{ "ok": true, "domain": "dgb.de", "generated_at": "2026-08-10T20:10:36-05:00", "cache": { "hit": true, "ttl": 0 }, "score": { "total": 82, "label": "Good", "categories": { "dns": 70, "mail": 90, "security": 84, "network": 50, "availability": 100 }, "category_weights": { "dns": 25, "mail": 20, "security": 25, "network": 10, "availability": 20 }, "items": [ { "category": "dns", "title": "IPv4 (A)", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "1 IPv4 address(es) detected." }, { "category": "dns", "title": "IPv6 (AAAA)", "max_points": 10, "earned_points": 0, "lost_points": 10, "detail": "0 IPv6 address(es) detected." }, { "category": "dns", "title": "Name server redundancy", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "3 NS record(s); 2 or more required." }, { "category": "dns", "title": "SOA record", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Authoritative zone record." }, { "category": "dns", "title": "DNSSEC chain", "max_points": 15, "earned_points": 0, "lost_points": 15, "detail": "Both DS and DNSKEY are required." }, { "category": "dns", "title": "CAA policy", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Certificate authority restriction." }, { "category": "dns", "title": "DNS propagation", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Agreement between public resolvers." }, { "category": "mail", "title": "MX records", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "1 MX record(s)." }, { "category": "mail", "title": "SPF", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "SPF policy published." }, { "category": "mail", "title": "DMARC", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "DMARC policy published." }, { "category": "mail", "title": "DKIM", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "A DKIM selector was verified." }, { "category": "mail", "title": "MTA-STS", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Mail transport policy." }, { "category": "mail", "title": "TLS-RPT", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "TLS reporting policy." }, { "category": "security", "title": "Valid TLS certificate", "max_points": 55, "earned_points": 55, "lost_points": 0, "detail": "82 day(s) remaining." }, { "category": "security", "title": "Certificate lifetime", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Full points require at least 30 days remaining." }, { "category": "security", "title": "HTTP security headers", "max_points": 35, "earned_points": 19, "lost_points": 16, "detail": "5 of 9 evaluated headers detected." }, { "category": "network", "title": "PTR reverse DNS", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "PTR: static.68.210.75.5.clients.your-server.de" }, { "category": "network", "title": "IPv4 diversity", "max_points": 35, "earned_points": 20, "lost_points": 15, "detail": "Two or more IPv4 addresses receive full points." }, { "category": "network", "title": "IPv6 connectivity", "max_points": 35, "earned_points": 0, "lost_points": 35, "detail": "AAAA availability." }, { "category": "availability", "title": "DNS resolution", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "At least one address family must resolve." }, { "category": "availability", "title": "HTTP response", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "HTTP/2 200 " }, { "category": "availability", "title": "HTTPS final URL", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "Final URL uses HTTPS." } ], "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.", "diagnostics": [ { "level": "ok", "title": "IPv4 (A)", "detail": "1 IPv4 address(es) detected.", "category": "dns", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "error", "title": "IPv6 (AAAA)", "detail": "0 IPv6 address(es) detected.", "category": "dns", "max_points": 10, "earned_points": 0, "lost_points": 10 }, { "level": "ok", "title": "Name server redundancy", "detail": "3 NS record(s); 2 or more required.", "category": "dns", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SOA record", "detail": "Authoritative zone record.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "error", "title": "DNSSEC chain", "detail": "Both DS and DNSKEY are required.", "category": "dns", "max_points": 15, "earned_points": 0, "lost_points": 15 }, { "level": "error", "title": "CAA policy", "detail": "Certificate authority restriction.", "category": "dns", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "DNS propagation", "detail": "Agreement between public resolvers.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "MX records", "detail": "1 MX record(s).", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SPF", "detail": "SPF policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DMARC", "detail": "DMARC policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DKIM", "detail": "A DKIM selector was verified.", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "error", "title": "MTA-STS", "detail": "Mail transport policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "TLS-RPT", "detail": "TLS reporting policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "Valid TLS certificate", "detail": "82 day(s) remaining.", "category": "security", "max_points": 55, "earned_points": 55, "lost_points": 0 }, { "level": "ok", "title": "Certificate lifetime", "detail": "Full points require at least 30 days remaining.", "category": "security", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "warning", "title": "HTTP security headers", "detail": "5 of 9 evaluated headers detected.", "category": "security", "max_points": 35, "earned_points": 19, "lost_points": 16 }, { "level": "ok", "title": "PTR reverse DNS", "detail": "PTR: static.68.210.75.5.clients.your-server.de", "category": "network", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "warning", "title": "IPv4 diversity", "detail": "Two or more IPv4 addresses receive full points.", "category": "network", "max_points": 35, "earned_points": 20, "lost_points": 15 }, { "level": "error", "title": "IPv6 connectivity", "detail": "AAAA availability.", "category": "network", "max_points": 35, "earned_points": 0, "lost_points": 35 }, { "level": "ok", "title": "DNS resolution", "detail": "At least one address family must resolve.", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTP response", "detail": "HTTP/2 200 ", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTPS final URL", "detail": "Final URL uses HTTPS.", "category": "availability", "max_points": 20, "earned_points": 20, "lost_points": 0 } ] }, "dns": { "records": { "A": [ "5.75.210.68" ], "AAAA": [], "CNAME": [], "MX": [ "10 dgb-de.mail.protection.outlook.com." ], "TXT": [ "\"C4Z1s2DDJPcZZ8baU1y1FxJqMp9IigTNilKjrUDVWIjXFCn3z0UUWnqtePz3NHRBJHU3feNYErffjJ75Wqttjw==\"", "\"v=spf1 mx include:spf1.dgb.de include:spf2.dgb.de include:spf3.dgb.de include:spf4.dgb.de include:spf5.dgb.de -all\"", "\"canva-site-verification=HzuiZ0SusBlAviaxl6ypPA\"", "\"google-site-verification=ovhiA2kV7uq6ecdt95bOUugxcoBDE0X6tOb_cwAXzZc\"" ], "NS": [ "a.prim-ns.de.", "c.sec-ns.de.", "a.sec-ns.de." ], "SOA": [ "a.prim-ns.de. hostmaster.nexinto.net. 2026081001 28800 7200 604800 1200" ], "CAA": [], "DS": [], "DNSKEY": [], "RRSIG": [], "NSEC": [], "NSEC3": [], "SRV": [], "NAPTR": [], "TLSA": [], "SSHFP": [] }, "ipv4": [ "5.75.210.68" ], "ipv6": [] }, "mail": { "spf": "v=spf1 mx include:spf1.dgb.de include:spf2.dgb.de include:spf3.dgb.de include:spf4.dgb.de include:spf5.dgb.de -all", "dmarc": "v=DMARC1; p=none;", "dkim_selector": "selector2", "dkim_host": "selector2._domainkey.dgb.de", "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDtFtm2bEdehv+LBtYFGokP0M4fe0NFMv79s0kGJk/0vOFeuXAgRlLavV+1A6MazPJx+1XDUVCXeFLBU9CjLMEaKV0OVk3D0WPe3bWRT01tXLC/vxhR/YTg+yZncXSpABhH8IkSDFDmr/ZI2hd2kP5+irBzqfFasPk2aBsUcYCpQQIDAQAB;", "spf_analysis": { "valid": true, "lookups": 6, "final": "-all", "message": "Within the estimated limit" }, "dmarc_analysis": { "valid": true, "policy": "none" }, "bimi": "", "mta_sts": "", "tls_rpt": "" }, "advanced": { "ptr": "static.68.210.75.5.clients.your-server.de", "propagation": { "consistent": true, "results": [ { "provider": "Google", "server": "8.8.8.8", "result": [ "5.75.210.68" ], "time_ms": 50.9 }, { "provider": "Cloudflare", "server": "1.1.1.1", "result": [ "5.75.210.68" ], "time_ms": 255.9 }, { "provider": "Quad9", "server": "9.9.9.9", "result": [ "5.75.210.68" ], "time_ms": 42.68 }, { "provider": "OpenDNS", "server": "208.67.222.222", "result": [ "5.75.210.68" ], "time_ms": 41.21 }, { "provider": "AdGuard", "server": "94.140.14.14", "result": [ "5.75.210.68" ], "time_ms": 157.38 } ] } }, "ssl": { "available": true, "issuer": "Let's Encrypt", "subject": "dgb.de", "valid_from": "2026-08-03T00:43:14-05:00", "valid_to": "2026-11-01T00:43:13-05:00", "days_remaining": 82, "san": [ "dgb.de", "live.dgb.brettinghams-dev.de", "www.dgb.de" ], "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256" }, "http": { "url": "https://www.dgb.de/", "status": "HTTP/2 200 ", "http_version": "3", "headers": { "location": "https://www.dgb.de/", "content-length": "206357", "date": "Tue, 11 Aug 2026 01:10:26 GMT", "cache-control": "private, no-store, max-age=0", "content-language": "de-DE", "content-security-policy": "default-src 'none'; base-uri 'self' https://matomo.dgb.de; font-src 'self' 'nonce-Tay80RpYaWzX_NO0ZAGZ9pSiX_icmtEH7RAn_Zgf6iwtwOLpd8wSSg' https://matomo.dgb.de; frame-ancestors *; frame-src 'self' data: https://player.vimeo.com https://www.youtube-nocookie.com https://plugins.flockler.com https://www.taseko-web.de https://start.video-stream-hosting.de https://playout.3qsdn.com https://dgb.framefloor.de https://*.liverecords.net https://my.walls.io https://publuu.com https://d3dy1868rhd3r4.cloudfront.net https://d31oyjxzdp26mx.cloudfront.net https://nmk-infra.com https://*.nmk-infra.com https://nmk-streaming.com https://*.nmk-streaming.com https://hcaptcha.com https://*.hcaptcha.com; img-src 'self' data: https://matomo.dgb.de https://about.stage.bio https://cdn.stage.bio https://tile.openstreetmap.org https://dgb.easydb.de; script-src 'self' 'nonce-Tay80RpYaWzX_NO0ZAGZ9pSiX_icmtEH7RAn_Zgf6iwtwOLpd8wSSg' 'sha256-yL9ZJTwjPrn9w/CyKd4UniatMJZiPdtdFzMMR9AEhbQ=' 'sha256-ieoeWczDHkReVBsRBqaal5AFMlBtNjMzgwKvLqi/tSU=' 'sha256-DakYPp5dFy4aD5DS8iAYHbFC/gCbP4FF54K2QrkONow=' 'sha256-sk7XpqBIU8AqpF3rcbve7Ta7Q4A0A8o0VhYE/4pBCTE=' data: https://matomo.dgb.de 'sha256-nzv8I5Mf0AZBUKeL70LtQfYBjK/DghfP72B8j+UI49I=' 'sha256-Q9vPNvpI3BYCNwzFpA56s9IESqfHGcA8LabbrsO988U=' 'sha256-1zyb30Y1+QXbsRplcQQtYwodj8mALW5mDOGbkwpQ4K8=' 