{ "ok": true, "domain": "dartmouth.edu", "generated_at": "2026-08-08T21:21:55-05:00", "cache": { "hit": true, "ttl": 0 }, "score": { "total": 82, "label": "Good", "categories": { "dns": 75, "mail": 90, "security": 81, "network": 50, "availability": 100 }, "category_weights": { "dns": 25, "mail": 20, "security": 25, "network": 10, "availability": 20 }, "items": [ { "category": "dns", "title": "IPv4 (A)", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "1 IPv4 address(es) detected." }, { "category": "dns", "title": "IPv6 (AAAA)", "max_points": 10, "earned_points": 0, "lost_points": 10, "detail": "0 IPv6 address(es) detected." }, { "category": "dns", "title": "Name server redundancy", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "6 NS record(s); 2 or more required." }, { "category": "dns", "title": "SOA record", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Authoritative zone record." }, { "category": "dns", "title": "DNSSEC chain", "max_points": 15, "earned_points": 0, "lost_points": 15, "detail": "Both DS and DNSKEY are required." }, { "category": "dns", "title": "CAA policy", "max_points": 5, "earned_points": 5, "lost_points": 0, "detail": "Certificate authority restriction." }, { "category": "dns", "title": "DNS propagation", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Agreement between public resolvers." }, { "category": "mail", "title": "MX records", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "1 MX record(s)." }, { "category": "mail", "title": "SPF", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "SPF policy published." }, { "category": "mail", "title": "DMARC", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "DMARC policy published." }, { "category": "mail", "title": "DKIM", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "A DKIM selector was verified." }, { "category": "mail", "title": "MTA-STS", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Mail transport policy." }, { "category": "mail", "title": "TLS-RPT", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "TLS reporting policy." }, { "category": "security", "title": "Valid TLS certificate", "max_points": 55, "earned_points": 55, "lost_points": 0, "detail": "138 day(s) remaining." }, { "category": "security", "title": "Certificate lifetime", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Full points require at least 30 days remaining." }, { "category": "security", "title": "HTTP security headers", "max_points": 35, "earned_points": 16, "lost_points": 19, "detail": "4 of 9 evaluated headers detected." }, { "category": "network", "title": "PTR reverse DNS", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "PTR: dartmouth.edu" }, { "category": "network", "title": "IPv4 diversity", "max_points": 35, "earned_points": 20, "lost_points": 15, "detail": "Two or more IPv4 addresses receive full points." }, { "category": "network", "title": "IPv6 connectivity", "max_points": 35, "earned_points": 0, "lost_points": 35, "detail": "AAAA availability." }, { "category": "availability", "title": "DNS resolution", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "At least one address family must resolve." }, { "category": "availability", "title": "HTTP response", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "HTTP/1.1 200 OK" }, { "category": "availability", "title": "HTTPS final URL", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "Final URL uses HTTPS." } ], "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.", "diagnostics": [ { "level": "ok", "title": "IPv4 (A)", "detail": "1 IPv4 address(es) detected.", "category": "dns", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "error", "title": "IPv6 (AAAA)", "detail": "0 IPv6 address(es) detected.", "category": "dns", "max_points": 10, "earned_points": 0, "lost_points": 10 }, { "level": "ok", "title": "Name server redundancy", "detail": "6 NS record(s); 2 or more required.", "category": "dns", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SOA record", "detail": "Authoritative zone record.