{ "ok": true, "domain": "ehu.eus", "generated_at": "2026-08-09T18:06:04-05:00", "cache": { "hit": true, "ttl": 0 }, "score": { "total": 85, "label": "Good", "categories": { "dns": 90, "mail": 90, "security": 77, "network": 50, "availability": 100 }, "category_weights": { "dns": 25, "mail": 20, "security": 25, "network": 10, "availability": 20 }, "items": [ { "category": "dns", "title": "IPv4 (A)", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "1 IPv4 address(es) detected." }, { "category": "dns", "title": "IPv6 (AAAA)", "max_points": 10, "earned_points": 0, "lost_points": 10, "detail": "0 IPv6 address(es) detected." }, { "category": "dns", "title": "Name server redundancy", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "4 NS record(s); 2 or more required." }, { "category": "dns", "title": "SOA record", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Authoritative zone record." }, { "category": "dns", "title": "DNSSEC chain", "max_points": 15, "earned_points": 15, "lost_points": 0, "detail": "DS and DNSKEY detected." }, { "category": "dns", "title": "CAA policy", "max_points": 5, "earned_points": 5, "lost_points": 0, "detail": "Certificate authority restriction." }, { "category": "dns", "title": "DNS propagation", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Agreement between public resolvers." }, { "category": "mail", "title": "MX records", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "1 MX record(s)." }, { "category": "mail", "title": "SPF", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "SPF policy published." }, { "category": "mail", "title": "DMARC", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "DMARC policy published." }, { "category": "mail", "title": "DKIM", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "A DKIM selector was verified." }, { "category": "mail", "title": "MTA-STS", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Mail transport policy." }, { "category": "mail", "title": "TLS-RPT", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "TLS reporting policy." }, { "category": "security", "title": "Valid TLS certificate", "max_points": 55, "earned_points": 55, "lost_points": 0, "detail": "186 day(s) remaining." }, { "category": "security", "title": "Certificate lifetime", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Full points require at least 30 days remaining." }, { "category": "security", "title": "HTTP security headers", "max_points": 35, "earned_points": 12, "lost_points": 23, "detail": "3 of 9 evaluated headers detected." }, { "category": "network", "title": "PTR reverse DNS", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "PTR: www.ehu.es" }, { "category": "network", "title": "IPv4 diversity", "max_points": 35, "earned_points": 20, "lost_points": 15, "detail": "Two or more IPv4 addresses receive full points." }, { "category": "network", "title": "IPv6 connectivity", "max_points": 35, "earned_points": 0, "lost_points": 35, "detail": "AAAA availability." }, { "category": "availability", "title": "DNS resolution", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "At least one address family must