{
    "ok": true,
    "domain": "njit.edu",
    "generated_at": "2026-08-09T16:53:53-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 78,
        "label": "Good",
        "categories": {
            "dns": 70,
            "mail": 90,
            "security": 69,
            "network": 50,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "6 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 0,
                "lost_points": 15,
                "detail": "Both DS and DNSKEY are required."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "1 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "23 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 6,
                "lost_points": 4,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 8,
                "lost_points": 27,
                "detail": "2 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: ec2-54-83-189-142.compute-1.amazonaws.com"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/2 200 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "6 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "DNSSEC chain",
                "detail": "Both DS and DNSKEY are required.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 0,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "1 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "23 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 6,
                "lost_points": 4
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "2 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 8,
                "lost_points": 27
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: ec2-54-83-189-142.compute-1.amazonaws.com",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/2 200 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "54.83.189.142"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "1 smtp.google.com."
            ],
            "TXT": [
                "\"box-domain-verification=b97c2c11d81460dbb37e2b231484fa5142588197e9c98e496b540c8f56811e9d\"",
                "\"tvdtpn908lhstj2euvrsuvmdmj\"",
                "\"atlassian-domain-verification=QE/ifBd75xnNvXwiBZGMyIH/u0KRe4/KraKw7JWcHR9o1c/M3TghYB/ag42CTUNj\"",
                "\"pardot783553=9b8ddcb0ee4ec43da07bddd448991ca41b408f666adf1bcc198dcfbc37bc5ec9\"",
                "\"e2ma-verification=yjlfb\"",
                "\"SFMC-f0H0_eRBayTyP8tJAJqBk_6szpO1sIa7pWMGBjGx\"",
                "\"6PL9PG1ISAO98YHQQWTPLD8NTQVRCRPBSIDUEN3J\"",
                "\"n9ms7q7ljdep9lms0emeao75hg\"",
                "\"webexdomainverification.4C675B8B1B18B136E053AB06FC0A3F65=9132d5a1-731e-4aac-b533-716ef0e280b8\"",
                "\"ZOOM_verify_Ek0Lp2WgG6lwrVFM2YUZ1J\"",
                "\"e2ma-verification=zjlfb\"",
                "\"google-site-verification=_rSn-EcB7eH6VrQRPz48556WTRLz7IBQs8gIob6mzd0\"",
                "\"v=spf1 include:qtv1o1uh3y.spf.mailauth-us.ironscales.com -all\"",
                "\"p4maerjl03ncmfedop1pjabn36\"",
                "\"adobe-idp-site-verification=07166514-9050-4826-8b89-fd4b49237eb8\"",
                "\"fvm0h8a4rjl7gfbt0d1a7cv2q6\"",
                "\"google-site-verification=fW389ytuYuaSpR14ffEeGB5QS0NBltjK5ROwQUP47X4\"",
                "\"smartsheet-site-validation=ZkyelrwohLMJ4B1sezRPGUxaZPdo9eEb\"",
                "\"have-i-been-pwned-verification=a5e45869c4aff93142d0e08a05532c0f\"",
                "\"ciscocidomainverification=2995952099330ab11e93c30f356797792e0bb86a57e8bf9217962ffb476e8a9\"",
                "\"anthropic-domain-verification-03n0f9=YOzncOiSKcrzI8V7854QzolsK\"",
                "\"6u8op5ercvdtlubpdjfqqeth35\"",
                "\"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjoiUEtDUyM3IiwiYyI6IkFFU18yNTZfQ0JDIiwiYjY0aXYiOiJnSGUxOEFRZ2NsSmoxUVpIWTR6Rzl3PT0iLCJiNjRjdCI6IkpZL2ZyN3Rja1RiTVZ2Z0k1c3FlQ0FtMHNvckdvU2hzSWkvNFpPQkhUakk9IiwiaWF0IjoxNjEzMDU4MDQ5fQ.mMcxCS-Xoy3e9Mv9t7v2_aW_OZiWDQy\" \"IvUxrAfF9je8\"",
                "\"duo_sso_verification=yTBd9VeL397D4tQITxBSMuBnoDHNMwYbhTZBp7AusEJ97iiis0Tw63N8y4i0vVKB\"",
                "\"mongodb-site-verification=vpyZLx8suEejMOYoDHZ2QCHHRh92TLPY\"",
                "\"docusign=f39b8520-8125-4841-bab1-b94bfbb1e746\"",
                "\"docusign=8d75f8af-8bba-4bdf-a653-e800f95d418d\"",
                "\"ddh41s97v9677m8rrnepuk9loo\"",
                "\"8khkostmv2v7bekjo9m0nnb5a4\"",
                "\"google-site-verification=xeC4WGIU4OUTzJmzc0XiME8nlzzsUqFNwuopM3mvNro\"",
                "\"slack-domain-verification=PkuuW5fy5fvmRiDCJuIA0h8Oim9FeFozS7cTEyPQ\"",
                "\"Mosyle-verification-1731601150\"",
                "\"iContact1803387\"",
                "\"a43geir7mne74ie6d0j0djfgqk\""
            ],
            "NS": [
                "ns50.njit.edu.",
                "ns40.njit.edu.",
                "ns00.njit.edu.",
                "ns30.njit.edu.",
                "dns2.njit.edu.",
                "dns1.njit.edu."
