{
    "ok": true,
    "domain": "newvision.co.ug",
    "generated_at": "2026-08-12T03:26:03-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 77,
        "label": "Good",
        "categories": {
            "dns": 70,
            "mail": 90,
            "security": 65,
            "network": 50,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "4 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 0,
                "lost_points": 15,
                "detail": "Both DS and DNSKEY are required."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "2 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "65 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "0 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: ec2-54-159-187-115.compute-1.amazonaws.com"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/2 200 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "4 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "DNSSEC chain",
                "detail": "Both DS and DNSKEY are required.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 0,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "2 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "65 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "HTTP security headers",
                "detail": "0 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: ec2-54-159-187-115.compute-1.amazonaws.com",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/2 200 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "54.159.187.115"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "15 mail.newvision.co.ug.",
                "5 newvision-co-ug.mail.protection.outlook.com."
            ],
            "TXT": [
                "\"5d39n5hi29r51413villk902t34031yw\"",
                "\"4RFMKs/WCO0D4xmcZil97363W6GnJbo+yfjiq/Fcq+WgnpAlOZn7EO0avRqCdWSbSOqhsQXCcNcXU2N1WmtR0A==\"",
                "\"MS=ms90873234\"",
                "\"24bfhx0h6tvczsdqy3x1jmw8yrwdhg7p\"",
                "\"v=spf1 ip4:193.108.252.250 include:spf.protection.outlook.com include:mail.newvision.co.ug -all\"",
                "\"_2z3c9on71aw7m9x8t8dxg94t17bq1cg\"",
                "\"google-site-verification=0qQuDFp2V7SRASXnBWbmVduqQbWz8c9fqgY66V2ZEO4\"",
                "\"mCVRSd8bJX5bUcWOW0uztmoCpY+V7QOJ61Xv9WmzbUqbnNRC0+vGTwQIBdGuitWHi653lWR6bNYUQzDaApvEvw==\""
            ],
            "NS": [
                "dns1.i3c.co.ug.",
                "dns2.i3c.co.ug.",
                "dns4.i3c.co.ug.",
                "dns3.i3c.co.ug."
            ],
            "SOA": [
                "dns1.i3c.co.ug. eokiring.i3c.co.ug. 2016021999 10800 3600 1209600 3600"
            ],
            "CAA": [],
            "DS": [],
            "DNSKEY": [
                "257 3 13 ZibDyy5PpEX/eTcWF/FvPfgbKc2lPluRVa/BVSGpi5zsrH/p+hI85X+2 sH0io8L9wBa3gSEGNff0qWqDtiQWGw=="
            ],
            "RRSIG": [
                ";; communications error to 69.64.44.20#53: timed out",
                "NS 13 3 60 20260820000000 20260730000000 22718 newvision.co.ug. cbfQn/XyMJ/AxDWeqo0r3yta1WTpH0005JFyosK4Fpnh8hSgF4jZwsn5 08f3cSlvqyj4GDkxmSeuyMYdyi/KVA==",
                "DNSKEY 13 3 3600 20260820000000 20260730000000 22718 newvision.co.ug. iU84dKDNfgRnFGFnZgvGB0wP5xsoOvnwx8dGkXqqbKaBtF3BkK2k9sGp 2/Xw2Q5JhWDhAaHwDjXw9LgYvJnvGA=="
            ],
            "NSEC": [
                "_55ce624ee9a278a8973e936e56290876.newvision.co.ug. A NS SOA MX TXT RRSIG NSEC DNSKEY"
            ],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "54.159.187.115"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 ip4:193.108.252.250 include:spf.protection.outlook.com include:mail.newvision.co.ug -all",
        "dmarc": "v=DMARC1; p=none;",
        "dkim_selector": "k2",
        "dkim_host": "k2._domainkey.newvision.co.ug",
        "dkim": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA0b90ObWaLDc+i9MtTNmGeWO009hr20fIxhGg6XBT2kjZ1DTThopSe1nAndsupmcBwlQ5Q6LJ+ZAxLcujnPIxM0ZBLmgpkv8u6RfY4eFP8OLvdAW3oSuB0DyLDigQX4Sj8wBO4YIdQH6AAmBeOsidsKAFNFUCpc3vCxtBDR12U+cBg724l3sBkMQ8evnz6idnqxq9QAVYh8k4kJ+RP+6cqTdy7LjIm8xY/bQNpQIpGUAuDo2DjLcCDun9DAI4Q/3z+Q0o9QuQIDAQAB;",
        "spf_analysis": {
            "valid": true,
            "lookups": 2,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "none"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "ec2-54-159-187-115.compute-1.amazonaws.com",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "54.159.187.115"
                    ],
                    "time_ms": 151.16
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "54.159.187.115"
                    ],
                    "time_ms": 175.97
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "54.159.187.115"
                    ],
                    "time_ms": 193.21
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "54.159.187.115"
                    ],
                    "time_ms": 513.83
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "54.159.187.115"
                    ],
                    "time_ms": 1637.98
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "Let's Encrypt",
        "subject": "newvision.co.ug",
        "valid_from": "2026-07-18T20:03:26-05:00",
        "valid_to": "2026-10-16T20:03:25-05:00",
        "days_remaining": 65,
        "san": [
            "newvision.co.ug"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_256_GCM_SHA384"
    },
    "http": {
        "url": "https://www.newvision.co.ug/",
        "status": "HTTP/2 200 ",
        "http_version": "3",
        "headers": {
            "server": "nginx",
            "date": "Wed, 12 Aug 2026 08:25:57 GMT",
            "content-type": "text/html;charset=utf-8",
            "content-length": "169",
            "connection": "keep-alive",
            "location": "https://www.newvision.co.ug/",
            "x-powered-by": "Nuxt",
            "x-robots-tag": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1",
            "x-cache": "Miss from cloudfront",
            "via": "1.1 ee309b9c3fe0a31bb5262d7a216eb7f6.cloudfront.net (CloudFront)",
            "x-amz-cf-pop": "ORD56-P16",
            "alt-svc": "h3=\":443\"; ma=86400",
            "x-amz-cf-id": "BKHitgRnp07cuTucjdz3jpXEGCincSXYMiEVAuQMKUx7I71DeVykcA=="
        },
        "security_checks": {
            "strict-transport-security": false,
            "content-security-policy": false,
            "x-content-type-options": false,
            "x-frame-options": false,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "nginx",
        "powered_by": "Nuxt"
    },
    "webpage": {
        "url": "https://www.newvision.co.ug/",
        "title": "New Vision: Your trusted source for breaking news, analysis, exclusive interviews, headlines, and videos at newvision.co.ug",
        "description": "Biggest News Source in Uganda and the East African Region, Breaking news in Uganda and Daily news and the latest from Uganda, New vision News, breaking news, headline news, latest news, top news, online news, video news, world news, national news, Uganda news, newvisionnews, new vision newsonline, breaking news, latest news, top news, news video, new vision, news today, news today in Uganda, news in Uganda today live, breaking news today, Uganda news today live now, what is happening in Kampala today?, Kampala news today live, world news today",
        "success": true,
        "error": "",
        "status": 200
    },
    "network": {
        "54.159.187.115": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "mail.newvision.co.ug",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 55.2,
                "banner": "",
                "error": "Connection refused"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 257.3,
                "banner": "220 xch.newvision.co.ug Microsoft ESMTP MAIL Service ready at Wed, 12 Aug 2026 11:26:04 +0300",
                "error": "No connection"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4071.1,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.216.212",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 89.3
}