{
  "hostname": "internet.nl",
  "jobId": "cmryol3ho0009ueenmbxx1c7k",
  "status": "DONE",
  "overallScore": 99,
  "groups": [
    {
      "group": "website",
      "score": 98,
      "present": true
    },
    {
      "group": "mail",
      "score": 100,
      "present": true
    }
  ],
  "generatedAt": "2026-07-25T04:06:31.264Z",
  "finishedAt": "2026-07-24T08:31:20.327Z",
  "categories": [
    {
      "category": "dns",
      "group": "website",
      "status": "DONE",
      "score": 100,
      "findings": [
        {
          "id": "dns.ns.present",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.dns.ns.title",
          "verdictKey": "findings.dns.ns.verdict.present",
          "verdictParams": {
            "count": 4,
            "ipv6count": 4
          },
          "whyItMattersKey": "findings.dns.ns.why",
          "technicalDetails": {
            "rows": [
              [
                "ns1.sidn.nl",
                "192.174.68.144",
                "2001:67c:1bc::144"
              ],
              [
                "ns1.sidnlabs.nl",
                "94.198.159.8",
                "2a00:d78:0:712:94:198:159:8"
              ],
              [
                "ns2.sidn.nl",
                "176.97.158.144",
                "2001:67c:10b8::144"
              ],
              [
                "ns2.sidnlabs.nl",
                "194.0.28.11",
                "2001:678:2c:0:194:0:28:11"
              ]
            ],
            "columns": [
              "tech.columns.nameserver",
              "tech.columns.ipv4",
              "tech.columns.ipv6"
            ]
          },
          "whatIsCheckedKey": "findings.dns.ns.what",
          "requirementLevel": "required"
        },
        {
          "id": "dns.ipv4.present",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.dns.ipv4.title",
          "verdictKey": "findings.dns.ipv4.verdict.present",
          "verdictParams": {
            "count": 1,
            "address": "62.204.66.10"
          },
          "whyItMattersKey": "findings.dns.ipv4.why",
          "technicalDetails": {
            "rows": [
              [
                "62.204.66.10"
              ]
            ],
            "columns": [
              "tech.columns.ipv4"
            ]
          },
          "whatIsCheckedKey": "findings.dns.ipv4.what",
          "requirementLevel": "required"
        },
        {
          "id": "dns.ipv6.present",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.dns.ipv6.title",
          "verdictKey": "findings.dns.ipv6.verdict.present",
          "verdictParams": {
            "count": 1,
            "address": "2a00:d00:ff:162:62:204:66:10"
          },
          "whyItMattersKey": "findings.dns.ipv6.why",
          "technicalDetails": {
            "rows": [
              [
                "2a00:d00:ff:162:62:204:66:10"
              ]
            ],
            "columns": [
              "tech.columns.ipv6"
            ]
          },
          "whatIsCheckedKey": "findings.dns.ipv6.what",
          "requirementLevel": "recommended"
        },
        {
          "id": "dns.mx.present",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.dns.mx.title",
          "verdictKey": "findings.dns.mx.verdict.present",
          "verdictParams": {
            "count": 3
          },
          "whyItMattersKey": "findings.dns.mx.why",
          "technicalDetails": {
            "rows": [
              [
                10,
                "vmx01.prolocation.nl"
              ],
              [
                10,
                "vmx02.prolocation.nl"
              ],
              [
                10,
                "vmx03.prolocation.net"
              ]
            ],
            "columns": [
              "tech.columns.priority",
              "tech.columns.mx_host"
            ]
          },
          "whatIsCheckedKey": "findings.dns.mx.what",
          "requirementLevel": "optional"
        },
        {
          "id": "dns.caa.present",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.dns.caa.title",
          "verdictKey": "findings.dns.caa.verdict.present",
          "verdictParams": {
            "count": 6
          },
          "whyItMattersKey": "findings.dns.caa.why",
          "technicalDetails": {
            "rows": [
              [
                0,
                "iodef",
                "mailto:question@internet.nl"
              ],
              [
                0,
                "issue",
                "letsencrypt.org;validationmethods=http-01,tls-alpn-01"
              ],
              [
                0,
                "issue",
                "sectigo.com"
              ],
              [
                0,
                "issuevmc",
                ";"
              ],
              [
                0,
                "issuemail",
                ";"
              ],
              [
                0,
                "issuewild",
                ";"
              ]
            ],
            "columns": [
              "tech.columns.flag",
              "tech.columns.tag",
              "tech.columns.value"
            ]
          },
          "whatIsCheckedKey": "findings.dns.caa.what",
          "requirementLevel": "recommended",
          "docsUrl": "https://datatracker.ietf.org/doc/html/rfc8659"
