{
"ok": true,
"domain": "uni-erlangen.de",
"generated_at": "2026-08-09T13:23:18-05:00",
"cache": {
"hit": true,
"ttl": 0
},
"score": {
"total": 85,
"label": "Good",
"categories": {
"dns": 95,
"mail": 70,
"security": 73,
"network": 85,
"availability": 100
},
"category_weights": {
"dns": 25,
"mail": 20,
"security": 25,
"network": 10,
"availability": 20
},
"items": [
{
"category": "dns",
"title": "IPv4 (A)",
"max_points": 30,
"earned_points": 30,
"lost_points": 0,
"detail": "1 IPv4 address(es) detected."
},
{
"category": "dns",
"title": "IPv6 (AAAA)",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "1 IPv6 address(es) detected."
},
{
"category": "dns",
"title": "Name server redundancy",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "4 NS record(s); 2 or more required."
},
{
"category": "dns",
"title": "SOA record",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Authoritative zone record."
},
{
"category": "dns",
"title": "DNSSEC chain",
"max_points": 15,
"earned_points": 15,
"lost_points": 0,
"detail": "DS and DNSKEY detected."
},
{
"category": "dns",
"title": "CAA policy",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "Certificate authority restriction."
},
{
"category": "dns",
"title": "DNS propagation",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Agreement between public resolvers."
},
{
"category": "mail",
"title": "MX records",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "3 MX record(s)."
},
{
"category": "mail",
"title": "SPF",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "SPF policy published."
},
{
"category": "mail",
"title": "DMARC",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "DMARC policy published."
},
{
"category": "mail",
"title": "DKIM",
"max_points": 20,
"earned_points": 0,
"lost_points": 20,
"detail": "No tested DKIM selector responded."
},
{
"category": "mail",
"title": "MTA-STS",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "Mail transport policy."
},
{
"category": "mail",
"title": "TLS-RPT",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "TLS reporting policy."
},
{
"category": "security",
"title": "Valid TLS certificate",
"max_points": 55,
"earned_points": 55,
"lost_points": 0,
"detail": "101 day(s) remaining."
},
{
"category": "security",
"title": "Certificate lifetime",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Full points require at least 30 days remaining."
},
{
"category": "security",
"title": "HTTP security headers",
"max_points": 35,
"earned_points": 8,
"lost_points": 27,
"detail": "2 of 9 evaluated headers detected."
},
{
"category": "network",
"title": "PTR reverse DNS",
"max_points": 30,
"earned_points": 30,
"lost_points": 0,
"detail": "PTR: cmslb-fau-zentrale.rz.rrze.net"
},
{
"category": "network",
"title": "IPv4 diversity",
"max_points": 35,
"earned_points": 20,
"lost_points": 15,
"detail": "Two or more IPv4 addresses receive full points."
},
{
"category": "network",
"title": "IPv6 connectivity",
"max_points": 35,
"earned_points": 35,
"lost_points": 0,
"detail": "AAAA availability."
},
{
"category": "availability",
"title": "DNS resolution",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "At least one address family must resolve."
},
{
"category": "availability",
"title": "HTTP response",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "HTTP/1.1 200 OK"
},
{
"category": "availability",
"title": "HTTPS final URL",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "Final URL uses HTTPS."
