{
    "ok": true,
    "domain": "miamiherald.com",
    "generated_at": "2026-08-08T21:08:52-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 72,
        "label": "Fair",
        "categories": {
            "dns": 85,
            "mail": 90,
            "security": 65,
            "network": 50,
            "availability": 60
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "4 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "5 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "88 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "0 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: 110.215.107.34.bc.googleusercontent.com"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 0,
                "lost_points": 40,
                "detail": "No successful HTTP response."
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "4 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "5 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "88 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "HTTP security headers",
                "detail": "0 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: 110.215.107.34.bc.googleusercontent.com",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "HTTP response",
                "detail": "No successful HTTP response.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 0,
                "lost_points": 40
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "34.107.215.110"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "10 aspmx2.googlemail.com.",
                "10 aspmx3.googlemail.com.",
                "5 alt1.aspmx.l.google.com.",
                "1 aspmx.l.google.com.",
                "5 alt2.aspmx.l.google.com."
            ],
            "TXT": [
                "\"MS=ms80505307 3600\"",
                "\"v=spf1 include:_spf.mcclatchy.com include:cust-spf.osgbilling.com ip4:205.234.4.62 ip4:69.198.229.100 ip4:74.205.21.242 include:_spf.google.com include:cust-spf.exacttarget.com include:_spf.caspiomail.com\" \" include:miamiherald-com.spf.smtp25.com ip4:52.6.112.187 ip4:167.245.127.131 ip4:149.72.248.236 ip4:168.245.12.252 ip4:168.245.46.9 ip4:167.89.54.103 ~all\"",
                "\"_pgocni970r2zwhw4k3lmpn44ve1nnr7\"",
                "\"knowbe4-site-verification=d6e44116a749b1f61f1d7bc9f3e4b677\"",
                "\"ZOOM_verify_byn0rENCTp6ld3cEWfa5QQ\"",
                "\"tollbit-domain-verification=da2ca55df0434360c4ec0bb79a8957ca6e033ad173ff60b27885b115d11de090\"",
                "\"anthropic-domain-verification-6jht2g=cmA6tKs703300OV2OHUOxDWzU\"",
                "\"google-site-verification=3SaE-3MeauyVWliLp6lg1WmGP-EDKPPC0E8P4V4RuGA\"",
                "\"google-site-verification=KiiyhqUqhW-0myHCiEVHvmJ4AqnLf76NnllllSEMOlc\"",
                "\"google-site-verification=6a21v7yoK8jDSE8McRGj45clx-q--JDwf4OVS-sqk4o\"",
                "\"_ticsdo6p74l5epcz2uvqlg4jdgswyc3\"",
                "\"adobe-sign-verification=d42aacceb0cdcd44286532fa2d19780\"",
                "\"adobe-idp-site-verification=23a64011527341e7a0b4471230e84b44977294637c642b8b2348cf1e93e6acf4\""
            ],
            "NS": [
                "ns-cloud-e3.googledomains.com.",
                "ns-cloud-e2.googledomains.com.",
                "ns-cloud-e1.googledomains.com.",
                "ns-cloud-e4.googledomains.com."
            ],
            "SOA": [
                "ns-cloud-e1.googledomains.com. cloud-dns-hostmaster.google.com. 5 21600 3600 259200 300"
