{
    "ok": true,
    "domain": "uni-bremen.de",
    "generated_at": "2026-08-09T05:48:01-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 91,
        "label": "Excellent",
        "categories": {
            "dns": 100,
            "mail": 90,
            "security": 77,
            "network": 85,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "1 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "3 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "1 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "190 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 12,
                "lost_points": 23,
                "detail": "3 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: uni-bremen.de"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/1.1 200 OK"
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "IPv6 (AAAA)",
                "detail": "1 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "3 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "1 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "190 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "3 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 12,
                "lost_points": 23
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: uni-bremen.de",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "ok",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/1.1 200 OK",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "134.102.22.124"
            ],
            "AAAA": [
                "2001:638:708:16::22:124"
            ],
            "CNAME": [],
            "MX": [
                "10 mailgate.zfn.uni-bremen.de."
            ],
            "TXT": [
                "\"_telesec-domain-validation=342062_2025-10-30_iBR3iEre5Q4rBZHu4P54hgxq6GUBD4r9VQrylGxHWR63Kbcrud\"",
                "\"cisco-ci-domain-verification=3a8a59fb2fba7134712d7ac41a382a678e7d28ef02f69cce25ba58e5e5e332c4\"",
                "\"nitro-verification-code=Nzc1MTU4MjgxMTQ3NjE5MTc1Mw==\"",
                "\"v=spf1 a mx ip4:134.102.50.0/24 ip6:2001:638:708:32::/64 ip4:134.102.51.0/24 ip4:134.102.58.0/24 ip4:134.102.3.75 ip4:134.102.236.10 ip4:134.102.196.32 ip4:134.102.20.0/24 ip4:134.102.22.0/23 ip4:134.102.231.91 include:_spf.zimpel.de ~all\"",
                "\"google-site-verification=uADf_FvqD49vqW1R7ZpDJVjm1LuOkCt4oHGGfv8oAhE\"",
                "\"ms=644922E0CDD80E313DAF6BAC6974F8BD19938702\"",
                "\"google-site-verification=BqjtWc7qOcV2hSUUwPTIja-PFBVVctvEsskJo4S8RrM\"",
                "\"HARICA-gaXa3ISBZAriIptMjvp\"",
                "\"google-site-verification=b6v9hpU4xxZKeTqeb1JuIn8T1QS2Jjkrj07pVCB1aBk\""
            ],
            "NS": [
                "ns.informatik.uni-bremen.de.",
                "ines.zfn.uni-bremen.de.",
                "dns-2.dfn.de."
            ],
            "SOA": [
                "ines.zfn.uni-bremen.de. helms.zfn.uni-bremen.de. 2029828344 28800 7200 1209600 700"
            ],
            "CAA": [
                "0 issue \"harica.gr\"",
                "0 issuewild \"harica.gr\"",
                "0 issue \"telesec.de\"",
                "0 issue \"pki.dfn.de\"",
                "0 iodef \"mailto:campusserver@uni-bremen.de \""
            ],
            "DS": [
                "18877 8 2 CA9990131EF2ECB41D7675B888C28373621FAC197440A74461B194F5 30F2AFED"
            ],
            "DNSKEY": [
                "257 3 8 AwEAAaMYKgMvfIgbCfx0aIdVDl2w9CRsahXzjsC7oz00mgVFxncR/zgK qiy8U7pAZCpgosOaL2a1xOOjYrpbsJmlw5H1nGisQCOZsXlJpAmfRA3F 6dbyu2dZ0aADFrFrpjbF1qnuK26Y+AiFg/FxBR4jIctgs4rsmmAFo2sc nGVOZwG0UFBut/0H7hErYal1S0cIFEuIjPnJZQUzkD73nfSJ9AL64anI uc4g/8Hz9GHxsNkBdKt6VmkeV8swHyEGIb3S+23L4Lp9oEg8bMkRibIX Pr/iqSQCh/VxGM6KTLDoJSIDMeBhi0peeldg1W44oF4PsXJPQZ1V9DGz TqoPoMBiuQk=",
                "256 3 8 AwEAAbTmXRRDwzPmxmG79SWhpcq2wvS/ybWo1QE+l4eDN3e1billXIFW uu/YE4JRs+2+NDYjQ04kmEf5fbJ/1/dT8wtTuAxnUrcN8tSEzwbwWYYi 185VrjNoTqatOEeu4jx1+7yJK+TO/e5s8b+YRMlYW93yUkvMdj58BHAX Y4E/WpF7"
            ],
            "RRSIG": [
                "NS 8 2 700 20260905084041 20260806074336 15315 uni-bremen.de. Puy5NKCKn5zW0D+y5wctyJL68TdIPRl4Ck8kGa/oBNjV9vE/8qUm3C5U +uLG1td5Qo8+rt/1TmAv73qhsA/6iX0tUoLMgigm9BGXa7WOY2SN35VL Ru3AwEb5FvKJ/BoTpll+n+Ljts1JnWeMJnfIfKXExonGh23e63Nd0jBn zWU=",
                "A 8 2 700 20260905084041 20260806074336 15315 uni-bremen.de. snd8QiyuM/x8m+vdKSjg2UmB1dNcq/ik1WsgxRt3QXkLj2RWpIzdNNo1 Jl+OI/mbJi9UUXrRmY66M51bAruYHrWkL+lxJ9hsjQ7UnCd5zHiZHQ8O 9X4C9Ct5Kj7GJknzBzGk+eJPE8hbmDhK11mRyIxLlU00nTv0ePUxYME/ yaw=",
                "MX 8 2 700 20260905084041 20260806074336 15315 uni-bremen.de. oDdQfE5sca00QN7fq9GlcnLU0aeJ2vGs8hIfav/DMDjQtNu8PwRVbQV6 2RDdFxAYZ13caW8s+HaSBFNfMll5aYVmuzLSy/mZVZVxgn7mlpcgGW4/ ms/cbyCDiimixFCqymVHQE6g5y1FAL63Q8/twZw6Bg9bw2BBAMOqGHuH ppE=",
                "DS 8 2 86400 20260817120903 20260803103903 32911 de. q0ynUseyN9qySiIJCTbRw0aMvuC2x0tNK4m6PCVvBSjNw1W9fIBv6byo r1a80oZ7/1Fx0dcDBhuLUR3gEvS3UI8iQowKiPmVlYrVa6ofJsGh/JXF txw6EwZaWLqiV/NoKBwb4w5g34GmUUVSr2AEJXRcmWC7LOd7TTTU1azy eug=",
                "CAA 8 2 700 20260905084041 20260806074336 15315 uni-bremen.de. nZYtNLIo6KXcf5GCD5plEP1BJr2dvNR6RyoVlRB3yWka9J+svXWjewqR hQwzpmHHmhWI4hY0M2X7h7rUu6mZdzArnZa3nBrApbrNq42VpXEsEIBD K+CQWQNvdjDJe2PC2kbN6luiT0hxTYIYWCJev9B0REhm6GVQeb3/IRkI 9ek="
            ],
            "NSEC": [
                "_dmarc.uni-bremen.de. A NS SOA MX TXT AAAA NAPTR RRSIG NSEC DNSKEY CAA TYPE65534"
            ],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [
                "100 10 \"s\" \"x-eduroam:radius.tls\" \"\" _radsec._tcp.eduroam.de."
