{
    "ok": true,
    "domain": "rvo.nl",
    "generated_at": "2026-08-09T15:13:27-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 89,
        "label": "Good",
        "categories": {
            "dns": 95,
            "mail": 90,
            "security": 84,
            "network": 55,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "1 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "2 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "4 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "122 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 19,
                "lost_points": 16,
                "detail": "5 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30,
                "detail": "PTR not detected."
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/2 200 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "IPv6 (AAAA)",
                "detail": "1 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "2 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "4 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "122 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "5 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 19,
                "lost_points": 16
            },
            {
                "level": "error",
                "title": "PTR reverse DNS",
                "detail": "PTR not detected.",
                "category": "network",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "ok",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/2 200 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "93.92.102.21"
            ],
            "AAAA": [
                "2001:4c10:1015:5001::"
            ],
            "CNAME": [],
            "MX": [
                "100 mail01.dictu.nl.",
                "100 mail03.dictu.nl.",
                "10 mail02.dictu.nl.",
                "10 mail04.dictu.nl."
            ],
            "TXT": [
                "\"miro-verification=9e994fb055bdf079049630ff0947e63f6a68e9d5\"",
                "\"_n1dvxwljs3buzjtajsm27k46avyrgco\"",
                "\"v=spf1 include:_spf.dictu.nl include:spf.anachron.com include:_spf.intermax.nl include:_spf.spotler.email include:_spf.dtnr.nl include:spf1.mett.nl include:spf.crowdtech.com ip4:94.228.142.64 ip4:94.228.142.65 ip4:185.132.252.112 -all\"",
                "\"google-site-verification=Q-Cu7wTpyn_riFvkDC19fX-rsL5f5YuGmugHMWjVB14\"",
                "\"_lpi3aquahgzifh2tk73zoi33p720l71\"",
                "\"ahrefs-site-verification_b4b494f3f3c5595410dd80107136be9033e72ddc7761ed17ed0980f461055e89\"",
                "\"cisco-ci-domain-verification=3d34d484e64dd7404dee57b47d8ace4fe29e4bb9312bef57e3caf5ed0e2c8e0f\""
            ],
