{ "companyId": "makers-091", "connection": { "hostname": "madern.com", "methodologyVersion": "5.0.0", "engineVersion": "1.11.6", "complete": true, "score": 50, "contribution": 10, "maximumContribution": 20, "categories": [ { "id": "siteipv6", "status": "failed", "percentage": 0, "maximumPoints": 22, "model": "DomainTestIpv6", "modelId": 91, "measuredAt": "2026-10-28T13:55:25.680Z", "nativeReport": { "ns_aaaa": { "name": "ns_aaaa", "label": "detail web-mail ipv6 ns-AAAA label", "status": 0, "worst_status": 0, "verdict": "detail web-mail ipv6 ns-AAAA verdict bad", "exp": "detail web-mail ipv6 ns-AAAA exp", "tech_type": "table", "tech_string": "detail web-mail ipv6 ns-AAAA tech table", "tech_data": [ ["ns47.worldnic.com.", [], ["162.159.26.111"]], ["ns48.worldnic.com.", [], ["162.159.27.50"]] ], "override_mandatory": null }, "ns_reach": { "name": "ns_reach", "label": "detail web-mail ipv6 ns-reach label", "status": 4, "worst_status": 0, "verdict": "detail verdict not-tested", "exp": "detail web-mail ipv6 ns-reach exp", "tech_type": "", "tech_string": "detail web-mail ipv6 ns-reach tech table", "tech_data": "detail tech data not-tested", "override_mandatory": null }, "web_aaaa": { "name": "web_aaaa", "label": "detail web ipv6 web-AAAA label", "status": 0, "worst_status": 0, "verdict": "detail web ipv6 web-AAAA verdict bad", "exp": "detail web ipv6 web-AAAA exp", "tech_type": "table", "tech_string": "detail web ipv6 web-AAAA tech table", "tech_data": [["madern.com", [], ["37.97.168.117"]]], "override_mandatory": null }, "web_reach": { "name": "web_reach", "label": "detail web ipv6 web-reach label", "status": 4, "worst_status": 0, "verdict": "detail verdict not-tested", "exp": "detail web ipv6 web-reach exp", "tech_type": "", "tech_string": "detail web ipv6 web-reach tech table", "tech_data": "detail tech data not-tested", "override_mandatory": null }, "web_ipv46": { "name": "web_ipv46", "label": "detail web ipv6 web-ipv46 label", "status": 4, "worst_status": 0, "verdict": "detail verdict not-tested", "exp": "detail web ipv6 web-ipv46 exp", "tech_type": "", "tech_string": "", "tech_data": "detail tech data not-tested", "override_mandatory": null } } }, { "id": "sitednssec", "status": "failed", "percentage": 20, "maximumPoints": 10, "model": "DomainTestDnssec", "modelId": 91, "measuredAt": "2026-10-28T13:55:30.049Z", "nativeReport": { "dnssec_exists": { "name": "dnssec_exists", "label": "detail web dnssec exists label", "status": 0, "worst_status": 0, "verdict": "detail web dnssec exists verdict bad", "exp": "detail web dnssec exists exp", "tech_type": "table", "tech_string": "detail web dnssec exists tech table", "tech_data": [["madern.com", "Network Solutions, LLC"]], "override_mandatory": null }, "dnssec_valid": { "name": "dnssec_valid", "label": "detail web dnssec valid label", "status": 4, "worst_status": 0, "verdict": "detail verdict not-tested", "exp": "detail web dnssec valid exp", "tech_type": "table", "tech_string": "detail web dnssec valid tech table", "tech_data": [["madern.com", "detail tech data insecure"]], "override_mandatory": null } } }, { "id": "sitetls", "status": "failed", "percentage": 80, "maximumPoints": 150, "model": "WebTestTls", "modelId": 92, "measuredAt": "2026-10-28T13:55:31.708Z", "nativeReport": { "https_exists": { "name": "https_exists", "label": "detail web tls https-exists label", "status": 1, "worst_status": 0, "verdict": "detail web tls https-exists verdict good", "exp": "detail web tls https-exists exp", "tech_type": "table", "tech_string": "detail web tls https-exists tech table", "tech_data": [["37.97.168.117", "detail tech data yes"]], "override_mandatory": null }, "https_forced": { "name": "https_forced", "label": "detail web tls https-forced label", "status": 1, "worst_status": 0, "verdict": "detail web tls https-forced verdict good", "exp": "detail web tls https-forced exp", "tech_type": "table", "tech_string": "detail web tls https-forced tech table", "tech_data": [["37.97.168.117", "detail tech data yes"]], "override_mandatory": null }, "https_hsts": { "name": "https_hsts", "label": "detail web tls https-hsts