Domain Reputation & Security Check (DNS, HTTPS, SPF/DMARC)

{
  "type": "object",
  "required": [
    "domain"
  ],
  "properties": {
    "domain": {
      "type": "string"
    }
  },
  "additionalProperties": false
}

{
  "type": "object",
  "required": [
    "domain",
    "reputation_score",
    "grade",
    "checks",
    "issues",
    "issue_count"
  ],
  "properties": {
    "grade": {
      "type": "string",
      "description": "Letter grade derived from reputation_score. Only 'A' (score 92) and 'D' (score 40) were observed on real calls -- the full letter range is documented by the vendor but not independently confirmed here."
    },
    "checks": {
      "type": "object",
      "required": [
        "resolves",
        "has_mx",
        "mx_count",
        "has_spf",
        "has_dmarc",
        "https_works"
      ],
      "properties": {
        "has_mx": {
          "type": "boolean",
          "description": "Whether the domain has a mail exchanger record."
        },
        "has_csp": {
          "type": "boolean",
          "description": "Whether a Content-Security-Policy header is present. Only present when `https_works` is true."
        },
        "has_spf": {
          "type": "boolean",
          "description": "Whether the domain publishes an SPF record."
        },
        "has_xfo": {
          "type": "boolean",
          "description": "Whether an X-Frame-Options header is present. Only present when `https_works` is true."
        },
        "has_hsts": {
          "type": "boolean",
          "description": "Whether the HSTS security header is present. Only present when `https_works` is true."
        },
        "has_xcto": {
          "type": "boolean",
          "description": "Whether an X-Content-Type-Options header is present. Only present when `https_works` is true."
        },
        "mx_count": {
          "type": "number",
          "description": "Number of MX records found. Observed 0 or 1."
        },
        "resolves": {
          "type": "boolean",
          "description": "Whether the domain resolves to an IP address at all."
        },
        "has_dmarc": {
          "type": "boolean",
          "description": "Whether the domain publishes a DMARC record."
        },
        "https_works": {
          "type": "boolean",
          "description": "Whether an HTTPS connection to the domain succeeded."
        },
        "https_status": {
          "type": "number",
          "description": "HTTP status code from the HTTPS connection. Only present when `https_works` is true -- absent entirely on the fixture where the HTTPS connection failed."
        },
        "ip_addresses": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "The domain's own resolved IP addresses. Only present when `resolves` is true -- absent entirely (not null, not empty array) on the non-resolving fixture observed."
        }
      },
      "description": "The individual signals that feed reputation_score.",
      "additionalProperties": true
    },
    "domain": {
      "type": "string",
      "description": "The domain that was checked, echoed back."
    },
    "issues": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Free-text list of the specific problems found, e.g. 'No HSTS header' or 'Potentially suspicious TLD: .tk'. Length varies by domain; not a fixed enumeration."
    },
    "issue_count": {
      "type": "number",
      "description": "Number of entries in `issues`, matches its length."
    },
    "reputation_score": {
      "type": "number",
      "description": "0-100 per the endpoint's own documented range. Observed 92 (clean domain) and 40 (flagged domain)."
    }
  },
  "description": "The domain reputation record, as returned at routing.responseResultPath ($.output).",
  "additionalProperties": true
}