{
"ok": true,
"domain": "carnegieendowment.org",
"generated_at": "2026-08-09T02:02:25-05:00",
"cache": {
"hit": true,
"ttl": 0
},
"score": {
"total": 76,
"label": "Good",
"categories": {
"dns": 60,
"mail": 90,
"security": 65,
"network": 65,
"availability": 100
},
"category_weights": {
"dns": 25,
"mail": 20,
"security": 25,
"network": 10,
"availability": 20
},
"items": [
{
"category": "dns",
"title": "IPv4 (A)",
"max_points": 30,
"earned_points": 30,
"lost_points": 0,
"detail": "4 IPv4 address(es) detected."
},
{
"category": "dns",
"title": "IPv6 (AAAA)",
"max_points": 10,
"earned_points": 0,
"lost_points": 10,
"detail": "0 IPv6 address(es) detected."
},
{
"category": "dns",
"title": "Name server redundancy",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "2 NS record(s); 2 or more required."
},
{
"category": "dns",
"title": "SOA record",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Authoritative zone record."
},
{
"category": "dns",
"title": "DNSSEC chain",
"max_points": 15,
"earned_points": 0,
"lost_points": 15,
"detail": "Both DS and DNSKEY are required."
},
{
"category": "dns",
"title": "CAA policy",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "Certificate authority restriction."
},
{
"category": "dns",
"title": "DNS propagation",
"max_points": 10,
"earned_points": 0,
"lost_points": 10,
"detail": "Agreement between public resolvers."
},
{
"category": "mail",
"title": "MX records",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "1 MX record(s)."
},
{
"category": "mail",
"title": "SPF",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "SPF policy published."
},
{
"category": "mail",
"title": "DMARC",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "DMARC policy published."
},
{
"category": "mail",
"title": "DKIM",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "A DKIM selector was verified."
},
{
"category": "mail",
"title": "MTA-STS",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "Mail transport policy."
},
{
"category": "mail",
"title": "TLS-RPT",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "TLS reporting policy."
},
{
"category": "security",
"title": "Valid TLS certificate",
"max_points": 55,
"earned_points": 55,
"lost_points": 0,
"detail": "145 day(s) remaining."
},
{
"category": "security",
"title": "Certificate lifetime",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Full points require at least 30 days remaining."
},
{
"category": "security",
"title": "HTTP security headers",
"max_points": 35,
"earned_points": 0,
"lost_points": 35,
"detail": "0 of 9 evaluated headers detected."
},
{
"category": "network",
"title": "PTR reverse DNS",
"max_points": 30,
"earned_points": 30,
"lost_points": 0,
"detail": "PTR: server-3-166-96-39.mci50.r.cloudfront.net"
},
{
"category": "network",
"title": "IPv4 diversity",
"max_points": 35,
"earned_points": 35,
"lost_points": 0,
"detail": "Two or more IPv4 addresses receive full points."
},
{
"category": "network",
"title": "IPv6 connectivity",
"max_points": 35,
"earned_points": 0,
"lost_points": 35,
"detail": "AAAA availability."
},
{
"category": "availability",
"title": "DNS resolution",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "At least one address family must resolve."
},
{
"category": "availability",
"title": "HTTP response",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "HTTP/2 200 "
},
{
"category": "availability",
"title": "HTTPS final URL",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "Final URL uses HTTPS."
}
],
"methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
"diagnostics": [
{
"level": "ok",
"title": "IPv4 (A)",
"detail": "4 IPv4 address(es) detected.",
"category": "dns",
"max_points": 30,
"earned_points": 30,
"lost_points": 0
},
{
"level": "error",
"title": "IPv6 (AAAA)",
"detail": "0 IPv6 address(es) detected.",
"category": "dns",
"max_points": 10,
"earned_points": 0,
"lost_points": 10
},
{
"level": "ok",
"title": "Name server redundancy",
"detail": "2 NS record(s); 2 or more required.",
"category": "dns",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SOA record",
"detail": "Authoritative zone record.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "error",
"title": "DNSSEC chain",
"detail": "Both DS and DNSKEY are required.",
"category": "dns",
"max_points": 15,
"earned_points": 0,
"lost_points": 15
},
{
"level": "error",
"title": "CAA policy",
"detail": "Certificate authority restriction.",
"category": "dns",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "error",
"title": "DNS propagation",
"detail": "Agreement between public resolvers.",
"category": "dns",
"max_points": 10,
"earned_points": 0,
"lost_points": 10
},
{
"level": "ok",
"title": "MX records",
"detail": "1 MX record(s).",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SPF",
"detail": "SPF policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DMARC",
"detail": "DMARC policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DKIM",
"detail": "A DKIM selector was verified.",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "error",
"title": "MTA-STS",
"detail": "Mail transport policy.",
"category": "mail",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "error",
"title": "TLS-RPT",
"detail": "TLS reporting policy.",
"category": "mail",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "ok",
"title": "Valid TLS certificate",
"detail": "145 day(s) remaining.",
"category": "security",
"max_points": 55,
"earned_points": 55,
"lost_points": 0
},
{
"level": "ok",
"title": "Certificate lifetime",
"detail": "Full points require at least 30 days remaining.",
"category": "security",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "error",
"title": "HTTP security headers",
"detail": "0 of 9 evaluated headers detected.",
"category": "security",
"max_points": 35,
"earned_points": 0,
"lost_points": 35
},
{
"level": "ok",
"title": "PTR reverse DNS",
"detail": "PTR: server-3-166-96-39.mci50.r.cloudfront.net",
"category": "network",
"max_points": 30,
"earned_points": 30,
"lost_points": 0
},
{
"level": "ok",
"title": "IPv4 diversity",
"detail": "Two or more IPv4 addresses receive full points.",
"category": "network",
"max_points": 35,
"earned_points": 35,
"lost_points": 0
},
{
"level": "error",
"title": "IPv6 connectivity",
"detail": "AAAA availability.",
"category": "network",
"max_points": 35,
"earned_points": 0,
"lost_points": 35
},
{
"level": "ok",
"title": "DNS resolution",
"detail": "At least one address family must resolve.",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTP response",
"detail": "HTTP/2 200 ",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTPS final URL",
"detail": "Final URL uses HTTPS.",
"category": "availability",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
}
]
},
"dns": {
"records": {
"A": [
"3.166.96.39",
"3.166.96.9",
"3.166.96.120",
"3.166.96.36"
],
"AAAA": [],
"CNAME": [],
"MX": [
"0 ceip-org.mail.protection.outlook.com."
