{
    "ok": true,
    "domain": "section508.gov",
    "generated_at": "2026-08-10T01:21:24-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 83,
        "label": "Good",
        "categories": {
            "dns": 100,
            "mail": 50,
            "security": 77,
            "network": 85,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "1 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "5 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20,
                "detail": "0 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20,
                "detail": "No tested DKIM selector responded."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "59 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 12,
                "lost_points": 23,
                "detail": "3 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: host.159-142-191-107.gsa.gov"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/2 200 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "IPv6 (AAAA)",
                "detail": "1 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "5 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MX records",
                "detail": "0 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "DKIM",
                "detail": "No tested DKIM selector responded.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "59 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "3 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 12,
                "lost_points": 23
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: host.159-142-191-107.gsa.gov",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "ok",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/2 200 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "159.142.191.107"
            ],
            "AAAA": [
                "2620:0:150:400d::130"
            ],
            "CNAME": [],
            "MX": [],
            "TXT": [
                "\"v=spf1 -all\"",
                "\"_vf32wxt9u8tjahfos4kv6ge8meyw4hb\""
            ],
            "NS": [
                "dns.gsa.gov.",
                "dns4.gsa.gov.",
                "dns3.gsa.gov.",
                "dns2.gsa.gov.",
                "dns5.gsa.gov."
            ],
            "SOA": [
                "dns.gsa.gov. hostmaster.gsa.gov. 804870255 3600 180 1209600 3600"
            ],
            "CAA": [
                "0 issue \"digicert.com\"",
                "0 issue \"amazon.com\"",
                "0 issue \"letsencrypt.org\""
            ],
            "DS": [
                "30497 8 2 E09F136F13B4184EF92FEF01078CC6CFC0747AAD25837D9B69FF943A D326FF67",
                "38876 8 2 728D2FEE1AC9438AE8D6FA4785DF5FDAD9793715CE633ADDFCAAE83D BF0B01AE",
                "38617 8 2 8AB06BC8D9DE28570AF52EA9F49FFB3B159D21C31C71BAC847CAD21C 48500CEB",
                "9454 8 2 218B163D2AA0B93C2F436B4D6F40F80BCF0CC8B2E3E4D1224FFEAB06 1F75EB12"
            ],
            "DNSKEY": [
                "256 3 8 AwEAAartwNdVsWN/vssxveiFKx0uLjLv6Jd4lUeCMoD3KYtwpQQgNdHH Wj1pXl0CkBypTNifDfv28zNkyBhcj2EjMgXBoGCOap2Lcq0Zt90Ilgna JizPGDURSxMEXkFU7z1VzccfiTFXTU3xRRQHrkafA17bzonccJeZxEEM oP7lANkF",
                "257 3 8 AwEAAZOsz+Qswv70YHBtlrTvrQtGY1It2HXfsQAg9Dt33SvLqT6nh0wJ pbcxK4oKhU1Zp1LeY0jJu9fNB094VexC4Gu+wIUV1sTPEy0VqlGNJMCF jFV2V3T4ZiFahrlvYa7D/B42A7KpFcFyy4JT+G5lN97678UbJmZ6rxsF ZA9BFs1t"
            ],
            "RRSIG": [
                "DNSKEY 8 2 10800 20260903150414 20260804145914 38617 section508.gov. TPSxK/RjUvdcrvDRBKKyjfzHR3TChvHykGW8JhSTDf2CtZA6WemRWtVq Nj5phBcHHeWAzPHJWncRuv42fH+RB04FezYlFXyLrec8Li27m4xa+ACk gE9VMu3O3vIhTWKghdQ0beb3mXm0QiXArkRT6/urFB4np2TuMN27ky45 7Uk=",
                "DNSKEY 8 2 10800 20260903150414 20260804145914 54550 section508.gov. VeBFLm6faDa/SS/6ipf+ldBdKneNzAF0ZxuWq5tb4n58hmh9BZg33nQr yBC6tU8JdmBJynYzbRPKtAr+OmhsREdkyiuSnzDTizT6vLnmNvmPczDo 8PXBaXhmms2SGENhDTiQDKBjmtnoSVjRM+VB61XxRhMoqJ12lrHq5Jq5 Xpg=",
                "SOA 8 2 10800 20260903150414 20260804145914 54550 section508.gov. RkSEPqsy39BeL5v5yuWaTzGDWZby2nKX0EYVYiQfR8I1gkwWTi9uJ//N O+YBzmMATXav7KSMl0YYhlgyMx1Bcne7TtnKGU1Opi410depIW6B1CDC d4Txw6CJwoKo3d8CiR/TvRW3M/7xPxspbPLJPuL6EVy9+xNtOr199+ri 4fg=",
                "NS 8 2 10800 20260903150414 20260804145914 54550 section508.gov. dJfm1jdsI3jRmiZ8aFicvzxo+d0OuyAZ1cr0tp16n9bD2TN2PTZbDBf1 8vbAmbF/v21aEU0oKARrd3E/6JRZz9UtvAU0gATpP+148SQ1+7wfW2XE AeICB657kLAxe2S3frxyqMCCueNiBttOK12xsxp7euldR3ATW7Ezprmp ss8=",
                "TXT 8 2 300 20260903150414 20260804145914 54550 section508.gov. bfHYqh51gjqLt0Fi+twGK+8rmWmlZe/yYKR1KuAkhXCJ1sy1VdwSKur7 MYd5y1gVRQCL1mLBxa0td+Xjpdvn0IK1Xb8/igdy3gcymXAznZpgvsqX oSc6fQBmIFRcYFZiXLEhqfEMvt384Ssv7q4PTFb0CKihGDVuGNBK3eK0 ag4=",
