{
    "ok": true,
    "domain": "shu.edu",
    "generated_at": "2026-08-10T03:38:33-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 52,
        "label": "Critical",
        "categories": {
            "dns": 60,
            "mail": 90,
            "security": 0,
            "network": 65,
            "availability": 60
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "8 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "4 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 0,
                "lost_points": 15,
                "detail": "Both DS and DNSKEY are required."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "1 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 0,
                "lost_points": 55,
                "detail": "No valid certificate was retrieved."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "0 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: s3-website-us-east-1.amazonaws.com"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 0,
                "lost_points": 40,
                "detail": "No successful HTTP response."
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "8 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "4 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "DNSSEC chain",
                "detail": "Both DS and DNSKEY are required.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 0,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "1 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "Valid TLS certificate",
                "detail": "No valid certificate was retrieved.",
                "category": "security",
                "max_points": 55,
                "earned_points": 0,
                "lost_points": 55
            },
            {
                "level": "error",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "error",
                "title": "HTTP security headers",
                "detail": "0 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: s3-website-us-east-1.amazonaws.com",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "HTTP response",
                "detail": "No successful HTTP response.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 0,
                "lost_points": 40
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "52.216.208.205",
                "16.15.253.167",
                "16.15.212.158",
                "16.15.223.10",
                "52.217.170.205",
                "16.15.238.18",
                "16.15.228.243",
                "54.231.199.5"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "10 shu-edu.mail.protection.outlook.com."
            ],
            "TXT": [
                "\"v=spf1 include:spf.protection.outlook.com include:e2ma.net include:shu.campusgroups.com include:454160.spf08.hubspotemail.net include:mail.zendesk.com include:amazonses.com\" \" ip4:149.150.52.224 ip4:149.150.52.238 ip4:149.150.52.160 ip4:198.187.196.100 ip4:216.200.108.191 ip4:216.200.107.203 ip4:209.133.75.59 ip4:209.133.124.238 ip4:74.86.208.249 ip4:66.151.109.0/24 ip4:139.60.0.0/22 ip4:216.195.243.208 ip4:65.115.228.26\" \" ip4:35.80.141.6 ip4:44.229.121.55 ip4:52.86.188.131 ip4:52.43.50.148 ip4:20.236.219.18 ip4:50.31.43.252 ip4:208.117.49.214 ip4:199.231.134.73/32 ip4:216.248.199.106/32 -all\"",
                "\"docusign=86cdd299-3c34-4dea-ad5d-d39d9e8904ce\"",
                "\"v=msv1\" \"t=12056cd11892489f1f4ea4487f04af\"",
                "\"e2ma-verification=8jzeb\"",
                "\"apple-domain-verification=6MNKu5afVAa3VW5g\"",
                "\"atlassian-sending-domain-verification=82e33e90-1ccd-401b-b156-f3cfd16205f3\"",
                "\"cisco-ci-domain-verification=4ea400f89b87abd98d5969f3d1e242b4698e2cf727b24d62531fad523aa4b190\"",
                "\"e2ma-verification=j9qbb\"",
                "\"_6jxblv4oiva1t4s8rmpcy7p50x9ag9g\"",
                "\"vtr33lcfr8ua07uupc8is695ua\"",
                "\"06eb166d-d300-4713-a19c-aa726109473c\"",
                "\"adobe-idp-site-verification=ba3e7e7bdcf18834a3928ec30b107069e4601bf078e86262c8fc247688999707\"",
                "\"PI4XESY5NQKFOGHTU7MDXBZ4OIT8PP4Z2LVB6EEB1\"",
                "\"google-site-verification=TPMvqrQAhWYAIJo6XnKs5y6O8C3m1h16uhxv4jq86ms\"",
                "\"google-site-verification=UFTDJAfNL64YjhNvObGkmoYrf-r8X5D4ncCY4jIoZCc\"",
                "\"sgtv2hrt2dve91slkha1v84v3a\"",
                "\"d365mktkey=DZwmCbb3AV0FKkP5xqwgheZqOuyT1T5ATxh37m7EvyEx\"",
                "\"k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCr6KMgdxxgg7oT3ulMwPJs9RXgXDrI9UWU118pHEMohl3UbL3Jwp4oxp/9N3thh/3WCJnYV134zbEVolZwqaT3JsFEq/mQ/RpW/JnOZ3rnxqJPurb2bcfJol4SDxiWVObzHX31xnANzFcXnq1/5dMK5QvW4Jh7n0fm4+4ywqiy2QIDAQAB\"",
                "\"v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDipZmfLdrkzlHH8W72i2fAhkXQrhCVv+2DMOS6ZDWzurMwKMo5gMUm7SyUTS3+RkJEx/JOvyw6IhWIqrUPYg5f+07hf+cPeq8DW59YYIB59lfrUDzcVeO5WZWO6UgX1XlscWqnRvyyiYHd5xO1SMb7cf9t0+1ys7HMylZiAieIXQIDAQAB\"",
                "\"lj6dud8sfqm5527ogc0iqjo4nm\"",
                "\"v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCX/Hit5YJIzG6D/UXue1lL0Qfzxmjc6ZQBWwa2Yvj+XVKdggJ8/mGY8klXZ/jlSgOR+D4ptpdFIcwulFCY3Wy+wfgSSsleeoy5nI8yAJH1tgnhGwotpQKl9jfJuWA7mfI0gIiQ78SDwKKW+QHrwxB5s1TL9O/694MWq7qFP69C0QIDAQAB\"",
                "\"r09ftivop7a9gij9vmu1gghlte\"",
                "\"d365mktkey=x841AmRVaBoE6pWnak0FxlYfm1oASqqIOfTjJE9BPkAx\"",
                "\"e2ma-verification=75pbb\"",
                "\"Myns/k3TGZo8BOm45Lyxhwty7rKv51Kir7/O9zON7aq+St63E20KZqUd89iqsZza95UE832J3cRPu3d6L96YMw==\"",
                "\"e2ma-verification=v05fb\"",
                "\"e2ma-verification=8gbfb\"",
                "\"atlassian-domain-verification=PKjIUmPT38AwBpUTflFemJ0aWtSLd5GOCBlDTgfDKOskoj1w1c4lGbgYeQDya2dc\""
            ],
            "NS": [
                "ns-1396.awsdns-46.org.",
                "ns-2012.awsdns-59.co.uk.",
                "ns-179.awsdns-22.com.",
                "ns-607.awsdns-11.net."
