{ "hostname": "heise.de", "jobId": "cmryqqtnk0008uep9i61itm3f", "status": "DONE", "overallScore": 87, "groups": [ { "group": "website", "score": 87, "present": true }, { "group": "mail", "score": 87, "present": true } ], "generatedAt": "2026-07-25T04:05:11.070Z", "finishedAt": "2026-07-24T09:31:47.374Z", "categories": [ { "category": "dns", "group": "website", "status": "DONE", "score": 88, "findings": [ { "id": "dns.ns.present", "status": "pass", "severity": "info", "titleKey": "findings.dns.ns.title", "verdictKey": "findings.dns.ns.verdict.present", "verdictParams": { "count": 5, "ipv6count": 5 }, "whyItMattersKey": "findings.dns.ns.why", "technicalDetails": { "rows": [ [ "ns.heise.de", "193.99.145.37", "2a00:e68:14:800::d1ce" ], [ "ns.plusline.de", "212.19.48.14", "2a02:2e0:1:2:3:4:5:6" ], [ "ns.pop-hannover.de", "193.98.1.200", "2a00:e68::2" ], [ "ns.s.plusline.de", "212.19.40.14", "2a02:2e0:a:b:c:d:e:f" ], [ "ns2.pop-hannover.net", "62.48.67.66", "2a00:e68:0:2::6" ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ipv4", "tech.columns.ipv6" ] }, "whatIsCheckedKey": "findings.dns.ns.what", "requirementLevel": "required" }, { "id": "dns.ipv4.present", "status": "pass", "severity": "info", "titleKey": "findings.dns.ipv4.title", "verdictKey": "findings.dns.ipv4.verdict.present", "verdictParams": { "count": 1, "address": "193.99.144.80" }, "whyItMattersKey": "findings.dns.ipv4.why", "technicalDetails": { "rows": [ [ "193.99.144.80" ] ], "columns": [ "tech.columns.ipv4" ] }, "whatIsCheckedKey": "findings.dns.ipv4.what", "requirementLevel": "required" }, { "id": "dns.ipv6.present", "status": "pass", "severity": "info", "titleKey": "findings.dns.ipv6.title", "verdictKey": "findings.dns.ipv6.verdict.present", "verdictParams": { "count": 1, "address": "2a02:2e0:3fe:1001:302::" }, "whyItMattersKey": "findings.dns.ipv6.why", "technicalDetails": { "rows": [ [ "2a02:2e0:3fe:1001:302::" ] ], "columns": [ "tech.columns.ipv6" ] }, "whatIsCheckedKey": "findings.dns.ipv6.what", "requirementLevel": "recommended" }, { "id": "dns.mx.present", "status": "pass", "severity": "info", "titleKey": "findings.dns.mx.title", "verdictKey": "findings.dns.mx.verdict.present", "verdictParams": { "count": 4 }, "whyItMattersKey": "findings.dns.mx.why", "technicalDetails": { "rows": [ [ 10, "mx01.hornetsecurity.com" ], [ 20, "mx02.hornetsecurity.com" ], [ 30, "mx03.hornetsecurity.com" ], [ 40, "mx04.hornetsecurity.com" ] ], "columns": [ "tech.columns.priority", "tech.columns.mx_host" ] }, "whatIsCheckedKey": "findings.dns.mx.what", "requirementLevel": "optional" }, { "id": "dns.caa.present", "status": "pass", "severity": "info", "titleKey": "findings.dns.caa.title", "verdictKey": "findings.dns.caa.verdict.present", "verdictParams": { "count": 6 }, "whyItMattersKey": "findings.dns.caa.why", "technicalDetails": { "rows": [ [ 0, "issuewild", "sectigo.com" ], [ 0, "iodef", "mailto:hostmaster@heise.de" ], [ 0, "issue", "digicert.com" ], [ 0, "issue", "amazon.com" ], [ 0, "issue", "letsencrypt.org" ], [ 0, "issue", "sectigo.com" ] ], "columns": [ "tech.columns.flag", "tech.columns.tag", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.dns.caa.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc8659" }, { "id": "dns.dnssec.insecure", "status": "not_found", "severity": "medium", "titleKey": "findings.dns.dnssec.title", "verdictKey": "findings.dns.dnssec.verdict.insecure", "whyItMattersKey": "findings.dns.dnssec.why", "technicalDetails": { "rows": [ [ "DNSKEY", false ], [ "AD", false ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.dns.dnssec.what", "recommendationKey": "findings.dns.dnssec.recommendation", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc4033" } ] }, { "category": "dnsserver", "group": "website", "status": "DONE", "score": 100, "findings": [ { "id": "dns.health.answer.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.answer.title", "verdictKey": "findings.dns.health.answer.verdict.ok", "whyItMattersKey": "findings.dns.health.answer.why", "whatIsCheckedKey": "findings.dns.health.answer.what", "requirementLevel": "required" }, { "id": "dns.health.nscount.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.nscount.title", "verdictKey": "findings.dns.health.nscount.verdict.ok", "verdictParams": { "count": 5 }, "whyItMattersKey": "findings.dns.health.nscount.why", "technicalDetails": { "rows": [ [ "ns.heise.de" ], [ "ns.plusline.de" ], [ "ns.pop-hannover.de" ], [ "ns.s.plusline.de" ], [ "ns2.pop-hannover.net" ] ], "columns": [ "tech.columns.nameserver" ] }, "whatIsCheckedKey": "findings.dns.health.nscount.what", "requirementLevel": "required", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc2182" }, { "id": "dns.health.responding.