{ "ok": true, "domain": "libertymutual.com", "generated_at": "2026-08-10T08:06:21-05:00", "cache": { "hit": true, "ttl": 0 }, "score": { "total": 79, "label": "Good", "categories": { "dns": 60, "mail": 90, "security": 84, "network": 50, "availability": 100 }, "category_weights": { "dns": 25, "mail": 20, "security": 25, "network": 10, "availability": 20 }, "items": [ { "category": "dns", "title": "IPv4 (A)", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "1 IPv4 address(es) detected." }, { "category": "dns", "title": "IPv6 (AAAA)", "max_points": 10, "earned_points": 0, "lost_points": 10, "detail": "0 IPv6 address(es) detected." }, { "category": "dns", "title": "Name server redundancy", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "6 NS record(s); 2 or more required." }, { "category": "dns", "title": "SOA record", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Authoritative zone record." }, { "category": "dns", "title": "DNSSEC chain", "max_points": 15, "earned_points": 0, "lost_points": 15, "detail": "Both DS and DNSKEY are required." }, { "category": "dns", "title": "CAA policy", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Certificate authority restriction." }, { "category": "dns", "title": "DNS propagation", "max_points": 10, "earned_points": 0, "lost_points": 10, "detail": "Agreement between public resolvers." }, { "category": "mail", "title": "MX records", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "2 MX record(s)." }, { "category": "mail", "title": "SPF", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "SPF policy published." }, { "category": "mail", "title": "DMARC", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "DMARC policy published." }, { "category": "mail", "title": "DKIM", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "A DKIM selector was verified." }, { "category": "mail", "title": "MTA-STS", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Mail transport policy." }, { "category": "mail", "title": "TLS-RPT", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "TLS reporting policy." }, { "category": "security", "title": "Valid TLS certificate", "max_points": 55, "earned_points": 55, "lost_points": 0, "detail": "57 day(s) remaining." }, { "category": "security", "title": "Certificate lifetime", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Full points require at least 30 days remaining." }, { "category": "security", "title": "HTTP security headers", "max_points": 35, "earned_points": 19, "lost_points": 16, "detail": "5 of 9 evaluated headers detected." }, { "category": "network", "title": "PTR reverse DNS", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "PTR: a23-220-214-148.deploy.static.akamaitechnologies.com" }, { "category": "network", "title": "IPv4 diversity", "max_points": 35, "earned_points": 20, "lost_points": 15, "detail": "Two or more IPv4 addresses receive full points." }, { "category": "network", "title": "IPv6 connectivity", "max_points": 35, "earned_points": 0, "lost_points": 35, "detail": "AAAA availability." }, { "category": "availability", "title": "DNS resolution", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "At least one address family must resolve." }, { "category": "availability", "title": "HTTP response", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "HTTP/2 200 " }, { "category": "availability", "title": "HTTPS final URL", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "Final URL uses HTTPS." } ], "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.", "diagnostics": [ { "level": "ok", "title": "IPv4 (A)", "detail": "1 IPv4 address(es) detected.", "category": "dns", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "error", "title": "IPv6 (AAAA)", "detail": "0 IPv6 address(es) detected.", "category": "dns", "max_points": 10, "earned_points": 0, "lost_points": 10 }, { "level": "ok", "title": "Name server redundancy", "detail": "6 NS record(s); 2 or more required.", "category": "dns", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SOA record", "detail": "Authoritative zone record.