{
    "ok": true,
    "domain": "nlr.gov",
    "generated_at": "2026-08-10T17:59:35-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 95,
        "label": "Excellent",
        "categories": {
            "dns": 100,
            "mail": 90,
            "security": 100,
            "network": 70,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "2 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "2 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "4 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "1 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "37 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "9 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30,
                "detail": "PTR not detected."
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/2 200 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "2 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "IPv6 (AAAA)",
                "detail": "2 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "4 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "1 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "37 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP security headers",
                "detail": "9 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "PTR reverse DNS",
                "detail": "PTR not detected.",
                "category": "network",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30
            },
            {
                "level": "ok",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/2 200 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "104.17.148.107",
                "104.17.147.107"
            ],
            "AAAA": [
                "2606:4700::6811:946b",
                "2606:4700::6811:936b"
            ],
            "CNAME": [],
            "MX": [
                "10 nlr-gov.mail.protection.outlook.com."
            ],
            "TXT": [
                "\"v=spf1 ip4:192.174.37.86 ip4:172.179.54.153 include:spf.protection.outlook.com -all\"",
                "\"docusign=dfcde981-fe37-4ceb-8db5-1e453dfef884\"",
                "\"google-site-verification=iC5-sL5x2VMaZxWGDCC6iwNa3nuPgEx81qLy1PQRBYU\"",
                "\"google-site-verification=XkB3e2tn8VDMHT8NN55JM5fcLIRo2ATzoz5eTrd5TZE\"",
                "\"docusign=c8ac1a98-e04b-44b2-b830-4e84d4c5dc18\"",
                "\"figma-domain-verification=7b2cff20450f4241197cf04e3e996554720c887906416746708596b4adff82c6-1775074772\"",
                "\"knowbe4-site-verification=bcf3f57117181d64fe8f1857523553f4\"",
                "\"apple-domain-verification=QKxBQPApJV9LqDH2\"",
                "\"box-domain-verification=9d0f23601a367ac2c59faff24bb0bd345509e685d98586914827ff02dabcd3d6\"",
                "\"_75wb5rgje8bv9uxymc6y7t336soycrc\"",
                "\"_w87vkc38rj4c40h8uaq8kwk7fn8x7l0\"",
                "\"asuid.keykiosk-test=8F6CFF48F97AFE8FADA58131A8DE5FA495CA16B38813E84F3DA8F4FBC5F0B4E7\"",
                "\"atlassian-domain-verification=CrOFA1oVcdJFaFAwALiRimW9Na7DMORCkwgKPFmWrC82GZ9Yy85ALNt0eg8iZLCT\"",
                "\"asv_domain=779d0747814ee06030c0bb3797bd6c39\"",
                "\"cisco-ci-domain-verification=69db9051d742d1a3e0ea15d04499662b34d000bb5d67347002a6a2e934168d7a\"",
                "\"_oj78prpgtos2vhlen9141upzyfd24o2\"",
                "\"CS0030307\"",
                "\"cisco-ci-domain-verification=4cfc37233bfc1ca2d60f4904393f874b7e7322c6b094db2b34ff74ddb9df30ea\"",
                "\"smartsheet-gov-site-validation=9Oua621ZfNNxGdsjnLwPNaJYXcYYRHzn\"",
                "\"MS=ms15160738\"",
                "\"google-site-verification=9zNxQ8Pxy-eTaRkG4yN7pownpEbWpoUzJRjeMyN3YaE\""
            ],
            "NS": [
                "ns1.nlr.gov.",
                "ns2.nlr.gov.",
                "adns1.es.net.",
                "adns2.es.net."
