{ "ok": true, "domain": "camh.ca", "generated_at": "2026-08-10T11:56:35-05:00", "cache": { "hit": true, "ttl": 0 }, "score": { "total": 89, "label": "Good", "categories": { "dns": 70, "mail": 100, "security": 84, "network": 100, "availability": 100 }, "category_weights": { "dns": 25, "mail": 20, "security": 25, "network": 10, "availability": 20 }, "items": [ { "category": "dns", "title": "IPv4 (A)", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "2 IPv4 address(es) detected." }, { "category": "dns", "title": "IPv6 (AAAA)", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "2 IPv6 address(es) detected." }, { "category": "dns", "title": "Name server redundancy", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "2 NS record(s); 2 or more required." }, { "category": "dns", "title": "SOA record", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Authoritative zone record." }, { "category": "dns", "title": "DNSSEC chain", "max_points": 15, "earned_points": 0, "lost_points": 15, "detail": "Both DS and DNSKEY are required." }, { "category": "dns", "title": "CAA policy", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Certificate authority restriction." }, { "category": "dns", "title": "DNS propagation", "max_points": 10, "earned_points": 0, "lost_points": 10, "detail": "Agreement between public resolvers." }, { "category": "mail", "title": "MX records", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "2 MX record(s)." }, { "category": "mail", "title": "SPF", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "SPF policy published." }, { "category": "mail", "title": "DMARC", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "DMARC policy published." }, { "category": "mail", "title": "DKIM", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "A DKIM selector was verified." }, { "category": "mail", "title": "MTA-STS", "max_points": 5, "earned_points": 5, "lost_points": 0, "detail": "Mail transport policy." }, { "category": "mail", "title": "TLS-RPT", "max_points": 5, "earned_points": 5, "lost_points": 0, "detail": "TLS reporting policy." }, { "category": "security", "title": "Valid TLS certificate", "max_points": 55, "earned_points": 55, "lost_points": 0, "detail": "177 day(s) remaining." }, { "category": "security", "title": "Certificate lifetime", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Full points require at least 30 days remaining." }, { "category": "security", "title": "HTTP security headers", "max_points": 35, "earned_points": 19, "lost_points": 16, "detail": "5 of 9 evaluated headers detected." }, { "category": "network", "title": "PTR reverse DNS", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "PTR: a23-205-89-188.deploy.static.akamaitechnologies.com" }, { "category": "network", "title": "IPv4 diversity", "max_points": 35, "earned_points": 35, "lost_points": 0, "detail": "Two or more IPv4 addresses receive full points." }, { "category": "network", "title": "IPv6 connectivity", "max_points": 35, "earned_points": 35, "lost_points": 0, "detail": "AAAA availability." }, { "category": "availability", "title": "DNS resolution", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "At least one address family must resolve." }, { "category": "availability", "title": "HTTP response", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "HTTP/1.1 200 OK" }, { "category": "availability", "title": "HTTPS final URL", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "Final URL uses HTTPS." } ], "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.", "diagnostics": [ { "level": "ok", "title": "IPv4 (A)", "detail": "2 IPv4 address(es) detected.", "category": "dns", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "ok", "title": "IPv6 (AAAA)", "detail": "2 IPv6 address(es) detected.