            ],
            "CAA": [],
            "DS": [
                "32737 8 2 8F645CEBF0CCB52B2756C332BAEEE0452511EE4C3E0A79168E1AC700 0C427962"
            ],
            "DNSKEY": [
                "257 3 8 AwEAAajyeFx4ttWmDW/uyfTqb/fHJiwmP9/4+70yjqMffacZGeGcyHpy qIWKifmS6y+BMPCu4A+IygJjTJdwToWdcKSgulUMBQZigGEviFlICx7J iE+1qFx3sEw6cJDfH8F1AnNny8UvWtN2KL+ihWoDvi9fVGrT3HItnqjl R/NJtE/LJuqPDRcxvA+w8qOeAVUF0C9SoBVNrjE+thRDfVCwwE7mpzi9 cwz/VPgYeMVDdpx+h6mG/7MdTkE0mQ9cx9z8XWIGNKufaOMsx3fXW/eX gjm5WGr5CEyMEFgfYyGoz2To3QZUtpurY/2ZRXtCh6pwrjd+87gMMqCa VcQt+LepZdk=",
                "256 3 8 AwEAAcZC5bynxV+A7HwLF3QEYFXgkR1yugwvUtirwPyS1MTFvHh2tJTf M6FYdXaKWachsRDyEi2MkIKNbY79t0wncb8cgzlNYGeARa4vSYWHc4AY ZOdF9orEfoRvzu1D6Q7k8Ph2AxR7/XKLLMPha4v3EpltOl8ZvIbcitnZ 4Z0Aup4d"
            ],
            "RRSIG": [
                "SOA 8 2 21600 20260828134335 20260806134335 27603 miamiherald.com. ANlTilcFFKyRi45aYeP2phwXZJOJs8FRidr2AUNBJS7El6DacOmW1sYZ Kn/PDXThDyTPuj+XvSS3pebgaRrn+nS76tRHzTBbYDAWdnlVoLBlqz01 ZfpY+dJA51teNEWg8n+5B3l/kZJ5rOI/JDvD0xiDwScHysuEti4Jq396 WDM=",
                "NS 8 2 300 20260828134335 20260806134335 27603 miamiherald.com. YYC1MNOaKfPj07PpB9yjQSHzkxDUYioviXrYSWL+1oeuDfmxa9xjzOVh VDi6yzkOIOVF6a+rq7QPOIuu/FlTWTB2pnSjJFyv74Hlsy7DLvEDXJaF YE9xdaejEJFVwfXsrfARDQ5bT60XXN3v23azvn7CalXfqPV4Xwg+Qkm6 bBk=",
                "A 8 2 3600 20260828134335 20260806134335 27603 miamiherald.com. scR103G9yzzzcrImp/mFi7QZMDXOa7PDN9Lh5Pdoz9qKWV5OaVkXa9if TBywrHw/t18XhhwG2gCPaWoKl6hXNKZpE5/H5MeDXhtg/9H7Yx6/GM/R AoN5yvTImFKl7ATCW9ZqwW+yljP9/HuzDfeKII1ydGneJDQ7yuVDb8je gis=",
                "MX 8 2 3600 20260828134335 20260806134335 27603 miamiherald.com. Dz2RN7zoW81COW8Wr0iJu35/aXMlC82imJBeR57gexVfWap86e3ObWvg qAMXU272A3oFZlWnlP575iYyN7wvd3gNs+rg16+DIdBLxR+xbEL/VbyV jBDGM9Sjcg53TkldBlrjMvFBmHqRRNMFoMlVmU9L+kgU+6U/H3qU60ge xlA=",
                "TXT 8 2 86400 20260828134335 20260806134335 27603 miamiherald.com. NSXl/KNkwe85heQzwPeFoKhL/G/BntdJEo9P+GyOrOQUTZBCAWVGkyjQ hta7GD8/hpyu5u0aK0xMqzLJSEI3o6fa0TVyPhmohWRVi/FrniYiRwce nvzLgUHbUalfD0V5MqxOhfXEeMSaLetAeeAYLE6cBuLXJH9uqqQ1HfjK +XA=",
                "DNSKEY 8 2 300 20260828134335 20260806134335 32737 miamiherald.com. X+83mXTaRxb5Wcm7sIcmqdNs02lSKjsy6Dp0w14Pj1cI8yffzFrwPaca 0ozDzCvADfhhAgOMk6P3RD6hpwk6Icz3JpCcFHcDG1IgxoMxsF3MOuXH EMBuKf4EP6a1EnZoAqbJskS0Jp3lgW7lnDDyJGjWJ/jz4eGjsNRSlpse t8VCJicOnIomZuS70tqXN1k/F6C5ILF51Wt6vN+8ubbTeA0sRiGpY/TO an1u5+fsS6D2aIEHqWpJ89OAsqnTp0DzVCtK+PbO3erQzWNacTnljwsA exAyrnXj/NTPpbEDKxfAyUlHtcVJxdDYSEv+A5UnmyIYZsim3ZzwfhPP S4YnvA==",
                "DS 13 2 86400 20260815013751 20260808002751 41446 com. WN/39ThfkmasJJfPhd0W8n1546esdf9BWF7Xd8KQhngujcOlFsHZiBpu z8SGxUuoo1ngAISSkILRhZBKDg/HuQ==",
                "CDS 8 2 300 20260828134335 20260806134335 32737 miamiherald.com. Jc9bxq9C4q7SpzzKT6QFfHr+cBvdPCnH6FYSNNot4XVeCXrIm8X+ovlc /PngFDtPDv80zSxH7pWIzyP1klkzCLshtO9V+cICAD75AaQZzpYEoEi0 4TdOsU8UEZf7YtTC/eECpJXA1UkCNyFQ062EvrR+mwanKkEZytDAqc2R haYgcJEv4NamfEP2NkoPYbzcpKvRz4EBZuHCzMgEq88Kkx8RRmTS75ZX S9e1989jWSS8gizadcz9IRnITX5E9/JB2wM/2KAfhmBHiJGHSHxPEvgO Y27kOeL5Do2aqlvled4SYzpq/5vOltEKS1SYym82w33VZ5xBfvc9wuR2 BpN0tA==",
                "NSEC3PARAM 8 2 0 20260828134335 20260806134335 27603 miamiherald.com. iLA9xDzL4VzWpdM5UiqY+7aticMkUwkFqFd/OQbz8lvFk3UZ6lAeCGpq XKAlaJ9xm1Ibqwy9f4SwcKF/3ZrhGXI35af+6Cj7LsWgDAK7M0LJjtlj T4az340z7rKIZGeTOY5jQxPKA5f6pyAj+oSrfvzst3Nu+VFXfwbfiLkR YSg="
