{ "ok": true, "domain": "harvard.edu", "generated_at": "2026-08-08T17:12:42-05:00", "cache": { "hit": true, "ttl": 0 }, "score": { "total": 77, "label": "Good", "categories": { "dns": 85, "mail": 90, "security": 65, "network": 20, "availability": 100 }, "category_weights": { "dns": 25, "mail": 20, "security": 25, "network": 10, "availability": 20 }, "items": [ { "category": "dns", "title": "IPv4 (A)", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "1 IPv4 address(es) detected." }, { "category": "dns", "title": "IPv6 (AAAA)", "max_points": 10, "earned_points": 0, "lost_points": 10, "detail": "0 IPv6 address(es) detected." }, { "category": "dns", "title": "Name server redundancy", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "6 NS record(s); 2 or more required." }, { "category": "dns", "title": "SOA record", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Authoritative zone record." }, { "category": "dns", "title": "DNSSEC chain", "max_points": 15, "earned_points": 15, "lost_points": 0, "detail": "DS and DNSKEY detected." }, { "category": "dns", "title": "CAA policy", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Certificate authority restriction." }, { "category": "dns", "title": "DNS propagation", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Agreement between public resolvers." }, { "category": "mail", "title": "MX records", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "2 MX record(s)." }, { "category": "mail", "title": "SPF", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "SPF policy published." }, { "category": "mail", "title": "DMARC", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "DMARC policy published." }, { "category": "mail", "title": "DKIM", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "A DKIM selector was verified." }, { "category": "mail", "title": "MTA-STS", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Mail transport policy." }, { "category": "mail", "title": "TLS-RPT", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "TLS reporting policy." }, { "category": "security", "title": "Valid TLS certificate", "max_points": 55, "earned_points": 55, "lost_points": 0, "detail": "60 day(s) remaining." }, { "category": "security", "title": "Certificate lifetime", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Full points require at least 30 days remaining." }, { "category": "security", "title": "HTTP security headers", "max_points": 35, "earned_points": 0, "lost_points": 35, "detail": "0 of 9 evaluated headers detected." }, { "category": "network", "title": "PTR reverse DNS", "max_points": 30, "earned_points": 0, "lost_points": 30, "detail": "PTR not detected." }, { "category": "network", "title": "IPv4 diversity", "max_points": 35, "earned_points": 20, "lost_points": 15, "detail": "Two or more IPv4 addresses receive full points." }, { "category": "network", "title": "IPv6 connectivity", "max_points": 35, "earned_points": 0, "lost_points": 35, "detail": "AAAA availability." }, { "category": "availability", "title": "DNS resolution", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "At least one address family must resolve." }, { "category": "availability", "title": "HTTP response", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "HTTP/2 200 " }, { "category": "availability", "title": "HTTPS final URL", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "Final URL uses HTTPS." } ], "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.", "diagnostics": [ { "level": "ok", "title": "IPv4 (A)", "detail": "1 IPv4 address(es) detected.", "category": "dns", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "error", "title": "IPv6 (AAAA)", "detail": "0 IPv6 address(es) detected.", "category": "dns", "max_points": 10, "earned_points": 0, "lost_points": 10 }, { "level": "ok", "title": "Name server redundancy", "detail": "6 NS record(s); 2 or more required.", "category": "dns", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SOA record", "detail": "Authoritative zone record.