{
    "ok": true,
    "domain": "jwz.org",
    "generated_at": "2026-08-10T13:30:54-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 86,
        "label": "Good",
        "categories": {
            "dns": 85,
            "mail": 95,
            "security": 84,
            "network": 50,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "2 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "1 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "81 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 19,
                "lost_points": 16,
                "detail": "5 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: www.dnalounge.com"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/2 200 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "2 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "1 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "81 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "5 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 19,
                "lost_points": 16
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: www.dnalounge.com",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/2 200 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "3.16.178.106"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "5 mail.jwz.org."
            ],
            "TXT": [
                "\"google-site-verification=riXr4fhH9FzWQkub9EHMtrdhCXf0TFzXw_4M-_l2AIw\"",
                "\"v=spf1 redirect=dnalounge.com\"",
                "\"google-site-verification=F2c2Lq9Tgk-Bpoq8n4M0ojhNa3mhhfDtnStU6WeYYRE\""
            ],
            "NS": [
                "NS6.PAIRNIC.COM.",
                "NS5.PAIRNIC.COM."
            ],
            "SOA": [
                "ns5.pairnic.com. root.pair.com. 2026063061 3600 300 604800 3600"
            ],
            "CAA": [],
            "DS": [
                "15900 13 2 343441864E60D7FF2708F60E78C36D8ACE6F817C6A677FC86FDD2333 1350B32C",
                "6222 13 2 15AB6FBF63C9C6CC6EA1853ACF1AF80252F847103106C14DAF4C543E E31EA7DA",
                "39376 13 4 DC64E4CE1549B603E6D6377C920617E441964797EF4209E21E9F6ECC E203D4F116D99072BDFC8D3CFA8A4BAC1C35CF52",
                "39376 13 2 46FDC91388B09A12BC28D8D9651535556CE2D2A8B57D95902D6C49C5 5AF0207A"
            ],
            "DNSKEY": [
                "256 3 13 IN3ZmounZX1kT3OSF2iAm+IoUdNCxFyqk2CCxOVCoLlmW8874XEK/oNi Tdge8AVeIpi956PLqsJdwHKHH3rEbA==",
                "256 3 13 BR4aSuwccQiFwlycQNL1PcvnP9dayheljTbNtbEb04d0/8PLJBcZoXYW QDbYxQ6+s30QItEnl5w0HAOlFG7Beg==",
                "257 3 13 qf0PLb7rJnFV5447yErdP47DCsaK6TI2gFNJ+6hA8eQMSBP5RwOIWl4q bRecj2nJNGbhLCeHvctNIkQ5PmXK2g=="
            ],
            "RRSIG": [
                "SOA 13 2 3600 20260820000000 20260730000000 51688 jwz.org. WK/uYGXwANPV2K2GD2YMv3OM8o36YN5FMxLp+ahSWJCMcJCu10cZT6kQ ygmbPx46Wlj/NLPLA2KQskr3Q8Culg==",
                "NS 13 2 3600 20260820000000 20260730000000 51688 jwz.org. CyrGHSQB9N2qH6ALFNmKWC9MApZr08LhrY+aN5Fp+69+OOMcbbiQFHTA Vd2Hs8lWJC3epeTwwlHk4tr+cujKQw==",
                "TXT 13 2 3600 20260820000000 20260730000000 51688 jwz.org. lXv73ukTt0pFI7qY05+6RnUnEWE4jqyBd4KwjZ4z4t6Qbp4d9UvXidbP JUeQ7swwIYhEqsoOpiFRDhWFRNDWaw==",
                "DS 8 2 3600 20260830152406 20260809142406 44925 org. s0hPoV55W8zLCCbW+i1Zwb/Ht+DKWrs8Aln/tjH9yoa+vY2yC1a/mOBo 5QY7Obgy2wJjvrtLojKFRzECmXNcHS31yMOYSGxlxbwi42FbJV69al8n vWoQkQypGDkUoqKskoBpxdEILhLQCXOPZlMd3GE9i5xfbC/HTrRo1E/0 XIo="
            ],
            "NSEC": [
                "_amazonses.jwz.org. A NS SOA MX TXT RRSIG NSEC DNSKEY"
            ],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "3.16.178.106"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 redirect=dnalounge.com",
        "dmarc": "v=DMARC1; p=reject; rua=mailto:dmarc@jwz.org; fo=1",
        "dkim_selector": "mail",
        "dkim_host": "mail._domainkey.jwz.org",
