{
    "ok": true,
    "domain": "nationalacademies.org",
    "generated_at": "2026-08-08T20:41:58-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 84,
        "label": "Good",
        "categories": {
            "dns": 85,
            "mail": 90,
            "security": 81,
            "network": 50,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "6 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "1 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "63 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 16,
                "lost_points": 19,
                "detail": "4 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: cyrus.nas.edu"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/1.1 200 OK"
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "6 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "1 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "63 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "4 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 16,
                "lost_points": 19
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: cyrus.nas.edu",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/1.1 200 OK",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "144.171.1.16"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "10 nas-edu.mail.protection.outlook.com."
            ],
            "TXT": [
                "\"2k21m18pt835k3xhpbscl75qyn3n2c0y\"",
                "\"mandrill_verify.wAm47ZJdVGKprDi-iZkOxQ\"",
                "\"v=spf1 mx ip4:198.244.61.9 ip4:198.244.59.95 ip4:77.32.186.167 ip4:204.141.43.101 ip4:142.0.180.66 include:sendgrid.net include:servers.mcsv.net include:spf.mandrillapp.com include:spf.protection.outlook.com include:49197025.spf07.hubspotemail.net -all\"",
                "\"_vqu0g50l4ocz3so0yuziml5yzv6mo0u\"",
                "\"333e69769d3c40df9430574c920fe360\"",
                "\"mandrill_verify.PAOzPVpO5KAb_7WePZebSQ\"",
                "\"nxj2yfj8898pvgbv8pq938pf48dk43zq\"",
                "\"w3xnqqk33cz8wkmf36ms662x9hs73qr0\"",
                "\"ylcw299yp8f3917dynkv1qkyr2c4k8nk\"",
                "\"MS=ms46445049\"",
                "\"2A921FCEBABA0B14034B59C17B9E9292EC513E8A\"",
                "\"MS=ms34821908\"",
                "\"0dfgbd9gccd436ntmxtgjftjkylrbx2b\"",
                "\"google-site-verification=ARj1MldYEfQxsA2EDn8Lt-EkHIYFZ-5KC8RqidR2rzs\""
            ],
            "NS": [
                "a1-44.akam.net.",
                "a16-67.akam.net.",
                "a28-67.akam.net.",
                "a5-65.akam.net.",
                "a6-66.akam.net.",
                "a11-64.akam.net."
            ],
            "SOA": [
                "berkshire.nas.edu. hostmaster.berkshire.nas.edu. 1785557702 21600 3600 2592000 360"