            "NS": [
                "ns2.dictu.nl.",
                "ns1.dictu.nl."
            ],
            "SOA": [
                "ns1.dictu.nl. datacom.dictu.nl. 205258 43200 3600 2419200 900"
            ],
            "CAA": [],
            "DS": [
                "26152 8 2 309D1DDE516A9BCDE2BB82818E411A7309E1288402A9E9CA7C61E9E2 59F3FACA"
            ],
            "DNSKEY": [
                "256 3 8 AwEAAaj0gx03YgvQ+RtVNwT42WGgOeAjOqwNTQ8X4F/YyuyFvIkL4XI7 dWSmiHerZ6xOECjL9EcH9B6J3PqkbpfrqJ3fo9rj52CGEcZgT+RbiXIc MNMvzucswsY9aEC/SesrrfjtoCrSOhPPJxNmbPX//c9QLDBCkohTmkZO AAeTDxWj",
                "256 3 8 AwEAAcAcAH49EMwe/BeaszzbGYaqfBtWO1SD7QqqG4HHFHelAWhx+1XA VcwnYdPfoBfS8JcFHMab4D0iqkuxz3LdlrEMspNJbUrdlqu1aH7AB2lk PKnl6L7f3pX/4xsQ40NxzecQc0PGU62WK+jmUDjsdv00EVS8Ca8N7Zq4 OsC7Z/Fl",
                "256 3 13 a8JyoGFnqLAOsPwT/y2Yl7wBztjBYEq4NaLMBqGl+TN0DzGTO69fDDfj shxPv8V5omEoteqMlK9iiJhPkCquLw==",
                "257 3 8 AwEAAbPHCnvBhdbFTm12SmylUeI8etvuAKgm+juR4zZd7k0whL5dLaDg aTd946gabKrBCS6jTAngEMHGhHnD+k9+rGGzvB5/ZZBF62d6ox6YD8I2 xme54CDhovr26PYsowM/5fKYTkIS7BlfOMXoaXylW9qgFgPntmVFmNFu MHWyCNYG50dwkIAMzoFXnOLzWd/J55NDZ7swubtDlawk89XyCTuYQ8hm Jk+1AzEfw/6C08/TrSpVAqXm12+zuBa24Q9/6STQ2TWqhu4pGRgvAFnA 60D4c0OhMfToXWQjydksxSFYi6fnQ9oOAuD6nnCoQaKxveAYHdxv+GgP CLIpv0e/qhk=",
                "257 3 13 iy/tZZFHC+YsyXdJ+nhafs2zTSbcFcZuxW771SKukei3GHgykdnH9U1O u0UkMggzMOyZODCXgTGRfENgq3aiVA==",
                "257 3 8 AwEAAc8lNBr/DxmNpyNjaIWszAzwi+GwSjW8XlCgTUYWYANQAQKj6s8Q +8qQs0yHyG+TnOHg7sds9cG9C0qP1mVnADniKR/tBjRvHLV/QuxxQyLJ gFk+Ix7h94N8RPJXYvOXa2pYR4tV2WnUB5WmED9tW1CcMcc/qhcda/jO oitt9wbBjzWGd1gtQCWXMBKVxFicPGHQslyDAFj76D5Y0vnR9kAReW4h 4MtgWaeHppuMtMbWYOo5SsdOfYQDJcEUGnNGkfAn8GrXNDXRRjZZ8XfW EYos38Mx07vfifspKsF0kDH8f3TsYDokyqIZ4HYLOTBKrtMfQThlg7eQ g/DkvE7sLVU="
            ],
            "RRSIG": [
                "AAAA 8 2 300 20260813191157 20260809181717 2526 rvo.nl. g27sa4msMafL0Fs+FPfU7e0mQzXMXmsKAJ9WM3vco8193KkXvjhyL4br X0mTEgp3BgEV9ks+RAL5rKN3nGzqzWB/bE3nlnKFbi0KbwmPmTX5ZgeH 9f5sm2GXU0/ii3RAkNyK8Ye5/XEoUQsRgHPJXDtrjM0xyFwL9V/b19sz UEo=",
                "AAAA 8 2 300 20260813191157 20260809181717 13129 rvo.nl. NUzfn1kTaWscYKV0ICJgVBufigqo23QD3CzCC/5dqfwuq6tOvFxRv3Tq NhKTRjn7JuKnwkrmhXtlPEAuu/mY4cJ/LAHt6R/BbquuIUXD2sFRtYBJ 3up3aa9873ts0YqH958ys8toHvyr+7CpUDyFYyYZhTBMFg+IXVL0tAZl OlA=",
                "AAAA 13 2 300 20260813191157 20260809181717 34212 rvo.nl. ti1CAlZ9SAVPvIRhD/UmorhFjT2QNbiVKvAvXyAlvNUeoEw/yNKVTwXc X9O/eAgDzuOUeqs3UXFN6vN3XCtuIA==",
                "A 8 2 300 20260813191157 20260809181717 2526 rvo.nl. GUnDOeHUPh2Tm7sc8e68+0zyF3PW64CTSZEkpjkwI5fxR8kezkR6sOql /xhiK+0r5nbYLHOa2qh0/ItxwRWUsGAXOYiw34bAHtM50XH9WmH6P2XR WBvpUIb8lJQrgAXfAJlw/sG+otiJ/GJZHnDKJcKHTEa1uy9rL0wlLf4O 3S4=",