}
],
"methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
"diagnostics": [
{
"level": "ok",
"title": "IPv4 (A)",
"detail": "1 IPv4 address(es) detected.",
"category": "dns",
"max_points": 30,
"earned_points": 30,
"lost_points": 0
},
{
"level": "ok",
"title": "IPv6 (AAAA)",
"detail": "1 IPv6 address(es) detected.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "Name server redundancy",
"detail": "4 NS record(s); 2 or more required.",
"category": "dns",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SOA record",
"detail": "Authoritative zone record.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "DNSSEC chain",
"detail": "DS and DNSKEY detected.",
"category": "dns",
"max_points": 15,
"earned_points": 15,
"lost_points": 0
},
{
"level": "error",
"title": "CAA policy",
"detail": "Certificate authority restriction.",
"category": "dns",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "ok",
"title": "DNS propagation",
"detail": "Agreement between public resolvers.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "MX records",
"detail": "3 MX record(s).",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SPF",
"detail": "SPF policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DMARC",
"detail": "DMARC policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "error",
"title": "DKIM",
"detail": "No tested DKIM selector responded.",
"category": "mail",
"max_points": 20,
"earned_points": 0,
"lost_points": 20
},
{
"level": "error",
"title": "MTA-STS",
"detail": "Mail transport policy.",
"category": "mail",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "error",
"title": "TLS-RPT",
"detail": "TLS reporting policy.",
"category": "mail",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "ok",
"title": "Valid TLS certificate",
"detail": "101 day(s) remaining.",
"category": "security",
"max_points": 55,
"earned_points": 55,
"lost_points": 0
},
{
"level": "ok",
"title": "Certificate lifetime",
"detail": "Full points require at least 30 days remaining.",
"category": "security",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "warning",
"title": "HTTP security headers",
"detail": "2 of 9 evaluated headers detected.",
"category": "security",
"max_points": 35,
"earned_points": 8,
"lost_points": 27
},
{
"level": "ok",
"title": "PTR reverse DNS",
"detail": "PTR: cmslb-fau-zentrale.rz.rrze.net",
"category": "network",
"max_points": 30,
"earned_points": 30,
"lost_points": 0
},
{
"level": "warning",
"title": "IPv4 diversity",
"detail": "Two or more IPv4 addresses receive full points.",
"category": "network",
"max_points": 35,
"earned_points": 20,
"lost_points": 15
},
{
"level": "ok",
"title": "IPv6 connectivity",
"detail": "AAAA availability.",
"category": "network",
"max_points": 35,
"earned_points": 35,
"lost_points": 0
},
{
"level": "ok",
"title": "DNS resolution",
"detail": "At least one address family must resolve.",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTP response",
"detail": "HTTP/1.1 200 OK",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTPS final URL",
"detail": "Final URL uses HTTPS.",
"category": "availability",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
}
]
},
"dns": {
"records": {
"A": [
"131.188.16.212"
],
"AAAA": [
"2001:638:a000:1080::212"
],
"CNAME": [],
"MX": [
"10 mx-rz-2.rrze.uni-erlangen.de.",
"10 mx-rz-1.rrze.uni-erlangen.de.",
"10 mx-rz-3.rrze.uni-erlangen.de."
],
"TXT": [
