{
    "ok": true,
    "domain": "yale.edu",
    "generated_at": "2026-08-08T17:55:31-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 83,
        "label": "Good",
        "categories": {
            "dns": 80,
            "mail": 90,
            "security": 73,
            "network": 70,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "3 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "4 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "5 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 0,
                "lost_points": 15,
                "detail": "Both DS and DNSKEY are required."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "1 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "15 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 6,
                "lost_points": 4,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 12,
                "lost_points": 23,
                "detail": "3 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30,
                "detail": "PTR not detected."
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/2 200 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "3 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "IPv6 (AAAA)",
                "detail": "4 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "5 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "DNSSEC chain",
                "detail": "Both DS and DNSKEY are required.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 0,
                "lost_points": 15
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "1 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "15 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 6,
                "lost_points": 4
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "3 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 12,
                "lost_points": 23
            },
            {
                "level": "error",
                "title": "PTR reverse DNS",
                "detail": "PTR not detected.",
                "category": "network",
                "max_points": 30,
                "earned_points": 0,
                "lost_points": 30
            },
            {
                "level": "ok",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/2 200 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "151.101.2.133",
                "151.101.130.133",
                "151.101.66.133"
            ],
            "AAAA": [
                "2a04:4e42::645",
                "2a04:4e42:600::645",
                "2a04:4e42:200::645",
                "2a04:4e42:400::645"
            ],
            "CNAME": [],
            "MX": [
                "10 yale-edu.mail.protection.outlook.com."
            ],
            "TXT": [
                "\"mdt-site-verification=e6096cdb-e3ce-4195-9cc1-5e53bb029cea\"",
                "\"docusign=e8f08e07-8b40-4ae4-a8cf-7ce972d4b382\"",
                "\"MS=ms71696546\"",
                "\"adobe-idp-site-verification=8bd714ff-27d9-412f-a336-011607c5921d\"",
                "\"securiti-verification-id=1PLTDJjwuV47eAeftOls50oWNhf3B/eQIB37SneSuOg=\"",
                "\"KVATau69gzhqUOgCyXmfd9cSFFIarSmLDzRIuuICLnF8FgBUcmhtEuWIfd8/R4wkQJh9vIfvF0GJ/s3/S2RBHQ==\"",
                "\"airtable-verification=bd629e6fdd78d25b886c3131d32f2522\"",
                "\"wrike-verification=NjQ3NTM0Mjo3MDZiYTQyYmViN2Q4ZDUzYzA2YjUwZmEzNDFjOTBjOTJjZmY2NTdlMGQyZTU5Yjk2NzAxMmYwOTY5MDVmZGVi\"",
                "\"iContact1458769\"",
                "\"anthropic-domain-verification-vhzdfe=ofbUZH3TY0KRR5FbkqjAMr3N8\"",
