{
    "ok": true,
    "domain": "nga.gov",
    "generated_at": "2026-08-09T03:57:39-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 56,
        "label": "Fair",
        "categories": {
            "dns": 85,
            "mail": 90,
            "security": 0,
            "network": 50,
            "availability": 60
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "4 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "1 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 0,
                "lost_points": 55,
                "detail": "No valid certificate was retrieved."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "0 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: www.nga.gov"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 0,
                "lost_points": 40,
                "detail": "No successful HTTP response."
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "4 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "1 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "Valid TLS certificate",
                "detail": "No valid certificate was retrieved.",
                "category": "security",
                "max_points": 55,
                "earned_points": 0,
                "lost_points": 55
            },
            {
                "level": "error",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "error",
                "title": "HTTP security headers",
                "detail": "0 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: www.nga.gov",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "HTTP response",
                "detail": "No successful HTTP response.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 0,
                "lost_points": 40
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "199.16.64.40"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "10 nga-gov.mail.protection.outlook.com."
            ],
            "TXT": [
                "\"3T1V9PTU730NPPLE1USEPU3FDBHBJ5MDKMAVY66DR\"",
                "\"jamf-site-verification=HXrw0uae3C6kDvw2fIZHXQ\"",
                "\"v=spf1 include:spf.protection.outlook.com ip4:199.16.64.26 ip4:199.16.64.28 ip4:216.235.196.0/22 ip4:206.107.42.254 ip4:141.146.131.128/28 ip4:209.29.150.82/29 ip4:64.74.237.230/31 ip4:216.147.212.20/30 ip4:206.107.42.249 \" \" ip4:216.235.200.0/21 ip4:206.79.6.0/24 ip4:216.235.195.0/24 ip4:74.123.153.0/25 ip4:74.123.154.128/25 ip4:64.244.120.32/27 ip4:64.244.122.192/27 ip4:216.235.195.160/27 ip4:66.45.103.0/25 ip4:69.48.252.128/25 ip4:205.139.104.0/22 \" \" include:outboundmail.blackbaud.net include:mailgun.org a:spf.servicenowservices.com include:spf.mandrillapp.com \" \" ip4:167.89.0.0/17 ip4:208.117.48.0/20 ip4:50.31.32.0/19 ip4:198.37.144.0/20 ip4:198.21.0.0/21 ip4:192.254.112.0/20 ip4:168.245.0.0/17 ip4:149.72.0.0/16 ip4:223.165.112.0/20 ip4:166.78.71.191 ip4:184.73.253.171 ip4:98.95.35.19 ip4:18.213.217.66 ~all\"",
                "\"T6Twf2l7U+m+Xwdp2M/zUABGkv9llhM1VHjZ2eI48zPgkzo3FrZtWPXh3b1MoE+XqqdZjGlvJCJVGqgwQBDYEg==\"",
                "\"google-site-verification=kKGZsR9gJwU5gg7JCZx5i-PzDXdqPG2lguIv3wiT05g\"",
                "\"asv=24b99f3258c66c9aea3e495c000fddda\"",
                "\"wrike-verification=MTMzMTc4MDpiZmNmODczMTY4YTNiZTk1ODNjZGY2NTdmZGEyODQ4MDYxMGQ4ZDMwN2I1YjNlNGZiMGQwNjYwMDQ0ODgxZGFl\"",
                "\"openai-domain-verification=dv-7EO4XWC1NrVMs9qZvQ4aoiEI\"",
                "\"_globalsign-domain-verification=MXYfuWqs_WgjRVilf9-rprIErAGLPpNekcA2H8Nerj\"",
                "\"MS=ms43387121\"",
                "\"klaviyo-site-verification=TNYQC3\"",
                "\"db31746a-ee5c-4b90-be1b-c443ff41946a\"",
                "\"airtable-verification=f22482db5973a7135b4f5bb0619c2e93\"",
                "\"adobe-idp-site-verification=e2fd957683f964158cbe69aeb8de16a756d29ba32639e6d287fbe36c744ae2e0\"",
                "\"atlassian-domain-verification=5F6zbXCOyrga1S2FblCsIOFt7rd1eMPxRFXa7WwTT0x01NK47nQaysEaj5MclgSO\""
            ],
            "NS": [
                "auth3.dns.rcn.net.",
                "auth4.dns.rcn.net.",
                "auth1.dns.rcn.net.",
                "auth2.dns.rcn.net."
