{
    "ok": true,
    "domain": "usp.br",
    "generated_at": "2026-08-08T21:29:18-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 84,
        "label": "Good",
        "categories": {
            "dns": 90,
            "mail": 90,
            "security": 84,
            "network": 20,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "1 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "4 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "5 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "38 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 19,
                "lost_points": 16,
                "detail": "5 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30,
                "detail": "PTR not detected."
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/1.1 200 OK"
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "1 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "4 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "5 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "38 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "5 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 19,
                "lost_points": 16
            },
            {
                "level": "error",
                "title": "PTR reverse DNS",
                "detail": "PTR not detected.",
                "category": "network",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30
            },
            {
                "level": "warning",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 20,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/1.1 200 OK",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "200.144.235.134"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "10 ALT4.ASPMX.L.GOOGLE.COM.",
                "1 ASPMX.L.GOOGLE.COM.",
                "10 ALT3.ASPMX.L.GOOGLE.COM.",
                "5 ALT1.ASPMX.L.GOOGLE.COM.",
                "5 ALT2.ASPMX.L.GOOGLE.COM."
            ],
            "TXT": [
                "\"google-site-verification=1zlUdVSw4V3to-BYPd-ShRkHcItALQOMo4rYdpZgIMc\"",
                "\"adobe-idp-site-verification=3d0fa6faea996f27affdf872d7878e8de055cc8e615d1f003206628cfc51d39d\"",
                "\"google-site-verification=DfpL6iunQOozEmRpV6jQw7Xzi50WFqkleKUSWFP4E9E\"",
                "\"google-site-verification=B-a5E-Sy8BehZhS4BFLEwaGphwi9Cg4X399gA3LVAJw\"",
                "\"MS=D2823B9521EF2B257E8207302DCDC556C00D5564\"",
                "\"ZOOM_verify__T-3IyYPSHyIWah1a_5IMA\"",
                "\"_globalsign-domain-verification=oSaIACRn01QZ_STpNrrROxkvBdtG8B8apWgXLse-yI\"",
                "\"cisco-ci-domain-verification=72ade127784397f7e0e3dfb71bade67af550814769bb5512109576ef440f9c8c\"",
                "\"google-site-verification=doG9hHS-x68eyfg8VhLH1AkrYb_dl3k7i1j1weA7NlA\"",
                "\"v=spf1 include:_redesusp.usp.br include:_spf.google.com -all\""
            ],
            "NS": [
                "ns1.ansp.br.",
                "c.dns.usp.br.",
                "a.dns.usp.br.",
                "b.dns.usp.br."
            ],
            "SOA": [
                "a.dns.usp.br. hostmaster.usp.br. 2018083544 14400 3600 1209600 300"
            ],
            "CAA": [
                "0 issuewild \"amazonaws.com\"",
                "0 issue \"symantec.com\"",
                "0 issue \"digicert.com\"",
                "0 issuewild \"globalsign.com\"",
                "0 issuewild \"certum.pl\"",
                "0 iodef \"mailto:stidomain@usp.br\"",
                "0 issue \"amazonaws.com\"",
                "0 issue \"certum.pl\"",
                "0 issue \"comodoca.com\"",
                "0 issuewild \"letsencrypt.org\"",
                "0 issue \"sectigo.com\"",
                "0 issue \"godaddy.com\"",
                "0 issue \"letsencrypt.org\"",
                "0 issuewild \"digicert.com\"",
                "0 issue \"globalsign.com\"",
                "0 issuewild \"comodoca.com\"",
                "0 issue \"pki.goog\"",
                "0 issue \"identrust.com\""
            ],
            "DS": [
                "23907 14 2 7BB9A7DF22C2545E3897511DCEFADFAFCCCF38C82308F4636C97B6E4 28DD8B8D"
            ],
            "DNSKEY": [
                "257 3 14 1ZgUV1qIEnW1+Lj1fbkd+5fnkBj1AyO6ofT4rilAqor3SJY/kFYy8L/X hL0STSinfxBO/kz4FZVUZyxn/WbpJ43+CAtE/tCJXGifGs28XOliHl6d 3Ytp17EXoGLx+cL2",
                "256 3 14 YGqs+/9KQNO9dtVEhOg2aIssOYWgnv+5IiF/8T6Pfkznao03uXV/SDyP lSksATPMjEOeRF6Pd++o6q8TOK4YJ+3pGE5VxxIvAdGMxZlmCbDJkcQt RIndfCOCOaAs0xRO"
            ],
            "RRSIG": [
                "SOA 14 2 1800 20260822232303 20260808222303 55869 usp.br. 6oq+OA2+9IzZmV3X68Z/+GH2Uzz+ritXBrthzjGYQMnZCaH49KgvsbXc mvTrRn2QWkgo8cI1jiSuZ8R6lnMJC6+LWfyIxBCxLEBGkllhf/GxCIDJ bQCeFAODIXRKMGJA",
                "TXT 14 2 1800 20260822200103 20260808191042 55869 usp.br. Pdc3VM51LKCMDvBdfUauhpTwsUd3yLLfwR0Ewf317gds/sB+FhvibVK1 n4X6ifBLPGJp00egIVqDMD0B5WaZBmfeCU2fqb/RvuiD1rRnPcRwJhZy 25SUVdHdOjAfX7Yn",
