{
    "ok": true,
    "domain": "coe.int",
    "generated_at": "2026-08-08T18:53:48-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 76,
        "label": "Good",
        "categories": {
            "dns": 90,
            "mail": 90,
            "security": 73,
            "network": 50,
            "availability": 60
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "3 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "2 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "95 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 8,
                "lost_points": 27,
                "detail": "2 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: tavurvur.coe.int"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 0,
                "lost_points": 40,
                "detail": "HTTP/2 403 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "3 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "2 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "95 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "2 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 8,
                "lost_points": 27
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: tavurvur.coe.int",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "HTTP response",
                "detail": "HTTP/2 403 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 0,
                "lost_points": 40
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "193.164.229.51"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "10 neon.coe.int.",
                "10 cuivre.coe.int."
            ],
            "TXT": [
                "\"brevo-code:80b22ac3609c319be8fc8ee1b1b3e9a3\"",
                "\"ZOOM_verify_OvKVCROhdlLIUBbSjHvmmX\"",
                "\"europeanyear2025=44bb35eb13b49e4ab024ae642cdf6346\"",
                "\"ca3-53674554e17d487a80f4decc91a66aef\"",
                "\"miro-verification=c74a41d9d6389e6477cb51e1947a331ba9dfc22e\"",
                "\"adobe-idp-site-verification=a1e134027481990b52e297d67565fe993394f4279160ba0ac3756620e0ff54b2\"",
                "\"ca3-a80a651e3dcd45e697ce3f655200c2ab\"",
                "\"cisco-ci-domain-verification=49aecbb10502dad93bec3f0ff803feae39508bd59cf9fcc45582d1bd2a3faccd\"",
                "\"ca3-c21bd1193360474d941d5b6920c2ce24\"",
                "\"brevo-code:bded15d056dbe2190eace2d1e0e3a2c6\"",
                "\"google-site-verification=_NSR8peqvwCmjug3hAT5l3nfETCo4u7woghRUrNv3Y0\"",
                "\"7722522b-5ad4-4f9a-b47b-bda2a0cd4789\"",
                "\"7uYKdIHW9tLt69yQHSDT9mQqKMH8hedgocFoXal5R5ThpU7qj1ap8jADr1F+dYgYPR8PIDI0lmiaYoMjSxeQtw==\"",
                "\"v=spf1 ip4:193.164.229.13/32 ip4:193.164.229.94/32 ip4:193.164.229.99/32 include:spf.mailjet.com include:_spf-amicale.coe.int include:email.prnewswire.com include:spf.avetica.net include:amazonses.com include:spf.sendinblue.com ~all\""
            ],
            "NS": [
                "cuivre.coe.int.",
                "neon.coe.int.",
                "nickel.coe.int."
            ],
            "SOA": [
                "neon.coe.int. root.coe.int. 3014146022 21600 3600 604800 86400"
            ],
            "CAA": [
                "0 issue \";\"",
                "0 issue \"amazon.com\"",
                "0 issuewild \"digicert.com\"",
                "0 issuewild \"comodoca.com\"",
                "0 issue \"pki.goog\"",
                "0 issue \"letsencrypt.org\"",
                "0 issuewild \"letsencrypt.org\"",
                "0 issue \"digicert.com\"",
                "0 issue \"comodoca.com\"",