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "error", "title": "DNSSEC chain", "detail": "Both DS and DNSKEY are required.", "category": "dns", "max_points": 15, "earned_points": 0, "lost_points": 15 }, { "level": "error", "title": "CAA policy", "detail": "Certificate authority restriction.", "category": "dns", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "DNS propagation", "detail": "Agreement between public resolvers.", "category": "dns", "max_points": 10, "earned_points": 0, "lost_points": 10 }, { "level": "ok", "title": "MX records", "detail": "2 MX record(s).", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SPF", "detail": "SPF policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DMARC", "detail": "DMARC policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DKIM", "detail": "A DKIM selector was verified.", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "error", "title": "MTA-STS", "detail": "Mail transport policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "TLS-RPT", "detail": "TLS reporting policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "Valid TLS certificate", "detail": "57 day(s) remaining.", "category": "security", "max_points": 55, "earned_points": 55, "lost_points": 0 }, { "level": "ok", "title": "Certificate lifetime", "detail": "Full points require at least 30 days remaining.", "category": "security", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "warning", "title": "HTTP security headers", "detail": "5 of 9 evaluated headers detected.", "category": "security", "max_points": 35, "earned_points": 19, "lost_points": 16 }, { "level": "ok", "title": "PTR reverse DNS", "detail": "PTR: a23-220-214-148.deploy.static.akamaitechnologies.com", "category": "network", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "warning", "title": "IPv4 diversity", "detail": "Two or more IPv4 addresses receive full points.", "category": "network", "max_points": 35, "earned_points": 20, "lost_points": 15 }, { "level": "error", "title": "IPv6 connectivity", "detail": "AAAA availability.", "category": "network", "max_points": 35, "earned_points": 0, "lost_points": 35 }, { "level": "ok", "title": "DNS resolution", "detail": "At least one address family must resolve.", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTP response", "detail": "HTTP/2 200 ", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTPS final URL", "detail": "Final URL uses HTTPS.", "category": "availability", "max_points": 20, "earned_points": 20, "lost_points": 0 } ] }, "dns": { "records": { "A": [ "23.220.214.148" ], "AAAA": [], "CNAME": [], "MX": [ "10 mxa-0037d204.gslb.pphosted.com.", "10 mxb-0037d204.gslb.pphosted.com." ], "TXT": [ "\"axios-domain-verification-1psy6w=iLsMU26kYh2xufO3nzt8FnH2j\"", "\"uber-domain-verification=8b21eeda-a0f0-4623-af7d-148e94a529ca\"", "\"_org-domain-ownership=a9ed93fb96e59801f0d87d495844939502993e2316624b3576999650b8407366\"", "\"DomainVerification=U2KBN0SPUT8HFGOTQY95QX5PUS68CTPSJ4OSOO22SIYXGATVM82DB6QTNH53R5AQ\"", "\"_amazonses=Y4CZossLLCb8wcpFt4NRGo+3BLfIUvkPoz67rEeDmRE=\"", "\"_pingoneemail=178d7660-cd8a-4d08-be03-1e9e5defd9c9_6d0cdd95-678d-4497-81eb-3d66479dd61c\"", "\"jumio-up-idp-domain-verification=99d032c9-803c-4b53-b4a0-a1bee3b8d15c\"", "\"launchdarkly-domain-verification=ceea6e1e-09b9-4447-a7e0-8cd5c3201b57\"", "\"miro-verification=231187afd11ed1be539ec5d5fa2d874287f9b8c6\"", "\"_amazonses=RiiB8VyQb+UgG56WOn+QvX/Ov9s3/7+SrRyOZvK8U/Q=\"", "\"google-site-verification=COzXLiM4Ou1NoIOKYBXebihFzFHc90Z13I2wll1gY-M\"", "\"anthropic-domain-verification-pg52v5=PFFCehV1uekv27BGIP6nnuFLs\"", "\"status-page-domain-verification=cq39fbkydfmv\"", "\"neat-pulse-domain-verification-9MKl91N=d836804a-7c7e-45d0-99c4-ef6c1d4e21c2\"", "\"vmware-cloud-verification-ae641f69-c2bc-4255-b293-aef5ec455df3\"", "\"docusign=1f9f91d4-5898-4ddf-9af3-b2f46c603de9\"", "\"postman-domain-verification=2391d47d327cc6b3daf42394189ae9d1553813165de691a3695e3b9a0247cdfedb8e4846e4f4a51b4c5f0f663698b37aae53481488ab42e13f4516dc12b50793\"", "\"nearmap-domain-verification=620e463cca92e46e8b552dda0b46140103989389c1e5fb1ff413eb5636ba0aff\"", "\"SFMC-i_ADj4y-U486jjGTZyDDIgi4yrGn3Nr_8Sgv3aBf\"", "\"_6l7fkhrnbr7gp9p818aqg56lmu9nku1\"", "\"miro-verification=c380d5be2eab008ce23ca617a92abd352a01c112\"", "\"jamf-site-verification=abWNajWK01r03F8CcbSnYw\"", "\"flexera-domain-verification-pfecgglcjcblbmna\"", "\"arcules-domain-verification=eFYbCo7SNeXGYLPgi1hMiTzW9AcOrvBUK5rFaUzEGKm\"", "\"openai-domain-verification=dv-9tp0ZoSh7Vjl5FqPT5cYb91a\"", "\"onetrust-domain-verification=70b50396dc894d07990eba9229901c70\"", "\"v=spf1 include:spf.lmig.com -all\"", "\"TsRqJzZBs/PvAhYhvzmEjbbctWSb/EDTeK3M3wFynDTE4jMsidFRQ/nNvPD6uMzXEiv2O386JDBphQg/86xubg==\"", "\"docusign=5ad2ba14-fa9a-4ca3-bba9-04f205d32305\"", "\"00DWC000009rQgj=1TBWC0000000QqX\"", "\"bGliZXJ0eQ==\"", "\"SFMC-WGJsdyePuWKW2FW2ANuaLz9RQHpizEO1zf36FPKt\"", "\"activeprospect-domain-verification=IqgH5nOEenM1a5CiyGw3sw==\"", "\"mongodb-site-verification=qKpd6nOabpBKllaJ0Tnkq1skzQo9iBUp\"", "\"SFMC-Jfonvytw2SLSfn2x2gjYzvJxmSTWHqJe10nA-Pep\"", "\"atlassian-domain-verification=sSmO09gYKmNPXVYVf1IafBMoYpUvFU2MIPnTBBxe0dlWQsLxjT4luyreuGATTIuq\"", "\"wrike-verification=NjU2NzU4Njo2NDNlYjhjZTc5MTIwNDY1ZTMyNzIyMjM3OTU1Zjk1OGEzZTQ3NzY3YjEwYTFlMzI1ZWJjM2ZiMTdjMmNlNmJh\"", "\"DLF6JIb5I3GdEWb+eOUVzcJ8HoB/D7sZ41AXGwgZ/dvxqvlOr9hnql1w5es3cpmA5ErNe+1sCSAwoGtOt6RQVQ==\"", "\"blitzy-domain-verification-vn0qkv=4hcUq1cJKCfDzX0c3GfdPGgcw\"", "\"onetrust-domain-verification=74a5faa0de5d45e388cac833e5143ba0\"", "\"_amazonses=C61SeWAB+w1BwOQd97njixr9Cxr9K+bKJlGhDew2nZg=\"", "\"MS=EFCF4E47F3B6325AD1FF1333F1EDECD0BA54F2BD\"", "\"apple-domain-verification=nrd9LL5uZlsvHas6\"", "\"SFMC-7JdJlec6uh-DNda8aqBHAXzKTkn-cK7d5eJ5eVU8\"", "\"MS=ms84708170\"", "\"flexera-domain-verification-azhollgvynnpwnga\"", "\"00da500001s4uareab\"", "\"00Da500001S4uar=1TBVr0000000MdF\"" ], "NS": [ "a12-66.akam.net.", "a9-65.akam.net.", "a11-65.akam.net.", "a22-67.akam.net.", "a1-32.akam.net.", "a28-64.akam.net." ], "SOA": [ "ns-liberty-01.lmig.com. lmic-dns-tech.libertymutual.com. 2006117307 10800 3600 604800 1800" ], "CAA": [], "DS": [], "DNSKEY": [], "RRSIG": [], "NSEC": [], "NSEC3": [], "SRV": [], "NAPTR": [], "TLSA": [], "SSHFP": [] }, "ipv4": [ "23.220.214.148" ], "ipv6": [] }, "mail": { "spf": "v=spf1 include:spf.lmig.com -all", "dmarc": "v=DMARC1; p=reject; sp=none; fo=1; pct=100; ri=3600; rua=mailto:lm_rua@libertymutual.com; ruf=mailto:lm_ruf@libertymutual.com", "dkim_selector": "s1", "dkim_host": "s1._domainkey.libertymutual.com", "dkim": "k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCHEY1HaTfN4upvHLcrorcvg9svNHWk91QzwWNcGSOTA8le0sxZi/X1rPlRK57Eol/kN8zJ8MOMrU0+wUKPnkW14F+vQVSzMZ2s4W2gPnHQckmbtY3y2i01AQd8OSB/O09zcYpKoztqmZk70laSX/Pop9LxGeHal0E48gEKU50hdE/RoxKN5hgTnYHMYKDrarbMmq9SxYv7XuaF26ciJwqKPRi/z0GWcBTXAKY4XdnGhWLcgaOadslWel3e4vKsqueOEUaebPp+rjHljKhAWOQgTeNnBzz9u2sjIv86jyund+Vjse+uj99/19jIpayobO94WokP8ZA0Sp098O0kwowIDAQAB", "spf_analysis": { "valid": true, "lookups": 