{
    "ok": true,
    "domain": "tricare.mil",
    "generated_at": "2026-08-10T23:29:20-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 70,
        "label": "Fair",
        "categories": {
            "dns": 85,
            "mail": 50,
            "security": 69,
            "network": 20,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "12 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20,
                "detail": "0 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20,
                "detail": "No tested DKIM selector responded."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "129 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 4,
                "lost_points": 31,
                "detail": "1 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30,
                "detail": "PTR not detected."
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/1.1 200 OK"
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "12 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MX records",
                "detail": "0 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "DKIM",
                "detail": "No tested DKIM selector responded.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 0,
                "lost_points": 20
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "129 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "1 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 4,
                "lost_points": 31
            },
            {
                "level": "error",
                "title": "PTR reverse DNS",
                "detail": "PTR not detected.",
                "category": "network",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/1.1 200 OK",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "214.10.40.16"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [],
            "TXT": [
                "\"v=spf1 -all\""
            ],
            "NS": [
                "ns01-sea-gw.health.mil.",
                "ns01-ncr-gw.health.mil.",
                "ns01-cernls-auth2.health.mil.",
                "ns01-pac-gw.health.mil.",
                "ns01-cernorchi-auth1.health.mil.",
                "ns01-ee-gw.health.mil.",
                "ns01-cc-gw.health.mil.",
                "ns01-cernls-auth1.health.mil.",
                "ns01-nwc-gw.health.mil.",
                "ns01-sec-gw.health.mil.",
                "ns01-cernorchi-auth2.health.mil.",
                "ns01-we-gw.health.mil."
            ],
            "SOA": [
                "ns01-nsoc.mhsi.health.mil. usn\\.jbcharleston\\.niwcatlanticsc\\.list\\.dnsad.health.mil. 74386 10800 1080 2419200 900"
            ],
            "CAA": [],
            "DS": [
                "35552 8 1 CA9DA0539F884EE4712AE08879F5C7D46E055710",
                "35552 8 2 8B942AF5F8CE51FE5797D8B7EFD65B421C9FD869B931E671792A5CDE B46949E4"
            ],
            "DNSKEY": [
                "257 3 8 AwEAAaiz7P7NwHSGfKkqzuUUxcb1lNQDqbxNi5YKLCzLBREMuShO9qCJ Pzaie+ItcK9xDilxmaidexsXgzILTuwhXiSGlodJVcwg+1GN5ENsx8Jr mkVotcXzpK6Zs4qSNJ26kGRRuNaYUF0BFnA+QKjX/bDlmYIGqJ/yajYH CHU2e2Vd4yqwHrwLnBy+9yzNsWJUh3mYlTPzKdyIL24HTAHpDymX9v6H tpu2r/1qPZYuz2zlsERxHI6KuYqyd3cTQt2REYKzpu85iPn4ChEmtiix oxW4TxSY3Hri7I/1crlTOh3edDAi4rBRp7oNNHsuwdsd5/FniSZp6gY2 nm+e2m8flU0=",