            ],
            "CAA": [],
            "DS": [
                "8995 8 1 C2F39A08364511F44CA88A4CFC9505FD33DE6B3D",
                "8995 8 2 39E5AD0B49172175BA72D7AFB65B6AFD666F34B55E00E81850043F8F 89EA852D"
            ],
            "DNSKEY": [
                "256 3 8 AwEAAezbKlwb6N0N5AiRjVaBhYw9mylIxeuLYroyCU+LrQyhMpRzP8fB 9C3Xg3CNnNY2sQVyASPS9fWp8szBySWnonQT2rmTCVZZ5JSPKjqHhhrz gQv4OOGlIw4CWcU8zWVUfrn8NJc6ziWwmT/ALVz93Bg++FZ1O2g2603o 7KSTpd1TKNuMSPpbC9Xwz8eQCiZfpAVFwTUtEV18p3olAs6WAuHHTciM okdnttUf8YHOO6wAjFYKr7eXXXPWlShr4LNlQYT4iobmOHIkTNbsCe0i eoLUqd6c5NIidBBuROP5bEmcmJayc4or4pOfISHmpkCNlJSOjWJQQR2A YGj4ECbC8SM=",
                "256 3 8 AwEAAeCYFDt+Sh13fSc8B9l9PdqAZygxvREUmHWiYqFtiQFxSfqThqVJ Bp1zahYVHmRmiKe3a1Kxy1XIO9e8jH46rx4eJL9ggrldJH2vZTp9dmQm 1hg3fhrPGnEwoERYN+gZL4D4yXwnfsNoov6LDPPl1fXl15uzsvo1Y2Gc darsNhct5+pejWnmE5D51/Iz1vAwhZnqtZ5UOnlf5x9ZX2dRh/KzX6o3 ZrUxFMPcdkobgNlZBjAIfvZxrkv2rX8rSlo6eG9A7dA7vx2kaOggxTIe 4O7bOfOZ2F4KXYEI1hwLxEkj/SqcCP5qArHRWjic9IeMoFXudvqnE0Wc P86I/I1WXKc=",
                "256 3 8 AwEAAb2hfMI5zOaDPfyW2i20Ar0Jv5EBmQv/ENl/GMUkKbl9G5zdMywi 5WG+lvZlTtqJmMsVZl6K86R5Oqoagw/uJmU69w87aSuHelNHvhgfhk29 19HO1KBt3hzg1NMLUo15zpZwcorVHWjgtxZ6OTgujELn27FtLDshZD/J OTs+Bvj+2rXYFlT/iLfjPmgnPfIOi14p+tdvaLOVe/eAnhc6o4L5FAfP 2owpUrjFXuIgKXeNED8zXZE1MBFNhgrsJ4qDueiMkQFD18yxqN14C+jA UytyVemlw7Fh2Y4+VSA0VhBnu9Kq5y4rWCeMsnAvpxqmBdzHmlSurMOM twTgXy29iJU=",
                "257 3 8 AwEAAblj12hIF+bYyR2DiiEtx1K26vJ7KG7dn+qCmdoSoTqXOL0zG2fQ DLCfzzbelDWhgD/auv1634HmL8ooAV/yeDQkPDi7gAIPQFFrFDpJ+Qia xW9d9PIkjACNTlX/pXkgGh+2ft0bjnFqcWwY28qpmfQN8FFkQr4wiAA9 LIVuyoemz9oTu2Pj9xN3WwkWNUuFkV0elduLNdBni78YbtlpOrGbWsJY h9eLvl/VZq2+J7jVNgJDOouC0ckugb22Xgz2uARcU9slZ3lKdg5zjFPo pVSoQcZW/KDBEPz0Rm7hvTkztMU0F/gV3FGJYaseMh5jAxEKiCwct5Sn peQoPDyGphHlABtC5fWP4hc6UoKiqm0cI7S6SD7tnWJ/6brOzxr48phQ sBvxCm/VTv8Ce7zXpxr1Na57RvzODmUx4xLBPwJfY7tdSgusuYWagy6d 5H2rUVzWnVG+h0MCZZZ8XSnqPt2JcTCcw1MJ3wwuxolk/Q+P96+IhVCr h5FLVxiAHIEOPRZ+MtP9aZYQdNWVdFJdbgqZkdT6+NG7cbYeUi8oQq9J QfIGQqanhfTSiOtEy/0megOHmyDFT36UZI55MSmVsxmVr9/wfSxbOlbk QncBfDSAIllTniOXd6TAjW551XnWSCl7myiuotE6g0f1gc9DpDHDnu/h 4kOza3zjU0NGrLOZ"
            ],
            "RRSIG": [
                "NS 8 2 360 20260831031506 20260801031506 14251 nationalacademies.org. BqPbat41uE/2vx03/HuPvyY2L6Ogo6wGySY6xvIwmAfB8K4ztCIK5KwS QNAHfFqztRO73m8aw+pBvGyeKBQgqXCc5gJMDP83/idZSYqrcBUg3qn2 uPCzSHB275A33+9agmmiAyvxJnbMZGTp05r6dQsJwf8uLc2IdtoIjKra cUWubLgWq9qiYL1U5BpAJ8fN1PkLOf9yXUy+iAGq04eoS4Zp4B+ZbDcA 6cC0SBLBtsnxMk1AwDCaj35vgZFryJ8H16bjHbyDS8lbeVbwuUDRDkVM 0pCJMna3vBIyuj54HYVQabXJRUhc/3Bs/gLg6Isnta7terV+0fu0ygao N0D0aQ==",
