{ "companyId": "makers-088", "connection": { "hostname": "www.damen.com", "methodologyVersion": "5.0.0", "engineVersion": "1.11.6", "complete": true, "score": 80, "contribution": 16, "maximumContribution": 20, "categories": [ { "id": "siteipv6", "status": "passed", "percentage": 100, "maximumPoints": 22, "model": "DomainTestIpv6", "modelId": 88, "measuredAt": "2026-10-28T13:54:49.099Z", "nativeReport": { "ns_aaaa": { "name": "ns_aaaa", "label": "detail web-mail ipv6 ns-AAAA label", "status": 1, "worst_status": 0, "verdict": "detail web-mail ipv6 ns-AAAA verdict good", "exp": "detail web-mail ipv6 ns-AAAA exp", "tech_type": "table", "tech_string": "detail web-mail ipv6 ns-AAAA tech table", "tech_data": [ [ "ns1-01.azure-dns.com.", ["2603:1061:0:700::1"], ["13.107.236.1"] ], [ "ns2-01.azure-dns.net.", ["2620:1ec:8ec:700::1"], ["150.171.21.1"] ], [ "ns3-01.azure-dns.org.", ["2a01:111:4000:700::1"], ["204.14.183.1"] ], [ "ns4-01.azure-dns.info.", ["2620:1ec:bda:700::1"], ["208.84.5.1"] ] ], "override_mandatory": null }, "ns_reach": { "name": "ns_reach", "label": "detail web-mail ipv6 ns-reach label", "status": 1, "worst_status": 0, "verdict": "detail web-mail ipv6 ns-reach verdict good", "exp": "detail web-mail ipv6 ns-reach exp", "tech_type": "", "tech_string": "detail web-mail ipv6 ns-reach tech table", "tech_data": "detail tech data not-tested", "override_mandatory": null }, "web_aaaa": { "name": "web_aaaa", "label": "detail web ipv6 web-AAAA label", "status": 1, "worst_status": 0, "verdict": "detail web ipv6 web-AAAA verdict good", "exp": "detail web ipv6 web-AAAA exp", "tech_type": "table", "tech_string": "detail web ipv6 web-AAAA tech table", "tech_data": [ ["www.damen.com", ["2603:1061:14:22::1"], ["150.171.109.33"]] ], "override_mandatory": null }, "web_reach": { "name": "web_reach", "label": "detail web ipv6 web-reach label", "status": 1, "worst_status": 0, "verdict": "detail web ipv6 web-reach verdict good", "exp": "detail web ipv6 web-reach exp", "tech_type": "", "tech_string": "detail web ipv6 web-reach tech table", "tech_data": "detail tech data not-tested", "override_mandatory": null }, "web_ipv46": { "name": "web_ipv46", "label": "detail web ipv6 web-ipv46 label", "status": 1, "worst_status": 0, "verdict": "detail web ipv6 web-ipv46 verdict good", "exp": "detail web ipv6 web-ipv46 exp", "tech_type": "", "tech_string": "", "tech_data": "detail tech data not-tested", "override_mandatory": null } } }, { "id": "sitednssec", "status": "failed", "percentage": 20, "maximumPoints": 10, "model": "DomainTestDnssec", "modelId": 88, "measuredAt": "2026-10-28T13:54:55.487Z", "nativeReport": { "dnssec_exists": { "name": "dnssec_exists", "label": "detail web dnssec exists label", "status": 0, "worst_status": 0, "verdict": "detail web dnssec exists verdict bad", "exp": "detail web dnssec exists exp", "tech_type": "table", "tech_string": "detail web dnssec exists tech table", "tech_data": [["www.damen.com", "MarkMonitor Inc."]], "override_mandatory": null }, "dnssec_valid": { "name": "dnssec_valid", "label": "detail web dnssec valid label", "status": 4, "worst_status": 0, "verdict": "detail verdict not-tested", "exp": "detail web dnssec valid exp", "tech_type": "table", "tech_string": "detail web dnssec valid tech table", "tech_data": [["www.damen.com", "detail tech data insecure"]], "override_mandatory": null } } }, { "id": "sitetls", "status": "passed", "percentage": 100, "maximumPoints": 150, "model": "WebTestTls", "modelId": 89, "measuredAt": "2026-10-28T13:54:53.129Z", "nativeReport": { "https_exists": { "name": "https_exists", "label": "detail web tls https-exists label", "status": 1, "worst_status": 0, "verdict": "detail web tls https-exists verdict good", "exp": "detail web tls https-exists exp", "tech_type": "table", "tech_string": "detail web tls https-exists tech table", "tech_data": [ ["150.171.109.33", "detail tech data yes"], ["2603:1061:14:22::1", "detail tech data yes"] ], "override_mandatory": null }, "https_forced": { "name": "https_forced", "label": "detail web tls https-forced label", "status": 1, "worst_status": 0, "verdict": "detail web tls https-forced verdict good", "exp": "detail web tls https-forced exp", "tech_type": "table", "tech_string": "detail web tls https-forced tech table", "tech_data": [ ["150.171.109.33", "detail tech data yes"], ["2603:1061:14:22::1", "detail tech data yes"] ], "override_mandatory": null }, "https_hsts": { "name": "https_hsts", "label": "detail web tls https-hsts label", "status": 1, "worst_status": 0, "verdict": "detail web tls https-hsts verdict good", "exp": "detail web tls https-hsts exp", "tech_type": "table", "tech_string": "detail web tls https-hsts tech table", "tech_data": [ [ "150.171.109.33", ["max-age=31536000; includeSubDomains; preload"] ], [ "2603:1061:14:22::1", ["max-age=31536000; includeSubDomains; preload"] ] ], "override_mandatory": null }, "http_compression": { "name": "http_compression", "label": "detail web tls http-compression label", "status": 5, "worst_status": 5, "verdict": "detail web tls http-compression verdict bad", "exp": "detail web tls http-compression exp", "tech_type": "table", "tech_string": "detail web tls http-compression tech table", "tech_data": [ ["150.171.109.33", "detail tech data yes"], ["2603:1061:14:22::1", "detail tech data yes"] ], "override_mandatory": null }, "fs_params": { "name": "fs_params", "label": "detail web tls fs-params label", "status": 1, "worst_status": 0, "verdict": "detail web tls fs-params verdict good", "exp": "detail web tls fs-params exp", "tech_type": "table_multi_col", "tech_string": "detail web tls fs-params tech table", "tech_data": [ ["150.171.109.33", ""], ["2603:1061:14:22::1", ""] ], "override_mandatory": null }, "tls_ciphers": { "name": "tls_ciphers", "label": "detail web tls ciphers label", "status": 1, "worst_status": 0, "verdict": "detail web tls ciphers verdict good", "exp": "detail web tls ciphers exp", "tech_type": "table_multi_col", "tech_string": "detail web tls ciphers tech table", "tech_data": [ ["150.171.109.33", ""], ["2603:1061:14:22::1", ""] ], "override_mandatory": null }, "tls_cipher_order": { "name": "tls_cipher_order", "label": "detail web tls cipher-order label", "status": 1, "worst_status": 0, "verdict": "detail web tls cipher-order verdict good", "exp": "detail web tls cipher-order exp", "tech_type": "table_multi_col", "tech_string": "detail