{
    "ok": true,
    "domain": "csudh.edu",
    "generated_at": "2026-08-12T00:17:49-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 82,
        "label": "Good",
        "categories": {
            "dns": 70,
            "mail": 90,
            "security": 84,
            "network": 50,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "2 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 0,
                "lost_points": 15,
                "detail": "Both DS and DNSKEY are required."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "2 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "73 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 19,
                "lost_points": 16,
                "detail": "5 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: ec2-52-42-20-93.us-west-2.compute.amazonaws.com"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/2 200 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "2 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "DNSSEC chain",
                "detail": "Both DS and DNSKEY are required.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 0,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "2 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "73 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "5 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 19,
                "lost_points": 16
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: ec2-52-42-20-93.us-west-2.compute.amazonaws.com",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/2 200 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "52.42.20.93"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "10 mxa-00559701.gslb.pphosted.com.",
                "10 mxb-00559701.gslb.pphosted.com."
            ],
            "TXT": [
                "\"adobe-idp-site-verification=b7e9bf05-9216-4fa2-a36c-7f06b7186056\"",
                "\"ea.csudh.edu,ZvJYYjhMbPBQwabL/r5L/diczowYtvMx6frEg/IUy76fvLB8a3UQMRV54o0YKxpCbnD/OLRDhm6ESSbxLjqZSA==\"",
                "\"e2ma-verification=bt2eb\"",
                "\"v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all\"",
                "\"pardot980732=44b4c0dc080cdc702034b5241386c9215dc2af7cd436ea011b4760c83ddbba28\"",
                "\"EU61V8ZZS2L0GUJL1FB2CPPPE06K0CD3SML3WVJJM\"",
                "\"wrike-verification=MzA5NjcwMzo4ODc4NWJiYTFiZDM4MWZjYjU3Y2Q0N2RkYmExOTIzMzY1MWI5ZjRkOTY5MjZkYjNiNmE5MDZjYmQwNzA4N2Uw\"",
                "\"MS=6661903688AC302A8E7A1F3E3A19B121DC065DF2\"",
                "\"Fx8rPuaZLMuqFKB76lZp6NV4mt88ScNkN1VmX4CMAcnFYYHeHEzJSjAivbHhqDYRpZxJU3NqYkTvrAkVuL9hZw==\"",
                "\"google-site-verification=bTi_ddUsHCNU1tn23wAg1pz0xQF5u_8rGrvecffL6FM\"",
                "\"850AB44661C18F6A48C75D17128DBD4C\"",
                "\"openai-domain-verification=dv-9WH3aapNAflrxrd7f1snvKGw\"",
                "\"smartsheet-site-validation=hw7AuV7KGXVnxELDHJcTNmyzIRrwhICH\"",
                "\"D9CC700125C6D2C32188843214CEB1DC\""
            ],
            "NS": [
                "ns3.csudh.edu.",
                "ns1.csudh.edu."
