{
"ok": true,
"domain": "dfn.de",
"generated_at": "2026-08-11T06:27:57-05:00",
"cache": {
"hit": true,
"ttl": 0
},
"score": {
"total": 87,
"label": "Good",
"categories": {
"dns": 95,
"mail": 90,
"security": 65,
"network": 85,
"availability": 100
},
"category_weights": {
"dns": 25,
"mail": 20,
"security": 25,
"network": 10,
"availability": 20
},
"items": [
{
"category": "dns",
"title": "IPv4 (A)",
"max_points": 30,
"earned_points": 30,
"lost_points": 0,
"detail": "1 IPv4 address(es) detected."
},
{
"category": "dns",
"title": "IPv6 (AAAA)",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "1 IPv6 address(es) detected."
},
{
"category": "dns",
"title": "Name server redundancy",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "4 NS record(s); 2 or more required."
},
{
"category": "dns",
"title": "SOA record",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Authoritative zone record."
},
{
"category": "dns",
"title": "DNSSEC chain",
"max_points": 15,
"earned_points": 15,
"lost_points": 0,
"detail": "DS and DNSKEY detected."
},
{
"category": "dns",
"title": "CAA policy",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "Certificate authority restriction."
},
{
"category": "dns",
"title": "DNS propagation",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Agreement between public resolvers."
},
{
"category": "mail",
"title": "MX records",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "3 MX record(s)."
},
{
"category": "mail",
"title": "SPF",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "SPF policy published."
},
{
"category": "mail",
"title": "DMARC",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "DMARC policy published."
},
{
"category": "mail",
"title": "DKIM",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "A DKIM selector was verified."
},
{
"category": "mail",
"title": "MTA-STS",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "Mail transport policy."
},
{
"category": "mail",
"title": "TLS-RPT",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "TLS reporting policy."
},
{
"category": "security",
"title": "Valid TLS certificate",
"max_points": 55,
"earned_points": 55,
"lost_points": 0,
"detail": "28 day(s) remaining."
},
{
"category": "security",
"title": "Certificate lifetime",
"max_points": 10,
"earned_points": 6,
"lost_points": 4,
"detail": "Full points require at least 30 days remaining."
},
{
"category": "security",
"title": "HTTP security headers",
"max_points": 35,
"earned_points": 4,
"lost_points": 31,
"detail": "1 of 9 evaluated headers detected."
},
{
"category": "network",
"title": "PTR reverse DNS",
"max_points": 30,
"earned_points": 30,
"lost_points": 0,
"detail": "PTR: www.dfn.de"
},
{
"category": "network",
"title": "IPv4 diversity",
"max_points": 35,
"earned_points": 20,
"lost_points": 15,
"detail": "Two or more IPv4 addresses receive full points."
},
{
"category": "network",
"title": "IPv6 connectivity",
"max_points": 35,
"earned_points": 35,
"lost_points": 0,
"detail": "AAAA availability."
},
{
"category": "availability",
"title": "DNS resolution",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "At least one address family must resolve."
},
{
"category": "availability",
"title": "HTTP response",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "HTTP/2 200 "
},
{
"category": "availability",
"title": "HTTPS final URL",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "Final URL uses HTTPS."
}
],
"methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
"diagnostics": [
{
"level": "ok",
"title": "IPv4 (A)",
"detail": "1 IPv4 address(es) detected.",
"category": "dns",
"max_points": 30,
"earned_points": 30,
"lost_points": 0
},
{
"level": "ok",
"title": "IPv6 (AAAA)",
"detail": "1 IPv6 address(es) detected.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "Name server redundancy",
"detail": "4 NS record(s); 2 or more required.",
"category": "dns",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SOA record",
"detail": "Authoritative zone record.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "DNSSEC chain",
"detail": "DS and DNSKEY detected.",
"category": "dns",
"max_points": 15,
"earned_points": 15,
"lost_points": 0
},
{
"level": "error",
"title": "CAA policy",
"detail": "Certificate authority restriction.",
"category": "dns",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "ok",
"title": "DNS propagation",
"detail": "Agreement between public resolvers.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "MX records",
"detail": "3 MX record(s).",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SPF",
"detail": "SPF policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DMARC",
"detail": "DMARC policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DKIM",
"detail": "A DKIM selector was verified.",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "error",
"title": "MTA-STS",
"detail": "Mail transport policy.",
"category": "mail",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "error",
"title": "TLS-RPT",
"detail": "TLS reporting policy.",
"category": "mail",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "ok",
"title": "Valid TLS certificate",
"detail": "28 day(s) remaining.",
"category": "security",
"max_points": 55,
"earned_points": 55,
"lost_points": 0
},
{
"level": "warning",
"title": "Certificate lifetime",
"detail": "Full points require at least 30 days remaining.",
"category": "security",
"max_points": 10,
"earned_points": 6,
"lost_points": 4
},
{
"level": "warning",
"title": "HTTP security headers",
"detail": "1 of 9 evaluated headers detected.",
"category": "security",
"max_points": 35,
"earned_points": 4,
"lost_points": 31
},
{
"level": "ok",
"title": "PTR reverse DNS",
"detail": "PTR: www.dfn.de",
"category": "network",
"max_points": 30,
"earned_points": 30,
"lost_points": 0
},
{
"level": "warning",
"title": "IPv4 diversity",
"detail": "Two or more IPv4 addresses receive full points.",
"category": "network",
"max_points": 35,
"earned_points": 20,
"lost_points": 15
},
{
"level": "ok",
"title": "IPv6 connectivity",
"detail": "AAAA availability.",
"category": "network",
"max_points": 35,
"earned_points": 35,
"lost_points": 0
},
{
"level": "ok",
"title": "DNS resolution",
"detail": "At least one address family must resolve.",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTP response",
"detail": "HTTP/2 200 ",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTPS final URL",
"detail": "Final URL uses HTTPS.",
"category": "availability",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
}
]
},
"dns": {
"records": {
"A": [
"37.208.106.105"
],
"AAAA": [
"2a00:d0c0:c:2109::11"
],
"CNAME": [],
"MX": [
"10 b1001.mx.srv.dfn.de.",
"10 c1001.mx.srv.dfn.de.",
"10 a1001.mx.srv.dfn.de."