web tls cipher-order tech table", "tech_data": [ ["150.171.109.33", ""], ["2603:1061:14:22::1", ""] ], "override_mandatory": null }, "tls_version": { "name": "tls_version", "label": "detail web tls version label", "status": 1, "worst_status": 0, "verdict": "detail web tls version verdict good", "exp": "detail web tls version exp", "tech_type": "table_multi_col", "tech_string": "detail web tls version tech table", "tech_data": [ [ "150.171.109.33", ["TLS 1.3", "TLS 1.2"], ["detail tech data good", "detail tech data sufficient"] ], [ "2603:1061:14:22::1", ["TLS 1.3", "TLS 1.2"], ["detail tech data good", "detail tech data sufficient"] ] ], "override_mandatory": null }, "tls_compression": { "name": "tls_compression", "label": "detail web tls compression label", "status": 1, "worst_status": 0, "verdict": "detail web tls compression verdict good", "exp": "detail web tls compression exp", "tech_type": "table", "tech_string": "detail web tls compression tech table", "tech_data": [ ["150.171.109.33", "detail tech data no"], ["2603:1061:14:22::1", "detail tech data no"] ], "override_mandatory": null }, "renegotiation_secure": { "name": "renegotiation_secure", "label": "detail web tls renegotiation-secure label", "status": 1, "worst_status": 0, "verdict": "detail web tls renegotiation-secure verdict good", "exp": "detail web tls renegotiation-secure exp", "tech_type": "table", "tech_string": "detail web tls renegotiation-secure tech table", "tech_data": [ ["150.171.109.33", "detail tech data yes"], ["2603:1061:14:22::1", "detail tech data yes"] ], "override_mandatory": null }, "renegotiation_client": { "name": "renegotiation_client", "label": "detail web tls renegotiation-client label", "status": 1, "worst_status": 5, "verdict": "detail web tls renegotiation-client verdict not-allowed", "exp": "detail web tls renegotiation-client exp", "tech_type": "table_translatable", "tech_string": "detail web tls renegotiation-client tech table", "tech_data": [ [ "150.171.109.33", [ { "msgid": "detail tech data tls-renegotiation-client not-allowed", "context": {} } ] ], [ "2603:1061:14:22::1", [ { "msgid": "detail tech data tls-renegotiation-client not-allowed", "context": {} } ] ] ], "override_mandatory": null }, "cert_trust": { "name": "cert_trust", "label": "detail web tls cert-trust label", "status": 1, "worst_status": 0, "verdict": "detail web tls cert-trust verdict good", "exp": "detail web tls cert-trust exp", "tech_type": "table", "tech_string": "detail web tls cert-trust tech table", "tech_data": [ ["150.171.109.33", ""], ["2603:1061:14:22::1", ""] ], "override_mandatory": null }, "cert_pubkey": { "name": "cert_pubkey", "label": "detail web tls cert-pubkey label", "status": 2, "worst_status": 0, "verdict": "detail web tls cert-pubkey verdict phase-out", "exp": "detail web tls cert-pubkey exp", "tech_type": "table", "tech_string": "detail web tls cert-pubkey tech table", "tech_data": [ [ "150.171.109.33", [ "*.damen.com: RSAPublicKey-2048", "detail tech data phase-out", "GeoTrust TLS RSA CA G1: RSAPublicKey-2048", "detail tech data phase-out" ] ], [ "2603:1061:14:22::1", [ "*.damen.com: RSAPublicKey-2048", "detail tech data phase-out", "GeoTrust TLS RSA CA G1: RSAPublicKey-2048", "detail tech data phase-out" ] ] ], "override_mandatory": null }, "cert_signature": { "name": "cert_signature", "label": "detail web tls cert-signature label", "status": 1, "worst_status": 0, "verdict": "detail web tls cert-signature verdict good", "exp": "detail web tls cert-signature exp", "tech_type": "table_multi_col", "tech_string": "detail web tls cert-signature tech table", "tech_data": [ ["150.171.109.33", ""], ["2603:1061:14:22::1", ""] ], "override_mandatory": null }, "cert_hostmatch": { "name": "cert_hostmatch", "label": "detail web tls cert-hostmatch label", "status": 1, "worst_status": 0, "verdict": "detail web tls cert-hostmatch verdict good", "exp": "detail web tls cert-hostmatch exp", "tech_type": "table", "tech_string": "detail web tls cert-hostmatch tech table", "tech_data": [ ["150.171.109.33", ""], ["2603:1061:14:22::1", ""] ], "override_mandatory": null }, "web_caa": { "name": "web_caa", "label": "detail web tls caa label", "status": 2, "worst_status": 2, "verdict": "detail web tls caa verdict bad", "exp": "detail web tls caa exp", "tech_type": "table_translatable", "tech_string": "detail web tls caa tech table", "tech_data": [ [{ "msgid": "detail tech data caa not-found", "context": {} }], [ { "msgid": "detail tech data caa missing-required-property-issue", "context": { "property_tag": "issue" } } ] ], "override_mandatory": null }, "dane_exists": { "name": "dane_exists", "label": "detail web tls dane-exists label", "status": 5, "worst_status": 5, "verdict": "detail web tls dane-exists verdict bad", "exp": "detail web tls dane-exists exp", "tech_type": "table", "tech_string": "detail web tls dane-exists tech table", "tech_data": [ ["150.171.109.33", "detail tech data no"], ["2603:1061:14:22::1", "detail tech data no"] ], "override_mandatory": null }, "dane_valid": { "name": "dane_valid", "label": "detail web tls dane-valid label", "status": 4, "worst_status": 2, "verdict": "detail verdict not-tested", "exp": "detail web tls dane-valid exp", "tech_type": "table", "tech_string": "detail web tls dane-valid tech table", "tech_data": [ ["150.171.109.33", "detail tech data not-tested"], ["2603:1061:14:22::1", "detail tech data not-tested"] ], "override_mandatory": null }, "zero_rtt": { "name": "zero_rtt", "label": "detail web tls zero-rtt label", "status": 1, "worst_status": 0, "verdict": "detail web tls zero-rtt verdict good", "exp": "detail web tls zero-rtt exp", "tech_type": "table", "tech_string": "detail web tls zero-rtt tech table", "tech_data": [ ["150.171.109.33", "detail tech data no"], ["2603:1061:14:22::1", "detail tech data no"] ], "override_mandatory": null }, "ocsp_stapling": { "name": "ocsp_stapling", "label": "detail web tls ocsp-stapling label", "status": 5, "worst_status": 2, "verdict": "detail web tls ocsp-stapling verdict ok", "exp": "detail web tls ocsp-stapling exp", "tech_type": "table", "tech_string": "detail web tls ocsp-stapling tech table", "tech_data": [ ["150.171.109.33", "detail tech data yes"], ["2603:1061:14:22::1", "detail tech data no"] ], "override_mandatory": null }, "kex_hash_func": { "name": "kex_hash_func", "label": "detail web tls kex-hash-func