label", "status": 0, "worst_status": 0, "verdict": "detail web tls https-hsts verdict bad", "exp": "detail web tls https-hsts exp", "tech_type": "table", "tech_string": "detail web tls https-hsts tech table", "tech_data": [["37.97.168.117", ""]], "override_mandatory": null }, "http_compression": { "name": "http_compression", "label": "detail web tls http-compression label", "status": 5, "worst_status": 5, "verdict": "detail web tls http-compression verdict bad", "exp": "detail web tls http-compression exp", "tech_type": "table", "tech_string": "detail web tls http-compression tech table", "tech_data": [["37.97.168.117", "detail tech data yes"]], "override_mandatory": null }, "fs_params": { "name": "fs_params", "label": "detail web tls fs-params label", "status": 1, "worst_status": 0, "verdict": "detail web tls fs-params verdict good", "exp": "detail web tls fs-params exp", "tech_type": "table_multi_col", "tech_string": "detail web tls fs-params tech table", "tech_data": [["37.97.168.117", ""]], "override_mandatory": null }, "tls_ciphers": { "name": "tls_ciphers", "label": "detail web tls ciphers label", "status": 0, "worst_status": 0, "verdict": "detail web tls ciphers verdict bad", "exp": "detail web tls ciphers exp", "tech_type": "table_multi_col", "tech_string": "detail web tls ciphers tech table", "tech_data": [ [ "37.97.168.117", [ "TLS_RSA_WITH_AES_256_CCM_8", "TLS_RSA_WITH_AES_256_CCM", "TLS_RSA_WITH_ARIA_256_GCM_SHA384", "TLS_RSA_WITH_AES_128_CCM_8", "TLS_RSA_WITH_AES_128_CCM", "TLS_RSA_WITH_ARIA_128_GCM_SHA256", "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256", "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256", "TLS_RSA_WITH_AES_128_CBC_SHA256", "TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_256_CBC_SHA", "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA", "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA", "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256", "TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_256_CBC_SHA256", "TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384", "TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256", "TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384", "TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256", "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" ], [ "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data phase-out", "detail tech data phase-out", "detail tech data phase-out", "detail tech data phase-out", "detail tech data phase-out", "detail tech data phase-out" ] ] ], "override_mandatory": null }, "tls_cipher_order": { "name": "tls_cipher_order", "label": "detail web tls cipher-order label", "status": 1, "worst_status": 0, "verdict": "detail web tls cipher-order verdict good", "exp": "detail web tls cipher-order exp", "tech_type": "table_multi_col", "tech_string": "detail web tls cipher-order tech table", "tech_data": [["37.97.168.117", ""]], "override_mandatory": null }, "tls_version": { "name": "tls_version", "label": "detail web tls version label", "status": 1, "worst_status": 0, "verdict": "detail web tls version verdict good", "exp": "detail web tls version exp", "tech_type": "table_multi_col", "tech_string": "detail web tls version tech table", "tech_data": [ ["37.97.168.117", ["TLS 1.2"], ["detail tech data sufficient"]] ], "override_mandatory": null }, "tls_compression": { "name": "tls_compression", "label": "detail web tls compression label", "status": 1, "worst_status": 0, "verdict": "detail web tls compression verdict good", "exp": "detail web tls compression exp", "tech_type": "table", "tech_string": "detail web tls compression tech table", "tech_data": [["37.97.168.117", "detail tech data no"]], "override_mandatory": null }, "renegotiation_secure": { "name": "renegotiation_secure", "label": "detail web tls renegotiation-secure label", "status": 1, "worst_status": 0, "verdict": "detail web tls renegotiation-secure verdict good", "exp": "detail web tls renegotiation-secure exp", "tech_type": "table", "tech_string": "detail web tls renegotiation-secure tech table", "tech_data": [["37.97.168.117", "detail