{
    "ok": true,
    "domain": "marsh.com",
    "generated_at": "2026-08-09T20:31:58-05:00",
    "cache": {
        "hit": true,
        "ttl": 0
    },
    "score": {
        "total": 87,
        "label": "Good",
        "categories": {
            "dns": 85,
            "mail": 95,
            "security": 81,
            "network": 65,
            "availability": 100
        },
        "category_weights": {
            "dns": 25,
            "mail": 20,
            "security": 25,
            "network": 10,
            "availability": 20
        },
        "items": [
            {
                "category": "dns",
                "title": "IPv4 (A)",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "2 IPv4 address(es) detected."
            },
            {
                "category": "dns",
                "title": "IPv6 (AAAA)",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10,
                "detail": "0 IPv6 address(es) detected."
            },
            {
                "category": "dns",
                "title": "Name server redundancy",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "4 NS record(s); 2 or more required."
            },
            {
                "category": "dns",
                "title": "SOA record",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Authoritative zone record."
            },
            {
                "category": "dns",
                "title": "DNSSEC chain",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0,
                "detail": "DS and DNSKEY detected."
            },
            {
                "category": "dns",
                "title": "CAA policy",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Certificate authority restriction."
            },
            {
                "category": "dns",
                "title": "DNS propagation",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Agreement between public resolvers."
            },
            {
                "category": "mail",
                "title": "MX records",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "2 MX record(s)."
            },
            {
                "category": "mail",
                "title": "SPF",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "SPF policy published."
            },
            {
                "category": "mail",
                "title": "DMARC",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0,
                "detail": "DMARC policy published."
            },
            {
                "category": "mail",
                "title": "DKIM",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "A DKIM selector was verified."
            },
            {
                "category": "mail",
                "title": "MTA-STS",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5,
                "detail": "Mail transport policy."
            },
            {
                "category": "mail",
                "title": "TLS-RPT",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0,
                "detail": "TLS reporting policy."
            },
            {
                "category": "security",
                "title": "Valid TLS certificate",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0,
                "detail": "157 day(s) remaining."
            },
            {
                "category": "security",
                "title": "Certificate lifetime",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0,
                "detail": "Full points require at least 30 days remaining."
            },
            {
                "category": "security",
                "title": "HTTP security headers",
                "max_points": 35,
                "earned_points": 16,
                "lost_points": 19,
                "detail": "4 of 9 evaluated headers detected."
            },
            {
                "category": "network",
                "title": "PTR reverse DNS",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0,
                "detail": "PTR: a74e90397d14f41bb.awsglobalaccelerator.com"
            },
            {
                "category": "network",
                "title": "IPv4 diversity",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0,
                "detail": "Two or more IPv4 addresses receive full points."
            },
            {
                "category": "network",
                "title": "IPv6 connectivity",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35,
                "detail": "AAAA availability."
            },
            {
                "category": "availability",
