{ "ok": true, "domain": "kth.se", "generated_at": "2026-08-09T01:35:41-05:00", "cache": { "hit": true, "ttl": 0 }, "score": { "total": 91, "label": "Excellent", "categories": { "dns": 100, "mail": 90, "security": 76, "network": 85, "availability": 100 }, "category_weights": { "dns": 25, "mail": 20, "security": 25, "network": 10, "availability": 20 }, "items": [ { "category": "dns", "title": "IPv4 (A)", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "1 IPv4 address(es) detected." }, { "category": "dns", "title": "IPv6 (AAAA)", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "1 IPv6 address(es) detected." }, { "category": "dns", "title": "Name server redundancy", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "5 NS record(s); 2 or more required." }, { "category": "dns", "title": "SOA record", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Authoritative zone record." }, { "category": "dns", "title": "DNSSEC chain", "max_points": 15, "earned_points": 15, "lost_points": 0, "detail": "DS and DNSKEY detected." }, { "category": "dns", "title": "CAA policy", "max_points": 5, "earned_points": 5, "lost_points": 0, "detail": "Certificate authority restriction." }, { "category": "dns", "title": "DNS propagation", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Agreement between public resolvers." }, { "category": "mail", "title": "MX records", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "4 MX record(s)." }, { "category": "mail", "title": "SPF", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "SPF policy published." }, { "category": "mail", "title": "DMARC", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "DMARC policy published." }, { "category": "mail", "title": "DKIM", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "A DKIM selector was verified." }, { "category": "mail", "title": "MTA-STS", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Mail transport policy." }, { "category": "mail", "title": "TLS-RPT", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "TLS reporting policy." }, { "category": "security", "title": "Valid TLS certificate", "max_points": 55, "earned_points": 55, "lost_points": 0, "detail": "11 day(s) remaining." }, { "category": "security", "title": "Certificate lifetime", "max_points": 10, "earned_points": 2, "lost_points": 8, "detail": "Full points require at least 30 days remaining." }, { "category": "security", "title": "HTTP security headers", "max_points": 35, "earned_points": 19, "lost_points": 16, "detail": "5 of 9 evaluated headers detected." }, { "category": "network", "title": "PTR reverse DNS", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "PTR: ns-vip-01.sys.kth.se" }, { "category": "network", "title": "IPv4 diversity", "max_points": 35, "earned_points": 20, "lost_points": 15, "detail": "Two or more IPv4 addresses receive full points." }, { "category": "network", "title": "IPv6 connectivity", "max_points": 35, "earned_points": 35, "lost_points": 0, "detail": "AAAA availability." }, { "category": "availability", "title": "DNS resolution", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "At least one address family must resolve." }, { "category": "availability", "title": "HTTP response", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "HTTP/2 200 " }, { "category": "availability", "title": "HTTPS final URL", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "Final URL uses HTTPS." } ], "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.", "diagnostics": [ { "level": "ok", "title": "IPv4 (A)", "detail": "1 IPv4 address(es) detected.", "category": "dns", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "ok", "title": "IPv6 (AAAA)", "detail": "1 IPv6 address(es) detected.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "Name server redundancy", "detail": "5 NS record(s); 2 or more required.", "category": "dns", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SOA record", "detail": "Authoritative zone record.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "DNSSEC chain", "detail": "DS and DNSKEY detected.", "category": "dns", "max_points": 15, "earned_points": 15, "lost_points": 0 }, { "level": "ok", "title": "CAA policy", "detail": "Certificate authority restriction.", "category": "dns", "max_points": 5, "earned_points": 5, "lost_points": 0 }, { "level": "ok", "title": "DNS propagation", "detail": "Agreement between public resolvers.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "MX records", "detail": "4 MX record(s).", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SPF", "detail": "SPF policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DMARC", "detail": "DMARC policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DKIM", "detail": "A DKIM selector was verified.", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "error", "title": "MTA-STS", "detail": "Mail transport policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "TLS-RPT", "detail": "TLS reporting policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "Valid TLS certificate", "detail": "11 day(s) remaining.", "category": "security", "max_points": 55, "earned_points": 55, "lost_points": 0 }, { "level": "warning", "title": "Certificate lifetime", "detail": "Full points require at least 30 days remaining.", "category": "security", "max_points": 10, "earned_points": 2, "lost_points": 8 }, { "level": "warning", "title": "HTTP security headers", "detail": "5 of 9 evaluated headers detected.", "category": "security", "max_points": 35, "earned_points": 19, "lost_points": 16 }, { "level": "ok", "title": "PTR reverse DNS", "detail": "PTR: ns-vip-01.sys.kth.se", "category": "network", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "warning", "title": "IPv4 diversity", "detail": "Two or more IPv4 addresses receive full points.", "category": "network", "max_points": 35, "earned_points": 20, "lost_points": 15 }, { "level": "ok", "title": "IPv6 connectivity", "detail": "AAAA availability.", "category": "network", "max_points": 35, "earned_points": 35, "lost_points": 0 }, { "level": "ok", "title": "DNS resolution", "detail": "At least one address family must resolve.", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTP response", "detail": "HTTP/2 200 ", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTPS final URL", "detail": "Final URL uses HTTPS.", "category": "availability", "max_points": 20, "earned_points": 20, "lost_points": 