],
"TXT": [
"\"v=spf1 a:vpn.ceip.org mx include:mktomail.com include:amazonses.com include:spf.protection.outlook.com include:spf.exclaimer.net -all\"",
"\"globalsign-domain-verification=9e951de685c8b2af63529821752dc106\"",
"\"google-site-verification=ReLwjMc51AmeoDJm8Q_J0cApiOukyapbxsbM_XmoxYM\""
],
"NS": [
"ns-1308.awsdns-35.org.",
"ns-782.awsdns-33.net."
],
"SOA": [
"ns-782.awsdns-33.net. awsdns-hostmaster.amazon.com. 2019071655 7200 900 1209600 86400"
],
"CAA": [],
"DS": [],
"DNSKEY": [],
"RRSIG": [],
"NSEC": [],
"NSEC3": [],
"SRV": [],
"NAPTR": [],
"TLSA": [],
"SSHFP": []
},
"ipv4": [
"3.166.96.39",
"3.166.96.9",
"3.166.96.120",
"3.166.96.36"
],
"ipv6": []
},
"mail": {
"spf": "v=spf1 a:vpn.ceip.org mx include:mktomail.com include:amazonses.com include:spf.protection.outlook.com include:spf.exclaimer.net -all",
"dmarc": "v=DMARC1;p=reject;ruf=mailto:carnegieendowmentforinternationalpeace@us.cp-dmarc.com;rua=mailto:ceipdmarc@ceip.org,mailto:carnegieendowmentforinternationalpeace@us.cp-dmarc.com;",
"dkim_selector": "selector1",
"dkim_host": "selector1._domainkey.carnegieendowment.org",
"dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCXIgD0zMiKYHSpsyiW4u/Xi/k0iu+EKUMzjSBRE8PE79y8BMvj022sFFGltq4D2BELOJv57PhS2d0/tbdDMNDGGXjb9nQi2CqJ8qcqVnxK9EY4IcvOxmboWGCnzWDZ+oA/e/JNnSkKgmiM2J60M4jEYwX3jGQ8+kXhOmp4J5BKXwIDAQAB;",
"spf_analysis": {
"valid": true,
"lookups": 6,
"final": "-all",
"message": "Within the estimated limit"
},
"dmarc_analysis": {
"valid": true,
"policy": "reject"
},
"bimi": "",
"mta_sts": "",
"tls_rpt": ""
},
"advanced": {
"ptr": "server-3-166-96-39.mci50.r.cloudfront.net",
"propagation": {
"consistent": false,
"results": [
{
"provider": "Google",
"server": "8.8.8.8",
"result": [
"13.32.205.32",
"13.32.205.36",
"13.32.205.44",
"13.32.205.77"
],
"time_ms": 89.42
},
{
"provider": "Cloudflare",
"server": "1.1.1.1",
"result": [
"13.32.205.32",
"13.32.205.36",
"13.32.205.44",
"13.32.205.77"
],
"time_ms": 46.2
},
{
"provider": "Quad9",
"server": "9.9.9.9",
"result": [
"13.33.67.122",
"13.33.67.3",
"13.33.67.55",
"13.33.67.7"
],
"time_ms": 55.24
},
{
"provider": "OpenDNS",
"server": "208.67.222.222",
"result": [
"13.32.205.32",
"13.32.205.36",
"13.32.205.44",
"13.32.205.77"
],
"time_ms": 134.01
},
{
"provider": "AdGuard",
"server": "94.140.14.14",
"result": [
"3.166.96.120",
"3.166.96.36",
"3.166.96.39",
"3.166.96.9"
],
"time_ms": 250.7
}
]
}
},
"ssl": {
"available": true,
"issuer": "Amazon",
"subject": "carnegieendowment.org",
"valid_from": "2025-12-02T18:00:00-06:00",
"valid_to": "2027-01-01T17:59:59-06:00",
"days_remaining": 145,
"san": [
"carnegieendowment.org",
"*.carnegiemoscow.org",
"*.grandtamasha.com",
"burnsbackchannel.com",
"grandtamasha.com",
"*.worldunpacked.org",
"production.carnegie.fusionary.io",
"*.globalprotesttracker.org",
"carnegieindia.org",
"*.worldunpacked.net",
"carnegie-mec.org",
"worldunpacked.com",
"*.carnegie-mec.org",
"carnegiechina.org",
"globalprotesttracker.org",
"*.carnegieindia.org",
"*.carnegiechina.org",
"*.carnegieeurope.eu",
"*.worldunpacked.com",
"ceip.org",
"*.carnegierussia.org",
"carnegiemoscow.org",
"*.ceip.org",
"*.production.carnegie.fusionary.io",
"*.carnegieendowment.org",
"carnegierussia.org",
"worldunpacked.org",
"carnegieeurope.eu",
"*.burnsbackchannel.com",
"worldunpacked.net"