                "A 8 2 300 20260903150414 20260804145914 54550 section508.gov. QXhxDaqz2B20UIZJq/tCQ/eKBwUaBPfQ8U6vpYZVmsFFfLN9mxz/qrQ8 HbsA7TVFlsBkyTLCx/s08SR8+i4A+97o8h3GxK0+7AlDVLtDFmS7Rbyr CkhQsFybIzYw582Bgk2Mq3TRKdK7L96r/xgojyE8VIqKVsFXWi2hZ9bQ 6ko=",
                "DS 13 2 3600 20260811072111 20260809052111 35496 gov. 6Bpxlr2D86Voc5CRmP3F1YGE20M0HXB8DdLzWfR63z57a6LUsfacunZL Na4aVHTt0ORMZNyqUvyPDaWpSm2MUQ=="
            ],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "159.142.191.107"
        ],
        "ipv6": [
            "2620:0:150:400d::130"
        ]
    },
    "mail": {
        "spf": "v=spf1 -all",
        "dmarc": "v=DMARC1; p=reject; pct=100; fo=1; ri=86400; rua=mailto:dmarcreports@gsa.gov,mailto:reports@dmarc.cyber.dhs.gov; ruf=mailto:dmarcfailures@gsa.gov",
        "dkim_selector": "x",
        "dkim_host": "",
        "dkim": "",
        "spf_analysis": {
            "valid": true,
            "lookups": 0,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "reject"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "host.159-142-191-107.gsa.gov",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "159.142.191.107"
                    ],
                    "time_ms": 145.91
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "159.142.191.107"
                    ],
                    "time_ms": 120.38
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "159.142.191.107"
                    ],
                    "time_ms": 146.64
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "159.142.191.107"
                    ],
                    "time_ms": 139.2
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "159.142.191.107"
                    ],
                    "time_ms": 67.03
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "DigiCert Inc",
        "subject": "devicepki.idmanagement.gov",
        "valid_from": "2025-09-09T19:00:00-05:00",
        "valid_to": "2026-10-08T18:59:59-05:00",
        "days_remaining": 59,
        "san": [
            "devicepki.idmanagement.gov",
            "section508.gov",
            "www.section508.gov",
            "www.devicepki.idmanagement.gov",
            "mta-sts.test.gsa.gov"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_256_GCM_SHA384"
    },
    "http": {
        "url": "https://www.section508.gov/",
        "status": "HTTP/2 200 ",
        "http_version": "3",
        "headers": {
            "date": "Mon, 10 Aug 2026 06:21:15 GMT",
            "server": "Apache",
            "x-frame-options": "SAMEORIGIN",
            "strict-transport-security": "max-age=31536000; preload",
            "location": "https://www.section508.gov/",
            "content-type": "text/html; charset=utf-8",
            "access-control-allow-methods": "GET, HEAD",
            "cache-control": "max-age=60",
            "last-modified": "Fri, 07 Aug 2026 12:45:22 GMT",
            "x-amz-server-side-encryption": "AES256",
            "x-content-type-options": "nosniff",
            "x-robots-tag": "all",
            "x-server": "Cloud.gov Pages",
            "x-vcap-request-id": "98fe282b-d13d-4159-595e-c78b3f088d1d",
            "etag": "W/\"f5bae9ad8181b3a90634d11ac93ee7d0\"",
            "vary": "Accept-Encoding,Accept-Encoding",
            "x-cache": "Miss from cloudfront",
            "via": "1.1 d0d601bbf0821b7fe380f6619ce78e6c.cloudfront.net (CloudFront)",
            "x-amz-cf-pop": "MCI50-P3",
            "x-amz-cf-id": "4OjXfbLNYDp-vcnG4TEqhxwIWB65no43ZKGJh-zvSfCENC3bQkFsMw=="
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": false,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "Apache",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.section508.gov/",
        "title": "Home | Section508.gov",
        "description": "Section508.gov is the official U.S. government resource for ensuring digital accessibility compliance with Section 508 of the Rehabilitation Act (29 U.S.C. 794d). It offers comprehensive guidance, tools, and training to help federal agencies and vendors create accessible information and communication technology (ICT) for individuals with disabilities.",
        "success": true,
        "error": "",
        "status": 206
    },
    "network": {
        "159.142.191.107": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "section508.gov",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 0.7,
                "banner": "",
                "error": "Network is unreachable"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4020.6,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4020.5,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 84.8
}