{
"ok": true,
"domain": "opnsense.org",
"generated_at": "2026-08-10T07:14:27-05:00",
"cache": {
"hit": true,
"ttl": 0
},
"score": {
"total": 85,
"label": "Good",
"categories": {
"dns": 95,
"mail": 90,
"security": 69,
"network": 55,
"availability": 100
},
"category_weights": {
"dns": 25,
"mail": 20,
"security": 25,
"network": 10,
"availability": 20
},
"items": [
{
"category": "dns",
"title": "IPv4 (A)",
"max_points": 30,
"earned_points": 30,
"lost_points": 0,
"detail": "1 IPv4 address(es) detected."
},
{
"category": "dns",
"title": "IPv6 (AAAA)",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "1 IPv6 address(es) detected."
},
{
"category": "dns",
"title": "Name server redundancy",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "4 NS record(s); 2 or more required."
},
{
"category": "dns",
"title": "SOA record",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Authoritative zone record."
},
{
"category": "dns",
"title": "DNSSEC chain",
"max_points": 15,
"earned_points": 15,
"lost_points": 0,
"detail": "DS and DNSKEY detected."
},
{
"category": "dns",
"title": "CAA policy",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "Certificate authority restriction."
},
{
"category": "dns",
"title": "DNS propagation",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Agreement between public resolvers."
},
{
"category": "mail",
"title": "MX records",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "1 MX record(s)."
},
{
"category": "mail",
"title": "SPF",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "SPF policy published."
},
{
"category": "mail",
"title": "DMARC",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "DMARC policy published."
},
{
"category": "mail",
"title": "DKIM",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "A DKIM selector was verified."
},
{
"category": "mail",
"title": "MTA-STS",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "Mail transport policy."
},
{
"category": "mail",
"title": "TLS-RPT",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "TLS reporting policy."
},
{
"category": "security",
"title": "Valid TLS certificate",
"max_points": 55,
"earned_points": 55,
"lost_points": 0,
"detail": "55 day(s) remaining."
},
{
"category": "security",
"title": "Certificate lifetime",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Full points require at least 30 days remaining."
},
{
"category": "security",
"title": "HTTP security headers",
"max_points": 35,
"earned_points": 4,
"lost_points": 31,
"detail": "1 of 9 evaluated headers detected."
},
{
"category": "network",
"title": "PTR reverse DNS",
"max_points": 30,
"earned_points": 0,
"lost_points": 30,
"detail": "PTR not detected."
},
{
"category": "network",
"title": "IPv4 diversity",
"max_points": 35,
"earned_points": 20,
"lost_points": 15,
"detail": "Two or more IPv4 addresses receive full points."
},
{
"category": "network",
"title": "IPv6 connectivity",
"max_points": 35,
"earned_points": 35,
"lost_points": 0,
"detail": "AAAA availability."
},
{
"category": "availability",
"title": "DNS resolution",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "At least one address family must resolve."
},
{
"category": "availability",
"title": "HTTP response",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "HTTP/1.1 200 OK"
},
{
"category": "availability",
"title": "HTTPS final URL",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "Final URL uses HTTPS."
}
],
"methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
"diagnostics": [
{
"level": "ok",
"title": "IPv4 (A)",
"detail": "1 IPv4 address(es) detected.",
"category": "dns",
"max_points": 30,
"earned_points": 30,
"lost_points": 0
},
{
"level": "ok",
"title": "IPv6 (AAAA)",
"detail": "1 IPv6 address(es) detected.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "Name server redundancy",
"detail": "4 NS record(s); 2 or more required.",
"category": "dns",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SOA record",
"detail": "Authoritative zone record.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "DNSSEC chain",
"detail": "DS and DNSKEY detected.",
"category": "dns",
"max_points": 15,
"earned_points": 15,
"lost_points": 0
},
{
"level": "error",
"title": "CAA policy",
"detail": "Certificate authority restriction.",
"category": "dns",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "ok",
"title": "DNS propagation",
"detail": "Agreement between public resolvers.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "MX records",
"detail": "1 MX record(s).",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SPF",
"detail": "SPF policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DMARC",
"detail": "DMARC policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DKIM",
"detail": "A DKIM selector was verified.",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "error",
"title": "MTA-STS",
"detail": "Mail transport policy.",
"category": "mail",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "error",
"title": "TLS-RPT",
"detail": "TLS reporting policy.",
"category": "mail",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "ok",
"title": "Valid TLS certificate",
"detail": "55 day(s) remaining.",
"category": "security",
"max_points": 55,
"earned_points": 55,
"lost_points": 0
},
{
"level": "ok",
"title": "Certificate lifetime",
"detail": "Full points require at least 30 days remaining.",
"category": "security",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "warning",
"title": "HTTP security headers",
"detail": "1 of 9 evaluated headers detected.",
"category": "security",
"max_points": 35,
"earned_points": 4,
"lost_points": 31
},
{
"level": "error",
"title": "PTR reverse DNS",
"detail": "PTR not detected.",
"category": "network",
"max_points": 30,
"earned_points": 0,
"lost_points": 30
},
{
"level": "warning",
"title": "IPv4 diversity",
"detail": "Two or more IPv4 addresses receive full points.",
"category": "network",
"max_points": 35,
"earned_points": 20,
"lost_points": 15
},
{
"level": "ok",
"title": "IPv6 connectivity",
"detail": "AAAA availability.",
"category": "network",
"max_points": 35,
"earned_points": 35,
"lost_points": 0
},
{
"level": "ok",
"title": "DNS resolution",
"detail": "At least one address family must resolve.",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTP response",
"detail": "HTTP/1.1 200 OK",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTPS final URL",
"detail": "Final URL uses HTTPS.",
"category": "availability",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
}
]
},
"dns": {
"records": {
"A": [
"89.149.225.137"
],
"AAAA": [
"2001:1af8:2050:a001:1::1"
],
"CNAME": [],
"MX": [
"0 opnsense-org.mail.protection.outlook.com."