                "MX 8 2 360 20260831031506 20260801031506 14251 nationalacademies.org. oR7o80MfjhqvPU5NW4ZBsBVRnu1rursJuMHA2Zw6VvooAYDWKTczSTp9 jMPi7DlWos/8gNfrNa1+lTwTVLs2MSjHt6jTFJm41fH6R1SfVWGWsHaS 60J1PsEPbv5Dg6vWfNwrKj0aOmOoo+YifItk9jFuUVzdUewDJIV7yslg TLjhQbxdTaGFpnLxaKjOnxWRZLMEpG5Q5wX+rN3Pg6mniY9jNGBOGZjr GeeGUIQ6m5t5XOuAgqriAd7+vcgWfMdWgbFLFDIFwSJf2go7tuLvDGfa lVUpWq28JILPiHr23q1JEFRzwuQe4BYtdvY8JfhamMate7scF4xBPT2I DHVWwQ==",
                "TXT 8 2 360 20260831031506 20260801031506 14251 nationalacademies.org. bQ+hx0Mq6w1KfaqEKFjegNckoOEgiz5ozrwVEbOYw2iMdaT0hOw6joFi f104mvSSTssBa6cKNx8OIwHViBUcBX2PiEB5kj5cXejSP96Zo+p7c9tI mu/xExNL6P5xU54VM7hWAbdM0aN2VF95sw5VHmSes30h18vSQxApuENn np3qY0Njc8W1bVvomkVVEVT/huwhiIl52fYQz3jLTiZrypjfBjrlKT+x GiYyuigrj6E2j0ABi63g5OTRK6z2TAuIO/v/ZbnhmPutiljZbaKdc07I NGiV53gixxwtdcrbGV6x1cCJIsXbK5D+ioYf/fmq9dI5TZkXKFpFo3Je +cYuVw==",
                "SOA 8 2 360 20260831031506 20260801031506 14251 nationalacademies.org. pU49u3hfgJpXREfVCnYOoMBnIJL1k7ZzJyw4+vpIzAsyj7xTbB840Pn1 iQLKN9AEEEEEePZsLOA/FB5mEKmXTdGomudyU4ZhdqUoUbB6MjW4Q+Af 3MSG1hT7qDeon6p0/1n5ITh7j38Oc2LvTdVCtA0iqAKvqZ5yWi4/vaXe Y4nmXlgnVpUPRk32XBu6iJ9NyWn5mYwx5HJ1uNrsyJV/EDR0mFNV7tHy Pvm0Lp+tyFo7Tvvtwyc40JQFI5G7wRNR07806OqxhX13kZStOlzxcXAs tShYQUvlbgMR3sypjDxGPQxbeXClub4fawc7IAPBceO7ntgktA5X39ol 1vWqJQ==",
                "DNSKEY 8 2 360 20260831031506 20260801031506 8995 nationalacademies.org. hQ4skzWxufQo/abWPzLEaVa9fGiGCVjLUpZR4aYR7NYyGJAZuF6sESYU FQVuQf2ETdnLSmE4TbfdTLxwxlTRxmuUrPfKO1QnI8srvGljvQcKP3Ax S8FDK1VPSesal6zzz26cANvVlBtoShcNw0CXz1blz0huTEAbg8V7r6rs Zf1RX7HA9yaUWmuQYF1/Rrj7UfWEgDfeiOq09aY1mG8uSXdy2XoPvkzE E7DcQsdJrubG41Zz5UqkPzmUBJntEj0wduOVvZ0Rr7GmR9yarIkww3hl Ju3hvRGP/nvZHKoAOdZAtamnvh3GziHRqAdQ6o7lBGYBcMpYzD05bSh1 bpEWGV6V/cRGaI0u/7DXQXMlDSmsGIpd5VOlqKyt5N9p+Z5Ovb8LDo3R vTlL3jFxE6U52suf72P5au9aDVKihOlkA/IE161TouLGk6gQ9Z3/wovL Q9lb41VmkR6MEr+9v2lT/bwcKN6LkbzSu7FRtubs7/LkYRds3RmMihgy 9QSStiurZHLFwkACWGOTzJT/Q55Xczuzweph1Sbs0cbqgB0hBdsTmCok 1MvkGSFN/s5dFEVFVrOxXRvdxxBjrlxYEWYCT+9wKKAoHap/SbfebYpF FeKZrFU409YEgVpGrnLj/HzR+klZGzpmatDRqdC2a97aGxYblVqfLCxx 90Hm/ZxgK0A=",
                "DNSKEY 8 2 360 20260831031506 20260801031506 14251 nationalacademies.org. lczVhIgwFFduM3/qk2IMMm3Yjz4YUEwMsJm7rMhr+6KeLygOEAussSSL DngaZEW6RTHrARGbIky6jR6LK6Inzy/VhOk4AVM18tVw6nz4B/0umPhF HR5ZFbyTvo7Ns8oS6n7kWwjVpOgOGqD9N9Kw0EvyNT4bSqHQt2inpiRP eVDpzkZMiFn9PATXFXY5LZijb4GzIFFAU1ZqmGadjAOQnjKvMgi+UlaU eYBrydtUVcfK3S8LCp50g8AZ1YdFVmIvyHS+miOlRpIYIM4S4I5SKPXm ZWH/Bp0nTES1WuXYiXAAhNPhveZu6xj6BMuzfJU5id5ylaGbTKI7KBQM p/9XUg==",
                "A 8 2 360 20260831031506 20260801031506 14251 nationalacademies.org. vAz6WJSFm6MlzDR1TDaPmZYmn13LCQmpZkCUMnsr0rLnSphGiV/N8V29 dnRoPKgsHARkXuilNtOVE8BbUPt9gwuirBUKjMrfrbRC5NzePt2/w/w4 16/CqLpuLKohp92vy+xmFl66zw+TO7UD4pUa6g1tbU8BLIybUAMq41Qr SFc1BsUBZeTJ663/433hE9q/sXNWawum/0ZMJTmbZwa4/spoEfBy88eG tKK7xVrBBJpJW0MIjp3c6foBAM/0tUQaNgUHRphHea8/JQmsdMY1+VxJ 2NQDL9m+e2XpQFCzK36dniBF9aF6b0jgmajZY1JgMzj1+eGsXHZ/Z06n 1g8Tjw==",
