{
    "ok": true,
    "domain": "uefa.com",
    "generated_at": "2026-08-08T20:44:38-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 81,
        "label": "Good",
        "categories": {
            "dns": 75,
            "mail": 90,
            "security": 88,
            "network": 20,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "4 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "1 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "181 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 23,
                "lost_points": 12,
                "detail": "6 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30,
                "detail": "PTR not detected."
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/2 200 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "4 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "1 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "181 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "6 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 23,
                "lost_points": 12
            },
            {
                "level": "error",
                "title": "PTR reverse DNS",
                "detail": "PTR not detected.",
                "category": "network",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/2 200 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "150.171.110.209"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "5 uefa-com.mail.protection.outlook.com."
            ],
            "TXT": [
                "\"v=spf1 include:spf.mandrillapp.com include:spf.secutix.com include:spf-com.uefa.com include:spf-tm.uefa.com include:mail.zendesk.com include:de._netblocks.mimecast.com include:spf.protection.outlook.com include:docebosaas.com -all\"",
                "\"2dmstm4toh84f80ih5fbjb68ng\"",
                "\"google-site-verification=Ja5XgRmsKqr5IHhpxC4i_7d58D2bIbo_8DmD_tZl0cM\"",
                "\"rsk2dvg2ueuht05uqioi52s5mu\"",
                "\"_8dcie8j70l1cx0nnau9mz3ozer943go\"",
                "\"6sq9r1f3ijfn2putcdp5ksdjp5\"",
                "\"_9a72a9my3atpau6p0zcclydmlt12vmv\"",
                "\"google-site-verification=WvFNBTKz1JBQhe7cXY8YKkb2eboKP17mAlo6VC89u64\"",
                "\"tbn9srdinni31r49fbh9ofhlq9\"",
                "\"fbbwp1ns84y1xzp9rwp8pw1p2fhdc44w\"",
                "\"MS=ms36345800\"",
                "\"fwjs7k609kg8whdb6f4hl8fnjgtt8bkq\"",
                "\"urdglag9bvm7s5ibem4ii1csr6\"",
                "\"Google-site-verification=bdcXTYRD3bEIncrTzsO4tElWpm4OLNkAY6ozMgE6W8I\"",
                "\"tZHXsnSKmsOIKhV7kBIxeo3k2OXm8DPy7brI9dAyOegCBQCQAs5SuuQINwVgUg6E0sq6v5wItZc9yeHGW6aMxA==\"",
                "\"86j5bot0bbqm02ub34rsqoeglp\"",
                "\"v9gck7rq9fqrkqj29egj5ceqeg\"",
                "\"liktrjj5p55r0mi7vt2maedp4d\"",
                "\"l7bj8t0dqrlfw9t4d3wf6w36fmzlb36g\"",
                "\"pardot828323=20121238b02786397daae6ced242b5d1befdfaaa39f7b066260064eb94e62ba2\"",
                "\"4mhpn14mndr0qbr6gkg21kqgaf\"",
                "\"MS=ms31621330\"",
                "\"_et9g69olvze5njqyzaq0c97u3681xeq\"",
                "\"_qqqs8g2n249qw570ntz97qpliv138y1\"",
                "\"t5dcoa824dmtd52bj1cj9kjrfa\""
            ],
            "NS": [
                "ns1-07.azure-dns.com.",
                "ns3-07.azure-dns.org.",
                "ns4-07.azure-dns.info.",
                "ns2-07.azure-dns.net."