],
"protocol": "TLSv1.3",
"cipher": "TLS_AES_128_GCM_SHA256"
},
"http": {
"url": "https://carnegieendowment.org/",
"status": "HTTP/2 200 ",
"http_version": "3",
"headers": {
"content-type": "text/html; charset=utf-8",
"content-length": "307720",
"date": "Sat, 08 Aug 2026 03:29:26 GMT",
"server": "envoy",
"accept-ch": "Sec-CH-Prefers-Color-Scheme",
"critical-ch": "Sec-CH-Prefers-Color-Scheme",
"link": "; rel=\"alternate\"; hreflang=\"en\", ; rel=\"alternate\"; hreflang=\"es\", ; rel=\"alternate\"; hreflang=\"ar\", ; rel=\"alternate\"; hreflang=\"ru\", ; rel=\"alternate\"; hreflang=\"hi\", ; rel=\"alternate\"; hreflang=\"zh\", ; rel=\"alternate\"; hreflang=\"fr\", ; rel=\"alternate\"; hreflang=\"th\", ; rel=\"alternate\"; hreflang=\"uk\", ; rel=\"alternate\"; hreflang=\"de\", ; rel=\"alternate\"; hreflang=\"x-default\"",
"x-middleware-rewrite": "/en",
"x-nextjs-cache": "HIT",
"x-nextjs-prerender": "1",
"x-nextjs-stale-time": "300",
"cache-control": "s-maxage=300, stale-while-revalidate=31535700",
"etag": "\"96htn7lk786lcf\"",
"x-envoy-upstream-service-time": "22",
"vary": "rsc,next-router-state-tree,next-router-prefetch,Accept-Encoding",
"x-cache": "Hit from cloudfront",
"via": "1.1 0e1d72855f208c44a97e05fedbdd0768.cloudfront.net (CloudFront)",
"x-amz-cf-pop": "MCI50-P3",
"x-amz-cf-id": "nW-my4lXtSEMG3nR0tRmp6IDfSJocp_uyjLiEQW9ATzujsTRxMKxqQ==",
"age": "99171"
},
"security_checks": {
"strict-transport-security": false,
"content-security-policy": false,
"x-content-type-options": false,
"x-frame-options": false,
"referrer-policy": false,
"permissions-policy": false,
"cross-origin-opener-policy": false,
"cross-origin-embedder-policy": false,
"cross-origin-resource-policy": false
},
"server": "envoy",
"powered_by": ""
},
"webpage": {
"url": "https://carnegieendowment.org/",
"title": "Carnegie Endowment for International Peace | Carnegie Endowment for International Peace",
"description": "The Carnegie Endowment for International Peace generates strategic ideas and independent analysis, supports diplomacy, and trains the next generation of scholar-practitioners to help countries and institutions take on the most difficult global problems and advance peace.",
"success": true,
"error": "",
"status": 200
},
"network": {
"3.166.96.39": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
},
"3.166.96.9": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
},
"3.166.96.120": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
},
"3.166.96.36": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
}
},
"smtp": {
"host": "ceip-org.mail.protection.outlook.com",
"ports": [
{
"port": 25,
"open": false,
"time_ms": 20.9,
"banner": "",
"error": "Network is unreachable"
},
{
"port": 465,
"open": false,
"time_ms": 4020.8,
"banner": "",
"error": "Connection timed out"
},
{
"port": 587,
"open": false,
"time_ms": 4056.6,
"banner": "",
"error": "Connection timed out"
}
]
},
"visitor": {
"ip": "216.73.217.62",
"reverse": "",
"country": "",
"country_code": "",
"region": "",
"city": "",
"latitude": null,
"longitude": null,
"isp": "",
"organization": "",
"asn": "",
"timezone": "",
"browser": "Other",
"os": "Other",
"language": "",
"user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
"is_bot": true,
"cloudflare": false
},
"analysis_time_ms": 107.32
}