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "Name server redundancy", "detail": "2 NS record(s); 2 or more required.", "category": "dns", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SOA record", "detail": "Authoritative zone record.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "error", "title": "DNSSEC chain", "detail": "Both DS and DNSKEY are required.", "category": "dns", "max_points": 15, "earned_points": 0, "lost_points": 15 }, { "level": "error", "title": "CAA policy", "detail": "Certificate authority restriction.", "category": "dns", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "DNS propagation", "detail": "Agreement between public resolvers.", "category": "dns", "max_points": 10, "earned_points": 0, "lost_points": 10 }, { "level": "ok", "title": "MX records", "detail": "2 MX record(s).", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SPF", "detail": "SPF policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DMARC", "detail": "DMARC policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DKIM", "detail": "A DKIM selector was verified.", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "MTA-STS", "detail": "Mail transport policy.", "category": "mail", "max_points": 5, "earned_points": 5, "lost_points": 0 }, { "level": "ok", "title": "TLS-RPT", "detail": "TLS reporting policy.", "category": "mail", "max_points": 5, "earned_points": 5, "lost_points": 0 }, { "level": "ok", "title": "Valid TLS certificate", "detail": "177 day(s) remaining.", "category": "security", "max_points": 55, "earned_points": 55, "lost_points": 0 }, { "level": "ok", "title": "Certificate lifetime", "detail": "Full points require at least 30 days remaining.", "category": "security", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "warning", "title": "HTTP security headers", "detail": "5 of 9 evaluated headers detected.", "category": "security", "max_points": 35, "earned_points": 19, "lost_points": 16 }, { "level": "ok", "title": "PTR reverse DNS", "detail": "PTR: a23-205-89-188.deploy.static.akamaitechnologies.com", "category": "network", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "ok", "title": "IPv4 diversity", "detail": "Two or more IPv4 addresses receive full points.", "category": "network", "max_points": 35, "earned_points": 35, "lost_points": 0 }, { "level": "ok", "title": "IPv6 connectivity", "detail": "AAAA availability.", "category": "network", "max_points": 35, "earned_points": 35, "lost_points": 0 }, { "level": "ok", "title": "DNS resolution", "detail": "At least one address family must resolve.", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTP response", "detail": "HTTP/1.1 200 OK", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTPS final URL", "detail": "Final URL uses HTTPS.", "category": "availability", "max_points": 20, "earned_points": 20, "lost_points": 0 } ] }, "dns": { "records": { "A": [ "23.205.89.188", "23.205.89.156" ], "AAAA": [ "2600:1407:7400:14::17d7:be6", "2600:1407:7400:14::17d7:be4" ], "CNAME": [], "MX": [ "10 mxa-0019d202.gslb.pphosted.com.", "10 mxb-0019d202.gslb.pphosted.com." ], "TXT": [ "\"duo_sso_verification=xGsMfklLDWKlyHqau5h7or9xwkJucfvFG5goF5VelBEt4e6ab5MPfxSjBFmuLqcH\"", "\"hvljn6rf9r6bqb7b7l0nssddl7\"", "\"sq5u2a9oj6h7m5lofns1rsdr2t\"", "\"c42mchbon2acme009mqm7m6slm\"", "\"/QYsLl+HcA2P1wqEtC3wLmWizOchIVfy0zqsUYL5womMhQkZs4jM8M/FPEh++QbAwLR0LRM/F+atyfPkfsAgqg==\"", "\"testapril12\"", "\"citrix.mobile.ads.otp=5xi4w9o1bagfitfrj6e87l\"", "\"4cg93fj43o106gvkiqcc95oe7d\"", "\"nv0tf1344n8n4fs25894sel2ie\"", "\"mi0pb8eljfbnk9dfiavupo49cg\"", "\"_ikdsw3ha1q7io6by1ztquz80ojh84y4\"", "\"10qnslloqn71vaq0scjtvu61qb\"", "\"google-site-verification=MnHWaIRQCNEXsti4gYsHdYUHTggmBEbS5qyLML5eNNg\"", "\"smartsheet-site-validation=VAgd2hCao2prTaYFkOYYYXIxZ1t14ULu\"", "\"58hiigf7stfelk4qaujfepdat1\"", "\"740sm3oromcvaupeds9jncl69\"", "\"32pPMinIk12P4NsdDpO8wUfBDQpZu+iYbvcq8en4mKvT9848PWAr5DQ3cxT9L2D5zBLmRBzMEejJz3i+gtSNcg==\"", "\"apple-domain-verification=4sk9CLr1NvepDyJR\"", "\"yahoo-verification-key=GfR0JAKyCwo95BgfaXR80MVqWMLzTHsl2OqopruHyU4=\"", "\"ngser9gee8hu6m39quh2gidqqf\"", "\"adobe-idp-site-verification=67b5d3596425c91e5403aca71612309b1787377eacddf50ca5b488cbae6306d7\"", "\"google-site-verification=jDUjvNp1Sd9b9ue9WM8he07zpZsYfZABb2bN0KLI5ag\"", "\"google-site-verification=hzMST0D8GM2OuJ_h4-68cmG0ZrqnLTLWWatTJ8GAWO4\"", "\"99ra4ilmsfcjt20m0hneqg521f\"", "\"jqrh0q6ke1gjhc4mi37hg3el9a\"", "\"facebook-domain-verification=azfu1u74fky1y5sfeuuee5dmlv2i24\"", "\"5c6otbpgo5md318s0jpp8u3ep9\"", "\"google-site-verification=j4eetKCZKv0JHs2354cJbT4od6Pj_oWqhmq_owmPc3Q\"", "\"test2954am145pm\"", "\"oct1\"", "\"openai-domain-verification=dv-Vivd0h7sLGR3mcrgsZtWGYbJ\"", "\"bkkehu6jps518p6nc197kio1r6\"", "\"google-site-verification=c3WcmlplTIIbI1v4juMBy3y5LFWerNA1NA1FaciseLk\"", "\"_5blnxfiy9z9qx9205iu3gh2pe3i4104\"", "\"3h8ahbuf33aoclc2335tbbrptf\"", "\"_f8dzwj58cane4g7uy45376nkejzgj46\"", "\"v=spf1 include:_u.camh.ca._spf.dmarclf.com -all\"", "\"v=DMARC1; p=none; rua=mailto:itsecurity@camh.ca; ruf=mailto:itsecurity@camh.ca; fo=0; aspf=r\"", "\"google-site-verification=fJPZhl1hF8aproDt0pYI1zRntxyDsaWf_EDyTHN7IVg\"", "\"opoctesttextapril11\"", "\"cisco-ci-domain-verification=fd991e998898b328c18054807a1f003e74f99fbfc97ebad2aec18bdb1308bce\"", "\"fpa9haki9vq13j6kj4no6f6l67\"", "\"auqjg6j68g2u2np9kqj1h0eu92\"", "\"rdct4m30114qnng0n34tp9ra93\"", "\"ihsjevva4n1kjomdi37d81kc4v\"", "\"MS=ms61891145\"", "\"miro-verification=0a177f0916586b927f313173e1b8141bfa1334d2\"", "\"92hr4hfqrkhse450jujiuafh8o\"", "\"v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NsjZunlEZ4v4HbhA9/RYQX/3ZsMmPEs4hT63tj7Jp90dAmjjeX8163JJqs+BZjybwfIRVJkM73ne2XqMF5LCyDom9KR\"", "\"eHxWdWaPL2WdYTUNqoQKvc5AlWPQjXBZY1+6V454LRaz7ZhRcVXqnWM3pH1AEKdfTcObDVmh25QWGj8zp+JFMg==\"" ], "NS": [ "ns2.d-zone.ca.", "ns1.d-zone.ca." ], "SOA": [ "dzn-zm-01.corp.cira.ca. domain\\.admin.camh.ca. 2010032435 3600 900 1209600 3600" ], "CAA": [], "DS": [], "DNSKEY": [], "RRSIG": [], "NSEC": [], "NSEC3": [], "SRV": [], "NAPTR": [], "TLSA": [], "SSHFP": [] }, "ipv4": [ "23.205.89.188", "23.205.89.156" ], "ipv6": [ "2600:1407:7400:14::17d7:be6", "2600:1407:7400:14::17d7:be4" ] }, "mail": { "spf": "v=spf1 include:_u.camh.ca._spf.dmarclf.com -all", "dmarc": "v=DMARC1; p=quarantine; fo=0:1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:648761e59849c@ag.dmarcly.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com,mailto:648761e59849c@fo.dmarcly.com", "dkim_selector": "email", "dkim_host": "email._domainkey.camh.ca", "dkim": "v=DKIM1; k=rsa; s=email; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDWL8g2cHpWo9xFY/kY/ZFc+tXpo2zlqb5oBDRVCh1XMVtmZqbAuhtGsB4V393bz1IBR74wvQsJhe6MmRCE+ZzNhFtitzgUZ+61wBJ/WirYLv+Ne7sxgnIw9rPwQrhJlrKFkrpRk3CvJ4Vc+1swnQBqb6ZhBrEvCn/9rp9u0idaFwIDAQAB", "spf_analysis": { "valid": true, "lookups": 1, "final": "-all", "message": "Within the estimated limit" }, "dmarc_analysis": { "valid": true, "policy": "quarantine" }, "bimi": "", "mta_sts": "v=STSv1; id=1725046894208", "tls_rpt": "v=TLSRPTv1; rua=mailto:648761e59849c@tls.dmarcly.com" }, "advanced": { "ptr": "a23-205-89-188.deploy.static.akamaitechnologies.com", "propagation": { "consistent": false, "results": [ { "provider": "Google", "server": "8.8.8.8", "result": [ "23.205.89.156", "23.205.89.188" ], "time_ms": 55.16 }, { "provider": "Cloudflare", "server": "1.1.1.1", "result": [ "23.215.11.228", "23.215.11.230" ], "time_ms": 55.08 }, { "provider": "Quad9", "server": "9.9.9.9", "result": [ "192.197.205.110" ], "time_ms": 69.6 }, { "provider": "OpenDNS", "server": "208.67.222.222", "result": [ "23.205.89.156", "23.205.89.188" ], "time_ms": 96.73 }, { "provider": "AdGuard", "server": "94.140.14.14", "result": [ "23.34.59.13", "23.34.59.33" ], "time_ms": 157.63 } ] } }, "ssl": { "available": true, "issuer": "DigiCert Inc", "subject": "*.camh.ca", "valid_from": "2026-07-19T19:00:00-05:00", "valid_to": "2027-02-03T17:59:59-06:00", "days_remaining": 177, "san": [ "*.camh.ca", "camh.ca" ], "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384" }, "http": { "url": "https://camh.ca/", "status": "HTTP/1.1 200 OK", "http_version": "2", "headers": { "content-length": "235775", "content-type": "text/html; charset=utf-8", "link": " ; rel=\"canonical\"", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "strict-transport-security": "max-age=31536000", "referrer-policy": "strict-origin-when-cross-origin", "feature-policy": "geolocation 'self'; midi 'self'; notifications 'self'; push 'self'; sync-xhr 'self'; microphone 'self'; camera 'self'; magnetometer 'self'; gyroscope 'self'; speaker 'self'; vibrate 'self'; fullscreen 'self'; payment 'self'", "permissions-policy": "geolocation=(self \"https://example.com\"), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(), vibrate=(), fullscreen=(), payment=()", "accept-ch": "Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness", "expires": "Mon, 10 Aug 2026 16:56:34 GMT", "cache-control": "max-age=0, no-cache, no-store", "pragma": "no-cache", "date": "Mon, 10 Aug 2026 16:56:34 GMT", "connection": "keep-alive", "set-cookie": "__RequestVerificationToken=pNNmX2S37ROuX97mvgsj6GPBMi1DTg8jLz_myEV8PVBIlNgxUZH4iLRFQqIQb9VfPFmThoKfLT2RKGyGUpj7QRnAeoLEYY1yTABalG4PLVo1; path=/; secure; HttpOnly; SameSite=Lax" }, "security_checks": { "strict-transport-security": true, "content-security-policy": false, "x-content-type-options": true, "x-frame-options": true, "referrer-policy": true, "permissions-policy": true, "cross-origin-opener-policy": false, "cross-origin-embedder-policy": false, "cross-origin-resource-policy": false }, "server": "", "powered_by": "" }, "webpage": { "url": "https://camh.ca/", "title": "The Centre for Addiction and Mental Health | CAMH", "description": "Canada's largest mental health teaching hospital and one of the world's leading research centres. Where Mental Health is Health.", "success": true, "error": "", "status": 206 }, "network": { "23.205.89.188": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" }, "23.205.89.156": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" } }, "smtp": { "host": "mxa-0019d202.gslb.pphosted.com", "ports": [ { "port": 25, "open": false, "time_ms": 51.3, "banner": "", "error": "Connection refused" }, { "port": 465, "open": false, "time_ms": 19.6, "banner": "", "error": "Connection refused" }, { "port": 587, "open": false, "time_ms": 42, "banner": "", "error": "Connection refused" } ] }, "visitor": { "ip": "216.73.217.62", "reverse": "", "country": "", "country_code": "", "region": "", "city": "", "latitude": null, "longitude": null, "isp": "", "organization": "", "asn": "", "timezone": "", "browser": "Other", "os": "Other", "language": "", "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "is_bot": true, "cloudflare": false }, "analysis_time_ms": 139.88 }