0 } ] }, "dns": { "records": { "A": [ "130.237.28.40" ], "AAAA": [ "2001:6b0:1:11c2::82ed:1c28" ], "CNAME": [], "MX": [ "20 mailfilter-ng-2.sunet.se.", "10 mailfilter-ng-1.sunet.se.", "10 mailfilter-ng-3.sunet.se.", "10 mailfilter-ng-4.sunet.se." ], "TXT": [ "\"v=spf1 include:_spf.kth.se include:customers.clickdimensions.com ~all\"", "\"google-site-verification=6B_ijtuPLs8QEQOrY6CA9KNR6x_Tlq9h87fvzbQcTGk\"", "\"include:_spf.eu.messagegears.net\"", "\"facebook-domain-verification=ybxcywd9y5omfyzv9a4hi1122pxhys\"", "\"atlassian-domain-verification=bdViuC6aa8uovu2aPgsZjA4zglkgbkqx7eCtfJtIXi6uWFglmI96V2EdENETiV1k\"", "\"HARICA-2QmDZC3DyhpI9p6wUi3\"", "\"apple-domain-verification=yiK5a1btuIncRk6Q\"", "\"MS=ms86914267\"", "\"mentimeter-22c50963-9801-4565-a424-07d4a1e2c1c9\"", "\"adobe-idp-site-verification=9cb3a0e2a6197322d0dd6d29de0e1ac1ce9f990e3d5bd864aa4c19007f78ef91\"", "\"KTH Royal Institute of Technology, SWEDEN\"" ], "NS": [ "b.ns.kth.se.", "e.ns.kth.se.", "a.ns.kth.se.", "sunic.sunet.se.", "ns2.chalmers.se." ], "SOA": [ "a.ns.kth.se. hostmaster.kth.se. 2026080923 14400 900 604800 86400" ], "CAA": [ "0 issue \"sectigo.com\"", "0 issue \"harica.gr\"", "0 issue \"letsencrypt.org\"", "0 issue \"digicert.com\"" ], "DS": [ "52831 8 2 A8E4D57A904B2D583EFFB47BF4F45DA82B930D018BCDE5FE094E72C4 D5687A48" ], "DNSKEY": [ "257 3 8 AwEAAdclJQ603lKyef68/6e/m3Xn6Ng0Ph0x2Rg6B311hk43rrR1xAc2 WfwTHCkvoukR5rrRPTHaMOfCUbWeJZXaJLhhzVJeR0l4maekQ/eaZadg lX2E4tg3eYWPe2yg2IAVWLkVHJiYL78Oh0Xib29OWndptE66tMIFSGMo 136ZjOlKiMf9wwWkVLDRUxUeyVFE9DUM1I8+Rj6ws84UtGyVJYy/82iN U6I2iC4X+/2fyaopkNqCzuiRZRewATCqHvza6wpQGO5qqEE1Ol6v3gCg nP6dHdA+qfc32NI5zncRK1Y2VZxM9+C4dOOUCJQ2iAb9x/Bjue8NhixB LOaeLBbznsc=", "256 3 8 AwEAAcX74sXgnIHMLBd/Q7EK7qFXlUym9qST0qxoxGvrFT9x231pOplh OfbnGw9DOW265DS9OQNbyo+jozYJRKs//gcKdmffW3pRRxKlhJGOUZJ+ BETklrgf7/DXH0lTDgJ0TZO9G8MfJFGXFVUbc5g/iv7TyxcQmf/MRvBw 9Pofb1S+ZoSuvwX0IloHJVvAWgWb15uJpoUNhFVUnP4QHh9saqMYL4sV 2B/8/Vw7jUrIwi2Lo6nUepv7QjjimyUnajAdiDyK5W7ChIvviuf5ZtPy gKPHKfEqDMA/UufhoRPbdWKvl8218f4QrWKYjsS0xT8O08Q2M/AA3myh faAdEUWbU1k=" ], "RRSIG": [ "A 8 2 7200 20260905215418 20260806205853 35811 kth.se. jg1Cr6nZ/GHSW1D2tJ3lDT/QsnMlKVZUh3aNVClq8ea8+L1SWaivx4JV d2hDI80/7btaSdAfTjO01bVoPPsft8GTlgkRRYzlZqp9wqZLf96h63Bb 3wSe2nojj4HgXGKm1xzkNr9TBwLiZC9ym2N1pqoXyfFyxtA4LWV7ln9G ZerI83aXMF4IwjASzkIaZpk72zJnKMBeRtXj2qMIlVPMSAugGfnxW4Ug LiJ/ks/8Dczmjll0SIs5/5n2UWJINZvkxQjNc0gYGldJb77TYVZA7tfu 0L92NTvuHstKRb2XFdiBaxiOAV6iH5SDjOx6GxEyaazyM81tJszM+TLE ndtKuQ==", "DS 8 2 3600 20260823031137 20260809014137 9573 se. O0fMReQwn4aRXgu4ia82ZtJF/IKMADO0Csw7HrOwJvxA6Spi6tkGoZyb grCnLzQH02fV56930el3sMhwBJHN1wluU0SdaK+QaH32XVSf2qEdRID0 diui/Jra2giy+1rIm1m8yq4E1w3kcwRwxD1NWluIzd2P1AObp0YnAwZb ehGpoMi8RJsbTIjlRC4b78V/SQw7Bb3ykz7U0ptBUXX5CXFos2JUivHV pKzMv9aZ6o/ZGDw0fTrTAXzO6hfsUqvDY1nMKSCl1COnnIgdhXqdkuFJ 9boZ9oh3ybQrC9WJyJN65EdsIz3bEn7UW4HWufqGjKxfB/ic2P5+5ROh PGiNtQ==", "CAA 8 2 7200 20260904103400 20260805101555 35811 kth.se. tkf2ubSukXho4cR28oCfHSwj/K8a/9XNJ+bLEnnFFiAXqddgq/uTqQle Rctd1zbv/rDyOPaZ+QAvo3QhDNd7Nr8eHwC4cCiYb02lBjA4uhndvfAa 4RPpR99EeWUEbICLA5mFcS1GtER5xW6oVwBN4h1Riq+esTkmeh4Y8/r8 t2ec1NvkicicEU/hfPTqiGPQYI+Rv8KcxKGgRG1KhzZPeSqJgRJRoeNU yR0Z0/RYyaYJv2fIbtlLPoI2FUXqm12jyJz1bY2nCAtKiU+xMpBLU5N2 