{
    "ok": true,
    "domain": "healthcare.gov",
    "generated_at": "2026-08-09T01:08:11-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 82,
        "label": "Good",
        "categories": {
            "dns": 85,
            "mail": 70,
            "security": 73,
            "network": 85,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "2 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "6 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "2 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20,
                "detail": "No tested DKIM selector responded."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "134 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 8,
                "lost_points": 27,
                "detail": "2 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: a104-71-176-20.deploy.static.akamaitechnologies.com"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/2 200 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "IPv6 (AAAA)",
                "detail": "2 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "6 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "2 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "DKIM",
                "detail": "No tested DKIM selector responded.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "134 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "2 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 8,
                "lost_points": 27
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: a104-71-176-20.deploy.static.akamaitechnologies.com",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "ok",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/2 200 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "104.71.176.20"
            ],
            "AAAA": [
                "2600:141b:e800:c8a::1fc4",
                "2600:141b:e800:c90::1fc4"
            ],
            "CNAME": [],
            "MX": [
                "10 mx.public.govdelivery.com.",
                "30 mx2.public.govdelivery.com."
            ],
            "TXT": [
                "\"identrust_validate=EhnflVln8dA3U0x53+aBgaQJnuTkwzw3gSJaq0E8J+uH\"",
                "\"identrust_validate=teBw3oz4C86THnTKgiwdNtYyTDW4fvYPgXtmfjA+xUd2\"",
                "\"v=spf1 mx include:service.govdelivery.com ip4:158.72.139.19 ip4:158.70.144.146 ip4:198.21.2.165/32 ip4:199.15.212.120/32 ip4:172.26.243.105 ip4:172.26.243.106 ip4:172.26.243.107 ip4:10.0.5.14 ip4:11.0.5.15 ip4:11.0.5.16 ip4:172.26.251.105 ip4:172.26.251.1\" \"06 ip4:172.26.251.107 ip4:11.2.5.14 ip4:11.2.5.15 ip4:11.2.5.16 include:_netblocks.google.com include:_netblocks2.google.com include:_netblocks3.google.com -all\"",
                "\"google-site-verification=zBWx1uJ0dEqUCIn_xYxeRLm8gaUl9Wm9mOb_iTIuvxs\"",
                "\"identrust_validate=qD7B7lRZ9XcjGZXpHu3ypF6vM2vP8f7QvTvQVBWTDRPF\""
            ],
            "NS": [
                "a8-67.akam.net.",
                "a1-86.akam.net.",
                "a24-65.akam.net.",
                "a3-66.akam.net.",
                "a13-64.akam.net.",
                "a10-67.akam.net."
            ],
            "SOA": [
                "usw2.akam.net. hostmaster.akamai.com. 1559940514 300 30 604800 900"
            ],
            "CAA": [],
            "DS": [
                "15654 7 2 2E84A95691BB3BD8E84D748621039A2FA3E8DC58CC3E4F49C87911D2 E6903F92"
            ],
            "DNSKEY": [
                "256 3 7 AwEAAcp6bnkQOHoUmMZPmDcyffcDd010X899lKqRUiN6TpP+jyoP9Z/7 FmY9xXHcM4xyprozWqhJPFisULlj1oT2bhYgp3tm1x/4L1WAiVfQ05cQ IjorYg8SEbEMIv/kONpJ8ARY/zFJzx440l/WT4Uiqhz0OCdciRitFgSy Z2T5cGlh",