                "\"sending_domain1108142=0d97d094e155ad3aa47f7970aed92373b498a7340b0f8c714c4c4f23baa7376f\"",
                "\"google-site-verification=bCh0qosscWOo9bk7i8mSUwbO7xo1L0zhM466fQLYVys\"",
                "\"e2ma-verification=n69ab\"",
                "\"brevo-code:d66805a3df437fba6bf7d701b26c2ea6\"",
                "\"e2ma-verification=tmfcb\"",
                "\"google-site-verification=fUwYVutFF-kUCTqnDZg7s4lWZSUTOO2k2zHogw_1qYw\"",
                "\"eWFsZQ==\"",
                "\"d365mktkey=Nf1xniLZCW9LJtMAKbxJ4QluH18K7RKSYYw5ndrkxlox\"",
                "\"Dynatrace-site-verification=72c19553-ec2d-4e4f-950c-466938a345c6__gfjfnfbkfm1n41g7rf0n05tqbt\"",
                "\"atlassian-domain-verification=DNorkJRvlGwYJqdqujeAPnnxXpxnzTnJ20Gyfs5rn8imo6NaMiFye9VpWRxgLqmI\"",
                "\"00DHo0000038MpA=1TBNx00000005Fp\"",
                "\"pardot406332=4ac3a1788076ae6f053d313b811664e8c5d2c54dbb5be4d14d6cfffa8cb0b987\"",
                "\"e2ma-verification=vqzeb\"",
                "\"F6G3WBWAQ519BOLKY7UQHUB1B25UH7CTZOUT3Z9GC\"",
                "\"e2ma-verification=pyngb\"",
                "\"airtable-verification=5faa4d445f2f11d5a2e0d2dff8c4d287\"",
                "\"e2ma-verification=e39ab\"",
                "\"_w450pwsqqfrqqw4n7yodv1euryd9akn\"",
                "\"jamf-site-verification=nh8ZcTKHzvgKfIp0TgFLfg\"",
                "\"google-site-verification=wAcIxfMZtLARxIU3MA82C9ywf-MODgjwuP2JdcSvs3E\"",
                "\"d365mktkey=qXRmZD4AqCPHhxJWI7EnhD5InEkYOsYQ6eidVZHnCyAx\"",
                "\"cisco-ci-domain-verification=43cd3c1de76d9fe0ae0f1db0accb59d4c14ba22243d55d57046fc3fe20b202e0\"",
                "\"airtable-verification=db05bb0a9dc110aced3b5f08e4757b5d\"",
                "\"mindmanager-verification=28df50a8f81c11d34096b520343366ad0de6335be17e48baa8ee5d2fa15c3d39\"",
                "\"anthropic-domain-verification-qq4jmy=xgfwfuTRR16ZOtelI7IbwWRW4\"",
                "\"atlassian-domain-verification=dMzGvQ6scQb/L03OUQRXV586QJ9lo0steL1LuP46eDG2IF4J7EAD6oo7R5ml35kP\"",
                "\"e2ma-verification=ea8fb\"",
                "\"brevo-code:068fa97f1793f7c7bc3b7c779b77f568\"",
                "\"brevo-code:09357c2630559d902817770f34dbf0b1\"",
                "\"atlassian-domain-verification=d6trxstBXPKZ-Fn96brt+2GuIbtk29HYhBAdLyXwH1GGOd5OqEaoeX1j7Iako4Y8\"",
                "\"airtable-verification=dfa71ce641ca4600db5fec1a57c53ef2\"",
                "\"canva-site-verification=OnZfRkq6vky-DOdzFtAQhg\"",
                "\"e2ma-verification=cnz\"",
                "\"google-site-verification=wLNdYe7PcFN1GTfpDeWAT-aPFTWpa_fMn7ZWDw07cuc\"",
                "\"docusign=a560f5e1-1b15-42e8-9630-f9f375c0d326\"",
                "\"amazonses:9Ya8iDYeN700mkvk/yE/JXHlH/zQjYAA6+XyWlnms+E=\"",
                "\"airtable-verification=2115523430cd3176e428cebd0c4f6def\"",
                "\"dropbox-domain-verification=y270qicvbi7s\"",
                "\"airtable-verification=f429cd2a132a767ba9e2d08c506a8f2c\"",
                "\"ms-domain-verification=7d4e961a-dc9b-4b56-b436-d3082895899c\"",
                "\"mailerlite-domain-verification=cdb1198ee33a716cf5d8be0e1234faede0c55a26\"",
                "\"facebook-domain-verification=4b2v2cdl4pnhet6qnrtzuof73xy5ic\"",
                "\"v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all\""
            ],
            "NS": [
                "ns1.bluecatdns.org.",
                "ns1.bluecatdns.com.",
                "PKS1302-102.net.yale.edu.",
                "ns1.bluecatdns.net.",
                "PKS1302-103.net.yale.edu."