                "title": "DNS resolution",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "At least one address family must resolve."
            },
            {
                "category": "availability",
                "title": "HTTP response",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0,
                "detail": "HTTP/2 200 "
            },
            {
                "category": "availability",
                "title": "HTTPS final URL",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0,
                "detail": "Final URL uses HTTPS."
            }
        ],
        "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
        "diagnostics": [
            {
                "level": "ok",
                "title": "IPv4 (A)",
                "detail": "2 IPv4 address(es) detected.",
                "category": "dns",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 (AAAA)",
                "detail": "0 IPv6 address(es) detected.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 0,
                "lost_points": 10
            },
            {
                "level": "ok",
                "title": "Name server redundancy",
                "detail": "4 NS record(s); 2 or more required.",
                "category": "dns",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SOA record",
                "detail": "Authoritative zone record.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DNSSEC chain",
                "detail": "DS and DNSKEY detected.",
                "category": "dns",
                "max_points": 15,
                "earned_points": 15,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "CAA policy",
                "detail": "Certificate authority restriction.",
                "category": "dns",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "DNS propagation",
                "detail": "Agreement between public resolvers.",
                "category": "dns",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "MX records",
                "detail": "2 MX record(s).",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "SPF",
                "detail": "SPF policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DMARC",
                "detail": "DMARC policy published.",
                "category": "mail",
                "max_points": 25,
                "earned_points": 25,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "DKIM",
                "detail": "A DKIM selector was verified.",
                "category": "mail",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "MTA-STS",
                "detail": "Mail transport policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 0,
                "lost_points": 5
            },
            {
                "level": "ok",
                "title": "TLS-RPT",
                "detail": "TLS reporting policy.",
                "category": "mail",
                "max_points": 5,
                "earned_points": 5,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Valid TLS certificate",
                "detail": "157 day(s) remaining.",
                "category": "security",
                "max_points": 55,
                "earned_points": 55,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "Certificate lifetime",
                "detail": "Full points require at least 30 days remaining.",
                "category": "security",
                "max_points": 10,
                "earned_points": 10,
                "lost_points": 0
            },
            {
                "level": "warning",
                "title": "HTTP security headers",
                "detail": "4 of 9 evaluated headers detected.",
                "category": "security",
                "max_points": 35,
                "earned_points": 16,
                "lost_points": 19
            },
            {
                "level": "ok",
                "title": "PTR reverse DNS",
                "detail": "PTR: a74e90397d14f41bb.awsglobalaccelerator.com",
                "category": "network",
                "max_points": 30,
                "earned_points": 30,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "IPv4 diversity",
                "detail": "Two or more IPv4 addresses receive full points.",
                "category": "network",
                "max_points": 35,
                "earned_points": 35,
                "lost_points": 0
            },
            {
                "level": "error",
                "title": "IPv6 connectivity",
                "detail": "AAAA availability.",
                "category": "network",
                "max_points": 35,
