{
    "ok": true,
    "domain": "wordfence.com",
    "generated_at": "2026-08-08T21:11:20-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 90,
        "label": "Excellent",
        "categories": {
            "dns": 90,
            "mail": 95,
            "security": 84,
            "network": 65,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "3 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "4 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "5 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "54 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 19,
                "lost_points": 16,
                "detail": "5 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: ec2-35-165-87-65.us-west-2.compute.amazonaws.com"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/2 202 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "3 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "4 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "5 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "54 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "5 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 19,
                "lost_points": 16
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: ec2-35-165-87-65.us-west-2.compute.amazonaws.com",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/2 202 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "35.165.87.65",
                "52.12.87.46",
                "16.145.142.142"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "5 alt2.aspmx.l.google.com.",
                "1 aspmx.l.google.com.",
                "10 aspmx3.googlemail.com.",
                "5 alt1.aspmx.l.google.com.",
                "10 aspmx2.googlemail.com."
            ],
            "TXT": [
                "\"openai-domain-verification=dv-losLww6TR4ssQxGeR69yu3PY\" \"apple-domain-verification=CYUIfHb1VKWif3Cq\" \"sophos-domain-verification=d10bfcb9aa7978fc076ca555f5b4c48a4b77b10c91889bac81b98c59b55491fd\"",
                "\"google-site-verification=STOCFbBC4-6a54qFS04GNMOUT0C2oXV9m8yHWiM-vhk\"",
                "\"1password-site-verification=4VXZD7BYONEXNCLVYNEOHOYGL4\"",
                "\"google-site-verification=vcrYQH268sZME8wcPKscH8TQT5IH4v9-3OJTSwkVYA8\"",
                "\"v=spf1 include:_spf.google.com include:spf.braintreegateway.com include:4354010.spf04.hubspotemail.net  ~all\"",
                "\"google-site-verification=DKd7t6RvL-YOz7tbpqN8wT9MToeBDc_J9DIVygAwZE0\"",
                "\"2718763E93\""
            ],
            "NS": [
                "ns-1904.awsdns-46.co.uk.",
                "ns-729.awsdns-27.net.",
                "ns-39.awsdns-04.com.",
                "ns-1181.awsdns-19.org."
            ],
            "SOA": [
                "ns-39.awsdns-04.com. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400"
            ],
            "CAA": [
                "0 issuewild \"awstrust.com\"",
                "0 issue \"letsencrypt.org\"",
                "0 issue \"amazon.com\"",
                "0 issuewild \"digicert.com\"",
                "0 issuewild \"letsencrypt.org\"",
                "0 issuewild \"amazon.com\"",
                "0 issue \"awstrust.com\"",
                "0 issue \"amazonaws.com\"",
                "0 issue \"amazontrust.com\"",
                "0 issuewild \"amazonaws.com\"",
                "0 issuewild \"amazontrust.com\"",
                "0 iodef \"mailto:adminresources@defiant.com\"",
                "0 issue \"digicert.com\""
            ],
            "DS": [
                "38798 13 2 BBF3EC75353F242B91F32F6C29B09D534A4F50D5BBF30C0A3A43E145 6874D96A"
            ],
            "DNSKEY": [
                "256 3 13 bGy2i2DallOLh4UZSwVNSek/zbeyWwpwIx2IlWOrJxcyeEiq4VD8UXAq lYkjHKYL7/oNQDaotlDi3NOkiX+vHg==",
                "257 3 13 L4copsxR5kU/+TJDC78IlGjEaxrybC90lhjBRCJwebYbioiJAeBqgkC4 1ijce37q5+gLAnm1RFKFHBLYIDotCQ==",
                "256 3 13 nMh8oRrzY8pLvp4BuMhSCglzKGiv7s7nxk+t8vKYAayOJnfYAjMbfX6M mMJHuUFtfb+UrRmmDDUFaCz2yj57qQ=="
            ],
            "RRSIG": [
                "NS 13 2 172800 20260811031110 20260809011110 29264 wordfence.com. HHfGFURUk43qPCDad7zmWeAaUHCvRkORhsrlXMKQ7hHA1sa8mK9HCZqn L5cmciwXIS7ma9uaBDF93GBkQEbJjg==",
                "TXT 13 2 3600 20260809041110 20260809011110 29264 wordfence.com. wHlo9OrdCs5/qryp3lPGNdrIxeBbvPUQCiMylhQlv0cYDoMSA4qj3yMy YL1yAHCoS+n0brmqRWF9/wQu/699zA==",
                "A 13 2 60 20260809031210 20260809011110 29264 wordfence.com. ngPo0PF6hpZeVRvpNOgFgdhsZFaQEz8KQlSZ2CdhmQys4Uc7GCiQWre8 mOa3DYe7SEIfEHyLqTJ5vHuZO1Q+FQ==",
                "DS 13 2 86400 20260813021134 20260806010134 41446 com. gtToT4FJ6SOQnhk0OSh0U1wAjpidq9DltJXTvQhzSa8QdjK4JdOm8R1j VZuGHQSjnww7uIxfNF5htpoteAzEqQ==",
                "CAA 13 2 300 20260809031610 20260809011110 29264 wordfence.com. Fqa3/tZjc2cILKR54boI7YfAGV5ktLi6+7phsqiNgQuhOabSvPNTtaLI LugS9iTAWgfgAgj2iL6TASY4KQVxlA=="
            ],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "35.165.87.65",
            "52.12.87.46",