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.responding.title", "verdictKey": "findings.dns.health.responding.verdict.ok", "verdictParams": { "count": 5 }, "whyItMattersKey": "findings.dns.health.responding.why", "technicalDetails": { "rows": [ [ "ns.heise.de", "193.99.145.37", true, true, 2026072405 ], [ "ns.plusline.de", "212.19.48.14", true, true, 2026072405 ], [ "ns.pop-hannover.de", "193.98.1.200", true, true, 2026072405 ], [ "ns.s.plusline.de", "212.19.40.14", true, true, 2026072405 ], [ "ns2.pop-hannover.net", "62.48.67.66", true, true, 2026072405 ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ip", "tech.columns.responding", "tech.columns.authoritative", "tech.columns.serial" ] }, "whatIsCheckedKey": "findings.dns.health.responding.what", "requirementLevel": "required" }, { "id": "dns.health.authoritative.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.authoritative.title", "verdictKey": "findings.dns.health.authoritative.verdict.ok", "verdictParams": { "count": 5 }, "whyItMattersKey": "findings.dns.health.authoritative.why", "technicalDetails": { "rows": [ [ "ns.heise.de", "193.99.145.37", true, true, 2026072405 ], [ "ns.plusline.de", "212.19.48.14", true, true, 2026072405 ], [ "ns.pop-hannover.de", "193.98.1.200", true, true, 2026072405 ], [ "ns.s.plusline.de", "212.19.40.14", true, true, 2026072405 ], [ "ns2.pop-hannover.net", "62.48.67.66", true, true, 2026072405 ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ip", "tech.columns.responding", "tech.columns.authoritative", "tech.columns.serial" ] }, "whatIsCheckedKey": "findings.dns.health.authoritative.what", "requirementLevel": "required" }, { "id": "dns.health.serialsync.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.serialsync.title", "verdictKey": "findings.dns.health.serialsync.verdict.ok", "whyItMattersKey": "findings.dns.health.serialsync.why", "technicalDetails": { "rows": [ [ "ns.heise.de", "193.99.145.37", true, true, 2026072405 ], [ "ns.plusline.de", "212.19.48.14", true, true, 2026072405 ], [ "ns.pop-hannover.de", "193.98.1.200", true, true, 2026072405 ], [ "ns.s.plusline.de", "212.19.40.14", true, true, 2026072405 ], [ "ns2.pop-hannover.net", "62.48.67.66", true, true, 2026072405 ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ip", "tech.columns.responding", "tech.columns.authoritative", "tech.columns.serial" ] }, "whatIsCheckedKey": "findings.dns.health.serialsync.what", "requirementLevel": "recommended" }, { "id": "dns.health.openresolver.closed", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.openresolver.title", "verdictKey": "findings.dns.health.openresolver.verdict.closed", "whyItMattersKey": "findings.dns.health.openresolver.why", "technicalDetails": { "rows": [ [ "ns.heise.de", "193.99.145.37", true, true, 2026072405 ], [ "ns.plusline.de", "212.19.48.14", true, true, 2026072405 ], [ "ns.pop-hannover.de", "193.98.1.200", true, true, 2026072405 ], [ "ns.s.plusline.de", "212.19.40.14", true, true, 2026072405 ], [ "ns2.pop-hannover.net", "62.48.67.66", true, true, 2026072405 ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ip", "tech.columns.responding", "tech.columns.authoritative", "tech.columns.serial" ] }, "whatIsCheckedKey": "findings.dns.health.openresolver.what", "requirementLevel": "required", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc5358" }, { "id": "dns.health.publicips.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.publicips.title", "verdictKey": "findings.dns.health.publicips.verdict.ok", "whyItMattersKey": "findings.dns.health.publicips.why", "technicalDetails": { "rows": [ [ "ns.heise.de", "193.99.145.37", true ], [ "ns.heise.de", "2a00:e68:14:800::d1ce", true ], [ "ns.plusline.de", "212.19.48.14", true ], [ "ns.plusline.de", "2a02:2e0:1:2:3:4:5:6", true ], [ "ns.pop-hannover.de", "193.98.1.200", true ], [ "ns.pop-hannover.de", "2a00:e68::2", true ], [ "ns.s.plusline.de", "212.19.40.14", true ], [ "ns.s.plusline.de", "2a02:2e0:a:b:c:d:e:f", true ], [ "ns2.pop-hannover.net", "62.48.67.66", true ], [ "ns2.pop-hannover.net", "2a00:e68:0:2::6", true ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ip", "tech.columns.public" ] }, "whatIsCheckedKey": "findings.dns.health.publicips.what", "requirementLevel": "required" }, { "id": "dns.health.dispersion.