{
    "ok": true,
    "domain": "tn.edu.tw",
    "generated_at": "2026-08-12T05:18:21-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 88,
        "label": "Good",
        "categories": {
            "dns": 90,
            "mail": 90,
            "security": 100,
            "network": 20,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "2 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "2 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "181 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "9 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30,
                "detail": "PTR not detected."
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/1.1 200 OK"
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "2 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "2 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "181 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP security headers",
                "detail": "9 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "PTR reverse DNS",
                "detail": "PTR not detected.",
                "category": "network",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/1.1 200 OK",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "163.26.1.72"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "10 mx.tn.edu.tw.",
                "20 mg2.tn.edu.tw."
            ],
            "TXT": [
                "\"TNf6fV3tfw8S8cXagNuQyJ2yYHChmsugA0OhH6L8Za4\"",
                "\"qywuyj4tAtFoqln4dMPUaE55RV_YjVV68P6wg6f3_es\"",
                "\"v=spf1 ip4:163.26.1.174 ip4:163.26.1.175 ip4:163.26.1.63 ip4:163.26.1.64 ip6:2001:288:7200:1::63 ip6:2001:288:7200:1::64 ~all\"",
                "\"1DFzqKGRoPn1B00bkLUMsPHCI1c4y0pgns7Jp3ANRZ4\"",
                "\"719a498a4a39e170b0ac80225ffb40dbf7e8babd173760e3e6be19e99ee4092\""
            ],
            "NS": [
                "secdns.tn.edu.tw.",
                "tns.tn.edu.tw."
            ],
            "SOA": [
                "tns.tn.edu.tw. abuse.tn.edu.tw. 2026081202 21600 1800 1209600 3600"
            ],
            "CAA": [
                "0 issue \"gtlsca.nat.gov.tw\"",
                "0 issue \"letsencrypt.org\"",
                "0 issuewild \"pki.hinet.net\"",
                "0 issuewild \"twca.com.tw\"",
                "0 issue \"sectigo.com\"",
                "0 issue \"pki.hinet.net\"",
                "0 issuewild \"globalsign.com\"",
                "0 issue \"globalsign.com\"",
                "0 issue \"comodoca.com\"",
                "0 issuewild \"certum.pl\"",
                "0 issuewild \"sectigo.com\"",
                "0 issue \"certum.eu\"",
                "0 issue \"certum.pl\"",
                "0 issue \"twca.com.tw\""
            ],
            "DS": [
                "8589 7 2 41D5C16872CF4CA8644845FF765C26309E0694A1F3873DCEF89E321B FA733E60",
                "8589 7 1 36BE1AEF9B4EF8976FF2A5DB6E3E38EE13BE45FA"
            ],
            "DNSKEY": [
                "257 3 7 AwEAAbDTCn73O8LIVLQV0cn1COAKW1jHwH9Hi40vV6RvjLTQAOytmq6m E1MwNovJCYSNdDedJ5KdDGqrgDFdulh0JQVENVUQBT2Km2sso8whTJJy csMP1LIdhiRVdwK7cDXe0PIQH7dLIwas8yiY7HYdgz7lKsUOR6PmjqiD IVzGeCalm/IU6URVubCuAkvbTSH/Rz4/k7gtZ0m2KHezuQnwW1xHi+7E MTUOW+sj9VXHioCpd/sNZT6xZbzHOLNJH0u66N6NKM4KitQBJBvNnrnN k4kP1j8998d+/z18fpzNQfnPzr1OfLyhDfFHhYGd1AaDN//ikzjq4/IT p9GXHiZYvvs="
            ],
            "RRSIG": [
                "SOA 7 3 7200 20271231235959 20260811230754 8589 tn.edu.tw. p9X5dc3DOo/jRlKe5SV1BTT+kwX1pSWxbNcKiYou5ZsnzEZd/TrDi+EC SSHhXH2iXrThRMM9WV3srY4SAPv8N6ZSXhrDAAJwLeWImUF+IebEXo75 QQmwNt1FuUFhFjIhLtclM1VElPyWt+kcTU5JWew+nBdZ15oBptGM4AIW zCEcf8dRUr1BAMWA/pO0+mWkoXKZgDvjaiWth1hUKEB25V+43ryaJiaw 28IfzyrdIgXbP7blwN+4g/m4SRv7EowQYVHx0eqFDtaxP44GFwMhASQS CdOk+JuoDBpUeb9g+mkkPgwG8S/8eziBKpaRYLJG40WJLzs7DzBm5k5r aeWBBQ==",
                "DS 8 3 300 20260816091648 20260812081802 52491 edu.tw. H5y20fEZ0WrtOfhxib7LPmHWL0hflEZ/Bw9uKmPfk6n9775A/8XDnLL/ w7Z72+35/+hJQ8Po57UHJWdRxR2GYcOHRd4OZz6A7ZnM+VfE8/gaE+b8 lVOYh1hOO3y6iTBlGlYPbwrRhy6vxI4H1pF1G6ZUTYd/JGlWQfACm2EY Ttk=",
                "A 7 3 7200 20271231235959 20260811230754 8589 tn.edu.tw. VK9ccB9osgF388qmJM4UZogvlDkpnzbk9OLR40O9VyBR2DsBDDwvuFSn W+ZC6x5LVbd8M865xGcFBA3IFalXH+7sc56JkjZ2LOXmzfglDx5NeIcn RVf9STkJ6Oe7zOg3GKry47ExNqIlkcoo3Xvf+GDIu4NCZ/egmIIHpksS txH3y43HrnrjoW1d+CfzkYEVdPibaPrdzh2yiV7Vq3wdNmRT/DmaieR9 JgffBr/DzRsBMKs5e5KHqZtg/V5RhyzoENJdnNxJLPqedHYpwKMzu6Cx 5kkdD0ISNKhcETF1c+zBVYw3uJdlOWNo4f7iGInEhtpaddKsVSyOgEpk A2TOAA==",
                "TXT 7 3 7200 20271231235959 20260811230754 8589 tn.edu.tw. Wc+B8P+sch6G8nEiXr+tTgzZ/hlsTYEr5Dji5+itsETTIKPZSUF9lx8Z 9dhLYHfjtqBvyvKdSTEZuTqlQSDRuUR3tb11dCDxNDw6xFOu4b0FRBSJ 3xwDAzSj3saIba2Rb25GZ8SoVmH8E0NjklC/bMglca/RL1ey9kwC0qe6 2rODSabB2DuAAYlQMatu+O7ZPPvTL+pZ3mTdU4o+Ou34/SZlvTWtRwRk Ebx6/4iJUvRdX7/skYF0A9hbHd8NAFGv2i7n44vGg0kslI+VS0r4QLUJ +TvrrlePlFp592+pEXxhraIeFuLSgDuvOwGsL06VdOIY1/r88UfsZwPE 4O1+Xg=="
