{ "hostname": "swiss.com", "jobId": "cms03j7oh000guehc6cnkezia", "status": "DONE", "overallScore": 81, "groups": [ { "group": "website", "score": 88, "present": true }, { "group": "mail", "score": 65, "present": true } ], "generatedAt": "2026-07-25T13:58:33.918Z", "finishedAt": "2026-07-25T08:17:39.201Z", "categories": [ { "category": "dns", "group": "website", "status": "DONE", "score": 73, "findings": [ { "id": "dns.ns.no_ipv6", "status": "fail", "severity": "low", "titleKey": "findings.dns.ns.title", "verdictKey": "findings.dns.ns.verdict.no_ipv6", "verdictParams": { "count": 2, "ipv6count": 0 }, "whyItMattersKey": "findings.dns.ns.why", "technicalDetails": { "rows": [ [ "ns1.swiss.com", "172.64.52.249", "—" ], [ "ns2.swiss.com", "172.64.53.96", "—" ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ipv4", "tech.columns.ipv6" ] }, "whatIsCheckedKey": "findings.dns.ns.what", "recommendationKey": "findings.dns.ns.recommendation", "recommendationParams": { "count": 2, "ipv6count": 0 }, "requirementLevel": "required" }, { "id": "dns.ipv4.present", "status": "pass", "severity": "info", "titleKey": "findings.dns.ipv4.title", "verdictKey": "findings.dns.ipv4.verdict.present", "verdictParams": { "count": 1, "address": "146.216.3.74" }, "whyItMattersKey": "findings.dns.ipv4.why", "technicalDetails": { "rows": [ [ "146.216.3.74" ] ], "columns": [ "tech.columns.ipv4" ] }, "whatIsCheckedKey": "findings.dns.ipv4.what", "requirementLevel": "required" }, { "id": "dns.ipv6.missing", "status": "not_found", "severity": "low", "titleKey": "findings.dns.ipv6.title", "verdictKey": "findings.dns.ipv6.verdict.missing", "whyItMattersKey": "findings.dns.ipv6.why", "whatIsCheckedKey": "findings.dns.ipv6.what", "recommendationKey": "findings.dns.ipv6.recommendation", "requirementLevel": "recommended" }, { "id": "dns.mx.present", "status": "pass", "severity": "info", "titleKey": "findings.dns.mx.title", "verdictKey": "findings.dns.mx.verdict.present", "verdictParams": { "count": 2 }, "whyItMattersKey": "findings.dns.mx.why", "technicalDetails": { "rows": [ [ 10, "mxb-005f4701.gslb.pphosted.com" ], [ 10, "mxa-005f4701.gslb.pphosted.com" ] ], "columns": [ "tech.columns.priority", "tech.columns.mx_host" ] }, "whatIsCheckedKey": "findings.dns.mx.what", "requirementLevel": "optional" }, { "id": "dns.caa.missing", "status": "not_found", "severity": "low", "titleKey": "findings.dns.caa.title", "verdictKey": "findings.dns.caa.verdict.missing", "whyItMattersKey": "findings.dns.caa.why", "whatIsCheckedKey": "findings.dns.caa.what", "recommendationKey": "findings.dns.caa.recommendation", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc8659" }, { "id": "dns.dnssec.insecure", "status": "not_found", "severity": "medium", "titleKey": "findings.dns.dnssec.title", "verdictKey": "findings.dns.dnssec.verdict.insecure", "whyItMattersKey": "findings.dns.dnssec.why", "technicalDetails": { "rows": [ [ "DNSKEY", false ], [ "AD", false ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.dns.dnssec.what", "recommendationKey": "findings.dns.dnssec.recommendation", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc4033" } ] }, { "category": "dnsserver", "group": "website", "status": "DONE", "score": 88, "findings": [ { "id": "dns.health.answer.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.answer.title", "verdictKey": "findings.dns.health.answer.verdict.ok", "whyItMattersKey": "findings.dns.health.answer.why", "whatIsCheckedKey": "findings.dns.health.answer.what", "requirementLevel": "required" }, { "id": "dns.health.nscount.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.nscount.title", "verdictKey": "findings.dns.health.nscount.verdict.ok", "verdictParams": { "count": 2 }, "whyItMattersKey": "findings.dns.health.nscount.why", "technicalDetails": { "rows": [ [ "ns1.swiss.com" ], [ "ns2.swiss.com" ] ], "columns": [ "tech.columns.nameserver" ] }, "whatIsCheckedKey": "findings.dns.health.nscount.what", "requirementLevel": "required", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc2182" }, { "id": "dns.health.responding.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.responding.title", "verdictKey": "findings.dns.health.responding.verdict.ok", "verdictParams": { "count": 2 }, "whyItMattersKey": "findings.dns.health.responding.why", "technicalDetails": { "rows": [ [ "ns1.swiss.com", "172.64.52.249", true, true, 2026072401 ], [ "ns2.swiss.com", "172.64.53.96", true, true, 2026072401 ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ip", "tech.columns.responding", "tech.columns.authoritative", "tech.columns.serial" ] }, "whatIsCheckedKey": "findings.dns.health.responding.what", "requirementLevel": "required" }, { "id": "dns.health.authoritative.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.authoritative.title", "verdictKey": "findings.dns.health.authoritative.verdict.ok", "verdictParams": { "count": 2 }, "whyItMattersKey": "findings.dns.health.authoritative.why", "technicalDetails": { "rows": [ [ "ns1.swiss.com", "172.64.52.249", true, true, 2026072401 ], [ "ns2.swiss.com", "172.64.53.96", true, true, 2026072401 ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ip", "tech.columns.responding", "tech.columns.authoritative", "tech.columns.serial" ] }, "whatIsCheckedKey": "findings.dns.health.authoritative.what", "requirementLevel": "required" }, { "id": "dns.health.serialsync.