Check DNS, Urls + Redirects, Certificates and Content of your Website



B

Missing HSTS or Cookie-warnings, 2 invalid Headers

Checked:
11.05.2020 14:29:24


Older results

No older results found


1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
ingdirect.es
A
193.41.234.22
Pozuelo de Alarcón/Madrid/Spain (ES) - ING Direct N.V.
No Hostname found
yes
1
0

AAAA

yes


www.ingdirect.es
A
193.41.234.22
Pozuelo de Alarcón/Madrid/Spain (ES) - ING Direct N.V.
No Hostname found
yes
1
0

AAAA

yes


*.ingdirect.es
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes



2. DNSSEC

Zone (*)DNSSEC - Informations

Zone: (root)
(root)
1 DS RR published



Status: Valid because published



2 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 8, KeyTag 48903, Flags 256



1 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 01.06.2020, 00:00:00 +, Signature-Inception: 11.05.2020, 00:00:00 +, KeyTag 20326, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: es
es
4 DS RR in the parent zone found



1 RRSIG RR to validate DS RR found



RRSIG-Owner es., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 24.05.2020, 05:00:00 +, Signature-Inception: 11.05.2020, 04:00:00 +, KeyTag 48903, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 48903 used to validate the DS RRSet in the parent zone



3 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 15034, Flags 256



Public Key with Algorithm 8, KeyTag 40876, Flags 256



Public Key with Algorithm 8, KeyTag 50252, Flags 257 (SEP = Secure Entry Point)



1 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner es., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 22.05.2020, 13:16:10 +, Signature-Inception: 08.05.2020, 17:55:40 +, KeyTag 50252, Signer-Name: es



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 50252 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 50252, DigestType 1 and Digest "m/ARW0Ok7o9yI/v1spTZHN7tLb4=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 50252, DigestType 2 and Digest "3StRXabbwOgmAG5q4ChkwFglaUqEs+Tg5ZkYx4wbyOs=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: ingdirect.es
ingdirect.es
0 DS RR in the parent zone found



DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "tt7dg8f0tacun7g89kpsvu8r3p2at1sr" between the hashed NSEC3-owner "tt4f8kej9jdkrqkl4hsuv0rvffagmogf" and the hashed NextOwner "tt8jduphespbj96jpse13htpim7uapv4". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner tt4f8kej9jdkrqkl4hsuv0rvffagmogf.es., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 22.05.2020, 15:51:54 +, Signature-Inception: 08.05.2020, 11:08:28 +, KeyTag 40876, Signer-Name: es



0 DNSKEY RR found




Zone: www.ingdirect.es
www.ingdirect.es
0 DS RR in the parent zone found


3. Name Servers

DomainNameserverNS-IP
www.ingdirect.es
  dns01.ingdirect.es

ingdirect.es
  a11-64.akam.net
84.53.139.64
Chicago/Illinois/United States (US) - Akamai Technologies


 
2600:1480:1::40
Frankfurt am Main/Hesse/Germany (DE) - Akamai International B.V.


  a1-165.akam.net
193.108.91.165
Ashburn/Virginia/United States (US) - Akamai International B.V.


 
2600:1401:2::a5
Ashburn/Virginia/United States (US) - Akamai International B.V.


  a16-67.akam.net
23.211.132.67
Paris/Île-de-France/France (FR) - Akamai International, BV


 
2600:1406:1b::43
Ashburn/Virginia/United States (US) - Akamai International B.V.


  a20-65.akam.net
95.100.175.65
Paris/Île-de-France/France (FR) - Akamai Technologies


 
2a02:26f0:67::41
Cambridge/Massachusetts/United States (US) - Akamai Technologies


  a6-66.akam.net
23.211.133.66
Atlanta/Georgia/United States (US) - Akamai International B.V.


 
2600:1401:1::42
Ashburn/Virginia/United States (US) - Akamai International B.V.


  a9-67.akam.net
184.85.248.67
Chicago/Illinois/United States (US) - Akamai International B.V.