            ],
            "SOA": [
                "ns1-07.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 3600 300 2419200 300"
            ],
            "CAA": [],
            "DS": [
                "33204 13 2 99D46D0732E57D3A13C51BBE68E8A897213379623B105F5D86E56D3C C005B1C1"
            ],
            "DNSKEY": [
                "256 3 13 zjrELDRNU99IfzYGiP1WUMY9TDadaRCIZHYoebrJW/f+ZzfigbAhs4d0 RdBT1uh2HrjfHrGcizoXnhdzGmsnEA==",
                "257 3 13 8KY2I9TUnAOfY7QMfSynaGBYJ9tXVpMTtPAnJ6Otcbk19OVE/8Vl1eL0 hMSu0mJv7YDVPEQMdlteAmMQuiMXtg=="
            ],
            "RRSIG": [],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "150.171.110.209"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 include:spf.mandrillapp.com include:spf.secutix.com include:spf-com.uefa.com include:spf-tm.uefa.com include:mail.zendesk.com include:de._netblocks.mimecast.com include:spf.protection.outlook.com include:docebosaas.com -all",
        "dmarc": "v=DMARC1; p=none; rua=mailto:secdmarcreports@uefa.ch; ruf=mailto:secdmarcforensics@uefa.ch; fo=1",
        "dkim_selector": "selector1",
        "dkim_host": "selector1._domainkey.uefa.com",
        "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNbYHQDJPbH6FxV0rBxLWhRn9PIII4BFPcz27zSn/ZJbnSIezdRoL16U7EqxxU6STcgvWmT4/xXtImVwGaV4VVUHIjtKEU9oANvTLj/zQwxs8gsLsMSEd1/zZU4VNh5n7qP9JYLYDBZiCUDghHsYqHfhpeeHi8OFk68KhKweBjBQIDAQAB;",
        "spf_analysis": {
            "valid": true,
            "lookups": 8,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "none"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "",
        "propagation": {
            "consistent": false,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "150.171.110.211"
                    ],
                    "time_ms": 102.36
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "150.171.109.178"
                    ],
                    "time_ms": 62.18
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "150.171.110.209"
                    ],
                    "time_ms": 80.68
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "150.171.110.211"
                    ],
                    "time_ms": 55
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "150.171.110.194"
                    ],
                    "time_ms": 78.26
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "GoDaddy.com, Inc.",
        "subject": "*.uefa.com",
        "valid_from": "2026-01-05T07:01:23-06:00",
        "valid_to": "2027-02-06T07:01:23-06:00",
        "days_remaining": 181,
        "san": [
            "*.uefa.com",
            "uefa.com"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_256_GCM_SHA384"
    },
    "http": {
        "url": "https://www.uefa.com/",
        "status": "HTTP/2 200 ",
        "http_version": "3",
        "headers": {
            "date": "Sun, 09 Aug 2026 01:44:30 GMT",
            "content-type": "text/html",
            "location": "https://www.uefa.com",
            "x-handled-by": "REDIRECTS-APP-WEBAPP-PRD-NE",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin",
            "content-security-policy": "frame-ancestors 'self' https://idp-production.uefa.com;",
            "permissions-policy": "accelerometer=(),autoplay=(),camera=(self),display-capture=(),encrypted-media=(),fullscreen=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),publickey-credentials-get=(),screen-wake-lock=(),sync-xhr=(self),usb=(),web-share=(),xr-spatial-tracking=()",
            "x-azure-ref": "20260809T014429Z-16475f7bbb6hgdx5hC1CHIe30w00000003dg000000000e34",
            "x-xss-protection": "0",
            "report-to": "{'group':'csp-endpoint','max_age':10886400,'endpoints':[{'url':'https://csp-devops.uefa.ch/api/csp-report'}]}",
            "x-permitted-cross-domain-policies": "none",
            "strict-transport-security": "max-age=31536000; includeSubDomains",
            "x-cache": "CONFIG_NOCACHE",
            "cache-control": "max-age=300",
            "request-context": "appId=cid-v1:fa183d2c-eab9-45c5-8d47-e27d64c12f2e",
            "x-frame-options": "DENY",
            "access-control-allow-credentials": "true",
            "access-control-allow-headers": "X-UserId, authorization, accept, If-None-Match, If-Modified-Since, Content-Type",
            "access-control-allow-methods": "GET,POST,DELETE,PUT,OPTIONS",
            "access-control-allow-origin": "*"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": true,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": true,
            "permissions-policy": true,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.uefa.com/",
        "title": "The official website for European football | UEFA.com",
        "description": "UEFA.com is the official site of UEFA, the Union of European Football Associations, and the governing body of football in Europe. UEFA works to promote, protect and develop European football across its 55 member associations and organises some of the world’s most famous football competitions, including the UEFA Champions League, UEFA Women’s Champions League, the UEFA Europa League, UEFA EURO and many more. The site features the latest European football news, goals, an extensive archive of video and stats, as well as insights into how the organisation works, including information on financial fair play, how UEFA supports grassroots football and the UEFA HatTrick funding scheme.",
        "success": true,
        "error": "",
        "status": 206
    },
    "network": {
        "150.171.110.209": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "uefa-com.mail.protection.outlook.com",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 35.9,
                "banner": "",
                "error": "Network is unreachable"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4042.3,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4027.8,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 80.87
}