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "DNSSEC chain", "detail": "DS and DNSKEY detected.", "category": "dns", "max_points": 15, "earned_points": 15, "lost_points": 0 }, { "level": "error", "title": "CAA policy", "detail": "Certificate authority restriction.", "category": "dns", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "DNS propagation", "detail": "Agreement between public resolvers.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "MX records", "detail": "2 MX record(s).", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SPF", "detail": "SPF policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DMARC", "detail": "DMARC policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DKIM", "detail": "A DKIM selector was verified.", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "error", "title": "MTA-STS", "detail": "Mail transport policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "TLS-RPT", "detail": "TLS reporting policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "Valid TLS certificate", "detail": "60 day(s) remaining.", "category": "security", "max_points": 55, "earned_points": 55, "lost_points": 0 }, { "level": "ok", "title": "Certificate lifetime", "detail": "Full points require at least 30 days remaining.", "category": "security", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "error", "title": "HTTP security headers", "detail": "0 of 9 evaluated headers detected.", "category": "security", "max_points": 35, "earned_points": 0, "lost_points": 35 }, { "level": "error", "title": "PTR reverse DNS", "detail": "PTR not detected.", "category": "network", "max_points": 30, "earned_points": 0, "lost_points": 30 }, { "level": "warning", "title": "IPv4 diversity", "detail": "Two or more IPv4 addresses receive full points.", "category": "network", "max_points": 35, "earned_points": 20, "lost_points": 15 }, { "level": "error", "title": "IPv6 connectivity", "detail": "AAAA availability.", "category": "network", "max_points": 35, "earned_points": 0, "lost_points": 35 }, { "level": "ok", "title": "DNS resolution", "detail": "At least one address family must resolve.", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTP response", "detail": "HTTP/2 200 ", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTPS final URL", "detail": "Final URL uses HTTPS.", "category": "availability", "max_points": 20, "earned_points": 20, "lost_points": 0 } ] }, "dns": { "records": { "A": [ "192.0.66.20" ], "AAAA": [], "CNAME": [], "MX": [ "100 mx0b-00171101.pphosted.com.", "100 mx0a-00171101.pphosted.com." ], "TXT": [ "\"heroku-domain-verification=1qfmzz9vp3kexf4fr5zuliwvpieih2ffz4gexo7tlh4\"", "\"anthropic-domain-verification-dprfjc=K9LyiFV7zLafnNLNO4lFjyaRx\"", "\"globalsign-domain-verification=1DDF777ED1ADF45E5FFAFFAAD6774180\"", "\"airtable-verification=b25f432db3cbc5bfc481914364b6ce41\"", "\"globalsign-domain-verification=1C94E0FFAAE95796F597427644D90C03\"", "\"globalsign-domain-verification=9ff12eafbeebb02a0f2b0383aef9d1fa\"", "\"geneious.com:domain-verification=1781B6exIEsRBzJ0KzPtKg\"", "\"status-page-domain-verification=p83gt91wpxms\"", "\"adobe-idp-site-verification=66e813947c764d98330002232f383a68df8ad609065abb9482f3805dd2a1902c\"", "\"google-site-verification=NEWpTHNZnWRWN3trkIMeFbuPVG3ExwOXUHlC9aJ2sks\"", "\"google-site-verification=DZTZhbBaYJ6AO5j-tHFYBdkwryNywFh2gMUeg3SRDSg\"", "\"google-site-verification=lY-T8NneGQX1RGXeaoBJjSmT_lx3dLRKDq1xY44ZI5w\"", "\"Peh2GHoW8uiAzwS9tTZKlGBn9cMq6Y+XUFtrqmLtqFh1WvloPkzGczPsZcSdDfin4hZ7QiL9J7SM8yr7Yyzi8w==\"", "\"MS=ms35192554\"", "\"status-page-domain-verification=b4j4g69th3vv\"", "\"globalsign-domain-verification=5A1F4E0081852ECB9015E837384121AD\"", "\"fastly-domain-delgation-vdnblsdg768nm-21052021\"", "\"_51a79b140kb1cu9o67nzuefyhhxthv9\"", "\"ciscocidomainverification=41ce9827e3fbbca9ce75d5dbb5a6bc7b089dc4e239c1b56ba828216d1214480\"", "\"google-site-verification=xqg8LPF_v_QMEIST789q8xhRDqUEX4_8lQjAvV6YykY\"", "\"anthropic-domain-verification-gy5zhc=zmrGT2kyyc2HlnUn6f0utkQB6\"", "\"google-site-verification=xXWxVElKH8ek_eW45CbAqVSMTQgAqLYUNQUrWpOmkrY\"", "\"xIGeuA0e5B1BOjTE4IBO806ziFX9G1m2dVJ8zO7CMkmKwZ6MEkMXC0P7n5SRCGOdS9jbceH/7gKYgD4h9FBGKA==\"", "\"globalsign-domain-verification=dcc2e5d0d67efc32044ae679c7cf19e6\"", "\"openai-domain-verification=dv-e8vYSnmmPbWxpNte1iIKgvOO\"", "\"airtable-verification=8b8110e9283dd87d57b3c5f2f5af2db1\"", "\"smartsheet-site-validation=jfLh_IkQNJXuKKpTn7RydwiiaAOLy4CR\"", "\"globalsign-domain-verification=B8359DCEFBCF837B95E2F82282E4297A\"", "\"atlassian-domain-verification=Z8oUd5brL6/RGUMCkxs4U0P/RyhpiNJEIVx9HXJLr3uqEQ1eDmTnj1eq1ObCgY1i\"", "\"_cwe6cxmi9tji7gazwtzipl4onpu23nv\"", "\"atlassian-domain-verification=ASRKBXyOafZgDCRWh1Ylv34hiOSMgAIoNXs8H57rR3aTkuOD5KwJfUN9G3f7Ah/H\"", "\"airtable-verification=a92cef30671587a4f6deb7951c1c3f1a\"", "\"pardot679353=f93ea3588d69483bf48dbf587511f51d43ddadaae52b8bac6856c8428559a06d\"", "\"pardot378242=7001579db574e062735763ba81b54da111abc31facf16bbfa653ab6b8a770988\"", "\"pardot962443=9098884472c5cb29a2e20700b41411cb4aa5ebcf340360e71b2cd8464d8864b6\"", "\"pardot679353=3cc5e124c5020a1e160f01981f45be33a467a1c802711e0e5654184ef56d18c9\"", "\"mgverify=45e7fcf3ed36156afa50e8dd90aa36e82af6f11b95e35537b03ecebd434b328a\"", "\"atlassian-domain-verification=OYfkFwspEELRW6A32BsDVWgvdz8/pLBxVcq7s/mHLBVGqRQRG58XA5LRtDAGpfA7\"", "\"pardot_378242_*=8b485d5cd9114869cff8f307da5fa9287434ebec11621d88c07ce97a7fee06e0\"", "\"openai-domain-verification=dv-5z82SztO32q9YBNgFooNBz5v\"", "\"v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:spf.mailjet.com ~all\"", "\"globalsign-domain-verification=87677a19ae97bfbeec25ff1510a80420\"", "\"google-site-verification=pWvLuNePLYxAbafZw2a95vnBhvcj12DzM9NulT9ujSY\"", "\"jAykGnWytyLeBseMa8x2/MBve6/yQqana4yrAc1ROoei7uZHUkM2FU0Xx4qI/rm+kOGdImZdoq0fdodgLEw1dg==\"", "\"globalsign-domain-verification=C44DEEAC45AB4DC2B5AD0B9B2E5D5803\"", "\"brevo-code:30d9f789747b4c124f72dabf24a0a97f\"", "\"google-site-verification=MmfJS0BjLRgcxrlj8kAyNdToKeAmj0fKb-lPOnd5Pmo\"", "\"google-site-verification=DzhZyP8pu0M1-RFghfTcSN-9poidboYRNdfn2Rf2hCQ\"" ], "NS": [ "a6-66.akam.net.", "a16-64.akam.net.", "a1-171.akam.net.", "a11-67.akam.net.", "a7-65.akam.net.", "a10-66.akam.net." ], "SOA": [ "a1-171.akam.net. netmanager.harvard.edu. 2023072381 10800 3600 2419200 3600" ], "CAA": [], "DS": [ "38415 13 2 29F5C3AB0130C273D4504938A111F02CA9342DD13C02E92B369537C5 A18020C1" ], "DNSKEY": [ "256 3 13 X1Im3OL/u59rIt0ucUM2pLvbw+JAxOtEv+qvqrhuWeZtIPw3jLOKCPq+ 6vC15do37vyFRUzvXR547Y5GSheXmw==", "257 3 13 EkKHwxdk/inZi8RzddPQHgHBjT2gv01pa7ayCsnJUqJE8VYfsBdz5ZLH 8oyUvHZ4s5d7FVaxivHoQBnkn85FTA==", "256 3 13 ccTsGqHsOuw6QWqXofWWdUZMDEUfLyKYnpudifvwPm5fpVQALWlT3oeD 86/iagr9hv2TU+3qO3yZYxnoPRfGmA==", "257 3 13 a5ZjwYY78ViZmOYnfzMADYRXW1V/qCOkYdhlPC083+8fmI7juCZXdZyI 69Vfa2Mv30uHenFjwotgitTGMXWvGw==" ], "RRSIG": [ "DNSKEY 13 2 7200 20260811134651 20260808124651 23262 harvard.edu. 6PH2VIHgh0vTwU9bZu0GBA61S9Q/y4sXwwyr9UwsL2zD5jHEwVohxduf 106YwLo6roJI0HgsBApwea8s+YdLqg==", "DNSKEY 13 2 7200 20260811134651 20260808124651 38415 harvard.edu. MZOT6SgN+/UhtGXM+KiAXcFo75WMxt++zHiGiFicFXRZXWcVzEK2GQ4r lv3nnd6XTwligZv1JihF9qIOP/L9fA==", "NS 13 2 300 20260811134651 20260808124651 48930 harvard.edu. 9Ch1FvkD0/4F/3+VdwrycC6qCIszv+HmyE3Dmi/aSGTRkxPJjCvB5O7u YPTe3bmRmTWPn2pBwJm19in9CCKMeQ==", "SOA 13 2 300 20260811134651 20260808124651 48930 harvard.edu. +r6ICf0yv5UG9e5JkHpN/NSq5JVy8OcVlmGzUgPpVKTFmpoGMud638Qm c5aE8TCDgfoGFPeOKuAlYXEnLqncHg==", "TXT 13 2 10800 20260811134651 20260808124651 48930 harvard.edu. HzjndaoW4Jc+tfoGx2QP8uSuGOsJXMJKCjsdCuJPGwL6fJWRjO8Y19pk JiIbHpTAnhtBjzRzogUk4EUdV004gw==", "MX 13 2 180 20260811134651 