                "257 3 7 AwEAAYiSjpZJYr/2PejSybZpwv+SbYArl5cbSRhDXYnF0rSf98riKbr9 v+wVAxafQ8du/01UcPHx5NWOY/hl37wEswWYhCuh6nNqWIyfksezgddd xXsBJFAOB4SmLI5DHRrSHjjqsmL4i4687N2/4slHimmLd3JRkftXlIQj piydZK4PWv31kH+nzBDocSD7Y4OXbNVivgwhP0KeAGulscub3egNjyU6 n2K9g4c7aQkpQDwJwMaGqutOYQgieXHVJ4fomxhx6T3fRtWuQujdVkK9 1G8Y/E37uNbRAUpzPi2S87c6Vq7TMC2AHV+2/1tgaf1KpixhFlRwU7tR WqZsjOIfClk=",
                "256 3 7 AwEAAeGZsEEHKXV58JAKZmjv0lUZPU4CavZDp2RYx5ZgGYFFRIXomZw1 r2ID6RAj07rw0xwQjSjN8m0wvpv211zLoBjZp/glWfQSxXS8kYuBvQaz 3K9mY7x5+nf+y4QG7HG7L6636ISxrW91dMKeMX0PjMdmbFXLiQT48BJF CLrsFHWj",
                "257 3 7 AwEAAaM01WjqO1lXp1TDMNjNQwm+Wp0lfbZtOUd5oynCv8eozJSNc336 R3wX6AMhI5EZGwRPhPSll8NnN8tOVmXHUiyOrGjDfjvFqR2OaiggiOg7 vIORB8IBfsRSG81F/b2PhVrGnLnlrdK+2SJ4iBrf9ILu4vqRO/mNfjp+ +JmWADggl1bnMARhIDIJRWdkvaJK5y/Hrk/6xOpU6UvHQgkaW5aexXZk EWMPyVXSpUJ26W4QepB/CIojcDXIUK47LrD2k15v3F5EjjEi23MFryf+ /ywRuhfl4XLPvzcFZHwIVbSacx1AS5W0lb8fbB0gNNQG4L/Lck2Lxt2R qdFdYojYuw8="
            ],
            "RRSIG": [
                "NS 7 2 86400 20260812023854 20260809013854 48722 healthcare.gov. sw9Q5hc49WveJqXDYT4ibZ7DVvqWa3m7T4aael9B2F1T12Q5rG5qMJqH VHnrm4Bll9kr7P88wAnB/YAybrWlUQG4YqsjkPE+SnvbspQm9qv0yhps T5X5g13GykcIq7ZfU7c9xpdSusjz89A6lxXm3B0r79yyvHknZrcj68S7 eAs=",
                "MX 7 2 7200 20260812023854 20260809013854 48722 healthcare.gov. FN3E20ht8PJ9AkpX4urD1Z9AKkjggJNNJmrD69HzrU6F/tsZ2vAeQxdE uTPJNdTOw396a2k8bS/aD6hXLJKu+5Mkin7ZjMIJy9/m2+6RpFaQ9HDl OP9uoj4Ln/F1z7M1jFbHtjFTReCZuvlU1oIK1lhgjMBttSj3d1zG6DDL QXA=",
                "DS 13 2 3600 20260810070808 20260808050808 35496 gov. d4ZuqBHvYXbVlratxTmblmq4AO5ud0WZtpIstwFrNaCdpNLKpUKhQUwa mRbFkPgXnOPvwwdC2H6+OaIleCYotA=="
            ],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "104.71.176.20"
        ],
        "ipv6": [
            "2600:141b:e800:c8a::1fc4",
            "2600:141b:e800:c90::1fc4"
        ]
    },
    "mail": {
        "spf": "v=spf1 mx include:service.govdelivery.com ip4:158.72.139.19 ip4:158.70.144.146 ip4:198.21.2.165/32 ip4:199.15.212.120/32 ip4:172.26.243.105 ip4:172.26.243.106 ip4:172.26.243.107 ip4:10.0.5.14 ip4:11.0.5.15 ip4:11.0.5.16 ip4:172.26.251.105 ip4:172.26.251.106 ip4:172.26.251.107 ip4:11.2.5.14 ip4:11.2.5.15 ip4:11.2.5.16 include:_netblocks.google.com include:_netblocks2.google.com include:_netblocks3.google.com -all",
        "dmarc": "v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:8idhoybh@ag.us.dmarcian.com, mailto:reports@dmarc.cyber.dhs.gov; ruf=mailto:8idhoybh@fr.us.dmarcian.com;",
        "dkim_selector": "x",
        "dkim_host": "",
        "dkim": "",
        "spf_analysis": {
            "valid": true,
            "lookups": 5,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "reject"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "a104-71-176-20.deploy.static.akamaitechnologies.com",
        "propagation": {
            "consistent": false,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "23.61.44.119"
                    ],
                    "time_ms": 58.21
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "23.61.44.119"
                    ],
                    "time_ms": 51.04
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "23.34.108.162"
                    ],
                    "time_ms": 160.92
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "23.61.44.119"
                    ],
                    "time_ms": 26.16
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "184.31.219.254"
                    ],
                    "time_ms": 63.28
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "DigiCert Inc",
        "subject": "www.healthcare.gov",
        "valid_from": "2026-06-05T19:00:00-05:00",
        "valid_to": "2026-12-21T17:59:59-06:00",
        "days_remaining": 134,
        "san": [
            "www.healthcare.gov",
            "aca.api.healthcare.gov",