            "16.145.142.142"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 include:_spf.google.com include:spf.braintreegateway.com include:4354010.spf04.hubspotemail.net  ~all",
        "dmarc": "v=DMARC1; p=quarantine; rua=mailto:dmarc@t47xadf8.uriports.com; ruf=mailto:dmarc@t47xadf8.uriports.com; fo=1:d:s",
        "dkim_selector": "google",
        "dkim_host": "google._domainkey.wordfence.com",
        "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCDDqPItcmkvD8eK2oAis5uS4nOous0M4l8UdDVlQ615/XFAG6AqYwnyr8cU80zWjrXgVq9N4c2vTPFs9kefrf2iVLtCgvpnUHkoHDuhV07VoJ86dCAyolAJB4c/cLwKiyd6+k3Os6SpWD/LbC9gf7ucbeDdnon+TcokU35U/J3jwIDAQAB",
        "spf_analysis": {
            "valid": true,
            "lookups": 3,
            "final": "~all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "quarantine"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": "v=TLSRPTv1; rua=mailto:tlsrpt@t47xadf8.uriports.com"
    },
    "advanced": {
        "ptr": "ec2-35-165-87-65.us-west-2.compute.amazonaws.com",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "16.145.142.142",
                        "35.165.87.65",
                        "52.12.87.46"
                    ],
                    "time_ms": 73.85
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "16.145.142.142",
                        "35.165.87.65",
                        "52.12.87.46"
                    ],
                    "time_ms": 32.52
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "16.145.142.142",
                        "35.165.87.65",
                        "52.12.87.46"
                    ],
                    "time_ms": 43.69
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "16.145.142.142",
                        "35.165.87.65",
                        "52.12.87.46"
                    ],
                    "time_ms": 87.66
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "16.145.142.142",
                        "35.165.87.65",
                        "52.12.87.46"
                    ],
                    "time_ms": 70.21
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "Amazon",
        "subject": "www.wordfence.com",
        "valid_from": "2026-03-18T19:00:00-05:00",
        "valid_to": "2026-10-02T18:59:59-05:00",
        "days_remaining": 54,
        "san": [
            "www.wordfence.com",
            "sglink.wordfence.com",
            "user-reports.wordfence.com",
            "central.wordfence.com",
            "api.wordfence.com",
            "wordfence.com"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_128_GCM_SHA256"
    },
    "http": {
        "url": "https://www.wordfence.com:443/",
        "status": "HTTP/2 202 ",
        "http_version": "3",
        "headers": {
            "server": "CloudFront",
            "date": "Sun, 09 Aug 2026 02:11:12 GMT",
            "content-type": "text/html; charset=UTF-8",
            "content-length": "0",
            "location": "https://www.wordfence.com:443/",
            "x-amzn-waf-action": "challenge",
            "cache-control": "no-store, max-age=0",
            "access-control-allow-origin": "*",
            "access-control-max-age": "86400",
            "access-control-allow-methods": "OPTIONS,GET,POST",
            "access-control-expose-headers": "x-amzn-waf-action",
            "x-cache": "Error from cloudfront",
            "via": "1.1 1dfe0335791d59a0ddbe31a8873d1e4c.cloudfront.net (CloudFront)",
            "x-amz-cf-pop": "MCI50-P4",
            "alt-svc": "h3=\":443\"; ma=86400",
            "x-amz-cf-id": "uwQAEafJZGlD2HlvYy7WwO_7DU9sxgV-dHNLZvCJp0TF_hyYL70IuA==",
            "x-xss-protection": "1; mode=block",
            "x-frame-options": "SAMEORIGIN",
            "referrer-policy": "strict-origin-when-cross-origin",
            "content-security-policy": "frame-ancestors 'self'; report-uri https://t47xadf8.uriports.com/reports/report; report-to default",
            "x-content-type-options": "nosniff",
            "strict-transport-security": "max-age=31536000"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": true,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": true,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "CloudFront",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://wordfence.com/",
        "title": "",
        "description": "",
        "success": false,
        "error": "The page returned no content."
    },
    "network": {
        "35.165.87.65": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        },
        "52.12.87.46": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        },
        "16.145.142.142": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "alt2.aspmx.l.google.com",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 0.9,
                "banner": "",
                "error": "Network is unreachable"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4011.5,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4021.1,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 83.86
}