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.dispersion.title", "verdictKey": "findings.dns.health.dispersion.verdict.ok", "verdictParams": { "networks": 9 }, "whyItMattersKey": "findings.dns.health.dispersion.why", "technicalDetails": { "rows": [ [ "ns.heise.de", "193.99.145.37", "193.99.145.0/24" ], [ "ns.heise.de", "2a00:e68:14:800::d1ce", "2a00:e68:14::/48" ], [ "ns.plusline.de", "212.19.48.14", "212.19.48.0/24" ], [ "ns.plusline.de", "2a02:2e0:1:2:3:4:5:6", "2a02:2e0:1::/48" ], [ "ns.pop-hannover.de", "193.98.1.200", "193.98.1.0/24" ], [ "ns.pop-hannover.de", "2a00:e68::2", "2a00:e68::/48" ], [ "ns.s.plusline.de", "212.19.40.14", "212.19.40.0/24" ], [ "ns.s.plusline.de", "2a02:2e0:a:b:c:d:e:f", "2a02:2e0:a::/48" ], [ "ns2.pop-hannover.net", "62.48.67.66", "62.48.67.0/24" ], [ "ns2.pop-hannover.net", "2a00:e68:0:2::6", "2a00:e68::/48" ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ip", "tech.columns.network" ] }, "whatIsCheckedKey": "findings.dns.health.dispersion.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc2182" }, { "id": "dns.health.soarefresh.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.soarefresh.title", "verdictKey": "findings.dns.health.soarefresh.verdict.ok", "verdictParams": { "max": 43200, "min": 1200, "value": 14400 }, "whyItMattersKey": "findings.dns.health.soarefresh.why", "technicalDetails": { "rows": [ [ "MNAME", "ns.heise.de" ], [ "Serial", 2026072405 ], [ "Refresh", 14400 ], [ "Retry", 3600 ], [ "Expire", 604800 ], [ "Minimum TTL", 86400 ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.dns.health.soarefresh.what", "requirementLevel": "recommended", "docsUrl": "https://www.ripe.net/publications/docs/ripe-203/" }, { "id": "dns.health.soaretry.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.soaretry.title", "verdictKey": "findings.dns.health.soaretry.verdict.ok", "verdictParams": { "max": 7200, "min": 120, "value": 3600 }, "whyItMattersKey": "findings.dns.health.soaretry.why", "technicalDetails": { "rows": [ [ "MNAME", "ns.heise.de" ], [ "Serial", 2026072405 ], [ "Refresh", 14400 ], [ "Retry", 3600 ], [ "Expire", 604800 ], [ "Minimum TTL", 86400 ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.dns.health.soaretry.what", "requirementLevel": "recommended", "docsUrl": "https://www.ripe.net/publications/docs/ripe-203/" }, { "id": "dns.health.soaexpire.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.soaexpire.title", "verdictKey": "findings.dns.health.soaexpire.verdict.ok", "verdictParams": { "max": 2419200, "min": 604800, "value": 604800 }, "whyItMattersKey": "findings.dns.health.soaexpire.why", "technicalDetails": { "rows": [ [ "MNAME", "ns.heise.de" ], [ "Serial", 2026072405 ], [ "Refresh", 14400 ], [ "Retry", 3600 ], [ "Expire", 604800 ], [ "Minimum TTL", 86400 ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.dns.health.soaexpire.what", "requirementLevel": "recommended", "docsUrl": "https://www.ripe.net/publications/docs/ripe-203/" }, { "id": "dns.health.sominttl.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.sominttl.title", "verdictKey": "findings.dns.health.sominttl.verdict.ok", "verdictParams": { "max": 86400, "min": 300, "value": 86400 }, "whyItMattersKey": "findings.dns.health.sominttl.why", "technicalDetails": { "rows": [ [ "MNAME", "ns.heise.de" ], [ "Serial", 2026072405 ], [ "Refresh", 14400 ], [ "Retry", 3600 ], [ "Expire", 604800 ], [ "Minimum TTL", 86400 ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.dns.health.sominttl.what", "requirementLevel": "recommended", "docsUrl": "https://www.ripe.net/publications/docs/ripe-203/" }, { "id": "dns.health.serialformat.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.serialformat.title", "verdictKey": "findings.dns.health.serialformat.verdict.ok", "verdictParams": { "serial": "2026072405" }, "whyItMattersKey": "findings.dns.health.serialformat.why", "technicalDetails": { "rows": [ [ "MNAME", "ns.heise.de" ], [ "Serial", 2026072405 ], [ "Refresh", 14400 ], [ "Retry", 3600 ], [ "Expire", 604800 ], [ "Minimum TTL", 86400 ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.dns.health.serialformat.what", "requirementLevel": "optional" }, { "id": "dns.health.parentmatch.