                "earned_points": 0,
                "lost_points": 35
            },
            {
                "level": "ok",
                "title": "DNS resolution",
                "detail": "At least one address family must resolve.",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTP response",
                "detail": "HTTP/2 200 ",
                "category": "availability",
                "max_points": 40,
                "earned_points": 40,
                "lost_points": 0
            },
            {
                "level": "ok",
                "title": "HTTPS final URL",
                "detail": "Final URL uses HTTPS.",
                "category": "availability",
                "max_points": 20,
                "earned_points": 20,
                "lost_points": 0
            }
        ]
    },
    "dns": {
        "records": {
            "A": [
                "99.83.175.37",
                "75.2.75.65"
            ],
            "AAAA": [
                ";; communications error to 69.64.44.20#53: timed out"
            ],
            "CNAME": [],
            "MX": [
                "5 mxa-001b7601.gslb.pphosted.com.",
                "5 mxb-001b7601.gslb.pphosted.com."
            ],
            "TXT": [
                ";; communications error to 69.64.44.20#53: timed out",
                "\"588b6846375bd9f37f344f4c06dcb3ac\"",
                "\"_acme-challenge.icargo-ssrs\" \"TXT\" \"eRHBM9aPNsa6b58XriX7wDZuyx4teXSd_fJqjzstWnU\"",
                "\"Ep8Y1Vf5cBwJcwQyTJ12hoVpWk7OwPvh0RHn+dCeZbgPTZSeGV4zEwi9HHGilyovyRZBDoFv8kPRxUyzZXCy9w==\"",
                "\"d365mktkey=3ctA0xz0S6DvZxthtiPMx4FXeNQzITVOWdTv3VDAgXkx\"",
                "\"d365mktkey=Kc8xerteL1MgmGNIMMPbmY6lLO7VEoRpqLIce96gZTox\"",
                "\"amazonses:TfnZT7QmJapNauFsEWgBLtlCgWqEUTusCRn6A28togA=\"",
                "\"google-site-verification=Zj-zAMBsyycWDR3VJjFoEPmHMYZ9NE12rQQXGsOD_kU\"",
                "\"docusign=19b69040-9580-406b-a4ad-49540f74dc4d\"",
                "\"anthropic-domain-verification-fgespr=qToQ4rrggGgEAToYLSi0wssHa\"",
                "\"d365mktkey=ScZvE4E9xqqbEB81Bl50Z6rTdN6uxZfxkJ0BVnEinbMx\"",
                "\"_acme-challenge.icargo\" \"TXT\" \"TCCfiWC65eaAdRnCNMIMHkvUVzEg8JVRliiswcMoWSM\"",
                "\"d365mktkey=ErgfBC0WLmIIzMC1zat1zUfRExjMtfOEqs0VvOpW9Vwx\"",
                "\"docusign=65a5e2c9-5f9d-4a80-8656-50701b2d7eb0\"",
                "\"00DWF00000Bpyob=1TBWF0000000KI5\"",
                "\"00DDJ000000AHAT=1TBOg00000001aP\"",
                "\"yt+umpNxKiKhrTUWGro/1XM28L0zSvsK/67ljVYcjXNGuxc1TAIwZAGG0aWA1eO9iKSGED9f4bZ2G3d/5jrjhQ==\"",
                "\"_globalsign-domain-verification=IFaQyK07E-Ksc8NcwZ-ns7kxuRzmIKOXT-MFfKVJVn\"",
                "\"MS=ms20058834\"",
                "\"_acme-challenge.uat-icargo\" \"txt\" \"HIyDnzuYZRNj3XdoJBxjlszUy5z3n8YJ91usjx1oRPo\"",
                "\"wiz-domain-verification=d0bf95814c9fa27b0adef5853d0fd78dd849e94cb81760b79ef05e85a94e3d87\"",
                "\"smartsheet-site-validation=Oc07DLaTdJ-gg3mXSrGaN7XWQP0r0h1b\"",
                "\"google-site-verification=fwvlmgE9igik3pObbm_rUBbFhzep8dfNNILBx-jLYnA\"",
                "\"0h39hbndtbqr6n9mdxbx7kgpcg3p6636\"",
                "\"sending_domain861941=ba49233a5ea93e5f488a447a3c297ebfc95bf3e831e864f249413fd11f0cde27\"",
                "\"google-site-verification=dDgMCPIdNyLLEqoplSCkoRTKQqUgjQjL7Jao7cLxN3I\"",
                "\"wiz-domain-verification=f5ea71fd0788359b3d2c7eba4b538b6bab5c14b5fb3645a56dd9ebbf635eb7d5\"",
                "\"atlassian-domain-verification=xnXr01aGBaNvXPwRM4W0ttOcpdlCVf7kK4ca1XTG5iDuJhwcNjOZNCUDovUd25LP\"",
                "\"cisco-ci-domain-verification=27cec54b73117ed7eec028c2e00a726f072f07aac9ba76c711a0bab4c16c689c\"",
                "\"d365mktkey=8Xqw8pzxKXP5JeKfoUixHdYxs7jtvic300hnNVKjnEsx\"",
                "\"v=spf1 include:marsh.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:ncapp02.com ~all\"",
                "\"SFMC-T-mzpFCxu3H5N5zWILHlSvWcED0hfKzD7cAUDlns\"",
                "\"j5sr1tr6ww5gczgnvvnn4nnx32bnmhkz\"",
                "\"d365mktkey=2kqVkXxyqBmBylex36ofn5urjO3NYxHjF0N0TAax3sEx\"",
                "\"d365mktkey=1JxMP5Ufqk3upDLAbiRoysCs5xzEZa50gg8yQ7Nrcv0x\"",
                "\"onetrust-domain-verification=290322a96bb040228adcc4f737667d98\"",
                "\"0ed1fe018a7947983a28764bb7b90dc5b227aedfda\"",
                "\"cloudhealth=19c285f6-d6c3-4cb4-b9a7-b2303bc9cf00\"",
                "\"mongodb-site-verification=gyGHLqKU0KxVWjpUTq5lbq8dfNA6lVlN\"",
                "\"_acme-challenge.iris\" \"txt\" \"ebQtSd_0g9awFZfq08mQob3f2ivG_wjF3zckjjuvt_A\"",
