{
    "ok": true,
    "domain": "datatilsynet.no",
    "generated_at": "2026-08-11T02:28:24-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 92,
        "label": "Excellent",
        "categories": {
            "dns": 95,
            "mail": 90,
            "security": 84,
            "network": 85,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "1 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "3 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "1 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "51 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 19,
                "lost_points": 16,
                "detail": "5 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: static147.banetele-cust.com"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/1.1 200 OK"
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "IPv6 (AAAA)",
                "detail": "1 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "3 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "1 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "51 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "5 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 19,
                "lost_points": 16
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: static147.banetele-cust.com",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "ok",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/1.1 200 OK",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "213.52.17.147"
            ],
            "AAAA": [
                "2001:8c1:9700:102::7910"
            ],
            "CNAME": [],
            "MX": [
                "100 mx.datatilsynet.no."
            ],
            "TXT": [
                "\"apple-domain-verification=6zQ69xgKMhRl1KPG\"",
                "\"apple-domain-verification=YvUudg3EQtChSt5S\"",
                "\"ZOOM_verify_fxGVW72ZRRKBZc2WXPCJBg\"",
                "\"_clzip3ydzr4e7db546hp3jvppe7g79s\"",
                "\"l99dypq7wkxx3v8lddc1dgwss5w7ch8w\"",
                "\"_3fgn2ikdfs34t8y7f68lw2iqzsmkncz\"",
                "\"apple-domain-verification=rtppP3RWiqGQjjv3\"",
                "\"v=spf1 a:is-co-smtp02.isky.no a:mx.datatilsynet.no ip4:87.238.50.37 ip4:93.190.81.100 ip4:93.190.81.105 ip4:93.190.81.106 ip4:213.52.17.148 ip4:213.52.17.147 include:_spf.sndr.no include:spf.flowmailer.net -all\"",
                "\"MS=71E6DBC55655BAFB56F06F511B045AAA02F44803\"",
                "\"have-i-been-pwned-verification=2501185e8e9c30d30239e7c1bf472542\""
            ],
            "NS": [
                "ns2.hyp.net.",
                "ns1.hyp.net.",
                "ns3.hyp.net."
            ],
            "SOA": [
                "ns1.hyp.net. hostmaster.domeneshop.no. 1784814845 14400 3600 1209600 3600"
            ],
            "CAA": [],
            "DS": [
                "51847 15 4 85454019B3BD625DEA4AB00649443110196CE52F92C2A9002E5B9109 C014FAD57D8A48B059D5E6983283228F91235B92",
                "51847 15 2 68E949B5FA076299F0FFCC8B78FE7DAB711186D5F8556D520BE58EE4 41274402"
            ],
            "DNSKEY": [
                "256 3 15 MWoabWvtiagxpRqg9MC5ZqIb5WX1z1aaIUhzbV3Zf2k=",
                "257 3 15 L8NzIbW6KUA4yQqWXeV5ksplDYDRPzG80l3in0RpVXg=",
                "256 3 15 6rlg1djMNk8Z4Z5Umgm/tyx0FfwIXUuoXdXpHAw9wc4="
            ],
            "RRSIG": [
                "DNSKEY 15 2 3600 20260822125406 20260723125406 7205 datatilsynet.no. HiW9zyFDK5u6Gs1OLpD58Gs6/zpUGyc5enJ8FGk8zU5wGWaE4baK0bYL Dj3QEb992SNlHvV2Ab8slGSK0zsiDA==",
                "DNSKEY 15 2 3600 20260822125406 20260723125406 34253 datatilsynet.no. TTVpCPau/FSHT1mC7Is7CjK61jdMjw3StN3izoTTsEBgLtZt7jWnChJG KNvtZKyJfjCQGn6Vmew1PySKl/s3AQ==",
                "DNSKEY 15 2 3600 20260822125406 20260723125406 51847 datatilsynet.no. pTjMpSorEPmLAZJ/6m3pO49p8Aim8JJtLkwYUV07pQ9f70inNmAKtmyc 4i/uK1WZjvYKJT9oj9BbPl56+jn1Bg==",
                "SOA 15 2 3600 20260822125406 20260723125406 7205 datatilsynet.no. elmfCkyLUMBf6tWFt6MqO5L4uY+HmAchGby5NYHvF+40idviy6ieSDfJ Q3AeFUfCzgon9oyQySIJCmcUh50RBw==",
                "SOA 15 2 3600 20260822125406 20260723125406 34253 datatilsynet.no. mjYcY1AlRbhWZ9zvaMG4nwB8sldLLZukZnbwq0IPqa1D8R4MSTrPJ2FY J9vT4veMtqDxWKUe+2AKtLs7REtJAQ==",
                "MX 15 2 3600 20260822125406 20260723125406 7205 datatilsynet.no. DfWQKmzIQbwYMIbGDI8Jkrq9mGnnJXhkiTK4AW3rGp0hRLB9XLR6plCY n7qIIIv7diL/iL8esOINvDWVK8TqCg==",
                "MX 15 2 3600 20260822125406 20260723125406 34253 datatilsynet.no. nVrIvGG94dGyj5+l7ep1XwlmoEeZ1YSAhYUEDC7w9E6G2gKkpZKIQ2uG aCmAxuJ04+059duGG350g9xwy86fDA==",