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "error", "title": "DNSSEC chain", "detail": "Both DS and DNSKEY are required.", "category": "dns", "max_points": 15, "earned_points": 0, "lost_points": 15 }, { "level": "ok", "title": "CAA policy", "detail": "Certificate authority restriction.", "category": "dns", "max_points": 5, "earned_points": 5, "lost_points": 0 }, { "level": "ok", "title": "DNS propagation", "detail": "Agreement between public resolvers.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "MX records", "detail": "1 MX record(s).", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SPF", "detail": "SPF policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DMARC", "detail": "DMARC policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DKIM", "detail": "A DKIM selector was verified.", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "error", "title": "MTA-STS", "detail": "Mail transport policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "TLS-RPT", "detail": "TLS reporting policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "Valid TLS certificate", "detail": "138 day(s) remaining.", "category": "security", "max_points": 55, "earned_points": 55, "lost_points": 0 }, { "level": "ok", "title": "Certificate lifetime", "detail": "Full points require at least 30 days remaining.", "category": "security", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "warning", "title": "HTTP security headers", "detail": "4 of 9 evaluated headers detected.", "category": "security", "max_points": 35, "earned_points": 16, "lost_points": 19 }, { "level": "ok", "title": "PTR reverse DNS", "detail": "PTR: dartmouth.edu", "category": "network", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "warning", "title": "IPv4 diversity", "detail": "Two or more IPv4 addresses receive full points.", "category": "network", "max_points": 35, "earned_points": 20, "lost_points": 15 }, { "level": "error", "title": "IPv6 connectivity", "detail": "AAAA availability.", "category": "network", "max_points": 35, "earned_points": 0, "lost_points": 35 }, { "level": "ok", "title": "DNS resolution", "detail": "At least one address family must resolve.", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTP response", "detail": "HTTP/1.1 200 OK", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTPS final URL", "detail": "Final URL uses HTTPS.", "category": "availability", "max_points": 20, "earned_points": 20, "lost_points": 0 } ] }, "dns": { "records": { "A": [ "129.170.224.138" ], "AAAA": [], "CNAME": [], "MX": [ "5 dartmouth-edu.mail.protection.outlook.com." ], "TXT": [ "\"CEBFB3EBDD3BD834373B0F94E63B4197\"", "\"google-site-verification=bkySuymASSMWSDwJS-imzROnABz01fMYdYkOrsfRQNo\"", "\"amazonses:qibTWZp9Z8XB7Gtv1R4HLgdDjfPqFTY8Xz2g4CxP3DY=\"", "\"airtable-verification=b05674e8a09dd5e6c951dd312e88f950\"", "\"TXT\" \"dartmouth.edu\" \"ecostruxure-it-verification=6d15177b-1edc-460a-99ab-093745c902af\"", "\"r8kFztnc9M0pNIuK8e6W4oNnwPlJ69yd1zxyw66fnYCgdZnHH39dTwkZhDBPicE7NXXsez+cln83J5cxucOv5g==\"", "\"anthropic-domain-verification-t7z5b9=1fjJieecLkFZPdrWfFsxUCeBs\"", "\"v=spf1 ip4:129.170.137.224/28 