                "\"amazonses:epm5i6J/3RRes73nsJ5ySUjiNgJ3WayRqFlemgmVFrs=\"",
                "\"jamf-site-verification=lP_HYw89EqT6BRBc6_mi9A\"",
                "\"DirectFedAuthUrl=https://mmc.oktapreview.com/app/mmc_taxautomate_1/exk2ocgtjv64ntRFE0h8/sso/saml\"",
                "\"d365mktkey=OoYx5SpRcvUMiRiukbtz9CylBIq4dA1457qOlxFTkGUx\"",
                "\"apple-domain-verification=7Ix9R5WWUG6tqQd0\"",
                "\"00D1a000000YrcS=1TBa70000000ANZ\"",
                "\"iKnJEh4Z/G+12pFbZcmCh6LDB2a5gNhQ8Ieta3wBPNgBIz6/yqKcwaFruRee708OdxDNRZzzi12Y3AjiU5Fk1g==\"",
                "\"amazonses:7gbsJIlJCN038duu4e/fn+j5JRxX3HjOBxQfAiCZr2c=\"",
                "\"Xmedius-Verification=f5d60ba4fecea35a3fe29d4c951b8bf3bd1fe4d79cd0ae8680d61ee6bb213513\"",
                "\"atlassian-domain-verification=B5ipV+NJ90VqYy22o3me3cL4LPzBQUvt9d8ZTKjVDaQut9y15-lyKBDUHA/+lOc+\"",
                "\"zywave-domain-verification=EqaEoZtpog2iKpMZWmWqWh5CVMmDW78JN/JgY+spYL8=\"",
                "\"d365mktkey=jFIzDcyGfI62H0XhSjLrmccCY83kcIY3QgxDxxAXKHgx\"",
                "\"d365mktkey=75LNvwioiCnyKlU3pzUfMlqjbxOpG1gH3zBw5mIFrtEx\"",
                "\"00D9h000004Jx0T=1TB9h000000006T\"",
                "\"00DDn000002nia8=1TBOd00000000ZV\"",
                "\"google-site-verification=nD1MmIY5c3fIAAqzbDwGazPHXR3kOJy2YIULjFJ9t9g\"",
                "\"adobe-idp-site-verification=913e4ed488bb8eccd8e2d2de5461f4ec10e6649b4d6410a4d03e0dabf4b522d2\"",
                "\"3AD5EBCDA91424D526C298FC0D7D7468379E22BEEAB74D31DF68E60B674C83A1\"",
                "\"docusign=ff2e9780-148f-495c-8e29-cc927929ddd9\"",
                "\"atlassian-domain-verification=zUH3HeS6jWIavzHkMsMCHlKw8WpIGuLOR3gCFRvfGdkC95re1yJSP2EnkI4afd7i\"",
                "\"_acme-challenge.uat-iris\" \"txt\" \"QcfGK1TFZNKC-HjnierP1kJuPs4gODuLxjZbE94n9pw\"",
                "\"00DQE0000000J2f=1TBOa00000000OD\"",
                "\"paloaltonetworks-site-verification=5c35b44b67277b65715adf3f3159a5e8de4a8646c1a999589267dd4ba873ca36\"",
                "\"pardot395202=12113bf27feadde824557fffeba2c8c5cf04ae8948d2c5e5f1b602556475c362\"",
                "\"k=rsa;\" \"p=migfma0gcsqgsib3dqebaquaa4gnadcbiqkbgqdgoqcnwaqdjby23mrshs1euhqk/dtdc33qrtqgwd9cjmtm3ck2zityugkhcxnketgbzg+ijqcdrnkzhyoreztf6qbinbb2dbyaneuwki5dvrbfowqoj9zvm3ivxaebomlb0szujaoml94hokkuguckdz1gbvei3gcvwriqphal1qidaqab;\""
            ],
            "NS": [
                "ns01.mmc.com.",
                "ns05.mmc.com.",
                "ns04.mmc.com.",
                "ns03.mmc.com."
            ],
            "SOA": [
                "usash15-02dns01.mrshmc.com. internet.services.marsh.com. 3012517488 3600 360 2419200 900"
            ],
            "CAA": [],
            "DS": [
                "12274 8 2 F88F2164D05EE99A704ED66670759BDF53F51FC96144B6267113D243 9C92751B",
                "27199 8 2 641E0E4A734384DA1C81E1D19990B38224CEED10294134F326DC6055 8E379226"
            ],
            "DNSKEY": [
                ";; communications error to 69.64.44.20#53: timed out",
                ";; communications error to 69.64.44.50#53: timed out",
                "; <<>> DiG 9.18.39-0ubuntu0.22.04.4-Ubuntu <<>> marsh.com DNSKEY +short +time=1 +tries=1",
                ";; global options: +cmd",
                ";; no servers could be reached"
            ],
            "RRSIG": [
                ";; communications error to 69.64.44.20#53: timed out",
                "SOA 8 2 1800 20260814013020 20260810003020 9178 marsh.com. ikMKHAGZzGFQjutPCQ0+KaKIaQzjfw89lV8drmsw19eL4Yyygn7jA3eQ luau9WVRtkdZETpfQzzZyZyzIpdYCsp/4Z+JYtuWYobVO9LNkKmcRz0N bT2D/zCByjczj2aqIs11lN/1Ej+bXz+LnbCXMHeBnaSNdkm9QuOeA9IH gw0=",
                "SOA 8 2 1800 20260814013020 20260810003020 54214 marsh.com. dZCX3wH4qeH3+sX8zQKkEImAsM/gnxwLEQj+XvKsa3HQfYRGxvtgSLTh v8pXXiANPNt80g3I9YP+vgs1s2flhIETl4I0j7G6+jp7QqJHywNFnOKw K4X+c/Nl63Vr0lYlqjM8LN5zJ0jTradPgcsL/L2ivSimfzsNmVbe+vsm PUA=",
                "NS 8 2 1800 20260813065825 20260809065740 9178 marsh.com. c86iHHkLY7xXmvt6Umou+NQOr89UN1DgYqWb5/iiXG+Mqk+Uv3Y37pet KOe4iuxmUVfCba9AL5E0aLYUj/1Aw0kjhLVMjcLT0Y28rTFcZgs1TYIB CYhaGfqA/QcgfmfrySZ1lmdpmDH29Dr+aA6Rs9WkUOKf7qmazyl7DiC/ xqU=",
                "NS 8 2 1800 20260813065825 20260809065740 54214 marsh.com. QQbuG6h/8MOEFWX+lZHy+BWB+oOpkGAiew5QUYKpSfVl6OtBCbNSFB8j 7zFzYOnm0yyZ0rOwl80NPnsYoEw0VxDpJk1mm+n6q0xc4gDnfSrob9WO Sy1rktQn04LRk64QvMI7S5Bwevrji38vunDmAxpoTXNlery1GFKqJnUg ayE=",
                "MX 8 2 1800 20260813183548 20260809174950 9178 marsh.com. KT9YWKKMT4bw6sGBV4twvd+bPCPcNg83xfZRS0fXx6cEvAnmcQNBM2ia CQBRa4AoE8IKE4OUY1gzQRlLVoFqQ66QPQ7NX+7OrAaObdCfv+pJM7vO MlfFonaEmn3d2PAcTPu5Rc7MQaOtfxl6X9ZA0/9lHw8GMJxnv6bZv9MD lwo=",