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.serialsync.title", "verdictKey": "findings.dns.health.serialsync.verdict.ok", "whyItMattersKey": "findings.dns.health.serialsync.why", "technicalDetails": { "rows": [ [ "ns1.swiss.com", "172.64.52.249", true, true, 2026072401 ], [ "ns2.swiss.com", "172.64.53.96", true, true, 2026072401 ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ip", "tech.columns.responding", "tech.columns.authoritative", "tech.columns.serial" ] }, "whatIsCheckedKey": "findings.dns.health.serialsync.what", "requirementLevel": "recommended" }, { "id": "dns.health.openresolver.closed", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.openresolver.title", "verdictKey": "findings.dns.health.openresolver.verdict.closed", "whyItMattersKey": "findings.dns.health.openresolver.why", "technicalDetails": { "rows": [ [ "ns1.swiss.com", "172.64.52.249", true, true, 2026072401 ], [ "ns2.swiss.com", "172.64.53.96", true, true, 2026072401 ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ip", "tech.columns.responding", "tech.columns.authoritative", "tech.columns.serial" ] }, "whatIsCheckedKey": "findings.dns.health.openresolver.what", "requirementLevel": "required", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc5358" }, { "id": "dns.health.publicips.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.publicips.title", "verdictKey": "findings.dns.health.publicips.verdict.ok", "whyItMattersKey": "findings.dns.health.publicips.why", "technicalDetails": { "rows": [ [ "ns1.swiss.com", "172.64.52.249", true ], [ "ns2.swiss.com", "172.64.53.96", true ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ip", "tech.columns.public" ] }, "whatIsCheckedKey": "findings.dns.health.publicips.what", "requirementLevel": "required" }, { "id": "dns.health.dispersion.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.dispersion.title", "verdictKey": "findings.dns.health.dispersion.verdict.ok", "verdictParams": { "networks": 2 }, "whyItMattersKey": "findings.dns.health.dispersion.why", "technicalDetails": { "rows": [ [ "ns1.swiss.com", "172.64.52.249", "172.64.52.0/24" ], [ "ns2.swiss.com", "172.64.53.96", "172.64.53.0/24" ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ip", "tech.columns.network" ] }, "whatIsCheckedKey": "findings.dns.health.dispersion.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc2182" }, { "id": "dns.health.ipv6.none", "status": "not_found", "severity": "medium", "titleKey": "findings.dns.health.ipv6.title", "verdictKey": "findings.dns.health.ipv6.verdict.none", "whyItMattersKey": "findings.dns.health.ipv6.why", "technicalDetails": { "rows": [ [ "ns1.swiss.com", "—", false ], [ "ns2.swiss.com", "—", false ] ], "columns": [ "tech.columns.nameserver", "tech.columns.ipv6", "tech.columns.reachable" ] }, "whatIsCheckedKey": "findings.dns.health.ipv6.what", "recommendationKey": "findings.dns.health.ipv6.recommendation", "requirementLevel": "recommended" }, { "id": "dns.health.soarefresh.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.soarefresh.title", "verdictKey": "findings.dns.health.soarefresh.verdict.ok", "verdictParams": { "max": 43200, "min": 1200, "value": 14400 }, "whyItMattersKey": "findings.dns.health.soarefresh.why", "technicalDetails": { "rows": [ [ "MNAME", "ns1.swiss.com" ], [ "Serial", 2026072401 ], [ "Refresh", 14400 ], [ "Retry", 1800 ], [ "Expire", 1209600 ], [ "Minimum TTL", 900 ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.dns.health.soarefresh.what", "requirementLevel": "recommended", "docsUrl": "https://www.ripe.net/publications/docs/ripe-203/" }, { "id": "dns.health.soaretry.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.soaretry.title", "verdictKey": "findings.dns.health.soaretry.verdict.ok", "verdictParams": { "max": 7200, "min": 120, "value": 1800 }, "whyItMattersKey": "findings.dns.health.soaretry.why", "technicalDetails": { "rows": [ [ "MNAME", "ns1.swiss.com" ], [ "Serial", 2026072401 ], [ "Refresh", 14400 ], [ "Retry", 1800 ], [ "Expire", 1209600 ], [ "Minimum TTL", 900 ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.dns.health.soaretry.what", "requirementLevel": "recommended", "docsUrl": "https://www.ripe.net/publications/docs/ripe-203/" }, { "id": "dns.health.soaexpire.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.soaexpire.title", "verdictKey": "findings.dns.health.soaexpire.verdict.ok", "verdictParams": { "max": 2419200, "min": 604800, "value": 1209600 }, "whyItMattersKey": "findings.dns.health.soaexpire.why", "technicalDetails": { "rows": [ [ "MNAME", "ns1.swiss.com" ], [ "Serial", 2026072401 ], [ "Refresh", 14400 ], [ "Retry", 1800 ], [ "Expire", 1209600 ], [ "Minimum TTL", 900 ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.dns.health.soaexpire.what", "requirementLevel": "recommended", "docsUrl": "https://www.ripe.net/publications/docs/ripe-203/" }, { "id": "dns.health.sominttl.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.sominttl.title", "verdictKey": "findings.dns.health.sominttl.verdict.ok", "verdictParams": { "max": 86400, "min": 300, "value": 900 }, "whyItMattersKey": "findings.dns.health.sominttl.why", "technicalDetails": { "rows": [ [ "MNAME", "ns1.swiss.com" ], [ "Serial", 2026072401 ], [ "Refresh", 14400 ], [ "Retry", 1800 ], [ "Expire", 1209600 ], [ "Minimum TTL", 900 ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.dns.health.sominttl.what", "requirementLevel": "recommended", "docsUrl": "https://www.ripe.net/publications/docs/ripe-203/" }, { "id": "dns.health.serialformat.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.serialformat.title", "verdictKey": "findings.dns.health.serialformat.verdict.ok", "verdictParams": { "serial": "2026072401" }, "whyItMattersKey": "findings.dns.health.serialformat.why", "technicalDetails": { "rows": [ [ "MNAME", "ns1.swiss.com" ], [ "Serial", 2026072401 ], [ "Refresh", 14400 ], [ "Retry", 1800 ], [ "Expire", 1209600 ], [ "Minimum TTL", 900 ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.dns.health.serialformat.what", "requirementLevel": "optional" }, { "id": "dns.health.parentmatch.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.parentmatch.title", "verdictKey": "findings.dns.health.parentmatch.verdict.ok", "whyItMattersKey": "findings.dns.health.parentmatch.why", "technicalDetails": { "rows": [ [ "ns1.swiss.com", true, true ], [ "ns2.swiss.com", true, true ] ], "columns": [ "tech.columns.nameserver", "tech.columns.in_zone", "tech.columns.at_parent" ] }, "whatIsCheckedKey": "findings.dns.health.parentmatch.what", "requirementLevel": "recommended" }, { "id": "dns.health.glue.