dsLu8VnRkeqx0l5H1Q/eg4hVMdogtGIwlAzIDmx7nwQ0+XM1e+6HtzBN 7aYehA==" ], "NSEC": [ "_8c90d4aaf6eb6a0597d8a13598c48c5d.kth.se. A NS SOA MX TXT AFSDB AAAA RRSIG NSEC DNSKEY CAA" ], "NSEC3": [], "SRV": [], "NAPTR": [], "TLSA": [], "SSHFP": [] }, "ipv4": [ "130.237.28.40" ], "ipv6": [ "2001:6b0:1:11c2::82ed:1c28" ] }, "mail": { "spf": "v=spf1 include:_spf.kth.se include:customers.clickdimensions.com ~all", "dmarc": "v=DMARC1;p=reject;pct=100;rua=mailto:dmarc-admin@kth.se", "dkim_selector": "default", "dkim_host": "default._domainkey.kth.se", "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCkWYVVrcCLYg845ds+Mm2mLNAMzRFf4PJ9F1LhpzSO3toZQzKBTY+0T27WyJu5R/g86tZHZCIvBAdeUWvsiw9LityPGHZts7qoRPGAk6DPXWEWGJhmdcGLcxRJX7kNn1JvXpVLywnzoLRL/YYs42emR8LK1uqWZ22m2CPtNuoJ2QIDAQAB", "spf_analysis": { "valid": true, "lookups": 2, "final": "~all", "message": "Within the estimated limit" }, "dmarc_analysis": { "valid": true, "policy": "reject" }, "bimi": "", "mta_sts": "", "tls_rpt": "" }, "advanced": { "ptr": "ns-vip-01.sys.kth.se", "propagation": { "consistent": true, "results": [ { "provider": "Google", "server": "8.8.8.8", "result": [ "130.237.28.40" ], "time_ms": 57.36 }, { "provider": "Cloudflare", "server": "1.1.1.1", "result": [ "130.237.28.40" ], "time_ms": 156.92 }, { "provider": "Quad9", "server": "9.9.9.9", "result": [ "130.237.28.40" ], "time_ms": 179.81 }, { "provider": "OpenDNS", "server": "208.67.222.222", "result": [ "130.237.28.40" ], "time_ms": 1175.68 }, { "provider": "AdGuard", "server": "94.140.14.14", "result": [ "130.237.28.40" ], "time_ms": 40.98 } ] } }, "ssl": { "available": true, "issuer": "Hellenic Academic and Research Institutions CA", "subject": "ns-vip-01.sys.kth.se", "valid_from": "2025-08-20T03:03:25-05:00", "valid_to": "2026-08-20T03:03:25-05:00", "days_remaining": 11, "san": [ "ns-vip-01.sys.kth.se", "www.kth.se", "kth.se" ], "protocol": "TLSv1.3", "cipher": "TLS_CHACHA20_POLY1305_SHA256" }, "http": { "url": "https://www.kth.se/", "status": "HTTP/2 200 ", "http_version": "3", "headers": { "location": "https://www.kth.se/", "strict-transport-security": "max-age=63072000", "cache-control": "public, max-age=120", "pragma": "no-cache", "vary": "Access-Control-Request-Headers", "via": "HTTP/1.1 PageCache", "reporting-endpoints": "default=\"https://www.kth.se/api/browser-report/default\", csp-violation=\"https://www.kth.se/api/browser-report/csp-violation\"", "content-security-policy": "default-src 'none'; connect-src 'self' https://app.kth.se https://analytics-stat.sys.kth.se https://analytics.sys.kth.se; font-src 'self' data: https://analytics-stat.sys.kth.se https://analytics.sys.kth.se; frame-src https://login.ug.kth.se; img-src 'self' data: https://login.ug.kth.se https://app.kth.se https://analytics-stat.sys.kth.se https://analytics.sys.kth.se; media-src 'self' data:; script-src 'self' 'strict-dynamic' 'unsafe-inline' https: 'sha256-h/2sT1GsMN8T6cUkiL6SqdhEnInUJJUxUu3I0DxvEzM=' 'sha256-ZtvrB7J5DbP3Steat+VrPl6h5CMJ+cgUsg4b+HVjjHE=' 'sha256-GJz8wEEZkPAmzdVLNndeDp+eiT2ReKMVmwcuJCcdIKk=' 'sha256-RawAKNmFnTlGgmcujbGJJ6SjpNQFwfj5TpgcOhiX9uM=' https://app.kth.se 'sha256-DYrb+SZeYKAiJeTI8xqCayymeuMmVRt+aXq8Ynt+tic=' 