{ "ok": true, "domain": "gsa.gov", "generated_at": "2026-08-09T00:22:10-05:00", "cache": { "hit": true, "ttl": 0 }, "score": { "total": 95, "label": "Excellent", "categories": { "dns": 100, "mail": 100, "security": 84, "network": 85, "availability": 100 }, "category_weights": { "dns": 25, "mail": 20, "security": 25, "network": 10, "availability": 20 }, "items": [ { "category": "dns", "title": "IPv4 (A)", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "1 IPv4 address(es) detected." }, { "category": "dns", "title": "IPv6 (AAAA)", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "1 IPv6 address(es) detected." }, { "category": "dns", "title": "Name server redundancy", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "5 NS record(s); 2 or more required." }, { "category": "dns", "title": "SOA record", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Authoritative zone record." }, { "category": "dns", "title": "DNSSEC chain", "max_points": 15, "earned_points": 15, "lost_points": 0, "detail": "DS and DNSKEY detected." }, { "category": "dns", "title": "CAA policy", "max_points": 5, "earned_points": 5, "lost_points": 0, "detail": "Certificate authority restriction." }, { "category": "dns", "title": "DNS propagation", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Agreement between public resolvers." }, { "category": "mail", "title": "MX records", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "5 MX record(s)." }, { "category": "mail", "title": "SPF", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "SPF policy published." }, { "category": "mail", "title": "DMARC", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "DMARC policy published." }, { "category": "mail", "title": "DKIM", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "A DKIM selector was verified." }, { "category": "mail", "title": "MTA-STS", "max_points": 5, "earned_points": 5, "lost_points": 0, "detail": "Mail transport policy." }, { "category": "mail", "title": "TLS-RPT", "max_points": 5, "earned_points": 5, "lost_points": 0, "detail": "TLS reporting policy." }, { "category": "security", "title": "Valid TLS certificate", "max_points": 55, "earned_points": 55, "lost_points": 0, "detail": "70 day(s) remaining." }, { "category": "security", "title": "Certificate lifetime", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Full points require at least 30 days remaining." }, { "category": "security", "title": "HTTP security headers", "max_points": 35, "earned_points": 19, "lost_points": 16, "detail": "5 of 9 evaluated headers detected." }, { "category": "network", "title": "PTR reverse DNS", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "PTR: ec2-23-22-13-113.compute-1.amazonaws.com" }, { "category": "network", "title": "IPv4 diversity", "max_points": 35, "earned_points": 20, "lost_points": 15, "detail": "Two or more IPv4 addresses receive full points." }, { "category": "network", "title": "IPv6 connectivity", "max_points": 35, "earned_points": 35, "lost_points": 0, "detail": "AAAA availability." }, { "category": "availability", "title": "DNS resolution", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "At least one address family must resolve." }, { "category": "availability", "title": "HTTP response", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "HTTP/2 200 " }, { "category": "availability", "title": "HTTPS final URL", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "Final URL uses HTTPS." } ], "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.", "diagnostics": [ { "level": "ok", "title": "IPv4 (A)", "detail": "1 IPv4 address(es) detected.", "category": "dns", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "ok", "title": "IPv6 (AAAA)", "detail": "1 IPv6 address(es) detected.