                "0 issue \"globalsign.com\"",
                "0 issuewild \"pki.goog\"",
                "0 issuewild \"godaddy.com\""
            ],
            "DS": [
                "10726 8 2 FC2B949F71B7CE1CA978A242AA302D40213AAFBFD1B5A65C58939394 ABC617C0",
                "10726 8 1 D5131BA9F788643DA194888B7E0C3F760E7E6FB6"
            ],
            "DNSKEY": [
                "256 3 8 AwEAAabwOeNI6Teafr/d4cvYMcBSAratP0u+at9p4+e3cMoy/c3g1dUr qCy2o3pk8kXmPZi3LJidJPXXbsiq00Ag9UhBmF6y0TD6xIdTzd0omgMH sEqkAgagIcL5ORppE5nepcZUIiBe8N+elW/E4322McF2wOiJHRFjpiz3 M1DjYVOAx2Cm0D+jxk4Ocn3+iwXelAGkVWSDTgAHJToUQjxnitszyLFh aMIRkezHU9vBp4K2EPuoJgbVc/ivbrp84+aHlzoovbvO1z4axqR6m7oo /arKgdtEtd/4Sfh+m/3BQoFK5Mta8DwAz9IpZVuMSObqe2ZeZNdu1l7W DESzDEudZdU=",
                "257 3 8 AwEAAZ8tyJS0Txkej3N5woVBeR81jN2oamAii6AXpEaStZnVHyViD/8g Ye19lBeWwOa9NjenW4LevV/CcfiJrj/Md/Ky6tstdc1HBjcMlYp2nWK+ HCaFhPbfmSJJUFOulA9eps7XTU8D47sOb+JqJXm7vdVt5+cSK6E0DBmJ vgLS8IgHC16AWbouGxN5F8y3L4LGOdZ4f+sGgpcEBgAv+F6r/HfN1m7b T7B1IlYVTgDERhVRFq5LIB/EhsAVynLjp8DiKMBK5YTC2tQV+0WsI8KQ PCumRs42pQIIsgi3q0R7Jutuf1FFtAQO9KPaBGSU5FXrnx8PqBdXZQXt 3SD94UNt6c8="
            ],
            "RRSIG": [
                "NS 8 2 86400 20260903075324 20260804073419 39936 coe.int. iTox280CwImZrK4GzSQUpfxOgWZ7vL8Db++Szek0c+QHTrNrohFjBy/3 N4a2TuLw4+L7qhmfZ0/w+pd25kxxxQC3B/JxkOdSi9sMEhojDukyaq2r VvKltzhOYH5rsrbzPsBwAR/jZiio0NwrX3vXjHe4d/atFL0FotOrw00S HECx0gNxtY9saoSKe/tCIiNiGageVJX058/kjhLIZ6febthNYI039nBe ZPhmEwDQKxVYBsTeV6Gn/5kcJbwPp8v+uUbDPKQcXuN2zZ+Fd4kCotfy 9fw2BmDWOBwRSk/xBXIfmqRSCSL0+SMJlxcp2SsZg94e7TRVCStysrH8 U3oOiA==",
                "TXT 8 2 86400 20260903180140 20260804174005 39936 coe.int. RkBpreMinXyReVBoFu4sp0RDzbzcqNVFNo8WMIUsc2CBW1Ba6+ueWc+P glDB8x0JdKzXzAeFScSmodweDYjGDctzI8zOOE9rGpOtscOwnLg9Mkj3 dN8sq8HJU79q07xc9qhK7OCDOI2oDitrgr5O2DHc+m4ZnBOYI7WB5Vk/ htdETuUiMf7JcEQCkDMdKvBLEuiAy5ByJfnRg/vNZ9OHxllXl5U0ceOU COwo4iDFHAaOqU79FLMHXJnVA+Kx7lJei3vDq9R90tLB/3BXlgshVM8x ZUpep4iGtTjsOS4Tm60XDEY1NGZXyhumghb5rChCw9LnqpucpzTX3qX2 ddcvbQ==",
                "MX 8 2 86400 20260907224801 20260808222633 39936 coe.int. KoUMoPUHWEmCXKLpQmbPO4dcL8UjZlt2R8J4NxO/l6BIyVNo5Hu97H3/ rD9iuleAvpMmJVbvUB+YO3T4d6idCEXCl7KoNtclKN4qO9wt0+cIa4hR lsTojOOTylazrEeu8Tt0DfkCTxS7KZvYEp54NVcQ7Oa/L4yvEolQmnbs 2syIAMrGA2WX5OOBvEXJhFXi4KS7/v+tjEPg+D/l5DlbFoSNFFYr6wB7 GVp26YHDRTm+9BQ+/dFG5u2zXl4ckXxSLWr0cLgyaPPkcVXDECC0DnnH jcYEs254F/Rqf/eKA6NlbOug+NaRZriYiXNXVykSjvEFwsXjk44urX1w yexfkQ==",
                "DS 13 2 86400 20260819171021 20260729163217 8248 int. 780KB2qi330bf3IX7M2mN0KTAz4bYW1KwqPQtFpn6vprp1IED+1yi6X1 7805lWabvwTOESH5xmtYaRdw+VtAfw==",
                "CAA 8 2 86386 20260829070808 20260730063742 39936 coe.int. SmOU+OPpgJEos+sIzTK2M48iXu+eYmPErAEPkvVkeXkY9jGyz8py6bsY weQa2bdvDW46pb//6hqbz9mvYh3VIJqQ+KHeEugopdzMJkj/oRfeU9Tw 8qw8pWyHnpG0W5PPxNJbjaYoD7jVyOQtO+iVC6jvzhl9Cd2emSEz97aa a+Se+m5KMZLWUw++jl4QzYxUlswoecfDYF4fTx/NC2R3whigW6s4Po/g feFBR1QMO7Gm2CKqdEKd3wueTWSnMoWWOIDPYB+YzFBnmTLtlwfSlPLi HRJlcvGHj9cfXWmOkiVzojv39Nt96jO7eOA173H4GcL5cltvLQVlwZaj sRyG6A=="
            ],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "193.164.229.51"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 ip4:193.164.229.13/32 ip4:193.164.229.94/32 ip4:193.164.229.99/32 include:spf.mailjet.com include:_spf-amicale.coe.int include:email.prnewswire.com include:spf.avetica.net include:amazonses.com include:spf.sendinblue.com ~all",
        "dmarc": "v=DMARC1; p=quarantine; rf=afrf; pct=100; rua=mailto:dmarc@coe.int; ruf=mailto:dmarc.ruf@coe.int; fo=1; adkim=r; aspf=r; ri=86400; sp=none",