'sha256-sk7XpqBIU8AqpF3rcbve7Ta7Q4A0A8o0VhYE/4pBCTE=' 'sha256-332TbV+j+Pvu0YBR1dtAXTRRWOPIn+SdJNXymzaIrSw=' 'sha256-ueFZ1OmwPuiZOkDRBZvh4dbCcN3QAtthwY6JTKvitII=' 'sha256-WvyEoRsJFi8qiR95zABTUIHAgfIUzgho2JBlFNG2EwE=' 'sha256-chZQK96V54Me+wG/7vNY0Yut4GuV1omJHbKhj/TnDOs=' 'sha256-97Xg5tmddc2pk46qE+S4s+lk1TMVFv1ll5LNH7ipFRY=' 'sha256-RXms/Pc3gsAOQFoqhWsBJ+Ju7lgkUwb4ohYRvD4Ddsk=' 'sha256-zlO737FRbCyDGK95rdfDwSBf33SSV2e5Q06qZ3tQjpw=' 'sha256-3u8ONOthx+1p496zJXy3VgdXNwGaWdAUuaKDjk4nQ+E=' 'sha256-qx1pVX3GP8aNem7w7hqFUJHaVJCJpvUe6aehQDq3Jmw=' 'sha256-fAY9PDOi7aCh+gsP1Z1lgluorOceqllP4rFbcVE2pM4=' 'sha256-Xr+DTETbby8x3UGLUY+0c4Tqz4OOQaG3Fxjw+71l970=' 'sha256-2DasDU0p2PTGxhzalqzAlTHtdrolQ9Os38WG5eT5CgY=' 'sha256-/tCHaezmLhbz1fbJ8lVAgp3Xo9CZXX6mOczvsEKkLfY=' 'sha256-1b8RfEi5eO3VkYaNHF3J81XpkVdwgpoHdacbtOHlPiI=' 'sha256-sxuDCFimHVKUQj5X36RXhpVpXznmeJ2Ykx7UoXZD9SA=' 'sha256-FbS+xHdmD0J4Ebzr3xqdWMVilFDVhEoz/aEfVhN+WFU=' 'sha256-vEPT0NjfQ+gVBviyOVh5Dqiwhb+NNwhqcf2DCDX8ndE=' https://dashboard.stage.bio/ https://api.stage.bio/ 'sha256-IcU/4DPln9VdvsanFIelFsotVTWDviMg5uwEaKqEcK0=' 'sha256-VEgqfemo+YzhlwIOsfziX2BhzrmSsClttMXcjYb9D2k=' https://hcaptcha.com https://*.hcaptcha.com 'report-sample'; connect-src 'self' data: https://matomo.dgb.de https://dashboard.stage.bio/ https://api.stage.bio/ https://newassets.hcaptcha.com; manifest-src 'self'; media-src 'self' data: https://about.stage.bio https://cdn.stage.bio https://dgb.easydb.de; upgrade-insecure-requests; style-src 'unsafe-inline' https://hcaptcha.com https://* 'report-sample'; report-uri https://www.dgb.de/@http-reporting?csp=report&requestTime=1786410626708533&requestHash=a83bed34b7cca69d134df1ffd0fbf2500350801a", "content-type": "text/html; charset=utf-8", "expires": "Tue, 11 Aug 2026 01:10:26 GMT", "referrer-policy": "no-referrer", "server": "Apache", "strict-transport-security": "max-age=31536000", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "x-ua-compatible": "IE=edge", "x-xss-protection": "1; mode=block" }, "security_checks": { "strict-transport-security": true, "content-security-policy": true, "x-content-type-options": true, "x-frame-options": true, "referrer-policy": true, "permissions-policy": false, "cross-origin-opener-policy": false, "cross-origin-embedder-policy": false, "cross-origin-resource-policy": false }, "server": "Apache", "powered_by": "" }, "webpage": { "url": "https://www.dgb.de/", "title": "Deutscher Gewerkschaftsbund | DGB", "description": "Stark in Arbeit: Als Deutscher Gewerkschaftsbund organisieren wir 5,6 Millionen Mitglieder aus 8 Gewerkschaften. Erfahre hier alles über unsere Arbeit.", "success": true, "error": "", "status": 206 }, "network": { "5.75.210.68": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" } }, "smtp": { "host": "dgb-de.mail.protection.outlook.com", "ports": [ { "port": 25, "open": false, "time_ms": 27, "banner": "", "error": "Network is unreachable" }, { "port": 465, "open": false, "time_ms": 4039.8, "banner": "", "error": "Connection timed out" }, { "port": 587, "open": false, "time_ms": 4012.4, "banner": "", "error": "Connection timed out" } ] }, "visitor": { "ip": "216.73.217.62", "reverse": "", "country": "", "country_code": "", "region": "", "city": "", "latitude": null, "longitude": null, "isp": "", "organization": "", "asn": "", "timezone": "", "browser": "Other", "os": "Other", "language": "", "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "is_bot": true, "cloudflare": false }, "analysis_time_ms": 94.65 }