{
    "ok": true,
    "domain": "fox32chicago.com",
    "generated_at": "2026-08-10T13:46:18-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 75,
        "label": "Good",
        "categories": {
            "dns": 85,
            "mail": 25,
            "security": 77,
            "network": 100,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "2 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "2 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "8 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20,
                "detail": "0 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 0,
                "lost_points": 25,
                "detail": "SPF policy not found."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20,
                "detail": "No tested DKIM selector responded."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "24 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 6,
                "lost_points": 4,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 16,
                "lost_points": 19,
                "detail": "4 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: a23-200-156-143.deploy.static.akamaitechnologies.com"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/2 200 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "2 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "IPv6 (AAAA)",
                "detail": "2 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "8 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "error",
                "title": "MX records",
                "detail": "0 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20
            },
            {
                "level": "error",
                "title": "SPF",
                "detail": "SPF policy not found.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 0,
                "lost_points": 25
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "DKIM",
                "detail": "No tested DKIM selector responded.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "24 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 6,
                "lost_points": 4
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "4 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 16,
                "lost_points": 19
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: a23-200-156-143.deploy.static.akamaitechnologies.com",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/2 200 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "23.200.156.143",
                "23.200.156.140"
            ],
            "AAAA": [
                "2600:1407:3c00:1868::17dc:901f",
                "2600:1407:3c00:1868::17dc:900c"
            ],
            "CNAME": [],
            "MX": [],
            "TXT": [
                "\"fastly-domain-delegation-kjivzefv2okdtv1sfvvrh89l-03302018\" \"google-site-verification=_NCXdO6DKnIltObWvgIsYapK4bi_PW-H6tr6KIHyiqQ\"",
                "\"rZ984io38PHyfLRlL9JSiLJHyRmYGoWtZUjJTNa7+Mw=\"",
                "\"VYmVDJGwPIuWPPUjwF7+0hGCmMyzWVZcKffMAW1kynw=\""
            ],
            "NS": [
                "ns02.dns.fox.",
                "ns03.foxdoua.com.",
                "ns04.foxdoua.com.",
                "ns01.dns.fox.",
                "ns02.foxdoua.com.",
                "ns03.dns.fox.",
                "ns01.foxdoua.com.",
                "ns04.dns.fox."
            ],
            "SOA": [
                "dns1.p06.nsone.net. hostmaster.nsone.net. 1786320110 43200 7200 1209600 3600"
            ],
            "CAA": [],
            "DS": [
                "48553 13 2 D3F6DF85FE799AAF73D545CC2F823EC8441DD528B057536ED50CDED8 5729E694"
            ],
            "DNSKEY": [
                "256 3 13 StkhLrYivFRj91rx0aO6ykg4qWeYhgQxJEwwkTzMBkIYjR/DENsx7p8n 0yfXg4Of/DzazP+vhOLp0Kijh7S5pg==",
                "257 3 13 t+4DPP+MFZ0Cr7gAXiDYv6HTyXzq/O2ESVRLc/ysuh5xBXKIsjsj5baV 1HzhBNo2F7mbsevsEo0/6UEL8+JBmA==",
                "256 3 13 3u9onSaqbxIlglXMHjh5Plcah8n2pXj0QuBVY/6YTdC6L/eUEYPDh57n OVJ8dd3fkPMrjt2Oij6J9EeLqyeuBw=="
            ],
            "RRSIG": [
                "AAAA 13 2 7200 20260811183214 20260810163214 52254 fox32chicago.com. AihdohphMCGjWeJXwF+9jtc+KO8mlp9YqQDL9rFhFnlSm0FVva+zgNk1 uvAjOjWplZn73KwWT6laoBy8DXEcSg==",
                "SOA 13 2 7200 20260811183211 20260810163211 52254 fox32chicago.com. 6wZOeNE/PGBGlC2vk1EIECXb2OSThxknyBPOSs8KxmS7rBRqZstXHzxz jf6xfsd7aqPFpa8sAWcVYOtB39y2Ag==",
                "NS 13 2 86400 20260811183211 20260810163211 52254 fox32chicago.com. yzo9GSn7wZYVUeiYdNfenIYTiMPtK+R+BrHDhRXxOX/QS8mSZM6Ct5ft UsfVVl+FM63WdSB9na3xj22iYzTwHA==",