'sha256-JwpZ6kdsO5haL5d8W2nR+BUUZTsrojOQyclMTSKFWcg=' https://analytics-stat.sys.kth.se https://analytics.sys.kth.se 'sha256-hDis8rApaEYe6oGKCXfUu4Av+/54CyRh6EVWc0EW+Yo=' 'sha256-nyEIvE+iEvnix/R91uA7zobDtPr+cu3fh9m0aZ6ofKs='; style-src 'self' 'unsafe-inline' 'sha256-XlJJezpbGp47+q/c7l4TfyJhhN7yyxMHIemv9u58A1k=' 'sha256-znMrUDLaHkkjLUDjEYX0eXVQDfCAw9mmpQnqFSL3epY=' 'sha256-7XSx59Bg95A9X5QOWsKDEKO5XuT/PAXcqtmz7GUPVkA=' 'sha256-jL/eOOYgnozMrF5THLfXVfemTAQDrWMpnC2H+4NDIAA=' 'sha256-zxOUcEMjWCO36SfpwF2Tlpk9aYHycnyHSYG7unso1Vk=' 'sha256-GXGKPVBqgmz+7KIoHziIsUyoHjU8dEKl9E1pUnZLHJw=' 'sha256-G1e3GasPFUwqb22BZZoi8rlReu+VYa1aafJwnMiYwqw=' https://app.kth.se 'sha256-PUAqwV974ukNOKvPhtR53qaw+kHXMRbRunbnRPn/qZw=' 'sha256-sLwRROr/mbJokfO2pgYvaHCRVypGNkp3cWkm6VDHe4M=' 'sha256-JhvecqQKT3DpqzO8Z/TSPL5m/RjHBUqSA5GrLOgkKQM=' 'sha256-B9JYPbOZiGon6F8qjY4D/t6EYpFUGegJtB/4ZG54Mkk=' 'sha256-nKMG0xoPrnGiy5m5jSXLEZ1H8l/plcS7n/VihDzEDb8=' 'sha256-9NuL/7o3CJh/VjvscXRHe5Gye7Dp243L5ZU1YhKlRzA=' 'sha256-CMPKSF6K94P9vb+HLmQkZwzY013xbE8ICjMIxlyttPI=' 'sha256-DbCt+LdbbPcXVx80h4hbApSegrnmmeMVBaf9khpzNQw=' 'sha256-PdP32wH4MC8RA1B3jG7o/ZYJvkxjsKPev244erw3lLc=' 'sha256-rqvf2+7jhLL4khGgv1k0uVutqW44F1tuci377dvwlqY=' 'sha256-l49i2cMFpHzPCVISaaLEIfqywoGTLCCOlTAt7aX3snA=' 'sha256-IndbmT3F0m2UpXMam1mKB0eTi5jiTZYEnfVHe6Bz2H4='; form-action 'self' https://login.ug.kth.se; frame-ancestors 'self'; base-uri 'none'; report-uri /api/csp-report; report-to csp-violation", "etag": "\"8f5fd85ca708dd0a37fc609b84f55f94\"", "x-content-type-options": "nosniff", "x-xss-protection": "1; mode=block", "x-frame-options": "SAMEORIGIN", "referrer-policy": "same-origin", "content-type": "text/html;charset=UTF-8", "content-language": "sv-SE", "date": "Sun, 09 Aug 2026 06:35:31 GMT" }, "security_checks": { "strict-transport-security": true, "content-security-policy": true, "x-content-type-options": true, "x-frame-options": true, "referrer-policy": true, "permissions-policy": false, "cross-origin-opener-policy": false, "cross-origin-embedder-policy": false, "cross-origin-resource-policy": false }, "server": "", "powered_by": "" }, "webpage": { "url": "https://www.kth.se/", "title": "KTH - Sveriges största tekniska universitet | KTH", "description": "KTH - Kungliga Tekniska högskolan - är ett av Europas ledande tekniska universitet och samlar studenter, forskare och fakultet från hela världen.", "success": true, "error": "", "status": 200 }, "network": { "130.237.28.40": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" } }, "smtp": { "host": "mailfilter-ng-2.sunet.se", "ports": [ { "port": 25, "open": false, "time_ms": 121.6, "banner": "", "error": "Connection refused" }, { "port": 465, "open": false, "time_ms": 4020.9, "banner": "", "error": "Connection timed out" }, { "port": 587, "open": false, "time_ms": 4018.7, "banner": "", "error": "Connection timed out" } ] }, "visitor": { "ip": "216.73.217.62", "reverse": "", "country": "", "country_code": "", "region": "", "city": "", "latitude": null, "longitude": null, "isp": "", "organization": "", "asn": "", "timezone": "", "browser": "Other", "os": "Other", "language": "", "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "is_bot": true, "cloudflare": false }, "analysis_time_ms": 88.57 }