{
    "ok": true,
    "domain": "gao.gov",
    "generated_at": "2026-08-08T21:54:53-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 69,
        "label": "Fair",
        "categories": {
            "dns": 85,
            "mail": 70,
            "security": 69,
            "network": 50,
            "availability": 60
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "2 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "2 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20,
                "detail": "No tested DKIM selector responded."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "167 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 4,
                "lost_points": 31,
                "detail": "1 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: ec2-52-72-207-206.compute-1.amazonaws.com"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 0,
                "lost_points": 40,
                "detail": "HTTP/2 403 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "2 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "2 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "DKIM",
                "detail": "No tested DKIM selector responded.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "167 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "1 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 4,
                "lost_points": 31
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: ec2-52-72-207-206.compute-1.amazonaws.com",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "HTTP response",
                "detail": "HTTP/2 403 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 0,
                "lost_points": 40
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "52.72.207.206"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "10 mxa-0030d401.gslb.pphosted.com.",
                "10 mxb-0030d401.gslb.pphosted.com."
            ],
            "TXT": [
                "\"adobe-idp-site-verification=9ec7c19bd24109a66645b3c15149071982b6300b62123ad65f7b98a97772cf08\"",
                "\"wpg9KW332nc/Tl5aOtgUNB6mZ+kw4CKtW14Qe+nmU68lec7WcpK6IY9ht4XK6j30gqkFhy0WRrSwQxHQo7Y6Rw==\"",
                "\"v=spf1 mx a:websurveys.gao.gov a:listserv.gao.gov include:spf-0030d401.pphosted.com include:_spf.qualtrics.com include:spf.protection.outlook.com include:spfa.gao.gov -all\"",
                "\"MS=ms93491652\"",
                "\"cloudflare_dashboard_sso=edb80175bd9686cd65370033416ddef3\""
            ],
            "NS": [
                "sauthns2.qwest.net.",
                "sauthns1.qwest.net."
            ],
            "SOA": [
                "sauthns2.qwest.net. abuse.aup.lumen.com. 2260807001 10800 3600 604800 300"
            ],
            "CAA": [],
            "DS": [
                "21486 7 2 1AA290E33BC17534E2D8EAA3ED1C5DB57EFD29F2DE31A7208617187A 56FAC411",
                "14778 7 2 DE96195E0113AE8A38C26ADB50D8B778E56823A4911442E2FB30B27C FA3601FE"
            ],
            "DNSKEY": [
                "257 3 7 AwEAAdmgy366g+hi+4+UPbV9QYqEX0xwEspMO0IHRaDESVzSMHdgd8HW gZemqH9PrHfgzEyoNyBLc1UOW60zIkdnG4Us+n3AHsuDZYVkOzVeEqJG UxIY+JnRVMr91yHPbiR/R2OLw7N26o0z4RAhIeQMO2jUqJ5vGr8kpxfx ci1Pg3H7jBkv3Nbx4yCSF+C1Dtt50ovlAGELXqG12FR42ry+r5uMRi3A QLTXOOnFZvrD9Sc/TJH7iAZMk7VDQRtlISWA4qtgF03BnGdXMSBLXsnb r/46N+3O66Vtio/xw8TUaMS3WpGpXOqDkhIVTqZQ7nx+IrlKurMuwf9C webb69l/v9U=",