1, "final": "-all", "message": "Within the estimated limit" }, "dmarc_analysis": { "valid": true, "policy": "reject" }, "bimi": "", "mta_sts": "", "tls_rpt": "" }, "advanced": { "ptr": "a23-220-214-148.deploy.static.akamaitechnologies.com", "propagation": { "consistent": false, "results": [ { "provider": "Google", "server": "8.8.8.8", "result": [ "23.220.214.148" ], "time_ms": 75.13 }, { "provider": "Cloudflare", "server": "1.1.1.1", "result": [ "23.220.214.148" ], "time_ms": 45.79 }, { "provider": "Quad9", "server": "9.9.9.9", "result": [ "104.94.79.173" ], "time_ms": 43.93 }, { "provider": "OpenDNS", "server": "208.67.222.222", "result": [ "23.220.214.148" ], "time_ms": 33.26 }, { "provider": "AdGuard", "server": "94.140.14.14", "result": [ "23.54.210.118" ], "time_ms": 50.84 } ] } }, "ssl": { "available": true, "issuer": "DigiCert Inc", "subject": "search.libertymutual.com", "valid_from": "2026-07-09T19:00:00-05:00", "valid_to": "2026-10-06T18:59:59-05:00", "days_remaining": 57, "san": [ "search.libertymutual.com", "acs.safeco.com", "ado.safeco.com", "agencyservicingpreferences.safeco.com", "billing.safeco.com", "bindpolicy.libertymutual.com", "claims.libertymutual.com", "claims.safeco.com", "claimsfnolsystem.libertymutual.com", "document-loader.safeco.com", "dpec.safeco.com", "eclaims.safeco.com", "edp-uscmfinservices.libertymutual.com", "formtemplates.safeco.com", "getdoc.libertymutual.com", "getdoc.safeco.com", "instantincentives.safeco.com", "insurance-agent.safeco.com", "notifications.safeco.com", "portal.safeco.com", "pv.safeco.com", "render.safeco.com", "safeco.com", "savedquotes.safeco.com", "settings.safeco.com", "sn-customer.safeco.com", "sn-instantincentives.safeco.com", "tms.safeco.com", "ufmt.safeco.com", "uw.safeco.com", "wfm.safeco.com", "www.righttrack.safeco.com", "www.solaria.io", "www.solarialabs.com", "www.solarialabs.io", "www.getsafeco.com", "getsafeco.com", "mobilefirst2.libertymutual.com", "ppe-news.agent.safeco.com", "ppe-demo-news.agent.safeco.com", "auth.libertymutual.com", "auth.claims.libertymutual.com", "news.agent.safeco.com", "ignite.agent.safeco.com", "prd-ag360-dataapi.safeco.com", "logout.libertymutual.com", "eclaims.libertymutual.com", "cip.libertymutual.com", "switchboard.lmb.libertymutual.com", "libertymutual.com", "mypolicy.safeco.com", "pendant.libertymutual.com", "fileaclaim.safeco.com", "designsystem.libertymutual.com", "www.righttrack.com", "righttrack.com", "now2.agent.safeco.com", "news2.agent.safeco.com", "ignite2.agent.safeco.com", "ppe-now2.agent.safeco.com", "ppe-demo-now2.agent.safeco.com", "ppe-demo-ignite2.agent.safeco.com", "int-now2.agent.safeco.com", "int-news2.agent.safeco.com", "int-demo-news2.agent.safeco.com", "ppe-news2.agent.safeco.com", "ppe-demo-news2.agent.safeco.com", "int-demo-now2.agent.safeco.com", "aspect-client-prod-east.lmig.com", "ezdrop.helmsmantpa.com", "protectmybusiness.libertymutual.com", "hydra-lc-proxy.apac.hydra-crux.libertymutual.com", "files-legacy-claim.safeco.com", "open.dpec.libertymutual.com", "dpecsso.libertymutual.com", "libertybiberty.com", "open.dpec.safeco.com", "home-salesservice-gateway.libertymutual.com", "personal-instantincentives.libertymutual.com", "cct-shared-audio-stream-service.libertymutual.com", "agent.loyaltyreports.libertymutual.com", "dpecui.libertymutual.com", "eservice.libertymutual.com", "acs.libertymutual.com", "drl-myexperience.libertymutual.com", "drl-api.libertymutual.com", "cl-book-transfer.libertymutual.com", "cam-api-staging.lmig.com" ], "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384" }, "http": { "url": "https://www.libertymutual.com/", "status": "HTTP/2 