                "DS 8 2 3600 20260822152352 20260801142352 44925 org. bIjd/gGrATlp+0ymSeS+P9+w9yOPWT6tQZaNfhYC3odvrgsVJu45cavI z02wWiARAc210WcM7OOJay9YEJqE0onR2LojSVbfAs0L1Yyey4K/W1Vd 2kpDh1zxO5mONBqI1Xur0OidtQk7zDxOo3gsP2Sk3PEI3KvpCVpvN0qm cXU=",
                "NSEC3PARAM 8 2 0 20260831031506 20260801031506 14251 nationalacademies.org. uZigKG0GoWcTpbyQEc+BnNHOQjFg4hzjUtymUWD55vNtUZNkXCssdR9L uX83Ylvpkt2fhAGU/E9gtInwrIIZaTu5PPKyf4EfHSYGfUhNOjwFhKX+ /FjC4M7Tivg1+MPU3f5Jsp/VnGiFs0RAIKuCRAmqUkW4QuRV8tqTTH76 l/+px/FBVV+ydFZTiKkRD4y25DXNBQNaM31x0a1B4mTFGeMhJiKoDIOj TOqRITUbyVV46g1pDzG1ljut8dIVhBHdVo6gPSfASy5uqONZP/GsxLIm agoJTz5sketrbr7+KAThYIjG3OZT0q9Cc55Bu5qhb/QttGLN3EMM31Pw Hxw5Pw=="
            ],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "144.171.1.16"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 mx ip4:198.244.61.9 ip4:198.244.59.95 ip4:77.32.186.167 ip4:204.141.43.101 ip4:142.0.180.66 include:sendgrid.net include:servers.mcsv.net include:spf.mandrillapp.com include:spf.protection.outlook.com include:49197025.spf07.hubspotemail.net -all",
        "dmarc": "v=DMARC1;p=none",
        "dkim_selector": "selector1",
        "dkim_host": "selector1._domainkey.nationalacademies.org",
        "dkim": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8ExcDCtGBfmlle9CQawo80kBWzp00r+5oTQbX7FeU3JqUycfolt0gRfs5S1unFYMaQbDNIHYgIyOwlvR/gQImifee5GK6M9QYkDWcmajlpidiB7RHqNMfUlXovrqgIks3Lu9RXWYxBIJYYjARJDET3lL8wsf48hDraZbrNGbnc7tpkfoA9Oy/ZEdjFoo5cinpqlBIJJmcamf1pDDbOSCJry9pca6pWm4APOg0+Q60YIlQFPKUnDsaaWkmW8KR2uT2ZFfIN1BCTHxKemaUVynbuQuFyF9zMIw28w8hXJiXRGtzCPjjrQVM5eJSe0dqoNffFmxbfvXVUP3T/gYx+RtQIDAQAB;",
        "spf_analysis": {
            "valid": true,
            "lookups": 6,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "none"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "cyrus.nas.edu",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "144.171.1.16"
                    ],
                    "time_ms": 61.5
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "144.171.1.16"
                    ],
                    "time_ms": 64.74
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "144.171.1.16"
                    ],
                    "time_ms": 172.69
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "144.171.1.16"
                    ],
                    "time_ms": 147.37
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "144.171.1.16"
                    ],
                    "time_ms": 75.54
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "DigiCert Inc",
        "subject": "www.nationalacademies.org",
        "valid_from": "2026-03-26T19:00:00-05:00",
        "valid_to": "2026-10-11T18:59:59-05:00",