                "257 3 7 AwEAAZj+0VYO0QcnitPu+6KBtbOfW0KKK19qCjB8VDv7NXu2mfzcrzh3 DKvkGagnQhoUW8I8kOOPrjMqaMqGQHEoHwseqhexjPib3XOycMG6NjW4 Z6yvznIZ54PGReGoIm2PEqCrHrXo6xB0U+/P282LIfmCviN9FWmx3yUa biJn5ZXwDld12pAu31byht5wQoDoornGWoBI+OVMqwLCW6RVVuLKu2V7 5veVOIOnPleZuS1WJP6o+eRTlVrr6XaGmrXOBuprZRAYJrsGVgfVQf2s FDOY305/aIr4pEjoqjO/RG+l6j4grD/Equ84UpolntYtlOCtocjUTOe9 weR5fp3uMSU=",
                "256 3 7 AwEAAbuB08hKtn/LgbpM6ElKDWqqkVfWEl+gKvXbBXJLhaMtpNkx7R4k pp5OjcZvvR/Kt21rUWfy98zmmKlbWIpoYWa9pIkLz9TEW3K25HF7ofln BmyfQ9v5f7xHp0LBFYS/2jTW7mUv9XV0mbeYYfDU16acry4iBVmU6vwO T+UyEjy1",
                "256 3 7 AwEAAfQE1mkjzqID5oSwJUzlkAv2PqpmW+632DO/4oEwcQn8z83Dyzbt EPCnTeprn82b5eaq8mTD3+m8etOBLVEJVCQWNDghhwXPs+Wm6kZyKLx9 abHS3xK5yj2jeLn4pPI8DiBTHYvzkvNJrTZBdgCT1O5N037gdRak0awx LmQ96rjd"
            ],
            "RRSIG": [
                "NS 7 2 86400 20260815030104 20260808020104 42827 gao.gov. DZ8ogFSpFlsSTzcLfbl7xpTlyBKdHBq3K8EQYUor9NutyfiYq5fUmt9y lvNw0bqPARMeLTfIu6W7TXr4CgwPQSOUUkJtkZhBOz5pk7fCynWn+6Xa 3Qqus3dwcPZjpOrT2EkCzFlDG1LYr+uerNBjJIVI1ohmgybhF4MYZn5R L1w=",
                "TXT 7 2 3600 20260815030104 20260808020104 42827 gao.gov. HdoJYgWHM1NBqfhjoINet3/Z2eacb0GJXqD9QYG5nGj4ARXogwSKJEIw thZVsfyKbhMlp4fCUXhRZZgwb/G+jHkv7/Mp2/9cYhnvhCwtYqy4vhkM TM9rHzVyDrUoxxXdz54G4vXXt37COo8DKAdc1AAJw2vOQSu800kmnSYe prY=",
                "MX 7 2 600 20260815030104 20260808020104 42827 gao.gov. GvmiyrDvqvMRhgDmmxZeNznbGx9K3p68n7vpIDYnrwcb1jsfHfBiqQBQ IVgB6OU8Plv4r5y58vRbQ1Sig5duzfEEM2U8OeXREh9gFVaHr/8d3vP0 OBrq64ILlMyis8t98GnJOJ++EkUwafyDcTQv6JYqJ6Ou38p1TlqqhMaj G2U=",
                "A 7 2 300 20260815030104 20260808020104 42827 gao.gov. PgNT/cx1Bdu7VtduepEYWicKMffQ8ZVaf6FNWh/wNDJgCsrhAkYlHMwg USs9snbjXJhakJt2J50RS+9Vt2uMckO4HOFFm3qoOVMeXKPxqq3m2zsu LtV/Hx4LPjUlP+hq7CHiMHy7adbG2jl+tsdDuY4Yd5+EPJKRXqrT48Co yc0=",
                "DNSKEY 7 2 86400 20260815030104 20260808020104 21486 gao.gov. YxWQlb0l5gKtVMYjO0dSLBnEFRNSoF+Ua6yrpQoaDrSxrhOHEQ1uVmSa ALTDxVVba+Vj4driKtYNYdvCzuIs7u1exObDLz2sJQbTT7b8SFIzGRqF 4cSFFNQ5MDAU0KhukmyKXi6OOe3f9a4ZOoH27mYO/3Dfh/HR6SYL0eZc qfpiVcR6Ij83Bs/YFbuq9BOLRjR9U0Vzfkn3Pf9ptQaECnUxzIUr8lRo 7KDviI58Bfp6RtHce6UKf0ubw8d7EBieBVqPQmu3P5kgzAljc7ziSbTo CMa9rYEGql8YkHVYwypz/1s4aI6yGctaOvJapqeYe+b6x4Yg1Ukldxr5 8Q90qQ==",
                "DNSKEY 7 2 86400 20260815030104 20260808020104 14310 gao.gov. Z6T73Yb45SE7FmYDmrcNzYHuxyXKIOrPIBtCWLJ7S7rjB4o8fZF9v3v5 EUVmhigU34y2yap6GftlR2UEqf283/cg+Jgb1ZuF9f+9CWL9Kqu4Mwed SBFnjTHXxND/0iYvvwVh71DvC6+R4rnhF75Sr9WjwARXTJ/W/f9hD+Za cplV0M7yBb747mkl1O1Rvz7oruNQBbPl3XTvYFzgzGDg2/fQ5rfPOszd 0W97sMybiweyUZkGP2qLNEILTyxXbZCGwpYYdivJn/mIXCJlX0t52JgD vi2YimeA60RtQpw14XvYOhB81l3adi8aQhQrXH3mowlk4ANIQLP1Bwv0 lx04wQ==",
                "DNSKEY 7 2 86400 20260815030104 20260808020104 42827 gao.gov. USbmyCQOLTe9oEcVqLkCkwnAz7rj1ef/w55v0lcefBuKkDNTyyxRiR7C 1AcWmIKzBM+aPdsjh7lRWc3vXwp1/GVFcMNmyiMBVOrFFj8Vi1KyPAeU YExjHspGq0iTuaa/PiAJaB1e9z7OFWRFHNnclNqMENLQCu8JfsfenBN4 nqA=",
                "SOA 7 2 86400 20260815030104 20260808020104 42827 gao.gov. JoPZOnPy0+fMTuY6SHVTsS7tfwwLfRx9FeHNrNJqQDEd3G1M7fZje0Od kXV7Xjha5XR6Re4IriWzMGRF2HCYpWa5uV8ksHH2EoW4CqoGDUjxJKxU /d0SH5l9fiI528b0dnWYWB/ZtBt7Q4JXTn1lxoinTi1uQXJxlrmQA+LP 0yo=",
                "DS 13 2 3600 20260810035449 20260808015449 35496 gov. PeOTadte8F+xPT/E4MwTZWUTVbSsfUcCWVLGvdl1RDSz/NxZLnCRqFCu gCxS/NUbBPjGrPWVwZTLwXGlTR4R4w==",
                "NSEC3PARAM 7 2 86400 20260815030104 20260808020104 42827 gao.gov. EDC5iBIgXI1b3JmSJ6f08mVXK5vZAMJaOyatsPEggt5AeO1ROESm5vbz 2BKy6b+jTZLLgE5gwRiY8GloGMBnc01ZOdAOIRzFfKpwzzUjVD583jSA P5KJbf1P4X7xoLVzyQsEJXWxVlikw6zTaeSbQibjYftBNDLHoUlfnQlZ FXY="