"\"v=spf1 mx ip4:131.188.11.0/26 ip6:2001:638:a000:1025::/64 ?all\"",
"\"MS=ms41685985\"",
"\"google-site-verification=77D5wiEfYuM4r0uUoQ-iR57ZxiSfB3A5pTAN7haHqkY\""
],
"NS": [
"tuminfo1.informatik.tu-muenchen.de.",
"ns1.rrze.uni-erlangen.de.",
"ns2.rrze.uni-erlangen.de.",
"dns-3.dfn.de."
],
"SOA": [
"ns1.rrze.uni-erlangen.de. hostmaster.rrze.uni-erlangen.de. 1786196189 10800 1800 1209600 3600"
],
"CAA": [],
"DS": [
"23492 8 2 08E4D7E3638ED3DE71C303255576D6B59B1A0CB2D15B518AFAF4CE90 99BEEBD9"
],
"DNSKEY": [
"256 3 8 AwEAAaVPue9Ukp0fd6b3nE6lrAFHMscE+LSZ2eUesFCI3W7II5V0G+oA tjCioLx/4C9VyXEh5AJKfVOkEy+m2vjyDEGU+Hmr9ZHFBcTrGti71xhx 4sjaINOcdnIPpdB91AvxC82bsqZexCSQeziKZB6hjttmuxyn6cUZBuQz cV58Kopb",
"257 3 8 AwEAAdHvAedSHev13g2VYYcHccZ6xuPHr9OJeDLhLRsz7UkVYj3vRw+1 fnxNf4Uv0Sl2KnCXukJ0TbvtZ0L8t34YWIuJMbpqO4bDt4kodvgPqZ7h kwUdABaYRGFaB7Zkdi56zmH673ModPjbyR+AUcmiWqqyRiumDimcaY2A OTz1j41QAgAZ3E6rVG4u+xob8FhYBwZMZNyYaYf0m60Yd3GwFfVM1SJ4 DyyEMjZe5XAUGlasnCKU8SS6AWn5q9I1LTjlyOSoa1RH/rNiLWEqaeKs rp3lNZFqJkKkJFH5ZGPdVYyIOJc8cbrnUIiMEpo4PqPWWma6pA7fs87G 0yqQe4iRU7c="
],
"RRSIG": [
"SOA 8 2 86400 20260823182032 20260809172032 12724 uni-erlangen.de. bGQ4kYOjadGg2Ls2qR4NBEUsyR7puL6m0E2TyoyVt+iNoV0hb7Y/jAO7 NuLlV27dSKTgQF0pq1W+oqRigMQwVmqn7acpEeSjJHTM1rMYUdyNwOcf jTBDRcHgCbQKG82dEVAYwp1da+A9VQ2z56Z3+wN+KnAgfWrJGVsCYZ4d PPA=",
"MX 8 2 3600 20260820234057 20260806224533 12724 uni-erlangen.de. jTwYrcXY3xHYZPnZOqKJef9VYNt5BRzu+niTORxWJS7aK78qolydDUmK njTIz+b9MgXvnmEjmPpSMJ8npO/CcJC5y+ezFhNd34nhA4mv/tMkzZVH P57XW/IX0uSyrgooftSCnr/jznbG1CiWiCIo3cY/wxVMpiehbnIYvaeC Qs4=",
"DS 8 2 86400 20260817120903 20260803103903 32911 de. cfvEuKtjQbEVF0TaSHdtUyH/np/oC6xwKrdsDNd9s/yXlIAHCqh/90ja zuQxTtAX9fobrFSESh5nv+Fzkcg86TU0HtA/IAdMVNAa6xaamfL7T6fH NyLNBs+d8jJ+Qyr0LThEu/y0N0fjhqMkfhv+uD2CDC+mB82ej2gOaXt1 yp0=",
"NS 8 2 86400 20260819205434 20260805204417 12724 uni-erlangen.de. ZqbTOyGlkf+JNpPIT/aYIvOXCW1pbN5C3gKFEhkU8SvEsf8ep1Xqiuj5 eGMn1nEBJHGQAPYSJMvveZDYr5sGvNvupyiUc1T3jMEoLimVV63n1H33 sPfz2RB9ndWO3667BcO/7FvbVHwAhns93h1mCjm9LqzT7JnENVFYTKjI 5Ik="
],
"NSEC": [],
"NSEC3": [],
"SRV": [],
"NAPTR": [
"100 10 \"s\" \"x-eduroam:radius.tls\" \"\" _radsec._tcp.eduroam.de."
],
"TLSA": [],
"SSHFP": []
},
"ipv4": [
"131.188.16.212"
],
"ipv6": [
"2001:638:a000:1080::212"
]
},
"mail": {
"spf": "v=spf1 mx ip4:131.188.11.0/26 ip6:2001:638:a000:1025::/64 ?all",
"dmarc": "v=DMARC1; p=none",
"dkim_selector": "x",
"dkim_host": "",
"dkim": "",
"spf_analysis": {
"valid": true,
"lookups": 1,
"final": "?all",
"message": "Within the estimated limit"
},
"dmarc_analysis": {
"valid": true,
"policy": "none"
},
"bimi": "",
"mta_sts": "",
"tls_rpt": ""
},
"advanced": {
"ptr": "cmslb-fau-zentrale.rz.rrze.net",
"propagation": {
"consistent": true,
"results": [
{
"provider": "Google",
"server": "8.8.8.8",
"result": [
"131.188.16.212"
],
"time_ms": 152.95
},
{
"provider": "Cloudflare",
"server": "1.1.1.1",
"result": [
"131.188.16.212"
],
"time_ms": 153.98
},
{
"provider": "Quad9",
"server": "9.9.9.9",
"result": [
"131.188.16.212"
],
"time_ms": 279.25
},
{
"provider": "OpenDNS",
"server": "208.67.222.222",
"result": [
"131.188.16.212"
],
"time_ms": 440.2
},
{
"provider": "AdGuard",
"server": "94.140.14.14",
"result": [
"131.188.16.212"
],
"time_ms": 257.36
}
]
}
},
"ssl": {
"available": true,
"issuer": "Hellenic Academic and Research Institutions CA",
"subject": "www.fau.de",
"valid_from": "2025-11-19T07:13:51-06:00",
