{
    "ok": true,
    "domain": "si.edu",
    "generated_at": "2026-08-08T18:23:33-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 81,
        "label": "Good",
        "categories": {
            "dns": 90,
            "mail": 90,
            "security": 92,
            "network": 50,
            "availability": 60
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "6 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "1 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "34 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 27,
                "lost_points": 8,
                "detail": "7 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: storiesfrommainstreet.org"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 0,
                "lost_points": 40,
                "detail": "HTTP/2 403 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "6 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "1 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "34 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "7 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 27,
                "lost_points": 8
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: storiesfrommainstreet.org",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "HTTP response",
                "detail": "HTTP/2 403 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 0,
                "lost_points": 40
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "160.111.244.22"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "0 si-edu.mail.protection.outlook.com."
            ],
            "TXT": [
                "\"0aaea9bca148850c1b6f223e7f57a777232e5a319343f6d8989514c236f298fa\"",
                "\"04a376ab7769590c9661fc0941631e28f4055d41005260b40fff3c87d8df9869\"",
                "\"7d4550321c0161253c3ea5ccec6c837f8bcf7be735038aa9f653a72d98eec4bc\"",
                "\"canva-site-verification=_s6Cq2oLPbhyDq31iu-b-A\"",
                "\"39433829e8c04de67882088be1ceb6eb7300dd8d405217affb631c652d2c92bd\"",
                "\"f625192959685de445110b63c95ea6f12e17d96e36e9c3e9e0a938c30a4f43ba\"",
                "\"airtable-verification=3f1db8793cf1be25596af7e99e060d41\"",
                "\"494983b036c42cf817dacb5fc919f629c3786991041ddc257fc4014ce1c7886b\"",
                "\"31802817b6579c3d802ca2f1680d394b657eb4788178951026ace15baafb5588\"",
                "\"openai-domain-verification=dv-eu9pCkdZuzJSXWszEh1cs3BG\"",
                "\"b3885056fb9ee4649ca08b2d7f5aee42ad8524f090e1d4bc1ebf388f41695af4\"",
                "\"f32a1ad19f5e57b68f5bba3bcac88ad61fd110d2eefe9cc12cc05c8bbecf5031\"",
                "\"520551a893da3ebec689738534dcc320a2265c162236dbde97b39a026cd87fb6\"",
                "\"google-site-verification=kanYvoMvgHV_OzXszl4r6hoaRhJ-RSmcKHmMNYbJLM0\"",
                "\"adobe-idp-site-verification=ebf44aa1f4d5c71b36a262511b68415832b6f2ad1b7411c528806154df4cc7a6\"",
                "\"docusign=1c9206b6-fcd1-4754-8bb5-dc9f864d2d2e\"",
                "\"3e449f3017316ed138f1d4a6d4be9346a440a6100bb1f1e749992ae4430a7e74\"",
                "\"14cdba3c0c616a8ce86008cf5436804e406cdff63a73d44cdb943331fe716c5d\"",
                "\"4f91259469ca9960db5699179cb910796852693ba7df70b60545f79373c5d0e2\"",
                "\"b81949f9493326bea1ceae862c879b1a6688f02762ade1c2211702ebb1d5af05\"",
                "\"v=spf1 ip4:160.111.0.0/16 ip4:67.231.156.100 ip4:67.231.148.101 include:spf1.si.edu include:spf.protection.outlook.com include:mailsenders.netsuite.com -all\"",
                "\"atlassian-domain-verification=WsqpJRrIShm2l9mzMRIOQjdSiHChgFqqfOMIUH4B3EDLiaodZLfVZsitwXvvOuzo\"",
                "\"d2c638e312f5d2bf17a1c5295c39c1b51200c5caff4fafe25ac4f7345d4825aa\"",