200 ", "http_version": "3", "headers": { "server": "AkamaiGHost", "content-length": "0", "location": "https://www.libertymutual.com/", "date": "Mon, 10 Aug 2026 13:06:21 GMT", "set-cookie": "bm_sz=71D7BD42E9A08C8038022C32E0871F7A~YAAQFRkhFzlxJ9afAQAAsgLI6wADN2g3u4Q0I2hQIkYuUjRc2ROy2sHJjgKwrCvhM1T7FLB/Bz5rTPjK0diYbP7YbdLhe3C01fsQdEpseCWj2thSgUzeSTtRUpyAGuwoqceA/mn+GzXvPuNalCyYc0nst+E0EW1Ij2IBdNhijnTTLrujE8MAJuVifwuHkBwz0bDfUJWC5/M5OWQzQbEK7RKh99qbD/n0HlsXqC4mrV1PJGM3/OcdqbglQ8amft1V/S65q7A69gEmvCsoy/nR/w7mzOfKUzTgWR8q5/a2RjFOighPSeUrhSK7i2opEYGK3JGXRRECRvjwq9VXfgAy5/APnTMhKbR4brev1iSYcHBNnwrmGf3JX6PCkM2gGrWm~3359792~3490117; Domain=.libertymutual.com; Path=/; Expires=Mon, 10 Aug 2026 17:06:21 GMT; Max-Age=14400", "user_city": "SAINTLOUIS", "user_statecode": "MO", "user_zipcode": "63101-63141+63143-63147+63150-63151+63155-63158+63160+63163-63164+63166-63167+63169+63171+63177-63180+63182+63188+63195+63197+63199", "server-timing": "ak_p; desc=\"1786367181458_388045077_330209611_40_16331_22_14_15\";dur=1", "content-type": "text/html; charset=utf-8", "cross-origin-opener-policy": "same-origin", "cross-origin-resource-policy": "same-origin", "etag": "\"3vyadi0wur9buz\"", "expect-ct": "max-age=0", "origin-agent-cluster": "?1", "referrer-policy": "no-referrer", "strict-transport-security": "max-age=15552000; includeSubDomains", "x-content-type-options": "nosniff", "x-dns-prefetch-control": "off", "x-download-options": "noopen", "x-permitted-cross-domain-policies": "none", "x-powered-by": "Next.js", "x-vcap-request-id": "d5fba40b-d6fc-42a2-6976-eadcae4b02a0", "x-xss-protection": "0", "mpulse_cdn_cache": "HIT", "mpulse_origin_time": "0", "expires": "Mon, 10 Aug 2026 13:06:21 GMT", "cache-control": "max-age=0, no-cache, no-store", "pragma": "no-cache" }, "security_checks": { "strict-transport-security": true, "content-security-policy": false, "x-content-type-options": true, "x-frame-options": false, "referrer-policy": true, "permissions-policy": false, "cross-origin-opener-policy": true, "cross-origin-embedder-policy": false, "cross-origin-resource-policy": true }, "server": "AkamaiGHost", "powered_by": "Next.js" }, "webpage": { "url": "https://www.libertymutual.com/", "title": "Liberty Mutual | Trusted Insurance for Over 100 Years", "description": "Find auto, home, renters, and life insurance from Liberty Mutual — trusted protection with 100+ years of experience and 24/7 support.", "success": true, "error": "", "status": 200 }, "network": { "23.220.214.148": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" } }, "smtp": { "host": "mxa-0037d204.gslb.pphosted.com", "ports": [ { "port": 25, "open": false, "time_ms": 24.1, "banner": "", "error": "Connection refused" }, { "port": 465, "open": false, "time_ms": 77.1, "banner": "", "error": "Connection refused" }, { "port": 587, "open": false, "time_ms": 21.8, "banner": "", "error": "Connection refused" } ] }, "visitor": { "ip": "216.73.217.62", "reverse": "", "country": "", "country_code": "", "region": "", "city": "", "latitude": null, "longitude": null, "isp": "", "organization": "", "asn": "", "timezone": "", "browser": "Other", "os": "Other", "language": "", "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "is_bot": true, "cloudflare": false }, "analysis_time_ms": 95.64 }