tech data yes"]], "override_mandatory": null }, "renegotiation_client": { "name": "renegotiation_client", "label": "detail web tls renegotiation-client label", "status": 1, "worst_status": 5, "verdict": "detail web tls renegotiation-client verdict not-allowed", "exp": "detail web tls renegotiation-client exp", "tech_type": "table_translatable", "tech_string": "detail web tls renegotiation-client tech table", "tech_data": [ [ "37.97.168.117", [ { "msgid": "detail tech data tls-renegotiation-client not-allowed", "context": {} } ] ] ], "override_mandatory": null }, "cert_trust": { "name": "cert_trust", "label": "detail web tls cert-trust label", "status": 1, "worst_status": 0, "verdict": "detail web tls cert-trust verdict good", "exp": "detail web tls cert-trust exp", "tech_type": "table", "tech_string": "detail web tls cert-trust tech table", "tech_data": [["37.97.168.117", ""]], "override_mandatory": null }, "cert_pubkey": { "name": "cert_pubkey", "label": "detail web tls cert-pubkey label", "status": 2, "worst_status": 0, "verdict": "detail web tls cert-pubkey verdict phase-out", "exp": "detail web tls cert-pubkey exp", "tech_type": "table", "tech_string": "detail web tls cert-pubkey tech table", "tech_data": [ [ "37.97.168.117", [ "madern.com: RSAPublicKey-2048", "detail tech data phase-out", "YR1: RSAPublicKey-2048", "detail tech data phase-out" ] ] ], "override_mandatory": null }, "cert_signature": { "name": "cert_signature", "label": "detail web tls cert-signature label", "status": 1, "worst_status": 0, "verdict": "detail web tls cert-signature verdict good", "exp": "detail web tls cert-signature exp", "tech_type": "table_multi_col", "tech_string": "detail web tls cert-signature tech table", "tech_data": [["37.97.168.117", ""]], "override_mandatory": null }, "cert_hostmatch": { "name": "cert_hostmatch", "label": "detail web tls cert-hostmatch label", "status": 1, "worst_status": 0, "verdict": "detail web tls cert-hostmatch verdict good", "exp": "detail web tls cert-hostmatch exp", "tech_type": "table", "tech_string": "detail web tls cert-hostmatch tech table", "tech_data": [["37.97.168.117", ""]], "override_mandatory": null }, "web_caa": { "name": "web_caa", "label": "detail web tls caa label", "status": 2, "worst_status": 2, "verdict": "detail web tls caa verdict bad", "exp": "detail web tls caa exp", "tech_type": "table_translatable", "tech_string": "detail web tls caa tech table", "tech_data": [ [{ "msgid": "detail tech data caa not-found", "context": {} }], [ { "msgid": "detail tech data caa missing-required-property-issue", "context": { "property_tag": "issue" } } ] ], "override_mandatory": null }, "dane_exists": { "name": "dane_exists", "label": "detail web tls dane-exists label", "status": 5, "worst_status": 5, "verdict": "detail web tls dane-exists verdict bad", "exp": "detail web tls dane-exists exp", "tech_type": "table", "tech_string": "detail web tls dane-exists tech table", "tech_data": [["37.97.168.117", "detail tech data no"]], "override_mandatory": null }, "dane_valid": { "name": "dane_valid", "label": "detail web tls dane-valid label", "status": 4, "worst_status": 2, "verdict": "detail verdict not-tested", "exp": "detail web tls dane-valid exp", "tech_type": "table", "tech_string": "detail web tls dane-valid tech table", "tech_data": [["37.97.168.117", "detail tech data not-tested"]], "override_mandatory": null }, "zero_rtt": { "name": "zero_rtt", "label": "detail web tls zero-rtt label", "status": 1, "worst_status": 0, "verdict": "detail web tls zero-rtt verdict good", "exp": "detail web tls zero-rtt exp", "tech_type": "table", "tech_string": "detail web tls zero-rtt tech table", "tech_data": [["37.97.168.117", "detail tech data no"]], "override_mandatory": null }, "ocsp_stapling": { "name": "ocsp_stapling", "label": "detail web tls ocsp-stapling label", "status": 4, "worst_status": 2, "verdict": "detail web tls ocsp-stapling verdict not-in-cert", "exp": "detail web tls ocsp-stapling exp", "tech_type": "table", "tech_string": "detail web tls ocsp-stapling tech table", "tech_data": [["37.97.168.117", "detail tech data