label", "status": 2, "worst_status": 0, "verdict": "detail web tls kex-hash-func verdict phase-out", "exp": "detail web tls kex-hash-func exp", "tech_type": "table", "tech_string": "detail web tls kex-hash-func tech table", "tech_data": [ ["150.171.109.33", "SHA224"], ["2603:1061:14:22::1", "SHA224"] ], "override_mandatory": null }, "extended_master_secret": { "name": "extended_master_secret", "label": "detail web tls extended-master-secret label", "status": 1, "worst_status": 0, "verdict": "detail web tls extended-master-secret verdict good", "exp": "detail web tls extended-master-secret exp", "tech_type": "table", "tech_string": "detail web tls extended-master-secret tech table", "tech_data": [ ["150.171.109.33", "detail tech data yes"], ["2603:1061:14:22::1", "detail tech data yes"] ], "override_mandatory": null } } }, { "id": "siteappsecpriv", "status": "warning", "percentage": 0, "maximumPoints": 0, "model": "WebTestAppsecpriv", "modelId": 88, "measuredAt": "2026-10-28T13:54:57.143Z", "nativeReport": { "http_x_frame": { "name": "http_x_frame", "label": "detail web appsecpriv http-x-frame label", "status": 1, "worst_status": 5, "verdict": "detail web appsecpriv http-x-frame verdict good", "exp": "detail web appsecpriv http-x-frame exp", "tech_type": "table", "tech_string": "detail web appsecpriv http-x-frame tech table", "tech_data": [ ["150.171.109.33", ["sameorigin"]], ["2603:1061:14:22::1", ["sameorigin"]] ], "override_mandatory": null }, "http_referrer_policy": { "name": "http_referrer_policy", "label": "detail web appsecpriv http-referrer-policy label", "status": 5, "worst_status": 2, "verdict": "detail web appsecpriv http-referrer-policy verdict recommendations", "exp": "detail web appsecpriv http-referrer-policy exp", "tech_type": "table_translatable", "tech_string": "detail web appsecpriv http-referrer-policy tech table", "tech_data": [ [ "150.171.109.33", [ { "msgid": "detail tech data http-referrer-policy values", "context": { "values": ["strict-origin-when-cross-origin"] } }, { "msgid": "detail tech data http-referrer-policy recommendation-strict-origin-when-cross-origin", "context": {} } ] ], [ "2603:1061:14:22::1", [ { "msgid": "detail tech data http-referrer-policy values", "context": { "values": ["strict-origin-when-cross-origin"] } }, { "msgid": "detail tech data http-referrer-policy recommendation-strict-origin-when-cross-origin", "context": {} } ] ] ], "override_mandatory": null }, "http_csp": { "name": "http_csp", "label": "detail web appsecpriv http-csp label", "status": 2, "worst_status": 2, "verdict": "detail web appsecpriv http-csp verdict bad", "exp": "detail web appsecpriv http-csp exp", "tech_type": "table_translatable", "tech_string": "detail web appsecpriv http-csp tech table", "tech_data": [ [ "150.171.109.33", [ { "msgid": "detail tech data http-csp policy-found", "context": { "policy": [ "child-src blob:; connect-src 'self' insights.algolia.io insights.de.algolia.io dc.services.visualstudio.com/v2/track westeurope-4.in.applicationinsights.azure.com medialibrary.damen.com bat.bing.com bat.bing.net *.clarity.ms consent.cookie-script.com www.facebook.com *.google-analytics.com *.g.doubleclick.net *.analytics.google.com *.googletagmanager.com *.google.com sst.damen.com dxp-prd-gtm-sst-preview-damen.azurewebsites.net www.googleadservices.com ad.doubleclick.net *.doubleclick.net googleads.g.doubleclick.net *.hotjar.com:* vc.hotjar.io:* surveystats.hotjar.io wss://*.hotjar.com cs.lf-discover.com *.licdn.com *.linkedin.com *.orib.io *.tiles.mapbox.com api.mapbox.com events.mapbox.com recaptcha.net pixel-config.reddit.com gapi.storyblok.com/v1/api app.storyblok.com app.storyblok.com/f/storyblok-latest.js t.co analytics.twitter.com player.vimeo.com/api/player.js player.vimeo.com blob:; default-src 'self' *.lfeeder.com *.leadfeeder.com; font-src 'self' fonts.gstatic.com tagmanager.google.com script.hotjar.com; frame-src www.facebook.com/tr bid.g.doubleclick.net td.doubleclick.net *.googletagmanager.com sst.damen.com vars.hotjar.com www.linkedin.com go.damen.com go.damenmc.com recaptcha.net player.vimeo.com www.youtube-nocookie.com www.youtube.com eu.research.net nl.eu.research.net virtualtours.damen.com; img-src 'self' medialibrary.damen.com bat.bing.com bat.bing.net c.bing.com *.clarity.ms www.facebook.com *.google.nl *.google.com *.googletagmanager.com *.google-analytics.com www.google-analytics.com/collect ssl.gstatic.com www.gstatic.com *.analytics.google.com *.g.doubleclick.net maps.googleapis.com script.hotjar.com *.lfeeder.com *.leadfeeder.com *.linkedin.com *.licdn.com p.adsymptotic.com data: blob: alb.reddit.com pixel-config.reddit.com a.storyblok.com t.co analytics.twitter.com; media-src blob: medialibrary.damen.com; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com *.licdn.com app.storyblok.com app.storyblok.com/f/blokeditor.css; script-src 'self' 'nonce-720a17759e7440a6b40383d2511afd25' cdn.jsdelivr.net/npm/search-insights@2.17.2/dist/search-insights.min.js bat.bing.com bat.bing.net *.clarity.ms *.cookie-script.com connect.facebook.net/en_US/fbevents.js connect.facebook.net tagmanager.google.com *.googletagmanager.com www.gstatic.com www.google-analytics.com ssl.google-analytics.com www.recaptcha.net www.googleadservices.com www.google.com googleads.g.doubleclick.net sst.damen.com dxp-prd-gtm-sst-preview-damen.azurewebsites.net https://pagead2.googlesyndication.com static.hotjar.com script.hotjar.com *.lfeeder.com *.leadfeeder.com snap.licdn.com static-exp1.licdn.com content.linkedin.com platform.linkedin.com pi.pardot.com go.damen.com go.damenmc.com recaptcha.net/recaptcha/api.js www.redditstatic.com app.storyblok.com app.storyblok.com/f/storyblok-latest.js player.vimeo.com/api/player.js player.vimeo.com; worker-src blob:; object-src blob:; form-action www.facebook.com/tr; frame-ancestors app.storyblok.com" ] } }, { "msgid": "detail tech data http-csp has-unsafe-inline", "context": {} }, { "msgid": "detail tech data http-csp has-host-without-scheme", "context": {} }, { "msgid": "detail tech data http-csp missing-invalid-default-src", "context": {} }, { "msgid": "detail tech data http-csp missing-invalid-frame-ancestors", "context": {} }, { "msgid": "detail tech data http-csp missing-invalid-base-uri", "context": {} } ] ], [ "2603:1061:14:22::1", [ { "msgid": "detail tech data http-csp policy-found", "context": { "policy": [ "child-src blob:; connect-src 'self' insights.algolia.io insights.de.algolia.io dc.services.visualstudio.com/v2/track westeurope-4.in.applicationinsights.azure.com medialibrary.damen.com bat.bing.com bat.bing.net *.clarity.ms consent.cookie-script.com www.facebook.com *.google-analytics.com *.g.doubleclick.net *.analytics.google.com *.googletagmanager.com *.google.com sst.damen.com dxp-prd-gtm-sst-preview-damen.azurewebsites.net www.googleadservices.com ad.doubleclick.net *.doubleclick.net googleads.g.doubleclick.net *.hotjar.com:* vc.hotjar.io:* surveystats.hotjar.io wss://*.hotjar.com cs.lf-discover.com *.licdn.com *.linkedin.com *.orib.io *.tiles.mapbox.com api.mapbox.com events.mapbox.com recaptcha.net pixel-config.reddit.com gapi.storyblok.com/v1/api app.storyblok.com app.storyblok.com/f/storyblok-latest.js t.co analytics.twitter.com player.vimeo.com/api/player.js player.vimeo.com blob:; default-src 'self' *.lfeeder.com *.leadfeeder.com; font-src 'self' fonts.gstatic.com tagmanager.google.com script.hotjar.com; frame-src www.facebook.com/tr bid.g.doubleclick.net td.doubleclick.net *.googletagmanager.com sst.damen.com vars.hotjar.com www.linkedin.com go.damen.com go.damenmc.com recaptcha.net player.vimeo.com www.youtube-nocookie.com www.youtube.com eu.research.net nl.eu.research.net virtualtours.damen.com; img-src 'self' medialibrary.damen.com bat.bing.com bat.bing.net c.bing.com *.clarity.ms www.facebook.com *.google.nl *.google.com *.googletagmanager.com *.google-analytics.com www.google-analytics.com/collect ssl.gstatic.com www.gstatic.com *.analytics.google.com *.g.doubleclick.net maps.googleapis.com script.hotjar.com *.lfeeder.com *.leadfeeder.com *.linkedin.com *.licdn.com p.adsymptotic.com data: blob: alb.reddit.com pixel-config.reddit.com a.storyblok.com t.co analytics.twitter.com; media-src blob: medialibrary.damen.com; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com *.licdn.com app.storyblok.com app.storyblok.com/f/blokeditor.css; script-src 'self' 'nonce-720a17759e7440a6b40383d2511afd25' cdn.jsdelivr.net/npm/search-insights@2.17.2/dist/search-insights.min.js bat.bing.com bat.bing.net *.clarity.ms *.cookie-script.com connect.facebook.net/en_US/fbevents.js connect.facebook.net tagmanager.google.com *.googletagmanager.com www.gstatic.com www.google-analytics.com ssl.google-analytics.com www.recaptcha.net www.googleadservices.com www.google.com googleads.g.doubleclick.net sst.damen.com dxp-prd-gtm-sst-preview-damen.azurewebsites.net https://pagead2.googlesyndication.com static.hotjar.com script.hotjar.com *.lfeeder.com *.leadfeeder.com snap.licdn.com static-exp1.licdn.com content.linkedin.com platform.linkedin.com pi.pardot.com go.damen.com go.damenmc.com recaptcha.net/recaptcha/api.js www.redditstatic.com app.storyblok.com app.storyblok.com/f/storyblok-latest.js player.vimeo.com/api/player.js player.vimeo.com; worker-src blob:; object-src blob:; form-action www.facebook.com/tr; frame-ancestors app.storyblok.com" ] } }, { "msgid": "detail tech data http-csp has-unsafe-inline", "context": {} }, { "msgid": "detail tech data http-csp has-host-without-scheme", "context": {} }, { "msgid": "detail tech data http-csp missing-invalid-default-src", "context": {} }, { "msgid": "detail tech data http-csp missing-invalid-frame-ancestors", "context": {} }, { "msgid": "detail tech data http-csp missing-invalid-base-uri", "context": {} } ] ] ], "override_mandatory": null }, "http_x_content_type": { "name": "http_x_content_type", "label": "detail web appsecpriv http-x-content-type label", "status": 1, "worst_status": 2, "verdict": "detail web appsecpriv http-x-content-type verdict good", "exp": "detail web appsecpriv http-x-content-type exp", "tech_type": "table", "tech_string": "detail web appsecpriv http-x-content-type tech table", "tech_data": [ ["150.171.109.33", ["nosniff"]], ["2603:1061:14:22::1", ["nosniff"]] ], "override_mandatory": null }, "http_securitytxt": { "name": "http_securitytxt", "label": "detail web appsecpriv http-securitytxt label", "status": 2, "worst_status": 2, "verdict": "detail web appsecpriv http-securitytxt verdict bad", "exp": "detail web appsecpriv http-securitytxt exp", "tech_type": "table_translatable", "tech_string": "detail web appsecpriv http-securitytxt tech table", "tech_data": [ [ "150.171.109.33", [ { "msgid": "detail tech data http-securitytxt retrieved-from", "context": { "hostname": "www.damen.com" } }, { "msgid": "detail tech data http-securitytxt no_line_separators", "context": { "line_no": 3 } }, { "msgid": "detail tech data http-securitytxt long_expiry", "context": { "line_no": 2 } }, { "msgid": "detail tech data http-securitytxt no_encryption", "context": { "line_no": null } }, { "msgid": "detail tech data http-securitytxt not_signed", "context": { "line_no": null } } ] ], [ "2603:1061:14:22::1", [ { "msgid": "detail tech data http-securitytxt retrieved-from", "context": { "hostname": "www.damen.com" } }, { "msgid": "detail tech data http-securitytxt no_line_separators", "context": { "line_no": 3 } }, { "msgid": "detail tech data http-securitytxt long_expiry", "context": { "line_no": 2 } }, { "msgid": "detail tech data http-securitytxt no_encryption", "context": { "line_no": null } }, { "msgid": "detail tech data http-securitytxt not_signed", "context": { "line_no": null } } ] ] ], "override_mandatory": null } } }, { "id": "siterpki", "status": "passed", "percentage": 100, "maximumPoints": 30, "model": "WebTestRpki", "modelId": 87, "measuredAt": "2026-10-28T14:13:33.842Z", "nativeReport": { "web_rpki_exists": { "name": "web_rpki_exists", "label": "detail web rpki exists label", "status": 1, "worst_status": 0, "verdict": "detail web rpki exists verdict good", "exp": "detail web rpki exists exp", "tech_type": "table_multi_col", "tech_string": "detail web rpki exists tech table", "tech_data": [ ["www.damen.com", "150.171.109.33", "detail tech data yes"], ["...", "2603:1061:14:21::1", "detail tech data yes"] ], "override_mandatory": false }, "web_rpki_valid": { "name": "web_rpki_valid", "label": "detail web rpki valid label", "status": 1, "worst_status": 0, "verdict": "detail web rpki valid verdict good", "exp": "detail web rpki valid exp", "tech_type": "table", "tech_string": "detail web rpki valid tech table", "tech_data": [ ["www.damen.com", "150.171.0.0/16", "AS8075", "valid"], ["...", "2603:1000::/25", "AS8075", "valid"] ], "override_mandatory": false }, "ns_rpki_exists": { "name": "ns_rpki_exists", "label": "detail web-mail rpki ns-exists label", "status": 1, "worst_status": 0, "verdict": "detail web-mail rpki ns-exists verdict good", "exp": "detail web-mail rpki ns-exists exp", "tech_type": "table_multi_col", "tech_string": "detail web-mail rpki ns-exists tech table", "tech_data": [ ["ns1-01.azure-dns.com.", "13.107.236.1", "detail tech data yes"], ["...", "2603:1061:0:700::1", "detail tech data yes"], ["ns2-01.azure-dns.net.", "150.171.21.1", "detail tech data yes"], ["...", "2620:1ec:8ec:700::1", "detail tech data yes"], ["ns3-01.azure-dns.org.", "204.14.183.1", "detail tech data yes"], ["...", "2a01:111:4000:700::1", "detail tech data yes"], ["ns4-01.azure-dns.info.", "208.84.5.1", "detail tech data yes"], ["...", "2620:1ec:bda:700::1", "detail tech data yes"] ], "override_mandatory": false }, "ns_rpki_valid": { "name": "ns_rpki_valid", "label": "detail web-mail rpki ns-valid label", "status": 1, "worst_status": 0, "verdict": "detail web-mail rpki ns-valid verdict good", "exp": "detail web-mail rpki ns-valid exp", "tech_type": "table", "tech_string": "detail web-mail rpki ns-valid tech table", "tech_data": [ ["ns1-01.azure-dns.com.", "13.104.0.0/14", "AS8075", "valid"], ["...", "2603:1000::/25", "AS8075", "valid"], ["ns2-01.azure-dns.net.", "150.171.0.0/16", "AS8075", "valid"], ["...", "2620:1ec::/36", "AS8075", "valid"], ["ns3-01.azure-dns.org.", "204.14.180.0/22", "AS8075", "valid"], ["...", "2a01:111:4000::/36", "AS8075", "valid"], ["ns4-01.azure-dns.info.", "208.84.0.0/21", "AS8075", "valid"], ["...", "2620:1ec::/36", "AS8075", "valid"] ], "override_mandatory": false } } } ], "subtests": [ { "key": "ns_aaaa", "category": "siteipv6", "status": "passed", "title": "IPv6 addresses for name servers", "verdict": "Two or more name servers of your domain have an IPv6 address.", "technical": [ ["ns1-01.azure-dns.com.", ["2603:1061:0:700::1"], ["13.107.236.1"]], ["ns2-01.azure-dns.net.", ["2620:1ec:8ec:700::1"], ["150.171.21.1"]], ["ns3-01.azure-dns.org.", ["2a01:111:4000:700::1"], ["204.14.183.1"]], ["ns4-01.azure-dns.info.", ["2620:1ec:bda:700::1"], ["208.84.5.1"]] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "ns_reach", "category": "siteipv6", "status": "passed", "title": "IPv6 reachability of name servers", "verdict": "All name servers that have an IPv6 address are reachable over IPv6.", "technical": "detail tech data not-tested", "worstStatus": "failed", "overrideMandatory": null }, { "key": "web_aaaa", "category": "siteipv6", "status": "passed", "title": "IPv6 addresses for web server", "verdict": "At least one of your web servers has an IPv6 address.", "technical": [ ["www.damen.com", ["2603:1061:14:22::1"], ["150.171.109.33"]] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "web_reach", "category": "siteipv6", "status": "passed", "title": "IPv6 reachability of web server", "verdict": "All your web servers with an IPv6 address are reachable over IPv6.", "technical": "detail tech data not-tested", "worstStatus": "failed", "overrideMandatory": null }, { "key": "web_ipv46", "category": "siteipv6", "status": "passed", "title": "Same website on IPv6 and IPv4", "verdict": "Your website via IPv6 looks identical via IPv4.", "technical": "detail tech data not-tested", "worstStatus": "failed", "overrideMandatory": null }, { "key": "dnssec_exists", "category": "sitednssec", "status": "failed", "title": "DNSSEC existence", "verdict": "Your domain is insecure, because it is not DNSSEC signed.", "technical": [["www.damen.com", "MarkMonitor Inc."]], "worstStatus": "failed", "overrideMandatory": null }, { "key": "dnssec_valid", "category": "sitednssec", "status": "not-tested", "title": "DNSSEC validity", "verdict": "This subtest did not run, because either a parent test that this subtest depends on gave a negative result, or not enough information was available to run this subtest.", "technical": [["www.damen.com", "detail tech data insecure"]], "worstStatus": "failed", "overrideMandatory": null }, { "key": "https_exists", "category": "sitetls", "status": "passed", "title": "HTTPS available", "verdict": "Your website is reachable over HTTPS.", "technical": [ ["150.171.109.33", "detail tech data yes"], ["2603:1061:14:22::1", "detail tech data yes"] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "https_forced", "category": "sitetls", "status": "passed", "title": "HTTPS redirect", "verdict": "Your web server automatically redirects visitors from HTTP to HTTPS on the same domain.", "technical": [ ["150.171.109.33", "detail tech data yes"], ["2603:1061:14:22::1", "detail tech data yes"] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "https_hsts", "category": "sitetls", "status": "passed", "title": "HSTS", "verdict": "Your web server offers an HSTS policy.", "technical": [ ["150.171.109.33", ["max-age=31536000; includeSubDomains; preload"]], [ "2603:1061:14:22::1", ["max-age=31536000; includeSubDomains; preload"] ] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "http_compression", "category": "sitetls", "status": "info", "title": "HTTP compression", "verdict": "Your web server supports HTTP compression, which could be a security risk.", "technical": [ ["150.171.109.33", "detail tech data yes"], ["2603:1061:14:22::1", "detail tech data yes"] ], "worstStatus": "info", "overrideMandatory": null }, { "key": "fs_params", "category": "sitetls", "status": "passed", "title": "Parameters for key exchange", "verdict": "Your web server supports secure parameters for Diffie-Hellman key exchange.", "technical": [ ["150.171.109.33", ""], ["2603:1061:14:22::1", ""] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "tls_ciphers", "category": "sitetls", "status": "passed", "title": "Cipher suites", "verdict": "Your web server supports secure cipher suites only.", "technical": [ ["150.171.109.33", ""], ["2603:1061:14:22::1", ""] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "tls_cipher_order", "category": "sitetls", "status": "passed", "title": "Cipher suite order", "verdict": "Your web server enforces its own preference for cipher suites in descending order of their security level.", "technical": [ ["150.171.109.33", ""], ["2603:1061:14:22::1", ""] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "tls_version", "category": "sitetls", "status": "passed", "title": "TLS version", "verdict": "Your