            ],
            "SOA": [
                "pks1302-102.net.yale.edu. hostmaster.net.yale.edu. 787602306 1200 180 1209600 3600"
            ],
            "CAA": [],
            "DS": [],
            "DNSKEY": [],
            "RRSIG": [],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "151.101.2.133",
            "151.101.130.133",
            "151.101.66.133"
        ],
        "ipv6": [
            "2a04:4e42::645",
            "2a04:4e42:600::645",
            "2a04:4e42:200::645",
            "2a04:4e42:400::645"
        ]
    },
    "mail": {
        "spf": "v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all",
        "dmarc": "v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@vali.email,mailto:dmarc.reports@yale.edu; ruf=mailto:dmarc.reports@yale.edu; fo=1",
        "dkim_selector": "selector2",
        "dkim_host": "selector2._domainkey.yale.edu",
        "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6+vRixoFR23+iDmjlN9wzYz6dPPMuO0Z/ced1OvG5+9VVs7iNX5qRGyfw9ppmzlRW0vI+YESmbBSta+13KjXtQK7EXOlv6bOGXY9XhY3IyWBrrrHuCMztT9sUymuXd2Elp83Z1ZjjqgdZKlmpJfxuW8n7J8HbBoBJlAlTLyRfsQIDAQAB;",
        "spf_analysis": {
            "valid": true,
            "lookups": 1,
            "final": "~all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "quarantine"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "151.101.130.133",
                        "151.101.2.133",
                        "151.101.66.133"
                    ],
                    "time_ms": 104.2
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "151.101.130.133",
                        "151.101.2.133",
                        "151.101.66.133"
                    ],
                    "time_ms": 75.47
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "151.101.130.133",
                        "151.101.2.133",
                        "151.101.66.133"
                    ],
                    "time_ms": 84.01
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "151.101.130.133",
                        "151.101.2.133",
                        "151.101.66.133"
                    ],
                    "time_ms": 52.17
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "151.101.130.133",
                        "151.101.2.133",
                        "151.101.66.133"
                    ],
                    "time_ms": 52.56
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "Certainly",
        "subject": "yale.edu",
        "valid_from": "2026-07-24T23:52:17-05:00",
        "valid_to": "2026-08-23T23:52:16-05:00",
        "days_remaining": 15,
        "san": [
            "yale.edu"
        ],
        "protocol": "TLSv1.2",
        "cipher": "ECDHE-RSA-AES128-GCM-SHA256"
    },
    "http": {
        "url": "https://www.yale.edu/",
        "status": "HTTP/2 200 ",
        "http_version": "3",
        "headers": {
            "server": "nginx",
            "retry-after": "0",
            "location": "https://www.yale.edu/",
            "accept-ranges": "bytes",
            "date": "Sat, 08 Aug 2026 22:55:22 GMT",
            "via": "1.1 varnish, 1.1 varnish, 1.1 varnish",
            "strict-transport-security": "max-age=31622400",
            "x-served-by": "cache-chi-kigq8000138-CHI, cache-stl760073-STL, cache-stl760044-STL",
            "x-cache": "HIT, MISS, MISS",
            "x-cache-hits": "133, 0, 0",
            "x-timer": "S1786229723.837937,VS0,VE17",
            "content-length": "94613",
            "cache-control": "public, max-age=21600",
            "content-language": "en",
            "content-type": "text/html; charset=utf-8",
            "etag": "W/\"1786213989-0\"",
            "expires": "Sun, 19 Nov 1978 05:00:00 GMT",
            "last-modified": "Sat, 08 Aug 2026 18:33:09 GMT",
            "link": "<https://www.yale.edu/>; rel=\"canonical\",<https://www.yale.edu/>; rel=\"shortlink\"",
            "x-content-type-options": "nosniff",
            "x-drupal-cache": "HIT",
            "x-frame-options": "SAMEORIGIN",
            "x-generator": "Drupal 7 (https://www.drupal.org)",
            "x-pantheon-styx-hostname": "styx-us-a-7ffbcf568d-sdmwr",
            "x-styx-req-id": "4d46c0cd-935f-11f1-9186-fef426425528",
            "age": "12427",
            "vary": "Accept-Encoding, Cookie, Cookie, Cookie"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": false,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "nginx",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.yale.edu/",
        "title": "Yale University",
        "description": "Since its founding in 1701, Yale University has been dedicated to expanding and sharing knowledge, inspiring innovation, and preserving cultural and scientific information for future generations.",
        "success": true,
        "error": "",
        "status": 200
    },
    "network": {
        "151.101.2.133": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        },
        "151.101.130.133": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        },
        "151.101.66.133": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "yale-edu.mail.protection.outlook.com",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 24.3,
                "banner": "",
                "error": "Network is unreachable"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4023.9,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4014,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 118.96
}