not-applicable"]], "override_mandatory": null }, "kex_hash_func": { "name": "kex_hash_func", "label": "detail web tls kex-hash-func label", "status": 0, "worst_status": 0, "verdict": "detail web tls kex-hash-func verdict bad", "exp": "detail web tls kex-hash-func exp", "tech_type": "table", "tech_string": "detail web tls kex-hash-func tech table", "tech_data": [["37.97.168.117", "SHA1"]], "override_mandatory": null }, "extended_master_secret": { "name": "extended_master_secret", "label": "detail web tls extended-master-secret label", "status": 1, "worst_status": 0, "verdict": "detail web tls extended-master-secret verdict good", "exp": "detail web tls extended-master-secret exp", "tech_type": "table", "tech_string": "detail web tls extended-master-secret tech table", "tech_data": [["37.97.168.117", "detail tech data yes"]], "override_mandatory": null } } }, { "id": "siteappsecpriv", "status": "warning", "percentage": 0, "maximumPoints": 0, "model": "WebTestAppsecpriv", "modelId": 91, "measuredAt": "2026-10-28T13:55:33.721Z", "nativeReport": { "http_x_frame": { "name": "http_x_frame", "label": "detail web appsecpriv http-x-frame label", "status": 5, "worst_status": 5, "verdict": "detail web appsecpriv http-x-frame verdict bad", "exp": "detail web appsecpriv http-x-frame exp", "tech_type": "table", "tech_string": "detail web appsecpriv http-x-frame tech table", "tech_data": [["37.97.168.117", ""]], "override_mandatory": null }, "http_referrer_policy": { "name": "http_referrer_policy", "label": "detail web appsecpriv http-referrer-policy label", "status": 5, "worst_status": 2, "verdict": "detail web appsecpriv http-referrer-policy verdict recommendations", "exp": "detail web appsecpriv http-referrer-policy exp", "tech_type": "table_translatable", "tech_string": "detail web appsecpriv http-referrer-policy tech table", "tech_data": [ [ "37.97.168.117", [ { "msgid": "detail tech data http-referrer-policy no-policy", "context": {} } ] ] ], "override_mandatory": null }, "http_csp": { "name": "http_csp", "label": "detail web appsecpriv http-csp label", "status": 2, "worst_status": 2, "verdict": "detail web appsecpriv http-csp verdict bad", "exp": "detail web appsecpriv http-csp exp", "tech_type": "table_translatable", "tech_string": "detail web appsecpriv http-csp tech table", "tech_data": [ [ "37.97.168.117", [ { "msgid": "detail tech data http-csp no-policy-found", "context": {} } ] ] ], "override_mandatory": null }, "http_x_content_type": { "name": "http_x_content_type", "label": "detail web appsecpriv http-x-content-type label", "status": 2, "worst_status": 2, "verdict": "detail web appsecpriv http-x-content-type verdict bad", "exp": "detail web appsecpriv http-x-content-type exp", "tech_type": "table", "tech_string": "detail web appsecpriv http-x-content-type tech table", "tech_data": [["37.97.168.117", ""]], "override_mandatory": null }, "http_securitytxt": { "name": "http_securitytxt", "label": "detail web appsecpriv http-securitytxt label", "status": 2, "worst_status": 2, "verdict": "detail web appsecpriv http-securitytxt verdict bad", "exp": "detail web appsecpriv http-securitytxt exp", "tech_type": "table_translatable", "tech_string": "detail web appsecpriv http-securitytxt tech table", "tech_data": [ [ "37.97.168.117", [ { "msgid": "detail tech data http-securitytxt requested-from", "context": { "hostname": "madern.com" } }, { "msgid": "detail tech data http-securitytxt no_security_txt_404", "context": {} } ] ] ], "override_mandatory": null } } }, { "id": "siterpki", "status": "passed", "percentage": 100, "maximumPoints": 30, "model": "WebTestRpki", "modelId": 90, "measuredAt": "2026-10-28T14:13:54.982Z", "nativeReport": { "web_rpki_exists": { "name": "web_rpki_exists", "label": "detail web rpki exists label", "status": 1, "worst_status": 0, "verdict": "detail web rpki exists verdict good", "exp": "detail web rpki exists exp", "tech_type": "table_multi_col", "tech_string": "detail web rpki exists tech table", "tech_data": [ ["madern.com", "37.97.168.117", "detail tech data yes"] ], "override_mandatory": false }, "web_rpki_valid": { "name": "web_rpki_valid", "label": "detail