                "A 8 2 300 20260813191157 20260809181717 13129 rvo.nl. Ns6Lc6krD+A/j0IrpGuRKDUdfB2VmCKPcdCo98Yl1J5jk89IZz19fIct sy4yx7B9IIGGWLHkYk9tt5wXlRv57yMeD9jpMk1XI3y19jamuqsiNSm9 Jr/a3RpHJQeAwm7ijRA7VyPKD3pz7nYWzHGrqKMx5S9sZ16zEygeJZ0D GCU=",
                "A 13 2 300 20260813191157 20260809181717 34212 rvo.nl. sbQAmChNGQTckH2Mgv87Jj68YtLd2bK+a0UHqmdBdht+/KxGR3PGevpT qQUtIlui2jRwgz076R8ZxwF4bm9zNw==",
                "NS 8 2 300 20260812205310 20260808204426 2526 rvo.nl. iRVAt5TeaIhwDr5/2qb041z6XuIss1TNNYEFD+0kpM2mrsabHNQVd7sB rXbmUAQVQjCsXUmLo9iwjwxTDzuCV8iSWltATR18JLIYC207HopBQ7MF cm1I/1FcQwwRoDSMutxKHiO5aSBiF8Dd0ai4pPBZHdmi7oRnVSIgeYMh Gio=",
                "NS 8 2 300 20260812205310 20260808204426 13129 rvo.nl. pDSX0cPHbfYPNSddaq86xe38gddRntHRHkMMt8dBNTIx2OD7h+GvOMpJ BLYPEHgVO9ONT0SzSV82hPfVjMcVmurq2TRzProdtYvLfhHUcQbN6rkB zdqqIuE6ipNycHbvzA5JMuPAeaBHFzFb7+e3q8MByQ3ziS1Vy7MFzM2R 8HQ=",
                "NS 13 2 300 20260812205310 20260808204426 34212 rvo.nl. Lkvoh+YleOxSFeAXKJO/hWz0/urSsmAIHpUBjPV9dn1pnbYKjXQoNgYH XhswnYDBlJq9S6HNU0VqR8yWGa4ZzQ==",
                "SOA 8 2 300 20260813200531 20260809190531 2526 rvo.nl. W7f86OTJOf6QWmz/DkbmotQyY0+QgDMWAIJcC4PhnUTThfkqr++yRLUh f8LXXMqAqUboTSNUGPLLKcjk9wFL5CPw0wXDUFuUx4/y4d0DTEoZ/ocD RZdt+v0oq+Zsvs7/cL0rYksB+tUuBJ6g94Mgpsbhu0CJ5fCp+8nnWJKF i7I=",
                "SOA 8 2 300 20260813200531 20260809190531 13129 rvo.nl. gq1Q7YdLIvSR4pBBAM7B0MFPCVKOWX+xf3lfrViPJpiJ8sQ/Qv27iTTr esamjA+AYMg6qLnZOAhY5q063wV56zxwRvEo6L6JfpVVqGLDrZqi4Ksf pmBTUWANZtfWka3Fm6U9Nyd8M4fRMH89lZ7sPnrVA6tSm3P37ijczaB8 /ys=",
                "SOA 13 2 300 20260813200531 20260809190531 34212 rvo.nl. 2UdHZzeMfN79SLLjp0itOkg49Gw5XPcmM18NXxYI1BqEDssAPk+yehKx ACed7Ud46QbIW18S7D1EshePFhnRTA==",
                "DNSKEY 8 2 172800 20260813093120 20260809090946 2526 rvo.nl. GBE/6YSV7C/Iy/uQ3b2Q1fc4+ynpXDVJKBjQxOjbsaHs9aNMPDLY/ziM N6zYKfsvu7iVv/ExB3R6wgJXiyyBa1X/R/H3ZNUs1ZY6LDJaid5lBGn/ 06lbNg2TI+WD5yuvbtuw8IltVgirBQw6S+i4+fP1qHlRj9xGbf3HrBiV 218=",
                "DNSKEY 8 2 172800 20260813093120 20260809090946 13129 rvo.nl. VrnQeSxrpBo73CyHzB9QJ2wnyv8q2YCbmEI+qrMMNn1n/Ksiyno/ei7f 4PSO4wLpIXWPUf7lUJwAqjpK92hPqlwOo2cFzBeKRJ4obUksOAlhqztz 9xnawtih1Jnpg4M1yWORF4AeSZUHdq4pXmiNb6+IP+nJR+4uPzkN6cL/ SQA=",
                "DNSKEY 13 2 172800 20260813093120 20260809090946 34212 rvo.nl. 5Dr1Z+ayCCbiF5Z4F5kvNdP1IXOkXSPDO4OOIp+ypA2vJ/dvIldOVj6Y 7iFlRZmHCTy42MvRZHNAoxmZK5RCcQ==",
                "DNSKEY 8 2 172800 20260813093120 20260809090946 26152 rvo.nl. IP1aWjdSBsDhmuTmq70isiQoJPPRj6sKyLzKJUd35yqdCDOFvXB9d3e5 K1Ib/eo4yt1AjSWNc9SIoY6cFlUh9pq8k+GC5v8eIBajw5vjpaUIzIp0 HWBMSi47cadZqwVmFHC7ATunitj/1FGCxg1ua/hAP9C9pziLXw14eXyS qWFWpvNXzF6hCmDGNRaIFtxc3TTxB4hj0/TBlHj4NUxkN7ND20TzbEU6 QmvfKswZtt6jhl0S9Ug6A8XJuEWzr45xg1Asexsgu6yAMkaM4vg6INtI M/4Uk3YwKsD6omHubitDclg/Cm0hWkpHlZ8NoMaHKuxSMzoTkY58OBj+ oqYw9g==",