            ],
            "SOA": [
                "master.dns.rcn.net. hostmaster.rcn.com. 2026080901 10800 3600 604800 86400"
            ],
            "CAA": [],
            "DS": [
                "57335 8 2 80854C7BB20BFA921FF2F1803BC8A13C79CCAE9273065A5DF4783E4A B9C59B65"
            ],
            "DNSKEY": [
                "256 3 8 AwEAAahwrof4GXQaRQd+yxZTBZno1u1xgWisP5KPlLm0pd5SEey0LjxL 8MS2Cn7lZczaKay60TvwWSQg9lxV5bINebHIADztBZXNdTPTR3DnJah8 +oWN3lTdbq4rdvIo/2omJNfttmIv88Osmdy1Zki7cZQBnyDKBJORV5xc H3YyqYHGPj1dYPtBC2gJpaNc/1rX4sUtnIU+Zs2KRw5mrkmqxdNij0Ta lTpmYYz8QP8Cg8P9R+8yXaW7FbAtrMu+OdDSwlIX97gc6pTTwluGtCZo 8eKOh8aQc/AUFOCclAWduSunrgrt6T/cfhD2ijQh+XyqFTrT6SRbAZ87 6iShSovEjW0=",
                "256 3 5 AwEAAcN5y9fDRhxcFJf047QSYM1W1COPqCD4trFxGjLnwA0XbyCr8RsV 30RtJeWtUXL7JY6COGUWFbXSWXsUB4rceOhyR4SRHXUfBvAjdnHejMuu GYi4qhWq2Jtxk2xrshFSIrLM5+J0K2ZAEMru2NWzppf35txyWLNaBhCA Pj8HwnW1",
                "257 3 8 AwEAAb3N2AAyjpJA74Voxc4/M20Gbsn5v5busCVF1OHDNfr3eG8Zxd7p lIw5MXUhJ0nj6HIxUUMpOC1n9jrmbVbKL0GJw2ghD4D1/W/GL3Y+GarD qXq8Z69v2PYvLemGWGMzKtGkMWMp6Jpad/09dL78WTzMPQoJIS91HbkP C3mr+aEEI9QcZaHep2vgOk6RyDZ8/xA9xhE4TPaHkIo/ZZXbJsTYkV3o GovKOdQ5ViIK14kkQKHRA0ZJuZeEG6x/OxCVGB+v5fhh2bNjTREYiOVP MxZ/dCaEm3oG+jiBUcWrIDXu2HNhGStb900l4Bl9aaSVW8OzgECe/EZ7 4+l91Nqnik0=",
                "257 3 5 AwEAAc90oZMsHfZtGEH5KZiFsk79IIipFEOouNs5V0i4V93TOz5m37n8 A+Go9B+DwKEBd5tufgYHsdP6U26xzpbL7PLGFzbc35dVN4SkYO5qke7F ZC8wUwUw8cWvn4WtdjXKZ/XYtn6XHN2UUHnr53yG64Hk9HVJQfvj9sR8 unX2G0Mz",
                "256 3 8 AwEAAeUqBZ61PIDxkxyahFFfvDXA8uiwpaBqUnnv8+igiut8+7dwVW4O vavhQ2sYJWyg+OhwG3hiM+0w8p9kF3JbW7XLyQTF+lTjwnoN9f6uz34r Wf2bZV5sT7G/ZDO59Ka/1xEjQRY8ihwPsou4p2jBT1EEAkXCw2N+bAhx fHDbqxJVzonvUo80bLt1WUmc7CfN0pYi3llk2jYCSAfm0PEppxWP3XtB M7Q6V63Th5U8OhvDTpKGpI4HfvbGvCp8+P29u0T2eLqwZF6VSdEtZCP+ C0/DI1K9f8fL8Oe9rlJPO+zLgWgVXhRMUe7VbT+MqYoNBjU8GiWVxDom gMyuugOnBtk=",
                "257 3 8 AwEAAaaY9IZGZRI1+OTBniuS+GUg8UNGwa9EYnrRpKldXQwDhyLjeT1H s3AV3r6f+INA+sxbqZbdNCc8XcP3P/PP1RP1cGrS64a1veRERc9Bgf/T 3ZxbrffukaVsBrh93BRJt7xle9nhUCXsXmy5X5W7T3RWZjz+n/+f9yBt vdMwIhuRtIYhpSjG57mGFq199XGgp0P+LbIYXw6+8B/8OFhOIaxrKO5L a61B9hTwwKJ3Us8G7quqnLcjg7kwfWrfuFW//zORQQvJ63y60vnQ2iVe yyNmN/bXr9t0ynmnme6ptaWUGVdr8oEBoXV97ZFgl7/Qt1kzztjURiQg 4kBfpvxT8VM="
            ],
            "RRSIG": [