        },
        {
          "id": "dns.dnssec.valid",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.dns.dnssec.title",
          "verdictKey": "findings.dns.dnssec.verdict.valid",
          "whyItMattersKey": "findings.dns.dnssec.why",
          "technicalDetails": {
            "rows": [
              [
                "DNSKEY",
                true
              ],
              [
                "AD",
                true
              ]
            ],
            "columns": [
              "tech.columns.property",
              "tech.columns.value"
            ]
          },
          "whatIsCheckedKey": "findings.dns.dnssec.what",
          "requirementLevel": "recommended",
          "docsUrl": "https://datatracker.ietf.org/doc/html/rfc4033"
        }
      ]
    },
    {
      "category": "dnsserver",
      "group": "website",
      "status": "DONE",
      "score": 100,
      "findings": []
    },
    {
      "category": "http",
      "group": "website",
      "status": "DONE",
      "score": 100,
      "findings": [
        {
          "id": "http.reachable.https",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.http.reachable.title",
          "verdictKey": "findings.http.reachable.verdict.https",
          "whyItMattersKey": "findings.http.reachable.why",
          "technicalDetails": {
            "rows": [
              [
                "https",
                true
              ],
              [
                "http",
                true
              ],
              [
                "final_url",
                "https://internet.nl/"
              ]
            ],
            "columns": [
              "tech.columns.property",
              "tech.columns.value"
            ]
          },
          "whatIsCheckedKey": "findings.http.reachable.what",
          "requirementLevel": "required"
        },
        {
          "id": "http.ipv6.reachable",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.http.ipv6.title",
          "verdictKey": "findings.http.ipv6.verdict.reachable",
          "verdictParams": {
            "address": "2a00:d00:ff:162:62:204:66:10"
          },
          "whyItMattersKey": "findings.http.ipv6.why",
          "technicalDetails": {
            "rows": [
              [
                "2a00:d00:ff:162:62:204:66:10"
              ]
            ],
            "columns": [
              "tech.columns.ipv6"
            ]
          },
          "whatIsCheckedKey": "findings.http.ipv6.what",
          "requirementLevel": "recommended"
        },
        {
          "id": "http.https_redirect.yes",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.http.https_redirect.title",
          "verdictKey": "findings.http.https_redirect.verdict.yes",
          "whyItMattersKey": "findings.http.https_redirect.why",
          "whatIsCheckedKey": "findings.http.https_redirect.what",
          "requirementLevel": "recommended"
        },
        {
          "id": "http.hsts.present",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.http.hsts.title",
          "verdictKey": "findings.http.hsts.verdict.present",
          "whyItMattersKey": "findings.http.hsts.why",
          "technicalDetails": {
            "rows": [
              [
                "header",
                "max-age=31536000"
              ],
              [
                "includeSubDomains",
                false
              ],
              [
                "preload",
                false
              ]
            ],
            "columns": [
              "tech.columns.property",
              "tech.columns.value"
            ]
          },
          "whatIsCheckedKey": "findings.http.hsts.what",
          "requirementLevel": "recommended",
          "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6797"
        },
        {
          "id": "http.csp.present",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.http.csp.title",
          "verdictKey": "findings.http.csp.verdict.present",
          "whyItMattersKey": "findings.http.csp.why",
          "technicalDetails": {
            "rows": [
              [
                "Content-Security-Policy",
                "base-uri 'self' https://*.internet.nl; form-action 'self' https://*.internet.nl; frame-ancestors 'none'; default-src 'self' https://*.internet.nl"
              ]
            ],
            "columns": [
              "tech.columns.property",
              "tech.columns.value"
            ]
          },
          "whatIsCheckedKey": "findings.http.csp.what",
          "requirementLevel": "recommended",
          "docsUrl": "https://www.w3.org/TR/CSP3/"
        },
        {
          "id": "http.xfo.present",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.http.xfo.title",
          "verdictKey": "findings.http.xfo.verdict.present",
          "whyItMattersKey": "findings.http.xfo.why",
          "technicalDetails": {
            "rows": [
              [
                "X-Frame-Options",
                "SAMEORIGIN"
              ]
            ],
            "columns": [
              "tech.columns.property",
              "tech.columns.value"
            ]
          },
          "whatIsCheckedKey": "findings.http.xfo.what",
          "requirementLevel": "recommended"
        },
        {