web server supports secure TLS versions only.", "technical": [ [ "150.171.109.33", ["TLS 1.3", "TLS 1.2"], ["detail tech data good", "detail tech data sufficient"] ], [ "2603:1061:14:22::1", ["TLS 1.3", "TLS 1.2"], ["detail tech data good", "detail tech data sufficient"] ] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "tls_compression", "category": "sitetls", "status": "passed", "title": "TLS compression", "verdict": "Your web server does not support TLS compression.", "technical": [ ["150.171.109.33", "detail tech data no"], ["2603:1061:14:22::1", "detail tech data no"] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "renegotiation_secure", "category": "sitetls", "status": "passed", "title": "Secure renegotiation", "verdict": "Your web server supports secure renegotiation.", "technical": [ ["150.171.109.33", "detail tech data yes"], ["2603:1061:14:22::1", "detail tech data yes"] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "renegotiation_client", "category": "sitetls", "status": "passed", "title": "Client-initiated renegotiation", "verdict": "Your web server does not allow client-initiated renegotiation.", "technical": [ [ "150.171.109.33", [ { "msgid": "detail tech data tls-renegotiation-client not-allowed", "context": {} } ] ], [ "2603:1061:14:22::1", [ { "msgid": "detail tech data tls-renegotiation-client not-allowed", "context": {} } ] ] ], "worstStatus": "info", "overrideMandatory": null }, { "key": "cert_trust", "category": "sitetls", "status": "passed", "title": "Trust chain of certificate", "verdict": "The trust chain of your website certificate is complete and signed by a trusted root certificate authority.", "technical": [ ["150.171.109.33", ""], ["2603:1061:14:22::1", ""] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "cert_pubkey", "category": "sitetls", "status": "warning", "title": "Public key of certificate", "verdict": "The public key of your website certificate is based on a signing algorithm with parameters that should be phased out as they are weaker, although you might still use them if absolutely needed. In a future update, they will likely become insufficient.", "technical": [ [ "150.171.109.33", [ "*.damen.com: RSAPublicKey-2048", "detail tech data phase-out", "GeoTrust TLS RSA CA G1: RSAPublicKey-2048", "detail tech data phase-out" ] ], [ "2603:1061:14:22::1", [ "*.damen.com: RSAPublicKey-2048", "detail tech data phase-out", "GeoTrust TLS RSA CA G1: RSAPublicKey-2048", "detail tech data phase-out" ] ] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "cert_signature", "category": "sitetls", "status": "passed", "title": "Signature on certificate", "verdict": "Your website certificate is signed using a secure signing algorithm and hash function.", "technical": [ ["150.171.109.33", ""], ["2603:1061:14:22::1", ""] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "cert_hostmatch", "category": "sitetls", "status": "passed", "title": "Domain name on certificate", "verdict": "The domain name of your website matches the domain name on your website certificate.", "technical": [ ["150.171.109.33", ""], ["2603:1061:14:22::1", ""] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "web_caa", "category": "sitetls", "status": "warning", "title": "CAA for domain", "verdict": "Your domain does not have CAA.", "technical": [ [{ "msgid": "detail tech data caa not-found", "context": {} }], [ { "msgid": "detail tech data caa missing-required-property-issue", "context": { "property_tag": "issue" } } ] ], "worstStatus": "warning", "overrideMandatory": null }, { "key": "dane_exists", "category": "sitetls", "status": "info", "title": "DANE existence", "verdict": "Your website domain does not contain a TLSA record for DANE.", "technical": [ ["150.171.109.33", "detail tech data no"], ["2603:1061:14:22::1", "detail tech data no"] ], "worstStatus": "info", "overrideMandatory": null }, { "key": "dane_valid", "category": "sitetls", "status": "not-tested", "title": "DANE validity", "verdict": "This subtest did not run, because either a parent test that this subtest depends on gave a negative result, or not enough information was available to run this subtest.", "technical": [ ["150.171.109.33", "detail tech data not-tested"], ["2603:1061:14:22::1", "detail tech data not-tested"] ], "worstStatus": "warning", "overrideMandatory": null }, { "key": "zero_rtt", "category": "sitetls", "status": "passed", "title": "0-RTT", "verdict": "Your web server does not support 0-RTT.", "technical": [ ["150.171.109.33", "detail tech data no"], ["2603:1061:14:22::1", "detail tech data no"] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "ocsp_stapling", "category": "sitetls", "status": "info", "title": "OCSP stapling", "verdict": "Your web server does not support OCSP stapling, although your website certificate has an OCSP pointer.", "technical": [ ["150.171.109.33", "detail tech data yes"], ["2603:1061:14:22::1", "detail tech data no"] ], "worstStatus": "warning", "overrideMandatory": null }, { "key": "kex_hash_func", "category": "sitetls", "status": "warning", "title": "Hash function for key exchange", "verdict": "Your web server supports a hash function for key exchange that should be phased out as it is weaker, although you might still use it if absolutely needed. In a future update, it will likely become insufficient.", "technical": [ ["150.171.109.33", "SHA224"], ["2603:1061:14:22::1", "SHA224"] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "extended_master_secret", "category": "sitetls", "status": "passed", "title": "Extended Master Secret (EMS)", "verdict": "Your web server supports EMS.", "technical": [ ["150.171.109.33", "detail tech data yes"], ["2603:1061:14:22::1", "detail tech data yes"] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "http_x_frame", "category": "siteappsecpriv", "status": "passed", "title": "X-Frame-Options", "verdict": "Your web server offers securely configured X-Frame-Options.", "technical": [ ["150.171.109.33", ["sameorigin"]], ["2603:1061:14:22::1", ["sameorigin"]] ], "worstStatus": "info", "overrideMandatory": null }, { "key": "http_referrer_policy", "category": "siteappsecpriv", "status": "info", "title": "Referrer-Policy", "verdict": "Your web server either does not offer a Referrer-Policy and thus relies on the default browser policy, or your web server offers a Referrer-Policy with a policy value that should be used