            ],
            "SOA": [
                "ns1.csudh.edu. please_set_email.absolutely.nowhere. 2022825015 7200 3600 1209600 900"
            ],
            "CAA": [],
            "DS": [],
            "DNSKEY": [],
            "RRSIG": [],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "52.42.20.93"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all",
        "dmarc": "v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;",
        "dkim_selector": "selector1",
        "dkim_host": "selector1._domainkey.csudh.edu",
        "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCKsG/05caMFal3/14Z+I0Id6bfRKYPIpYpL2r9eIMwvpY3f63tDQSvPsTr8G/V6lasz0oOwM9SPKD+yt4l/QIP6dlRvkUh58qRrraDE3tbCkp6ehqg6zhDD+pjXwGGWj166cORAQgf7VS9xb4AoZ3ovEG9LHeGOx+6ozLqfStC3QIDAQAB; n=1024,1449892147,1465703347",
        "spf_analysis": {
            "valid": true,
            "lookups": 1,
            "final": "~all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "reject"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "ec2-52-42-20-93.us-west-2.compute.amazonaws.com",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "52.42.20.93"
                    ],
                    "time_ms": 59.36
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "52.42.20.93"
                    ],
                    "time_ms": 105.52
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "52.42.20.93"
                    ],
                    "time_ms": 50.24
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "52.42.20.93"
                    ],
                    "time_ms": 103.31
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "52.42.20.93"
                    ],
                    "time_ms": 67.84
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "Amazon",
        "subject": "csudh.edu",
        "valid_from": "2026-04-09T19:00:00-05:00",
        "valid_to": "2026-10-24T18:59:59-05:00",
        "days_remaining": 73,
        "san": [
            "csudh.edu"
        ],
        "protocol": "TLSv1.2",
        "cipher": "ECDHE-RSA-AES128-GCM-SHA256"
    },
    "http": {
        "url": "https://www.csudh.edu:443/",
        "status": "HTTP/2 200 ",
        "http_version": "3",
        "headers": {
            "server": "AmazonS3",
            "date": "Wed, 12 Aug 2026 05:17:43 GMT",
            "content-type": "text/html;charset=UTF-8",
            "content-length": "82105",
            "location": "https://www.csudh.edu:443/",
            "x-amz-id-2": "q2CBblUJfuzFMziGgkm3aNPREPAnBYSv01JHI+5s1+l9KTfWa/TcAVTArSrPAgwBt120ANW9HNw=",
            "x-amz-request-id": "99KF8J1APPTXS51X",
            "cache-control": "no-cache, must-revalidate",
            "x-amz-meta-perc-content-checksum": "",
            "last-modified": "Wed, 12 Aug 2026 03:29:08 GMT",
            "x-amz-version-id": "4USALGOQPlxu.pGaFVGBX2Qp3cHyIZn8",
            "etag": "\"fb9fce6218ff1b5ecfc5004059e76f11\"",
            "x-xss-protection": "1; mode=block",
            "x-content-type-options": "nosniff",
            "content-security-policy": "default-src 'self' data: blob: mailto: tel: mediastream: 'unsafe-inline' 'unsafe-eval' *.bing.com bing.com *.percussion.marketing percussion.marketing *.urldefense.com urldefense.com *.salesforce.com salesforce.com *.siteimproveanalytics.io siteimproveanalytics.io *.siteimproveanalytics.com siteimproveanalytics.com *.facebook.com facebook.com *.facebook.net facebook.net *.fbcdn.net fbcdn.net *.libwizard.com libwizard.com *.csudh.edu www5.csudh.edu csudh.edu *.mybluemix.net mybluemix.net *.twittercommunity.com twittercommunity.com *.twimg.com twimg.com *.twitter.com twitter.com *.google.com google.com *.googletagmanager.com googletagmanager.com *.google-analytics.com google-analytics.com *.googlevideo.com googlevideo.com *.googleapis.com googleapis.com *.doubleclick.net doubleclick.net *.gstatic.com gstatic.com *.fontawesome.com fontawesome.com *.jsdelivr.net jsdelivr.net *.livechatinc.com livechatinc.com *.youtube.com youtube.com *.hotjar.com hotjar.com *.office.com office.com *.unibuddy.co unibuddy.co *.walls.io walls.io *.libanswers.com libanswers.com *.sharethis.com sharethis.com *.clarity.ms clarity.ms *.pardot.com pardot.com *.vimeo.com vimeo.com *.cloudflare.com