
"title": "Certificate lifetime",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Full points require at least 30 days remaining."
},
{
"category": "security",
"title": "HTTP security headers",
"max_points": 35,
"earned_points": 8,
"lost_points": 27,
"detail": "2 of 9 evaluated headers detected."
},
{
"category": "network",
"title": "PTR reverse DNS",
"max_points": 30,
"earned_points": 30,
"lost_points": 0,
"detail": "PTR: no-ptr.as20860.net"
},
{
"category": "network",
"title": "IPv4 diversity",
"max_points": 35,
"earned_points": 20,
"lost_points": 15,
"detail": "Two or more IPv4 addresses receive full points."
},
{
"category": "network",
"title": "IPv6 connectivity",
"max_points": 35,
"earned_points": 0,
"lost_points": 35,
"detail": "AAAA availability."
},
{
"category": "availability",
"title": "DNS resolution",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "At least one address family must resolve."
},
{
"category": "availability",
"title": "HTTP response",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "HTTP/2 200 "
},
{
"category": "availability",
"title": "HTTPS final URL",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "Final URL uses HTTPS."
}
],
"methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
"diagnostics": [
{
"level": "ok",
"title": "IPv4 (A)",
"detail": "1 IPv4 address(es) detected.",
"category": "dns",
"max_points": 30,
"earned_points": 30,
"lost_points": 0
},
{
"level": "error",
"title": "IPv6 (AAAA)",
"detail": "0 IPv6 address(es) detected.",
"category": "dns",
"max_points": 10,
"earned_points": 0,
"lost_points": 10
},
{
"level": "ok",
"title": "Name server redundancy",
"detail": "4 NS record(s); 2 or more required.",
"category": "dns",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SOA record",
"detail": "Authoritative zone record.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "error",
"title": "DNSSEC chain",
"detail": "Both DS and DNSKEY are required.",
"category": "dns",
"max_points": 15,
"earned_points": 0,
"lost_points": 15
},
{
"level": "error",
"title": "CAA policy",
"detail": "Certificate authority restriction.",
"category": "dns",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "ok",
"title": "DNS propagation",
"detail": "Agreement between public resolvers.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "MX records",
"detail": "1 MX record(s).",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SPF",
"detail": "SPF policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DMARC",
"detail": "DMARC policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DKIM",
"detail": "A DKIM selector was verified.",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "MTA-STS",
"detail": "Mail transport policy.",
"category": "mail",
"max_points": 5,
"earned_points": 5,
"lost_points": 0
},
{
"level": "ok",
"title": "TLS-RPT",
"detail": "TLS reporting policy.",
"category": "mail",
"max_points": 5,
"earned_points": 5,
"lost_points": 0
},
{
"level": "ok",
"title": "Valid TLS certificate",
"detail": "137 day(s) remaining.",
"category": "security",
"max_points": 55,
"earned_points": 55,
"lost_points": 0
},
{
"level": "ok",
"title": "Certificate lifetime",
"detail": "Full points require at least 30 days remaining.",
"category": "security",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "warning",
"title": "HTTP security headers",
"detail": "2 of 9 evaluated headers detected.",
"category": "security",
"max_points": 35,
"earned_points": 8,
"lost_points": 27
},
{
"level": "ok",
"title": "PTR reverse DNS",
"detail": "PTR: no-ptr.as20860.net",
"category": "network",
"max_points": 30,
"earned_points": 30,
"lost_points": 0
},
{
"level": "warning",
"title": "IPv4 diversity",
"detail": "Two or more IPv4 addresses receive full points.",
"category": "network",
"max_points": 35,
"earned_points": 20,
"lost_points": 15
},
{
"level": "error",
"title": "IPv6 connectivity",
"detail": "AAAA availability.",
"category": "network",
"max_points": 35,
"earned_points": 0,
"lost_points": 35
},
{
"level": "ok",
"title": "DNS resolution",
"detail": "At least one address family must resolve.",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTP response",
"detail": "HTTP/2 200 ",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTPS final URL",
"detail": "Final URL uses HTTPS.",
"category": "availability",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
}
]
},
"dns": {
"records": {
"A": [
"62.128.221.180"
],
"AAAA": [],
"CNAME": [],
"MX": [
"0 cabi.esvacloud.com."