],
"TXT": [
"\"google-site-verification=aNjf9WiXv4G4mjXnYovwIjOS01qfUjBGQbV5xomVJ44\"",
"\"apple-domain-verification=TdQByV6omDQj06SD\"",
"\"google-site-verification=AHsv25T5W2sYiYNmYvU6z8a2G1H_7FM0vJOZf5uOhAE\"",
"\"v=spf1 include:_spf.s1004.mx.srv.dfn.de a:deneb.dfn.de include:_spf.dfn-cert.de include:_spft.telekom.com ~all\""
],
"NS": [
"ns1.dfn.de.",
"ns4.dfn.de.",
"ns3.dfn.de.",
"ns2.dfn.de."
],
"SOA": [
"ns1.dfn.de. hostmaster.dfn.de. 1786443368 28800 7200 3024000 3600"
],
"CAA": [],
"DS": [
"52345 13 2 CB45E805D6DE033CD632640B0E75E01DA9D9DE19FF70B6FCBB233DAB 802D5F16"
],
"DNSKEY": [
"257 3 13 m3JcLlX53CVTANTFIhPcqt5TQoggiO0jecgtrvZrNCUb0Ua7jVCp5D+m c/O2WC+DATwwHjtEAruUS+qxmdy8LA==",
"256 3 13 2qMruUzdhGnYT4JaXoJQ5iIKt4hQ7xj4GDUNblUtOlcVJSYlSzPsKruJ ddmM7AgPRh5g7NwUeN3D7Gb/4q4c9g=="
],
"RRSIG": [
"DNSKEY 13 2 60 20260830040854 20260731035437 52345 dfn.de. f/jPPRB4QTI6h1ntFlSIgP8FmbT5VSynkiLVhPyiCcz/5rIpkqpmZpvt pqIHWfAgLO3jKB9ZlFYY7abARwm4Dg==",
"AAAA 13 2 86400 20260908114137 20260809105515 15867 dfn.de. ykduL7UVyQPXvFJ8TSZ5INnRdGPzdBv1V5bO2UEsFq9KrIVTh3Q9gZFY yaa1XNv/k0KlGeVRu3g+5EvdjSznLg==",
"MX 13 2 86400 20260901090450 20260802082932 15867 dfn.de. Ue+d6bYmiCRWQJ+Ag7pKzxUz2OSCwBcGGLZXQuioUGJ25zg7oQCqOn8n UC01I8VOiBeR/hkCeYO5hFU2+5a0JA==",
"A 13 2 86400 20260908114137 20260809105515 15867 dfn.de. f9GpolnCDHjRNxNVxgknl3kTLlyTDmVG1ME4A6rGKHIgUGL1glzGkgEy JnXa9W8ZfEfijBvdIMzpoKOae2szMw==",
"DS 8 2 86400 20260817120903 20260803103903 32911 de. omfr3rKdEN/rCNZ+lq3FhrpIRjv7u9mhCZ5RyuLhplKyMN1ug5eKesom iob3n3gbBBVUyF1ohwoVgyPMSvFrPZJpXTEgwflWUAby2nBpzWntzjB1 K0mmo6iWrvkvOIoaJBUtTgeZHRULkwJNiQ54Pqca+XOUoXtbDVT6whfa cN4=",
"NS 13 2 86400 20260907150145 20260808141824 15867 dfn.de. 9+UhbHpQjWx4hGsUUyHa0di1BibCZEvemJuAsnFseL/TeyRRIWvXeBlG FjXN6DCzMfVaqGaKvryFLk35diCHog=="
],
"NSEC": [
"_dmarc.dfn.de. A NS SOA MX TXT AAAA NAPTR RRSIG NSEC DNSKEY TYPE65534"
],
"NSEC3": [],
"SRV": [],
"NAPTR": [
"100 10 \"s\" \"x-eduroam:radius.tls\" \"\" _radsec._tcp.eduroam.de."