                "DNSKEY 8 2 172800 20260813093120 20260809090946 20776 rvo.nl. FznOORq3yBXoSf64IbJQNvJFqzNn9btTOQz14/8ZtC8LNWZAoK9WeyaR oXMxkRtJ9p/nmwiax/5IKnT0kXmwH58Xwo8QNY9pYMLkIIu6mA/4lH/N yfiyw6JndgnaM8SQYg2j/OLnS/bmHOIFvXBRLVwYmxq6GqWlM4N0LWrq Tztu9gtY+gTbJ05sYKvz37ohPVogrhPa27eO0ZFw3bQGvBd30hZR3H4m KUGlgFdQ5GZH4Yj03bWlRfTceQWRjdA8uQpR2BnU7Q7cGyDeGjvSgtfF SWOsShXGwQUEkdjosM3ZUjkNHGz6SFCtkArpWUqocVhHBY4Ff3k7/AzN 9fECKw==",
                "DNSKEY 13 2 172800 20260813093120 20260809090946 41662 rvo.nl. 2uh/X/jhJNfLvaELRuuH7aaGwgGoVt54vzPBiyXNVk50fFxfdvJ05FGr AU64sb76Bel+ierxP6s8sMtwDlMjJg==",
                "TXT 8 2 300 20260812210738 20260808202112 2526 rvo.nl. RO/hTtKVJvTs3VR0DquB7SRb/BxD440oWIc0SutIH37gBSrYPV5zVF2B wl1Z8hRmQWoGJU0Nv57R5hrH0JbVTLG1CysYfBi5fYMYy2GDAphxr6pY F0f4LDPFT+MZDCIFNq4StCuIhvvjhNws2P8tCWhC5LYIJ7KR8aZKgn96 kbc=",
                "TXT 8 2 300 20260812210738 20260808202112 13129 rvo.nl. eRAVGPyU0YbvoumrCrdToZ8R+DGQiXmTw28BFUbNuZYRBJCFlwuyQJXN JPElA/V4xm31/30qezD5ZZF+0asPxlB41cFHhujXK7GNioGa6tDQarR0 l6VrQmh1wkktNg+VculMF4toeLw0/5mJY2mQn39ykvHxphfyhCKw9+XM ERQ=",
                "TXT 13 2 300 20260812210738 20260808202112 34212 rvo.nl. k/F114hbB/zkhYn4PQEUuaLiTJGK/ue89XucZ88zPwOYn3Pe1RluC65I 8fCgLdMxFTLJ3wlpuDH7rrORWymIiw==",
                "MX 8 2 300 20260813081933 20260809080819 2526 rvo.nl. h7SXbz8npeeiLado5Qq42/aE9Rqn0tSs3a+6KBanZxIboG6BUWqVNATD 79k/Q1Bp3jp0SGg9iF0Ijvh5+Qf51mX5awtarx5SoitXI8PIxR8Ud7lS j7cDivSTEAot5gKdukT1urRprTp+rb2Sokmk3VZZswnaKyVR3ZdhmnU0 ZzY=",
                "MX 8 2 300 20260813081933 20260809080819 13129 rvo.nl. YLXyqqD5/flFOORUS+xOBiV1JP9UEAe34UysCSJHT1mD4udCqX6UDxcD ECr7mI5ztkl31/SGSH83jS7gF4lqArp89zctnIuzS5BEp+t9epUWgu6N Ds8VXbMeJc55BvRskMOjpCE+X92Xo081liJXOYxq+p/UEynXV1OLcLb1 bkU=",
                "MX 13 2 300 20260813081933 20260809080819 34212 rvo.nl. x6Kd1ytXBicqQKDtWy7s5mxjiQzq84eQE1+8sCTkyKpYWJk0/OY88+XX XfX+XqcHE40wTOQCBUllS4l+dHZrrg==",
                "DS 13 2 3600 20260904151211 20260807060723 467 nl. WdmYmacQUAPp7GJ2OQyMd6MFSOeAKWHcSpsbAA9xwJMBusCiKCsdqn2G 6/hmbNVOmVlOSqOlQLHK+eFGOQPyYg==",
                "NSEC3PARAM 8 2 300 20260813100651 20260809092634 2526 rvo.nl. mhP1L11/b2epFm6ar4bv3un4FRsir0b92ZzKqaeN28Z8s4Uh5f5DVwLg 5Vuals7ff7Gfj6i76W8vwymmn5RWD56MLticBlRkr5TBkZW8xrmDwx0O bFh1FaEfYyiKo8Ac2O1kXovS3aav8pGg9pzy6fVMqI5zAV/eS5HxNK1T 6SA=",
                "NSEC3PARAM 8 2 300 20260813100651 20260809092634 13129 rvo.nl. F4nEqx6j5SoBb4o+r1qCmq0Uz2uoMqewELCPbZ9Jb6+lmz4T7My2Gn8t Ft7+Hbopb6PqB5xX7W2Y5cfecYnNypD82vnxOoxSXLW3JASgJqZO0S4L EojAFOw9pNYl3kIiMyuUUhy4XUjltVv7qzjold0mnFpq6XRuNMuv0tbh J48=",
