{
    "ok": true,
    "domain": "health.mil",
    "generated_at": "2026-08-10T19:19:44-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 84,
        "label": "Good",
        "categories": {
            "dns": 90,
            "mail": 90,
            "security": 73,
            "network": 50,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "8 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "3 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "129 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 8,
                "lost_points": 27,
                "detail": "2 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: www.gulflink.fhpr.osd.mil"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/1.1 200 OK"
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "8 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "3 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "129 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "2 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 8,
                "lost_points": 27
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: www.gulflink.fhpr.osd.mil",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/1.1 200 OK",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "214.10.40.15"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "30 pri-nipr.eemsg.mail.mil.",
                "10 pri-jeemsg.eemsg.mail.mil.",
                "20 sec-jeemsg.eemsg.mail.mil."
            ],
            "TXT": [
                "\"identrust_validation=PeS6G8fTF0Br4iW+CxIxmFBzVZmFaCMOoN55z/oquck8\"",
                "\"NSoaeIdxKUIZaz8toel9IYH70pyRrCQMB4Wz+KgGTeCH\"",
                "\"3BWyHURTva2sSm4cnfCKD2l0hEXa5cRF3TGrqmmHagzi\"",
                "\"identrust_validation=MgViEyGcquS2rjQsAo+1nHCtGN8oIGgYNZx+kleoYGDQ\"",
                "\"MS=ms54074576\"",
                "\"identrust_validation=gGyMMLAwu3qdg6KbOaGa0ai4Iwix1R8wLKLSAKAsju5K\"",
                "\"identrust_validation=aTde6I5e0wpd8RgFMIyNo0RELk+UHnA14mj5KOAbU+AA\"",
                "\"v=spf1 include:_spf.eemsg.mail.mil -all\""
            ],
            "NS": [
                "ns01-sec-gw.health.mil.",
                "ns01-sea-gw.health.mil.",
                "ns01-ncr-gw.health.mil.",
                "ns01-ee-gw.health.mil.",
                "ns01-we-gw.health.mil.",
                "ns01-pac-gw.health.mil.",
                "ns01-cc-gw.health.mil.",
                "ns01-nwc-gw.health.mil."
            ],
            "SOA": [
                "ns01-nsoc.mhsi.health.mil. usn\\.jbcharleston\\.niwcatlanticsc\\.list\\.hsse-dnsad.health.mil. 22753571 10800 1080 2419200 420"
            ],
            "CAA": [
                "128 issue \"digicert.com\"",
                "128 issue \"identrust.com\"",
                "128 issue \"entrust.net\""
            ],
            "DS": [
                "23177 8 2 67FACD45E013051E6925CAD502A45DE637AF572E2C1815832B3C774B B95F0F9B",
                "23177 8 1 9D690F17148FA032D7B1D86562096E9997FA236E"
            ],
            "DNSKEY": [
                "256 3 8 AwEAAd+je5zVWT3z0FkbbiqQ64P+Vtd3ruquo0Tk763vRx91F1ALdTdG mwEKovvAuArnKPAZUr81gQJSE90pTXyxsQa+n2oBq4OvYAKpraJmSW03 V9HmbxXfG3OA0Fu4VxInB5RwDebgz+lU14/RQUxRoC2gyIO58Q6ePJP2 q+5XpPRRjEf6P1LcUx3yiMH83WKpImBm17BL6/Pwg/IPVFfjEfaEtoCg reTcYghg/qTtdAjbvj+s3uwyiCufoNVkmBZricREn4RRMzCxkAIBNAWL BwA8LtfQhcmgnK8uEry6jT/86RthAb0y8Xk9izHSdAym9tU8I0u8k+TB gb8Wwdji3vE=",