          "id": "http.xcto.nosniff",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.http.xcto.title",
          "verdictKey": "findings.http.xcto.verdict.nosniff",
          "whyItMattersKey": "findings.http.xcto.why",
          "whatIsCheckedKey": "findings.http.xcto.what",
          "requirementLevel": "recommended"
        },
        {
          "id": "http.referrer.present",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.http.referrer.title",
          "verdictKey": "findings.http.referrer.verdict.present",
          "whyItMattersKey": "findings.http.referrer.why",
          "technicalDetails": {
            "rows": [
              [
                "Referrer-Policy",
                "same-origin"
              ]
            ],
            "columns": [
              "tech.columns.property",
              "tech.columns.value"
            ]
          },
          "whatIsCheckedKey": "findings.http.referrer.what",
          "requirementLevel": "recommended"
        },
        {
          "id": "http.compression.inactive",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.http.compression.title",
          "verdictKey": "findings.http.compression.verdict.inactive",
          "whyItMattersKey": "findings.http.compression.why",
          "whatIsCheckedKey": "findings.http.compression.what",
          "requirementLevel": "optional"
        },
        {
          "id": "http.securitytxt.present",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.http.securitytxt.title",
          "verdictKey": "findings.http.securitytxt.verdict.present",
          "whyItMattersKey": "findings.http.securitytxt.why",
          "technicalDetails": {
            "rows": [
              [
                "location",
                "/.well-known/security.txt"
              ],
              [
                "contact",
                true
              ],
              [
                "expires",
                true
              ]
            ],
            "columns": [
              "tech.columns.property",
              "tech.columns.value"
            ]
          },
          "whatIsCheckedKey": "findings.http.securitytxt.what",
          "requirementLevel": "recommended",
          "docsUrl": "https://datatracker.ietf.org/doc/html/rfc9116"
        }
      ]
    },
    {
      "category": "mail",
      "group": "mail",
      "status": "DONE",
      "score": 100,
      "findings": [
        {
          "id": "mail.mx.present",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.mail.mx.title",
          "verdictKey": "findings.mail.mx.verdict.present",
          "verdictParams": {
            "count": 3
          },
          "whyItMattersKey": "findings.mail.mx.why",
          "technicalDetails": {
            "rows": [
              [
                10,
                "vmx01.prolocation.nl"
              ],
              [
                10,
                "vmx02.prolocation.nl"
              ],
              [
                10,
                "vmx03.prolocation.net"
              ]
            ],
            "columns": [
              "tech.columns.priority",
              "tech.columns.mx_host"
            ]
          },
          "whatIsCheckedKey": "findings.mail.mx.what",
          "requirementLevel": "required"
        },
        {
          "id": "mail.spf.softfail",
          "status": "pass",
          "severity": "low",
          "titleKey": "findings.mail.spf.title",
          "verdictKey": "findings.mail.spf.verdict.softfail",
          "whyItMattersKey": "findings.mail.spf.why",
          "technicalDetails": {
            "rows": [
              [
                "record",
                "v=spf1 a include:spfinc.prolocation.net ~all"
              ]
            ],
            "columns": [
              "tech.columns.property",
              "tech.columns.value"
            ]
          },
          "whatIsCheckedKey": "findings.mail.spf.what",
          "requirementLevel": "recommended",
          "docsUrl": "https://datatracker.ietf.org/doc/html/rfc7208"
        },
        {
          "id": "mail.dkim.namespace",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.mail.dkim.title",
          "verdictKey": "findings.mail.dkim.verdict.namespace",
          "whyItMattersKey": "findings.mail.dkim.why",
          "whatIsCheckedKey": "findings.mail.dkim.what",
          "requirementLevel": "recommended",
          "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6376"
        },
        {
          "id": "mail.dmarc.enforced",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.mail.dmarc.title",
          "verdictKey": "findings.mail.dmarc.verdict.enforced",
          "verdictParams": {
            "policy": "reject"
          },
          "whyItMattersKey": "findings.mail.dmarc.why",
          "technicalDetails": {
            "rows": [
              [
                "record",
                "v=DMARC1; p=reject; sp=reject; np=reject; psd=n; t=n; adkim=r; aspf=r; rua=mailto:dmarc-rua@internet.nl"
              ],
              [
                "policy",
                "reject"
              ]
            ],
            "columns": [
              "tech.columns.property",
              "tech.columns.value"
            ]
          },
          "whatIsCheckedKey": "findings.mail.dmarc.what",