],
"TXT": [
"\"anthropic-domain-verification-6azpvx=vDpetsvoRWuGtpZMLJMjNCQxq\"",
"\"google-site-verification=oNfcuFaNFRA_E3Csn0gcKkSVT45LVbL_OZQJPZhbOLA\"",
"\"pardot732633=5a88e22076167cf2db923f6e8515441b459b947c342f8c798fa9437aaf9a6817\"",
"\"v=spf1 include:irljbgg0wh.powerspf.com ~all\"",
"\"ca3-b3594bdc43d9423f859441b107bd67dc\"",
"\"4m27th3608z6s95k3mcs8z0pzg12tnkx\"",
"\"\\\"o78uj9co6c5i18qftn6kssqngl\\\"K33pTh155@f32018\"",
"\"google-site-verification=OInaDd3xRvg4k3JbtFs4usi01VwQp-upq_Ni_LXoAG4\"",
"\"google-site-verification=rHqJjFrCnnt0IEiO_tXdPoDCr54cytuB5rRZK-LyGwY\"",
"\"google-site-verification=r7O1NScTGKv_FyQTx6kGOK6_I-peaNnavNmOUu7okMg\"",
"\"_6616jeva46o71nil2gwqwvnckbhs5h1\"",
"\"ahrefs-site-verification_bf2cf0b8c43e76db7cf881c7c5db3c5b4128a2ffa60fd408a2ed7737e27c513b\"",
"\"google-site-verification=qnWLhGmOLh65lzdcuLV-F-ZUXhW7atkIso3RJ0JU48g\"",
"\"pardot732633=594ad28b65644cc8eb9615c580f8c81ff01cf58dd1fbdcc481059a1cd1a034d9\"",
"\"google-site-verification=h60KtrKWi5TOBvQCI0-xduhW-qK-2v4-uwI2YULsa_Q\"",
"\"9gbdwrdbstt9kwzbshpdskqw5g9qqt0m\"",
"\"sj4p9rffl5jlf3sjrrv7fa88cp\""
],
"NS": [
"ns-1114.awsdns-11.org.",
"ns-2014.awsdns-59.co.uk.",
"ns-20.awsdns-02.com.",
"ns-925.awsdns-51.net."
],
"SOA": [
"ns-1114.awsdns-11.org. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400"
],
"CAA": [],
"DS": [],
"DNSKEY": [],
"RRSIG": [],
"NSEC": [],
"NSEC3": [],
"SRV": [],
"NAPTR": [],
"TLSA": [],
"SSHFP": []
},
"ipv4": [
"62.128.221.180"
],
"ipv6": []
},
"mail": {
"spf": "v=spf1 include:irljbgg0wh.powerspf.com ~all",
"dmarc": "v=DMARC1; p=quarantine; rua=mailto:om1g23xg@ag.eu.dmarcian.com, mailto:25oudlupl0@rua.powerdmarc.com; ruf=mailto:25oudlupl0@ruf.powerdmarc.com; pct=90; fo=0:1:d:s;",
"dkim_selector": "selector2",
"dkim_host": "selector2._domainkey.cabi.org",
"dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+ojtg6y8PuWimYlYoCLiC7K1Dyyudu6nLhhahVLZqbPMqlOavnDEGfu5T8IG4IZJq3NbkTkxafy46scf8IkyL0K5tjhZ3Ad3/6pd4KAYaopKuO/AeMYVeGSVCoGl3wdfxvuouRDWtkYzQP6Bt49at89upfLEEaQOZimwFSFnXCwIDAQAB;",
"spf_analysis": {
"valid": true,
"lookups": 1,
"final": "~all",
"message": "Within the estimated limit"
},
"dmarc_analysis": {
"valid": true,
"policy": "quarantine"
},
"bimi": "",
"mta_sts": "v=STSv1; id=20241024123054870009;",
"tls_rpt": "v=TLSRPTv1;rua=mailto:25oudlupl0@tls.powerdmarc.com"
},
"advanced": {
"ptr": "no-ptr.as20860.net",
"propagation": {
"consistent": true,
"results": [
{
"provider": "Google",
"server": "8.8.8.8",
"result": [
"62.128.221.180"
],
"time_ms": 46.97
},
{
"provider": "Cloudflare",
"server": "1.1.1.1",
"result": [
"62.128.221.180"
],
"time_ms": 30.8
},
{
"provider": "Quad9",
"server": "9.9.9.9",
"result": [
"62.128.221.180"
],
"time_ms": 87.64
},
{
"provider": "OpenDNS",
"server": "208.67.222.222",
"result": [
"62.128.221.180"
],
"time_ms": 134.58
},
{
"provider": "AdGuard",
"server": "94.140.14.14",
"result": [
"62.128.221.180"
],
"time_ms": 464.69
}
]
}
},
"ssl": {
"available": true,
"issuer": "GoDaddy.com",
"subject": "*.cabi.org",
"valid_from": "2026-06-11T08:25:39-05:00",
"valid_to": "2026-12-26T07:25:39-06:00",
"days_remaining": 137,
"san": [
"*.cabi.org",