],
"TLSA": [],
"SSHFP": []
},
"ipv4": [
"37.208.106.105"
],
"ipv6": [
"2a00:d0c0:c:2109::11"
]
},
"mail": {
"spf": "v=spf1 include:_spf.s1004.mx.srv.dfn.de a:deneb.dfn.de include:_spf.dfn-cert.de include:_spft.telekom.com ~all",
"dmarc": "v=DMARC1; p=none",
"dkim_selector": "s1",
"dkim_host": "s1._domainkey.dfn.de",
"dkim": "v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5tjEwjdy5Xynwaub38d3Lk1e87O2W0qNp69swt85//ZjXNckUDm1dMK8/Aj8DIyASgDDOHjUrBzSx7a/EchjqgN0S+JFs+DPy+FQsGuNZReVaaBgB3OjqJ25R1CZwDoKK2cD3f4RNhYLctuboB14AZSLtMx6hJ0w0XhJKZ3kyrwIDAQAB",
"spf_analysis": {
"valid": true,
"lookups": 4,
"final": "~all",
"message": "Within the estimated limit"
},
"dmarc_analysis": {
"valid": true,
"policy": "none"
},
"bimi": "",
"mta_sts": "",
"tls_rpt": ""
},
"advanced": {
"ptr": "www.dfn.de",
"propagation": {
"consistent": true,
"results": [
{
"provider": "Google",
"server": "8.8.8.8",
"result": [
"37.208.106.105"
],
"time_ms": 386.77
},
{
"provider": "Cloudflare",
"server": "1.1.1.1",
"result": [
"37.208.106.105"
],
"time_ms": 272.17
},
{
"provider": "Quad9",
"server": "9.9.9.9",
"result": [
"37.208.106.105"
],
"time_ms": 50.23
},
{
"provider": "OpenDNS",
"server": "208.67.222.222",
"result": [
"37.208.106.105"
],
"time_ms": 647.4
},
{
"provider": "AdGuard",
"server": "94.140.14.14",
"result": [
"37.208.106.105"
],
"time_ms": 237.93
}
]
}
},
"ssl": {
"available": true,
"issuer": "Hellenic Academic and Research Institutions CA",
"subject": "dfn.de",
"valid_from": "2025-09-09T02:24:20-05:00",
"valid_to": "2026-09-09T02:24:20-05:00",
"days_remaining": 28,
"san": [
"dfn.de",
"www.dfn.de"
],
"protocol": "TLSv1.3",
"cipher": "TLS_AES_256_GCM_SHA384"
},
"http": {
"url": "https://www.dfn.de/",
"status": "HTTP/2 200 ",
"http_version": "3",
"headers": {
"x-redirect-by": "WordPress",
"strict-transport-security": "max-age=31536000; includeSubdomains;",
"location": "https://www.dfn.de/",
"content-type": "text/html; charset=UTF-8",
"date": "Tue, 11 Aug 2026 11:27:48 GMT",
"server": "Apache",
"link": "; rel=\"https://api.w.org/\", ; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", ; rel=shortlink"
},
"security_checks": {
"strict-transport-security": true,
"content-security-policy": false,
"x-content-type-options": false,
"x-frame-options": false,
"referrer-policy": false,
"permissions-policy": false,
"cross-origin-opener-policy": false,
"cross-origin-embedder-policy": false,
"cross-origin-resource-policy": false
},
"server": "Apache",
"powered_by": ""
},
"webpage": {
"url": "https://www.dfn.de/",
"title": "Startseite - DFN",
"description": "",
"success": true,
"error": "",
"status": 206
},
"network": {
"37.208.106.105": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
}
},
"smtp": {
"host": "b1001.mx.srv.dfn.de",
"ports": [
{
"port": 25,
"open": false,
"time_ms": 130.1,
"banner": "",
"error": "Network is unreachable"
},
{
"port": 465,
"open": false,
"time_ms": 4020.7,
"banner": "",
"error": "Connection timed out"
},
{
"port": 587,
"open": false,
"time_ms": 4009.9,
"banner": "",
"error": "Connection timed out"
}
]
},
"visitor": {
"ip": "216.73.217.62",
"reverse": "",
"country": "",
"country_code": "",
"region": "",
"city": "",
"latitude": null,
"longitude": null,
"isp": "",
"organization": "",
"asn": "",
"timezone": "",
"browser": "Other",
"os": "Other",
"language": "",
"user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
"is_bot": true,
"cloudflare": false
},
"analysis_time_ms": 80.49
}