                "DNSKEY 5 2 3600 20260908040358 20260809040358 21537 nga.gov. ZyXc8V76273xBqb86nKUY3grwgbS/Zpktem9cSbgexDHZCxwg8JWbjNy Ms6Bpcsb8SI4jAJy3iaIvSGL/gHn914we5mseXAK2NVpw0P/CWISxlUF BHL3LcaCQh69o3ja4Zh10HtfgFPk15GG9eYN53oyeZkE/aoCJW2TKpj4 QzI=",
                "DNSKEY 5 2 3600 20260908040358 20260809040358 56044 nga.gov. uFDLpPxq9eoRfm1JWARrGYTS5mvv6o65DR5hPhHQzDFbr01GQWvOo7Z/ lzt/rB8iAno1rc+HI68RoAG223VmC8vX65Vdwa4FzFr/E6uD81Q2sYC6 gIY7DzJxqkkGE79puxjdpAmI9RYaM09OUCIEdvXcolM+pMnpVOhKc9oJ taE=",
                "DNSKEY 8 2 3600 20260908040358 20260809040358 10338 nga.gov. eKzA3KIvaHJwcnaCvPPnlDTIUh9vneAOIssF6WyDixMq56Zo+KEwHLEX Hqfqcu3zXp9RAQTVKodfcexMc3ECVFSJpm1Z/YE0MLHrhUU6Khkxdbha FtlUz4xvsMyCVXv32c7H44/70SDO/wYUPBF0FvMPv0/Ib3dpg9LwEfcO ysE0mSI7uaka8NmhzQQHuUhn8W+R6vb/+1hzh2ZiOBgtAX6mOlyVpJtx 1H/1SibiKZp7xhh4owCOIG8tQ02zcmbCL+ZVXs/EMze5EFgE+jn6PKhq MW5hB4fE9db6PBWswkTWWBXP1+B1R0kot6TCO7WQq+Gf+VK0XmOys+/d f8DhtQ==",
                "DNSKEY 8 2 3600 20260908040358 20260809040358 42536 nga.gov. qUGTKXXGGUtOCEb+/R8UnVdrP6QeSDMPld2cbfmk4jAoxJZGaWghQqwQ x1uEYL30YZib6eEwI9R+ErKN5pZEv97Pd3CqjFQ2XzTSpgw6Ge5fbFGg H3rrBHBZxzCXAH/G4Ejr1o8G9PXP1Nu9T3UlFtA87tYyFfusgBGS0QUz R27tyFi+siS8Gw6LFSkA0jqaBDRTOIV4Q/LFvetFkRQgJue7N8PIlEbp y6wAXtqkNWHRzZcpQ3YzidR5DOmeAUVvCjzIPFxzK1sVmX77JVvFcb26 bhb6DxTd61Gvj+mN+SCB23Q8diC7D4gPo0IG56kX+KCIwQEAPLglYDtS Pfyk5g==",
                "DNSKEY 8 2 3600 20260908040358 20260809040358 57335 nga.gov. EAEabSqXLDQ45O7F8s6wlLDYFXR1Srd9vA+jjfZWV3v1gwczJZNXS4tq vF/f8WS7xNaKnzcPqCteoY0lUK2Htm0P/yP969wYQDR1PfpuhQwUeIWB ZeVPDdiFe0wgKjnKnGWJI4/lJjxc7Fc7ua44dKFC8iOfW3sjTP4IctYX XgkIf4u0+DWG0SYY7QhDQBtXPp8aikYY8PnTfPWqOVGsj71yiv0F5vnz CBO4AJM9U88XTUD0VjGq+gFVfRHFKLQl39mXcgTpYGu7km8BuXnt38C2 ADfHlaML2e6u28jWW2gtjTp7qUzok2Q+pNes+tFKh80ybTDwuZSbXyoC 9F1ktg==",
                "DNSKEY 8 2 3600 20260908040358 20260809040358 65355 nga.gov. LhUqGtRFaeDw5psmCQomjXaKvnIKl1n3ouXLXMmMhW/lhvX2sGj8y3sA mHJEwYNzCA+6vjwAIvpZJ5YjlXEG4fPkjR+peDmx9Y3C4IeE6pJznbwp mqroZHzxgB5ecdQRH3hL6cPcjHWduqmXPLdjHqwhlaVI80FHiHEyIL1T Vw3v+cH0O5rLe06QEex/n33YsVoFk0uk1oYn1VqxYiMowqTBiZL7MZR6 kQUMueGpU8TC/X800Wb630SJ9ZrMdXCaSKXJS78GPDHwu9Yc3k7A2Q6U Jyfvhk0Tsbfe1sgyPd16h3ng+C2oo0lxRNjU/4eFdGI7rqS1ZLKa67nD gmhYuQ==",
                "SOA 5 2 3600 20260908040358 20260809040358 21537 nga.gov. BDedtyNGr3/9FeNQ8WVD/+1CvidQqqcMf7rvhCkDnHTSLyYSAoBv6lfp p9zzYluDr876xLpHbccTqVXf0lEkKtx22jiET74QdsXvvpdEMC3cRPb7 b5zExy2A3Ugyi+xzO08SCTdvhp+3858ZNnz7nrW8pVhUKP2kr04oOV+U Xsg=",