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.glue.title", "verdictKey": "findings.dns.health.glue.verdict.ok", "whyItMattersKey": "findings.dns.health.glue.why", "technicalDetails": { "rows": [ [ "ns1.swiss.com", "172.64.52.249", "172.64.52.249", true ], [ "ns2.swiss.com", "172.64.53.96", "172.64.53.96", true ] ], "columns": [ "tech.columns.nameserver", "tech.columns.glue_ips", "tech.columns.authoritative_ips", "tech.columns.match" ] }, "whatIsCheckedKey": "findings.dns.health.glue.what", "requirementLevel": "recommended" }, { "id": "dns.health.primaryatparent.ok", "status": "pass", "severity": "info", "titleKey": "findings.dns.health.primaryatparent.title", "verdictKey": "findings.dns.health.primaryatparent.verdict.ok", "verdictParams": { "primary": "ns1.swiss.com" }, "whyItMattersKey": "findings.dns.health.primaryatparent.why", "technicalDetails": { "rows": [ [ "ns1.swiss.com", true, true ], [ "ns2.swiss.com", true, true ] ], "columns": [ "tech.columns.nameserver", "tech.columns.in_zone", "tech.columns.at_parent" ] }, "whatIsCheckedKey": "findings.dns.health.primaryatparent.what", "requirementLevel": "recommended" } ] }, { "category": "http", "group": "website", "status": "DONE", "score": 90, "findings": [ { "id": "http.reachable.https", "status": "pass", "severity": "info", "titleKey": "findings.http.reachable.title", "verdictKey": "findings.http.reachable.verdict.https", "whyItMattersKey": "findings.http.reachable.why", "technicalDetails": { "rows": [ [ "https", true ], [ "http", true ], [ "final_url", "https://www.swiss.com/ch/en/homepage" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.reachable.what", "requirementLevel": "required" }, { "id": "http.ipv6.no_aaaa", "status": "not_found", "severity": "low", "titleKey": "findings.http.ipv6.title", "verdictKey": "findings.http.ipv6.verdict.no_aaaa", "whyItMattersKey": "findings.http.ipv6.why", "technicalDetails": { "rows": [], "columns": [ "tech.columns.ipv6" ] }, "whatIsCheckedKey": "findings.http.ipv6.what", "recommendationKey": "findings.http.ipv6.recommendation", "requirementLevel": "recommended" }, { "id": "http.ipv6content.no_aaaa", "status": "not_applicable", "severity": "info", "titleKey": "findings.http.ipv6content.title", "verdictKey": "findings.http.ipv6content.verdict.no_aaaa", "whyItMattersKey": "findings.http.ipv6content.why", "whatIsCheckedKey": "findings.http.ipv6content.what", "requirementLevel": "recommended" }, { "id": "http.https_redirect.yes", "status": "pass", "severity": "info", "titleKey": "findings.http.https_redirect.title", "verdictKey": "findings.http.https_redirect.verdict.yes", "whyItMattersKey": "findings.http.https_redirect.why", "whatIsCheckedKey": "findings.http.https_redirect.what", "requirementLevel": "recommended" }, { "id": "http.hsts.present", "status": "pass", "severity": "info", "titleKey": "findings.http.hsts.title", "verdictKey": "findings.http.hsts.verdict.present", "whyItMattersKey": "findings.http.hsts.why", "technicalDetails": { "rows": [ [ "header", "max-age=15768000" ], [ "includeSubDomains", false ], [ "preload", false ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.hsts.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6797" }, { "id": "http.csp.present", "status": "pass", "severity": "info", "titleKey": "findings.http.csp.title", "verdictKey": "findings.http.csp.verdict.present", "whyItMattersKey": "findings.http.csp.why", "technicalDetails": { "rows": [ [ "Content-Security-Policy", "frame-ancestors 'self' *.lufthansa.com *.miles-and-more.com *.swiss.com *.amadeus.com *.amadeus.net *.brusselsairlines.com *.austrian.com; script-src privacyportalde-cdn.onetrust.com cdn.cookielaw.org privacyportal.onetrust.com www.google.com bat.bing.com ct.pinterest.com s.pinimg.com *.slgnt.eu *.exactag.com *.quantummetric.com *.monetate.net *.doubleclick.net *.googleadservices.com *.tiqcdn.com *.tealiumiq.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.usabilla.com *.artefact.com *.skyscanner.net *.skyscanner.net *.facebook.com *.facebook.net *.kayak.com *.amadeus.com *.lufthansa-group.com *.austrian.com *.lufthansa.com *.swiss.com *.brusselsairlines.com *.go-mpulse.net *.techlab-cdn.com *.instagram.com *.akamaihd.net *.akstat.io *.cloudfront.net *.cognigy.cloud *.googleapis.com *.gstatic.com *.sheerid.com *.meili.travel *.dwin1.com widget.getyourguide.com lhopa01.custhelp.com tdn.da-services.ch rum.hlx.page 'unsafe-inline' 'unsafe-eval'; object-src 'none'; worker-src blob: *.swiss.com;" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.csp.what", "requirementLevel": "recommended", "docsUrl": "https://www.w3.org/TR/CSP3/" }, { "id": "http.xfo.present", "status": "pass", "severity": "info", "titleKey": "findings.http.xfo.title", "verdictKey": "findings.http.xfo.verdict.present", "whyItMattersKey": "findings.http.xfo.why", "technicalDetails": { "rows": [ [ "X-Frame-Options", "SAMEORIGIN" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.xfo.what", "requirementLevel": "recommended" }, { "id": "http.xcto.nosniff", "status": "pass", "severity": "info", "titleKey": "findings.http.xcto.title", "verdictKey": "findings.http.xcto.verdict.nosniff", "whyItMattersKey": "findings.http.xcto.why", "whatIsCheckedKey": "findings.http.xcto.what", "requirementLevel": "recommended" }, { "id": "http.referrer.present", "status": "pass", "severity": "info", "titleKey": "findings.http.referrer.title", "verdictKey": "findings.http.referrer.verdict.present", "whyItMattersKey": "findings.http.referrer.why", "technicalDetails": { "rows": [ [ "Referrer-Policy", "strict-origin-when-cross-origin" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.referrer.what", "requirementLevel": "recommended" }, { "id": "http.compression.active", "status": "pass", "severity": "info", "titleKey": "findings.http.compression.title", "verdictKey": "findings.http.compression.verdict.active", "verdictParams": { "encoding": "gzip" }, "whyItMattersKey": "findings.http.compression.why", "technicalDetails": { "rows": [ [ "content_encoding", "gzip" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.compression.what", "requirementLevel": "optional" }, { "id": "http.securitytxt.present", "status": "pass", "severity": "info", "titleKey": "findings.http.securitytxt.title", "verdictKey": "findings.http.securitytxt.verdict.present", "whyItMattersKey": "findings.http.securitytxt.why", "technicalDetails": { "rows": [ [ "location", "/.well-known/security.txt" ], [ "contact", true ], [ "expires", true ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.securitytxt.