{
    "ok": true,
    "domain": "dni.gov",
    "generated_at": "2026-08-09T07:37:17-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 76,
        "label": "Good",
        "categories": {
            "dns": 85,
            "mail": 90,
            "security": 65,
            "network": 85,
            "availability": 60
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "2 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "6 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "1 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "94 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "0 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: a23-61-47-176.deploy.static.akamaitechnologies.com"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 0,
                "lost_points": 40,
                "detail": "HTTP/2 403 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "IPv6 (AAAA)",
                "detail": "2 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "6 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "1 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "94 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "HTTP security headers",
                "detail": "0 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: a23-61-47-176.deploy.static.akamaitechnologies.com",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "ok",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "HTTP response",
                "detail": "HTTP/2 403 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 0,
                "lost_points": 40
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "23.61.47.176"
            ],
            "AAAA": [
                "2600:1407:e800:108d::22f4",
                "2600:1407:e800:1086::22f4"
            ],
            "CNAME": [],
            "MX": [
                "0 dni-gov.mail.protection.office365.us."
            ],
            "TXT": [
                "\"google-site-verification=OQvk-L4Hc7GV9BQrEAkmNWyL6m8wgytsQU2eLHI9VB0\"",
                "\"_377kp7akpmn1e93hye3vsnbnfma3epq\"",
                "\"v=spf1 include:spf.protection.office365.us -all\""
            ],
            "NS": [
                "a12-65.akam.net.",
                "a1-22.akam.net.",
                "a16-67.akam.net.",
                "a22-66.akam.net.",
                "a3-64.akam.net.",
                "a13-65.akam.net."
            ],
            "SOA": [
                "a16-67.akam.net. hostmaster.akamai.com. 1560286229 43200 7200 604800 7200"
            ],
            "CAA": [],
            "DS": [
                "62620 8 2 3040EC212E9A12543417B32AA65C20B4AE40451ABD08B6A7CC064CCD B22CC182"
            ],
            "DNSKEY": [
                "257 3 8 AwEAAcFzrfG/c6y4zfJrQMJZCPfeqsoyq00KNqMy8Z5yQ1nk2FVAemET xWyWmh3KsA/0gccL10JsNoQSjcNOFmSNNJNWRrue1y06cjruviQxuIRV SHJm0WDNfcggi2Nal3mRAsF4tmlHrdBqfynXsPrPVKQC+K1xENG2vx1j qwM6TKOzMrWKTb20HleakTv1eDDmbGpgdNMr5dCd3MQykAZk3r+Jhd/A PNUdfRtdb2Vq7QGP1xRdAK35c1SBYv+Hfln3xIpunLQ5mBx5Nai2agkz UMWq6mMzc+Eq2TD+eKBShFHDayXPdlGOY3miIhXY11mVVXmsT5UtTbVq ZQud8B9lCm8=",
                "256 3 8 AwEAAcpQ4o5Xnng+GUuHd4FLZRFbH9nfT1/syPF5VuO8xvGlg4hhBcmQ 6P4MP6ZKEB1VPoysaM5Cu/5+gyhwmN7klvYoXWbU8KGh6PJpIPbf15YI g2z/CQNpwW91RFcX1EOvvdJ70M4p1/ZzVVmkgWIo6yyJVGZwz5UTBg3q 7VknQcvB",