],
"TXT": [
"\"v=spf1 include:spf.protection.outlook.com -all\"",
"\"MS=ms32406172\""
],
"NS": [
"ns3.sectigoweb.com.",
"ns4.sectigoweb.com.",
"ns2.sectigoweb.com.",
"ns1.sectigoweb.com."
],
"SOA": [
"ns1.sectigoweb.com. admin.sectigo.com. 1658853095 86400 7200 604800 300"
],
"CAA": [],
"DS": [
"51646 8 2 BCB7C9D6E1B83E7B8DDD8C8639C5D26B496D90BEA379ED978E6E6DB2 6918AE11"
],
"DNSKEY": [
"257 3 8 AwEAAbTUha/RNn3WJQgR0GzKqJimd1mx6ivsXqmlyz/eSJ0qcGaUUEbB xCZsUzc2oFyqbGkEIDkqzgiS+wh3kF56OJ7CjgWiECT2GByCmcw1i8zr 3UkUfXK7HMQglJcZ/QYqbyMe+DsY4pl6NcGWB0gx59flzFVDuUdt332V +9JCWaANDXPge32AZB9ulTdf3Ih1PErihRpW6Dy3D6Rl/wbRSxE=",
"256 3 8 AwEAAbRkU6cDVKFugCNkqJHs9KD2nClggGA9liwde0frEJsZCN87s+QM j1f4+72Z5AyvV4OjLtXe8Ap/gF5bywvdBMt1etYdiFbIvppRZEq1ZXXQ eOiE1j2yjLGHqRJ8yvUsjIh85rHPbh0zgRrl++JP7/+Y7Vvxgq4tAk0H vqd0FKxj"
],
"RRSIG": [
"DNSKEY 8 2 3600 20261005075526 20260607075526 51646 opnsense.org. QSmacYL6WPbI00yOCJ6Iw0qc5NjghHXuVCtSUBcMaYSYwYXk6Vkh2dh2 dIrfr1Z/MTfVKYQgmxWzo7dh7IWVZ4JmRRSpxLK3nIoJatR8CGMmRekC fZNLuSODQzYO6dTaDJ5zeITdtd/zL6uZBaGWHfsq1VgaLUAvP5gZEMri PC5kN/O8oOe0RGNa9cdJstRXlVd5gozs/p1q2dwyeQlhSA==",
"NS 8 2 3600 20261005075526 20260607075526 15256 opnsense.org. oxJ5uSOfBV7tOBilWk+Nq+N5gYYY7TAlak5Z+D7U8aFxx5xF8J155pRX LTwwsdDKkYow0+mwCjtkJInodA619YBfHXi36blUidV0329FNStU4IBD Ai0aB2cTUddzMLUEXjdMHB8sHvbwWjGFzIgKYCr8bS2rUWCXaDyncIKX B/Q=",
"A 8 2 900 20261005075526 20260607075526 15256 opnsense.org. VkfnMyFsc6c0Cv4hY6O0IDWWc+nebCBv3TGsPoj+wlt3nAffr/CTCWXh clsbbb8rEuSUJ9+3B6LogBErGd29Pnn4U/jvrFB079yB+v6TCg9UNl3W 4ZeYRTphMTWHi9T8rqj9DLh46Sby1k0ZHUBLB++yCsfo60EYOdy9bGI8 mh0=",
"DS 8 2 3600 20260830152406 20260809142406 44925 org. cf5bYL2pbAIlxjkVeOi/sXaQniuiQ19ROmw/1VCNcyBy8K1ucTqiTqaB ku1xladu2gu/m5ONhr0EB8/3SXjnn1q6AD3Ij22TsAW9Wxl2yMbXcxje 2H95aNdFciCVJd/VcIQfFU4aMQNnDFHjjsFCMa5LCEhDDXu75s50JxOr uzw="
],
"NSEC": [],
"NSEC3": [],
"SRV": [],
"NAPTR": [],
"TLSA": [],
"SSHFP": []
},
"ipv4": [
"89.149.225.137"
],
"ipv6": [
"2001:1af8:2050:a001:1::1"
]
},
"mail": {
"spf": "v=spf1 include:spf.protection.outlook.com -all",
"dmarc": "v=DMARC1; p=quarantine; fo=0; adkim=r; aspf=r; sp=none",
"dkim_selector": "selector1",
"dkim_host": "selector1._domainkey.opnsense.org",
"dkim": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkAnv7YhfNjFSRs8l9ac3NJGUrqxtNmo0l4WquFoTe0rosyDPoDkcbLpITKhnPVDpu88rjujC96lGeMbIm3OSk1/3MbvZ7mIaiH1VEbUZByV0oFVxHR8Gs/3iqrhyzfgOmjseDnxsGPgC2+nAeDBancI6YyOWbgDeMKieFpBK/pN6tNv4tOMSQ/F/duiC1btBmAnoI+2fqEW7UOZ6TSTlWKxzBmwtCiAaN2acJ4yGzw6yVhwwvxfiaHaS0ZG5Jp35926FMqe/AiSvuBAq/e2httNpukaIqkadGDo7ssJpNh1jSn1IxrXOxGYz45xkd+iNYdjh+T4mp8tjQe+WeHPCQIDAQAB;",
"spf_analysis": {
"valid": true,
"lookups": 1,
"final": "-all",
"message": "Within the estimated limit"
},
"dmarc_analysis": {
"valid": true,
"policy": "quarantine"