                "257 3 8 AwEAAdCuoVrepybUPNU9l6QhEahwps1FBIqwYreB/1McZrqtsWDxxbSz mgaEAsfwiUGYCRmejvx2lO0kl9lehDBE+5CiKkZLQ7xa6J7h5TkNvrAz abWx7a8dO82MWWDlLZgRFB2pMwXAz74+S+cgxljP+Hxcv7bKm0Nsdnk8 ZNBEMqijH9dbRvqUXa9VMRoZul6nw1/mjn+kn436XPYFHIfqZ2b12kGG o2aXcUD+Rm8ay+uhdjFRFnXNtyxlHIh+bQDk53+NnExyiNCxjQ1YickY PPg+F47WieO9Abz4oqP7RN+EdV/N+GJROPI/L3FQ8S146zXcNbnjgRHm q+pqO7FlWHM=",
                "256 3 8 AwEAAatyGUz5FjShaLSOlrC8A9WuQdjB6IgXHvq+VGN7cZQstXZ+y9AR wfMQQmtbBz/7gz5Pxz/L3NMpfdAZONDaGRWj7/LgRs4GoLmzTOO5QczR Aib+EvZE8qmnUO7Q1WYCgvuLHPeoh9Md5P+/TznP8JdxHrswDKjczSQE 0SjfaW4kKLyMGkCv2PJStYK2lBHxqE7V+HLxrOxvhT55GabVM7kFVPiS zjvrnqJcm2eeNIfub+Wur8dMVacy7BJG2Nt6eDHyLrqfLwnnuN60xE7l r/6GA8h19Bz6WqbAbkEvl33C1JeMoG0xjMWfmTayepP2apeLKIk64EPQ AjHxajhyF5k=",
                "256 3 8 AwEAAb2efXKYDvo3piV7pSddlKCoYa2DGLWUJHasCVjSul0elMNoezYm s/QwewZse/8pZQZ8DE+S4WGJ/sJaaOERm1Sz1p887N8C+lGVpEZ8mFyq D2UwYSIsiTYUXfcQIa3Jz2R5uqwGvr/PHOdfIK2B6OvNVNF4AvzE0LFH ZGMWxZmD0vaG3mH9KsGdVhsYwOfqK7lRaksAr/R3MWWYwJAjC6EiSqSv azNrbVIoDMoptutYcpwVEI748zBgAn6T5kyDz0r1ST80Z/ZNqgSExtLv KhhLJDeOFWhHddNePAlZXaIwKAxjbl/tItIoPvCpBISbfiHA9f2v5jn6 hIvtr8xzdqE=",
                "256 3 8 AwEAAcmHZLe/MkCWoBwKQuS2DUrs4y4S4yzx4OwsKAups34arlQDGv6y 8KgftC3OOInqTymh8vA++oHH+dUWBhHAZxxBfustW5YfNkk2vLx0CLMz sIYu6eqELjhJnZyI8eKTxvFl8vrBCe4cC2io1YGvmJcFylL6J7tiKFzt J8mw+gHMOihmIykvefTpaHGyV8Zfzd4UZ5+m2pqaQypPcWKTsBiWsrl5 t+yKxXplOUM7DHi9R1LjqvxMqKhCpiaA/Vo3Uj68hBYIUy8SMbGUPoVz lyo13BX7yoTr3peGjK/2oR8eGH5U+MH9bqvmZFwCntyqkiCOBQunyljI 9hOGw5JA78M="
            ],
            "RRSIG": [
                "DNSKEY 8 2 172800 20260814005208 20260810002105 35552 tricare.mil. qCHTtyPsEjNC38weBCkr+e7fP82neyiuGeWrx4jpTO5y9IlAf2/X7tPO 0l8AqMOiYc325a8cxalX3gC01RhS5S/S2WOrgVFL/2/L2fPQ6RpZcW4R TsM7f4Mbrf5tsSYrEuJ7CU89OM1yZszUXzf+0v9aSzar+nnG/eynYIgL yORjlvwt0cRv/G5RuXTQviZbD+UmoahZvgop+B1IfnlUW5ceQxBZuetc 9yotyA9p7SEsNGikRqdc+YFVdR284xyTJ/SKNIwwqAnzOJ1kns1f//Jv mhu26v6M2+DAiihsulOhZPP1S1WpH5isv4vLA42vCKQwx/zEfThrE86/ 1sdaFw==",
                "DNSKEY 8 2 172800 20260814005208 20260810002105 40524 tricare.mil. IUJrmEHeLFOimZJ1SR+p42wrNT2Q99oPUKK+J5ewQJoSnco9d0Q/4926 rLCzM8Kap1u7HqZz8ts71vgt/G2BnRpn6SIgSvvjUO77ZG8vnwTfhdx7 bTTOLS/CdGywOSboWo+JyqAKQF1pOPvumpM4WnPdexsDb2g6ayKdh2vc IID+p4wWyTcvZxmX6Q4dlMHZvL2Gpquo5B3xLEMW3ANEjroYTT/66vcC UmtRQ9JuGc5KUM+oyUia//JI/sW6kzDn/a9jvks/D5tu5oM5Yj7+pK6h Gkyse1+5ztQY8UYAl1YUlTFpUhoQR8/Ezndq10ldEYwYCD4GHV0sPySl tcVPEw==",
                "DNSKEY 8 2 172800 20260814005208 20260810002105 43771 tricare.mil. Z96KworIUkszfZA+Il6bgu6zv8wim4YPvFi/Y4WgYL9HNacC2lp0NRuL z6si49Z2c+sPlelIsCAW4WXdfO06lte2AhjMQUTTUwAobtwcnPOO/1Lp JnOrLRzC3ohCtXzn94T6iPIcWeAYTh6+gCuVerUN9r5qLZo+sCECEsTq hkMVIR9ExbIpB5Ot5tj6m7+tfU2IfkwncMV+x7Be3h4tGg0K4+xMBYB9 Dsw8lWO+qwLi5EMfJ8qqVeA111lXBf70RHaMzgWa9fLoXoTWnsjj63I2 46b17QY8RDvAnf6Ky/yqVIDoDISpXATVhh1YCvzEIDhqbt0iwhhuF4Cq z9PKMg==",
                "DS 8 2 10800 20260817230506 20260810230506 14353 mil. fo7/YQKdLVppQZwta93BO8q5/+1Zv33uRTOa2g8Y0GA28hKiLiig90a5 ArqL/d8cxmGFRONeW6g6gdWOWkV3iDOX/Pm6/UY0rxHEyhH/TIFDgPus 3I2tiIabS8pizuMRMKFa0Y21OQ3Mgm5NhjaopIkSkixfFtVMJnk9Qv/P fjg="
            ],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [
                ";; communications error to 69.64.44.20#53: timed out"
            ],
            "TLSA": [
                ";; communications error to 69.64.44.20#53: timed out"
            ],
            "SSHFP": []
        },
        "ipv4": [
            "214.10.40.16"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 -all",
        "dmarc": "v=DMARC1; p=reject; sp=reject; rua=mailto:dmarc_reports@mail.mil",
