{ "ok": true, "domain": "nationwide.com", "generated_at": "2026-08-09T12:20:45-05:00", "cache": { "hit": true, "ttl": 0 }, "score": { "total": 80, "label": "Good", "categories": { "dns": 60, "mail": 90, "security": 81, "network": 65, "availability": 100 }, "category_weights": { "dns": 25, "mail": 20, "security": 25, "network": 10, "availability": 20 }, "items": [ { "category": "dns", "title": "IPv4 (A)", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "2 IPv4 address(es) detected." }, { "category": "dns", "title": "IPv6 (AAAA)", "max_points": 10, "earned_points": 0, "lost_points": 10, "detail": "0 IPv6 address(es) detected." }, { "category": "dns", "title": "Name server redundancy", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "6 NS record(s); 2 or more required." }, { "category": "dns", "title": "SOA record", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Authoritative zone record." }, { "category": "dns", "title": "DNSSEC chain", "max_points": 15, "earned_points": 0, "lost_points": 15, "detail": "Both DS and DNSKEY are required." }, { "category": "dns", "title": "CAA policy", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Certificate authority restriction." }, { "category": "dns", "title": "DNS propagation", "max_points": 10, "earned_points": 0, "lost_points": 10, "detail": "Agreement between public resolvers." }, { "category": "mail", "title": "MX records", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "2 MX record(s)." }, { "category": "mail", "title": "SPF", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "SPF policy published." }, { "category": "mail", "title": "DMARC", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "DMARC policy published." }, { "category": "mail", "title": "DKIM", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "A DKIM selector was verified." }, { "category": "mail", "title": "MTA-STS", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Mail transport policy." }, { "category": "mail", "title": "TLS-RPT", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "TLS reporting policy." }, { "category": "security", "title": "Valid TLS certificate", "max_points": 55, "earned_points": 55, "lost_points": 0, "detail": "63 day(s) remaining." }, { "category": "security", "title": "Certificate lifetime", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Full points require at least 30 days remaining." }, { "category": "security", "title": "HTTP security headers", "max_points": 35, "earned_points": 16, "lost_points": 19, "detail": "4 of 9 evaluated headers detected." }, { "category": "network", "title": "PTR reverse DNS", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "PTR: a23-213-186-196.deploy.static.akamaitechnologies.com" }, { "category": "network", "title": "IPv4 diversity", "max_points": 35, "earned_points": 35, "lost_points": 0, "detail": "Two or more IPv4 addresses receive full points." }, { "category": "network", "title": "IPv6 connectivity", "max_points": 35, "earned_points": 0, "lost_points": 35, "detail": "AAAA availability." }, { "category": "availability", "title": "DNS resolution", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "At least one address family must resolve." }, { "category": "availability", "title": "HTTP response", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "HTTP/2 200 " }, { "category": "availability", "title": "HTTPS final URL", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "Final URL uses HTTPS." } ], "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.", "diagnostics": [ { "level": "ok", "title": "IPv4 (A)", "detail": "2 IPv4 address(es) detected.", "category": "dns", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "error", "title": "IPv6 (AAAA)", "detail": "0 IPv6 address(es) detected.", "category": "dns", "max_points": 10, "earned_points": 0, "lost_points": 10 }, { "level": "ok", "title": "Name server redundancy", "detail": "6 NS record(s); 2 or more required.", "category": "dns", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SOA record", "detail": "Authoritative zone record.