{
    "ok": true,
    "domain": "montecarlosbm.com",
    "generated_at": "2026-08-10T08:12:24-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 93,
        "label": "Excellent",
        "categories": {
            "dns": 100,
            "mail": 90,
            "security": 92,
            "network": 70,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "2 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "2 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "2 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "2 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "41 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 27,
                "lost_points": 8,
                "detail": "7 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30,
                "detail": "PTR not detected."
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/2 200 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "2 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "IPv6 (AAAA)",
                "detail": "2 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "2 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "2 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "41 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "7 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 27,
                "lost_points": 8
            },
            {
                "level": "error",
                "title": "PTR reverse DNS",
                "detail": "PTR not detected.",
                "category": "network",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30
            },
            {
                "level": "ok",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/2 200 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "104.20.43.202",
                "172.66.168.188"
            ],
            "AAAA": [
                "2606:4700:10::6814:2bca",
                "2606:4700:10::ac42:a8bc"
            ],
            "CNAME": [],
            "MX": [
                "10 mxb-0085f401.gslb.pphosted.com.",
                "10 mxa-0085f401.gslb.pphosted.com."
            ],
            "TXT": [
                "\"_d91eced1ab108d4039902e3a6e86e356.acm-validations.aws.\"",
                "\"_72c49d1e583a55cb47c5dfaa18a27823.montecarlosbm.com.\"",
                "\"_globalsign-domain-verification=THPNJK_QkSVlc5-QYTmAsu6NccvLtNhGif_BA_TTG8\"",
                "\"google-site-verification=6hMhPxCzkZ_7LrIy8vzHq4yCBpmmmhNpEG9-b9UuiN0\"",
                "\"_globalsign-domain-verification=FaXWnNREivRsGAYPeku8VY_Y5kDVr_tP-jvoZmqlfa\"",
                "\"MS=ms40684051\"",
                "\"airtable-verification=0ee991c4a63acc272f1392bff1541eae\"",
                "\"_globalsign-domain-verification=oUyAccZyZD2hmiYIXaUw37fjGvqT4mR6e26cAXu3rO\"",
                "\"v=spf1 ip4:95.131.139.228 ip4:213.215.38.54 ip4:195.78.19.14 ip4:92.103.145.210 include:serenata-services.com include:spf.synxis.com include:spf.mandrillapp.com include:spf-0085f401.pphosted.com include:spf.protection.outlook.com -all\"",
                "\"globalsign-domain-verification=ibLlc9G4Gl9zH5WtZQO-jcCNL7L1NIFl8A3l0v5Wmr\"",
                "\"google-site-verification=NW3rGwPG8V4tM8H1NYNO3tGLWip1uEH49Vml-otGr0Y\""
            ],
            "NS": [
                "dale.ns.cloudflare.com.",
                "michelle.ns.cloudflare.com."