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc9116" }, { "id": "http.http2.supported", "status": "pass", "severity": "info", "titleKey": "findings.http.http2.title", "verdictKey": "findings.http.http2.verdict.supported", "whyItMattersKey": "findings.http.http2.why", "technicalDetails": { "rows": [ [ "negotiated_protocol", "HTTP/2" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.http.http2.what", "requirementLevel": "recommended" }, { "id": "http.http3.not_advertised", "status": "not_found", "severity": "info", "titleKey": "findings.http.http3.title", "verdictKey": "findings.http.http3.verdict.not_advertised", "whyItMattersKey": "findings.http.http3.why", "whatIsCheckedKey": "findings.http.http3.what", "recommendationKey": "findings.http.http3.recommendation", "requirementLevel": "optional" }, { "id": "http.cookies.insecure", "status": "fail", "severity": "low", "titleKey": "findings.http.cookies.title", "verdictKey": "findings.http.cookies.verdict.insecure", "verdictParams": { "count": 1, "insecure": 1 }, "whyItMattersKey": "findings.http.cookies.why", "technicalDetails": { "rows": [ [ "__cf_bm", true, true, "none" ] ], "columns": [ "tech.columns.cookie", "tech.columns.secure", "tech.columns.httponly", "tech.columns.samesite" ] }, "whatIsCheckedKey": "findings.http.cookies.what", "recommendationKey": "findings.http.cookies.recommendation", "recommendationParams": { "count": 1, "insecure": 1 }, "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6265" }, { "id": "http.mixedcontent.none", "status": "pass", "severity": "info", "titleKey": "findings.http.mixedcontent.title", "verdictKey": "findings.http.mixedcontent.verdict.none", "whyItMattersKey": "findings.http.mixedcontent.why", "whatIsCheckedKey": "findings.http.mixedcontent.what", "requirementLevel": "required" }, { "id": "http.sri.no_external", "status": "not_applicable", "severity": "info", "titleKey": "findings.http.sri.title", "verdictKey": "findings.http.sri.verdict.no_external", "whyItMattersKey": "findings.http.sri.why", "whatIsCheckedKey": "findings.http.sri.what", "requirementLevel": "recommended", "docsUrl": "https://www.w3.org/TR/SRI/" } ] }, { "category": "mail", "group": "mail", "status": "DONE", "score": 23, "findings": [ { "id": "mail.mx.present", "status": "pass", "severity": "info", "titleKey": "findings.mail.mx.title", "verdictKey": "findings.mail.mx.verdict.present", "verdictParams": { "count": 2 }, "whyItMattersKey": "findings.mail.mx.why", "technicalDetails": { "rows": [ [ 10, "mxb-005f4701.gslb.pphosted.com" ], [ 10, "mxa-005f4701.gslb.pphosted.com" ] ], "columns": [ "tech.columns.priority", "tech.columns.mx_host" ] }, "whatIsCheckedKey": "findings.mail.mx.what", "requirementLevel": "required" }, { "id": "mail.spf.missing", "status": "not_found", "severity": "medium", "titleKey": "findings.mail.spf.title", "verdictKey": "findings.mail.spf.verdict.missing", "whyItMattersKey": "findings.mail.spf.why", "whatIsCheckedKey": "findings.mail.spf.what", "recommendationKey": "findings.mail.spf.recommendation", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc7208" }, { "id": "mail.dkim.namespace", "status": "pass", "severity": "info", "titleKey": "findings.mail.dkim.title", "verdictKey": "findings.mail.dkim.verdict.namespace", "whyItMattersKey": "findings.mail.dkim.why", "whatIsCheckedKey": "findings.mail.dkim.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6376" }, { "id": "mail.dmarc.enforced", "status": "pass", "severity": "info", "titleKey": "findings.mail.dmarc.title", "verdictKey": "findings.mail.dmarc.verdict.enforced", "verdictParams": { "policy": "reject" }, "whyItMattersKey": "findings.mail.dmarc.why", "technicalDetails": { "rows": [ [ "record", "v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:lufthansa@rua.agari.com; ruf=mailto:lufthansa@ruf.agari.com" ], [ "policy", "reject" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.dmarc.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc7489" }, { "id": "mail.bimi.missing", "status": "not_found", "severity": "info", "titleKey": "findings.mail.bimi.title", "verdictKey": "findings.mail.bimi.verdict.missing", "whyItMattersKey": "findings.mail.bimi.why", "whatIsCheckedKey": "findings.mail.bimi.what", "recommendationKey": "findings.mail.bimi.recommendation", "requirementLevel": "optional", "docsUrl": "https://datatracker.ietf.org/doc/html/draft-brand-indicators-for-message-identification" }, { "id": "mail.mtasts.missing", "status": "not_found", "severity": "low", "titleKey": "findings.mail.mtasts.title", "verdictKey": "findings.mail.mtasts.verdict.missing", "whyItMattersKey": "findings.mail.mtasts.why", "whatIsCheckedKey": "findings.mail.mtasts.what", "recommendationKey": "findings.mail.mtasts.recommendation", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc8461" }, { "id": "mail.tlsrpt.missing", "status": "not_found", "severity": "low", "titleKey": "findings.mail.tlsrpt.title", "verdictKey": "findings.mail.tlsrpt.verdict.missing", "whyItMattersKey": "findings.mail.tlsrpt.why", "whatIsCheckedKey": "findings.mail.tlsrpt.what", "recommendationKey": "findings.mail.tlsrpt.recommendation", "requirementLevel": "optional", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc8460" }, { "id": "mail.ipv6.none", "status": "not_found", "severity": "low", "titleKey": "findings.mail.ipv6.title", "verdictKey": "findings.mail.ipv6.verdict.none", "whyItMattersKey": "findings.mail.ipv6.