                "SOA 8 2 3600 20260908040358 20260809040358 10338 nga.gov. UWYyinHJgyWPVuqUWEkbzChFTpk5yJf3TZvj066TQQuV2p9AwcnJ/3Fi lMlrbR2X/gLUebxOcZglfhUnUTuwAqERfPqhwuEW12fEbek8YVe71A94 xXHdAx13wOD4KvLSKNMz5NehtgUD70bdBTXcZBf5gePRfw3Y/DmNS7Mj lT4wI1YddZLKIM4S7PaKr/tEShiWqCZXMaaqI+BwyvlMeiR0U+AIkGUR WlMJkrVKbsCn6m15DOWG4xfdQ7AazcDuCRxNHYQn/PTWBuQEjI9WRBPX 1/pdco0PdQYNuPBnn2gidsyqC00EIrFeO/8L1lJ4MnoDudJSRhXVBEaA 9PYagA==",
                "SOA 8 2 3600 20260908040358 20260809040358 65355 nga.gov. ofU3qKdDHi6rXTCe20Bg5iBYSz5/5/HPhTG2jxlyy2GL7Hv85KqqnqNm 0Ot82s2JJjuDaF8hyUXEydm2HHWS98Hevi9AZwLazg6KTj8r5ZtHzywv QVnlMqjfrIqzo1NnCp+u9K6RvHiMEERwVMatQqHZCKXZqPiusF6tb3dH NiLPZ6za/jgzFVSsYNGFagjvh+kh9ieI52Q8cfnA/mxJtCSqpiWfou5o FHS835xjchiizVHlGQ51M6TuK+wr8B4LHUk60MY0udhqSiV1LRcRSdnM +j1Pv3EGPf3E0pPSyI0lbdGbo4IhzPSocmCvWw8+MW6c6DbbJvgNiefY bV/IVg==",
                "NS 5 2 86400 20260908040358 20260809040358 21537 nga.gov. G88Wf9K2OwrUWXBWOZoYUxC9ynX0HkAsnWOZmWcgjVNIZDy+vn7NOt5E 5Wvj9N7RCnuEQE2jRZwbrz+z5xMjOhtCTvxqDKY3sAQDMbcTZ6O9ZQD7 tzKyik1spN5ZMpO4pEJSnpUIA8EchMsbmElYDdijO+1EBsaEEdC8gSqf Sjo=",
                "NS 8 2 86400 20260908040358 20260809040358 10338 nga.gov. L29j2U7cC02GDES1zEeFPKc2+R1ulatHl6FbrvhHQYU1OwGnZ6UqOfWg fVsh/6CnOEBzsj+1Es13l/tVd8d1AatDLcSgUdiKqENgxVetqOTevqVC l7IxDPES8esRQbnfJ9bGBr3ZYaosR+K5FMyPzOa5nkHbl9MJNfJxyZse nPClKjDfxoR5oS7/y1nsaAanDHgKiQ3qCL5Nvi08joSJnF4LKhR1A7ro +CHU//Cm98ucZ0AFa2cma4uS4RbewV2dX+XLUvM47vIt61daRVt1i3qv Owa6rw9h8OeJgJjAxEFZDjaU3l4beeSrOEBHDrW4tMLGEx/CRSrDJr6F wp9R2Q==",
                "NS 8 2 86400 20260908040358 20260809040358 65355 nga.gov. g6F5evtEJ3qeBa0abs/KYi/IME+49VKC7TSLFJ0jKM4XKA5WpwT8J7+Y 8TcumdKRFNmAqvFGStDvz5wpQaqhkXPeQaZCV6nbFkW+L/7VMoFnkWfM F8PqskQRRy3IwA1xwI+C42AZiBBxcQCKBBeeKK9JmcYxNBYCEXh8dgGL vBVowc7NLhwmdUL3BQERSssDXBPEwLqsqi6/31i8XUOZGWhcGhXjXgZo RplU3nlc9b7Njy80k4qptQoU93Yd3s1GdWBDZNOwoOeGndTqTds3wSwg rFZa9cFHGPFcC9AdL2ZgEDynIubBZ8me0CfO4E8vqKu4HSpMGvpJlVSh O51/Jw==",
                "TXT 5 2 3600 20260908040358 20260809040358 21537 nga.gov. QoaaY00fp1ZjlTL87GB0FS2rPuJ2yWha5ccMbJnEDUPhuwytJu/1RrLU ifs5oCfsYtDVbpl4Zfz7KpmG6AcIWJGMinhfLav99qZtCSrDcDlSmc3r EkzAHwqart6qx+xAkKiWDoM0LVIL9tHFAuxjC7DUIETjN/FfCpONuBzP x4o=",