web rpki valid label", "status": 1, "worst_status": 0, "verdict": "detail web rpki valid verdict good", "exp": "detail web rpki valid exp", "tech_type": "table", "tech_string": "detail web rpki valid tech table", "tech_data": [["madern.com", "37.97.128.0/17", "AS20857", "valid"]], "override_mandatory": false }, "ns_rpki_exists": { "name": "ns_rpki_exists", "label": "detail web-mail rpki ns-exists label", "status": 1, "worst_status": 0, "verdict": "detail web-mail rpki ns-exists verdict good", "exp": "detail web-mail rpki ns-exists exp", "tech_type": "table_multi_col", "tech_string": "detail web-mail rpki ns-exists tech table", "tech_data": [ ["ns47.worldnic.com.", "162.159.26.111", "detail tech data yes"], ["ns48.worldnic.com.", "162.159.27.50", "detail tech data yes"] ], "override_mandatory": false }, "ns_rpki_valid": { "name": "ns_rpki_valid", "label": "detail web-mail rpki ns-valid label", "status": 1, "worst_status": 0, "verdict": "detail web-mail rpki ns-valid verdict good", "exp": "detail web-mail rpki ns-valid exp", "tech_type": "table", "tech_string": "detail web-mail rpki ns-valid tech table", "tech_data": [ ["ns47.worldnic.com.", "162.159.26.0/24", "AS13335", "valid"], ["...", "162.159.16.0/20", "AS13335", "valid"], ["ns48.worldnic.com.", "162.159.16.0/20", "AS13335", "valid"], ["...", "162.159.27.0/24", "AS13335", "valid"] ], "override_mandatory": false } } } ], "subtests": [ { "key": "ns_aaaa", "category": "siteipv6", "status": "failed", "title": "IPv6 addresses for name servers", "verdict": "None of the name servers of your domain has an IPv6 address.", "technical": [ ["ns47.worldnic.com.", [], ["162.159.26.111"]], ["ns48.worldnic.com.", [], ["162.159.27.50"]] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "ns_reach", "category": "siteipv6", "status": "not-tested", "title": "IPv6 reachability of name servers", "verdict": "This subtest did not run, because either a parent test that this subtest depends on gave a negative result, or not enough information was available to run this subtest.", "technical": "detail tech data not-tested", "worstStatus": "failed", "overrideMandatory": null }, { "key": "web_aaaa", "category": "siteipv6", "status": "failed", "title": "IPv6 addresses for web server", "verdict": "None of your web servers has an IPv6 address.", "technical": [["madern.com", [], ["37.97.168.117"]]], "worstStatus": "failed", "overrideMandatory": null }, { "key": "web_reach", "category": "siteipv6", "status": "not-tested", "title": "IPv6 reachability of web server", "verdict": "This subtest did not run, because either a parent test that this subtest depends on gave a negative result, or not enough information was available to run this subtest.", "technical": "detail tech data not-tested", "worstStatus": "failed", "overrideMandatory": null }, { "key": "web_ipv46", "category": "siteipv6", "status": "not-tested", "title": "Same website on IPv6 and IPv4", "verdict": "This subtest did not run, because either a parent test that this subtest depends on gave a negative result, or not enough information was available to run this subtest.", "technical": "detail tech data not-tested", "worstStatus": "failed", "overrideMandatory": null }, { "key": "dnssec_exists", "category": "sitednssec", "status": "failed", "title": "DNSSEC existence", "verdict": "Your domain is insecure, because it is not DNSSEC signed.", "technical": [["madern.com", "Network Solutions, LLC"]], "worstStatus": "failed", "overrideMandatory": null }, { "key": "dnssec_valid", "category": "sitednssec", "status": "not-tested", "title": "DNSSEC validity", "verdict": "This subtest did not run, because either a parent test that this subtest depends on gave a negative result, or not enough information was available to run this subtest.", "technical": [["madern.com", "detail tech data insecure"]], "worstStatus": "failed", "overrideMandatory": null }, { "key": "https_exists", "category": "sitetls", "status": "passed", "title": "HTTPS available", "verdict": "Your website is reachable over HTTPS.", "technical": [["37.97.168.117", "detail tech data