{
    "ok": true,
    "domain": "odni.gov",
    "generated_at": "2026-08-10T12:12:27-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 76,
        "label": "Good",
        "categories": {
            "dns": 85,
            "mail": 90,
            "security": 65,
            "network": 85,
            "availability": 60
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "2 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "6 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "1 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "93 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "0 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: a23-63-191-45.deploy.static.akamaitechnologies.com"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 0,
                "lost_points": 40,
                "detail": "HTTP/2 403 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "IPv6 (AAAA)",
                "detail": "2 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "6 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "1 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "93 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "HTTP security headers",
                "detail": "0 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: a23-63-191-45.deploy.static.akamaitechnologies.com",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "ok",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "HTTP response",
                "detail": "HTTP/2 403 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 0,
                "lost_points": 40
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "23.63.191.45"
            ],
            "AAAA": [
                "2600:1407:e800:1086::22f4",
                "2600:1407:e800:108d::22f4"
            ],
            "CNAME": [],
            "MX": [
                "0 odni-gov.mail.protection.office365.us."
            ],
            "TXT": [
                "\"v=spf1 include:spf.protection.office365.us include:spf-echomark.odni.gov ~all\"",
                "\"google-site-verification=dZ27P7I3fASC_QGfvtrOX1ywu8qseoJft71IGZ4gw2E\"",
                "\"_dapv4zzgk4eotmx5wau96sdo3x7d1b0\"",
                "\"_wsktkw475z4t0nszoxza56a5i9e0dov\""
            ],
            "NS": [
                "a3-64.akam.net.",
                "a12-65.akam.net.",
                "a16-67.akam.net.",
                "a13-65.akam.net.",
                "a1-22.akam.net.",
                "a22-66.akam.net."
            ],
            "SOA": [
                "a16-67.akam.net. hostmaster.akamai.com. 1556302960 43200 7200 604800 7200"
            ],
            "CAA": [],
            "DS": [
                "48697 8 2 5EE097A051EFB3AC616B3FD4FB2C1F4D361B0B1DD49EEAE3A9DC4BB7 A90F9DA2",
                "52589 8 2 53BF18AB6E14468AB68D5116A2832D0A4EF3CA381D0780AA82D5F79F 09B4DF0E"
            ],
            "DNSKEY": [
                "257 3 8 AwEAAZcPaPdkxEQoVbef3iiU9T332zCusSWTGK+Nt3L5cjTOn91D9GPG 4HPq4Ilx7g7y8Pv2hsojGG0xWdPPSkBuKKmavn8ASzkxhnxglJE8ASma XrnrY7GxRxnNOfNwM1W85Q7dpJwnCXTjGzjvA2S6xiQCz40aPYMTeT9T gXkNvgPPLftzK6jlJZkURFnX8KLQYiK3ETWlcgzb58N7m6eiEYEcsw76 6/4XbNhfbDWC2C1m9w+FG534fEjfd3CaeO33SEFB+jTLKler9OKPJvrh nr/eOs0ARgCVHKra2J1MDH4jy2OCIEiYBk90+Go+xSW3UIspdubtgOV+ jU48wr7n6oM=",
                "256 3 8 AwEAAcXXZTBgCaXc2i64CpFIx/lZXQ5+3FgioE8YwBzs/3TMRSzy6m0O laoHZ7qLHQanroUKoiyFNHzuUTW/Ux7XAUgpiQyrKl36+qBeLxJtZi9y j6y05KxCUEEvhjEUUTnqxkO/YIpF0ObWmL57JDcECss6m+AQoG2v35R1 DkXDeDfv",
                "256 3 8 AwEAAbaMWaSbv5B0VT2AWaACNifbnUn6DvvMcsBqt1lP2UMJkhzpIYsK MgZ7ly995blNTqcXtisA01RndSp9rOxjqfoFVVWprYUozKIarKQHK0Y0 LDboSIgFVisvjf+FLfcQ3e1uY01P9pmbEQjf1SpdE16GGWDSIYAce9Ga Efkvddoz"
            ],
            "RRSIG": [
                "NS 8 2 86400 20260813051146 20260810041146 60424 odni.gov. DjHUS1yD4gLADhlXyri5gLA8D9coVe6X9vM8NAVREFuupH5Ka+XkynPo LMYQc7O2IyCWaXAOLtWdgV54XrGyzAQp1DQiw/XPqp+VGaH9UxKnjrXa GY2r2xQnCL1aIiuNePwiDgmw8wiSzWacazZnsS6ZfR1/W3fCIE+MLZYK InA=",
                "SOA 8 2 86400 20260813051146 20260810041146 60424 odni.gov. E55BYzSFr0jolh5GpYcD9JYz/AQb44zCWCd9PDUpK4z5gpOjPpSJcLwS 593NZUonvYem/UqfRpGJkAGq5PteG8Dr4JB38+n07lYMg/Q7eS38yx2o kLvSHcP/3tGyY7uzzuqv+X7iAmPf6OtX5xSPETuVpkWJdweHvDaStxq6 mTc="
            ],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "23.63.191.45"
        ],
        "ipv6": [
            "2600:1407:e800:1086::22f4",
            "2600:1407:e800:108d::22f4"
        ]
    },
    "mail": {
        "spf": "v=spf1 include:spf.protection.office365.us include:spf-echomark.odni.gov ~all",
        "dmarc": "v=DMARC1; p=quarantine; pct=100; rua=mailto:aggregate.reports@uview.odni.gov; ruf=mailto:forensic.reports@uview.odni.gov; rf=afrf; fo=1; adkim=r; aspf=r",