                "TXT 8 2 3600 20260908040358 20260809040358 10338 nga.gov. oVr9hVnRal6gkqIGHo/do2qzmvQFHvxwIaE5RZxzYiY9utvnZQVaHGwT Gk3vxYWbVJOOh6cdnpuvcH4Eg6MNpGmG2qJzmnt5UpKJyKDaB1Bg1mY+ Z8Sq067ecFF5qcNG15GGQN9oWDmiyHc1XVQrEmAO9ZFghV+OtXdAK+az 8BOG3lsGSWkPdSpbne9JnEPNEWxTyjUeqcVp6+RyTeQz0GRYsjlHKYea Qbtf74rF3H5OCqjPHE2NfpAjBZxrMKe79T2os8gWPv1P6qZVwld888Xu JjukL9B2ZfNQFj5oAnKV4b9nw03RCmGxuM6bahbDlzCJgN2D6cwvO1uH 1tvngw==",
                "TXT 8 2 3600 20260908040358 20260809040358 65355 nga.gov. wxtzrBq9llNrAkTP+h1VGOPWCTWlS/FzXylk0VAr+09MvIMHtDYdToxI 54LRF/ZWqH1wiHD7rJeCL8dl1xWaezkdtPgqSwf5AwXlzay6TF2f8CGo bn6DhGLD86leQar0MB+Nhys1XCtRhztjYKNNEk0eOqJLrKx1oIAYD5Fe C5Vv8AZwddCtIoivpVV26v9TanSAihJ32RDQDnMc7x0gSEgMqfEVTTD8 m6l2FWa+t4TkAtvRuiljenfK8XsjVbee94FBD+OMSWG4BbvjR3z3WbjM AYk4epBKLc/3ypFFMmWHcWg3ESi2ACQBKW656/hvjj/eTinoChfehjGq vQck0A==",
                "DS 13 2 3600 20260810095729 20260808075729 35496 gov. knNCCSkGmoo/rzL28zm9qa4AuKVGyXGL2A3BVGSaGM7WFuAUK+H99w19 UIDI31s14H4GMJnu098l7ZKXJtszYQ=="
            ],
            "NSEC": [
                "_acme-challenge.nga.gov. A NS SOA MX TXT RRSIG NSEC DNSKEY"
            ],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "199.16.64.40"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 include:spf.protection.outlook.com ip4:199.16.64.26 ip4:199.16.64.28 ip4:216.235.196.0/22 ip4:206.107.42.254 ip4:141.146.131.128/28 ip4:209.29.150.82/29 ip4:64.74.237.230/31 ip4:216.147.212.20/30 ip4:206.107.42.249  ip4:216.235.200.0/21 ip4:206.79.6.0/24 ip4:216.235.195.0/24 ip4:74.123.153.0/25 ip4:74.123.154.128/25 ip4:64.244.120.32/27 ip4:64.244.122.192/27 ip4:216.235.195.160/27 ip4:66.45.103.0/25 ip4:69.48.252.128/25 ip4:205.139.104.0/22  include:outboundmail.blackbaud.net include:mailgun.org a:spf.servicenowservices.com include:spf.mandrillapp.com  ip4:167.89.0.0/17 ip4:208.117.48.0/20 ip4:50.31.32.0/19 ip4:198.37.144.0/20 ip4:198.21.0.0/21 ip4:192.254.112.0/20 ip4:168.245.0.0/17 ip4:149.72.0.0/16 ip4:223.165.112.0/20 ip4:166.78.71.191 ip4:184.73.253.171 ip4:98.95.35.19 ip4:18.213.217.66 ~all",
        "dmarc": "v=DMARC1;p=reject;pct=100;rua=mailto:reports@dmarc.cyber.dhs.gov",
        "dkim_selector": "selector2",
        "dkim_host": "selector2._domainkey.nga.gov",