},
"bimi": "",
"mta_sts": "",
"tls_rpt": ""
},
"advanced": {
"ptr": "",
"propagation": {
"consistent": true,
"results": [
{
"provider": "Google",
"server": "8.8.8.8",
"result": [
"89.149.225.137"
],
"time_ms": 61.67
},
{
"provider": "Cloudflare",
"server": "1.1.1.1",
"result": [
"89.149.225.137"
],
"time_ms": 46.15
},
{
"provider": "Quad9",
"server": "9.9.9.9",
"result": [
"89.149.225.137"
],
"time_ms": 48.61
},
{
"provider": "OpenDNS",
"server": "208.67.222.222",
"result": [
"89.149.225.137"
],
"time_ms": 78.39
},
{
"provider": "AdGuard",
"server": "94.140.14.14",
"result": [
"89.149.225.137"
],
"time_ms": 895.61
}
]
}
},
"ssl": {
"available": true,
"issuer": "Let's Encrypt",
"subject": "opnsense.org",
"valid_from": "2026-07-06T11:51:49-05:00",
"valid_to": "2026-10-04T11:51:48-05:00",
"days_remaining": 55,
"san": [
"opnsense.org"
],
"protocol": "TLSv1.3",
"cipher": "TLS_AES_256_GCM_SHA384"
},
"http": {
"url": "https://opnsense.org/",
"status": "HTTP/1.1 200 OK",
"http_version": "2",
"headers": {
"date": "Mon, 10 Aug 2026 12:14:18 GMT",
"server": "Apache",
"link": "; rel=\"https://api.w.org/\", ; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", ; rel=shortlink",
"strict-transport-security": "max-age=15552000; includeSubDomains; preload",
"content-type": "text/html; charset=UTF-8"
},
"security_checks": {
"strict-transport-security": true,
"content-security-policy": false,
"x-content-type-options": false,
"x-frame-options": false,
"referrer-policy": false,
"permissions-policy": false,
"cross-origin-opener-policy": false,
"cross-origin-embedder-policy": false,
"cross-origin-resource-policy": false
},
"server": "Apache",
"powered_by": ""
},
"webpage": {
"url": "https://opnsense.org/",
"title": "OPNsense® is an open source, feature rich firewall and routing platform, offering cutting-edge network protection. - OPNsense",
"description": "",
"success": true,
"error": "",
"status": 206
},
"network": {
"89.149.225.137": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
}
},
"smtp": {
"host": "opnsense-org.mail.protection.outlook.com",
"ports": [
{
"port": 25,
"open": false,
"time_ms": 24.9,
"banner": "",
"error": "Network is unreachable"
},
{
"port": 465,
"open": false,
"time_ms": 4005,
"banner": "",
"error": "Connection timed out"
},
{
"port": 587,
"open": false,
"time_ms": 4001.8,
"banner": "",
"error": "Connection timed out"
}
]
},
"visitor": {
"ip": "216.73.217.62",
"reverse": "",
"country": "",
"country_code": "",
"region": "",
"city": "",
"latitude": null,
"longitude": null,
"isp": "",
"organization": "",
"asn": "",
"timezone": "",
"browser": "Other",
"os": "Other",
"language": "",
"user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
"is_bot": true,
"cloudflare": false
},
"analysis_time_ms": 120.64
}