                "256 3 8 AwEAAcu9NLhjTnZ8+fgN1/OqgNh2oqVQUbPoMCtZgRcVT5sPYX6CIlkS t7SZVDhyceTvVmG8KZ7krJxrEoEr3TCL36OdPqug28PEaCQYMrrdGar2 KQz2wiOLv5WcgugvUj0HzhrMg6jl/N+BK1HzwNJuN7kEHDXbr+Fh9FEi 68wTKoF/"
            ],
            "RRSIG": [
                "DNSKEY 8 2 7200 20260812045424 20260809035424 62620 dni.gov. kM0mecxEqHK7tMR49Y4EofrPxLhC0vvi8qkBSrvlPZkhw7Cn9s1joWAb S7Vc/bc3NG6oRE33+ciNkxJrSWs8tRQghf2Rrh15Gv6wnZM5PBDB4VcS KfHgfJEsGtREaFiDSAnsxqoEdlRnKXZLyUPMHR0GSQIvVHJE9+CJ8NeB kb8By/lZ4UeIE043Dpvy41EDgCFjOA9vQi94oG8HHKhvODdxycwElc+C 19jp6JD83Z5rJFbSibVk4IbTIsbcQYNaqRvldjisV9cEn5TPBtlcGyvd 7sJTHKbwuT4PrFNcNSvUSEGtPxfN4XB5NyZM1d2m+An3kxPQDgIB8kZw /Jh7wA==",
                "NS 8 2 86400 20260812045424 20260809035424 59103 dni.gov. VW7hmUTMdSKWSpFsBxCHVTYve6kt1hkxScLFvsGuvuOL1505bGrjZdbd iKOytlUQsni3ptAXvlxRLG42+ugYqeL+cxiC1qsiRgP/ahdTqMwGeQrl 9T8QNJXu5nmtPdQ4c9a2sVaYOhzbqteI/p58n5RcJ8wAkwaWf8VwfhRo xbw=",
                "SOA 8 2 86400 20260812045424 20260809035424 59103 dni.gov. m6/xZcH4hywnkl+REydUi7Sf4zxC8MZw0Xgo6BQVE6kvdbQdBB2r9iEu 4BLDxBcu8cg1niBZIx8vX0UmEuewRtf2025rgJgXY6Jvy9/LJnG0rRkQ wmFrBW9miiTMOj+dpuSQbZ/QSiAT7BEP1IZGelqvyFPs5IGxmLU5EiLe Ip4=",
                "TXT 8 2 1800 20260812045424 20260809035424 59103 dni.gov. lvglrrxDVodWiouYEE/5uJ+apgKeMSbbyAW5uJfQYpZzD97wgVMMlHYo PhO5DP0GM8SRcIbGH8Zhpggjwc3UwKGI77YokIDGLIfeFl2QO8ZtgxGq DAaIeTWpLPGB7rps3GfIuRVex/mzUcJtwZQucdYz8mjarfOmu7zjah38 Ww0=",
                "A 8 2 20 20260812045424 20260809035424 59103 dni.gov. MPctVy+Yfy8c4UL6f3/gcADlIskR2GbzP26Ia5IiQZ5v/hwcPS2RBEi+ ODi1OaK20S1KBLZCKvHV2YdS+O3dn4e/ZnInk6by9+p+KVHazyLcn7zl DxfAwbxniKZxsjbjBKtBvlNWZZNQ6J94EHwMLlWB/xUqcUsiukPJguCL QEY=",
                "DS 13 2 3600 20260810133707 20260808113707 35496 gov. WTDdYiTf/uiZdmqNMk7JQGUbtTiU7agM22NMdOrkD0Mqzny5OtnE2cQZ 4iliQlGvTFifWxtgR9pHGiZfb+b1iQ=="
            ],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "23.61.47.176"
        ],
        "ipv6": [
            "2600:1407:e800:108d::22f4",
            "2600:1407:e800:1086::22f4"
        ]
    },
    "mail": {
        "spf": "v=spf1 include:spf.protection.office365.us -all",
        "dmarc": "v=DMARC1; p=quarantine; pct=100; rua=mailto:aggregate.reports@uview.odni.gov; ruf=mailto:forensic.reports@uview.odni.gov; rf=afrf; fo=1; adkim=r; aspf=r",
        "dkim_selector": "selector1",
        "dkim_host": "selector1._domainkey.dni.gov",
        "dkim": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg6hSdLe3PTkle6fOS+/jM3DB1tKXCZNHhhEAUUYfzi7bUSPmPE0DOIK1uZVAhFQnfRaItsKZuCmXf2ATvrv/uQ2RQB3IEV1Q0nOLymHwLYI2vTxNpCZuhwz/uBOhzSpVLr1W09PqXYTW4MAGro+KovP7IQ0PcvWOQs4L4PGrYZEyIyMgyPPR1z4m6ql7ZYBUU8bnI/oAuf3u2z45rbMu5y9I0dYWRir3H7ZyiEiQAV359XiM48Gm/R4ra4JgLXoV+CTN5kk0EkaqCriKTXp6kbXgsUh6/O6/b+2boePpQz3PyuapMOm5dHPhQBUiYYA7oXnml5ZThlIKVXlmtWPdQIDAQAB;",
        "spf_analysis": {
            "valid": true,
            "lookups": 1,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "quarantine"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "a23-61-47-176.deploy.static.akamaitechnologies.com",
        "propagation": {
            "consistent": false,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "23.61.47.176"
                    ],
                    "time_ms": 74.28
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "23.61.47.176"
                    ],
                    "time_ms": 60.19
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "104.69.95.58"
                    ],