yes"]], "worstStatus": "failed", "overrideMandatory": null }, { "key": "https_forced", "category": "sitetls", "status": "passed", "title": "HTTPS redirect", "verdict": "Your web server automatically redirects visitors from HTTP to HTTPS on the same domain.", "technical": [["37.97.168.117", "detail tech data yes"]], "worstStatus": "failed", "overrideMandatory": null }, { "key": "https_hsts", "category": "sitetls", "status": "failed", "title": "HSTS", "verdict": "Your web server does not offer an HSTS policy.", "technical": [["37.97.168.117", ""]], "worstStatus": "failed", "overrideMandatory": null }, { "key": "http_compression", "category": "sitetls", "status": "info", "title": "HTTP compression", "verdict": "Your web server supports HTTP compression, which could be a security risk.", "technical": [["37.97.168.117", "detail tech data yes"]], "worstStatus": "info", "overrideMandatory": null }, { "key": "fs_params", "category": "sitetls", "status": "passed", "title": "Parameters for key exchange", "verdict": "Your web server supports secure parameters for Diffie-Hellman key exchange.", "technical": [["37.97.168.117", ""]], "worstStatus": "failed", "overrideMandatory": null }, { "key": "tls_ciphers", "category": "sitetls", "status": "failed", "title": "Cipher suites", "verdict": "Your web server supports one or more insufficiently secure cipher suites.", "technical": [ [ "37.97.168.117", [ "TLS_RSA_WITH_AES_256_CCM_8", "TLS_RSA_WITH_AES_256_CCM", "TLS_RSA_WITH_ARIA_256_GCM_SHA384", "TLS_RSA_WITH_AES_128_CCM_8", "TLS_RSA_WITH_AES_128_CCM", "TLS_RSA_WITH_ARIA_128_GCM_SHA256", "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256", "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256", "TLS_RSA_WITH_AES_128_CBC_SHA256", "TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_256_CBC_SHA", "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA", "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA", "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256", "TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_256_CBC_SHA256", "TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384", "TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256", "TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384", "TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256", "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" ], [ "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data insufficient", "detail tech data phase-out", "detail tech data phase-out", "detail tech data phase-out", "detail tech data phase-out", "detail tech data phase-out", "detail tech data phase-out" ] ] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "tls_cipher_order", "category": "sitetls", "status": "passed", "title": "Cipher suite order", "verdict": "Your web server enforces its own preference for cipher suites in descending order of their security level.", "technical": [["37.97.168.117", ""]], "worstStatus": "failed", "overrideMandatory": null }, { "key": "tls_version", "category": "sitetls", "status": "passed", "title": "TLS version", "verdict": "Your web server supports secure TLS versions only.", "technical": [ ["37.97.168.117", ["TLS 1.2"], ["detail tech data sufficient"]] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "tls_compression", "category": "sitetls", "status": "passed", "title": "TLS compression", "verdict": "Your web server does not support TLS compression.", "technical": [["37.97.168.117", "detail tech data no"]], "worstStatus": "failed", "overrideMandatory": null }, { "key": "renegotiation_secure", "category": "sitetls", "status": "passed", "title": "Secure renegotiation", "verdict": "Your web server supports secure renegotiation.", "technical": [["37.97.168.117", "detail tech data yes"]], "worstStatus": "failed", "overrideMandatory": null }, { "key": "renegotiation_client", "category": "sitetls", "status": "passed", "title": "Client-initiated renegotiation", "verdict": "Your web server does not allow client-initiated renegotiation.", "technical": [ [ "37.97.168.117", [ { "msgid": "detail tech data tls-renegotiation-client