ip4:158.247.30.34 ip4:143.244.92.221 ip4:206.107.42.254 ip4:209.143.65.64/26 ip4:72.4.236.9 ip4:198.187.196.100 ip4:64.72.147.23 ip4:23.99.180.69 ip4:64.74.237.230/31 ip4:216.147.212.20/30\" \" ip4:52.43.50.148/32 ip4:52.86.188.131/32 ip4:209.143.65.64/26 ip4:168.245.25.116 include:spf2.dartmouth.edu include:spf.protection.outlook.com include:_spf.google.com include:_spf.qualtrics.com ~all\"", "\"atlassian-domain-verification=o62Mi2eR+5iVieiLtkYit+SwOzBX3nCYUa0Dmrho8ssDgmmG27mklW5CxyOfc3/x\"", "\"ZGFydG1vdXRo\"", "\"bw=RY8AsLPKQdaN7c8rjN6ls8fK6rrBABwOZGtym6dLLTvb\"", "\"326DF6C952F67DAACBAE2AE9DA6EABB4\"", "\"jamf-site-verification=pw8L7djvfDkYYLEOcOQtDg\"", "\"duo_sso_verification=1molDJXEuY6lYJxqwmYsRBhbi1YwLKsf3P08ctWCcJcJV7NRzEwF9chzEw9NmgJI\"", "\"have-i-been-pwned-verification=3be50d4794d105ef5933f0a21cb9a79e\"", "\"F0EFB9B000F43283434DE6A984413BFF\"", "\"rqz9jf4yv02sppyr211kbm1btbhz6v7b\"", "\"91315A288CA3E789A4EBB9B411E92EC43289AC36\"", "\"openai-domain-verification=dv-RtsKPAcMrS3Flc99KVWLzqvf\"", "\"facebook-domain-verification=mw3sr9iiez87clr5be0mvqfrfv5pdq\"", "\"137342631-6189184\"", "\"wrike-verification=MjM2MTM0Njo4Mjk3MDEzMGRlYzA0NGY5NzExYTIxNmZkODY3NzEzOTg3MTg1ZjEyZjYxMWY3MWE1MjZmMDBjZGRiMTc5MTcz\"", "\"apple-domain-verification=ySlaII1ZaW4H3sDj\"", "\"atlassian-domain-verification=yxVV9fe5fSJIOzrg/2jvRHYUZqs2H7a30Ix6hYxrYddhWzGtHri6KrAo7AbrBPWh\"", "\"atlassian-domain-verification=FKEPBB7b61BuK3b/O0/7YFIGZVNRC/HIYeXEbm8gA59wkRo3Rbk/7Punjy73rrLH\"", "\"logmein-verification-code=d911c3c1-eeb1-4c38-a55e-da6f189ed059\"", "\"google-site-verification=hKllXvHgM-6kI7rUysmZs8XkZ8WYMAeZfm6u0A-Xkms\"", "\"boIuOYRNm52O4nm+5cmx03iN8/aS/0bhvilx2PXCHm5CPCBhVNRYM7R02oWvwLtM8nNOnKaBETibgGYb3xSTiw==\"", "\"atlassian-sending-domain-verification=5d2b1e4e-53a2-41d8-9614-e1924cdde783\"" ], "NS": [ "a9-66.akam.net.", "a18-64.akam.net.", "a14-67.akam.net.", "a16-64.akam.net.", "a5-65.akam.net.", "a1-119.akam.net." ], "SOA": [ "south-campus-ipam.dartmouth.edu. hostmaster.dartmouth.edu. 202712418 10800 3600 2419200 900" ], "CAA": [ "0 issue \"digicert.com\"", "0 issuewild \"emsign.com\"", "0 issue \"amazon.com\"", "0 issuewild \"amazontrust.com\"", "0 issue \"letsencrypt.org\"", "0 issuewild \"amazonaws.com\"", "0 issuewild \"amazon.com\"", "0 issuemail \"sectigo.com\"", "0 issuewild \"awstrust.com\"", "0 issuewild \"digicert.com\"", "0 issue \"amazonaws.com\"", "0 issuewild \"letsencrypt.org\"", "0 issue \"amazontrust.com\"", "0 issue \"sectigo.com\"", "0 issuemail \"digicert.com\"", "0 issue \"pki.goog\"", "0 issue \"emsign.com\"", "0 issue \"awstrust.com\"", "0 issuewild \"pki.goog\"", "0 issuewild \"sectigo.com\"" ], "DS": [], "DNSKEY": [], "RRSIG": [], "NSEC": [], "NSEC3": [], "SRV": [], "NAPTR": [], "TLSA": [], "SSHFP": [] }, "ipv4": [ "129.170.224.138" ], "ipv6": [] }, "mail": { "spf": "v=spf1 ip4:129.170.137.224/28 ip4:158.247.30.34 ip4:143.244.92.221 ip4:206.107.42.254 ip4:209.143.65.64/26 ip4:72.4.236.9 ip4:198.187.196.100 ip4:64.72.147.23 ip4:23.99.180.69 ip4:64.74.237.230/31 ip4:216.147.212.20/30 ip4:52.43.50.148/32 ip4:52.86.188.131/32 ip4:209.143.65.64/26 ip4:168.245.25.116 include:spf2.dartmouth.edu include:spf.protection.outlook.com include:_spf.google.com include:_spf.qualtrics.com ~all", "dmarc": "v=DMARC1; p=none; rua=mailto:dmarc_agg@vali.email,mailto:dmarc_agg@auth.returnpath.net,mailto:re+aw7niku9g7f@dmarc.postmarkapp.com,mailto:dartmouth@rua.agari.com; ruf=mailto:dmarc_afrf@auth.returnpath.net,mailto:dartmouth@ruf.agari.com; fo=1; ri=3600", "dkim_selector": "selector2", "dkim_host": "selector2._domainkey.dartmouth.edu", "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCclFt1GuHqN2NlkwmwBQdVOVLJZLRlFMWowJhq1JAhx272kjccZEsMBmaj5Ytk/ICAZsJ4d0859qJyUTbATkZUUXaTnQXHqiy7WHjG8hgJsgJ2YPK3GdsCqj0rtECBy6p40R/N/8NTnWl119sTmKghadVAjK6KpYebO2d2Zn6dxQIDAQAB;", "spf_analysis": { "valid": true, "lookups": 