20260808124651 48930 harvard.edu. kEc+3ZjVp8fqgBwL+c1ansAuRX0JXCirm4Us3RU7um//D6wm30MCnIIE Vab0IAlWVt0eOYgIvrzTR9NhZOwySQ==", "DS 13 2 86400 20260812033229 20260805022229 6705 edu. vc2Jx7y4rZs6CnVsAM0Sch346qQ3hGfpciuDViwrSsFZLpg3KwMiDSLf y9bg0BsGj9+qLAHqR6SKvTqZPKbcPA==" ], "NSEC": [], "NSEC3": [], "SRV": [], "NAPTR": [], "TLSA": [], "SSHFP": [] }, "ipv4": [ "192.0.66.20" ], "ipv6": [] }, "mail": { "spf": "v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:spf.mailjet.com ~all", "dmarc": "v=DMARC1; p=quarantine; sp=none; pct=100; adkim=r; aspf=r; rua=mailto:dmarc_agg@vali.email", "dkim_selector": "default", "dkim_host": "default._domainkey.harvard.edu", "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDc2l1ozDhNKU/uIMrWwyD5sKFbyzHg8ZPEzcNTSccRFHdjCHCAds0izdKZtGYCPPoRK/0y3is2CYAdX9OcZrC78lvpSFMeDBMO+ZtBKfM763eDsXPeOOIj+ARzqQADtLkngU0pRoWib5VkwvHrdx8l/x68at4nbA8RzKp8Etc+hwIDAQAB", "spf_analysis": { "valid": true, "lookups": 2, "final": "~all", "message": "Within the estimated limit" }, "dmarc_analysis": { "valid": true, "policy": "quarantine" }, "bimi": "", "mta_sts": "", "tls_rpt": "" }, "advanced": { "ptr": "", "propagation": { "consistent": true, "results": [ { "provider": "Google", "server": "8.8.8.8", "result": [ "192.0.66.20" ], "time_ms": 59.25 }, { "provider": "Cloudflare", "server": "1.1.1.1", "result": [ "192.0.66.20" ], "time_ms": 65.57 }, { "provider": "Quad9", "server": "9.9.9.9", "result": [ "192.0.66.20" ], "time_ms": 83.72 }, { "provider": "OpenDNS", "server": "208.67.222.222", "result": [ "192.0.66.20" ], "time_ms": 51.63 }, { "provider": "AdGuard", "server": "94.140.14.14", "result": [ "192.0.66.20" ], "time_ms": 62.08 } ] } }, "ssl": { "available": true, "issuer": "Let's Encrypt", "subject": "harvard.edu", "valid_from": "2026-07-10T00:40:59-05:00", "valid_to": "2026-10-08T00:40:58-05:00", "days_remaining": 60, "san": [ "harvard.edu", "www.harvard.edu" ], "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256" }, "http": { "url": "https://www.harvard.edu/", "status": "HTTP/2 200 ", "http_version": "3", "headers": { "server": "nginx", "date": "Sat, 08 Aug 2026 22:12:42 GMT", "content-type": "text/html; charset=UTF-8", "location": "https://www.harvard.edu/", "x-rq": "mdw1 181 253 80", "x-cache": "HIT", "vary": "Accept-Encoding", "host-header": "a9130478a60e5f9135f765b23f26593b", "link": "; rel=shortlink", "accept-ranges": "bytes", "cache-control": "max-age=300, must-revalidate" }, "security_checks": { "strict-transport-security": false, "content-security-policy": false, "x-content-type-options": false, "x-frame-options": false, "referrer-policy": false, "permissions-policy": false, "cross-origin-opener-policy": false, "cross-origin-embedder-policy": false, "cross-origin-resource-policy": false }, "server": "nginx", "powered_by": "" }, "webpage": { "url": "https://www.harvard.edu/", "title": "Harvard University", "description": "Harvard University is devoted to excellence in teaching, learning, and research, and to developing leaders who make a difference globally.", "success": true, "error": "", "status": 200 }, "network": { "192.0.66.20": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" } }, "smtp": { "host": "mx0b-00171101.pphosted.com", "ports": [ { "port": 25, "open": false, "time_ms": 13.7, "banner": "", "error": "Connection refused" }, { "port": 465, "open": false, "time_ms": 21.4, "banner": "", "error": "Connection refused" }, { "port": 587, "open": false, "time_ms": 22.4, "banner": "", "error": "Connection refused" } ] }, "visitor": { "ip": "216.73.217.62", "reverse": "", "country": "", "country_code": "", "region": "", "city": "", "latitude": null, "longitude": null, "isp": "", "organization": "", "asn": "", "timezone": "", "browser": "Other", "os": "Other", "language": "", "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "is_bot": true, "cloudflare": false }, "analysis_time_ms": 102.51 }