            ],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "34.107.215.110"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 include:_spf.mcclatchy.com include:cust-spf.osgbilling.com ip4:205.234.4.62 ip4:69.198.229.100 ip4:74.205.21.242 include:_spf.google.com include:cust-spf.exacttarget.com include:_spf.caspiomail.com include:miamiherald-com.spf.smtp25.com ip4:52.6.112.187 ip4:167.245.127.131 ip4:149.72.248.236 ip4:168.245.12.252 ip4:168.245.46.9 ip4:167.89.54.103 ~all",
        "dmarc": "v=DMARC1; p=quarantine; rua=mailto:v4yuj2po@ag.us.dmarcian.com; ruf=mailto:v4yuj2po@fr.us.dmarcian.com; fo=0; adkim=s; aspf=s; pct=100; rf=afrf; ri=86400; sp=quarantine",
        "dkim_selector": "google",
        "dkim_host": "google._domainkey.miamiherald.com",
        "dkim": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLEemMqZT/kPuJ8WfA7/ONkOXEMrC6SVUo5EGON5YSCyIuGNJ7JlxaZAhNgxCpzH9YvYUAzqQuqW4+fG6USlvssoTdilOvBObOF1fFdvFDeJqf8KuQ1NQ+KJiP6dCJMpwhj36QuWVxhz/IjqwPlEDvuEP41t1uaTZzFoTgtHiTZOB0uu1LufLHdr5YgpaNt4dPoi685qpP8NdihMXkDpSvG/pBDg5a8qRYw/fA4WeZqF37sxtH98FdBDgv1f+0zu/VKFJOdub2jRB3kG2i6jNI7gYkWIwTa4vkWceA+GehxZ8rff+atfWccwOz5zk2XDZCXg2QoXRKTTgiGGBoqAgwIDAQAB",
        "spf_analysis": {
            "valid": true,
            "lookups": 6,
            "final": "~all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "quarantine"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "110.215.107.34.bc.googleusercontent.com",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "34.107.215.110"
                    ],
                    "time_ms": 64.87
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "34.107.215.110"
                    ],
                    "time_ms": 112.63
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "34.107.215.110"
                    ],
                    "time_ms": 155.76
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "34.107.215.110"
                    ],
                    "time_ms": 94.43
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "34.107.215.110"
                    ],
                    "time_ms": 76.34
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "Google Trust Services",
        "subject": "miamiherald.com",
        "valid_from": "2026-08-07T08:27:36-05:00",
        "valid_to": "2026-11-05T08:23:30-06:00",
        "days_remaining": 88,
        "san": [
            "miamiherald.com"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_256_GCM_SHA384"
    },
    "http": {
        "url": "https://www.miamiherald.com/",
        "status": "",
        "http_version": "3",
        "headers": [],
        "security_checks": {
            "strict-transport-security": false,
            "content-security-policy": false,
            "x-content-type-options": false,
            "x-frame-options": false,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://miamiherald.com/",
        "title": "",
        "description": "",
        "success": false,
        "error": "HTTP/2 stream 0 was not closed cleanly: INTERNAL_ERROR (err 2)"
    },
    "network": {
        "34.107.215.110": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "aspmx2.googlemail.com",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 1.4,
                "banner": "",
                "error": "Network is unreachable"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4019.4,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4019.9,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 90.12
}