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.parentmatch.title", "verdictKey": "findings.dns.health.parentmatch.verdict.ok", "whyItMattersKey": "findings.dns.health.parentmatch.why", "technicalDetails": { "rows": [ [ "ns.heise.de", true, true ], [ "ns.plusline.de", true, true ], [ "ns.pop-hannover.de", true, true ], [ "ns.s.plusline.de", true, true ], [ "ns2.pop-hannover.net", true, true ] ], "columns": [ "tech.columns.nameserver", "tech.columns.in_zone", "tech.columns.at_parent" ] }, "whatIsCheckedKey": "findings.dns.health.parentmatch.what", "requirementLevel": "recommended" }, { "id": "dns.health.glue.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.glue.title", "verdictKey": "findings.dns.health.glue.verdict.ok", "whyItMattersKey": "findings.dns.health.glue.why", "technicalDetails": { "rows": [ [ "ns.heise.de", "193.99.145.37, 2a00:e68:14:800::d1ce", "193.99.145.37, 2a00:e68:14:800::d1ce", true ] ], "columns": [ "tech.columns.nameserver", "tech.columns.glue_ips", "tech.columns.authoritative_ips", "tech.columns.match" ] }, "whatIsCheckedKey": "findings.dns.health.glue.what", "requirementLevel": "recommended" }, { "id": "dns.health.primaryatparent.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.primaryatparent.title", "verdictKey": "findings.dns.health.primaryatparent.verdict.ok", "verdictParams": { "primary": "ns.heise.de" }, "whyItMattersKey": "findings.dns.health.primaryatparent.why", "technicalDetails": { "rows": [ [ "ns.heise.de", true, true ], [ "ns.plusline.de", true, true ], [ "ns.pop-hannover.de", true, true ], [ "ns.s.plusline.de", true, true ], [ "ns2.pop-hannover.net", true, true ] ], "columns": [ "tech.columns.nameserver", "tech.columns.in_zone", "tech.columns.at_parent" ] }, "whatIsCheckedKey": "findings.dns.health.primaryatparent.what", "requirementLevel": "recommended" } ] }, { "category": "http", "group": "website", "status": "DONE", "score": 78, "findings": [ { "id": "http.reachable.https", "status": "pass", "severity": "info", "titleKey": "findings.http.reachable.title", "verdictKey": "findings.http.reachable.verdict.https", "whyItMattersKey": "findings.http.reachable.why", "technicalDetails": { "rows": [ [ "https", true ], [ "http", true ], [ "final_url", "https://www.heise.de/" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.reachable.what", "requirementLevel": "required" }, { "id": "http.ipv6.reachable", "status": "pass", "severity": "info", "titleKey": "findings.http.ipv6.title", "verdictKey": "findings.http.ipv6.verdict.reachable", "verdictParams": { "address": "2a02:2e0:3fe:1001:302::" }, "whyItMattersKey": "findings.http.ipv6.why", "technicalDetails": { "rows": [ [ "2a02:2e0:3fe:1001:302::" ] ], "columns": [ "tech.columns.ipv6" ] }, "whatIsCheckedKey": "findings.http.ipv6.what", "requirementLevel": "recommended" }, { "id": "http.https_redirect.yes", "status": "pass", "severity": "info", "titleKey": "findings.http.https_redirect.title", "verdictKey": "findings.http.https_redirect.verdict.yes", "whyItMattersKey": "findings.http.https_redirect.why", "whatIsCheckedKey": "findings.http.https_redirect.what", "requirementLevel": "recommended" }, { "id": "http.hsts.present", "status": "pass", "severity": "info", "titleKey": "findings.http.hsts.title", "verdictKey": "findings.http.hsts.verdict.present", "whyItMattersKey": "findings.http.hsts.why", "technicalDetails": { "rows": [ [ "header", "max-age=15768000" ], [ "includeSubDomains", false ], [ "preload", false ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.hsts.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6797" }, { "id": "http.csp.missing", "status": "not_found", "severity": "medium", "titleKey": "findings.http.csp.title", "verdictKey": "findings.http.csp.verdict.missing", "whyItMattersKey": "findings.http.csp.why", "whatIsCheckedKey": "findings.http.csp.what", "recommendationKey": "findings.http.csp.recommendation", "requirementLevel": "recommended", "docsUrl": "https://www.w3.org/TR/CSP3/" }, { "id": "http.xfo.present", "status": "pass", "severity": "info", "titleKey": "findings.http.xfo.title", "verdictKey": "findings.http.xfo.verdict.present", "whyItMattersKey": "findings.http.xfo.why", "technicalDetails": { "rows": [ [ "X-Frame-Options", "DENY" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.xfo.what", "requirementLevel": "recommended" }, { "id": "http.xcto.nosniff", "status": "pass", "severity": "info", "titleKey": "findings.http.xcto.title", "verdictKey": "findings.http.xcto.verdict.nosniff", "whyItMattersKey": "findings.http.xcto.why", "whatIsCheckedKey": "findings.http.xcto.what", "requirementLevel": "recommended" }, { "id": "http.referrer.missing", "status": "not_found", "severity": "low", "titleKey": "findings.http.referrer.title", "verdictKey": "findings.http.referrer.verdict.missing", "whyItMattersKey": "findings.http.referrer.why", "whatIsCheckedKey": "findings.http.referrer.what", "recommendationKey": "findings.http.referrer.recommendation", "requirementLevel": "recommended" }, { "id": "http.compression.active", "status": "fail", "severity": "low", "titleKey": "findings.http.compression.title", "verdictKey": "findings.http.compression.verdict.active", "verdictParams": { "encoding": "gzip" }, "whyItMattersKey": "findings.http.compression.why", "technicalDetails": { "rows": [ [ "content_encoding", "gzip" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.compression.what", "recommendationKey": "findings.http.compression.recommendation", "recommendationParams": { "encoding": "gzip" }, "requirementLevel": "optional" }, { "id": "http.securitytxt.present", "status": "pass", "severity": "info", "titleKey": "findings.http.securitytxt.title", "verdictKey": "findings.http.securitytxt.verdict.present", "whyItMattersKey": "findings.http.securitytxt.why", "technicalDetails": { "rows": [ [ "location", "/security.txt" ], [ "contact", true ], [ "expires", true ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.securitytxt.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc9116" } ] }, { "category": "mail", "group": "mail", "status": "DONE", "score": 78, "findings": [ { "id": "mail.mx.present", "status": "pass", "severity": "info", "titleKey": "findings.mail.mx.title", "verdictKey": "findings.mail.mx.verdict.present", "verdictParams": { "count": 4 }, "whyItMattersKey": "findings.mail.mx.why", "technicalDetails": { "rows": [ [ 10, "mx01.hornetsecurity.com" ], [ 20, "mx02.hornetsecurity.com" ], [ 30, "mx03.hornetsecurity.com" ], [ 40, "mx04.hornetsecurity.com" ] ], "columns": [ "tech.columns.priority", "tech.columns.mx_host" ] }, "whatIsCheckedKey": "findings.mail.mx.what", "requirementLevel": "required" }, { "id": "mail.spf.softfail", "status": "pass", "severity": "low", "titleKey": "findings.mail.spf.title", "verdictKey": "findings.mail.spf.verdict.softfail", "whyItMattersKey": "findings.mail.spf.why", "technicalDetails": { "rows": [ [ "record", "v=spf1 ip4:193.99.144.0/24 ip4:193.99.145.0/24 ip6:2a02:2e0:3fe:1001::/64 ip6:2a00:e68:14:800::/64 ip4:193.100.232.56 ip6:2a00:e68:14:801:bad::beef include:_spfdiv.heise.de include:spf.dsb.net include:spf.hornetsecurity.com ~all" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.spf.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc7208" }, { "id": "mail.dkim.present", "status": "pass", "severity": "info", "titleKey": "findings.mail.dkim.title", "verdictKey": "findings.mail.dkim.verdict.present", "verdictParams": { "count": 3 }, "whyItMattersKey": "findings.mail.dkim.why", "technicalDetails": { "rows": [ [ "mail", "k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDe…" ], [ "s1", "k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMI…" ], [ "s2", "k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMI…" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.dkim.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6376" }, { "id": "mail.dmarc.monitor", "status": "fail", "severity": "medium", "titleKey": "findings.mail.dmarc.title", "verdictKey": "findings.mail.dmarc.verdict.monitor", "verdictParams": { "policy": "none" }, "whyItMattersKey": "findings.mail.dmarc.why", "technicalDetails": { "rows": [ [ "record", "v=DMARC1; p=none; sp=none; rua=mailto:dmarc.report@heise.de" ], [ "policy", "none" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.dmarc.what", "recommendationKey": "findings.mail.dmarc.recommendation", "recommendationParams": { "policy": "none" }, "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc7489" }, { "id": "mail.bimi.missing", "status": "not_found", "severity": "info", "titleKey": "findings.mail.bimi.title", "verdictKey": "findings.mail.bimi.verdict.missing", "whyItMattersKey": "findings.mail.bimi.why", "whatIsCheckedKey": "findings.mail.bimi.what", "recommendationKey": "findings.mail.bimi.recommendation", "requirementLevel": "optional", "docsUrl": "https://datatracker.ietf.org/doc/html/draft-brand-indicators-for-message-identification" }, { "id": "mail.bl.sorbsbadconf.