        "days_remaining": 63,
        "san": [
            "www.nationalacademies.org",
            "nationalacademies.org",
            "nas.edu",
            "www.nas.edu",
            "cyrus.nas.edu",
            "www.national-academies.org",
            "national-academies.org"
        ],
        "protocol": "TLSv1.2",
        "cipher": "ECDHE-RSA-AES128-GCM-SHA256"
    },
    "http": {
        "url": "https://www.nationalacademies.org/",
        "status": "HTTP/1.1 200 OK",
        "http_version": "2",
        "headers": {
            "location": "https://www.nationalacademies.org/",
            "server": "BigIP",
            "connection": "close",
            "content-length": "401890",
            "x-content-type-options": "nosniff",
            "traceresponse": "00-18c9ff65ec54d9a2f2165d3125bc10fa-ee06c76eb9094b8d-01",
            "x-xss-protection": "1; mode=block",
            "x-debug-info": "eyJyZXRyaWVzIjowfQ==",
            "x-timer": "S1786239540.441394,VS0,VE918",
            "via": "1.1 varnish, 1.1 varnish, 1.1 varnish",
            "cache-control": "public, s-maxage=180, stale-if-error=86400, stale-while-revalidate=600",
            "content-type": "text/html; charset=UTF-8",
            "x-platform-server": "i-0286aad46c5dba6b7",
            "referrer-policy": "strict-origin-when-cross-origin",
            "x-frame-options": "SAMEORIGIN",
            "accept-ranges": "bytes",
            "date": "Sun, 09 Aug 2026 01:41:49 GMT",
            "age": "169",
            "x-served-by": "cache-iad-kjyo7100026-IAD, cache-iad-kjyo7100026-IAD, cache-iad-khef600053-IAD, cache-ewr-kewr1740065-EWR",
            "x-cache": "MISS, HIT, HIT",
            "x-cache-hits": "0, 4, 1",
            "strict-transport-security": "max-age=31557600"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": false,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": true,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "BigIP",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.nationalacademies.org/",
        "title": "National Academies of Sciences, Engineering, and Medicine",
        "description": "Our work helps shape sound policies, inform public opinion, and advance the pursuit of science, engineering, and medicine.",
        "success": true,
        "error": "",
        "status": 206
    },
    "network": {
        "144.171.1.16": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "nas-edu.mail.protection.outlook.com",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 23.5,
                "banner": "",
                "error": "Network is unreachable"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4034.1,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4005.1,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 82.78
}