resolve." }, { "category": "availability", "title": "HTTP response", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "HTTP/1.1 200 200" }, { "category": "availability", "title": "HTTPS final URL", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "Final URL uses HTTPS." } ], "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.", "diagnostics": [ { "level": "ok", "title": "IPv4 (A)", "detail": "1 IPv4 address(es) detected.", "category": "dns", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "error", "title": "IPv6 (AAAA)", "detail": "0 IPv6 address(es) detected.", "category": "dns", "max_points": 10, "earned_points": 0, "lost_points": 10 }, { "level": "ok", "title": "Name server redundancy", "detail": "4 NS record(s); 2 or more required.", "category": "dns", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SOA record", "detail": "Authoritative zone record.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "DNSSEC chain", "detail": "DS and DNSKEY detected.", "category": "dns", "max_points": 15, "earned_points": 15, "lost_points": 0 }, { "level": "ok", "title": "CAA policy", "detail": "Certificate authority restriction.", "category": "dns", "max_points": 5, "earned_points": 5, "lost_points": 0 }, { "level": "ok", "title": "DNS propagation", "detail": "Agreement between public resolvers.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "MX records", "detail": "1 MX record(s).", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SPF", "detail": "SPF policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DMARC", "detail": "DMARC policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DKIM", "detail": "A DKIM selector was verified.", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "error", "title": "MTA-STS", "detail": "Mail transport policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "TLS-RPT", "detail": "TLS reporting policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "Valid TLS certificate", "detail": "186 day(s) remaining.", "category": "security", "max_points": 55, "earned_points": 55, "lost_points": 0 }, { "level": "ok", "title": "Certificate lifetime", "detail": "Full points require at least 30 days remaining.", "category": "security", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "warning", "title": "HTTP security headers", "detail": "3 of 9 evaluated headers detected.", "category": "security", "max_points": 35, "earned_points": 12, "lost_points": 23 }, { "level": "ok", "title": "PTR reverse DNS", "detail": "PTR: www.ehu.es", "category": "network", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "warning", "title": "IPv4 diversity", "detail": "Two or more IPv4 addresses receive full points.", "category": "network", "max_points": 35, "earned_points": 20, "lost_points": 15 }, { "level": "error", "title": "IPv6 connectivity", "detail": "AAAA availability.", "category": "network", "max_points": 35, "earned_points": 0, "lost_points": 35 }, { "level": "ok", "title": "DNS resolution", "detail": "At least one address family must resolve.", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTP response", "detail": "HTTP/1.1 200 200", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTPS final URL", "detail": "Final URL uses HTTPS.", "category": "availability", "max_points": 20, "earned_points": 20, "lost_points": 0 } ] }, "dns": { "records": { "A": [ "158.227.0.65" ], "AAAA": [], "CNAME": [], "MX": [ "10 ehu-eus.mail.protection.outlook.com." ], "TXT": [ "\"trend-micro-v1-domain-verification.7907ebddd2febfac865437618fc8e127=1faf1596-2353-495c-bb76-39197ab3aed4\"", "\"HARICA-WeJAxZ1gLGebHa1GXMw\"", "\"ZOOM_verify_rZZ5j3sPSdWr8grvf6UozQ\"", "\"v=spf1 mx a:smtp.ehu.es a:smtp-backup.ehu.es a:smtpout-4.ehu.es a:smtpout-4backup.ehu.es a:smtpout-5.ehu.es a:smtpout-5backup.ehu.es ip4:82.144.103.51 ip4:82.144.103.50 ip4:88.26.218.44 ip4:82.144.105.51 include:spf.protection.outlook.com -all\"", "\"abuseipdb-verification=cIy7mw0Q\"", "\"cisco-ci-domain-verification=70924021e3180c49b0f9535d5a9c6784ebf6960671957b19dba0f1917907599a\"", "\"QV9UapzGX5Zs0i580RQ0tOMPdN0xKLfYLKr5eZ/49U0AeSHREXYJbb+znmZH1FHTkm0dzfRqVU6u3kjEQHuSrQ==\"", "\"spf2.0/pra\"", "\"zone-ownership-verification-06197b5a35b26d7d11c93191e963b36cd929833c4856aada399b0307bc5688c4\"", "\"atlassian-domain-verification=DWwvLhs5z5Mh8/kVOQ/TLJXh2QTLyMa1Zq7AJtPMQ9o6zGd0lg/ioNagvlNoz0RY\"", "\"HARICA-HLnESeBsD3HKHit8IRI\"", "\"google-site-verification=Dxe4xfLYbJOcpHP4f6VDf7IBO0S0OSMIWyFqhg7F3-g\"" ], "NS": [ "sun.rediris.es.", "chico.rediris.es.", "dns1.ehu.es.", "dns2.ehu.es." ], "SOA": [ "dns1.ehu.es. root.ehu.eus. 2016653327 1200 300 1209600 3600" ], "CAA": [ "0 issue \"sectigo.com\"", "0 issue \"letsencrypt.org\"", "0 iodef \"mailto:cert@ehu.eus\"", "0 issue \"izenpe.com\"", "0 issuewild \"harica.gr\"", "0 issuewild \"sectigo.com\"", "0 issuewild \"digicert.com\"", "0 issue \"harica.gr\"", "0 issue \"digicert.com\"" ], "DS": [ "53394 10 2 C5F0DEB2FD5BCE6CED0AF7B47A29CDF4247D06F3A7AE85E8665B45E6 1D01FDDB" ], "DNSKEY": [ "256 3 10 AwEAAcueJVLS2O2to3ieOyCbdvT46Y0OhF5OBRe58veLtoqxUQp6Dz/H arv445D7Vb9HTybxrTxMqpn6fvWWG+XbxE1ktNl98F/algdW4bgoxLuj XCno2bTRR+yZIqmpfsMv9853VI4hQFG6ukbglOT0CufZSckohjZsxb0Q XTnm6lFUu3DxVo7z96kNN2ZKWkgTlhMrrV2/rsQz/WUDhFdGsj/7d5Xs FvUrDbbYTEImX2JueDeayblsKZEM825wLna4Ky3lRPEaZVO0y2ppISr0 lFmEHdgis4PMYViqpeWLo5ovQRWq3VEpB5DD48R12tUibHmONtKGg4i4 XvN1suGQSXJ985gmAJ9EYNTHhGnAG4KDQbc8bLZj2V56CML1pcOu2RK7 Rzw2a6MYA1N8xcgPP0r6k3dSd4Bm5u+WyFspJoO67YO82rMQq11mMK1u NUKWWlvbFpHA1DcN2DZBzP+c006gNDQVprki+EUxxqcc12O7T6fKsZ63 XWEMwQn9tdPg0w==", "257 3 10 AwEAAbkx5KNiaTCZT7lnGN8Jkyey0aE12SnEPPbfnSFHAnXK9W5CNKhf XuXXfd096Vf+xXj6bwbM3JvdwcQLVtQmWAM5QnxbAUei1rce9sywQcfB UYYFKeytj++d9Yrh3t5gTDC2UgaZkJtZ5DyhWorTEm6JDdIMbf75R+wH Y1exmDlR9gEzan+KE15ml27x5cvgKEpn3C0yE1+6YFt9AnygW3mT25Dw iZrFqwLZDX0nPuE0M7x4m0n0x6en8uBiRLaKl/mho0cVLp1AaYUChLMy 3TgZBeU8y0rK/A/BZ67QrgknPX2MSHtd8Yt8QBNyCWWo4G3xu1wrHEWt 5tsHNb55LuAIbknlC6Bx4U8NpjK1aLjso/3dr2pFFTSylq7jd3wFyZ+C qL7fqwptje3aWXfWq9B6CcvF8JikWyff0Gtlgz9+1vQlQORsUBTC+iBQ K3W5xTkkvbIR0VFGsGlwWaDLU72ZX99M3kvEf5XSqoaVZ7MtRhYTTu63 /cE5PMms1up3aQ==", "256 3 10 AwEAAZpAvB/tK1dAdhchB1NOX9daUbrQmSR1/Kt0CXk2u7NjWD9bM+9B KvCkszX0NnmkVnOm9sus8m1qCugl1tgtLLgHL46/T2exsVnX2iUMYB3l uyzYdCslMyuNXxTh6O3dfQ0QtwVGlGHVT7sb4v0utYHO+RTuzjVHJgdc otDD8DeaVmAamlooL0sDM+hanDQeN0QJOcAu/ZMDNK83bswviJZr/W9j 