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.sorbsbadconf.title", "verdictKey": "findings.mail.bl.sorbsbadconf.verdict.clean", "verdictParams": { "zone": "badconf.rhsbl.sorbs.net" }, "whyItMattersKey": "findings.mail.bl.sorbsbadconf.why", "technicalDetails": { "rows": [ [ "heise.de", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.sorbsbadconf.what" }, { "id": "mail.bl.sorbsnomail.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.sorbsnomail.title", "verdictKey": "findings.mail.bl.sorbsnomail.verdict.clean", "verdictParams": { "zone": "nomail.rhsbl.sorbs.net" }, "whyItMattersKey": "findings.mail.bl.sorbsnomail.why", "technicalDetails": { "rows": [ [ "heise.de", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.sorbsnomail.what" }, { "id": "mail.ipv6.none", "status": "not_found", "severity": "low", "titleKey": "findings.mail.ipv6.title", "verdictKey": "findings.mail.ipv6.verdict.none", "whyItMattersKey": "findings.mail.ipv6.why", "technicalDetails": { "rows": [ [ "mx01.hornetsecurity.com", "—" ], [ "mx02.hornetsecurity.com", "—" ], [ "mx03.hornetsecurity.com", "—" ], [ "mx04.hornetsecurity.com", "—" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.ipv6" ] }, "whatIsCheckedKey": "findings.mail.ipv6.what", "recommendationKey": "findings.mail.ipv6.recommendation", "requirementLevel": "recommended" }, { "id": "mail.starttls.all", "status": "pass", "severity": "info", "titleKey": "findings.mail.starttls.title", "verdictKey": "findings.mail.starttls.verdict.all", "whyItMattersKey": "findings.mail.starttls.why", "technicalDetails": { "rows": [ [ "mx01.hornetsecurity.com", "valid" ], [ "mx02.hornetsecurity.com", "valid" ], [ "mx03.hornetsecurity.com", "valid" ], [ "mx04.hornetsecurity.com", "valid" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.starttls.what", "requirementLevel": "required", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc3207" }, { "id": "mail.tls.modern", "status": "pass", "severity": "info", "titleKey": "findings.mail.tls.title", "verdictKey": "findings.mail.tls.verdict.modern", "whyItMattersKey": "findings.mail.tls.why", "technicalDetails": { "rows": [ [ "mx01.hornetsecurity.com", "TLS 1.3" ], [ "mx02.hornetsecurity.com", "TLS 1.3" ], [ "mx03.hornetsecurity.com", "TLS 1.3" ], [ "mx04.hornetsecurity.com", "TLS 1.3" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.tls.what", "requirementLevel": "required" }, { "id": "mail.dane.missing", "status": "not_found", "severity": "low", "titleKey": "findings.mail.dane.title", "verdictKey": "findings.mail.dane.verdict.missing", "whyItMattersKey": "findings.mail.dane.why", "technicalDetails": { "rows": [ [ "mx01.hornetsecurity.com", "no TLSA" ], [ "mx02.hornetsecurity.com", "no TLSA" ], [ "mx03.hornetsecurity.com", "no TLSA" ], [ "mx04.hornetsecurity.com", "no TLSA" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.dane.what", "recommendationKey": "findings.mail.dane.recommendation", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc7672" } ] }, { "category": "blacklist", "group": "mail", "status": "DONE", "score": 100, "findings": [ { "id": "mail.bl.spamhauszen.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.spamhauszen.title", "verdictKey": "findings.mail.bl.spamhauszen.verdict.clean", "verdictParams": { "zone": "zen.spamhaus.org" }, "whyItMattersKey": "findings.mail.bl.spamhauszen.why", "technicalDetails": { "rows": [ [ "mx01.hornetsecurity.com (94.100.132.8)", "clean", "" ], [ "mx02.hornetsecurity.com (94.100.136.8)", "clean", "" ], [ "mx03.hornetsecurity.com (94.100.134.8)", "clean", "" ], [ "mx04.hornetsecurity.com (94.100.136.7)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.spamhauszen.what", "requirementLevel": "required" }, { "id": "mail.bl.spamhausdbl.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.spamhausdbl.title", "verdictKey": "findings.mail.bl.spamhausdbl.verdict.clean", "verdictParams": { "zone": "dbl.spamhaus.org" }, "whyItMattersKey": "findings.mail.bl.spamhausdbl.why", "technicalDetails": { "rows": [ [ "heise.de", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.spamhausdbl.what", "requirementLevel": "required" }, { "id": "mail.bl.surbl.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.surbl.title", "verdictKey": "findings.mail.bl.surbl.verdict.clean", "verdictParams": { "zone": "multi.surbl.org" }, "whyItMattersKey": "findings.mail.bl.surbl.why", "technicalDetails": { "rows": [ [ "heise.de", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.surbl.what", "requirementLevel": "recommended" }, { "id": "mail.bl.uceprotect1.