            "api.finder.healthcare.gov",
            "ayudalocal.cuidadodesalud.gov",
            "billing.healthcare.gov",
            "cciio.cms.gov",
            "companyprofiles.healthcare.gov",
            "cuidadodesalud.gov",
            "data.healthcare.gov",
            "developer.cms.gov",
            "downloads.cms.gov",
            "edit.data.healthcare.gov",
            "eidm.cms.gov",
            "elmo.portal.cms.gov",
            "finder.healthcare.gov",
            "geo.api.healthcare.gov",
            "go.healthcare.gov",
            "healthcare.gov",
            "hfpp.cms.gov",
            "localhelp.healthcare.gov",
            "login.healthcare.gov",
            "marketplace-int.api.healthcare.gov",
            "marketplace.api.healthcare.gov",
            "openpaymentsdata.cms.gov",
            "portal-beta.cms.gov",
            "portal-theta.cms.gov",
            "portal.cms.gov",
            "portalnextgen.cms.gov",
            "prodprime.cuidadodesalud.gov",
            "prodprime.healthcare.gov",
            "ratereview.healthcare.gov",
            "scclia.cms.gov",
            "signup.healthcare.gov",
            "status.healthcare.gov",
            "www.cciio.cms.gov",
            "www.cuidadodesalud.gov"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_256_GCM_SHA384"
    },
    "http": {
        "url": "https://www.healthcare.gov/",
        "status": "HTTP/2 200 ",
        "http_version": "3",
        "headers": {
            "content-length": "0",
            "location": "https://www.healthcare.gov/",
            "date": "Sun, 09 Aug 2026 06:08:11 GMT",
            "set-cookie": "bm_sz=6142DCDEF2F87EB7E094DDF504F43740~YAAQBhkhF+B2SK6fAQAAXs0i5QCspeTmk3gKnUQPSY2gXlHkoP09Yycr6vYCPNcGWY03iI4Kr2OiRA4Aqf5pGMBGOWauKX6SZdAdhFPZ0r9lJlzNu0NWXbDC5+e9jBvFVdZV6nyCYRqvCbPFjYMPGvzO3fF5exf08Nc0hft/OBCeGJG9/xKCaMGkMsjWeA8cRYTQCq5OchhD/0ikCJGWn1r+Ur8unZfsEYAydCX/uewrbWcDak7Tyw++K7tsFow65MuR4C0v+9SXkJ5oLkVGLxZiqXq8HebUEKTDCLcf0AChUhM44oznYI21dM8otvyM62rsOz2g+BZI/hx8oM3ylt29rbY5k5PCLGXLj7xr8eqFdovA7SsG6uObYd4=~3753538~4277555; Domain=.healthcare.gov; Path=/; Expires=Sun, 09 Aug 2026 10:08:11 GMT; Max-Age=14400",
            "cache-control": "max-age=0",
            "strict-transport-security": "max-age=31536000 ; includeSubDomains ; preload",
            "x-xss-protection": "1; mode=block",
            "x-permitted-cross-domain-policies": "master-only",
            "x-frame-options": "SAMEORIGIN",
            "akamai-grn": "0.06192117.1786255691.6581079a",
            "content-type": "text/html",
            "etag": "\"6d2cccd876e6e66b3cdf3470e7ae4da1:1786122105.687772\"",
            "last-modified": "Fri, 07 Aug 2026 17:01:33 GMT"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": false,
            "x-content-type-options": false,
            "x-frame-options": true,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.healthcare.gov/",
        "title": "Welcome to the Health Insurance Marketplace® | HealthCare.gov",
        "description": "Welcome to the Health Insurance Marketplace®. Official government website.",
        "success": true,
        "error": "",
        "status": 200
    },
    "network": {
        "104.71.176.20": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "mx.public.govdelivery.com",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 9.1,
                "banner": "",
                "error": "Connection refused"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 55.5,
                "banner": "",
                "error": "Connection refused"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 48.3,
                "banner": "",
                "error": "Connection refused"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 85.45
}