 
2a02:26f0:117::43
Aubervilliers/Île-de-France/France (FR) - Akamai Technologies


T  dns01.ingdirect.es
193.41.234.11
Pozuelo de Alarcón/Madrid/Spain (ES) - ING Direct N.V.

es
  a.nic.es


  f.nic.es


  g.nic.es / 5.fra.pch


  h.nic.es / ns-2.es.de8.bind


  ns1.cesca.es


  ns1.nic.es


  ns-es.nic.fr / dns.fra.nic.fr


  ssdns-tld.nic.cl / ns-ext-n1 nic cl exp 1


4. SOA-Entries


Domain:es
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


Domain:es
Zone-Name:es
Primary:ns1.nic.es
Mail:hostmaster.nic.es
Serial:2020051103
Refresh:7200
Retry:7200
Expire:2592000
TTL:86400
num Entries:1


Domain:es
Zone-Name:es
Primary:ns1.nic.es
Mail:hostmaster.nic.es
Serial:2020051104
Refresh:7200
Retry:7200
Expire:2592000
TTL:86400
num Entries:6


Domain:ingdirect.es
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


Domain:ingdirect.es
Zone-Name:ingdirect.es
Primary:dns01.ingdirect.es
Mail:hostmaster.ingdirect.es
Serial:2020040101
Refresh:3600
Retry:7200
Expire:1296000
TTL:14400
num Entries:12


Domain:www.ingdirect.es
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


5. Screenshots

Startaddress: https://www.ing.es, address used: https://www.ing.es/, Screenshot created 2020-08-01 09:56:54 +00:0

Mobil (412px x 732px)

708 milliseconds

Screenshot mobile - https://www.ing.es/
Mobil + Landscape (732px x 412px)

562 milliseconds

Screenshot mobile landscape - https://www.ing.es/
Screen (1280px x 1680px)

877 milliseconds

Screenshot Desktop - https://www.ing.es/

Mobile- and other Chrome-Checks

widthheight
visual Viewport412732
content Size4125478

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

Chrome-Connection: secure. secure connection settings. The connection to this site is encrypted and authenticated using TLS 1.2, ECDHE_RSA with P-256, and AES_128_GCM.

Chrome-Resources : secure. all served securely. All resources on this page are served securely.

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://ingdirect.es/
193.41.234.22
301
https://ingdirect.es/
0.113
A
Location: https://ingdirect.es/
Server: BigIP
Connection: close
Content-Length: 0

• http://www.ingdirect.es/
193.41.234.22
301
https://www.ingdirect.es/
0.113
A
Location: https://www.ingdirect.es/
Server: BigIP
Connection: close
Content-Length: 0

• https://ingdirect.es/
193.41.234.22
301
https://www.ing.es/
3.877
B
Location: https://www.ing.es/
Server: BigIP
Connection: close
Content-Length: 0

• https://www.ingdirect.es/
193.41.234.22
301
https://www.ing.es/
3.800
B
Location: https://www.ing.es/
Server: BigIP
Connection: close
Content-Length: 0

• https://www.ing.es/
GZip used - 41170 / 129446 - 68.20 %
Inline-JavaScript (∑/total): 6/110874 Inline-CSS (∑/total): 0/0
200

Html is minified: 918.12 %
5.714
B-
small visible content (num chars: 262)
</ing-uic-cms-header> ING </ing-uic-cms-hero-card> </ing-uic-cms-products-grid> </ing-uic-cms-match-products> </ing-uic-cms-content-narrow> </ing-uic-cms-cards-carousel> </ing-uic-cms-content> </ing-uic-cms-breadcrumb> </ing-uic-cms-footer> </ing-uic-cms-layout>
Date: Mon, 11 May 2020 12:31:19 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Frame-Options: ALLOW-FROM https://ing.ingdirect.es/,ALLOW-FROM https://ing.ingdirect.es/
X-Content-Type-Options: nosniff,nosniff
X-Xss-Protection: 1; mode=block,1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubdomains,max-age=31536000; includeSubdomains;
Content-Encoding: gzip

• http://ingdirect.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
193.41.234.22
301
https://ingdirect.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
0.117
A
Visible Content:
Location: https://ingdirect.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Server: BigIP
Connection: close
Content-Length: 0

• http://www.ingdirect.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
193.41.234.22
301
https://www.ingdirect.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
0.114
A
Visible Content:
Location: https://www.ingdirect.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Server: BigIP
Connection: close
Content-Length: 0

• https://ingdirect.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

301
https://www.ing.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
3.810
A
Visible Content:
Location: https://www.ing.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Server: BigIP
Connection: close
Content-Length: 0

• https://www.ingdirect.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

301
https://www.ing.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
3.543
A
Visible Content:
Location: https://www.ing.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Server: BigIP
Connection: close
Content-Length: 0