                "\"4aa7b65339612a9a90d4cebadbb570d0ea68be025de69c1f11a1a14207cfdedb\"",
                "\"082b9cc317ff878149172c86c461af33b77e375cf70a4eea971a25418ef906d5\"",
                "\"ae526ed1432cc584889cd7864aeb421535f15c4446220a7fef0084779b769e72\"",
                "\"apple-domain-verification=OQGHn6kF8gOnAiWs\"",
                "\"v=spf2.0/pra ?all\"",
                "\"7ad39b33bb809dff48ffc936a730927bc47c1b0ce9ef0e5956ffcd3707c7207e\"",
                "\"6dee22b4868a2c91e999fd11037713c59d89df90570f080386c6719737c39527\"",
                "\"atlassian-domain-verification=/lJYot74zjF1VwfCEfyelSmp2V3z5QnHGSWtBhaZzLjy3KajAZuREvkSONV5/oY5\"",
                "\"ae4702faaef4287671c09ea00d6ee406f27390cef064da2f1ea20268e56d92c2\"",
                "\"02903de83f211f7c1c93dbbfaf24f4de1222fb631d64214c20f5aa76f0cbb2b1\"",
                "\"103981a55790ab5e79fa42a3be5ec1f1af9688531c1d7201da7b423e1a9afe98\"",
                "\"270f64f6d25ce95f3dee98221993750128f27e3c77866485b5a589f4d00ec863\"",
                "\"jamf-site-verification=_2xGbG2MJiUanzZxmwyiBA\"",
                "\"f0afb2e46e0da6455ff974d8d351d6ed3a5520b5fa607284d71e8624f07608a0\"",
                "\"9d9f681dca718bea2c480bb46cd0c1ecca4329b3f9e21616bc836d45916defc9\"",
                "\"MS=ms11507808\"",
                "\"8b581bbbb2fffb6a643e039a6eac27e87f1fb3cc77a63dbf46a1945364b84f1f\"",
                "\"pardot980712=40b77e6a8c3cb064ca443f8d3483406a462ed6e8096c597515102540924fa4ed\"",
                "\"google-site-verification=9-OyClmReEWU6t3ri7R65zaHcE5ONk80xgeIHMjgg08\"",
                "\"f27120e7e7d9fde4b8b1d550a8676808f32423c68f65bf080257153124065865\"",
                "\"b5619ec13807b9baa5d942538745a66b67dbf3c844edbd82f227cbf539fecd83\"",
                "\"onetrust-domain-verification=733d52d8e41444d097693c749e597ec9\"",
                "\"97bf4b9ed60aea1d02f2aeaafc4a2941a8a5c647a0792a8165ea444a7cc34ca7\"",
                "\"2fa42e7886b78a66bd2e4010268ee32d674f9966c27c327bece432e50daa5ef4\"",
                "\"Foxit-domain-verification=90c4cab4414ce9a2004043298dd584ce\"",
                "\"18aa19c7c343e9bdc9c2a6bb9cda5dabb4355c68d8e5932ccd6381651e126505\"",
                "\"e85d3013c9c7b3189294607235b7649ecb79aca52fea7d56cd63f8ff0bdd3759\"",
                "\"060016681f61e250780cb31c60e8e9c59232b1a6a96c84f4e6df6241169a80d2\"",
                "\"d0979ba3450a12a765a08ae0190e39832ff0175cade82a341307a3291532e19d\"",
                "\"a37dc5ea443ef274ee1bbf4d014c312e4a36bf28c28204b033f914f932bd45dc\"",
                "\"82bfa18d46385ec9599afca5ae30e6f718c8383c062699c76e894b62e9df8e79\"",
                "\"69590cb29bef8c8cc7c9b2e65dc042877bf1f8d8ad89d454339a554f4a6657bf\"",
                "\"docusign=13c4cb8d-4a47-4283-811e-e667bdd84098\"",
                "\"99150e590fc6c7a503eddbc238c57319e437e396766bafb797c36d78f4fc3fe1\"",
                "\"pardot1004652=926ad95006c2c225fb35c6cf36285e8b112f6756b832538f471e4cbf886f11c0\"",
                "\"D9Pafp4mPMV7Vt+wH+GSYi35FnsBm9zZQA6TLxStwyHV3JFiCPPQGVSJM7UzuvWz/KrphLEsXbc/bs5vKq+iHQ==\"",
                "\"google-site-verification=h1dnhf4Bz-gK562okiF7P9C6hy5xTOc_7v-4ChAOpHo\"",
                "\"1209cfa51bcf735615577b69ddaddc125e40063092c69453ef8b2c90e9db5aa1\"",
                "\"faeacb31d37c71bd733abb60f275e2b68b82f977fa17f48f377fd0824dfea1d1\"",
                "\"asv=84f6dfbd71d6cbaaa0ed4810076c50f6\"",
                "\"085b91e4eb1a7a8572dcf79376104572dd8caf625df8797c2459f62dbd6f8757\""
            ],
            "NS": [
                "a28-65.akam.net.",
                "a11-67.akam.net.",
                "a1-88.akam.net.",
                "a26-66.akam.net.",
                "a24-67.akam.net.",
                "a9-64.akam.net."