                "MX 8 2 1800 20260813183548 20260809174950 54214 marsh.com. N5gMH+EVOyBC9opJ58CKzE0oKo3a6C6Gf71H5qR3ZuglGBUpXhMjpJYJ edIR+c8RI7l7J2oY1eE2s3gUJMKkzYaSU9V65unfdJldQVuNNmjlI1Li cFeYKEwH65kBU4Sf3DQmEMxHGJDRE7WG2KwESsybsozvz5RZRoaEAUtk a5g=",
                "DS 13 2 86400 20260816004707 20260808233707 41446 com. n2nevKo9Mp540CKZ/yuERG+YxE0tDDdAJt4gzu2GyR9HNFR/S8fi8gu9 jtyaQd0gIHe7jJpDrFqFrF0L1LV+Zg=="
            ],
            "NSEC": [],
            "NSEC3": [],
            "SRV": [],
            "NAPTR": [],
            "TLSA": [],
            "SSHFP": []
        },
        "ipv4": [
            "99.83.175.37",
            "75.2.75.65"
        ],
        "ipv6": []
    },
    "mail": {
        "spf": "v=spf1 include:marsh.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:ncapp02.com ~all",
        "dmarc": "v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email; fo=1; ri=3600",
        "dkim_selector": "selector1",
        "dkim_host": "selector1._domainkey.marsh.com",
        "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDTnbXAS9O03UFSTSH79flFsPWcmJfbuy6JLJMmPSdLaxVjmMCl5EkJ3KgqbO/YFhJrXGP3FrCTTbJXgGRfDe5E9GV6HGIxB+VGyDCeOL+qXYUviCHaiDu0i9IES7rBFsiTTXTEafU4+RwLsI9J81PbN4ysXDoohAyhYFixOI23MQIDAQAB;",
        "spf_analysis": {
            "valid": true,
            "lookups": 3,
            "final": "~all",
            "message": "Within the estimated limit"
        },
        "dmarc_analysis": {
            "valid": true,
            "policy": "reject"
        },
        "bimi": "",
        "mta_sts": "",
        "tls_rpt": "v=TLSRPTv1;rua=mailto:tls-report@vali.email"
    },
    "advanced": {
        "ptr": "a74e90397d14f41bb.awsglobalaccelerator.com",
        "propagation": {
            "consistent": true,
            "results": [
                {
                    "provider": "Google",
                    "server": "8.8.8.8",
                    "result": [
                        "75.2.75.65",
                        "99.83.175.37"
                    ],
                    "time_ms": 34.67
                },
                {
                    "provider": "Cloudflare",
                    "server": "1.1.1.1",
                    "result": [
                        "75.2.75.65",
                        "99.83.175.37"
                    ],
                    "time_ms": 48.8
                },
                {
                    "provider": "Quad9",
                    "server": "9.9.9.9",
                    "result": [
                        "75.2.75.65",
                        "99.83.175.37"
                    ],
                    "time_ms": 213.32
                },
                {
                    "provider": "OpenDNS",
                    "server": "208.67.222.222",
                    "result": [
                        "75.2.75.65",
                        "99.83.175.37"
                    ],
                    "time_ms": 45.59
                },
                {
                    "provider": "AdGuard",
                    "server": "94.140.14.14",
                    "result": [
                        "75.2.75.65",
                        "99.83.175.37"
                    ],
                    "time_ms": 164.14
                }
            ]
        }
    },
    "ssl": {
        "available": true,
        "issuer": "Sectigo Limited",
        "subject": "marsh.com",
        "valid_from": "2026-07-23T19:00:00-05:00",
        "valid_to": "2027-01-14T17:59:59-06:00",
        "days_remaining": 157,
        "san": [
            "marsh.com",
            "affinity.marsh.com",
            "airmic.marsh.com",
            "amrae.marsh.com",
            "ardrossaninsurance.com.au",
            "arrangebonds.com",
            "asia.marsh.com",
            "asprose.com",
            "aviation.marsh.com",
            "bio.sa.com",
            "broker.coverpro.ae",
            "canadarims.marsh.com",
            "cargocover.com",
            "charityinsurance.ie",
            "client.coverpro.ae",
            "content.linqbymarsh.com",
            "corporate.marsh.com",
            "coverpro.ae",
            "delimamarsh.com",
            "deliveroo.marsh.com",
            "dev.www.marsh.com",
            "echelonccl.com",
            "encon.ca",
            "eventinsurance.marsh.com",
            "faw.marshsport.co.uk",
            "ferma.marsh.com",
            "greenbirdreinsurance.com",
            "honan.asia",
            "ie.marsh.com",
            "imea.marsh.com",
            "independentprograms.com",
            "insolutionsworld.co.uk",
            "insolutionsworld.com",