            ],
            "SOA": [
                "dale.ns.cloudflare.com. dns.cloudflare.com. 2411682465 10000 2400 604800 1800"
            ],
            "CAA": [
                "0 issuewild \"letsencrypt.org\"",
                "0 issue \"amazon.com\"",
                "0 issue \"amazonaws.com\"",
                "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"",
                "0 issue \"ssl.com\"",
                "0 issue \"awstrust.com\"",
                "0 issuewild \"ssl.com\"",
                "0 issuewild \"amazon.com\"",
                "0 issuewild \"amazonaws.com\"",
                "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"",
                "0 issue \"letsencrypt.org\"",
                "0 issuewild \"awstrust.com\"",
                "0 issuewild \"globalsign.com\"",
                "0 issuewild \"amazontrust.com\"",
                "0 issue \"pki.goog; cansignhttpexchanges=yes\"",
                "0 issue \"comodoca.com\"",
                "0 issue \"digicert.com; cansignhttpexchanges=yes\"",
                "0 issuewild \"comodoca.com\"",
                "0 issue \"globalsign.com\"",
                "0 issue \"amazontrust.com\""
            ],
            "DS": [
                "2371 13 2 457717F9A28F042D54DACC7F307920C13BB1556C914355D6C4EF130C 732BD39A"
            ],
            "DNSKEY": [
                "256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8 KqXXFJkqmVfRvMGPmM1x8fGAa2XhSA==",
                "257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+ KkxLbxILfDLUT0rAK9iUzy1L53eKGQ=="
            ],
            "RRSIG": [
                "NS 13 2 86400 20260811141222 20260809121222 34505 montecarlosbm.com. MycVRnviktZpE0S9bl/gtkPLnDkn95909v6aYahRi4aWstI+yagWhX1R wXAgQfu3yM2HA+Yasl7YHhzpQSKnCw==",
                "TXT 13 2 300 20260811141222 20260809121222 34505 montecarlosbm.com. BbfV3uctH3RDQ/hTtQd4o3eK3v4X8eief5aMyR/F/PFZHqCg1TiUQ412 Nq+vFerphLDyv3juWZfkNGb7a4lmPQ==",
                "MX 13 2 300 20260811141222 20260809121222 34505 montecarlosbm.com. AoGMT6HGA2q1IqCXfnPVmK0cSlUs+NEqABJrHfuGb2U9Bmqztb4Q2Fog sU8AtpSQtjV8ykt79lKRjhutyqEwTg==",
                "AAAA 13 2 300 20260811141222 20260809121222 34505 montecarlosbm.com. ZQLHikS/fEa3/95cZv4vOwbH+hHfGZo4A8hhrRt4yXEd/MzoQPu7AsXx 0T+zmXccoMOZleziCAYl3L1Y3IFYiA==",
                "DS 13 2 86400 20260816005121 20260808234121 41446 com. ETcqvSAgcf1xIGWuSzMmnSTXj259t3BFxNQYPomes+WoG0x336mTEr1P InF5IoJ3RUmyqEzBj9aaKtVkfjF/+g==",
                "CAA 13 2 300 20260811141222 20260809121222 34505 montecarlosbm.com. SQX7j5yprzON2mlBbYZavxROqm55i/WQCfTEvhI5x8w59pkGdsXci788 PSIQPaRQmtMguPMP7sifOhTF2g1OJg=="
            ],
            "NSEC": [
                "\\000.montecarlosbm.com. A NS SOA PTR HINFO MX TXT AAAA LOC SRV NAPTR CERT SSHFP RRSIG NSEC DNSKEY TLSA SMIMEA HIP CDS CDNSKEY OPENPGPKEY SVCB HTTPS URI CAA"
            ],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "104.20.43.202",
            "172.66.168.188"
        ],
        "ipv6": [
            "2606:4700:10::6814:2bca",
            "2606:4700:10::ac42:a8bc"
        ]
    },
    "mail": {
        "spf": "v=spf1 ip4:95.131.139.228 ip4:213.215.38.54 ip4:195.78.19.14 ip4:92.103.145.210 include:serenata-services.com include:spf.synxis.com include:spf.mandrillapp.com include:spf-0085f401.pphosted.com include:spf.protection.outlook.com -all",
        "dmarc": "v=DMARC1; p=none; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com",
        "dkim_selector": "default",
        "dkim_host": "default._domainkey.montecarlosbm.com",
        "dkim": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5yaJuN9LyhpTx9iQJ9IhbL4Hg8Av3+ScXA5KYSmzx5Ow+KyAAqwpVsnTzFkqNO2goQSZtq9X4WBbCvFBvDORtzjqSqzJdCoV17svt59EOnW+iZlNTV3j2AQD1i65NUh3pGcDCfx8GWOsrdvFZTbU2EdUdXMtVsEISXDDbpZcDMu1PRzXr7/J/KWWGvzCjw8Ua2esP5+h7smdJZ4XTQ8kfvxiDCHqbuPn8SyYk6cQV/X/Sk/MoccaA3jGQLXndW78WV6auIhS0oH/d60MBu6DScdc/WhoU6qT59wd2N6Pf13RHddP0EpFbrXemZX+ylS0cNP/7nH0tb8D1tsu58tOwIDAQAB",
        "spf_analysis": {
            "valid": true,
            "lookups": 5,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "none"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "104.20.43.202",
                        "172.66.168.188"
                    ],
                    "time_ms": 63.01
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "104.20.43.202",
                        "172.66.168.188"