            ],
            "SOA": [
                "ns1.nlr.gov. postmaster.nlr.gov. 2025166846 1320 480 1209600 900"
            ],
            "CAA": [
                "128 issue \"amazon.com\"",
                "128 issue \"letsencrypt.org\"",
                "128 issue \"digicert.com\""
            ],
            "DS": [
                "42784 13 2 33F7A439F1F5838A6655114F96DFF7CD428EA58D3F6A481C8F26AA76 2D32170B"
            ],
            "DNSKEY": [
                "257 3 13 uTpG87XfEDT2wOUh/qJrgR0fkq0GDQdAVui8GKpmce8LlR8kyy+RrvlC WmzVz7ceOdtxr7YK0aSD2goHrHHUlQ==",
                "256 3 13 LjdaFwvlQa0W3cf0horMc9dWqp8EGH/MM+GeJQm5oUj1J1WuBgv3+Lcy M1g101QNpLmQPgaN6qTqfjM68UPoHg==",
                "256 3 13 +NASnCKXdKu4TnW/vKb7ZnVaKaSukG6iSBA44N7r/+kTvpmdC+Zyl56/ LlQLPC7Ig3nY+U1hLGfN0KReZKTtgQ=="
            ],
            "RRSIG": [
                "NS 13 2 3600 20260814114644 20260810111325 26925 nlr.gov. pRKiIKfTa10oo0rSsyN50yLRoqIcBPGpZfV4RMK+lq12qnuzTCG1dlQf x09WtdH5pghWLliB4b5qvyk4Zt/WTg==",
                "NS 13 2 3600 20260814114644 20260810111325 30291 nlr.gov. DtMz3st8LsbNLyGuH6SX0L6XtU1JuR35awZfuToCorD/1wHp99vS8+dn N2HPZtcDToxrADLhr7KjJjEMFQntsw==",
                "TXT 13 2 3600 20260814124928 20260810121452 26925 nlr.gov. MtLdRwEJ7TUZMi4Bhu7Z1dKxk6Tz2K7wI8JxfcbVPB+xZd2soEJDg3wa P7XV7VMst3kYZN8R2TCvz3jRzCiu8Q==",
                "TXT 13 2 3600 20260814124928 20260810121452 30291 nlr.gov. L7LXMXv8YP5j3IzsZuGixh4NRw1Kvk9CZZAFu86AwZVner2wBYXwZvp1 /i0rUgQdZ1/RWqNozxIrIT/FjPQEYw==",
                "DS 13 2 3600 20260811235925 20260809215925 35496 gov. dcd4cypF4OlPEbr2aG4e927m4/aRo2bHBA+gTSiGVy/Wa3yRuuaIJyoi 8CrFMitpT4+KhAfUHy2k7zZEaGsgPQ=="
            ],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "104.17.148.107",
            "104.17.147.107"
        ],
        "ipv6": [
            "2606:4700::6811:946b",
            "2606:4700::6811:936b"
        ]
    },
    "mail": {
        "spf": "v=spf1 ip4:192.174.37.86 ip4:172.179.54.153 include:spf.protection.outlook.com -all",
        "dmarc": "v=DMARC1; p=reject; pct=100; rua=mailto:6f94ee75@mxtoolbox.dmarc-report.com,mailto:dmarc@nlr.gov,mailto:reports@dmarc.cyber.dhs.gov; ruf=mailto:6f94ee75@forensics.dmarc-report.com,mailto:dmarc@nlr.gov; adkim=r; aspf=r",
        "dkim_selector": "selector1",
        "dkim_host": "selector1._domainkey.nlr.gov",
        "dkim": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOeX/Ox82k7IxwqwP049n2kVs8TQbg6ub90oG4UUjGLSfqkxu2RRnW5y6+QIBUn8FXYJrSyfeekPdYn5ThpyXdMzj2/IUGZHTzrGSDMMRSSNY7MoSxIMC5pEG6LWUINlt5EOju8JQNhy6yR0pkISxAKcLZa41nA2bOeE4YtPjQjm8ENj8NP2kW7RDWm1n9655awLqt/cpFAgSjBQ0EX4VrMeMXQrfE2y9Oa/9v1r32VqSq6pA5NYgLKX3Xm/XHx8wu49ZxKfKl9QE4RCm42PJkjwqrTi6wyl/jGWZ9cjFShW55RN2zu0y3aGtjGE5qaPiK3iM9e3wvKeKzRx72GR5QIDAQAB;",
        "spf_analysis": {
            "valid": true,
            "lookups": 1,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "reject"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "104.17.147.107",
                        "104.17.148.107"
                    ],
                    "time_ms": 78.95
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "104.17.147.107",
                        "104.17.148.107"
                    ],
                    "time_ms": 112.07
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "104.17.147.107",
                        "104.17.148.107"
                    ],
                    "time_ms": 68.29
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "104.17.147.107",
                        "104.17.148.107"
                    ],
                    "time_ms": 33.92
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "104.17.147.107",
                        "104.17.148.107"