            "insolutionsworld.marsh.com",
            "jltpublicsector.com",
            "lac.marsh.com",
            "marsh-mbj.com",
            "marsh-mjan.com",
            "marsh.at",
            "marsh.be",
            "marsh.bg",
            "marsh.ca",
            "marsh.cl",
            "marsh.co.ae",
            "marsh.co.id",
            "marsh.co.il",
            "marsh.co.in",
            "marsh.co.kr",
            "marsh.co.th",
            "marsh.com.ar",
            "marsh.com.br",
            "marsh.com.cn",
            "marsh.com.co",
            "marsh.com.cy",
            "marsh.com.hk",
            "marsh.com.mx",
            "marsh.com.my",
            "marsh.com.pe",
            "marsh.com.pg",
            "marsh.com.ph",
            "marsh.com.qa",
            "marsh.com.sg",
            "marsh.com.tr",
            "marsh.com.tw",
            "marsh.com.vn",
            "marsh.cz",
            "marsh.de",
            "marsh.dk",
            "marsh.ee",
            "marsh.es",
            "marsh.fi",
            "marsh.fr",
            "marsh.gr",
            "marsh.hr",
            "marsh.hu",
            "marsh.ie",
            "marsh.it",
            "marsh.lt",
            "marsh.lu",
            "marsh.lv",
            "marsh.nl",
            "marsh.no",
            "marsh.pl",
            "marsh.pt",
            "marsh.ro",
            "marsh.se",
            "marsh.si",
            "marsh.sk",
            "marsh.ua",
            "marsh.vn",
            "marshatrims.com",
            "marshcargo.fr",
            "marshfjc.com",
            "marshpcs.com",
            "marshriskconsulting.com",
            "marshsaldana.com",
            "marshwings.ca",
            "marshwings.com",
            "marshwortham.com",
            "memorial.marsh.com",
            "mercermarshbenefits.com",
            "mmapcs.com",
            "mrsh.com",
            "mstmarsh.com",
            "one.qa.www.marsh.com",
            "parcelcover.com",
            "pcs.marsh.com",
            "preview.affinity.marsh.com",
            "preview.corporate.marsh.com",
            "preview.www.corporate.marsh.com",
            "preview.www.marsh.com",
            "proxy.marsh.com",
            "qa.www.marsh.com",
            "sam-assurance.com",
            "sempremarsh.com",
            "sempremarsh.com.br",
            "servprofranchiseinsurance.com",
            "siempremarsh.com",
            "stage.affinity.marsh.com",
            "stage.corporate.marsh.com",
            "stage.www.corporate.marsh.com",
            "stage.www.marsh.com",
            "staging.content.linqbymarsh.com",
            "torrentcorp.com",
            "uka.marshsport.co.uk",
            "uprr.marsh.com",
            "worthaminsurance.com",
            "www.airmic.marsh.com",
            "www.amrae.marsh.com",
            "www.ardrossaninsurance.com.au",
            "www.asia.marsh.com",
            "www.asprose.com",
            "www.aviation.marsh.com",
            "www.bio.sa.com",
            "www.broker.coverpro.ae",
            "www.canadarims.marsh.com",
            "www.cargocover.com",
            "www.charityinsurance.ie",
            "www.client.coverpro.ae",
            "www.corporate.marsh.com",
            "www.coverpro.ae",
            "www.delimamarsh.com",
            "www.deliveroo.marsh.com",
            "www.echelonccl.com",
            "www.encon.ca",
            "www.eventinsurance.marsh.com",
            "www.ferma.marsh.com",
            "www.greenbirdreinsurance.com",
            "www.honan.asia",
            "www.ie.marsh.com",
            "www.imea.marsh.com",
            "www.independentprograms.com",
            "www.insolutionsworld.co.uk",
            "www.insolutionsworld.com",
            "www.insolutionsworld.marsh.com",
            "www.jltpublicsector.com",
            "www.lac.marsh.com",
            "www.marsh-mbj.com",
            "www.marsh-mjan.com",
            "www.marsh.at",
            "www.marsh.be",
            "www.marsh.bg",
            "www.marsh.ca",
            "www.marsh.cl",
            "www.marsh.co.ae",
            "www.marsh.co.id",
            "www.marsh.co.il",
            "www.marsh.co.in",
            "www.marsh.co.kr",
            "www.marsh.co.th",
            "www.marsh.com",
            "www.marsh.com.ar",
            "www.marsh.com.br",
            "www.marsh.com.cn",
            "www.marsh.com.co",
            "www.marsh.com.cy",
            "www.marsh.com.hk",
            "www.marsh.com.mx",
            "www.marsh.com.my",
            "www.marsh.com.pe",
            "www.marsh.com.pg",
            "www.marsh.com.ph",
            "www.marsh.com.qa",