        "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCzEojDEv87ykeBfqMDXEycEd3Z5Ptdz4uRFELfZrYwd6cOHLYGXpvd82nbSGWb8UuAmn8wmb3zT2tHNpXGbYx1p8Ahaf7rd6zM57pwtxMY4jR2s5VEILMGnP2UFZdOSSzAa0Pje5VWiDj2774IhWF8QxkgCyMR4rINoPrI8bppnQIDAQAB;",
        "spf_analysis": {
            "valid": true,
            "lookups": 5,
            "final": "~all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "reject"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "www.nga.gov",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "199.16.64.40"
                    ],
                    "time_ms": 234.85
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "199.16.64.40"
                    ],
                    "time_ms": 93.06
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "199.16.64.40"
                    ],
                    "time_ms": 29.48
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "199.16.64.40"
                    ],
                    "time_ms": 238.04
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "199.16.64.40"
                    ],
                    "time_ms": 195.14
                }
            ]
        }
    },
    "ssl": {
        "available": false,
        "issuer": "",
        "subject": "",
        "valid_from": "",
        "valid_to": "",
        "days_remaining": null,
        "san": [],
        "protocol": "",
        "cipher": "",
        "error": "Connection refused"
    },
    "http": {
        "url": "https://nga.gov/",
        "status": "",
        "http_version": "0",
        "headers": [],
        "security_checks": {
            "strict-transport-security": false,
            "content-security-policy": false,
            "x-content-type-options": false,
            "x-frame-options": false,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://nga.gov/",
        "title": "",
        "description": "",
        "success": false,
        "error": "Failed to connect to nga.gov port 443 after 32 ms: Connection refused"
    },
    "network": {
        "199.16.64.40": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "nga-gov.mail.protection.outlook.com",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 35.8,
                "banner": "",
                "error": "Network is unreachable"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4055.6,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4021.4,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 135.3
}