{ "ok": true, "domain": "uwaterloo.ca", "generated_at": "2026-08-08T20:35:16-05:00", "cache": { "hit": true, "ttl": 0 }, "score": { "total": 83, "label": "Good", "categories": { "dns": 80, "mail": 90, "security": 73, "network": 70, "availability": 100 }, "category_weights": { "dns": 25, "mail": 20, "security": 25, "network": 10, "availability": 20 }, "items": [ { "category": "dns", "title": "IPv4 (A)", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "4 IPv4 address(es) detected." }, { "category": "dns", "title": "IPv6 (AAAA)", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "4 IPv6 address(es) detected." }, { "category": "dns", "title": "Name server redundancy", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "3 NS record(s); 2 or more required." }, { "category": "dns", "title": "SOA record", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Authoritative zone record." }, { "category": "dns", "title": "DNSSEC chain", "max_points": 15, "earned_points": 0, "lost_points": 15, "detail": "Both DS and DNSKEY are required." }, { "category": "dns", "title": "CAA policy", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Certificate authority restriction." }, { "category": "dns", "title": "DNS propagation", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Agreement between public resolvers." }, { "category": "mail", "title": "MX records", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "2 MX record(s)." }, { "category": "mail", "title": "SPF", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "SPF policy published." }, { "category": "mail", "title": "DMARC", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "DMARC policy published." }, { "category": "mail", "title": "DKIM", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "A DKIM selector was verified." }, { "category": "mail", "title": "MTA-STS", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Mail transport policy." }, { "category": "mail", "title": "TLS-RPT", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "TLS reporting policy." }, { "category": "security", "title": "Valid TLS certificate", "max_points": 55, "earned_points": 55, "lost_points": 0, "detail": "13 day(s) remaining." }, { "category": "security", "title": "Certificate lifetime", "max_points": 10, "earned_points": 2, "lost_points": 8, "detail": "Full points require at least 30 days remaining." }, { "category": "security", "title": "HTTP security headers", "max_points": 35, "earned_points": 16, "lost_points": 19, "detail": "4 of 9 evaluated headers detected." }, { "category": "network", "title": "PTR reverse DNS", "max_points": 30, "earned_points": 0, "lost_points": 30, "detail": "PTR not detected." }, { "category": "network", "title": "IPv4 diversity", "max_points": 35, "earned_points": 35, "lost_points": 0, "detail": "Two or more IPv4 addresses receive full points." }, { "category": "network", "title": "IPv6 connectivity", "max_points": 35, "earned_points": 35, "lost_points": 0, "detail": "AAAA availability." }, { "category": "availability", "title": "DNS resolution", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "At least one address family must resolve." }, { "category": "availability", "title": "HTTP response", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "HTTP/2 200 " }, { "category": "availability", "title": "HTTPS final URL", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "Final URL uses HTTPS." } ], "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.", "diagnostics": [ { "level": "ok", "title": "IPv4 (A)", "detail": "4 IPv4 address(es) detected.", "category": "dns", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "ok", "title": "IPv6 (AAAA)", "detail": "4 IPv6 address(es) detected.