            ],
            "SOA": [
                "a26-66.akam.net. ocio-noc.si.edu. 787305118 1200 180 1209600 1800"
            ],
            "CAA": [
                "0 issue \"sectigo.com\"",
                "0 issue \"digicert.com\"",
                "0 issue \"letsencrypt.org\"",
                "0 issue \"ssl.com\"",
                "0 issue \"pki.goog; cansignhttpexchanges=yes\""
            ],
            "DS": [
                "7096 13 2 30F299D6F21BB273CB617671F557145F9047F5628EA8F2D5FA5A16DD 3995072E"
            ],
            "DNSKEY": [
                "257 3 13 ZWNrjO6jVzVdSfufMeYCQCKpPPXoRkLYmkTXtt6aveHONLl3U3MZjBYl r26j05eJ3+mbMCv1BgSrBS/0qbGzPw==",
                "256 3 13 ISzpsfk4hNlnkuc1zsgFE4cqJd4mokilxFABtMS5DRDaS4oCbav2+xhK YnjJrEJ7xNy9G48FjwJPB1pNtNo3nA=="
            ],
            "RRSIG": [
                "SOA 13 2 3600 20260823231248 20260808221248 59756 si.edu. h3B8L/L0zz/aYLWwx/C8eyf3UW3DfhG5p655b/bpFwuLG1TDLW+6BOeX Dt/qEJogX01/NWznMGODcgw/Za8Owg==",
                "NS 13 2 3600 20260811053001 20260727051405 59756 si.edu. 0W/ClpMvmanlPx7ehg/ns1/4QWqghNHWT7kyk2P3Eb/9NrQW9pSRGPil rHtoN1zjeegZKuzuBNGVwrFkZN9yaA==",
                "TXT 13 2 3600 20260813201759 20260729201622 59756 si.edu. erqc8Gdb3Fc8MpEEYVzMfInk0YX+LjvhzxxlFnmZyAAjkupDDxaXUCS2 OvrGQbms6hGZgi13veqAArGAATnmJg==",
                "A 13 2 300 20260811052536 20260727042741 59756 si.edu. 5we1BzWSillZoL70bMscI2ybvxoADS4CyNLJjIo5V5BPfBCZgKXjGj+m u2SRLBONZKwJkgBBSuKJhGHMU29tDg==",
                "MX 13 2 3600 20260811050142 20260727041843 59756 si.edu. Z428knSrhJ78j+Xv7Y252kXMaQwlL6BosajFYGD+2gYqfpRszOKYbroc dOrxLkTqwPuUO8BXIh1xFDNgYi26XQ=="
            ],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "160.111.244.22"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 ip4:160.111.0.0/16 ip4:67.231.156.100 ip4:67.231.148.101 include:spf1.si.edu include:spf.protection.outlook.com include:mailsenders.netsuite.com -all",
        "dmarc": "v=DMARC1; p=reject; fo=1; rua=mailto:5e661d18@mxtoolbox.dmarc-report.com,mailto:dmarc@si.edu,mailto:reports@dmarc.cyber.dhs.gov; ruf=mailto:5e661d18@forensics.dmarc-report.com,mailto:dmarc@si.edu; adkim=r; aspf=r; pct=100;",
        "dkim_selector": "default",
        "dkim_host": "default._domainkey.si.edu",
        "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDf3px0BX68c5Ndt4fsjjhIauO0XimgTnf7isoP19qlbIBoPO7GY3Gp7QkE9XEmIBSlkOqs+RkZ8gQq8HXPqAD36rnylthB9ZZnwhXMmpJ5Ibvxc2BvaXAxi0BVUT3g0UIeakxB5vWohjDj4aZ2QXCfodMGari/QdQHwvdYF04tbwIDAQAB",
        "spf_analysis": {
            "valid": true,
            "lookups": 3,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "reject"
        },
        "bimi": "v=BIMI1; l=https://www.si.edu/content/logo_seal.svg;a=self;",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "storiesfrommainstreet.org",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "160.111.244.22"
                    ],
                    "time_ms": 72.87
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "160.111.244.22"
                    ],
                    "time_ms": 50.75
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "160.111.244.22"
                    ],
                    "time_ms": 39.46
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "160.111.244.22"
                    ],
                    "time_ms": 33.4
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "160.111.244.22"
                    ],
                    "time_ms": 73.99
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "Internet2",
        "subject": "*.si.edu",
        "valid_from": "2025-08-10T19:00:00-05:00",
        "valid_to": "2026-09-11T18:59:59-05:00",
        "days_remaining": 34,
        "san": [
            "*.si.edu",
            "si.edu"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_128_GCM_SHA256"
    },
    "http": {
        "url": "https://www.si.edu/",
        "status": "HTTP/2 403 ",
        "http_version": "3",
        "headers": {
            "location": "https://www.si.edu/",
            "server": "cloudflare",
            "connection": "Keep-Alive",
            "content-length": "46277",
            "date": "Sat, 08 Aug 2026 23:23:25 GMT",
            "content-type": "text/html; charset=UTF-8",
            "accept-ch": "Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA",
            "cf-mitigated": "challenge",
            "x-frame-options": "SAMEORIGIN",
            "critical-ch": "Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA",
            "cross-origin-embedder-policy": "require-corp",
            "cross-origin-opener-policy": "same-origin",
            "cross-origin-resource-policy": "same-origin",
            "origin-agent-cluster": "?1",
            "permissions-policy": "accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*",
            "referrer-policy": "same-origin",
            "server-timing": "chlray;desc=\"a28244c92c3fcb99\"",
            "x-content-type-options": "nosniff",
            "expect-ct": "max-age=86400, enforce",
            "x-xss-protection": "1; mode=block",
            "cf-ray": "a28244c92c3fcb99-STL",
            "alt-svc": "h3=\":443\"; ma=86400"
        },
        "security_checks": {
            "strict-transport-security": false,
            "content-security-policy": false,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": true,
            "permissions-policy": true,
            "cross-origin-opener-policy": true,
            "cross-origin-embedder-policy": true,
            "cross-origin-resource-policy": true
        },
        "server": "cloudflare",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.si.edu/",
        "title": "Smithsonian request verification",
        "description": "",
        "success": true,
        "error": "",
        "status": 403
    },
    "network": {
        "160.111.244.22": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "si-edu.mail.protection.outlook.com",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 24.3,
                "banner": "",
                "error": "Network is unreachable"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4020.8,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4045,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 91.18
}