                    ],
                    "time_ms": 45.04
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "104.20.43.202",
                        "172.66.168.188"
                    ],
                    "time_ms": 121.95
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "104.20.43.202",
                        "172.66.168.188"
                    ],
                    "time_ms": 58.9
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "104.20.43.202",
                        "172.66.168.188"
                    ],
                    "time_ms": 65.77
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "Google Trust Services",
        "subject": "montecarlosbm.com",
        "valid_from": "2026-06-22T16:01:36-05:00",
        "valid_to": "2026-09-20T17:01:27-05:00",
        "days_remaining": 41,
        "san": [
            "montecarlosbm.com",
            "*.montecarlosbm.com"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_256_GCM_SHA384"
    },
    "http": {
        "url": "https://www.montecarlosbm.com/en",
        "status": "HTTP/2 200 ",
        "http_version": "3",
        "headers": {
            "date": "Mon, 10 Aug 2026 13:12:24 GMT",
            "content-type": "text/html; charset=utf-8",
            "location": "https://www.montecarlosbm.com/en",
            "server": "cloudflare",
            "cf-ray": "a28f407f3e2cc959-ORD",
            "alt-svc": "h3=\":443\"; ma=86400",
            "content-security-policy": "base-uri 'none';frame-ancestors https://*.montecarlosbm.com;form-action 'self' javascript:; manifest-src 'self';default-src 'none';frame-src https:;style-src-elem https: 'unsafe-inline';script-src 'unsafe-eval';style-src https: 'unsafe-inline';script-src-elem https: 'unsafe-inline'; media-src blob:; img-src https: data:; font-src 'self' data: https:; worker-src 'self' blob:;connect-src * wss: https:;",
            "cross-origin-opener-policy": "same-origin",
            "cross-origin-resource-policy": "same-origin",
            "origin-agent-cluster": "?1",
            "referrer-policy": "no-referrer",
            "strict-transport-security": "max-age=31536000; includeSubDomains",
            "x-content-type-options": "nosniff",
            "x-dns-prefetch-control": "off",
            "x-download-options": "noopen",
            "x-frame-options": "SAMEORIGIN",
            "x-permitted-cross-domain-policies": "none",
            "x-xss-protection": "0",
            "x-cacheable": "YES",
            "vary": "X-Bin, Accept-Encoding",
            "age": "364340",
            "x-varnish-cache": "HIT",
            "x-cache-hits": "4",
            "cf-cache-status": "HIT",
            "x-redis": "1",
            "x-ssr-response": "Invoke",
            "x-ttl": "86400",
            "x-grace": "300",
            "x-cache-ttl-remaining": "32395.291",
            "x-cache-age": "54004"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": true,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": true,
            "permissions-policy": false,
            "cross-origin-opener-policy": true,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": true
        },
        "server": "cloudflare",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.montecarlosbm.com/en",
        "title": "Monte-Carlo Société des Bains de Mer, Hotels, restaurants, casinos in Monaco",
        "description": "Enjoy an unforgettable stay in Monaco with Monte-Carlo Société des Bains de Mer. Stay in the best hotels of the Principality, have lunch in the best restaurants of the Rocher and enjoy every activity the Société des Bains de Mer has to offer",
        "success": true,
        "error": "",
        "status": 206
    },
    "network": {
        "104.20.43.202": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        },
        "172.66.168.188": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "mxb-0085f401.gslb.pphosted.com",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 28.6,
                "banner": "",
                "error": "Connection refused"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 104.3,
                "banner": "",
                "error": "Connection refused"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 96.7,
                "banner": "",
                "error": "Connection refused"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 95.99
}