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "Name server redundancy", "detail": "5 NS record(s); 2 or more required.", "category": "dns", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SOA record", "detail": "Authoritative zone record.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "DNSSEC chain", "detail": "DS and DNSKEY detected.", "category": "dns", "max_points": 15, "earned_points": 15, "lost_points": 0 }, { "level": "ok", "title": "CAA policy", "detail": "Certificate authority restriction.", "category": "dns", "max_points": 5, "earned_points": 5, "lost_points": 0 }, { "level": "ok", "title": "DNS propagation", "detail": "Agreement between public resolvers.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "MX records", "detail": "5 MX record(s).", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SPF", "detail": "SPF policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DMARC", "detail": "DMARC policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DKIM", "detail": "A DKIM selector was verified.", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "MTA-STS", "detail": "Mail transport policy.", "category": "mail", "max_points": 5, "earned_points": 5, "lost_points": 0 }, { "level": "ok", "title": "TLS-RPT", "detail": "TLS reporting policy.", "category": "mail", "max_points": 5, "earned_points": 5, "lost_points": 0 }, { "level": "ok", "title": "Valid TLS certificate", "detail": "70 day(s) remaining.", "category": "security", "max_points": 55, "earned_points": 55, "lost_points": 0 }, { "level": "ok", "title": "Certificate lifetime", "detail": "Full points require at least 30 days remaining.", "category": "security", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "warning", "title": "HTTP security headers", "detail": "5 of 9 evaluated headers detected.", "category": "security", "max_points": 35, "earned_points": 19, "lost_points": 16 }, { "level": "ok", "title": "PTR reverse DNS", "detail": "PTR: ec2-23-22-13-113.compute-1.amazonaws.com", "category": "network", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "warning", "title": "IPv4 diversity", "detail": "Two or more IPv4 addresses receive full points.", "category": "network", "max_points": 35, "earned_points": 20, "lost_points": 15 }, { "level": "ok", "title": "IPv6 connectivity", "detail": "AAAA availability.", "category": "network", "max_points": 35, "earned_points": 35, "lost_points": 0 }, { "level": "ok", "title": "DNS resolution", "detail": "At least one address family must resolve.", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTP response", "detail": "HTTP/2 200 ", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTPS final URL", "detail": "Final URL uses HTTPS.", "category": "availability", "max_points": 20, "earned_points": 20, "lost_points": 0 } ] }, "dns": { "records": { "A": [ "23.22.13.113" ], "AAAA": [ "2600:1f18:f88:4313:6df7:f986:f915:78d6" ], "CNAME": [], "MX": [ "5 alt2.aspmx.l.google.com.", "5 alt1.aspmx.l.google.com.", "10 alt4.aspmx.l.google.com.", "1 aspmx.l.google.com.", "10 alt3.aspmx.l.google.com." ], "TXT": [ "\"amazonses:nvZjWRLWNEaQIGC6ol8XEJa7lrt7INEu2jUWId7r0J8=\"", "\"docusign=6f6dab46-2129-4700-bcc2-4be235fe5aff\"", "\"google-site-verification=fyO5fRlizCOUL6drs0QADUV1J8JHq09DYpoUVMXu5VI\"", "\"webexdomainverification.7Q711=c9959908-c26f-4865-8fc7-1792b83294ab\"", "\"smartsheet-gov-site-validation=n83lQJsr87UvaVx95hZfV7JDrREq891h\"", "\"google-site-verification=VcCceMeA2ZU7w_aEbQxO6sRlhMMgjjkULRiYjMO_IkY\"", "\"MS=ms26706564\"", "\"mongodb-site-verification=EqZXwkmCFUWN8QEautFYXdCqXV6HH3Ox\"", "\"v=spf1 include:spf_a0.gsa.gov include:spf_a1.gsa.gov include:spf_a2.gsa.gov include:spf_a3.gsa.gov ~all\"", "\"google-site-verification=hCDz_TYLNfL0TB3q_SoYaXaHl6TlJdbXfYQyAItdDBE\"", "\"_4pfesgfj8b7lm7k40p5oy1y9c8s88fa\"", "\"docker-verification=b87e77d3-0821-4993-87f8-2dad0f313ed3\"", "\"apple-domain-verification=amOa5lUwKVdgvUFn\"", "\"amazonses:WroIovKkM+OAxfzL9xYOXM46pksrcS266o23tVoM86M=\"", "\"atlassian-sending-domain-verification=e954f878-7df6-4ee3-8ac9-ee19a1c2313b\"", "\"airtable-verification=e6bb1631f52c503b7a3701046ed7af9b\"", "\"docusign=72fc694f-0f63-46e4-b089-e0c8171c4139\"", "\"MS=ms26417977\"", "\"MS=ms74458519\"", "\"d3nv1z3w6h7vef.cloudfront.net\"", "\"google-site-verification=-Yfs3oCZ4rPr5BMX8tRANSV7anmxMrHQdjVTsXEs3hI\"", "\"atlassian-domain-verification=mCilJyOCl8iDKRaaRyLEWIDAFdy9cbTRnpIZHoYyHGHDPfFNo1alS/h5VVt63UaW\"", "\"figma-domain-verification=92ef70a8bfe22d77050cd6d3a3fb0671e21c82984fb63729f6b9498ebae94524-1727453243\"", "\"amazonses:VpDldJ0Y17bUz5N4BLA9tuxzm/5CaAJjTwSrhS/1yiE=\"", "\"mongodb-site-verification=CzhLKr4OAzreXpHBbawUlSmfDifmuWc1\"", "\"MS=ms52409976\"" ], "NS": [ "dns3.gsa.gov.", "dns5.gsa.gov.", "dns.gsa.gov.", "dns4.gsa.gov.", "dns2.gsa.gov." ], "SOA": [ "dns.gsa.gov. hostmaster.gsa.gov. 804870255 3600 180 1209600 3600" ], "CAA": [ "0 issue \"digicert.com\"", "0 iodef \"mailto:hostmaster@gsa.gov\"", "0 issue \"entrust.net\"", "0 issue \"comodoca.com\"", "0 issue \"globalsign.com\"", "0 issue \"amazon.com\"", "0 issue \"godaddy.com\"", "0 issuewild \"entrust.net\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com\"", "0 issuewild \"godaddy.com\"", "0 issue \"letsencrypt.org\"", "0 issuewild \"letsencrypt.org\"" ], "DS": [ "4820 8 2 3D5E27443991A170FA443C617DF2C661CF0977357B9B9216A907B494 4DBBB01F", "53326 8 2 662D40D27D7E6D1061EF101FE8E6A50FF56874B5699C91674E19EF82 D97F2A33" ], "DNSKEY": [ "257 3 8 AwEAAbquU2u0YuYxGCTb8y6/w6FJku1//tlTXKa3wOBAg0B1aAhoAdwE y8nAO8Wb36vmCFRRPxzGKHnBtMnObpPfLnA148rCgneZbbysgbM7Pphv Ggj4Iy6SK9k6qr/u7wCWzMmne4MCg4EH0FdJIFkv3HEgTxXnge64B2L6 JWcW6qkf", "256 3 8 AwEAAZjesbY+eAcDp0q9TJ7DXTK1pInHcsJMsQsUazo+5bKNsgWEPLd7 ML/fyZ9/pxt148XriNx5G8TAOuc+JkVUo8PS5RMl8QpsfFzW3lfNtC5A 2S0Jjj758nmbUvd8AgR8KfA+pb3/j5LiToC+1G2TcxelFLTvGUL7hR6/ 4JSa1ZQ5" ], "RRSIG": [ "NS 8 2 10800 20260903150412 20260804145912 23385 gsa.gov. QW9wiGc5LP/HxozDNnLHj2S+CWYv/2r2NYaI5EQS7Uto9IrwFo62RkCd 4UN/ishmSHxfjwGL6rNurCoUN6EbAHTZfS6kG1x0CkeFahdBY1SkSwDS UF1bqHN/CjBn20lrPyvU6IA97LBDpDhbDze7GNacnem0THsvosxsTKIk 4Ec=", "AAAA 8 2 10800 20260903150412 20260804145912 23385 gsa.gov. dwD0dMfFll77USb3bb2BUpNnqVaafp4BWnqEyCz6Ewq3jOARMk6QtGhW 3pyIAheyoHGljmbjDtzZsPduSvy2V1f4+pP2jCuAyotWUqBMFlWfrUcf M5TipeVNXaLRPdPfvTpy16J6G4Jpdi0M5NCnKMPDeeprI8/8nZ7dbLlU jbM=", "MX 8 2 10800 20260903150412 20260804145912 23385 gsa.gov. imh20R8AB3W2zyCCHFg3oqCYHe2X0JzQEUV1lRqB/POofVtmy7lotnPV Vccv9uhRpVWt5+TjQjeEIzcVF4Ih/g7yiK0oEQ1rn4VNljkSLS5211yd wUv6CuA6i+NaPa4lgblbCdGjiW23Rl4qvju89nNkXbF9rSf3esaxsomM mOA=", "CAA 8 2 10800 20260903150412 20260804145912 23385 gsa.gov. UB6fWWSCPBMHvMUvJT53XSiPZ/wVrpyHux9DDltHem4b8/7B8a9DNvP3 9ShVQHHZA0IQkUZpyA8D99de448CBk4U9Yb2u/kIPRAeObXTbJhXTip4 dZdrvi5rko1S4ZbrB2Tl5pgqfOQeMC5JWeG9A9alVZ+LJX+8nl5FkGym +2M=" ], "NSEC": [], "NSEC3": [], "SRV": [], "NAPTR": [], "TLSA": [], "SSHFP": [] }, "ipv4": [ "23.22.13.113" ], "ipv6": [ "2600:1f18:f88:4313:6df7:f986:f915:78d6" ] }, "mail": { "spf": "v=spf1 include:spf_a0.gsa.gov include:spf_a1.gsa.gov include:spf_a2.gsa.gov include:spf_a3.gsa.gov ~all", "dmarc": "v=DMARC1; p=reject; pct=100; fo=1; ri=86400; rua=mailto:dmarcreports@gsa.gov, mailto:reports@dmarc.cyber.dhs.gov; ruf=mailto:dmarcfailures@gsa.gov", "dkim_selector": "google", "dkim_host": "google._domainkey.gsa.gov", "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCF7m8WvS+emHfY72RC2JyW5EHTXwEeEMj52xFx5qX0HVhMBQ0RP1qDNKvb4UeKcbSxV9H5OnWpGxIvnNx1lL89aC7rmlhdZ/Bqh7PfMXYLNF0SfPssKusQxmopMBxiUZGeVxBScNuCNnBH3vzNJSsHeAdxxAR+8q1nMk/H5tek2QIDAQAB", "spf_analysis": { "valid": true, "lookups": 4, "final": "~all", "message": "Within the estimated