{
    "ok": true,
    "domain": "lyft.com",
    "generated_at": "2026-08-09T05:27:13-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 81,
        "label": "Good",
        "categories": {
            "dns": 65,
            "mail": 90,
            "security": 81,
            "network": 65,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "4 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "4 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 0,
                "lost_points": 15,
                "detail": "Both DS and DNSKEY are required."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "5 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "107 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 16,
                "lost_points": 19,
                "detail": "4 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: server-3-166-96-39.mci50.r.cloudfront.net"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/2 200 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "4 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "4 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "DNSSEC chain",
                "detail": "Both DS and DNSKEY are required.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 0,
                "lost_points": 15
            },
            {
                "level": "ok",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "5 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "error",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "107 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "4 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 16,
                "lost_points": 19
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: server-3-166-96-39.mci50.r.cloudfront.net",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/2 200 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "3.166.96.39",
                "3.166.96.103",
                "3.166.96.75",
                "3.166.96.18"
            ],
            "AAAA": [],
            "CNAME": [],
            "MX": [
                "1 aspmx.l.google.com.",
                "10 alt4.aspmx.l.google.com.",
                "10 alt3.aspmx.l.google.com.",
                "5 alt1.aspmx.l.google.com.",
                "5 alt2.aspmx.l.google.com."
            ],
            "TXT": [
                "\"cursor-domain-verification-2nqeqb=vSwAwSQDJLMNl3kyYLA4lwXiH\"",
                "\"anthropic-domain-verification-tqdk4f=P0qyx4vCYbcuEXC6m08kjNlBK\"",
                "\"DirectFedAuthUrl=https://lyft.okta.com/app/lyft_verinttestnew_1/exkwuie3g81ARphvu1t7/sso/saml\"",
                "\"ZOOM_verify_vvYcalasSF-WfUCSv1dudA\"",
                "\"twilio-domain-verification=4ddcb4bd13c31634ec2b930b65758976\"",
                "\"docusign=c728f1c4-55eb-448f-8f78-343ccabebf24\"",
                "\"dropbox-domain-verification=k0y5aonn2ngq\"",
                "\"adobe-idp-site-verification=966b340b4edd6859f304fee5ff8977b2c7d4bf45dd1d625d3dfa67b76b508354\"",
                "\"zapier-domain-verification-challenge=899d6325-8867-4fca-9eaf-1467d03dc839\"",
                "\"5trd58kv8qzr10f1p29pzvy7q37962jd\"",
                "\"airtable-verification=f58920465bf1b2441a1de42947f04eae\"",
                "\"ecostruxure-it-verification=13c4c2b2-33ef-4f97-bff6-ff0c9b8b90c5\"",
                "\"stripe-verification=ff8b9bef39bd1aec7a337faae1a557b5244999f27f887d9fdf526c65e8c1a242\"",
                "\"google-site-verification=I_p-2eYnzvWHvYp_tAsaGVvrC8de0I5_9NQewIC8vzo\"",
                "\"apple-domain-verification=LbkM8uyQIL6BFrkd\"",
                "\"google-site-verification=nhYLdh8rFg31IFcp5kYO14XHey2DScX8iNdKvl37chQ\"",
                "\"atlassian-domain-verification=glvGFizVc31XNv8C4rHe8t1rQabKIO1Tsq0kqHziwOhuoNvLKQ07KOVbT7Gq9dLa\"",
                "\"astro-domain-verification=cm20oaz701hbe01jldll8d78o\"",
                "\"pendo-domain-verification=sGMonV4s-meenG0YD0p9Y2EEpqk\"",
                "\"google-site-verification=yJG5wmMb17hGbdIRmgb908LjNkSGlhQdAKxRaI0nmWw\"",
                "\"v=spf1 include:qemailserver.com include:docebosaas.com include:_spf.google.com include:mailgun.org include:amazonses.com include:mail.zendesk.com include:spf_c.oraclecloud.com include:usermail.zohocreator.com include:_spf.salesforce.com -all\"",
                "\"google-site-verification=32agu48SsNwrbzTil2TaRoTQSHglB4ovQfrUIvNMp9U\"",
                "\"MS=ms66164867\"",
                "\"atlassian-sending-domain-verification=de432ac6-218d-47e0-ae0d-762c47fffc44\"",
                "\"_ohbh9gfx8y7rjwyqxoly0m21khvr6dz\"",
                "\"atlassian-domain-verification=kM7o6XSbESYL/hqvf2XCi1b0hiFNS+ydr5EUW/fI3risMi2W1slVFEqDqItXzmNg\"",
                "\"google-site-verification=WhOYNvBx87wMtBZZIA-_mDjxz59lpr85v5WXEe95GiU\"",
                "\"infoblox-domain-mastery=9cd50d5c64b2ffd6d66562915d4ce9a17c37622544507534f71133ec5b01a66fa7\"",
                "\"google-site-verification=PqR4kCoyX0mHFS9nEVXAOsciOi7cGmFWXZqwR0V9k84\"",
                "\"google-site-verification=V9fk-oLTj9Ewu7Kc6Vetf94qp8HZ3gfjxFMkn8LmZ3Y\"",
                "\"autodesk-domain-verification=k3JjbSmuInr6IfRlgz_L\"",
                "\"google-site-verification=Llh0du3vyHszBXJmJePgz_0i_SH4F30IfVz55ni5EJU\"",
                "\"jamf-site-verification=r_dCj-trsthX0s_MKl3TBw\"",
                "\"google-site-verification=mFVJm3TWDwwvPm8TVoIfJn1hLnh6jhe_LOLopOdPnOM\"",
                "\"openai-domain-verification=dv-ePkUxGIu6BZWAX1ejHCQXxop\""
            ],
            "NS": [
                "ns-973.awsdns-57.net.",
                "ns-1656.awsdns-15.co.uk.",
                "ns-1254.awsdns-28.org.",
                "ns-288.awsdns-36.com."