            ],
            "SOA": [
                "ns00.njit.edu. telecom.njit.edu. 2027042298 300 900 4233600 900"
            ],
            "CAA": [],
            "DS": [],
            "DNSKEY": [],
            "RRSIG": [],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "54.83.189.142"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 include:qtv1o1uh3y.spf.mailauth-us.ironscales.com -all",
        "dmarc": "v=DMARC1; p=reject; rua=mailto:t16qr6a0ya@rua.mailauth-us.ironscales.com; ruf=mailto:t16qr6a0ya@ruf.mailauth-us.ironscales.com; t=n;",
        "dkim_selector": "google",
        "dkim_host": "google._domainkey.njit.edu",
        "dkim": "v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKy3gvAQYw2S/r9+yxWqCUerznMqpjPU5DIP4XrQROaLf9wkejhAAcutmu+FsaK5FEkhL9++n3Z9+gNoE43tRI8RF2uG1VrICmRZPTwGdbt97gsmeT6lqtMxjg58w8J8t74M+fJ8WRbxPxe+9H70sOYBfqxtnCNSvf2bZj6TY0TB6apPb8a2/EmkrBREg+uvBz9OvStb43Hn3kTJfKYrXkpcUYpRFsre8HP7/80uqPfDUSrFuRzh8TvMPtyOnf1E/js1n9i+nRgodoaniR3g+ar5Tfw+IE5JbQSwZ0dnxw3QdItkO7A2CzUYrlP4oc+2SK4uwJQsm8aBVmlO3abyMQIDAQAB",
        "spf_analysis": {
            "valid": true,
            "lookups": 1,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "reject"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "ec2-54-83-189-142.compute-1.amazonaws.com",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "54.83.189.142"
                    ],
                    "time_ms": 48.62
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "54.83.189.142"
                    ],
                    "time_ms": 63.09
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "54.83.189.142"
                    ],
                    "time_ms": 66.62
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "54.83.189.142"
                    ],
                    "time_ms": 51.78
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "54.83.189.142"
                    ],
                    "time_ms": 597.64
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "DigiCert Inc",
        "subject": "*.njit.edu",
        "valid_from": "2025-12-11T18:00:00-06:00",
        "valid_to": "2026-09-01T18:59:59-05:00",
        "days_remaining": 23,
        "san": [
            "*.njit.edu",
            "njit.edu"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_256_GCM_SHA384"
    },
    "http": {
        "url": "https://www.njit.edu/",
        "status": "HTTP/2 200 ",
        "http_version": "3",
        "headers": {
            "server": "nginx",
            "date": "Sun, 09 Aug 2026 21:53:43 GMT",
            "content-type": "text/html; charset=UTF-8",
            "content-length": "171908",
            "location": "https://www.njit.edu/",
            "x-content-type-options": "nosniff",
            "cache-control": "max-age=31536000, public",
            "expires": "Sun, 19 Nov 1978 05:00:00 GMT",
            "x-request-id": "v-edb26b4e-9261-11f1-bb25-137ef3254aed",
            "age": "203950",
            "via": "varnish",
            "x-cache": "HIT",
            "x-cache-hits": "47915",
            "x-drupal-dynamic-cache": "MISS",
            "content-language": "en",
            "x-frame-options": "SAMEORIGIN",
            "vary": "Cookie,Accept-Encoding",
            "x-generator": "Drupal 10 (https://www.drupal.org)",
            "x-drupal-cache": "MISS",
            "last-modified": "Fri, 07 Aug 2026 13:14:32 GMT",
            "x-ah-environment": "prod",
            "etag": "W/\"1786108472-gzip\"",
            "accept-ranges": "bytes"
        },
        "security_checks": {
            "strict-transport-security": false,
            "content-security-policy": false,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "nginx",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.njit.edu/",
        "title": "Explore NJIT | New Jersey Institute of Technology",
        "description": "",
        "success": true,
        "error": "",
        "status": 206
    },
    "network": {
        "54.83.189.142": {
            "success": true,
            "country": "United States",
            "country_code": "US",
            "region": "District of Columbia",
            "city": "Washington",
            "latitude": 38.89511,
            "longitude": -77.03637,
            "asn": 14618,
            "organization": "Amazon Technologies Inc.",
            "isp": "Amazon.com, Inc.",
            "timezone": "America/New_York"
        }
    },
    "smtp": {
        "host": "smtp.google.com",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 22.8,
                "banner": "220 mx.google.com ESMTP 586e51a60fabf-459f19f2619si7102266fac.75 - gsmtp",
                "error": "No connection"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4043.2,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4021.2,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 87.62
}