not-allowed", "context": {} } ] ] ], "worstStatus": "info", "overrideMandatory": null }, { "key": "cert_trust", "category": "sitetls", "status": "passed", "title": "Trust chain of certificate", "verdict": "The trust chain of your website certificate is complete and signed by a trusted root certificate authority.", "technical": [["37.97.168.117", ""]], "worstStatus": "failed", "overrideMandatory": null }, { "key": "cert_pubkey", "category": "sitetls", "status": "warning", "title": "Public key of certificate", "verdict": "The public key of your website certificate is based on a signing algorithm with parameters that should be phased out as they are weaker, although you might still use them if absolutely needed. In a future update, they will likely become insufficient.", "technical": [ [ "37.97.168.117", [ "madern.com: RSAPublicKey-2048", "detail tech data phase-out", "YR1: RSAPublicKey-2048", "detail tech data phase-out" ] ] ], "worstStatus": "failed", "overrideMandatory": null }, { "key": "cert_signature", "category": "sitetls", "status": "passed", "title": "Signature on certificate", "verdict": "Your website certificate is signed using a secure signing algorithm and hash function.", "technical": [["37.97.168.117", ""]], "worstStatus": "failed", "overrideMandatory": null }, { "key": "cert_hostmatch", "category": "sitetls", "status": "passed", "title": "Domain name on certificate", "verdict": "The domain name of your website matches the domain name on your website certificate.", "technical": [["37.97.168.117", ""]], "worstStatus": "failed", "overrideMandatory": null }, { "key": "web_caa", "category": "sitetls", "status": "warning", "title": "CAA for domain", "verdict": "Your domain does not have CAA.", "technical": [ [{ "msgid": "detail tech data caa not-found", "context": {} }], [ { "msgid": "detail tech data caa missing-required-property-issue", "context": { "property_tag": "issue" } } ] ], "worstStatus": "warning", "overrideMandatory": null }, { "key": "dane_exists", "category": "sitetls", "status": "info", "title": "DANE existence", "verdict": "Your website domain does not contain a TLSA record for DANE.", "technical": [["37.97.168.117", "detail tech data no"]], "worstStatus": "info", "overrideMandatory": null }, { "key": "dane_valid", "category": "sitetls", "status": "not-tested", "title": "DANE validity", "verdict": "This subtest did not run, because either a parent test that this subtest depends on gave a negative result, or not enough information was available to run this subtest.", "technical": [["37.97.168.117", "detail tech data not-tested"]], "worstStatus": "warning", "overrideMandatory": null }, { "key": "zero_rtt", "category": "sitetls", "status": "passed", "title": "0-RTT", "verdict": "Your web server does not support 0-RTT.", "technical": [["37.97.168.117", "detail tech data no"]], "worstStatus": "failed", "overrideMandatory": null }, { "key": "ocsp_stapling", "category": "sitetls", "status": "not-tested", "title": "OCSP stapling", "verdict": "Your website certificate does not have an OCSP pointer, so OCSP stapling does not apply.", "technical": [["37.97.168.117", "detail tech data not-applicable"]], "worstStatus": "warning", "overrideMandatory": null }, { "key": "kex_hash_func", "category": "sitetls", "status": "failed", "title": "Hash function for key exchange", "verdict": "Your web server supports one or more insufficiently secure hash functions for key exchange.", "technical": [["37.97.168.117", "SHA1"]], "worstStatus": "failed", "overrideMandatory": null }, { "key": "extended_master_secret", "category": "sitetls", "status": "passed", "title": "Extended Master Secret (EMS)", "verdict": "Your web server supports EMS.", "technical": [["37.97.168.117", "detail tech data yes"]], "worstStatus": "failed", "overrideMandatory": null }, { "key": "http_x_frame", "category": "siteappsecpriv", "status": "info", "title": "X-Frame-Options", "verdict": "Your web server does not offer securely configured X-Frame-Options.", "technical": [["37.97.168.117", ""]], "worstStatus": "info", "overrideMandatory": null }, { "key": "http_referrer_policy", "category": "siteappsecpriv", "status": "info", "title": "Referrer-Policy", "verdict": "Your