        "dkim_selector": "selector1",
        "dkim_host": "selector1._domainkey.odni.gov",
        "dkim": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIjX/Gd9xSCbZmbVmJajjACXeHNdEbe2sKNYkRQwHkspQXRepX2E9gAnQjSe3P14FVfhEwSiYYNknMkfIGwkffQwJvibx6WW/QRJ6d+rlyaKVAApw2H/IsPRzLCiEaNNjBLZij/ngwuUJVepMvqjm8oV/wMGvCA0HseFSK71Xh/Mwe1g5gx5g0vvwXzDec8UhI9CeKp6rMWox4URiuXAol3VbykILyf14y+tRrw40DtWvz4fEDtHvNQZgTyLUW56Uxt61ZlpbrkR/0JCt5k5RELEFTrELtWCHGu+mTs4usoft013kSpuU7F9oNkZ2c7pU3WZkmVDW25rNcP/Kd+vzQIDAQAB;",
        "spf_analysis": {
            "valid": true,
            "lookups": 2,
            "final": "~all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "quarantine"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "a23-63-191-45.deploy.static.akamaitechnologies.com",
        "propagation": {
            "consistent": false,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "23.43.223.59"
                    ],
                    "time_ms": 107.19
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "23.63.191.45"
                    ],
                    "time_ms": 85.42
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "23.51.194.24"
                    ],
                    "time_ms": 294.47
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "23.63.191.45"
                    ],
                    "time_ms": 257.84
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "184.31.223.58"
                    ],
                    "time_ms": 75.41
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "DigiCert Inc",
        "subject": "www.dni.gov",
        "valid_from": "2026-04-26T19:00:00-05:00",
        "valid_to": "2026-11-11T17:59:59-06:00",
        "days_remaining": 93,
        "san": [
            "www.dni.gov",
            "aops.icsurvey.dni.gov",
            "bar.icsurvey.dni.gov",
            "cio.icsurvey.dni.gov",
            "ctiic.icsurvey.dni.gov",
            "dni.gov",
            "hrm.icsurvey.dni.gov",
            "iarpa.gov",
            "icjointduty.gov",
            "icsurvey.dni.gov",
            "iln.icsurvey.dni.gov",
            "intel.gov",
            "intelligence.gov",
            "ise.gov",
            "jcat.icsurvey.dni.gov",
            "mpac.icsurvey.dni.gov",
            "ncsc.gov",
            "ncsc.icsurvey.dni.gov",
            "nctc.gov",
            "niu-ir.icsurvey.dni.gov",
            "niu.icsurvey.dni.gov",
            "odni.gov",
            "ogc.icsurvey.dni.gov",
            "www.iarpa.gov",
            "www.icjointduty.gov",
            "www.intel.gov",
            "www.intelligence.gov",
            "www.ise.gov",
            "www.ncsc.gov",
            "www.nctc.gov",
            "www.odni.gov"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_256_GCM_SHA384"
    },
    "http": {
        "url": "https://odni.gov/",
        "status": "HTTP/2 403 ",
        "http_version": "3",
        "headers": {
            "server": "AkamaiGHost",
            "mime-version": "1.0",
            "content-type": "text/html",
            "content-length": "356",
            "cache-control": "max-age=0",
            "expires": "Mon, 10 Aug 2026 17:12:18 GMT",
            "date": "Mon, 10 Aug 2026 17:12:18 GMT",
            "server-timing": "ak_p; desc=\"1786381938852_399004933_1572609651_15_5860_31_10_15\";dur=1"
        },
        "security_checks": {
            "strict-transport-security": false,
            "content-security-policy": false,
            "x-content-type-options": false,
            "x-frame-options": false,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "AkamaiGHost",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.odni.gov/",
        "title": "Office of the Director of National Intelligence",
        "description": "Leading the IC. safety. security. freedom. Leading the IC. safety. security. freedom. Leading the IC. safety. security. freedom. Our Priorities Transparency Content blurb here about our priorities. Duis eleifend eros et elit lobortis, ut gravida felis condimentum. Donec quis nisi…",
        "success": true,
        "error": "",
        "status": 200
    },
    "network": {
        "23.63.191.45": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "odni-gov.mail.protection.office365.us",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 73,
                "banner": "",
                "error": "Network is unreachable"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4017.1,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4093.2,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 81.52
}