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "Name server redundancy", "detail": "3 NS record(s); 2 or more required.", "category": "dns", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SOA record", "detail": "Authoritative zone record.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "error", "title": "DNSSEC chain", "detail": "Both DS and DNSKEY are required.", "category": "dns", "max_points": 15, "earned_points": 0, "lost_points": 15 }, { "level": "error", "title": "CAA policy", "detail": "Certificate authority restriction.", "category": "dns", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "DNS propagation", "detail": "Agreement between public resolvers.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "MX records", "detail": "2 MX record(s).", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SPF", "detail": "SPF policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DMARC", "detail": "DMARC policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DKIM", "detail": "A DKIM selector was verified.", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "error", "title": "MTA-STS", "detail": "Mail transport policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "TLS-RPT", "detail": "TLS reporting policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "Valid TLS certificate", "detail": "13 day(s) remaining.", "category": "security", "max_points": 55, "earned_points": 55, "lost_points": 0 }, { "level": "warning", "title": "Certificate lifetime", "detail": "Full points require at least 30 days remaining.", "category": "security", "max_points": 10, "earned_points": 2, "lost_points": 8 }, { "level": "warning", "title": "HTTP security headers", "detail": "4 of 9 evaluated headers detected.", "category": "security", "max_points": 35, "earned_points": 16, "lost_points": 19 }, { "level": "error", "title": "PTR reverse DNS", "detail": "PTR not detected.", "category": "network", "max_points": 30, "earned_points": 0, "lost_points": 30 }, { "level": "ok", "title": "IPv4 diversity", "detail": "Two or more IPv4 addresses receive full points.", "category": "network", "max_points": 35, "earned_points": 35, "lost_points": 0 }, { "level": "ok", "title": "IPv6 connectivity", "detail": "AAAA availability.", "category": "network", "max_points": 35, "earned_points": 35, "lost_points": 0 }, { "level": "ok", "title": "DNS resolution", "detail": "At least one address family must resolve.", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTP response", "detail": "HTTP/2 200 ", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTPS final URL", "detail": "Final URL uses HTTPS.", "category": "availability", "max_points": 20, "earned_points": 20, "lost_points": 0 } ] }, "dns": { "records": { "A": [ "151.101.2.132", "151.101.130.132", "151.101.194.132", "151.101.66.132" ], "AAAA": [ "2a04:4e42::645", "2a04:4e42:600::645", "2a04:4e42:400::645", "2a04:4e42:200::645" ], "CNAME": [], "MX": [ "10 mx1.hc503-62.ca.iphmx.com.", "10 mx2.hc503-62.ca.iphmx.com." ], "TXT": [ "\"tCDWAp4EmLpfAmyq5fdhO5GwZAI0t7b2RWEuaProESY=\"", "\"84cc41ef767947fe85ff32fb16bdaf41\"", "\"ZOOM_verify_7z1v7rXUSOOS-ShYcymx0A\"", "\"adobe-idp-site-verification=4dec50d4c90dac093d5e1824a81021691629e2f94fd22b4f2f23328987f7dced\"", "\"k5sc36lcc2rbjv7h3sl2c2gn0e\"", "\"v=spf1 exists:%{i}.spf.hc503-62.ca.iphmx.com ip4:129.97.0.0/16 include:ca05._spf.brightspace.com include:spf.protection.outlook.com ~all\"", "\"google-site-verification=eSSi6Zp_XdwpO8Z-T-lpb3V6tY6X3BvlqJXPeoXs5GQ\"", "\"MS=78E4ABCABB8A53406B8B16D50FAA6015ACEA3A87\"", "\"apple-domain-verification=xc5D2Lp8oXM8J4E2\"", "\"e2ma-verification=nkdcb\"", "\"_globalsign-domain-verification=7jbXLD1euc6APCjqYIh7m_Fa0uokLoMPQ-HaiH3dgj\"", "\"atlassian-domain-verification=KTsA2pVA/ItP1xFPT8GLOUb1jgkXmZjaxEYOrv6Z/IuYAxEyMYxs0LzQDsEjjBZb\"", "\"google-site-verification=tlHpRcZ9EQvp1JMSvMB0NHq4rUgQbaz-hO96RDjguEs\"", "\"b8PB06RrjXJHHTuGGaWkgBpUQl+HYzLLeNzDIlu3Gv/im99YYnCPZQJjzPrB9yLks3ra2mp/C/OM7fnSArwlDg==\"" ], "NS": [ "cn-dns-ec2-new.uwaterloo.ca.", "ext-dns-azure-a.uwaterloo.ca.", "cn-dns-mc-new.uwaterloo.ca." ], "SOA": [ "cn-dns-ec2-new.uwaterloo.ca. hostmaster.uwaterloo.ca. 2004322347 10800 1800 2419200 300" ], "CAA": [], "DS": [], "DNSKEY": [], "RRSIG": [], "NSEC": [], "NSEC3": [], "SRV": [], "NAPTR": [], "TLSA": [], "SSHFP": [] }, "ipv4": [ "151.101.2.132", "151.101.130.132", "151.101.194.132", "151.101.66.132" ], "ipv6": [ "2a04:4e42::645", "2a04:4e42:600::645", "2a04:4e42:400::645", "2a04:4e42:200::645" ] }, "mail": { "spf": "v=spf1 exists:%{i}.spf.hc503-62.ca.iphmx.com ip4:129.97.0.0/16 include:ca05._spf.brightspace.com include:spf.protection.outlook.com ~all", "dmarc": "v=DMARC1; p=none; rua=mailto:postmaster+dmarcrua@uwaterloo.ca,mailto:dmarc_agg@vali.email;", "dkim_selector": "default", "dkim_host": "default._domainkey.uwaterloo.ca", "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD6RlNg+32/EeFs3K1L5C6vWZuUIDa1hbci9bKSQJeT5SilniauUx8sqv3sfFNKII6GGA/gF79Xt4omxnOZyg4xzjyCAr9b/oSlI09nRBvDsd8Y+qE0R+CKwpr1ZwgHsz+v9F0IOU9tc3WnxUsZJP1wrN3CLSoUQ47Kgpge/noVLwIDAQAB", "spf_analysis": { "valid": true, "lookups": 3, "final": "~all", "message": "Within the estimated limit" }, "dmarc_analysis": { "valid": true, "policy": "none" }, "bimi": "", "mta_sts": "", "tls_rpt": "" }, "advanced": { "ptr": "", "propagation": { "consistent": true, "results": [ { "provider": "Google", "server": "8.8.8.8", "result": [ "151.101.130.132", "151.101.194.132", "151.101.2.132", "151.101.66.132" ], "time_ms": 65.5 }, { "provider": "Cloudflare", "server": "1.1.1.1", "result": [ "151.101.130.132", "151.101.194.132", "151.101.2.132", "151.101.66.132" ], "time_ms": 37.79 }, { "provider": "Quad9", "server": "9.9.9.9", "result": [ "151.101.130.132", "151.101.194.132", "151.101.2.132", "151.101.66.132" ], "time_ms": 59.86 }, { "provider": "OpenDNS", "server": "208.67.222.222", "result": [ "151.101.130.132", "151.101.194.132", "151.101.2.132", "151.101.66.132" ], "time_ms": 54.06 }, { "provider": "AdGuard", "server": "94.140.14.14", "result": [ "151.101.130.132", "151.101.194.132", "151.101.2.132", "151.101.66.132" ], "time_ms": 73.28 } ] } }, "ssl": { "available": true, "issuer": "Certainly", "subject": "uwaterloo.ca", "valid_from": "2026-07-23T18:43:04-05:00", "valid_to": "2026-08-22T18:43:03-05:00", "days_remaining": 13, "san": [ "uwaterloo.ca" ], "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256" }, "http": { "url": "https://uwaterloo.ca/", "status": "HTTP/2 200 ", "http_version": "3", "headers": { "cache-control": "max-age=180, public", "content-language": "en", "content-type": "text/html; charset=UTF-8", "etag": "W/\"1786192446\"", "expires": "Sun, 19 Nov 1978 05:00:00 GMT", "last-modified": "Sat, 08 Aug 2026 12:34:06 GMT", "server": "nginx", "strict-transport-security": "max-age=31622400", "x-content-type-options": "nosniff", "x-drupal-cache": "HIT", "x-drupal-dynamic-cache": "MISS", "x-frame-options": "SAMEORIGIN", "x-generator": "Drupal 9 (https://www.drupal.org)", "x-pantheon-styx-hostname": "styx-ca-a-7fb5fb6fd4-4nts6", "x-styx-req-id": "59481275-9392-11f1-ba33-9a7a1373fb79", "x-ua-compatible": "IE=edge", "age": "92", "accept-ranges": "bytes", "via": "1.1 varnish, 1.1 varnish, 1.1 varnish", "date": "Sun, 09 Aug 2026 01:35:11 GMT", "x-served-by": "cache-yyz4548-YYZ, cache-stl760075-STL, cache-stl760066-STL", "x-cache": "HIT, MISS, MISS", "x-cache-hits": "17, 0, 0", "x-timer": "S1786239312.797730,VS0,VE48", "vary": "Accept-Encoding, Cookie, Cookie, Cookie", "content-security-policy": "default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://uwaterloo.ca https://*.uwaterloo.ca https://maxcdn.bootstrapcdn.com https://*.google.com https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://*.googletagmanager.com