limit" }, "dmarc_analysis": { "valid": true, "policy": "reject" }, "bimi": "", "mta_sts": "v=STSv1; id=7bfey8weo", "tls_rpt": "v=TLSRPTv1;rua=mailto:tls.reports@gsa.gov" }, "advanced": { "ptr": "ec2-23-22-13-113.compute-1.amazonaws.com", "propagation": { "consistent": true, "results": [ { "provider": "Google", "server": "8.8.8.8", "result": [ "23.22.13.113" ], "time_ms": 81.88 }, { "provider": "Cloudflare", "server": "1.1.1.1", "result": [ "23.22.13.113" ], "time_ms": 67.56 }, { "provider": "Quad9", "server": "9.9.9.9", "result": [ "23.22.13.113" ], "time_ms": 40.48 }, { "provider": "OpenDNS", "server": "208.67.222.222", "result": [ "23.22.13.113" ], "time_ms": 25.37 }, { "provider": "AdGuard", "server": "94.140.14.14", "result": [ "23.22.13.113" ], "time_ms": 109.09 } ] } }, "ssl": { "available": true, "issuer": "Let's Encrypt", "subject": "firstgov.gov", "valid_from": "2026-07-20T07:57:54-05:00", "valid_to": "2026-10-18T07:57:53-05:00", "days_remaining": 70, "san": [ "firstgov.gov", "forms.gov", "fpisc.gov", "gobiernousa.gov", "gsa.gov", "m.gsa.gov", "pbrb.gov", "permitting.gov", "usa.gov", "workplace.gsa.gov", "www.fpisc.gov" ], "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384" }, "http": { "url": "https://www.gsa.gov/", "status": "HTTP/2 200 ", "http_version": "3", "headers": { "date": "Sun, 09 Aug 2026 05:22:01 GMT", "content-type": "text/html; charset=UTF-8", "content-length": "188291", "location": "https://www.gsa.gov/", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "cache-control": "max-age=900, public, s-maxage=900, stale-if-error=86400, stale-while-revalidate=60", "link": "; rel=\"manifest\"", "content-language": "en", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "last-modified": "Sun, 09 Aug 2026 05:16:09 GMT", "etag": "\"1786252569\"", "x-cache-policy-source": "app", "referrer-policy": "no-referrer-when-downgrade", "permissions-policy": "geolocation=(self \"https://maps.googleapis.com\" \"https://www.google.com\"), microphone=(), camera=()", "x-drupal-cache": "HIT", "access-control-allow-origin": "*", "public-key-pins": "pin-sha256=\"1xL8YPVTZM6qofJqJj181/eAOOUQzgWi4Jw+gE8xQ8M=\"; max-age=3600;", "vary": "Accept-Encoding,Cookie", "x-cache": "Miss from cloudfront", "via": "1.1 548d9524429f0644c4aaa89a2a6aa54a.cloudfront.net (CloudFront)", "x-amz-cf-pop": "ORD58-P13", "x-amz-cf-id": "mLdP9ATBBFK_3SZyly3hu4daulggC7d0_xLCMoEqkq89-xw1zvmDuw==" }, "security_checks": { "strict-transport-security": true, "content-security-policy": false, "x-content-type-options": true, "x-frame-options": true, "referrer-policy": true, "permissions-policy": true, "cross-origin-opener-policy": false, "cross-origin-embedder-policy": false, "cross-origin-resource-policy": false }, "server": "", "powered_by": "" }, "webpage": { "url": "https://www.gsa.gov/", "title": "Home | GSA", "description": "Our mission is to deliver the best customer experience and value in real estate, acquisition, and technology services to government and the American people.", "success": true, "error": "", "status": 200 }, "network": { "23.22.13.113": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" } }, "smtp": { "host": "alt2.aspmx.l.google.com", "ports": [ { "port": 25, "open": false, "time_ms": 1.3, "banner": "", "error": "Network is unreachable" }, { "port": 465, "open": false, "time_ms": 4020.8, "banner": "", "error": "Connection timed out" }, { "port": 587, "open": false, "time_ms": 4010.4, "banner": "", "error": "Connection timed out" } ] }, "visitor": { "ip": "216.73.217.62", "reverse": "", "country": "", "country_code": "", "region": "", "city": "", "latitude": null, "longitude": null, "isp": "", "organization": "", "asn": "", "timezone": "", "browser": "Other", "os": "Other", "language": "", "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "is_bot": true, "cloudflare": false }, "analysis_time_ms": 121.65 }