            ],
            "SOA": [
                "ns-179.awsdns-22.com. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400"
            ],
            "CAA": [],
            "DS": [],
            "DNSKEY": [],
            "RRSIG": [],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "52.216.208.205",
            "16.15.253.167",
            "16.15.212.158",
            "16.15.223.10",
            "52.217.170.205",
            "16.15.238.18",
            "16.15.228.243",
            "54.231.199.5"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 include:spf.protection.outlook.com include:e2ma.net include:shu.campusgroups.com include:454160.spf08.hubspotemail.net include:mail.zendesk.com include:amazonses.com ip4:149.150.52.224 ip4:149.150.52.238 ip4:149.150.52.160 ip4:198.187.196.100 ip4:216.200.108.191 ip4:216.200.107.203 ip4:209.133.75.59 ip4:209.133.124.238 ip4:74.86.208.249 ip4:66.151.109.0/24 ip4:139.60.0.0/22 ip4:216.195.243.208 ip4:65.115.228.26 ip4:35.80.141.6 ip4:44.229.121.55 ip4:52.86.188.131 ip4:52.43.50.148 ip4:20.236.219.18 ip4:50.31.43.252 ip4:208.117.49.214 ip4:199.231.134.73/32 ip4:216.248.199.106/32 -all",
        "dmarc": "v=DMARC1;p=quarantine;pct=100;rua=mailto:dmarcaggr@shu.edu,mailto:dmarc_agg@vali.email",
        "dkim_selector": "selector1",
        "dkim_host": "selector1._domainkey.shu.edu",
        "dkim": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49cGXMB9J4ebrnEkJvz2uDbXuIDbMbGW7NvW7D2rqGwZOm/32jhlAo8KI7KRmtbKxNewh7ettwur9dlRiqNYuDToafmSjyRFxytvCtmb+G8J2HHsGkcAVEpPQLfTTcbfNJd84yZVITXIIUjRTTP6mQowJMM/20UIKrlYSjyL7I3tLgipGADQMN8qZM1CvhI8H7sgeKpVaDEKFGzLu/XHrG2qm7OWGmFN64+JL6/aST/GNaSwR0YTSOeIiVdvroJjLozDaXT6hbx2Tqs0vptqu/qSwAmxsIwvF4r1JEQgi8jn3aDNiV05jMoDHWhMkVD3n1+dugVtdsSd68U+KGUw8QIDAQAB;",
        "spf_analysis": {
            "valid": true,
            "lookups": 6,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "quarantine"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "s3-website-us-east-1.amazonaws.com",
        "propagation": {
            "consistent": false,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "16.15.191.25",
                        "16.15.207.22",
                        "16.15.207.43",
                        "16.15.228.100",
                        "16.15.229.78",
                        "16.15.246.30",
                        "52.217.122.149",
                        "54.231.172.245"
                    ],
                    "time_ms": 68.1
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "16.15.213.205",
                        "16.15.223.94",
                        "16.15.244.166",
                        "16.15.244.172",
                        "16.15.246.197",
                        "52.216.217.149",
                        "52.216.238.210",
                        "52.217.91.237"
                    ],
                    "time_ms": 52.34
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "16.15.199.152",
                        "16.15.212.122",
                        "16.15.213.172",
                        "16.15.214.20",
                        "16.15.223.139",
                        "16.15.254.227",
                        "52.216.206.138",
                        "54.231.201.157"
                    ],
                    "time_ms": 84.94
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "16.15.207.43",
                        "16.15.228.100",
                        "16.15.230.150",
                        "16.15.254.217",
                        "52.216.27.67",
                        "52.217.112.109",
                        "52.217.121.69",
                        "54.231.232.133"
                    ],
                    "time_ms": 80.76
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "16.15.229.199",
                        "16.15.253.47",
                        "52.216.60.189",
                        "52.217.165.165",
                        "52.217.166.37",
                        "52.217.172.197",
                        "52.217.205.5",
                        "52.217.254.21"
                    ],
                    "time_ms": 133.52
                }
            ]
        }
    },
    "ssl": {
        "available": false,
        "issuer": "",
        "subject": "",
        "valid_from": "",
        "valid_to": "",
        "days_remaining": null,
        "san": [],
        "protocol": "",
        "cipher": "",
        "error": "Unable to establish an SSL connection"
    },
    "http": {
        "url": "https://shu.edu/",
        "status": "",
        "http_version": "0",
        "headers": [],
        "security_checks": {
            "strict-transport-security": false,
            "content-security-policy": false,
            "x-content-type-options": false,
            "x-frame-options": false,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://shu.edu/",
        "title": "",
        "description": "",
        "success": false,
        "error": "SSL connection timeout"
    },
    "network": {
        "52.216.208.205": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        },
        "16.15.253.167": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        },
        "16.15.212.158": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        },
        "16.15.223.10": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "shu-edu.mail.protection.outlook.com",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 25.7,
                "banner": "",
                "error": "Network is unreachable"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4041.1,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4040.3,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 96.66
}