            ],
            "SOA": [
                "ns-288.awsdns-36.com. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 3600"
            ],
            "CAA": [
                "0 issue \"www.digicert.com\"",
                "0 issue \"amazon.com\"",
                "0 issue \"pki.goog\"",
                "0 issue \"letsencrypt.org\"",
                "0 iodef \"mailto:security@lyft.com\"",
                "0 issue \"sectigo.com\""
            ],
            "DS": [],
            "DNSKEY": [],
            "RRSIG": [],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "3.166.96.39",
            "3.166.96.103",
            "3.166.96.75",
            "3.166.96.18"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 include:qemailserver.com include:docebosaas.com include:_spf.google.com include:mailgun.org include:amazonses.com include:mail.zendesk.com include:spf_c.oraclecloud.com include:usermail.zohocreator.com include:_spf.salesforce.com -all",
        "dmarc": "v=DMARC1; p=reject; pct=100; rua=mailto:6ig9o43x@ag.dmarcian.com; ruf=mailto:6ig9o43x@fr.dmarcian.com;",
        "dkim_selector": "google",
        "dkim_host": "google._domainkey.lyft.com",
        "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDe/ekDgVy5XWwQKMXVE5+oAiDkr2e5bolnhBj2/+AdefgEYSrFR6rgtNzG6G0GfjIl9J5goj6qwUuxFZ2uQiV65s+XWuifBMm1WF5s6VEDA+s6HOYPOoDXopWtLbK2SwmjdT0PDxv0DVg4xGgjjgDmctuk9jLDihYYQdatpDVLIQIDAQAB",
        "spf_analysis": {
            "valid": true,
            "lookups": 9,
            "final": "-all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "reject"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": ""
    },
    "advanced": {
        "ptr": "server-3-166-96-39.mci50.r.cloudfront.net",
        "propagation": {
            "consistent": false,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "13.32.205.13",
                        "13.32.205.51",
                        "13.32.205.69",
                        "13.32.205.92"
                    ],
                    "time_ms": 89.86
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "13.32.205.13",
                        "13.32.205.51",
                        "13.32.205.69",
                        "13.32.205.92"
                    ],
                    "time_ms": 30.32
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "3.166.96.103",
                        "3.166.96.18",
                        "3.166.96.39",
                        "3.166.96.75"
                    ],
                    "time_ms": 74.34
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "13.32.205.13",
                        "13.32.205.51",
                        "13.32.205.69",
                        "13.32.205.92"
                    ],
                    "time_ms": 99.36
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "3.166.96.103",
                        "3.166.96.18",
                        "3.166.96.39",
                        "3.166.96.75"
                    ],
                    "time_ms": 84.37
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "Amazon",
        "subject": "lyft.com",
        "valid_from": "2025-10-25T19:00:00-05:00",
        "valid_to": "2026-11-24T17:59:59-06:00",
        "days_remaining": 107,
        "san": [
            "lyft.com",
            "lyft.net",
            "*.lyft.com",
            "*.lyft.net"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_128_GCM_SHA256"
    },
    "http": {
        "url": "https://www.lyft.com/",
        "status": "HTTP/2 200 ",
        "http_version": "3",
        "headers": {
            "location": "https://www.lyft.com/",
            "x-envoy-local-reply": "true",
            "vary": "Viewport-Width, Width, Accept-Encoding",
            "date": "Sun, 09 Aug 2026 10:27:04 GMT",
            "server": "envoy-iad",
            "x-cache": "Miss from cloudfront",
            "via": "1.1 518c0483a09b4e5cf05ac72aa536cd66.cloudfront.net (CloudFront)",
            "x-amz-cf-pop": "MCI50-P3",
            "x-amz-cf-id": "bEn6tw4Ja-ygT4KKxfyQHp56bbW4BF_90oD8XBNaG4uJKmBDbqvzgA==",
            "content-type": "text/html; charset=utf-8",
            "content-length": "395805",
            "set-cookie": "sessId=538715b3-ea52-452b-a8ca-f0be95540630L1786271224; Domain=.lyft.com; Path=/; Expires=Fri, 08 Aug 2031 10:27:04 GMT; Secure; SameSite=None",
            "x-frame-options": "DENY",
            "x-ot-span-context": "EhQJjz0iMwL8gjoRti6YS6mHyCIYAQ==",
            "accept-ch": "Viewport-Width, Width",
            "link": "<https://cdn.lyft.com>; rel=\"preconnect\", <https://images.ctfassets.net>; rel=\"preconnect\"",
            "cache-control": "private, no-cache, no-store, max-age=0, must-revalidate",
            "etag": "\"y7ontbfvod8h5r\"",
            "x-envoy-upstream-service-time": "66",
            "strict-transport-security": "max-age=15552000",
            "x-content-type-options": "nosniff",
            "referrer-policy": "origin-when-cross-origin"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": false,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": true,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "envoy-iad",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.lyft.com/",
        "title": "Ride or drive with Lyft",
        "description": "Request a ride whenever you need one. Drivers earn on their own terms. Download the app to get started.",
        "success": true,
        "error": "",
        "status": 200
    },
    "network": {
        "3.166.96.39": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        },
        "3.166.96.103": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        },
        "3.166.96.75": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        },
        "3.166.96.18": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "aspmx.l.google.com",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 0.8,
                "banner": "",
                "error": "Network is unreachable"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 4020.8,
                "banner": "",
                "error": "Connection timed out"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 4021.7,
                "banner": "",
                "error": "Connection timed out"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 81.98
}