            ],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "163.26.1.72"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 ip4:163.26.1.174 ip4:163.26.1.175 ip4:163.26.1.63 ip4:163.26.1.64 ip6:2001:288:7200:1::63 ip6:2001:288:7200:1::64 ~all",
        "dmarc": "v=DMARC1;p=quarantine;pct=100;rua=mailto:postmaster@tn.edu.tw;ruf=mailto:postmaster@tn.edu.tw;",
        "dkim_selector": "default",
        "dkim_host": "default._domainkey.tn.edu.tw",
        "dkim": "k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHOTUS//0fH4fWQX1oJsLJJBy5nBS2kqJgNFHB/qNm4XQqvURjMvlgtVQ/UI/0Yl63rKZCcHS/HbFYtssXCQCK2QqKQfEsB7LjFlDwmNTXAuhbRwlvm1gfJQDylulB8LXgd7UBwAyOeQKamEWFsINbC797UAqFFh8m67VTOq6tbDrzNAqBGPMcMlfvdf9cbq55db4+zMSCAiwDqef2YkJt4H2MOYh9r3ddK6ozHao0iM5qSVzC2horjxrsdpZpOprxZruXeRkVXOFCGLPag6WDKWi+hX35zr1bMevBN2eAqRUZvgCxUcwplixq/wdDCPnPyG1mW3uOG+843a6HBVxwIDAQAB",
        "spf_analysis": {
            "valid": true,
            "lookups": 0,
            "final": "~all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "quarantine"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "163.26.1.72"
                    ],
                    "time_ms": 223.81
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "163.26.1.72"
                    ],
                    "time_ms": 575.27
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "163.26.1.72"
                    ],
                    "time_ms": 40.02
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "163.26.1.72"
                    ],
                    "time_ms": 2504.83
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "163.26.1.72"
                    ],
                    "time_ms": 1071.65
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "TAIWAN-CA",
        "subject": "*.tn.edu.tw",
        "valid_from": "2026-01-19T02:46:18-06:00",
        "valid_to": "2027-02-09T09:59:59-06:00",
        "days_remaining": 181,
        "san": [
            "*.tn.edu.tw",
            "tn.edu.tw"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_256_GCM_SHA384"
    },
    "http": {
        "url": "https://mail.tn.edu.tw/view/login",
        "status": "HTTP/1.1 200 OK",
        "http_version": "2",
        "headers": {
            "date": "Wed, 12 Aug 2026 10:18:16 GMT",
            "server": "Apache",
            "x-frame-options": "SAMEORIGIN",
            "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
            "x-robots-tag": "noindex, nofollow",
            "permissions-policy": "geolocation=()",
            "referrer-policy": "strict-origin-when-cross-origin",
            "cross-origin-opener-policy": "same-origin",
            "cross-origin-resource-policy": "same-site",
            "cross-origin-embedder-policy": "credentialless",
            "content-security-policy": "default-src 'self' https://www.google.com https://api.line.me;         frame-src 'self' https://www.authenticatorApi.com/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://cloudhd.cgmh.org.tw/ data: blob:;         frame-ancestors 'self';         form-action 'self' ;         style-src 'self';         object-src 'none';         script-src 'self';         script-src-elem 'self' https://www.google.com https://www.gstatic.com https://static.line-scdn.net;         img-src 'self' data:;         font-src 'self' data:;         worker-src blob: data:;         connect-src 'self' data: https://api.line.me https://mailk.hgiga.com:8000 https://liffsdk.line-scdn.net",
            "location": "https://mail.tn.edu.tw/view/login",
            "x-content-type-options": "nosniff",
            "vary": "Accept-Encoding",
            "cache-control": "no-cache, no-store, must-revalidate",
            "pragma": "no-cache",
            "expires": "0",
            "content-type": "text/html; charset=UTF-8"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": true,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": true,
            "permissions-policy": true,
            "cross-origin-opener-policy": true,
            "cross-origin-embedder-policy": true,
            "cross-origin-resource-policy": true
        },
        "server": "Apache",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://mail.tn.edu.tw/view/login",
        "title": "台南市教育局電子郵件系統",
        "description": "",
        "success": true,
        "error": "",
        "status": 206
    },
    "network": {
        "163.26.1.72": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "mx.tn.edu.tw",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 184.8,
                "banner": "",
                "error": "Connection refused"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 198.3,
                "banner": "",
                "error": "No connection"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 177.8,
                "banner": "220 mx.tn.edu.tw ESMTP MailSherlock-MailFilter 5.5",
                "error": "No connection"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.216.212",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 89.85
}