                "A 14 2 300 20260820092401 20260806090819 55869 usp.br. ehdMig6U4PjYKcZSBauvtYhFcI7RjOStrhuT4Oad5rVF46shK/KFSdOM wOX2AJBXmkyiOkuL8+bJIQYeeHZ5SfVMH3TsAFiZmoYPXJNcG9eK33gy QfB18lSqZjvrSCOT",
                "DS 13 2 3600 20260819125505 20260805115505 52637 br. u4MieujKLd6w2l/KxpN04qdAB5AwByJg5ZvbYHIyQZPnP+pqSHq8vS1r zUtbf0ol0twf+xrpOSZOOvxHnp3ikg==",
                "NS 14 2 1800 20260820084018 20260806075945 55869 usp.br. i85mNJXRFIZgwHob8ScFZn1S8kULnb+plXLKXKgn5Ef4sv+pszdimQnc y/P+5iomiIteDPVMv3Eb0Nq8gY6iGXb8HnYkCJJieRxHfYRs+qJ1/qa2 9QIH3H57pkhdM3tY",
                "MX 14 2 1800 20260820093425 20260806092958 55869 usp.br. 7nJLjqrRYvUShxVsX81KK8M5jNg9ukETMvSniz1NgKqWsXzCzUZyH7Ud h39tiftNi/6wVN2FGi1PHOEuJ88J/sQYDucm+6WYC0OxASEW/0zwQnwc fnvF4Wa8QW+BxYyN"
            ],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "200.144.235.134"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 include:_redesusp.usp.br include:_spf.google.com -all",
        "dmarc": "v=DMARC1; p=quarantine; rua=mailto:dmarc_rua@usp.br; ruf=mailto:dmarc_ruf@usp.br; sp=none; pct=10; ri=86400",
        "dkim_selector": "mail",
        "dkim_host": "mail._domainkey.usp.br",
        "dkim": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCa5Pc0TlzvM+AAIce0cq9dBjNDpxRRU+sDrkaTno97PappwW2UIBPOgO/Y7ps0HHXaQZIReFcTChX1IjCUxrLMkx+p64ky7ERoFYd7A3hPTbts7aTHcZUko3QBXk13WcdquGPcvr39iR7YtusLPXs4gs2/3bj0YxGArtnZNFJJpZ4z8BD7dovuDVJF2jAGOO1BUdigvmkdJcJeQRxkGjVCjzRYG7lyBnR6kIAcFWt3b8OlbV/ONyhCbdqZLubtFHUQcPL6FuLr5N18Jbj3DAWoIORWqWZ5g9adhKJOBzXRUQfWAxa5jocSaySWfIVz8nids3dsGyGXzHfn4W59o0QIDAQAB",
        "spf_analysis": {
            "valid": true,
            "lookups": 2,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "quarantine"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "200.144.235.134"
                    ],
                    "time_ms": 62.82
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "200.144.235.134"
                    ],
                    "time_ms": 189
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "200.144.235.134"
                    ],
                    "time_ms": 177.25
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "200.144.235.134"
                    ],
                    "time_ms": 155.47
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "200.144.235.134"
                    ],
                    "time_ms": 179.38
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "GlobalSign nv-sa",
        "subject": "*.usp.br",
        "valid_from": "2025-08-15T11:46:07-05:00",
        "valid_to": "2026-09-16T11:46:06-05:00",
        "days_remaining": 38,
        "san": [
            "*.usp.br",
            "usp.br"
        ],
        "protocol": "TLSv1.2",
        "cipher": "ECDHE-RSA-AES256-GCM-SHA384"
    },
    "http": {
        "url": "https://www5.usp.br/",
        "status": "HTTP/1.1 200 OK",
        "http_version": "2",
        "headers": {
            "location": "https://www5.usp.br/",
            "connection": "close",
            "cache-control": "max-age=3600, public",
            "pragma": "public",
            "x-xss-protection": "1; mode=block",
            "x-frame-options": "SAMEORIGIN",
            "date": "Sun, 09 Aug 2026 02:29:08 GMT",
            "server": "Apache",
            "vary": "X-Forwarded-Proto,Accept-Encoding",
            "last-modified": "Sun, 09 Aug 2026 01:09:07 GMT",
            "accept-ranges": "bytes",
            "content-length": "187441",
            "expires": "Sun, 09 Aug 2026 02:34:08 GMT",
            "x-content-type-options": "nosniff",
            "content-security-policy": "frame-ancestors 'self';",
            "referrer-policy": "no-referrer-when-downgrade",
            "content-type": "text/html; charset=UTF-8",
            "strict-transport-security": "max-age=31536000; preload"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": true,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": true,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "Apache",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www5.usp.br/",
        "title": "USP – Universidade de São Paulo – Universidade pública, autarquia ligada à Secretaria de Estado de Ensino Superior de São Paulo",
        "description": "",
        "success": true,
        "error": "",
        "status": 206
    },
    "network": {
        "200.144.235.134": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "ALT4.ASPMX.L.GOOGLE.COM",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 0.6,
                "banner": "",
                "error": "Network is unreachable"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4013.4,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4021.2,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 98.31
}