with caution because of its potential impact on security and privacy.", "technical": [ [ "150.171.109.33", [ { "msgid": "detail tech data http-referrer-policy values", "context": { "values": ["strict-origin-when-cross-origin"] } }, { "msgid": "detail tech data http-referrer-policy recommendation-strict-origin-when-cross-origin", "context": {} } ] ], [ "2603:1061:14:22::1", [ { "msgid": "detail tech data http-referrer-policy values", "context": { "values": ["strict-origin-when-cross-origin"] } }, { "msgid": "detail tech data http-referrer-policy recommendation-strict-origin-when-cross-origin", "context": {} } ] ] ], "worstStatus": "warning", "overrideMandatory": null }, { "key": "http_csp", "category": "siteappsecpriv", "status": "warning", "title": "Content-Security-Policy", "verdict": "Your web server does not offer Content-Security-Policy (CSP), or does offer CSP with certain insecure settings.", "technical": [ [ "150.171.109.33", [ { "msgid": "detail tech data http-csp policy-found", "context": { "policy": [ "child-src blob:; connect-src 'self' insights.algolia.io insights.de.algolia.io dc.services.visualstudio.com/v2/track westeurope-4.in.applicationinsights.azure.com medialibrary.damen.com bat.bing.com bat.bing.net *.clarity.ms consent.cookie-script.com www.facebook.com *.google-analytics.com *.g.doubleclick.net *.analytics.google.com *.googletagmanager.com *.google.com sst.damen.com dxp-prd-gtm-sst-preview-damen.azurewebsites.net www.googleadservices.com ad.doubleclick.net *.doubleclick.net googleads.g.doubleclick.net *.hotjar.com:* vc.hotjar.io:* surveystats.hotjar.io wss://*.hotjar.com cs.lf-discover.com *.licdn.com *.linkedin.com *.orib.io *.tiles.mapbox.com api.mapbox.com events.mapbox.com recaptcha.net pixel-config.reddit.com gapi.storyblok.com/v1/api app.storyblok.com app.storyblok.com/f/storyblok-latest.js t.co analytics.twitter.com player.vimeo.com/api/player.js player.vimeo.com blob:; default-src 'self' *.lfeeder.com *.leadfeeder.com; font-src 'self' fonts.gstatic.com tagmanager.google.com script.hotjar.com; frame-src www.facebook.com/tr bid.g.doubleclick.net td.doubleclick.net *.googletagmanager.com sst.damen.com vars.hotjar.com www.linkedin.com go.damen.com go.damenmc.com recaptcha.net player.vimeo.com www.youtube-nocookie.com www.youtube.com eu.research.net nl.eu.research.net virtualtours.damen.com; img-src 'self' medialibrary.damen.com bat.bing.com bat.bing.net c.bing.com *.clarity.ms www.facebook.com *.google.nl *.google.com *.googletagmanager.com *.google-analytics.com www.google-analytics.com/collect ssl.gstatic.com www.gstatic.com *.analytics.google.com *.g.doubleclick.net maps.googleapis.com script.hotjar.com *.lfeeder.com *.leadfeeder.com *.linkedin.com *.licdn.com p.adsymptotic.com data: blob: alb.reddit.com pixel-config.reddit.com a.storyblok.com t.co analytics.twitter.com; media-src blob: medialibrary.damen.com; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com *.licdn.com app.storyblok.com app.storyblok.com/f/blokeditor.css; script-src 'self' 'nonce-720a17759e7440a6b40383d2511afd25' cdn.jsdelivr.net/npm/search-insights@2.17.2/dist/search-insights.min.js bat.bing.com bat.bing.net *.clarity.ms *.cookie-script.com connect.facebook.net/en_US/fbevents.js connect.facebook.net tagmanager.google.com *.googletagmanager.com www.gstatic.com www.google-analytics.com ssl.google-analytics.com www.recaptcha.net www.googleadservices.com www.google.com googleads.g.doubleclick.net sst.damen.com dxp-prd-gtm-sst-preview-damen.azurewebsites.net https://pagead2.googlesyndication.com static.hotjar.com script.hotjar.com *.lfeeder.com *.leadfeeder.com snap.licdn.com static-exp1.licdn.com content.linkedin.com platform.linkedin.com pi.pardot.com go.damen.com go.damenmc.com recaptcha.net/recaptcha/api.js www.redditstatic.com app.storyblok.com app.storyblok.com/f/storyblok-latest.js player.vimeo.com/api/player.js player.vimeo.com; worker-src blob:; object-src blob:; form-action www.facebook.com/tr; frame-ancestors app.storyblok.com" ] } }, { "msgid": "detail tech data http-csp has-unsafe-inline", "context": {} }, { "msgid": "detail tech data http-csp has-host-without-scheme", "context": {} }, { "msgid": "detail tech data http-csp missing-invalid-default-src", "context": {} }, { "msgid": "detail tech data http-csp missing-invalid-frame-ancestors", "context": {} }, { "msgid": "detail tech data http-csp missing-invalid-base-uri", "context": {} } ] ], [ "2603:1061:14:22::1", [ { "msgid": "detail tech data http-csp policy-found", "context": { "policy": [ "child-src blob:; connect-src 'self' insights.algolia.io insights.de.algolia.io dc.services.visualstudio.com/v2/track westeurope-4.in.applicationinsights.azure.com medialibrary.damen.com bat.bing.com bat.bing.net *.clarity.ms consent.cookie-script.com www.facebook.com *.google-analytics.com *.g.doubleclick.net *.analytics.google.com *.googletagmanager.com *.google.com sst.damen.com dxp-prd-gtm-sst-preview-damen.azurewebsites.net www.googleadservices.com ad.doubleclick.net *.doubleclick.net googleads.g.doubleclick.net *.hotjar.com:* vc.hotjar.io:* surveystats.hotjar.io wss://*.hotjar.com cs.lf-discover.com *.licdn.com *.linkedin.com *.orib.io *.tiles.mapbox.com api.mapbox.com events.mapbox.com recaptcha.net pixel-config.reddit.com gapi.storyblok.com/v1/api app.storyblok.com app.storyblok.com/f/storyblok-latest.js t.co analytics.twitter.com player.vimeo.com/api/player.js player.vimeo.com blob:; default-src 'self' *.lfeeder.com *.leadfeeder.com; font-src 'self' fonts.gstatic.com tagmanager.google.com script.hotjar.com; frame-src www.facebook.com/tr bid.g.doubleclick.net td.doubleclick.net *.googletagmanager.com sst.damen.com vars.hotjar.com www.linkedin.com go.damen.com go.damenmc.com recaptcha.net player.vimeo.com www.youtube-nocookie.com www.youtube.com eu.research.net nl.eu.research.net virtualtours.damen.com; img-src 'self' medialibrary.damen.com bat.bing.com bat.bing.net c.bing.com *.clarity.ms www.facebook.com *.google.nl *.google.com *.googletagmanager.com *.google-analytics.com www.google-analytics.com/collect ssl.gstatic.com www.gstatic.com *.analytics.google.com *.g.doubleclick.net maps.googleapis.com script.hotjar.com *.lfeeder.com *.leadfeeder.com *.linkedin.com *.licdn.com p.adsymptotic.com data: blob: alb.reddit.com pixel-config.reddit.com a.storyblok.com t.co analytics.twitter.com; media-src blob: medialibrary.damen.com; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com *.licdn.com app.storyblok.com app.storyblok.com/f/blokeditor.css; script-src 'self' 'nonce-720a17759e7440a6b40383d2511afd25' cdn.jsdelivr.net/npm/search-insights@2.17.2/dist/search-insights.min.js bat.bing.com bat.bing.net *.clarity.ms *.cookie-script.com connect.facebook.net/en_US/fbevents.js connect.facebook.net tagmanager.google.com *.googletagmanager.com www.gstatic.com www.google-analytics.com ssl.google-analytics.com www.recaptcha.net www.googleadservices.com www.google.com googleads.g.doubleclick.net sst.damen.com dxp-prd-gtm-sst-preview-damen.azurewebsites.net https://pagead2.googlesyndication.com static.hotjar.com script.hotjar.com *.lfeeder.com *.leadfeeder.com snap.licdn.com static-exp1.licdn.com content.linkedin.com platform.linkedin.com pi.pardot.com go.damen.com go.damenmc.com recaptcha.net/recaptcha/api.js www.redditstatic.com app.storyblok.com app.storyblok.com/f/storyblok-latest.js player.vimeo.com/api/player.js player.vimeo.com; worker-src blob:; object-src blob:; form-action www.facebook.com/tr; frame-ancestors app.storyblok.com" ] } }, { "msgid": "detail tech data http-csp has-unsafe-inline", "context": {} }, { "msgid": "detail tech data http-csp has-host-without-scheme", "context": {} }, { "msgid": "detail tech data http-csp missing-invalid-default-src", "context": {} }, { "msgid": "detail tech data http-csp missing-invalid-frame-ancestors", "context": {} }, { "msgid": "detail tech data http-csp missing-invalid-base-uri", "context": {} } ] ] ], "worstStatus": "warning", "overrideMandatory": null }, { "key": "http_x_content_type", "category": "siteappsecpriv", "status": "passed", "title": "X-Content-Type-Options", "verdict": "Your web server offers X-Content-Type-Options.", "technical": [ ["150.171.109.33", ["nosniff"]], ["2603:1061:14:22::1", ["nosniff"]] ], "worstStatus": "warning", "overrideMandatory": null }, { "key": "http_securitytxt", "category": "siteappsecpriv", "status": "warning", "title": "security.txt", "verdict": "Your web server does not offer a security.txt file in the right location, it could not be retrieved, or its content is not syntactically valid.", "technical": [ [ "150.171.109.33", [ { "msgid": "detail tech data http-securitytxt retrieved-from", "context": { "hostname": "www.damen.com" } }, { "msgid": "detail tech data http-securitytxt no_line_separators", "context": { "line_no": 3 } }, { "msgid": "detail tech data http-securitytxt long_expiry", "context": { "line_no": 2 } }, { "msgid": "detail tech data http-securitytxt no_encryption", "context": { "line_no": null } }, { "msgid": "detail tech data http-securitytxt not_signed", "context": { "line_no": null } } ] ], [ "2603:1061:14:22::1", [ { "msgid": "detail tech data http-securitytxt retrieved-from", "context": { "hostname": "www.damen.com" } }, { "msgid": "detail tech data http-securitytxt no_line_separators", "context": { "line_no": 3 } }, { "msgid": "detail tech data http-securitytxt long_expiry", "context": { "line_no": 2 } }, { "msgid": "detail tech data http-securitytxt no_encryption", "context": { "line_no": null } }, { "msgid": "detail tech data http-securitytxt not_signed", "context": { "line_no": null } } ] ] ], "worstStatus": "warning", "overrideMandatory": null }, { "key": "web_rpki_exists", "category": "siterpki", "status": "passed", "title": "Route Origin Authorisation existence", "verdict": "For all IP addresses of your web server an RPKI Route Origin Authorisation (ROA) is published.", "technical": [ ["www.damen.com", "150.171.109.33", "detail tech data yes"], ["...", "2603:1061:14:21::1", "detail tech data yes"] ], "worstStatus": "failed", "overrideMandatory": false }, { "key": "web_rpki_valid", "category": "siterpki", "status": "passed", "title": "Route announcement validity", "verdict": "All IP addresses of your web server have a Valid validation state. The route announcement of these IP addresses is matched by the published RPKI Route Origin Authorisation (ROA).", "technical": [ ["www.damen.com", "150.171.0.0/16", "AS8075", "valid"], ["...", "2603:1000::/25", "AS8075", "valid"] ], "worstStatus": "failed", "overrideMandatory": false }, { "key": "ns_rpki_exists", "category": "siterpki", "status": "passed", "title": "Route Origin Authorisation existence", "verdict": "For all IP addresses of your name servers an RPKI Route Origin Authorisation (ROA) is published.", "technical": [ ["ns1-01.azure-dns.com.", "13.107.236.1", "detail tech data yes"], ["...", "2603:1061:0:700::1", "detail tech data yes"], ["ns2-01.azure-dns.net.", "150.171.21.1", "detail tech data yes"], ["...", "2620:1ec:8ec:700::1", "detail tech data yes"], ["ns3-01.azure-dns.org.", "204.14.183.1", "detail tech data yes"], ["...", "2a01:111:4000:700::1", "detail tech data yes"], ["ns4-01.azure-dns.info.", "208.84.5.1", "detail tech data yes"], ["...", "2620:1ec:bda:700::1", "detail tech data yes"] ], "worstStatus": "failed", "overrideMandatory": false }, { "key": "ns_rpki_valid", "category": "siterpki", "status": "passed", "title": "Route announcement validity", "verdict": "All IP addresses of your name servers have a Valid validation state. The route announcement of these IP addresses is matched by the published RPKI Route Origin Authorisation (ROA).", "technical": [ ["ns1-01.azure-dns.com.", "13.104.0.0/14", "AS8075", "valid"], ["...", "2603:1000::/25", "AS8075", "valid"], ["ns2-01.azure-dns.net.", "150.171.0.0/16", "AS8075", "valid"], ["...", "2620:1ec::/36", "AS8075", "valid"], ["ns3-01.azure-dns.org.", "204.14.180.0/22", "AS8075", "valid"], ["...", "2a01:111:4000::/36", "AS8075", "valid"], ["ns4-01.azure-dns.info.", "208.84.0.0/21", "AS8075", "valid"], ["...", "2620:1ec::/36", "AS8075", "valid"] ], "worstStatus": "failed", "overrideMandatory": false } ], "measuredAt": "2026-10-28T13:54:49.099Z", "completedAt": "2026-10-28T14:13:33.842Z", "blockingReasons": [], "conditionalNotTested": 2, "failedTests": 1, "advisoryTests": 9, "publicationAllowed": false, "reused": false, "engineSource": "local_internetnl_engine", "officialReportUrl": null, "rawSourceSha256": "7340da771a96d9949f2b16ea301564e290f7adc27c8f025638d321fa976abe51", "evidenceUrl": "/benchmark/maakindustrie/2026/bewijs/v5/makers-088-internetnl.json" }, "sourceEditionSha256": "5f1f5966c60fdd577175d413537b625eb9383d639c0559795ccb4ba803516b11", "publicationAllowed": false }