            ],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "134.102.22.124"
        ],
        "ipv6": [
            "2001:638:708:16::22:124"
        ]
    },
    "mail": {
        "spf": "v=spf1 a mx ip4:134.102.50.0/24 ip6:2001:638:708:32::/64 ip4:134.102.51.0/24 ip4:134.102.58.0/24 ip4:134.102.3.75 ip4:134.102.236.10 ip4:134.102.196.32 ip4:134.102.20.0/24 ip4:134.102.22.0/23 ip4:134.102.231.91 include:_spf.zimpel.de ~all",
        "dmarc": "v=DMARC1; p=none; rua=mailto:unihb@uni-bremen.de; adkim=r; aspf=r; sp=none",
        "dkim_selector": "dkim",
        "dkim_host": "dkim._domainkey.uni-bremen.de",
        "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDgBU0ghGdfyIUvtAfnPsH5F8ApMS4poKnTS25wrLWL+GubZy+eY0tRGKDqEs5/64ZLPugKcW7mUnOjllRZrZ3B+vweQZ5e3y/vFOTu37i4ACyACRcwFy3ouOFA94dpBpjcdIY1jtcv7BPAQ8w5jaXPz+C2AMPDGQ/ifevS0K4QnQIDAQAB",
        "spf_analysis": {
            "valid": true,
            "lookups": 3,
            "final": "~all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "none"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "uni-bremen.de",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "134.102.22.124"
                    ],
                    "time_ms": 183.81
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "134.102.22.124"
                    ],
                    "time_ms": 279.6
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "134.102.22.124"
                    ],
                    "time_ms": 215.2
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "134.102.22.124"
                    ],
                    "time_ms": 137.82
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "134.102.22.124"
                    ],
                    "time_ms": 67.98
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "Hellenic Academic and Research Institutions CA",
        "subject": "uni-bremen.de",
        "valid_from": "2026-07-31T08:16:02-05:00",
        "valid_to": "2027-02-15T07:16:01-06:00",
        "days_remaining": 190,
        "san": [
            "uni-bremen.de",
            "www.uni-bremen.de"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_256_GCM_SHA384"
    },
    "http": {
        "url": "https://www.uni-bremen.de/",
        "status": "HTTP/1.1 200 OK",
        "http_version": "2",
        "headers": {
            "date": "Sun, 09 Aug 2026 10:47:59 GMT",
            "server": "This is not the server you are looking for!",
            "x-frame-options": "SAMEORIGIN",
            "location": "https://www.uni-bremen.de/",
            "content-type": "text/html; charset=utf-8",
            "content-language": "de-DE",
            "expires": "Mon, 10 Aug 2026 07:29:14 GMT",
            "cache-control": "max-age=74475",
            "pragma": "public",
            "x-xss-protection": "1; mode=block",
            "strict-transport-security": "max-age=15552000",
            "x-content-type-options": "nosniff",
            "x-ua-compatible": "IE=edge"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": false,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "This is not the server you are looking for!",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.uni-bremen.de/",
        "title": "Startseite - Universität Bremen",
        "description": "Die Universität Bremen ist mit rund 20.000 Studierenden eine mittelgroße deutsche Universität. Für engagierte und talentierte Studierende bietet Bremen ein breites Fächerangebot: gut 100 Masterstudiengänge und Bachelorprogramme sowie das juristische Staatsexamen. Und mit dem Forschenden Lernen hat die Universität das Projektstudium, eine Besonderheit aus ihren Gründerzeiten, neu interpretiert. 2012 wurde Bremen mit dem Zukunftskonzept „Ambitioniert und agil“ als eine von elf Universitäten als Exzellenzuniversität ausgezeichnet.",
        "success": true,
        "error": "",
        "status": 206
    },
    "network": {
        "134.102.22.124": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "mailgate.zfn.uni-bremen.de",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 125.4,
                "banner": "",
                "error": "Connection refused"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 244.7,
                "banner": "",
                "error": "Connection refused"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 122.1,
                "banner": "",
                "error": "Connection refused"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 95.14
}