          "requirementLevel": "recommended",
          "docsUrl": "https://datatracker.ietf.org/doc/html/rfc7489"
        },
        {
          "id": "mail.ipv6.all",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.mail.ipv6.title",
          "verdictKey": "findings.mail.ipv6.verdict.all",
          "whyItMattersKey": "findings.mail.ipv6.why",
          "technicalDetails": {
            "rows": [
              [
                "vmx01.prolocation.nl",
                "2a00:d01:ff:905:94:228:142:130"
              ],
              [
                "vmx02.prolocation.nl",
                "2a00:d01:ff:905:94:228:142:131"
              ],
              [
                "vmx03.prolocation.net",
                "2a00:d00:ff:129:94:228:129:7"
              ]
            ],
            "columns": [
              "tech.columns.mx_host",
              "tech.columns.ipv6"
            ]
          },
          "whatIsCheckedKey": "findings.mail.ipv6.what",
          "requirementLevel": "recommended"
        },
        {
          "id": "mail.starttls.all",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.mail.starttls.title",
          "verdictKey": "findings.mail.starttls.verdict.all",
          "whyItMattersKey": "findings.mail.starttls.why",
          "technicalDetails": {
            "rows": [
              [
                "vmx01.prolocation.nl",
                "valid"
              ],
              [
                "vmx02.prolocation.nl",
                "valid"
              ],
              [
                "vmx03.prolocation.net",
                "valid"
              ]
            ],
            "columns": [
              "tech.columns.mx_host",
              "tech.columns.value"
            ]
          },
          "whatIsCheckedKey": "findings.mail.starttls.what",
          "requirementLevel": "required",
          "docsUrl": "https://datatracker.ietf.org/doc/html/rfc3207"
        },
        {
          "id": "mail.tls.modern",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.mail.tls.title",
          "verdictKey": "findings.mail.tls.verdict.modern",
          "whyItMattersKey": "findings.mail.tls.why",
          "technicalDetails": {
            "rows": [
              [
                "vmx01.prolocation.nl",
                "TLS 1.3"
              ],
              [
                "vmx02.prolocation.nl",
                "TLS 1.3"
              ],
              [
                "vmx03.prolocation.net",
                "TLS 1.3"
              ]
            ],
            "columns": [
              "tech.columns.mx_host",
              "tech.columns.value"
            ]
          },
          "whatIsCheckedKey": "findings.mail.tls.what",
          "requirementLevel": "required"
        },
        {
          "id": "mail.dane.valid",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.mail.dane.title",
          "verdictKey": "findings.mail.dane.verdict.valid",
          "whyItMattersKey": "findings.mail.dane.why",
          "technicalDetails": {
            "rows": [
              [
                "vmx01.prolocation.nl",
                "valid"
              ],
              [
                "vmx02.prolocation.nl",
                "valid"
              ],
              [
                "vmx03.prolocation.net",
                "valid"
              ]
            ],
            "columns": [
              "tech.columns.mx_host",
              "tech.columns.value"
            ]
          },
          "whatIsCheckedKey": "findings.mail.dane.what",
          "requirementLevel": "recommended",
          "docsUrl": "https://datatracker.ietf.org/doc/html/rfc7672"
        }
      ]
    },
    {
      "category": "blacklist",
      "group": "mail",
      "status": "DONE",
      "score": 100,
      "findings": []
    },
    {
      "category": "tls",
      "group": "website",
      "status": "DONE",
      "score": 95,
      "findings": [
        {
          "id": "tls.https.reachable",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.tls.https.title",
          "verdictKey": "findings.tls.https.verdict.reachable",
          "whyItMattersKey": "findings.tls.https.why",
          "whatIsCheckedKey": "findings.tls.https.what",
          "requirementLevel": "required"
        },
        {
          "id": "tls.version.modern",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.tls.version.title",
          "verdictKey": "findings.tls.version.verdict.modern",
          "whyItMattersKey": "findings.tls.version.why",
          "technicalDetails": {
            "rows": [
              [
                "TLS 1.0",
                false
              ],
              [
                "TLS 1.1",
                false
              ],
              [
                "TLS 1.2",
                true
              ],
              [
                "TLS 1.3",
                true
              ]
            ],
            "columns": [
              "tech.columns.property",
              "tech.columns.value"
            ]
          },
          "whatIsCheckedKey": "findings.tls.version.what",
          "requirementLevel": "required",
          "docsUrl": "https://datatracker.ietf.org/doc/html/rfc8446"
        },
        {
          "id": "tls.cipher.strong",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.tls.cipher.title",