        "dkim_selector": "x",
        "dkim_host": "",
        "dkim": "",
        "spf_analysis": {
            "valid": true,
            "lookups": 0,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "reject"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "214.10.40.16"
                    ],
                    "time_ms": 133.74
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "214.10.40.16"
                    ],
                    "time_ms": 193.05
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "214.10.40.16"
                    ],
                    "time_ms": 171.12
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "214.10.40.16"
                    ],
                    "time_ms": 66.77
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "214.10.40.16"
                    ],
                    "time_ms": 291.98
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "DigiCert Inc",
        "subject": "*.health.mil",
        "valid_from": "2026-01-19T18:00:00-06:00",
        "valid_to": "2026-12-18T17:59:59-06:00",
        "days_remaining": 129,
        "san": [
            "*.health.mil",
            "health.mil",
            "tricare.mil",
            "www.tricare.mil",
            "cms.tricare.mil",
            "gulflink.osd.mil",
            "www.gulflink.osd.mil",
            "gulflink.fhpr.osd.mil",
            "www.gulflink.fhpr.osd.mil",
            "gulflink.health.mil",
            "www.gulflink.health.mil",
            "www.mobile.health.mil"
        ],
        "protocol": "TLSv1.2",
        "cipher": "ECDHE-RSA-AES256-GCM-SHA384"
    },
    "http": {
        "url": "https://tricare.mil/",
        "status": "HTTP/1.1 200 OK",
        "http_version": "2",
        "headers": {
            "cache-control": "no-cache, no-store",
            "pragma": "no-cache",
            "content-length": "118219",
            "content-type": "text/html; charset=utf-8",
            "expires": "-1",
            "set-cookie": "TS01f199dd=01dfa15f2daf179941ae2d8490fcca609d0822bc6954b02f530bca9d91a998f3c26e8e2284b43e5564faaedb0030385c25e6d023ca201dcda9d99052c2e91ccc640c4752240588d77dccbd641030feb3d0fd073fdd50ba82de351c77880e79bae3ac5b9824; Path=/; Domain=.tricare.mil",
            "accept-ch": "Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness",
            "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
            "date": "Tue, 11 Aug 2026 04:29:11 GMT"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": false,
            "x-content-type-options": false,
            "x-frame-options": false,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://tricare.mil/",
        "title": "Home | TRICARE",
        "description": "TRICARE is the uniformed services healthcare program for active duty service members, active duty family members, National Guard and Reserve members and their family members, retirees and retiree family members, survivors, and certain former spouses worldwide.",
        "success": true,
        "error": "",
        "status": 200
    },
    "network": {
        "214.10.40.16": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "tricare.mil",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 0.9,
                "banner": "",
                "error": "Connection refused"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4056.7,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4021,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 86.27
}