"valid_to": "2026-11-19T07:13:51-06:00",
"days_remaining": 101,
"san": [
"www.fau.de",
"uni-erlangen.de",
"www.uni-erlangen.de",
"fau.de"
],
"protocol": "TLSv1.3",
"cipher": "TLS_AES_256_GCM_SHA384"
},
"http": {
"url": "https://www.fau.de/",
"status": "HTTP/1.1 200 OK",
"http_version": "2",
"headers": {
"date": "Sun, 09 Aug 2026 18:23:08 GMT",
"server": "Apache",
"location": "https://www.fau.de/",
"content-type": "text/html; charset=UTF-8",
"content-security-policy": "default-src 'self' blob: *.youtube.com *.youtube-nocookie.com *.uni-erlangen.de *.uni-erlangen.org *.fau.de *.rrze.de *.fau.eu *.fau.tv cdn2.fau.tv cdn2.video.uni-erlangen.de cdn.video.uni-erlangen.de *.siteimprove.com identity.siteimprove.com www.youtube.com vimeo.com publish.twitter.com www.slideshare.net open.spotify.com karte.fau.de karte.uni-erlangen.de *.fau.tv *.video.fau.de *.video.uni-erlangen.de www.youtube-nocookie.com youtu.be *.slideshare.net www.br.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' siteimproveanalytics.com *.siteimprove.net *.siteimprove.com *.youtube.com *.ytimg.com cdn2.fau.tv cdn2.video.uni-erlangen.de *.uni-erlangen.de *.uni-erlangen.org *.fau.de *.rrze.de *.fau.eu cdn.fau.tv jobspreader.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: *.gravatar.com *.uni-erlangen.de *.uni-erlangen.org *.fau.de *.fau.eu *.fau.tv *.siteimproveanalytics.io img.youtube.com cdn2.fau.tv; font-src 'self' data: public.slidesharecdn.com; connect-src 'self' *.siteimprove.com *.uni-erlangen.de *.uni-erlangen.org *.fau.de *.rrze.de *.fau.eu *.fau.tv cdn2.fau.tv jobspreader.com identity.siteimprove.com;",
"link": "; rel=\"https://api.w.org/\", ; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", ; rel=shortlink",
"set-cookie": "SimpleSAMLSessionID=e3d561f7971eb4458cdc8e767aa73f79; path=/; secure; HttpOnly; SameSite=None",
"strict-transport-security": "max-age=15552000"
},
"security_checks": {
"strict-transport-security": true,
"content-security-policy": true,
"x-content-type-options": false,
"x-frame-options": false,
"referrer-policy": false,
"permissions-policy": false,
"cross-origin-opener-policy": false,
"cross-origin-embedder-policy": false,
"cross-origin-resource-policy": false
},
"server": "Apache",
"powered_by": ""
},
"webpage": {
"url": "https://www.fau.de/",
"title": "Wissen bewegen | Friedrich-Alexander-Universität",
"description": "Mit über 275 Studiengängen, exzellenter Forschung und internationalen Kooperationen prägt die FAU Erlangen-Nürnberg Wissenschaft und Gesellschaft.",
"success": true,
"error": "",
"status": 206
},
"network": {
"131.188.16.212": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
}
},
"smtp": {
"host": "mx-rz-2.rrze.uni-erlangen.de",
"ports": [
{
"port": 25,
"open": false,
"time_ms": 1.3,
"banner": "",
"error": "Network is unreachable"
},
{
"port": 465,
"open": false,
"time_ms": 4018,
"banner": "",
"error": "Connection timed out"
},
{
"port": 587,
"open": false,
"time_ms": 4021.7,
"banner": "",
"error": "Connection timed out"
}
]
},
"visitor": {
"ip": "216.73.217.62",
"reverse": "",
"country": "",
"country_code": "",
"region": "",
"city": "",
"latitude": null,
"longitude": null,
"isp": "",
"organization": "",
"asn": "",
"timezone": "",
"browser": "Other",
"os": "Other",
"language": "",
"user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
"is_bot": true,
"cloudflare": false
},
"analysis_time_ms": 77.73
}