                "NSEC3PARAM 13 2 300 20260813100651 20260809092634 34212 rvo.nl. qjhFVpfkDo2YHpOWgUxERgG79IdWlNPCOOOvnMwBI7ekpFxOcwyj9xLf E9tw8NJ58vBiGHvUZ02u8rKUPhgw/w=="
            ],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "93.92.102.21"
        ],
        "ipv6": [
            "2001:4c10:1015:5001::"
        ]
    },
    "mail": {
        "spf": "v=spf1 include:_spf.dictu.nl include:spf.anachron.com include:_spf.intermax.nl include:_spf.spotler.email include:_spf.dtnr.nl include:spf1.mett.nl include:spf.crowdtech.com ip4:94.228.142.64 ip4:94.228.142.65 ip4:185.132.252.112 -all",
        "dmarc": "v=DMARC1;p=reject;sp=reject;pct=100;rua=mailto:dmarc@dictu.nl;",
        "dkim_selector": "x",
        "dkim_host": "x._domainkey.rvo.nl",
        "dkim": "v=DKIM1; p=",
        "spf_analysis": {
            "valid": true,
            "lookups": 7,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "reject"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "93.92.102.21"
                    ],
                    "time_ms": 147.29
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "93.92.102.21"
                    ],
                    "time_ms": 461.76
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "93.92.102.21"
                    ],
                    "time_ms": 165.05
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "93.92.102.21"
                    ],
                    "time_ms": 452.97
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "93.92.102.21"
                    ],
                    "time_ms": 254.44
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "DigiCert Ireland Limited",
        "subject": "www.rvo.nl",
        "valid_from": "2025-12-09T18:00:00-06:00",
        "valid_to": "2026-12-09T17:59:59-06:00",
        "days_remaining": 122,
        "san": [
            "www.rvo.nl",
            "rvo.nl",
            "applicaties.rvo.nl",
            "english.rvo.nl",
            "ezine.rvo.nl",
            "data.rvo.nl"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_256_GCM_SHA384"
    },
    "http": {
        "url": "https://www.rvo.nl/",
        "status": "HTTP/2 200 ",
        "http_version": "3",
        "headers": {
            "date": "Sun, 09 Aug 2026 20:13:18 GMT",
            "content-type": "text/html; charset=utf-8",
            "content-length": "303348",
            "location": "https://www.rvo.nl/",
            "x-nextjs-cache": "HIT",
            "cache-control": "s-maxage=31536000",
            "etag": "\"qahpuiiiva6i1s\"",
            "vary": "Accept-Encoding",
            "strict-transport-security": "max-age=31536000; includeSubDomains",