https://*.googleusercontent.com https://*.googleadservices.com https://*.g.doubleclick.net https://6263835.fls.doubleclick.net https://ad.doubleclick.net https://14868352.fls.doubleclick.net https://cdnjs.cloudflare.com https://twitter.com https://*.twitter.com https://*.twimg.com https://*.facebook.com https://*.facebook.net https://scontent.xx.fbcdn.net https://*.youtube.com https://*.youtube-nocookie.com https://s.ytimg.com https://*.livestream.com https://*.webspellchecker.net https://cdn.mathjax.org https://*.addtoany.com https://*.vimeo.com https://*.vimeocdn.com https://cdn.leafletjs.com https://cdn-geoweb.s3.amazonaws.com https://cdn.maptiks.com https://api.tiles.mapbox.com https://d591zijq8zntj.cloudfront.net https://*.libanswers.com https://*.libchat.com https://secure.skype.com https://cdn-akamai.mookie1.com https://*.tiqcdn.com https://snap.licdn.com https://*.ads.linkedin.com https://secure.adnxs.com https://public.tableau.com https://codepen.io https://cpwebassets.codepen.io https://static.codepen.io https://public.codepenassets.com https://app.powerbi.com https://s.yimg.com https://sp.analytics.yahoo.com https://chat.socialintents.com https://hcaptcha.com https://newassets.hcaptcha.com https://code.jquery.com https://experience.arcgis.com https://api.mapbox.com https://www.instagram.com https://vuejs.org https://cdn.jsdelivr.net https://js-agent.newrelic.com https://bam.nr-data.net https://us-central1-pantheon-psapps.cloudfunctions.net https://cdn.ckeditor.com https://netdna.bootstrapcdn.com https://*.hotjar.com https://*.hotjar.io https://*.kuali.co https://drupal-oauth.mailchimp.com https://srv.stackadapt.com https://*.srv.stackadapt.com https://qvdt3feo.com https://origin.acuityplatform.com https://e.acuityplatform.com https://*.clarity.ms https://c.bing.com https://www.redditstatic.com https://events.reddit.com https://wat-2.test.technolutions.net https://wat.test.technolutions.net https://fw.cdn.technolutions.net https://mx.technolutions.net https://wat-backup.test.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://grad-apply-uwaterloo-ca.cdn.technolutions.net; img-src * data:", "x-var-slug": "/", "content-length": "125230" }, "security_checks": { "strict-transport-security": true, "content-security-policy": true, "x-content-type-options": true, "x-frame-options": true, "referrer-policy": false, "permissions-policy": false, "cross-origin-opener-policy": false, "cross-origin-embedder-policy": false, "cross-origin-resource-policy": false }, "server": "nginx", "powered_by": "" }, "webpage": { "url": "https://uwaterloo.ca/", "title": "Home | University of Waterloo", "description": "University of Waterloo", "success": true, "error": "", "status": 200 }, "network": { "151.101.2.132": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" }, "151.101.130.132": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" }, "151.101.194.132": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" }, "151.101.66.132": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" } }, "smtp": { "host": "mx1.hc503-62.ca.iphmx.com", "ports": [ { "port": 25, "open": false, "time_ms": 1.3, "banner": "", "error": "Connection refused" }, { "port": 465, "open": false, "time_ms": 4029.3, "banner": "", "error": "Connection timed out" }, { "port": 587, "open": false, "time_ms": 84.2, "banner": "220 esa.hc503-62.ca.iphmx.com ESMTP", "error": "No connection" } ] }, "visitor": { "ip": "216.73.217.62", "reverse": "", "country": "", "country_code": "", "region": "", "city": "", "latitude": null, "longitude": null, "isp": "", "organization": "", "asn": "", "timezone": "", "browser": "Other", "os": "Other", "language": "", "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "is_bot": true, "cloudflare": false }, "analysis_time_ms": 163.1 }