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "error", "title": "DNSSEC chain", "detail": "Both DS and DNSKEY are required.", "category": "dns", "max_points": 15, "earned_points": 0, "lost_points": 15 }, { "level": "error", "title": "CAA policy", "detail": "Certificate authority restriction.", "category": "dns", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "DNS propagation", "detail": "Agreement between public resolvers.", "category": "dns", "max_points": 10, "earned_points": 0, "lost_points": 10 }, { "level": "ok", "title": "MX records", "detail": "2 MX record(s).", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SPF", "detail": "SPF policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DMARC", "detail": "DMARC policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DKIM", "detail": "A DKIM selector was verified.", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "error", "title": "MTA-STS", "detail": "Mail transport policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "TLS-RPT", "detail": "TLS reporting policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "Valid TLS certificate", "detail": "63 day(s) remaining.", "category": "security", "max_points": 55, "earned_points": 55, "lost_points": 0 }, { "level": "ok", "title": "Certificate lifetime", "detail": "Full points require at least 30 days remaining.", "category": "security", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "warning", "title": "HTTP security headers", "detail": "4 of 9 evaluated headers detected.", "category": "security", "max_points": 35, "earned_points": 16, "lost_points": 19 }, { "level": "ok", "title": "PTR reverse DNS", "detail": "PTR: a23-213-186-196.deploy.static.akamaitechnologies.com", "category": "network", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "ok", "title": "IPv4 diversity", "detail": "Two or more IPv4 addresses receive full points.", "category": "network", "max_points": 35, "earned_points": 35, "lost_points": 0 }, { "level": "error", "title": "IPv6 connectivity", "detail": "AAAA availability.", "category": "network", "max_points": 35, "earned_points": 0, "lost_points": 35 }, { "level": "ok", "title": "DNS resolution", "detail": "At least one address family must resolve.", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTP response", "detail": "HTTP/2 200 ", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "ok", "title": "HTTPS final URL", "detail": "Final URL uses HTTPS.", "category": "availability", "max_points": 20, "earned_points": 20, "lost_points": 0 } ] }, "dns": { "records": { "A": [ "23.213.186.196", "23.213.186.197" ], "AAAA": [], "CNAME": [], "MX": [ "10 mx1.hc2638-63.iphmx.com.", "10 mx2.hc2638-63.iphmx.com." ], "TXT": [ "\"logmein-verification-code=62edc601-f390-4b51-8fe1-633d7d7dc688\"", "\"OSSRH-65591\"", "\"1password-site-verification=NW6EHVDXOBE4DECEYO6SFW3CA4\"", "\"00D8a0000029GqY=1TBaZ0000000421\"", "\"docusign=c055da15-e3c9-4db0-a252-6a3cca891df0\"", "\"Data00DDn000002Hcby=1TBVw000000040P\"", "\"google-site-verification=BevMS2fc7jCoBPRH5SeRwBla2fZAIiAu7IYvDLUJXRk\"", "\"atlassian-domain-verification=RE/KY6RsT6DVcsykab8u5Pa1Xsl61oOWx68sVNcrcbegVJ1Ob0r8QnKRDOcYT9bL\"", "\"v=spf1 exists:%{i}.spf.hc2638-63.iphmx.com exists:%{i}.spf.hc2638-80.iphmx.com a:mta.email-nationwide.com ip4:66.231.80.72 include:res.cisco.com include:spf.protection.outlook.com ~all\"", "\"postman-domain-verification=5c025381270ef5a9e4819bbf95b5be95156365cd426621b26d358fe7041c8ea9\"", "\"openai-domain-verification=dv-HG5kxapzpkgB7QDobTZfKfpP\"", "\"apple-domain-verification=raGT6DOmqlElOPqZ\"", "\"00Ddp000001jnC5=1TBdp00000006LZ\"", "\"00D70000000N29U=1TBPc00000002uh\"", "\"docusign=1e14c7ce-c2a2-48be-8b10-d2c6cb7f6bcb\"", "\"00DG0000000kZdU=1TBWR00000004gL\"", "\"ZA=VzeDq4uIgQ3xEiy/SKAUAg==\"", "\"00D1U000000xmUk=1TBQU000000026f\"", "\"google-site-verification=5yNNisqv9iGwOhk5EsL-DifUfIec3kSCq4SgpALdkSI\"", "\"knowbe4-site-verification=2233e2f5e154c72fd920cee35d5cd753\"", "\"SFMC-IQaxOTyYoxFZoCrU6fENoJTnTG3TG56reVoL2MRJ\"", "\"facebook-domain-verification=nzusm3w9s42dgfwjsr62a6xfuz5ofg\"", "\"MS=ms77822681\"", "\"00D3x000001zzAZ=1TBVu00000003Qv\"", "\"00Ddq000002YdCH=1TBdq0000000X41\"", "\"pardot677263=af8f0a86c00f08be4e35b4731384fa0d8847ba709f2cb30b27cb5d51f578bbf1\"", "\"00DWF00000Beuml=1TBWF0000001AyD\"", "\"00DE0000000ZZVz=1TBV100000005Az\"", "\"SFMC-EvxSQZhB0Hxmqdte4M4DAbJYNag-CluneMWvzqAO\"", "\"pexip-portal-domain-verification=241a7f35-f550-40d2-a400-6c9de7766941\"", "\"00Ddo000002Iqrp=1TBdo00000005Sk\"", "\"SFMC-O1eyAlmzwjC9cd4vFCCfSWoNrP8_ZlwCoZm20VHc\"", "\"autodesk-domain-verification=2e3uIKkoxR15wmSVnxIR\"", "\"adobe-idp-site-verification=86ee327a-adff-4ade-9dc1-2b09877cce85\"", "\"onetrust-domain-verification=1b7f8cda1cf14095bf7658a0e73b1ef4\"", "\"pardot273512=27b7adbcc4c8bf5aa4d83128e8058fef4b72b87242448b9328d784f6033c3f7e\"", "\"_globalsign-domain-verification=BhXLcus_dNrPlz0mAzwh69CvymagoODy0Pvd7vcQFc\"", "\"smartsheet-site-validation=KbZGdAxugzHquR2EsN5nlUQ7DaEkgRuG\"", "\"infoblox-domain-mastery=7d6c603cd9860f597c95dcd4a680620b08108a3dd5c889dbb73e1acae816599342\"", "\"loop-domain-verification-1mrmfh=jdo6Hpviwgkw7worHCCOp08hE\"", "\"e2ma-verification=nxhib\"", "\"00D80000000KAXd=1TBPn00000009w9\"", "\"00Dbc000005beTR=1TBbc000000065R\"", "\"_9cl6s61h03r9q5e4vdjnwwhtla001m1\"", "\"jamf-site-verification=ILWC_0jwBr37H3TyRAm6QA\"", "\"pexip-ms-tenant-domain-verification=241a7f35-f550-40d2-a400-6c9de7766941\"", "\"google-site-verification=nKdJMTeaVSqFJIgMLqhhxPtNyZC0V4Xe0Jhmk6XIfSk\"", "\"00D30000000637L=1TBVw000000026f\"", "\"00DD50000001dy1=1TBD50000004C9i\"", "\"00DVa000005GEAc=1TBVa00000008C5\"", "\"docker-verification=cc6691fb-4579-4948-9609-dd58a496fe2f\"", "\"hover-domain-verification=veZJStVWdn\"" ], "NS": [ "a5-67.akam.net.", "a26-64.akam.net.", "a22-67.akam.net.", "a13-65.akam.net.", "a1-253.akam.net.", "a4-67.akam.net." ], "SOA": [ "a1-253.akam.net. ipadmin.nationwide.com. 4869 10800 3600 1209600 300" ], "CAA": [], "DS": [], "DNSKEY": [], "RRSIG": [], "NSEC": [], "NSEC3": [], "SRV": [], "NAPTR": [], "TLSA": [], "SSHFP": [] }, "ipv4": [ "23.213.186.196", "23.213.186.197" ], "ipv6": [] }, "mail": { "spf": "v=spf1 exists:%{i}.spf.hc2638-63.iphmx.com exists:%{i}.spf.hc2638-80.iphmx.com a:mta.email-nationwide.com ip4:66.231.80.72 include:res.cisco.com include:spf.protection.outlook.com ~all", "dmarc": "v=DMARC1;p=reject;fo=1;rua=mailto:dmarcrua@nationwide.com;ruf=mailto:dmarcruf@nationwide.com", "dkim_selector": "k2", "dkim_host": "k2._domainkey.nationwide.com", "dkim": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA0b90ObWaLDc+i9MtTNmGeWO009hr20fIxhGg6XBT2kjZ1DTThopSe1nAndsupmcBwlQ5Q6LJ+ZAxLcujnPIxM0ZBLmgpkv8u6RfY4eFP8OLvdAW3oSuB0DyLDigQX4Sj8wBO4YIdQH6AAmBeOsidsKAFNFUCpc3vCxtBDR12U+cBg724l3sBkMQ8evnz6idnqxq9QAVYh8k4kJ+RP+6cqTdy7LjIm8xY/bQNpQIpGUAuDo2DjLcCDun9DAI4Q/3z+Q0o9QuQIDAQAB;", "spf_analysis": { "valid": true, "lookups": 5, "final": "~all", "message": "Within the estimated limit" }, "dmarc_analysis": { "valid": true, "policy": "reject" }, "bimi": "", "mta_sts": "", "tls_rpt": "" }, "advanced": { "ptr": "a23-213-186-196.deploy.static.akamaitechnologies.com", "propagation": { "consistent": false, "results": [ { "provider": "Google", "server": "8.8.8.8", "result": [ "23.213.186.196", "23.213.186.197" ], "time_ms": 51.07 }, { "provider": "Cloudflare", "server": "1.1.1.1", "result": [ "23.213.186.196", "23.213.186.197" ], "time_ms": 59.7 }, { "provider": "Quad9", "server": "9.9.9.9", "result": [ "23.221.22.40", "23.221.22.46" ], "time_ms": 206.99 }, { "provider": "OpenDNS", "server": "208.67.222.222", "result": [ "23.213.186.196", "23.213.186.197" ], "time_ms": 55.49 }, { "provider": "AdGuard", "server": "94.140.14.14", "result": [ "23.198.214.73", "23.198.214.75" ], "time_ms": 62.79 } ] } }, "ssl": { "available": true, "issuer": "GlobalSign nv-sa", "subject": "www.nationwide.com", "valid_from": "2026-03-27T14:17:02-05:00", "valid_to": "2026-10-12T07:56:08-05:00", "days_remaining": 63, "san": [ "www.nationwide.com", "fin.nationwide.com", "fin.nwdotcom.publiccloud.nationwide.com", "nwdotcom.awspubliccloud.nationwide.com", "nwdotcom.publiccloud.nationwide.com", "www-ng.nationwide.com", "www-ng.nwdotcom.publiccloud.nationwide.com", "nationwide.com" ], "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384" }, "http": { "url": "https://www.nationwide.com/", "status": "HTTP/2 200 ", "http_version": "3", "headers": { "content-type": "text/html; charset=utf-8", "server": "Apache", "location": "https://www.nationwide.com/", "content-length": "251558", "expires": "Sun, 09 Aug 2026 17:20:37 GMT", "cache-control": "max-age=0, no-cache, no-store", "pragma": "no-cache", "date": "Sun, 09 Aug 2026 17:20:37 GMT", "referrer-policy": "Strict-Origin-When-Cross-Origin", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "x-xss-protection": "1; mode=block", "strict-transport-security": "max-age=31536000 ; includeSubDomains ; preload", "server-timing": "ak_p; desc=\"1786296036989_400021221_2564377483_5255_10319_7_47_15\";dur=1", "connection": "keep-alive", "set-cookie": "bm_sz=C71BFFD8B0194BA8B70F695F0C71CC3B~YAAQ5dbXF1/wM8yfAQAA7G6K5wCT8x0AIj9aMnVA9PVVX3zXA7MipIWix3xpXHO8vOthM1LhNiBsuU5QMe8Ixe8wYZRKzQbw+s4hKZN4hbuLwhwtXYwc0yUB9qxv4KodseHWqLaido9UhX2TezyoDQ4U23qB5zjkHeeddm/AwNOzM6KvzI5R3m+MSb1MFZ/Xf7lcMLISoIupymIPavoNVqvSElqM9PucagQ/2QyqQIgYVVvOaPtWkXQHmFr/6LcOu0OyKS8A+mFKsUNoQtxEC5t2z3uciGcX6k94Sub0kZT9xR07Ith8+Qgd5cv32enyvonLcNh/qr3eKboGM9SfOO8oGoydWdRJKP1Trlwa4nkQdTOPk76sxmYp0vYV~3223602~4272710; Domain=.nationwide.com; Path=/; Expires=Sun, 09 Aug 2026 21:20:37 GMT; Max-Age=14400", "x-powered-by": "Express", "x-correlation-id": "corr_1786296037060_1mpysjb0bvb", "x-request-id": "req_1786296037060_8pt4lbzj", "last-modified": "Fri, 10 Jul 2026 05:24:07 GMT", "surrogate-control": "max-age=300", "surrogate-key": "nwdotcom-ng pub-108 index", "link": "; rel=modulepreload; as=script, ; rel=modulepreload; as=script, ; rel=preload; as=style", "etag": "\"39f3088109995c6c3dd6c040934714cca685094740b74dfb8dfa7a9e171c428d\"", "vary": "Accept-Encoding" }, "security_checks": { "strict-transport-security": true, "content-security-policy": false, "x-content-type-options": true, "x-frame-options": true, "referrer-policy": true, "permissions-policy": false, "cross-origin-opener-policy": false, "cross-origin-embedder-policy": false, "cross-origin-resource-policy": false }, "server": "Apache", "powered_by": "Express" }, "webpage": { "url": "https://nationwide.com/", "title": "Access Denied", "description": "", "success": true, "error": "", "status": 403 }, "network": { "23.213.186.196": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" }, "23.213.186.197": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" } }, "smtp": { "host": "mx1.hc2638-63.iphmx.com", "ports": [ { "port": 25, "open": false, "time_ms": 25.7, "banner": "", "error": "Connection refused" }, { "port": 465, "open": false, "time_ms": 4031, "banner": "", "error": "Connection timed out" }, { "port": 587, "open": false, "time_ms": 4029.9, "banner": "", "error": "Connection timed out" } ] }, "visitor": { "ip": "216.73.217.62", "reverse": "", "country": "", "country_code": "", "region": "", "city": "", "latitude": null, "longitude": null, "isp": "", "organization": "", "asn": "", "timezone": "", "browser": "Other", "os": "Other", "language": "", "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "is_bot": true, "cloudflare": false }, "analysis_time_ms": 92.14 }