4, "final": "~all", "message": "Within the estimated limit" }, "dmarc_analysis": { "valid": true, "policy": "none" }, "bimi": "", "mta_sts": "", "tls_rpt": "" }, "advanced": { "ptr": "dartmouth.edu", "propagation": { "consistent": true, "results": [ { "provider": "Google", "server": "8.8.8.8", "result": [ "129.170.224.138" ], "time_ms": 42.48 }, { "provider": "Cloudflare", "server": "1.1.1.1", "result": [ "129.170.224.138" ], "time_ms": 53.06 }, { "provider": "Quad9", "server": "9.9.9.9", "result": [ "129.170.224.138" ], "time_ms": 58.19 }, { "provider": "OpenDNS", "server": "208.67.222.222", "result": [ "129.170.224.138" ], "time_ms": 48.49 }, { "provider": "AdGuard", "server": "94.140.14.14", "result": [ "129.170.224.138" ], "time_ms": 82.82 } ] } }, "ssl": { "available": true, "issuer": "InCommon, LLC", "subject": "*.dartmouth.edu", "valid_from": "2026-06-09T19:00:00-05:00", "valid_to": "2026-12-25T17:59:59-06:00", "days_remaining": 138, "san": [ "*.dartmouth.edu", "dartmouth.edu" ], "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256" }, "http": { "url": "https://home.dartmouth.edu/", "status": "HTTP/1.1 200 OK", "http_version": "2", "headers": { "content-length": "0", "location": "https://home.dartmouth.edu/", "cache-control": "max-age=900, public", "date": "Sun, 09 Aug 2026 02:21:46 GMT", "server": "cloudflare", "content-type": "text/html; charset=UTF-8", "connection": "keep-alive", "cf-ray": "a2834a0e8a36f316-STL", "x-drupal-dynamic-cache": "UNCACHEABLE (poor cacheability)", "content-language": "en", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "expires": "Sun, 19 Nov 1978 05:00:00 GMT", "vary": "Cookie,Accept-Encoding", "x-generator": "Drupal 10 (https://www.drupal.org)", "content-security-policy": "connect-src 'self' *.googleapis.com *.google.com *.gstatic.com *.vimeo.com/api/ vimeo.com/api/ *.bc0a.com/ *.google-analytics.com/ *.zoomph.com youtube.com stats.g.doubleclick.net marvel-b1-cdn.bc0a.com home.dartmouth.edu cse.google.com *.withgoogle.com *.googleadservices.com *.hubspot.com api.hubapi.com data: bam.nr-data.net *.linkedin.com snap.licdn.com *.getrave.com https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' fonts.gstatic.com *.googleusercontent.com; frame-src 'self' *.google.com player.vimeo.com/video/ *.dartmouth.edu/ *.amazonaws.com *.zoomph.com *.youtube.com youtube.com twitter.com *.spotify.com *.soundcloud.com soundcloud.com pollev-embeds.com mosaically.com lottiefiles.com giphy.com *.bc0a.com marvel-b1-cdn.bc0a.com home.dartmouth.edu *.withgoogle.com *.googleadservices.com www.vimeo.com *.twitter.com orders-bb.us-east-1.widencdn.net *.widencdn.net *.myintuitionapp.org dartmouth.maps.arcgis.com utility.arcgisonline.com dartmouth.widen.net public.tableau.com; img-src 'self' *.googleapis.com *.gstatic.com *.google.com *.googleusercontent.com *.bc0a.com *.zoomph.com *.youtube.com youtube.com marvel-b1-cdn.bc0a.com *.dartmouth.edu *.withgoogle.com *.googleadservices.com *.google-analytics.com www.vimeo.com *.googletagmanager.com *.global.siteimproveanalytics.io orders-bb.us-east-1.widencdn.net *.widencdn.net data: www.w3.org/2000/svg *.hsforms.com *.hubspot.com www.facebook.com *.linkedin.com snap.licdn.com https://www.google-analytics.com https://www.googletagmanager.