cloudflare.com *.office365.com office365.com *.eventbrite.com eventbrite.com *.arcgis.com arcgis.com *.alcg.is alcg.is *.arcg.is arcg.is *.kenwheeler.github.io kenwheeler.github.io *.lightwidget.com  lightwidget.com *.curator.io curator.io *.b-cdn.net b-cdn.net *.percussion.services percussion.services *.protonmail.com protonmail.com mail.google.com compose.mail.yahoo.com outlook.live.com 357h4a1tedstsbee1xvf35r5-wpengine.netdna-ssl.com netdna-ssl.com *.youtube-nocookie.com youtube-nocookie.com *.acuityscheduling.com acuityscheduling.com *.crwdcntrl.net crwdcntrl.net d3gxy7nm8y4yjr.cloudfront.net cloudfront.net d2it6uarsia2r9.cloudfront.net cloudfront.net d1zuye95808g5g.cloudfront.net cloudfront.net d3n8h0bty3ix5.cloudfront.net cloudfront.net dd54fg6izixkl.cloudfront.net *.cloudfront.net csudh-coe-cred-recom.smapply.io smapply.io *.tockify.com tockify.com csudh-webappservice.yanaimpl.com yanaimpl.com csudh.hosted.panopto.com hosted.panopto.com *.badgr.com badgr.com *.kayofthejungle.com kayofthejungle.com *.livechat-files.com livechat-files.com *.i-train.org i-train.org *.fontawesome.com fontawesome.com *.credly.com credly.com api.badgr.io badgr.io lp.constantcontactpages.com constantcontactpages.com csudh2.my.site.com my.site.com *.livechat.com livechat.com *.openwidget.com openwidget.com app2.ricoh360.com ricoh360.com static.ctctcdn.com ctctcdn.com www.linkedin.com linkedin.com listgrowth.ctctcdn.com ctctcdn.com csudh-genai-prod.yanaimpl.com yanaimpl.com files-cms.s3.us-east-2.amazonaws.com s3.us-east-2.amazonaws.com doublethedonation.com e.issuu.com issuu.com kit.fontawesome.com fontawesome.com *.constantcontactpages.com constantcontactpages.com www.googleadservices.com googleadservices.com www.googletagmanager.com googletagmanager.com googleads.g.doubleclick.net g.doubleclick.net td.doubleclick.net doubleclick.net csudh-genai-prod.yanaimpl.com yanaimpl.com files-cms.s3.us-east-2.amazonaws.com files-cms.s3.us-east-2.amazonaws.com s3.us-east-2.amazonaws.com embedsocial.com *.parchment.com *.e2ma.net *.blackbaudcdn.net *.blackbaud.com *.timeanddate.com *.amazon.com zoom.us *.zoom.us wss://*.zoom.us kuula.co wioa.i-train.org csudh-stg-webappservice.yanaimpl.com *.yanaimpl.com;",
            "strict-transport-security": "max-age=63072000; includeSubdomains; preload",
            "referrer-policy": "same-origin",
            "x-frame-options": "strict-origin-when-cross-origin",
            "x-cache": "Miss from cloudfront",
            "via": "1.1 2f7b5be8899520ed019685dc425dc306.cloudfront.net (CloudFront)",
            "x-amz-cf-pop": "AMS1-P1",
            "x-amz-cf-id": "eGd5JTDtC9yKWRlrxlD8HvLi5OlKumPkQeZZclfl2VGGurVj-Xfi0w=="
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": true,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": true,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "AmazonS3",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.csudh.edu:443/",
        "title": "California State University Dominguez Hills",
        "description": "Academics are the heart of California State University, Dominguez Hills. From face-to-face interactions to learning in the comfort of your own home, we offer a learning community where you can pursue your academic goals towards your future. Our urban university adheres to an environment of academic excellence, community service, and liberal education. We encourage students to learn outside the classroom by taking advantage of the many internship and research opportunities available out there.",
        "success": true,
        "error": "",
        "status": 206
    },
    "network": {
        "52.42.20.93": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "mxa-00559701.gslb.pphosted.com",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 3239.6,
                "banner": "",
                "error": "Connection refused"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 2555,
                "banner": "",
                "error": "Connection refused"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 57.6,
                "banner": "",
                "error": "Connection refused"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.216.212",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 86.61
}