                    ],
                    "time_ms": 65.9
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "Let's Encrypt",
        "subject": "nlr.gov",
        "valid_from": "2026-06-18T23:25:20-05:00",
        "valid_to": "2026-09-16T23:25:19-05:00",
        "days_remaining": 37,
        "san": [
            "nlr.gov"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_256_GCM_SHA384"
    },
    "http": {
        "url": "https://www.nlr.gov/",
        "status": "HTTP/2 200 ",
        "http_version": "3",
        "headers": {
            "date": "Mon, 10 Aug 2026 22:59:26 GMT",
            "content-type": "text/html; charset=utf-8",
            "location": "https://www.nlr.gov/",
            "cf-ray": "a2929c6c0d62ffdd-STL",
            "cf-cache-status": "HIT",
            "cache-control": "public, max-age=0, s-maxage=43200",
            "server": "cloudflare",
            "strict-transport-security": "max-age=31536000; preload",
            "cache-tag": "d6d89d36-6df0-42b4-b87c-e7be0868dc0e|Production|nlr.gov|/, d6d89d36-6df0-42b4-b87c-e7be0868dc0e|Production",
            "vary": "accept-encoding",
            "alt-svc": "h3=\":443\"; ma=86400",
            "access-control-allow-origin": "https://search3.nrel.gov,https://www.energy.gov,https://search3.nlr.gov",
            "age": "7423",
            "etag": "\"47f30c5e-b1ad-4138-8092-b5e47769e88e\"",
            "expires": "Mon, 10 Aug 2026 20:55:42 GMT",
            "last-modified": "Mon, 10 Aug 2026 20:50:03 GMT",
            "access-control-expose-headers": "Request-Context",
            "content-security-policy": "default-src 'self'; script-src 'self' *.googleapis.com *.gstatic.com www.google.com apis.google.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://*.googletagmanager.com cdnjs.cloudflare.com *.youtube.com kit.fontawesome.com *.addthis.com *.addthisedge.com s3.amazonaws.com *.list-manage.com *.highcharts.com code.jquery.com maxcdn.bootstrapcdn.com *.telerik.com cdn.jsdelivr.net *.3playmedia.com www.google-analytics.com www.googletagmanager.com *.googletagmanager.com *.sharethis.com *.crazyegg.com *.mapbox.com *.clarity.ms *.datatables.net datatables.net *.digitalgov.gov *.powerbigov.us *.nrel.gov *.nlr.gov www.energy.gov *.accuweather.com www.buzzsprout.com https://public.tableau.com app.everviz.com vizgen.openei.org dap.digitalgov.gov *.arcgis.com *.arcgisonline.com cdn.ampproject.org https://cdn.insight.sitefinity.com https://player.vimeo.com/api/player.js https://www.youtube.com/iframe_api  'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com *.gstatic.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com cdnjs.cloudflare.com *.mailchimp.com *.bootstrapcdn.com cdn.jsdelivr.net *.sharethis.com *.crazyegg.com *.mapbox.com *.datatables.net datatables.net *.powerbigov.us *.nrel.gov *.nlr.gov *.accuweather.com app.everviz.com vizgen.openei.org *.arcgis.com *.arcgisonline.com https://cdn.insight.sitefinity.com  'unsafe-inline'; img-src 'self' *.gstatic.com *.googleapis.com platform.tumblr.com web.facebook.com www.facebook.com www.redditstatic.com www.linkedin.com i.ytimg.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: https://*.googletagmanager.com www.google-analytics.com *.google-analytics.com www.googletagmanager.com *.googletagmanager.com thesource2.nrel.gov *.datatables.net *.sharethis.com *.mapbox.com *.clarity.ms *.bing.com video.stratus.nlr.gov *.nrel.gov *.nlr.gov *.accuweather.com https://public.tableau.com nrel-aut.sitefinity.cloud nrel-stg.sitefinity.cloud *.arcgis.com *.arcgisonline.com *.crazyegg.com https://cdn.insight.sitefinity.com ; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com data: *.fontawesome.com *.bootstrapcdn.com *.cloudflare.com *.powerbigov.us *.nrel.gov *.nlr.gov *.arcgis.com *.arcgisonline.com; frame-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://www.youtube-nocookie.com https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com *.youtube.com *.twitter.com s7.addthis.com calendar.google.com nlrgov.force.com nlrgov.my.site.com *.sociablekit.com *.powerbigov.us video.stratus.nlr.gov nrel.carto.com https://maps.google.com www.google.com clausa.app.carto.com www.buzzsprout.com *.nrel.gov *.nlr.gov nrel.github.io public.tableau.com vizgen.openei.org *.arcgis.com *.arcgisonline.com; connect-src 'self' data: accounts.google.com *.google-analytics.com *.gstatic.com https://*.googletagmanager.com https://*.googleapis.com/ cdn.jsdelivr.net *.fontawesome.com *.addthis.com *.3playmedia.com analytics.google.com *.analytics.google.com www.google-analytics.com www.googletagmanager.com *.googletagmanager.com stats.g.doubleclick.net *.crazyegg.com *.sharethis.com *.mapbox.com *.clarity.ms *.nrel.gov *.nlr.gov www.energy.gov *.highcharts.com dap.digitalgov.gov *.arcgis.com *.arcgisonline.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com; media-src 'self' data: blob: video.stratus.nlr.gov *.nrel.gov *.nlr.gov; child-src 'self' blob:",
            "cross-origin-embedder-policy": "unsafe-none",
            "cross-origin-opener-policy": "unsafe-none",
            "cross-origin-resource-policy": "cross-origin",
            "permissions-policy": "accelerometer=(self), ambient-light-sensor=(self), autoplay=(self), battery=(self), camera=(self), cross-origin-isolated=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), execution-while-not-rendered=(self), execution-while-out-of-viewport=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), keyboard-map=(self), magnetometer=(self), microphone=(self), midi=(self), navigation-override=(self), payment=(self), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(self), usb=(self), web-share=(self), xr-spatial-tracking=(self)",
            "referrer-policy": "no-referrer-when-downgrade",
            "request-context": "appId=cid-v1:ae1fc00f-b6d5-45d6-aefb-dc9596919969",
            "x-content-type-options": "nosniff",
            "x-frame-options": "SAMEORIGIN",
            "x-xss-protection": "1; mode=block",
            "sf-cache-key": "53KLEPFvP1dY2fVrFl1S4d4ie98CYvIZ7t9p_vLa5Ec1",
            "sf-cache-status": "HIT"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": true,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": true,
            "permissions-policy": true,
            "cross-origin-opener-policy": true,
            "cross-origin-embedder-policy": true,
            "cross-origin-resource-policy": true
        },
        "server": "cloudflare",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.nlr.gov/",
        "title": "Home | NLR",
        "description": "National Laboratory of the Rockies (NLR) bridges research with real-world applications to advance new energy materials and technologies that lower costs, boost the economy, strengthen security, and deliver abundant and reliable energy.",
        "success": true,
        "error": "",
        "status": 200
    },
    "network": {
        "104.17.148.107": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        },
        "104.17.147.107": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "nlr-gov.mail.protection.outlook.com",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 36.6,
                "banner": "",
                "error": "Network is unreachable"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4050.1,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4021.3,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 114.31
}