                "A 13 2 7200 20260811183211 20260810163211 52254 fox32chicago.com. A2uRPd0s53fnv/KvBgBL8fODIQgJxZP4lnXDGG/qS0/HW1fInImdYFTN chV29eau1fGAQLLJYPZtSagzznov8Q==",
                "DS 13 2 86400 20260814013707 20260807002707 41446 com. wnu3HdY1x7hSox6WdBQwrfHkwivrm0gEPIdc59gUQWYEdH5ea8IC8Wu/ 11Wj7aUdRKpRm3za0tUPDWkRX1FOIg=="
            ],
            "NSEC": [
                "\\000.fox32chicago.com. A NS SOA TXT AAAA RRSIG NSEC DNSKEY"
            ],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "23.200.156.143",
            "23.200.156.140"
        ],
        "ipv6": [
            "2600:1407:3c00:1868::17dc:901f",
            "2600:1407:3c00:1868::17dc:900c"
        ]
    },
    "mail": {
        "spf": "",
        "dmarc": "v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com",
        "dkim_selector": "x",
        "dkim_host": "",
        "dkim": "",
        "spf_analysis": {
            "valid": false,
            "lookups": 0,
            "final": "",
            "message": "Not published"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "reject"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "a23-200-156-143.deploy.static.akamaitechnologies.com",
        "propagation": {
            "consistent": false,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "23.200.156.140",
                        "23.200.156.143"
                    ],
                    "time_ms": 93.73
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "23.200.156.140",
                        "23.200.156.143"
                    ],
                    "time_ms": 55.27
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "23.200.156.140",
                        "23.200.156.143"
                    ],
                    "time_ms": 50.53
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "23.200.156.140",
                        "23.200.156.143"
                    ],
                    "time_ms": 76.78
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "23.58.85.38",
                        "23.58.85.47"
                    ],
                    "time_ms": 56.73
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "Let's Encrypt",
        "subject": "fox32chicago.com",
        "valid_from": "2026-06-05T17:59:07-05:00",
        "valid_to": "2026-09-03T17:59:06-05:00",
        "days_remaining": 24,
        "san": [
            "fox32chicago.com"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_256_GCM_SHA384"
    },
    "http": {
        "url": "https://www.fox32chicago.com/",
        "status": "HTTP/2 200 ",
        "http_version": "3",
        "headers": {
            "server": "nginx",
            "content-length": "0",
            "location": "https://www.fox32chicago.com/",
            "cache-control": "max-age=90",
            "expires": "Mon, 10 Aug 2026 18:47:39 GMT",
            "date": "Mon, 10 Aug 2026 18:46:09 GMT",
            "strict-transport-security": "max-age=600",
            "akamai-grn": "0.c8714017.1786387569.2f65cef5",
            "access-control-allow-origin": "*",
            "content-security-policy": "frame-ancestors 'self' https://layout-cms.fox32chicago.com;",
            "content-type": "text/html; charset=utf-8",
            "etag": "\"253bfd-ej01Hrfnf2zOpFMUtt24NWSV1PY\"",
            "x-content-type-options": "nosniff",
            "x-dns-prefetch-control": "off",
            "x-download-options": "noopen",
            "x-frame-options": "ALLOW-FROM https://layout-cms.fox32chicago.com",
            "x-xss-protection": "1; mode=block"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": true,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "nginx",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.fox32chicago.com/",
        "title": "FOX 32 Chicago | Local News, Weather, and Live Streams | WFLD",
        "description": "Chicago news, weather, traffic, and sports from FOX 32, serving the Chicago area and Northwest Indiana. Watch breaking news live or see the latest videos from programs like Good Day Chicago.",
        "success": true,
        "error": "",
        "status": 206
    },
    "network": {
        "23.200.156.143": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        },
        "23.200.156.140": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "fox32chicago.com",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 0.8,
                "banner": "",
                "error": "Network is unreachable"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4027.9,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4020,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 81
}