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com", "—" ], [ "mxa-005f4701.gslb.pphosted.com", "—" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.ipv6" ] }, "whatIsCheckedKey": "findings.mail.ipv6.what", "recommendationKey": "findings.mail.ipv6.recommendation", "requirementLevel": "recommended" }, { "id": "mail.starttls.all", "status": "pass", "severity": "info", "titleKey": "findings.mail.starttls.title", "verdictKey": "findings.mail.starttls.verdict.all", "whyItMattersKey": "findings.mail.starttls.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com", "valid" ], [ "mxa-005f4701.gslb.pphosted.com", "valid" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.starttls.what", "requirementLevel": "required", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc3207" }, { "id": "mail.tls.modern", "status": "pass", "severity": "info", "titleKey": "findings.mail.tls.title", "verdictKey": "findings.mail.tls.verdict.modern", "whyItMattersKey": "findings.mail.tls.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com", "TLS 1.3" ], [ "mxa-005f4701.gslb.pphosted.com", "TLS 1.3" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.tls.what", "requirementLevel": "required" }, { "id": "mail.dane.missing", "status": "not_found", "severity": "low", "titleKey": "findings.mail.dane.title", "verdictKey": "findings.mail.dane.verdict.missing", "whyItMattersKey": "findings.mail.dane.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com", "no TLSA" ], [ "mxa-005f4701.gslb.pphosted.com", "no TLSA" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.dane.what", "recommendationKey": "findings.mail.dane.recommendation", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc7672" }, { "id": "mail.cipher.strong", "status": "pass", "severity": "info", "titleKey": "findings.mail.cipher.title", "verdictKey": "findings.mail.cipher.verdict.strong", "whyItMattersKey": "findings.mail.cipher.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com", "TLS_AES_128_GCM_SHA256", true ], [ "mxa-005f4701.gslb.pphosted.com", "TLS_AES_128_GCM_SHA256", true ] ], "columns": [ "tech.columns.mx_host", "tech.columns.cipher", "tech.columns.forward_secrecy" ] }, "whatIsCheckedKey": "findings.mail.cipher.what", "requirementLevel": "recommended" }, { "id": "mail.certificate.valid", "status": "pass", "severity": "info", "titleKey": "findings.mail.certificate.title", "verdictKey": "findings.mail.certificate.verdict.valid", "whyItMattersKey": "findings.mail.certificate.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com", "*.pphosted.com", "valid" ], [ "mxa-005f4701.gslb.pphosted.com", "*.pphosted.com", "valid" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.subject", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.certificate.what", "requirementLevel": "required" }, { "id": "mail.cert_key.strong", "status": "pass", "severity": "info", "titleKey": "findings.mail.cert_key.title", "verdictKey": "findings.mail.cert_key.verdict.strong", "whyItMattersKey": "findings.mail.cert_key.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com", "RSA 4096" ], [ "mxa-005f4701.gslb.pphosted.com", "RSA 4096" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.cert_key.what", "requirementLevel": "required" }, { "id": "mail.cert_sig.strong", "status": "pass", "severity": "info", "titleKey": "findings.mail.cert_sig.title", "verdictKey": "findings.mail.cert_sig.verdict.strong", "whyItMattersKey": "findings.mail.cert_sig.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com", "SHA256-RSA" ], [ "mxa-005f4701.gslb.pphosted.com", "SHA256-RSA" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.cert_sig.what", "requirementLevel": "required" }, { "id": "mail.compression.off", "status": "pass", "severity": "info", "titleKey": "findings.mail.compression.title", "verdictKey": "findings.mail.compression.verdict.off", "whyItMattersKey": "findings.mail.compression.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com", "n/a (TLS 1.3)" ], [ "mxa-005f4701.gslb.pphosted.com", "n/a (TLS 1.3)" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.compression.what", "requirementLevel": "required", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc7457" }, { "id": "mail.renegotiation.secure", "status": "pass", "severity": "info", "titleKey": "findings.mail.renegotiation.title", "verdictKey": "findings.mail.renegotiation.verdict.secure", "whyItMattersKey": "findings.mail.renegotiation.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com", "n/a (TLS 1.3)" ], [ "mxa-005f4701.gslb.pphosted.com", "n/a (TLS 1.3)" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.renegotiation.what", "requirementLevel": "required", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc5746" }, { "id": "mail.ems.present", "status": "pass", "severity": "info", "titleKey": "findings.mail.ems.title", "verdictKey": "findings.mail.ems.verdict.present", "whyItMattersKey": "findings.mail.ems.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com", "n/a (TLS 1.3)" ], [ "mxa-005f4701.gslb.pphosted.com", "n/a (TLS 1.3)" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.ems.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc7627" }, { "id": "mail.ptr.partial", "status": "fail", "severity": "low", "titleKey": "findings.mail.ptr.title", "verdictKey": "findings.mail.ptr.verdict.partial", "verdictParams": { "count": 2, "missing": 1 }, "whyItMattersKey": "findings.mail.ptr.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com", "143.55.150.105", "mx08-005f4701.pphosted.com" ], [ "mxa-005f4701.gslb.pphosted.com", "66.159.233.224", "—" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.ip", "tech.columns.ptr" ] }, "whatIsCheckedKey": "findings.mail.ptr.what", "recommendationKey": "findings.mail.ptr.recommendation", "recommendationParams": { "count": 2, "missing": 1 }, "requirementLevel": "recommended" }, { "id": "mail.openrelay.open", "status": "fail", "severity": "critical", "titleKey": "findings.mail.openrelay.title", "verdictKey": "findings.mail.openrelay.verdict.open", "verdictParams": { "open": 2 }, "whyItMattersKey": "findings.mail.openrelay.