            "www.marsh.com.sg",
            "www.marsh.com.tr",
            "www.marsh.com.tw",
            "www.marsh.com.vn",
            "www.marsh.cz",
            "www.marsh.de",
            "www.marsh.dk",
            "www.marsh.ee",
            "www.marsh.es",
            "www.marsh.fi",
            "www.marsh.fr",
            "www.marsh.gr",
            "www.marsh.hr",
            "www.marsh.hu",
            "www.marsh.ie",
            "www.marsh.it",
            "www.marsh.lt",
            "www.marsh.lu",
            "www.marsh.lv",
            "www.marsh.nl",
            "www.marsh.no",
            "www.marsh.pl",
            "www.marsh.pt",
            "www.marsh.ro",
            "www.marsh.se",
            "www.marsh.si",
            "www.marsh.sk",
            "www.marsh.ua",
            "www.marsh.vn",
            "www.marshatrims.com",
            "www.marshcargo.fr",
            "www.marshfjc.com",
            "www.marshpcs.com",
            "www.marshriskconsulting.com",
            "www.marshsaldana.com",
            "www.marshsport.co.uk",
            "www.marshwings.ca",
            "www.marshwings.com",
            "www.marshwortham.com",
            "www.memorial.marsh.com",
            "www.mercermarshbenefits.com",
            "www.mmapcs.com",
            "www.mrsh.com",
            "www.mstmarsh.com",
            "www.parcelcover.com",
            "www.paypal-extend.com",
            "www.preview.affinity.marsh.com",
            "www.proxy.marsh.com",
            "www.sempremarsh.com",
            "www.sempremarsh.com.br",
            "www.servprofranchiseinsurance.com",
            "www.siempremarsh.com",
            "www.torrentcorp.com",
            "www.worthaminsurance.com"
        ],
        "protocol": "TLSv1.3",
        "cipher": "TLS_AES_128_GCM_SHA256"
    },
    "http": {
        "url": "https://www.marsh.com/en/home.html",
        "status": "HTTP/2 200 ",
        "http_version": "3",
        "headers": {
            "server": "Apache",
            "date": "Mon, 10 Aug 2026 00:48:41 GMT",
            "content-type": "text/html;charset=utf-8",
            "content-length": "258303",
            "location": "https://www.marsh.com/en/home.html",
            "set-cookie": "currentCountryCode=US; path=/; secure",
            "x-cache": "Hit from cloudfront",
            "via": "1.1 ed2a58dedcfbb5f690a75d7abac8c0ae.cloudfront.net (CloudFront)",
            "x-amz-cf-pop": "CMH68-P7",
            "x-amz-cf-id": "CEGf1iO2N9mgW4aUMZRnQfwMXnT7Y_sn_nMHSr_g3uGLoP5HK-PyYA==",
            "age": "2596",
            "cache-control": "public, max-age=3600, s-maxage=3600, must-revalidate",
            "x-frame-options": "SAMEORIGIN",
            "strict-transport-security": "max-age=31536000; includeSubdomains; preload",
            "content-security-policy": "default-src 'self' https://customervoice.microsoft.com https://*.foleon.com https://api.kscope.io https://*.company-target.com https://payments.marsh.com https://info.marsh.com https://mfpembedcdnwus2.azureedge.net https://datawrapper.dwcdn.net https://privacyportal-cdn.onetrust.com https://privacyportal.onetrust.com https://consent-pref.trustarc.com https://consent.trustarc.com https://html5-player.libsyn.com https://www.googleadservices.com https://view.ceros.com https://marsh-fl.ceros.site https://platform.twitter.com https://consent.api.osano.com https://cmp.osano.com https://disclosure.api.osano.com https://undefined.fls.doubleclick.net https://td.doubleclick.net https://mmc.demdex.net https://www.googletagmanager.com https://ad.doubleclick.net https://www.google.com https://mercer.tt.omtrdc.net https://dpm.demdex.net https://www.facebook.com https://player.vimeo.com https://vimeo.com https://www.youtube-nocookie.com https://siteintercept.qualtrics.com https://tattle.api.osano.com https://www.google-analytics.com https://fonts.googleapis.com https://maps.googleapis.com https://www.recaptcha.net https://fonts.gstatic.com 'unsafe-inline'; script-src 'self' https://bat.bing.com https://*.demandbase.com https://*.foleon.com https://api.kscope.io https://*.company-target.com https://mfpembedcdnwus2.azureedge.net https://privacyportal-cdn.onetrust.com https://privacyportal.onetrust.com https://view.ceros.com https://marsh-fl.ceros.site https://info.marsh.com https://js.adsrvr.org/up_loader.1.1.0.js https://acdn.adnxs.com/dmp/up/pixie.js https://platform.twitter.