                "256 3 8 AwEAAerAvl2Y4EgL8YvuihaKs1strUYBXT3X46nbgql455CvLHwqOdBl 83LdIoukN+kwDlcGYH8+QUIsEK4wRzR7f4aW9fZ8RB1yAPyv1QILi2sB WwpfXNogBuPZBcoctcQTibYkoeEVwhglvf7O7gsc0OyqpgiaQXYROA0C H/gNCz35gnXTsFKK6TCbhuhBbsiEB3Sat/Cue1hpdQ4rgwKsFnlM7akC vYlagRw03FYtObiAgJl9fWXX7DprV/BjLgisPlxpXzVWPVbkyUgxo9Ti mmZOxtiLs6DdwsYDt1RzlJGyz5iaRH3cyowicbmqcTe61zPKig9Mok5a oVCHDyjehVs=",
                "256 3 8 AwEAAd5DS66LsK3xSWe14uwzsDQOc3L9nYnXfyPKYqkK8M/NwoRKMtSo IctLRQPmsvNts/I+UqaOTL/0m1Dg0Ohe+I/xkw+W7Y3gGd3k7uanni55 OdNgqOjwdYBFXH7jJIInRYAXflsMIkWmJ5jGLZp6WqiR46XhkFqaS/lR wlcmCVzIGRFIv8OVB/X49tPqkWiilgBDer8fFa1mcw5iLpur1HMbEvRe p8ELtIzTc8lgM+dUYTDMiI7YZB0rDAOnl0et/BrXoUqpy9hroxL2zih/ f38D36SXlCo9pvUEcnjGNzWzMJ0dKaRPhvzwI27ZUxl3EwwmFhjJ4Tne UEJD/tZnvgE=",
                "257 3 8 AwEAAae/iU7CziG+PSe0EwM8ApvowWvYPYTgtr6vHLBWSR5NgqG2GH8t Lf3rsYfrZ8u7uS1s9FkGhfo2IM4Hv3ya3HhF7X561G6mCEZ1jsQXQJK6 WJy/NQVhJjqNsukAiR6c12IazBWrGolVrrPhpVLgjeETrDba3NNVf8tV hNEEWAJ53CVr8MQ/mSEvIyiCGeJWCBvJBDMV63x854Nc2NHfIr43JlXr yGzhg/bu1khurHLGYOEqPwmmrC0b3P/dJhp5Gn02tJ2pyulwuq80r620 AWDVEpKuzFhoWahw6T9XZCAMjcxklA+lOvJEIIg8Jw96F9a2r2G9/HlE uVtSj9IDlFE="
            ],
            "RRSIG": [
                "TXT 8 2 900 20260814171854 20260810164727 10924 health.mil. v4W/b4FYEv8KxokBtJnBTyQWWtzr27DX5/l7kii+JTnpNi5ltRUhyaHB juFamNWN0xjtkyidNDTIAuDtXvnWrcLG+jfIYf5895yaPNWFEdGjQ8j5 RJmCfz+MsvjYdrIvRgxhQm53aAB3FGt6xfdJB7JXe5uWyucuMvJCi+eQ 7WjxokBVCRCCNFH6wGFITcAI3tGQ/RSeQDyYSD2XJAAL8rwaOaCcJDWN AJHboVm9sUHvrZ64GMFVEWESgam46/dVhft0nTTsbYO8renjwiqCM1ni Ue7+uV5887K7LVTeJ0Vb7ZskeaV1CyO2ZDy4Lj1CNDCKkKpp34PT/gxj CSIKgg==",
                "MX 8 2 900 20260814171854 20260810164727 10924 health.mil. 3Mc/tM5E6pw0lgSU4kF7lQhzmJiw/dHibq4Jv7l/SI6vwwz2Hlnc4MbI t+pzY2fXGX5wyPHTfZZ3jJ1zmlD8ts6i0XhD+1/7aKg8//5ytlysaotM q954e51/NX4vHBzH8HCsQGheNtVbqcsbxjqP/HElFVVtY36TeZ8k4Kwg bVOJgmCvkuAi+40Ow29fL9jCznZY5X3nvZZlZezveJQ70foXMbJ8FT2V 5RXsX/cP4+Q1N52sfzPvFFl3s/V8crTzm9C4yIOXVWqclsBz0n+OwdMm pIdxftURWgJKLpoTVUNaDJOH5YlqZkbho2VL2t0P1JZfddv8vYK0hkBv gX5R8Q==",
                "DS 8 2 10800 20260817113015 20260810113015 43458 mil. BN2ZqNn96ew0WGRMWCsL4ukoG5MDp0eWbHItBRqqmIUVFLTadT6QisMx knZexqkM7Z3NSvmlERot8On3py4PmJIZmuOFoRWDbMmvQvUPldXDhOy2 ZBQqu+bKTa8onifOPTDjEayHq8Gv+IvtDZduFA8DENgWLAqzSCJXEWWz ANk="
            ],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "214.10.40.15"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 include:_spf.eemsg.mail.mil -all",
        "dmarc": "v=DMARC1; p=reject; sp=reject; rua=mailto:dmarc_reports@mail.mil",
        "dkim_selector": "selector1",
        "dkim_host": "selector1._domainkey.health.mil",
        "dkim": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJjK2nzLMPwPYLZmu/1umBd0KKBibVx5YXKFXsGTFBs3TFY/EWc7YIh0FXuRpDaDWdZZrK2qJpekVOct6hUwHX48WbcgofhdhSh794AiyLEewf6Uf2pytsPnZ945FMM3uPx+2kTp2OgBZcsAl4bsEQtafXmjObaNA0RtqAteZ9pdo7dJsIq0F5q653X23dTlL9avM5v3aASLv1PHQ2GodHdtJPWgmrkBgCR+kUrInujmsZwJ03pXaqH38hDVyzO1HaEZnhzDHUqKB7fmVeEkLZiL95/7SBF1ggQj/YUpwIw3Vx2brGl1F0atywBFffGHDVWrwWUs1u70pq7RPojM9QIDAQAB;",
        "spf_analysis": {
            "valid": true,
            "lookups": 1,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "reject"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "www.gulflink.fhpr.osd.mil",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "214.10.40.15"
                    ],
                    "time_ms": 66.61
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "214.10.40.15"
                    ],
                    "time_ms": 165.54
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "214.10.40.15"