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com", "open", "250 2.1.5 Recipient ok" ], [ "mxa-005f4701.gslb.pphosted.com", "open", "250 2.1.5 Recipient ok" ] ], "columns": [ "tech.columns.mx_host", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.openrelay.what", "recommendationKey": "findings.mail.openrelay.recommendation", "recommendationParams": { "open": 2 }, "requirementLevel": "required" } ] }, { "category": "blacklist", "group": "mail", "status": "DONE", "score": 100, "findings": [ { "id": "mail.bl.spamhauszen.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.spamhauszen.title", "verdictKey": "findings.mail.bl.spamhauszen.verdict.clean", "verdictParams": { "zone": "zen.spamhaus.org" }, "whyItMattersKey": "findings.mail.bl.spamhauszen.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.spamhauszen.what", "requirementLevel": "required" }, { "id": "mail.bl.spamhausdbl.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.spamhausdbl.title", "verdictKey": "findings.mail.bl.spamhausdbl.verdict.clean", "verdictParams": { "zone": "dbl.spamhaus.org" }, "whyItMattersKey": "findings.mail.bl.spamhausdbl.why", "technicalDetails": { "rows": [ [ "swiss.com", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.spamhausdbl.what", "requirementLevel": "required" }, { "id": "mail.bl.barracuda.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.barracuda.title", "verdictKey": "findings.mail.bl.barracuda.verdict.clean", "verdictParams": { "zone": "b.barracudacentral.org" }, "whyItMattersKey": "findings.mail.bl.barracuda.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.barracuda.what", "requirementLevel": "required" }, { "id": "mail.bl.spamcop.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.spamcop.title", "verdictKey": "findings.mail.bl.spamcop.verdict.clean", "verdictParams": { "zone": "bl.spamcop.net" }, "whyItMattersKey": "findings.mail.bl.spamcop.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.spamcop.what", "requirementLevel": "required" }, { "id": "mail.bl.psbl.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.psbl.title", "verdictKey": "findings.mail.bl.psbl.verdict.clean", "verdictParams": { "zone": "psbl.surriel.com" }, "whyItMattersKey": "findings.mail.bl.psbl.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.psbl.what", "requirementLevel": "required" }, { "id": "mail.bl.zerospam.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.zerospam.title", "verdictKey": "findings.mail.bl.zerospam.verdict.clean", "verdictParams": { "zone": "bl.0spam.org" }, "whyItMattersKey": "findings.mail.bl.zerospam.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.zerospam.what", "requirementLevel": "required" }, { "id": "mail.bl.blocklistde.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.blocklistde.title", "verdictKey": "findings.mail.bl.blocklistde.verdict.clean", "verdictParams": { "zone": "bl.blocklist.de" }, "whyItMattersKey": "findings.mail.bl.blocklistde.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.blocklistde.what", "requirementLevel": "required" }, { "id": "mail.bl.surbl.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.surbl.title", "verdictKey": "findings.mail.bl.surbl.verdict.clean", "verdictParams": { "zone": "multi.surbl.org" }, "whyItMattersKey": "findings.mail.bl.surbl.why", "technicalDetails": { "rows": [ [ "swiss.com", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.surbl.what", "requirementLevel": "recommended" }, { "id": "mail.bl.semfresh.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.semfresh.title", "verdictKey": "findings.mail.bl.semfresh.verdict.clean", "verdictParams": { "zone": "fresh.spameatingmonkey.net" }, "whyItMattersKey": "findings.mail.bl.semfresh.why", "technicalDetails": { "rows": [ [ "swiss.com", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.semfresh.what", "requirementLevel": "recommended" }, { "id": "mail.bl.sembl.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.sembl.title", "verdictKey": "findings.mail.bl.sembl.verdict.clean", "verdictParams": { "zone": "bl.spameatingmonkey.net" }, "whyItMattersKey": "findings.mail.bl.sembl.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.sembl.what", "requirementLevel": "recommended" }, { "id": "mail.bl.sembackscatter.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.sembackscatter.title", "verdictKey": "findings.mail.bl.sembackscatter.verdict.clean", "verdictParams": { "zone": "backscatter.spameatingmonkey.net" }, "whyItMattersKey": "findings.mail.bl.sembackscatter.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.sembackscatter.what", "requirementLevel": "recommended" }, { "id": "mail.bl.spfbl.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.spfbl.title", "verdictKey": "findings.mail.bl.spfbl.verdict.clean", "verdictParams": { "zone": "dnsbl.spfbl.net" }, "whyItMattersKey": "findings.mail.bl.spfbl.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.spfbl.what", "requirementLevel": "recommended" }, { "id": "mail.bl.gbudb.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.gbudb.title", "verdictKey": "findings.mail.bl.gbudb.verdict.clean", "verdictParams": { "zone": "truncate.gbudb.net" }, "whyItMattersKey": "findings.mail.bl.gbudb.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.gbudb.what", "requirementLevel": "recommended" }, { "id": "mail.bl.spamrats.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.spamrats.title", "verdictKey": "findings.mail.bl.spamrats.verdict.clean", "verdictParams": { "zone": "spam.spamrats.com" }, "whyItMattersKey": "findings.mail.bl.spamrats.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.spamrats.what", "requirementLevel": "recommended" }, { "id": "mail.bl.spamratsdyna.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.spamratsdyna.title", "verdictKey": "findings.mail.bl.spamratsdyna.verdict.clean", "verdictParams": { "zone": "dyna.spamrats.com" }, "whyItMattersKey": "findings.mail.bl.spamratsdyna.