        "dkim_selector": "mail",
        "dkim_host": "mail._domainkey.coe.int",
        "dkim": "k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z+FApQ6ra2VsXfbJP3HE6wAO0YTVEJt1TmeczhEd2Jiz/fcabIISgXEdSpTYJhb0ct0VJRxcg4c8c7wIDAQAB",
        "spf_analysis": {
            "valid": true,
            "lookups": 6,
            "final": "~all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "quarantine"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "tavurvur.coe.int",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "193.164.229.51"
                    ],
                    "time_ms": 156.23
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "193.164.229.51"
                    ],
                    "time_ms": 135.23
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "193.164.229.51"
                    ],
                    "time_ms": 167.15
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "193.164.229.51"
                    ],
                    "time_ms": 555.19
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "193.164.229.51"
                    ],
                    "time_ms": 47
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "Gandi",
        "subject": "*.coe.int",
        "valid_from": "2026-04-26T19:00:00-05:00",
        "valid_to": "2026-11-11T17:59:59-06:00",
        "days_remaining": 95,
        "san": [
            "*.coe.int",
            "coe.int"
        ],
        "protocol": "TLSv1.2",
        "cipher": "ECDHE-RSA-AES128-GCM-SHA256"
    },
    "http": {
        "url": "https://www.coe.int/",
        "status": "HTTP/2 403 ",
        "http_version": "3",
        "headers": {
            "server": "cloudflare",
            "date": "Sat, 08 Aug 2026 23:53:40 GMT",
            "content-type": "text/html; charset=UTF-8",
            "content-length": "138",
            "location": "https://www.coe.int/",
            "cache-control": "private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0",
            "expires": "Thu, 01 Jan 1970 00:00:01 GMT",
            "referrer-policy": "same-origin",
            "x-frame-options": "SAMEORIGIN",
            "set-cookie": "__cf_bm=30CQOa32h16Ewq.XQobREYAH9p.eAW37SOa0LJ5Klic-1786233220.8918326-1.0.1.1-bNj6xg5VPc3J426JJhzpOUFrxQte9f8XX52q9xVIvPVcZLAAFBETnjmNvWkOID73Hppz.j6iKUeOfo0vyzYPVuY6tWG6PPYVnnkdaxXH89NX7hQceQHELVOC8lQNsMbg; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.coe.int; Expires=Sun, 09 Aug 2026 00:23:40 GMT",
            "cf-ray": "a282711e9a6ce9ee-STL"
        },
        "security_checks": {
            "strict-transport-security": false,
            "content-security-policy": false,
            "x-content-type-options": false,
            "x-frame-options": true,
            "referrer-policy": true,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "cloudflare",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.coe.int/",
        "title": "Attention Required! | Cloudflare",
        "description": "",
        "success": true,
        "error": "",
        "status": 403
    },
    "network": {
        "193.164.229.51": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "neon.coe.int",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 110.3,
                "banner": "",
                "error": "Connection refused"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 217.4,
                "banner": "",
                "error": "No connection"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4344.1,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 78.85
}