            ],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "52.72.207.206"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 mx a:websurveys.gao.gov a:listserv.gao.gov include:spf-0030d401.pphosted.com include:_spf.qualtrics.com include:spf.protection.outlook.com include:spfa.gao.gov -all",
        "dmarc": "v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:DmarcDkimReports@gao.gov; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com",
        "dkim_selector": "x",
        "dkim_host": "",
        "dkim": "",
        "spf_analysis": {
            "valid": true,
            "lookups": 7,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "reject"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "ec2-52-72-207-206.compute-1.amazonaws.com",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "52.72.207.206"
                    ],
                    "time_ms": 73.79
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "52.72.207.206"
                    ],
                    "time_ms": 155.04
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "52.72.207.206"
                    ],
                    "time_ms": 76.75
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "52.72.207.206"
                    ],
                    "time_ms": 49.4
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "52.72.207.206"
                    ],
                    "time_ms": 53.23
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "Sectigo Limited",
        "subject": "*.gao.gov",
        "valid_from": "2026-01-22T18:00:00-06:00",
        "valid_to": "2027-01-23T17:59:59-06:00",
        "days_remaining": 167,
        "san": [
            "*.gao.gov",
            "gao.gov"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_256_GCM_SHA384"
    },
    "http": {
        "url": "https://www.gao.gov/",
        "status": "HTTP/2 403 ",
        "http_version": "3",
        "headers": {
            "date": "Sun, 09 Aug 2026 02:54:53 GMT",
            "server": "Apache",
            "location": "https://www.gao.gov/",
            "content-type": "text/html",
            "mime-version": "1.0",
            "content-length": "363",
            "cache-control": "max-age=0",
            "expires": "Sun, 09 Aug 2026 02:54:53 GMT",
            "strict-transport-security": "max-age=15768000",
            "x-n": "S"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": false,
            "x-content-type-options": false,
            "x-frame-options": false,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "Apache",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.gao.gov/",
        "title": "U.S. Government Accountability Office (U.S. GAO)",
        "description": "GAO provides fact-based, nonpartisan information to Congress. Often called the \"congressional watchdog,\" GAO investigates federal spending and performance.",
        "success": true,
        "error": "",
        "status": 206
    },
    "network": {
        "52.72.207.206": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "mxa-0030d401.gslb.pphosted.com",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 29.2,
                "banner": "",
                "error": "Connection refused"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 21.5,
                "banner": "",
                "error": "Connection refused"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 21.5,
                "banner": "",
                "error": "Connection refused"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 86.42
}