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.spamratsdyna.what", "requirementLevel": "recommended" }, { "id": "mail.bl.spamratsnoptr.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.spamratsnoptr.title", "verdictKey": "findings.mail.bl.spamratsnoptr.verdict.clean", "verdictParams": { "zone": "noptr.spamrats.com" }, "whyItMattersKey": "findings.mail.bl.spamratsnoptr.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.spamratsnoptr.what", "requirementLevel": "recommended" }, { "id": "mail.bl.justspam.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.justspam.title", "verdictKey": "findings.mail.bl.justspam.verdict.clean", "verdictParams": { "zone": "dnsbl.justspam.org" }, "whyItMattersKey": "findings.mail.bl.justspam.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.justspam.what", "requirementLevel": "recommended" }, { "id": "mail.bl.fabel.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.fabel.title", "verdictKey": "findings.mail.bl.fabel.verdict.clean", "verdictParams": { "zone": "spamsources.fabel.dk" }, "whyItMattersKey": "findings.mail.bl.fabel.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.fabel.what", "requirementLevel": "recommended" }, { "id": "mail.bl.s5h.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.s5h.title", "verdictKey": "findings.mail.bl.s5h.verdict.clean", "verdictParams": { "zone": "all.s5h.net" }, "whyItMattersKey": "findings.mail.bl.s5h.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.s5h.what", "requirementLevel": "recommended" }, { "id": "mail.bl.dronebl.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.dronebl.title", "verdictKey": "findings.mail.bl.dronebl.verdict.clean", "verdictParams": { "zone": "dnsbl.dronebl.org" }, "whyItMattersKey": "findings.mail.bl.dronebl.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.dronebl.what", "requirementLevel": "recommended" }, { "id": "mail.bl.interserver.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.interserver.title", "verdictKey": "findings.mail.bl.interserver.verdict.clean", "verdictParams": { "zone": "rbl.interserver.net" }, "whyItMattersKey": "findings.mail.bl.interserver.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.interserver.what", "requirementLevel": "recommended" }, { "id": "mail.bl.mailspike.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.mailspike.title", "verdictKey": "findings.mail.bl.mailspike.verdict.clean", "verdictParams": { "zone": "z.mailspike.net" }, "whyItMattersKey": "findings.mail.bl.mailspike.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.mailspike.what", "requirementLevel": "recommended" }, { "id": "mail.bl.uceprotect1.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.uceprotect1.title", "verdictKey": "findings.mail.bl.uceprotect1.verdict.clean", "verdictParams": { "zone": "dnsbl-1.uceprotect.net" }, "whyItMattersKey": "findings.mail.bl.uceprotect1.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.uceprotect1.what", "requirementLevel": "recommended" }, { "id": "mail.bl.uceprotect2.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.uceprotect2.title", "verdictKey": "findings.mail.bl.uceprotect2.verdict.clean", "verdictParams": { "zone": "dnsbl-2.uceprotect.net" }, "whyItMattersKey": "findings.mail.bl.uceprotect2.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.uceprotect2.what", "requirementLevel": "optional" }, { "id": "mail.bl.uceprotect3.clean", "status": "pass", "severity": "info", "titleKey": "findings.mail.bl.uceprotect3.title", "verdictKey": "findings.mail.bl.uceprotect3.verdict.clean", "verdictParams": { "zone": "dnsbl-3.uceprotect.net" }, "whyItMattersKey": "findings.mail.bl.uceprotect3.why", "technicalDetails": { "rows": [ [ "mxb-005f4701.gslb.pphosted.com (143.55.150.105)", "clean", "" ], [ "mxa-005f4701.gslb.pphosted.com (66.159.233.224)", "clean", "" ] ], "columns": [ "tech.columns.target", "tech.columns.result", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.mail.bl.uceprotect3.what", "requirementLevel": "optional" } ] }, { "category": "rpki", "group": "website", "status": "DONE", "score": 95, "findings": [ { "id": "rpki.web.notfound", "status": "not_found", "severity": "low", "titleKey": "findings.rpki.web.title", "verdictKey": "findings.rpki.web.verdict.notfound", "whyItMattersKey": "findings.rpki.web.why", "technicalDetails": { "rows": [ [ "146.216.3.74", "AS204590", "not-found" ] ], "columns": [ "tech.columns.ip", "tech.columns.asn", "tech.columns.result" ] }, "whatIsCheckedKey": "findings.rpki.web.what", "recommendationKey": "findings.rpki.web.recommendation", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6811" }, { "id": "rpki.ns.valid", "status": "pass", "severity": "info", "titleKey": "findings.rpki.ns.title", "verdictKey": "findings.rpki.ns.verdict.valid", "whyItMattersKey": "findings.rpki.ns.why", "technicalDetails": { "rows": [ [ "172.64.52.249", "AS13335", "valid" ], [ "172.64.53.96", "AS13335", "valid" ] ], "columns": [ "tech.columns.ip", "tech.columns.asn", "tech.columns.result" ] }, "whatIsCheckedKey": "findings.rpki.ns.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6811" } ] }, { "category": "rpkimail", "group": "mail", "status": "DONE", "score": 100, "findings": [ { "id": "rpki.mail.valid", "status": "pass", "severity": "info", "titleKey": "findings.rpki.mail.title", "verdictKey": "findings.rpki.mail.verdict.valid", "whyItMattersKey": "findings.rpki.mail.why", "technicalDetails": { "rows": [ [ "66.159.233.224", "AS52129", "valid" ], [ "143.55.150.105", "AS52129", "valid" ] ], "columns": [ "tech.columns.ip", "tech.columns.asn", "tech.columns.result" ] }, "whatIsCheckedKey": "findings.rpki.mail.