web server either does not offer a Referrer-Policy and thus relies on the default browser policy, or your web server offers a Referrer-Policy with a policy value that should be used with caution because of its potential impact on security and privacy.", "technical": [ [ "37.97.168.117", [ { "msgid": "detail tech data http-referrer-policy no-policy", "context": {} } ] ] ], "worstStatus": "warning", "overrideMandatory": null }, { "key": "http_csp", "category": "siteappsecpriv", "status": "warning", "title": "Content-Security-Policy", "verdict": "Your web server does not offer Content-Security-Policy (CSP), or does offer CSP with certain insecure settings.", "technical": [ [ "37.97.168.117", [ { "msgid": "detail tech data http-csp no-policy-found", "context": {} } ] ] ], "worstStatus": "warning", "overrideMandatory": null }, { "key": "http_x_content_type", "category": "siteappsecpriv", "status": "warning", "title": "X-Content-Type-Options", "verdict": "Your web server does not offer X-Content-Type-Options.", "technical": [["37.97.168.117", ""]], "worstStatus": "warning", "overrideMandatory": null }, { "key": "http_securitytxt", "category": "siteappsecpriv", "status": "warning", "title": "security.txt", "verdict": "Your web server does not offer a security.txt file in the right location, it could not be retrieved, or its content is not syntactically valid.", "technical": [ [ "37.97.168.117", [ { "msgid": "detail tech data http-securitytxt requested-from", "context": { "hostname": "madern.com" } }, { "msgid": "detail tech data http-securitytxt no_security_txt_404", "context": {} } ] ] ], "worstStatus": "warning", "overrideMandatory": null }, { "key": "web_rpki_exists", "category": "siterpki", "status": "passed", "title": "Route Origin Authorisation existence", "verdict": "For all IP addresses of your web server an RPKI Route Origin Authorisation (ROA) is published.", "technical": [["madern.com", "37.97.168.117", "detail tech data yes"]], "worstStatus": "failed", "overrideMandatory": false }, { "key": "web_rpki_valid", "category": "siterpki", "status": "passed", "title": "Route announcement validity", "verdict": "All IP addresses of your web server have a Valid validation state. The route announcement of these IP addresses is matched by the published RPKI Route Origin Authorisation (ROA).", "technical": [["madern.com", "37.97.128.0/17", "AS20857", "valid"]], "worstStatus": "failed", "overrideMandatory": false }, { "key": "ns_rpki_exists", "category": "siterpki", "status": "passed", "title": "Route Origin Authorisation existence", "verdict": "For all IP addresses of your name servers an RPKI Route Origin Authorisation (ROA) is published.", "technical": [ ["ns47.worldnic.com.", "162.159.26.111", "detail tech data yes"], ["ns48.worldnic.com.", "162.159.27.50", "detail tech data yes"] ], "worstStatus": "failed", "overrideMandatory": false }, { "key": "ns_rpki_valid", "category": "siterpki", "status": "passed", "title": "Route announcement validity", "verdict": "All IP addresses of your name servers have a Valid validation state. The route announcement of these IP addresses is matched by the published RPKI Route Origin Authorisation (ROA).", "technical": [ ["ns47.worldnic.com.", "162.159.26.0/24", "AS13335", "valid"], ["...", "162.159.16.0/20", "AS13335", "valid"], ["ns48.worldnic.com.", "162.159.16.0/20", "AS13335", "valid"], ["...", "162.159.27.0/24", "AS13335", "valid"] ], "worstStatus": "failed", "overrideMandatory": false } ], "measuredAt": "2026-10-28T13:55:25.680Z", "completedAt": "2026-10-28T14:13:54.982Z", "blockingReasons": [], "conditionalNotTested": 6, "failedTests": 6, "advisoryTests": 9, "publicationAllowed": false, "reused": false, "engineSource": "local_internetnl_engine", "officialReportUrl": null, "rawSourceSha256": "9d955fa117b4916ac47520b8eb5c25eff32f1b493be3f2ed68a6f6c4abea9d83", "evidenceUrl": "/benchmark/maakindustrie/2026/bewijs/v5/makers-091-internetnl.json" }, "sourceEditionSha256": "5f1f5966c60fdd577175d413537b625eb9383d639c0559795ccb4ba803516b11", "publicationAllowed": false }