                    "time_ms": 71.89
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "23.61.47.176"
                    ],
                    "time_ms": 151
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "184.31.223.58"
                    ],
                    "time_ms": 57.32
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "DigiCert Inc",
        "subject": "www.dni.gov",
        "valid_from": "2026-04-26T19:00:00-05:00",
        "valid_to": "2026-11-11T17:59:59-06:00",
        "days_remaining": 94,
        "san": [
            "www.dni.gov",
            "aops.icsurvey.dni.gov",
            "bar.icsurvey.dni.gov",
            "cio.icsurvey.dni.gov",
            "ctiic.icsurvey.dni.gov",
            "dni.gov",
            "hrm.icsurvey.dni.gov",
            "iarpa.gov",
            "icjointduty.gov",
            "icsurvey.dni.gov",
            "iln.icsurvey.dni.gov",
            "intel.gov",
            "intelligence.gov",
            "ise.gov",
            "jcat.icsurvey.dni.gov",
            "mpac.icsurvey.dni.gov",
            "ncsc.gov",
            "ncsc.icsurvey.dni.gov",
            "nctc.gov",
            "niu-ir.icsurvey.dni.gov",
            "niu.icsurvey.dni.gov",
            "odni.gov",
            "ogc.icsurvey.dni.gov",
            "www.iarpa.gov",
            "www.icjointduty.gov",
            "www.intel.gov",
            "www.intelligence.gov",
            "www.ise.gov",
            "www.ncsc.gov",
            "www.nctc.gov",
            "www.odni.gov"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_256_GCM_SHA384"
    },
    "http": {
        "url": "https://dni.gov/",
        "status": "HTTP/2 403 ",
        "http_version": "3",
        "headers": {
            "server": "AkamaiGHost",
            "mime-version": "1.0",
            "content-type": "text/html",
            "content-length": "357",
            "cache-control": "max-age=0",
            "expires": "Sun, 09 Aug 2026 12:37:09 GMT",
            "date": "Sun, 09 Aug 2026 12:37:09 GMT",
            "server-timing": "ak_p; desc=\"1786279029212_388045072_2043735020_20_8416_33_9_15\";dur=1"
        },
        "security_checks": {
            "strict-transport-security": false,
            "content-security-policy": false,
            "x-content-type-options": false,
            "x-frame-options": false,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "AkamaiGHost",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.odni.gov/",
        "title": "Office of the Director of National Intelligence",
        "description": "Leading the IC. safety. security. freedom. Leading the IC. safety. security. freedom. Leading the IC. safety. security. freedom. Our Priorities Transparency Content blurb here about our priorities. Duis eleifend eros et elit lobortis, ut gravida felis condimentum. Donec quis nisi…",
        "success": true,
        "error": "",
        "status": 200
    },
    "network": {
        "23.61.47.176": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "dni-gov.mail.protection.office365.us",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 141.9,
                "banner": "",
                "error": "Network is unreachable"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4021.3,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4018.4,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 111.34
}