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6811" } ] }, { "category": "tls", "group": "website", "status": "DONE", "score": 95, "findings": [ { "id": "tls.https.reachable", "status": "pass", "severity": "info", "titleKey": "findings.tls.https.title", "verdictKey": "findings.tls.https.verdict.reachable", "whyItMattersKey": "findings.tls.https.why", "whatIsCheckedKey": "findings.tls.https.what", "requirementLevel": "required" }, { "id": "tls.version.modern", "status": "pass", "severity": "info", "titleKey": "findings.tls.version.title", "verdictKey": "findings.tls.version.verdict.modern", "whyItMattersKey": "findings.tls.version.why", "technicalDetails": { "rows": [ [ "TLS 1.0", false ], [ "TLS 1.1", false ], [ "TLS 1.2", true ], [ "TLS 1.3", false ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.version.what", "requirementLevel": "required", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc8446" }, { "id": "tls.cipher.strong", "status": "pass", "severity": "info", "titleKey": "findings.tls.cipher.title", "verdictKey": "findings.tls.cipher.verdict.strong", "verdictParams": { "cipher": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" }, "whyItMattersKey": "findings.tls.cipher.why", "technicalDetails": { "rows": [ [ "cipher", "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" ], [ "forward_secrecy", true ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.cipher.what", "requirementLevel": "required" }, { "id": "tls.certificate.valid", "status": "pass", "severity": "info", "titleKey": "findings.tls.certificate.title", "verdictKey": "findings.tls.certificate.verdict.valid", "whyItMattersKey": "findings.tls.certificate.why", "technicalDetails": { "rows": [ [ "subject", "internal-redirect-f5.swiss.com" ], [ "issuer", "SwissSign RSA TLS OV ICA 2022 - 1" ], [ "not_after", "2026-12-02T11:06:04Z" ], [ "dns_names", "internal-redirect-f5.swiss.com, mobsrv.swiss.com, myaccess.swiss.com, pwset.swiss.com, ebase.swiss.com, swup.swiss.com, swup-test.swiss.com, swiss.com, profile.swiss.com, baswaretest.swiss.com, basware.swiss.com" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.certificate.what", "requirementLevel": "required" }, { "id": "tls.cert_key.strong", "status": "pass", "severity": "info", "titleKey": "findings.tls.cert_key.title", "verdictKey": "findings.tls.cert_key.verdict.strong", "verdictParams": { "bits": 4096, "algorithm": "RSA" }, "whyItMattersKey": "findings.tls.cert_key.why", "technicalDetails": { "rows": [ [ "algorithm", "RSA" ], [ "bits", 4096 ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.cert_key.what", "requirementLevel": "required" }, { "id": "tls.cert_sig.strong", "status": "pass", "severity": "info", "titleKey": "findings.tls.cert_sig.title", "verdictKey": "findings.tls.cert_sig.verdict.strong", "verdictParams": { "algorithm": "SHA256-RSA" }, "whyItMattersKey": "findings.tls.cert_sig.why", "technicalDetails": { "rows": [ [ "signature", "SHA256-RSA" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.cert_sig.what", "requirementLevel": "required" }, { "id": "tls.ocsp.not_stapled", "status": "not_found", "severity": "low", "titleKey": "findings.tls.ocsp.title", "verdictKey": "findings.tls.ocsp.verdict.not_stapled", "whyItMattersKey": "findings.tls.ocsp.why", "whatIsCheckedKey": "findings.tls.ocsp.what", "recommendationKey": "findings.tls.ocsp.recommendation", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6066" }, { "id": "tls.dane.none_web", "status": "not_applicable", "severity": "info", "titleKey": "findings.tls.dane.title", "verdictKey": "findings.tls.dane.verdict.none_web", "whyItMattersKey": "findings.tls.dane.why", "whatIsCheckedKey": "findings.tls.dane.what", "requirementLevel": "optional", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc6698" }, { "id": "tls.cipherorder.server", "status": "pass", "severity": "info", "titleKey": "findings.tls.cipherorder.title", "verdictKey": "findings.tls.cipherorder.verdict.server", "whyItMattersKey": "findings.tls.cipherorder.why", "technicalDetails": { "rows": [ [ "client_order_1", "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" ], [ "client_order_2", "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.cipherorder.what", "requirementLevel": "recommended" }, { "id": "tls.keyexchange.strong", "status": "pass", "severity": "info", "titleKey": "findings.tls.keyexchange.title", "verdictKey": "findings.tls.keyexchange.verdict.strong", "verdictParams": { "kx": "ECDHE", "hash": "SHA256" }, "whyItMattersKey": "findings.tls.keyexchange.why", "technicalDetails": { "rows": [ [ "key_exchange", "ECDHE" ], [ "hash", "SHA256" ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.keyexchange.what", "requirementLevel": "required" }, { "id": "tls.compression.off", "status": "pass", "severity": "info", "titleKey": "findings.tls.compression.title", "verdictKey": "findings.tls.compression.verdict.off", "whyItMattersKey": "findings.tls.compression.why", "technicalDetails": { "rows": [ [ "compression_method", 0 ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.compression.what", "requirementLevel": "required", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc7457" }, { "id": "tls.renegotiation.secure", "status": "pass", "severity": "info", "titleKey": "findings.tls.renegotiation.title", "verdictKey": "findings.tls.renegotiation.verdict.secure", "whyItMattersKey": "findings.tls.renegotiation.why", "technicalDetails": { "rows": [ [ "secure_renegotiation", true ] ], "columns": [ "tech.columns.property", "tech.columns.value" ] }, "whatIsCheckedKey": "findings.tls.renegotiation.what", "requirementLevel": "required", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc5746" }, { "id": "tls.ems.present", "status": "pass", "severity": "info", "titleKey": "findings.tls.ems.title", "verdictKey": "findings.tls.ems.verdict.present", "whyItMattersKey": "findings.tls.ems.why", "whatIsCheckedKey": "findings.tls.ems.what", "requirementLevel": "recommended", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc7627" }, { "id": "tls.zerortt.no_tls13", "status": "not_applicable", "severity": "info", "titleKey": "findings.tls.zerortt.title", "verdictKey": "findings.tls.zerortt.verdict.no_tls13", "whyItMattersKey": "findings.tls.zerortt.why", "whatIsCheckedKey": "findings.tls.zerortt.what", "requirementLevel": "optional", "docsUrl": "https://datatracker.ietf.org/doc/html/rfc8446#section-2.3" } ] } ] }