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.uceprotect1.title", "verdictKey": "findings.mail.bl.uceprotect1.verdict.clean", "verdictParams": { "zone": "dnsbl-1.uceprotect.net" }, "whyItMattersKey": "findings.mail.bl.uceprotect1.why", "technicalDetails": { "rows": [ [ "mx01.hornetsecurity.com (94.100.132.8)", "clean", "" ], [ "mx02.hornetsecurity.com (94.100.136.8)", "clean", "" ], [ "mx03.hornetsecurity.com (94.100.134.8)", "clean", "" ], [ "mx04.hornetsecurity.com (94.100.136.7)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.uceprotect1.what", "requirementLevel": "recommended" }, { "id": "mail.bl.uceprotect2.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.uceprotect2.title", "verdictKey": "findings.mail.bl.uceprotect2.verdict.clean", "verdictParams": { "zone": "dnsbl-2.uceprotect.net" }, "whyItMattersKey": "findings.mail.bl.uceprotect2.why", "technicalDetails": { "rows": [ [ "mx01.hornetsecurity.com (94.100.132.8)", "clean", "" ], [ "mx02.hornetsecurity.com (94.100.136.8)", "clean", "" ], [ "mx03.hornetsecurity.com (94.100.134.8)", "clean", "" ], [ "mx04.hornetsecurity.com (94.100.136.7)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.uceprotect2.what", "requirementLevel": "optional" }, { "id": "mail.bl.uceprotect3.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.uceprotect3.title", "verdictKey": "findings.mail.bl.uceprotect3.verdict.clean", "verdictParams": { "zone": "dnsbl-3.uceprotect.net" }, "whyItMattersKey": "findings.mail.bl.uceprotect3.why", "technicalDetails": { "rows": [ [ "mx01.hornetsecurity.com (94.100.132.8)", "clean", "" ], [ "mx02.hornetsecurity.com (94.100.136.8)", "clean", "" ], [ "mx03.hornetsecurity.com (94.100.134.8)", "clean", "" ], [ "mx04.hornetsecurity.com (94.100.136.7)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.uceprotect3.what", "requirementLevel": "optional" }, { "id": "mail.bl.barracuda.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.barracuda.title", "verdictKey": "findings.mail.bl.barracuda.verdict.clean", "verdictParams": { "zone": "b.barracudacentral.org" }, "whyItMattersKey": "findings.mail.bl.barracuda.why", "technicalDetails": { "rows": [ [ "mx01.hornetsecurity.com (94.100.132.8)", "clean", "" ], [ "mx02.hornetsecurity.com (94.100.136.8)", "clean", "" ], [ "mx03.hornetsecurity.com (94.100.134.8)", "clean", "" ], [ "mx04.hornetsecurity.com (94.100.136.7)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.barracuda.what", "requirementLevel": "required" }, { "id": "mail.bl.psbl.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.psbl.title", "verdictKey": "findings.mail.bl.psbl.verdict.clean", "verdictParams": { "zone": "psbl.surriel.com" }, "whyItMattersKey": "findings.mail.bl.psbl.why", "technicalDetails": { "rows": [ [ "mx01.hornetsecurity.com (94.100.132.8)", "clean", "" ], [ "mx02.hornetsecurity.com (94.100.136.8)", "clean", "" ], [ "mx03.hornetsecurity.com (94.100.134.8)", "clean", "" ], [ "mx04.hornetsecurity.com (94.100.136.7)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.psbl.what", "requirementLevel": "required" }, { "id": "mail.bl.semfresh.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.semfresh.title", "verdictKey": "findings.mail.bl.semfresh.verdict.clean", "verdictParams": { "zone": "fresh.spameatingmonkey.net" }, "whyItMattersKey": "findings.mail.bl.semfresh.why", "technicalDetails": { "rows": [ [ "heise.de", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.semfresh.what", "requirementLevel": "recommended" }, { "id": "mail.bl.sembl.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.sembl.title", "verdictKey": "findings.mail.bl.sembl.verdict.clean", "verdictParams": { "zone": "bl.spameatingmonkey.net" }, "whyItMattersKey": "findings.mail.bl.sembl.why", "technicalDetails": { "rows": [ [ "mx01.hornetsecurity.com (94.100.132.8)", "clean", "" ], [ "mx02.hornetsecurity.com (94.100.136.8)", "clean", "" ], [ "mx03.hornetsecurity.com (94.100.134.8)", "clean", "" ], [ "mx04.hornetsecurity.com (94.100.136.7)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.sembl.what", "requirementLevel": "recommended" }, { "id": "mail.bl.zerospam.