        "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDvJCT2a2nQ/eVFZk06oNjjQVfVr1BWwkJJC73iPkCFw1yJr+1bJUJb+EqzjlghUccwXuWcjAiCaUUPaN4/ut3snNgy0xM4QavGc8o4m/hAUWFfegsg/EeSXTH0XSAga3KD15+hT+YtuE8x6cIoS/TJFV679RzYosWJAdxgpRTPfwIDAQAB",
        "spf_analysis": {
            "valid": true,
            "lookups": 1,
            "final": "",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "reject"
        },
        "bimi": "v=BIMI1; l=https://www.jwz.org/bimi.svg; a=;",
        "mta_sts": "",
        "tls_rpt": "v=TLSRPTv1;"
    },
    "advanced": {
        "ptr": "www.dnalounge.com",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "3.16.178.106"
                    ],
                    "time_ms": 60.53
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "3.16.178.106"
                    ],
                    "time_ms": 138.47
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "3.16.178.106"
                    ],
                    "time_ms": 122.07
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "3.16.178.106"
                    ],
                    "time_ms": 135.07
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "3.16.178.106"
                    ],
                    "time_ms": 652.81
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "Let's Encrypt",
        "subject": "jwz.org",
        "valid_from": "2026-08-02T06:06:41-05:00",
        "valid_to": "2026-10-31T06:06:40-05:00",
        "days_remaining": 81,
        "san": [
            "jwz.com",
            "jwz.net",
            "jwz.org",
            "www.jwz.com",
            "www.jwz.net",
            "www.jwz.org",
            "www2.jwz.org"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_256_GCM_SHA384"
    },
    "http": {
        "url": "https://www.jwz.org/",
        "status": "HTTP/2 200 ",
        "http_version": "3",
        "headers": {
            "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
            "permissions-policy": "interest-cohort=()",
            "location": "https://www.jwz.org/",
            "content-type": "text/html; charset=UTF-8",
            "date": "Mon, 10 Aug 2026 18:30:53 GMT",
            "server": "Mosaic Netsite Commerce Server/1.0.0 (Irix)",
            "last-modified": "Mon, 10 Aug 2026 01:00:05 GMT",
            "accept-ranges": "bytes",
            "content-length": "45934",
            "cache-control": "max-age=604800",
            "expires": "Mon, 17 Aug 2026 18:30:53 GMT",
            "vary": "Accept-Encoding",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "content-security-policy": "default-src * data: blob: 'unsafe-inline'"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": true,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": false,
            "permissions-policy": true,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "Mosaic Netsite Commerce Server/1.0.0 (Irix)",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.jwz.org/",
        "title": "jwz.org",
        "description": "Jamie Zawinski was one of the founders of Netscape and\n             Mozilla.org, was the primary developer of Lucid Emacs,\n             and wrote most of your screen savers.  Today he is the\n             proprietor of DNA Lounge, an all ages dance club and\n             live music venue in San Francisco.",
        "success": true,
        "error": "",
        "status": 206
    },
    "network": {
        "3.16.178.106": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "mail.jwz.org",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 18.8,
                "banner": "",
                "error": "Connection refused"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 12.7,
                "banner": "",
                "error": "No route to host"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 12.7,
                "banner": "220 www.dnalounge.com ESMTP mail.dnalounge.com",
                "error": "No connection"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 116.35
}