            "x-frame-options": "SAMEORIGIN",
            "x-xss-protection": "1; mode=block",
            "x-content-type-options": "nosniff",
            "referrer-policy": "origin",
            "content-security-policy": "default-src 'self'; base-uri 'self'; script-src 'unsafe-inline' 'self' statistiek.rvo.nl *.obi4wan.com *.shoppingminds.com *.shoppingminds.net *.creative-serving.com stats.pusher.com cdn.conversationalsdevelopment.nl cdn.seamly-app.com *.visualwebsiteoptimizer.com app.vwo.com; style-src 'self' 'unsafe-inline' *.rvo.nl cdn.seamly-app.com *.visualwebsiteoptimizer.com app.vwo.com; object-src *.rvo.nl; connect-src 'self' *.rvo.nl *.rvochat.nl *.rovid.nl *.obi4wan.ai *.shoppingminds.com *.shoppingminds.net *.creative-serving.com *.pusher.com wss://*.pusher.com *.obi4wan.com wss://api.seamly-app.com api.seamly-app.com *.visualwebsiteoptimizer.com app.vwo.com; img-src 'self' data: *.rvo.nl *.rovid.nl *.obi4wan.com *.shoppingminds.com *.shoppingminds.net *.creative-serving.com *.mediatheekrijksoverheid.nl services.arcgisonline.com www.toegankelijkheidsverklaring.nl *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io; media-src 'self' *.seamly-app.com *.rovid.nl *.mediatheekrijksoverheid.nl; form-action 'self' *.rvo.nl; frame-ancestors 'self' *.rvo.nl *.test.dtnr.nl app.vwo.com *.visualwebsiteoptimizer.com; frame-src 'self' *.rvo.nl *.test.dtnr.nl bridge-to-knowledge.nl apps.vertigisstudio.com *.visualwebsiteoptimizer.com app.vwo.com; script-src-elem 'self' 'unsafe-inline' statistiek.rvo.nl *.obi4wan.com *.shoppingminds.com *.shoppingminds.net *.creative-serving.com stats.pusher.com cdn.seamly-app.com *.visualwebsiteoptimizer.com app.vwo.com; worker-src 'self' blob:; upgrade-insecure-requests"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": true,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": true,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.rvo.nl/",
        "title": "Rijksdienst voor Ondernemend Nederland | RVO.nl",
        "description": "RVO is voor iedereen die werkt aan een duurzame, sterke economie. Wij helpen u graag vooruit. Met voorlichting, advies, financiering en de juiste contacten.",
        "success": true,
        "error": "",
        "status": 200
    },
    "network": {
        "93.92.102.21": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "mail01.dictu.nl",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 114,
                "banner": "",
                "error": "Network is unreachable"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4136.9,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4132.7,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 130.23
}