"cabi.org"
],
"protocol": "TLSv1.3",
"cipher": "TLS_AES_256_GCM_SHA384"
},
"http": {
"url": "https://www.cabi.org/",
"status": "HTTP/2 200 ",
"http_version": "3",
"headers": {
"cache-control": "private",
"content-length": "138",
"content-type": "text/html; charset=UTF-8",
"location": "https://www.cabi.org/",
"server": "Microsoft-IIS/10.0",
"x-aspnet-version": "4.0.30319",
"x-powered-by": "ASP.NET",
"date": "Mon, 10 Aug 2026 18:53:51 GMT",
"set-cookie": "__cf_bm=GHkuD2KC6d4yiEJea6OMAyixHb1X6J0hshTS.K6KlSw-1786388031.5988655-1.0.1.1-IEuN9Oz1_UoW6AimdH6FBQIdqOwihrOSlTgaVQ48o4Cj4fLgDFG2B7uUr7J5W0y7._lhGLS.W_o5LFgjY7w4FROKKqVBovYEGgGbYnxQcZ_nlE0AC.Y1NgTJ_DzBM78A; HttpOnly; SameSite=None; Secure; Path=/; Domain=site.cabi.org; Expires=Mon, 10 Aug 2026 19:23:51 GMT",
"cf-ray": "a29134ad7ae379c3-LHR",
"cf-cache-status": "DYNAMIC",
"nel": "{\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}",
"link": "; rel=\"https://api.w.org/\", ; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", ; rel=shortlink",
"vary": "Accept-Encoding",
"ki-cf-cache-status": "BYPASS",
"x-content-type-options": "nosniff",
"x-edge-location-klb": "1",
"ki-cache-type": "None",
"ki-edge": "v=28.4.5;mv=99.9.9",
"ki-origin": "g1p",
"x-kinsta-cache": "HIT",
"report-to": "{\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UY7iIviu1SIVQnGUSyfna%2Bgw%2B22IkamMYqKzYRnv5d6zCFpjyFHpCl4iOsaRMWCgTikMtKipMYoggFH6lhy8Sl%2F5HuB1fcGl6T6g6s7edt4qVIqLzWn7vbotfg5wWoA%3D\"}]}",
"alt-svc": "h3=\":443\"; ma=86400",
"strict-transport-security": "max-age=31536000; includeSubDomains"
},
"security_checks": {
"strict-transport-security": true,
"content-security-policy": false,
"x-content-type-options": true,
"x-frame-options": false,
"referrer-policy": false,
"permissions-policy": false,
"cross-origin-opener-policy": false,
"cross-origin-embedder-policy": false,
"cross-origin-resource-policy": false
},
"server": "Microsoft-IIS/10.0",
"powered_by": "ASP.NET"
},
"webpage": {
"url": "https://www.cabi.org/",
"title": "Home - CABI.org",
"description": "CABI is an international, inter-governmental, not-for-profit organization that improves people’s lives worldwide by providing information and applying scientific expertise to solve problems in agriculture and the environment.",
"success": true,
"error": "",
"status": 200
},
"network": {
"62.128.221.180": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
}
},
"smtp": {
"host": "cabi.esvacloud.com",
"ports": [
{
"port": 25,
"open": false,
"time_ms": 3.6,
"banner": "",
"error": "Connection refused"
},
{
"port": 465,
"open": false,
"time_ms": 96,
"banner": "",
"error": "No connection"
},
{
"port": 587,
"open": false,
"time_ms": 91.7,
"banner": "220 cabi.esvacloud.com ESMTP Postfix",
"error": "No connection"
}
]
},
"visitor": {
"ip": "216.73.217.62",
"reverse": "",
"country": "",
"country_code": "",
"region": "",
"city": "",
"latitude": null,
"longitude": null,
"isp": "",
"organization": "",
"asn": "",
"timezone": "",
"browser": "Other",
"os": "Other",
"language": "",
"user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
"is_bot": true,
"cloudflare": false
},
"analysis_time_ms": 91.4
}