                "DS 13 2 7200 20260821132608 20260807210409 40784 no. KJMPgAlVuN5WC7RbRTzUlxABEl0JWKdwWUI0dn7NnnDApfwsTAvpuv0U FSw1pbujHArQKlzIlxBzwsO0UB/giQ=="
            ],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "213.52.17.147"
        ],
        "ipv6": [
            "2001:8c1:9700:102::7910"
        ]
    },
    "mail": {
        "spf": "v=spf1 a:is-co-smtp02.isky.no a:mx.datatilsynet.no ip4:87.238.50.37 ip4:93.190.81.100 ip4:93.190.81.105 ip4:93.190.81.106 ip4:213.52.17.148 ip4:213.52.17.147 include:_spf.sndr.no include:spf.flowmailer.net -all",
        "dmarc": "v=DMARC1; p=quarantine; pct=100; rua=mailto:dtdmark@Datatilsynet.no",
        "dkim_selector": "s1",
        "dkim_host": "s1._domainkey.datatilsynet.no",
        "dkim": "k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25P6jjzBXXz7MhL/Kdm3RgLFp8gHWCA3LwA1cm+FKM5c3Fmgf6sKReheG8OO30cfF7eBULgov9MV6l0GTAFKr8yaV9sHGVD0KGJ3K976mpfdZnrYckAqUlGn8jhQXC0Rqs+IW5fRk1hIPhXVdEpkYvs9W57+BzlRp73nxRT5Ro1XJ/xDFBNrZNsk1woW/6aCZWO3ekH9QKvbWef5pzjRPCBq9yPAdjygUMjvuzXsgdeFOERscnCr51pm45qos127+4eudPkxzxojOyljzyq+FO0zIFVX46McPUENOyEgBaGuGxXQwuRylxjCisGrgI7iEY7/B6IDbeRXOX1O7UlpsQIDAQAB",
        "spf_analysis": {
            "valid": true,
            "lookups": 4,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "quarantine"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "static147.banetele-cust.com",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "213.52.17.147"
                    ],
                    "time_ms": 34.68
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "213.52.17.147"
                    ],
                    "time_ms": 159.39
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "213.52.17.147"
                    ],
                    "time_ms": 152.5
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "213.52.17.147"
                    ],
                    "time_ms": 32.35
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "213.52.17.147"
                    ],
                    "time_ms": 287.26
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "DigiCert Inc",
        "subject": "www.datatilsynet.no",
        "valid_from": "2026-03-16T19:00:00-05:00",
        "valid_to": "2026-10-01T18:59:59-05:00",
        "days_remaining": 51,
        "san": [
            "www.datatilsynet.no",
            "datatilsynet.no"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_CHACHA20_POLY1305_SHA256"
    },
    "http": {
        "url": "https://www.datatilsynet.no/",
        "status": "HTTP/1.1 200 OK",
        "http_version": "2",
        "headers": {
            "transfer-encoding": "chunked",
            "location": "https://www.datatilsynet.no/",
            "server": "Microsoft-IIS/10.0",
            "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
            "date": "Tue, 11 Aug 2026 07:28:16 GMT",
            "content-type": "text/html; charset=utf-8",
            "referrer-policy": "no-referrer-when-downgrade",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "content-security-policy": "default-src 'self' https://portals.qbrick.com https://data.brreg.no https://www.personvernbloggen.no https://dl.episerver.net https://www.youtube.com https://www.dreambroker.com https://dreambroker.com https://play2.qbrick.com data:; script-src 'unsafe-inline' 'unsafe-eval' https:;  style-src 'unsafe-inline' https:;  img-src http://chart.googleapis.com https: data:; font-src 'self' data:;"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": true,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": true,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "Microsoft-IIS/10.0",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.datatilsynet.no/",
        "title": "Datatilsynet - personvern og informasjonssikkerhet | Datatilsynet",
        "description": "Datatilsynet er både tilsyn og ombud. Vår oppgave er å føre kontroll med at personvernregelverket etterleves, og medvirke til at enkeltpersoner ikke blir krenket gjennom bruk av opplysninger som kan knyttes til dem. På nettsidene våre finner du informasjon om folks rettigheter og virksomhetenes plikter etter dette regelverket.",
        "success": true,
        "error": "",
        "status": 200
    },
    "network": {
        "213.52.17.147": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "mx.datatilsynet.no",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 9.6,
                "banner": "",
                "error": "Connection refused"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 128.4,
                "banner": "",
                "error": "No connection"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4021.1,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 82.8
}