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' *.zoomph.com *.dartmouth.edu *.bc0a.com *.googletagmanager.com www.googletagmanager.com *.youtube.com youtube.com *.google-analytics.com stats.g.doubleclick.net marvel-b1-cdn.bc0a.com home.dartmouth.edu cse.google.com *.google.com *.withgoogle.com *.googleadservices.com www.vimeo.com bam.nr-data.net https://cdn.bc0a.com https://cdnjs.cloudflare.com https://player.vimeo.com https://www.youtube.com platform.instagram.com platform.twitter.com; script-src-elem 'self' 'unsafe-inline' *.zoomph.com *.dartmouth.edu *.bc0a.com *.googletagmanager.com www.googletagmanager.com *.youtube.com youtube.com *.google-analytics.com stats.g.doubleclick.net marvel-b1-cdn.bc0a.com home.dartmouth.edu cse.google.com *.google.com *.withgoogle.com *.googleadservices.com www.google.com *.vimeo.com vimeo.com siteimproveanalytics.com *.googleapis.com *.gstatic.com js.hs-scripts.com js.hs-analytics.net js.hs-banner.com *.hubspot.com js.hsadspixel.net js.usemessages.com connect.facebook.net js-agent.newrelic.com bam.nr-data.net *.linkedin.com snap.licdn.com https://cdn.bc0a.com https://cdnjs.cloudflare.com https://player.vimeo.com https://www.youtube.com platform.instagram.com platform.twitter.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.googleusercontent.com *.bc0a.com home.dartmouth.edu *.google.com *.withgoogle.com *.googleadservices.com bam.nr-data.net https://home.dartmouth.edu; style-src-attr 'self' 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self' *.rocketalumnisolutions.com *.bc0a.com home.dartmouth.edu *.google.com *.withgoogle.com *.googleadservices.com orders-bb.us-east-1.widencdn.net *.widencdn.net", "x-drupal-cache": "MISS", "last-modified": "Sun, 09 Aug 2026 02:15:19 GMT", "strict-transport-security": "max-age=31536000", "x-request-id": "v-2afe4ef0-9398-11f1-a9c2-4b88992d7fc9", "x-ah-environment": "prod", "age": "385", "via": "varnish", "x-cache": "HIT", "x-cache-hits": "340", "cf-cache-status": "DYNAMIC" }, "security_checks": { "strict-transport-security": true, "content-security-policy": true, "x-content-type-options": true, "x-frame-options": true, "referrer-policy": false, "permissions-policy": false, "cross-origin-opener-policy": false, "cross-origin-embedder-policy": false, "cross-origin-resource-policy": false }, "server": "cloudflare", "powered_by": "" }, "webpage": { "url": "https://home.dartmouth.edu/", "title": "Dartmouth", "description": "One of the world's greatest academic institutions and a member of the Ivy League, Dartmouth has been educating leaders since 1769. Our undergraduate and graduate programs are distinguished by academic excellence, personal attention from top faculty, opportunities to participate in research, and a close-knit community.", "success": true, "error": "", "status": 206 }, "network": { "129.170.224.138": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" } }, "smtp": { "host": "dartmouth-edu.mail.protection.outlook.com", "ports": [ { "port": 25, "open": false, "time_ms": 24.1, "banner": "", "error": "Network is unreachable" }, { "port": 465, "open": false, "time_ms": 4020.8, "banner": "", "error": "Connection timed out" }, { "port": 587, "open": false, "time_ms": 4020.7, "banner": "", "error": "Connection timed out" } ] }, "visitor": { "ip": "216.73.217.62", "reverse": "", "country": "", "country_code": "", "region": "", "city": "", "latitude": null, "longitude": null, "isp": "", "organization": "", "asn": "", "timezone": "", "browser": "Other", "os": "Other", "language": "", "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "is_bot": true, "cloudflare": false }, "analysis_time_ms": 87.58 }