          "verdictKey": "findings.tls.cipher.verdict.strong",
          "verdictParams": {
            "cipher": "TLS_AES_128_GCM_SHA256"
          },
          "whyItMattersKey": "findings.tls.cipher.why",
          "technicalDetails": {
            "rows": [
              [
                "cipher",
                "TLS_AES_128_GCM_SHA256"
              ],
              [
                "forward_secrecy",
                true
              ]
            ],
            "columns": [
              "tech.columns.property",
              "tech.columns.value"
            ]
          },
          "whatIsCheckedKey": "findings.tls.cipher.what",
          "requirementLevel": "required"
        },
        {
          "id": "tls.certificate.valid",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.tls.certificate.title",
          "verdictKey": "findings.tls.certificate.verdict.valid",
          "whyItMattersKey": "findings.tls.certificate.why",
          "technicalDetails": {
            "rows": [
              [
                "subject",
                "internet.nl"
              ],
              [
                "issuer",
                "E8"
              ],
              [
                "not_after",
                "2026-08-22T20:11:24Z"
              ],
              [
                "dns_names",
                "conn.internet.nl, en.conn.internet.nl, en.conn.ipv6.internet.nl, en.internet.nl, en.ipv6.internet.nl, internet.nl, ipv6.internet.nl, nl.conn.internet.nl, nl.conn.ipv6.internet.nl, nl.internet.nl, nl.ipv6.internet.nl, platforminternet.nl, platforminternetstandaarden.nl, www.internet.nl"
              ]
            ],
            "columns": [
              "tech.columns.property",
              "tech.columns.value"
            ]
          },
          "whatIsCheckedKey": "findings.tls.certificate.what",
          "requirementLevel": "required"
        },
        {
          "id": "tls.cert_key.strong",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.tls.cert_key.title",
          "verdictKey": "findings.tls.cert_key.verdict.strong",
          "verdictParams": {
            "bits": 256,
            "algorithm": "ECDSA"
          },
          "whyItMattersKey": "findings.tls.cert_key.why",
          "technicalDetails": {
            "rows": [
              [
                "algorithm",
                "ECDSA"
              ],
              [
                "bits",
                256
              ]
            ],
            "columns": [
              "tech.columns.property",
              "tech.columns.value"
            ]
          },
          "whatIsCheckedKey": "findings.tls.cert_key.what",
          "requirementLevel": "required"
        },
        {
          "id": "tls.cert_sig.strong",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.tls.cert_sig.title",
          "verdictKey": "findings.tls.cert_sig.verdict.strong",
          "verdictParams": {
            "algorithm": "ECDSA-SHA384"
          },
          "whyItMattersKey": "findings.tls.cert_sig.why",
          "technicalDetails": {
            "rows": [
              [
                "signature",
                "ECDSA-SHA384"
              ]
            ],
            "columns": [
              "tech.columns.property",
              "tech.columns.value"
            ]
          },
          "whatIsCheckedKey": "findings.tls.cert_sig.what",
          "requirementLevel": "required"
        },
        {
          "id": "tls.ocsp.not_stapled",
          "status": "not_found",
          "severity": "low",
          "titleKey": "findings.tls.ocsp.title",
          "verdictKey": "findings.tls.ocsp.verdict.not_stapled",
          "whyItMattersKey": "findings.tls.ocsp.why",
          "whatIsCheckedKey": "findings.tls.ocsp.what",
          "recommendationKey": "findings.tls.ocsp.recommendation",
          "requirementLevel": "recommended",
          "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6066"
        },
        {
          "id": "tls.dane.valid",
          "status": "pass",
          "severity": "info",
          "titleKey": "findings.tls.dane.title",
          "verdictKey": "findings.tls.dane.verdict.valid",
          "whyItMattersKey": "findings.tls.dane.why",
          "technicalDetails": {
            "rows": [
              [
                "2 1 1",
                "b3fb5d00e994cddf2cc9a4eea9f806bc…"
              ],
              [
                "2 1 1",
                "6ebcefb4210b088654a38b03fea3d7d1…"
              ],
              [
                "2 1 1",
                "cbbc559b44d524d6a132bdac672744da…"
              ],
              [
                "2 1 1",
                "885bf0572252c6741dc9a52f5044487f…"
              ],
              [
                "2 1 1",
                "f1440a9b76e1e41e53a4cb461329bf63…"
              ],
              [
                "2 1 1",
                "a698a20824be04e47a1a33c4fa488731…"
              ]
            ],
            "columns": [
              "tech.columns.property",
              "tech.columns.value"
            ]
          },
          "whatIsCheckedKey": "findings.tls.dane.what",
          "requirementLevel": "optional",
          "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6698"
        }
      ]
    }
  ]
}