660CpEb1BHDguK+kgoSEkUfpTTTK9lFXEvewUKz4FNasxE92C/XUcoTY OcIDsHgIzcWPix0zZxR1+0D1uGMG3wOXNVtLIMEILlAWky7XYOVCKwX5 0Q5FS4cm0qMYcUjE5Tl0hpdxeFvwhlSBwgGeO3Kj02zVZrpTR/vE67C+ kZVqufkJAjoOMmgk5eOVJFwj+xyCh9YiFxGmZ9+CHZmSW0eDq1XuipAL hMHmBNi8jnO7PrPpyU8MQC6OZI8Lu1NTnDtfmUO2XYsofVDq1+F0xFUp 1JVYseLX3z08SQ==" ], "RRSIG": [ "DNSKEY 10 2 3600 20260907120043 20260808113319 53394 ehu.eus. Sqta5ZsPPIcC0iRnkdhjJxiiKnTmJoqJMLQaWd4kvd3s0BZ35sP9wAN1 EKkFDlveHXnNFhKbmtBX+vnVM7t5jFNqrmFmQjJh9eeN3elfIQVpQiz5 uBpS2Wq95KvNIiTG48nJy1PTqufV75fHLFUEjmKBXGiWQ2KdeA/MvhlF /0y9KXvJmim/AT1zGZPamjPAt5FoTTCmPZuDkJwuAmsAuy38FqWgm9d0 RjLs+8CrhNLXzagSZCdn/bzQoMkRhf9MbBpo3aEapj32boJfCMSnhgB2 e25SBSFRXLYt3Pd0CH5sHldt3Giod2+WBxeGPAV+gTP4R/O52G1KJRjy ziLVZB+zeg46PZLTQvBlKHa/nliH5jiR+R+JnURh2pDvVx1N8W5U/0V+ SpzgeAoj0Ph0KMv0iKpfEYUSzQ5aPXNQ1GbaRi2g+LjkE+YM0yaOly0v U2VC8CFzDQ8EualwGZOSNco6mlVepZHRelsngtch+wjnZ0PG79UvFO2s 4QB/tAy8", "NS 10 2 3600 20260821081428 20260722072006 29468 ehu.eus. JVLBHKUBUTNkisUlqg3ujOfpjY9EmyuzWikmV4LVWn+wQHzQ6OBFMUP3 E8ihrrz8iW11cwJtdIhZfRK8EXpRl33Wl8RHV050hRJ2j2lbSIX5isG1 5OAH3sIud1Xf8bVAMCoy8ae5JCBe/eQj90AeTIjab9Wnf55voRpYLHXf D4zpRID+ZDCjyl0Tt0oOjfApx0Kkp9WuZJXUkx5w6Nb/dpH366XG6hMS Sn/pZdrx5+OwWrs6Vy1rDgtQ+UClzLxWynhhXP+EsUUl5qsumrVh1ktb 1mpQlGcqmGS1PaMG62pxJ9M4exexjZnv7vZ3Q80Nyc5N+Q85ANJpAqNk wJfzYaL+WqLfiNsgBBFfAaK/B2NbgMgag+m0GKHgnnRpUBgjYwAomJrT /czuBd8I4wrg9xqfygBJjTArFnGZ4LWJ7r+doUUiTkdnRMymykQL83VF g47qLurW5VkAvFehviAz617EnxrTO2s7IwQX5823spmK/JSlvjp73Mez bjixC/bo" ], "NSEC": [], "NSEC3": [], "SRV": [], "NAPTR": [ "100 10 \"S\" \"x-eduroam:radius.tls\" \"\" _radsec._tcp.eduroam.es." ], "TLSA": [], "SSHFP": [] }, "ipv4": [ "158.227.0.65" ], "ipv6": [] }, "mail": { "spf": "v=spf1 mx a:smtp.ehu.es a:smtp-backup.ehu.es a:smtpout-4.ehu.es a:smtpout-4backup.ehu.es a:smtpout-5.ehu.es a:smtpout-5backup.ehu.es ip4:82.144.103.51 ip4:82.144.103.50 ip4:88.26.218.44 ip4:82.144.105.51 include:spf.protection.outlook.com -all", "dmarc": "v=DMARC1; p=none; pct=100; fo=1; rua=mailto:postmaster@ehu.eus", "dkim_selector": "selector1", "dkim_host": "selector1._domainkey.ehu.eus", "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCo4fYsLMUsSB06R0tbjSiYDUEuluI4y1FAhxig3Hyf4k459hEPI+LfBxCnQdzUqPdZTjxlA6jc74+MmSsdc8mZZwMvxwJmSMABfSk731zg6MG/ZT7WSvjQDrr3Ncw4igESKHTMOzxhznorO8HmD0+T4kCJFW9L33I9/ozSYWAntQIDAQAB;", "spf_analysis": { "valid": true, "lookups": 8, "final": "-all", "message": "Within the estimated limit" }, "dmarc_analysis": { "valid": true, "policy": "none" }, "bimi": "", "mta_sts": "", "tls_rpt": "" }, "advanced": { "ptr": "www.ehu.es", "propagation": { "consistent": true, "results": [ { "provider": "Google", "server": "8.8.8.8", "result": [ "158.227.0.65" ], "time_ms": 126.42 }, { "provider": "Cloudflare", "server": "1.1.1.1", "result": [ "158.227.0.65" ], "time_ms": 163.34 }, { "provider": "Quad9", "server": "9.9.9.9", "result": [ "158.227.0.65" ], "time_ms": 62.92 }, { "provider": "OpenDNS", "server": "208.67.222.222", "result": [ "158.227.0.65" ], "time_ms": 112.79 }, { "provider": "AdGuard", "server": "94.140.14.14", "result": [ "158.227.0.65" ], "time_ms": 133.01 } ] } }, "ssl": { "available": true, "issuer": "Hellenic Academic and Research Institutions CA", "subject": "*.ehu.eus", "valid_from": "2026-07-28T06:20:37-05:00", "valid_to": "2027-02-12T05:20:36-06:00", "days_remaining": 186, "san": [ "*.ehu.eus", "ehu.eus", "ixa.si.ehu.eus", "ldap-01.sw.ehu.es", "ixa2.si.ehu.eus", "auth-02.sw.ehu.es", "esc2026.cfm.ehu.es", "services.cfm.ehu.es", "auth-01.sw.ehu.es", "*.hegoa.ehu.eus", "hegoa.ehu.eus", "lgpx09.lg.ehu.es", "i2t26.i2t.ehu.eus", "*.ehu.es", "ehu.es", "ldap-04.sw.ehu.es", "www.u005552.ehu.eus", "ldap-02.sw.ehu.es", "singapur.we.lc.ehu.es", "*.cryst.ehu.eus", "cryst.ehu.eus", "u038721.si.ehu.es", "*.adm.ehu.es", "adm.ehu.es", "det.bi.ehu.es", "www.bantaba.ehu.eus", "*.iniaki.ehu.eus", "iniaki.ehu.eus", "bipt103.bi.ehu.es" ], "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384" }, "http": { "url": "https://www.ehu.eus/es/", "status": "HTTP/1.1 200 200", "http_version": "2", "headers": { "date": "Sun, 09 Aug 2026 23:05:54 GMT", "server": "Apache", "strict-transport-security": "max-age=63072000", "location": "https://www.ehu.eus/es/", "content-type": "text/html;charset=UTF-8", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "set-cookie": "COOKIE_SUPPORT=true; Max-Age=31536000; Expires=Mon, 09 Aug 2027 23:05:54 GMT; Path=/; Secure; HttpOnly", "expires": "Thu, 01 Jan 1970 00:00:00 GMT", "cache-control": "private, no-cache, no-store, must-revalidate", "pragma": "no-cache", "liferay-portal": "Liferay Digital Experience Platform", "vary": "Accept-Encoding" }, "security_checks": { "strict-transport-security": true, "content-security-policy": false, "x-content-type-options": true, "x-frame-options": true, "referrer-policy": false, "permissions-policy": false, "cross-origin-opener-policy": false, "cross-origin-embedder-policy": false, "cross-origin-resource-policy": false }, "server": "Apache", "powered_by": "" }, "webpage": { "url": "https://www.ehu.eus/es/", "title": "Inicio - EHU", "description": "", "success": true, "error": "", "status": 200 }, "network": { "158.227.0.65": { "success": true, "country": "Spain", "country_code": "ES", "region": "Euskal Autonomia Erkidegoa", "city": "Leioa", "latitude": 43.3268787, "longitude": -2.9888402, "asn": 15488, "organization": "Universidad del Pais Vasco / Euskal Herriko Unibertsitatea", "isp": "Universidad del Pais Vasco - Euskal Herriko Unibertsitatea", "timezone": "Europe/Madrid" } }, "smtp": { "host": "ehu-eus.mail.protection.outlook.com", "ports": [ { "port": 25, "open": false, "time_ms": 25.5, "banner": "", "error": "Network is unreachable" }, { "port": 465, "open": false, "time_ms": 4056.9, "banner": "", "error": "Connection timed out" }, { "port": 587, "open": false, "time_ms": 4020.3, "banner": "", "error": "Connection timed out" } ] }, "visitor": { "ip": "216.73.217.62", "reverse": "", "country": "", "country_code": "", "region": "", "city": "", "latitude": null, "longitude": null, "isp": "", "organization": "", "asn": "", "timezone": "", "browser": "Other", "os": "Other", "language": "", "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "is_bot": true, "cloudflare": false }, "analysis_time_ms": 86.1 }