                    ],
                    "time_ms": 47.22
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "214.10.40.15"
                    ],
                    "time_ms": 57.05
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "214.10.40.15"
                    ],
                    "time_ms": 273.42
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "DigiCert Inc",
        "subject": "*.health.mil",
        "valid_from": "2026-01-19T18:00:00-06:00",
        "valid_to": "2026-12-18T17:59:59-06:00",
        "days_remaining": 129,
        "san": [
            "*.health.mil",
            "health.mil",
            "tricare.mil",
            "www.tricare.mil",
            "cms.tricare.mil",
            "gulflink.osd.mil",
            "www.gulflink.osd.mil",
            "gulflink.fhpr.osd.mil",
            "www.gulflink.fhpr.osd.mil",
            "gulflink.health.mil",
            "www.gulflink.health.mil",
            "www.mobile.health.mil"
        ],
        "protocol": "TLSv1.2",
        "cipher": "ECDHE-RSA-AES256-GCM-SHA384"
    },
    "http": {
        "url": "https://health.mil/",
        "status": "HTTP/1.1 200 OK",
        "http_version": "2",
        "headers": {
            "cache-control": "no-cache, no-store",
            "pragma": "no-cache",
            "content-length": "223667",
            "content-type": "text/html; charset=utf-8",
            "expires": "-1",
            "set-cookie": "TS01ca9927=01dfa15f2da50b7b16029b3650258b3dfc044dd1a0d280deea4b1efca989f271936f06c50d8ce11d57073ba96838771305365971cad5071a242f928fd99735d4737a112462ca70458c6232622ddb91737272a2f65c2e2ecf1d2ef65831821851fb47a142b2; Path=/; Domain=.health.mil",
            "accept-ch": "Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness",
            "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
            "x-frame-options": "DENY",
            "date": "Tue, 11 Aug 2026 00:19:43 GMT"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": false,
            "x-content-type-options": false,
            "x-frame-options": true,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://health.mil/",
        "title": "MHS Home | Health.mil",
        "description": "The Health.mil is the official website of the Military Health System. The Military Health System is one of America’s largest and most complex health care institutions, and the world’s preeminent military health care delivery operation. Our MHS saves lives on the battlefield, combats infectious disease around the world, and is responsible for providing health services to approximately 9.5 million beneficiaries, composed of uniformed service members, military retirees, and family members.",
        "success": true,
        "error": "",
        "status": 200
    },
    "network": {
        "214.10.40.15": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "pri-nipr.eemsg.mail.mil",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 97.7,
                "banner": "",
                "error": "php_network_getaddresses: getaddrinfo failed: Name or service not known"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 3.1,
                "banner": "",
                "error": "php_network_getaddresses: getaddrinfo failed: Name or service not known"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 2.6,
                "banner": "",
                "error": "php_network_getaddresses: getaddrinfo failed: Name or service not known"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 132.62
}