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.zerospam.title", "verdictKey": "findings.mail.bl.zerospam.verdict.clean", "verdictParams": { "zone": "bl.0spam.org" }, "whyItMattersKey": "findings.mail.bl.zerospam.why", "technicalDetails": { "rows": [ [ "mx01.hornetsecurity.com (94.100.132.8)", "clean", "" ], [ "mx02.hornetsecurity.com (94.100.136.8)", "clean", "" ], [ "mx03.hornetsecurity.com (94.100.134.8)", "clean", "" ], [ "mx04.hornetsecurity.com (94.100.136.7)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.zerospam.what", "requirementLevel": "required" }, { "id": "mail.bl.blocklistde.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.blocklistde.title", "verdictKey": "findings.mail.bl.blocklistde.verdict.clean", "verdictParams": { "zone": "bl.blocklist.de" }, "whyItMattersKey": "findings.mail.bl.blocklistde.why", "technicalDetails": { "rows": [ [ "mx01.hornetsecurity.com (94.100.132.8)", "clean", "" ], [ "mx02.hornetsecurity.com (94.100.136.8)", "clean", "" ], [ "mx03.hornetsecurity.com (94.100.134.8)", "clean", "" ], [ "mx04.hornetsecurity.com (94.100.136.7)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.blocklistde.what", "requirementLevel": "required" } ] }, { "category": "tls", "group": "website", "status": "DONE", "score": 90, "findings": [ { "id": "tls.https.reachable", "status": "pass", "severity": "info", "titleKey": "findings.tls.https.title", "verdictKey": "findings.tls.https.verdict.reachable", "whyItMattersKey": "findings.tls.https.why", "whatIsCheckedKey": "findings.tls.https.what", "requirementLevel": "required" }, { "id": "tls.version.modern", "status": "pass", "severity": "info", "titleKey": "findings.tls.version.title", "verdictKey": "findings.tls.version.verdict.modern", "whyItMattersKey": "findings.tls.version.why", "technicalDetails": { "rows": [ [ "TLS 1.0", false ], [ "TLS 1.1", false ], [ "TLS 1.2", true ], [ "TLS 1.3", true ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.version.what", "requirementLevel": "required", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc8446" }, { "id": "tls.cipher.strong", "status": "pass", "severity": "info", "titleKey": "findings.tls.cipher.title", "verdictKey": "findings.tls.cipher.verdict.strong", "verdictParams": { "cipher": "TLS_AES_256_GCM_SHA384" }, "whyItMattersKey": "findings.tls.cipher.why", "technicalDetails": { "rows": [ [ "cipher", "TLS_AES_256_GCM_SHA384" ], [ "forward_secrecy", true ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.cipher.what", "requirementLevel": "required" }, { "id": "tls.certificate.valid", "status": "pass", "severity": "info", "titleKey": "findings.tls.certificate.title", "verdictKey": "findings.tls.certificate.verdict.valid", "whyItMattersKey": "findings.tls.certificate.why", "technicalDetails": { "rows": [ [ "subject", "heise.de" ], [ "issuer", "YR1" ], [ "not_after", "2026-10-02T16:57:49Z" ], [ "dns_names", "heise.de" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.certificate.what", "requirementLevel": "required" }, { "id": "tls.cert_key.strong", "status": "pass", "severity": "info", "titleKey": "findings.tls.cert_key.title", "verdictKey": "findings.tls.cert_key.verdict.strong", "verdictParams": { "bits": 2048, "algorithm": "RSA" }, "whyItMattersKey": "findings.tls.cert_key.why", "technicalDetails": { "rows": [ [ "algorithm", "RSA" ], [ "bits", 2048 ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.cert_key.what", "requirementLevel": "required" }, { "id": "tls.cert_sig.strong", "status": "pass", "severity": "info", "titleKey": "findings.tls.cert_sig.title", "verdictKey": "findings.tls.cert_sig.verdict.strong", "verdictParams": { "algorithm": "SHA256-RSA" }, "whyItMattersKey": "findings.tls.cert_sig.why", "technicalDetails": { "rows": [ [ "signature", "SHA256-RSA" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.cert_sig.what", "requirementLevel": "required" }, { "id": "tls.ocsp.not_stapled", "status": "not_found", "severity": "low", "titleKey": "findings.tls.ocsp.title", "verdictKey": "findings.tls.ocsp.verdict.not_stapled", "whyItMattersKey": "findings.tls.ocsp.why", "whatIsCheckedKey": "findings.tls.ocsp.what", "recommendationKey": "findings.tls.ocsp.recommendation", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6066" }, { "id": "tls.dane.missing", "status": "not_found", "severity": "low", "titleKey": "findings.tls.dane.title", "verdictKey": "findings.tls.dane.verdict.missing", "whyItMattersKey": "findings.tls.dane.why", "whatIsCheckedKey": "findings.tls.dane.what", "recommendationKey": "findings.tls.dane.recommendation", "requirementLevel": "optional", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6698" } ] } ] }