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://rum.hlx.page https://siteintercept.qualtrics.com https://www.youtube.com https://tattle.api.osano.com https://cmp.osano.com https://player.vimeo.com https://assets.adobedtm.com https://cdnjs.cloudflare.com https://www.google.com https://cdn.polyfill.io https://www.googletagmanager.com https://consent.trustarc.com https://www.google-analytics.com https://www.recaptcha.net https://www.gstatic.com https://www.googleadservices.com https://snap.licdn.com https://connect.facebook.net https://pi.pardot.com https://googleads.g.doubleclick.net https://maps.googleapis.com https://zn2i2bbuxai3xv9dz-marsh.siteintercept.qualtrics.com 'unsafe-eval' 'unsafe-inline'; img-src 'self' data: * https://consent.trustarc.com https://www.google-analytics.com https://px.ads.linkedin.com https://www.facebook.com https://www.google.com https://www.google.co.in https://p.adsymptotic.com https://maps.gstatic.com https://maps.googleapis.com https://maps.gstatic.com 'unsafe-inline'; connect-src https://bat.bing.com https://*.company-target.com https://*.foleon.com https://api.kscope.io https://*.demandbase.com https://*.analytics.google.com https://stats.g.doubleclick.net https://privacyportal.onetrust.com https://cmp.osano.com https://public-usa.mkt.dynamics.com https://consent.api.osano.com https://disclosure.api.osano.com https://px.ads.linkedin.com https://maps.googleapis.com https://rum.hlx.page https://www.google-analytics.com https://google.com https://consent-pref.trustarc.com https://dpm.demdex.net https://marshandmclennan.data.adobedc.net https://www.google.co.in https://ib.adnxs.com https://ad.doubleclick.net https://mercer.tt.omtrdc.net https://vimeo.com https://www.google.com https://siteintercept.qualtrics.com https://analytics.google.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://assets-usa.mkt.dynamics.com 'self' 'unsafe-inline'; font-src 'self' https://privacyportal-cdn.onetrust.com https://*.foleon.com https://api.kscope.io https://fonts.gstatic.com https://consent.trustarc.com; worker-src blob:",
            "x-content-type-options": "nosniff",
            "x-xss-protection": "1; mode=block",
            "last-modified": "Sun, 09 Aug 2026 08:57:10 GMT",
            "etag": "\"3f0ff-658996c5116d3\"",
            "accept-ranges": "bytes",
            "dispatcher": "us1",
            "vary": "Accept-Encoding"
        },
        "security_checks": {
            "strict-transport-security": true,
            "content-security-policy": true,
            "x-content-type-options": true,
            "x-frame-options": true,
            "referrer-policy": false,
            "permissions-policy": false,
            "cross-origin-opener-policy": false,
            "cross-origin-embedder-policy": false,
            "cross-origin-resource-policy": false
        },
        "server": "Apache",
        "powered_by": ""
    },
    "webpage": {
        "url": "https://www.marsh.com/en/home.html",
        "title": "Marsh Risk | Global Leader in Insurance Broking and Risk Management",
        "description": "Marsh is a global leader in insurance broking and risk management, providing consulting and advisory services across industries worldwide. Learn more.",
        "success": true,
        "error": "",
        "status": 206
    },
    "network": {
        "99.83.175.37": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        },
        "75.2.75.65": {
            "success": false,
            "country": "",
            "region": "",
            "city": "",
            "asn": "",
            "organization": "",
            "isp": ""
        }
    },
    "smtp": {
        "host": "mxa-001b7601.gslb.pphosted.com",
        "ports": [
            {
                "port": 25,
                "open": false,
                "time_ms": 49.9,
                "banner": "",
                "error": "Connection refused"
            },
            {
                "port": 465,
                "open": false,
                "time_ms": 49.8,
                "banner": "",
                "error": "Connection refused"
            },
            {
                "port": 587,
                "open": false,
                "time_ms": 76.5,
                "banner": "",
                "error": "Connection refused"
            }
        ]
    },
    "visitor": {
        "ip": "216.73.217.62",
        "reverse": "",
        "country": "",
        "country_code": "",
        "region": "",
        "city": "",
        "latitude": null,
        "longitude": null,
        "isp": "",
        "organization": "",
        "asn": "",
        "timezone": "",
        "browser": "Other",
        "os": "Other",
        "language": "",
        "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
        "is_bot": true,
        "cloudflare": false
    },
    "analysis_time_ms": 125.74
}