• https://www.ing.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
GZip used - 39461 / 120393 - 67.22 %
Inline-JavaScript (∑/total): 5/110805 Inline-CSS (∑/total): 0/0
404

Html is minified: 1699.51 %
4.080
A-
Not Found
Visible Content: </ing-uic-cms-header> <!DOCTYPE html> Page not found Los gamusinos no existen. La página a la que quieres acceder, tampoco. Entra en la página principal y encuentra productos y servicios que existen para que tu vida sea más fácil. ¡Vamos!
Info: Html-Content with meta and/or script, may be a problem creating a Letsencrypt certificate using http-01 validation
Date: Mon, 11 May 2020 12:32:03 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Content-Type-Options: nosniff,nosniff
X-Xss-Protection: 1; mode=block,1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubdomains,max-age=31536000; includeSubdomains;
Content-Encoding: gzip

• https://193.41.234.22/
193.41.234.22
301
https://www.ing.es/
4.060
N
Certificate error: RemoteCertificateNameMismatch
Location: https://www.ing.es/
Server: BigIP
Connection: close
Content-Length: 0

7. Comments


1. General Results, most used to calculate the result

Aname "ingdirect.es" is domain, public suffix is "es", top-level-domain-type is "country-code", Country is Spain, tld-manager is "Red.es"
Agood: All ip addresses are public addresses
Warning: Only one ip address found: ingdirect.es has only one ip address.
Warning: Only one ip address found: www.ingdirect.es has only one ip address.
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: ingdirect.es has no ipv6 address.
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: www.ingdirect.es has no ipv6 address.
Agood: No asked Authoritative Name Server had a timeout
Ahttps://www.ingdirect.es/ 193.41.234.22
301
https://www.ing.es/
correct redirect https to https
Ahttps://www.ingdirect.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
301
https://www.ing.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
correct redirect https to https
Agood: destination is https
Agood - only one version with Http-Status 200
Agood: one preferred version: www is preferred
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
Ahttp://ingdirect.es/ 193.41.234.22
301
https://ingdirect.es/
correct redirect http - https with the same domain name
Ahttp://www.ingdirect.es/ 193.41.234.22
301
https://www.ingdirect.es/
correct redirect http - https with the same domain name
Bhttps://ingdirect.es/ 193.41.234.22
301

Missing HSTS-Header
Bhttps://www.ingdirect.es/ 193.41.234.22
301

Missing HSTS-Header
Bhttps://193.41.234.22/ 193.41.234.22
301

Missing HSTS-Header
Bhttps://www.ing.es/
200
max-age=31536000; includeSubdomains,max-age=31536000; includeSubdomains;
Critical: HSTS-Header has Parse-Errors. Empty entry, remove the semicolon at the end., Comma found, but Comma not allowed. Perhaps more then one HSTS-Header., Unknown directive found. Only max-age (with value), includeSubdomains or preload allowed.
Nhttps://193.41.234.22/ 193.41.234.22
301
https://www.ing.es/
Error - Certificate isn't trusted, RemoteCertificateNameMismatch
XFatal error: Nameserver doesn't support TCP connection: dns01.ingdirect.es / 193.41.234.11: Timeout
XFatal error: Nameserver doesn't support TCP connection: ns-es.nic.fr: Timeout
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are the same. So that domain doesn't require Server Name Indication (SNI), it's the primary certificate of that set of ip addresses.: Domain ingdirect.es, 1 ip addresses, 1 different http results.
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are the same. So that domain doesn't require Server Name Indication (SNI), it's the primary certificate of that set of ip addresses.: Domain www.ingdirect.es, 1 ip addresses, 1 different http results.

2. DNS- and NameServer - Checks

AInfo:: 7 different Name Servers found: a11-64.akam.net, a1-165.akam.net, a16-67.akam.net, a20-65.akam.net, a6-66.akam.net, a9-67.akam.net, dns01.ingdirect.es, 6 Name Servers included in Delegation: a1-165.akam.net, a11-64.akam.net, a16-67.akam.net, a20-65.akam.net, a6-66.akam.net, a9-67.akam.net, 6 Name Servers included in 2 Zone definitions: a1-165.akam.net, a11-64.akam.net, a16-67.akam.net, a20-65.akam.net, a6-66.akam.net, a9-67.akam.net, 1 Name Servers listed in SOA.Primary: dns01.ingdirect.es.
AGood: Only one SOA.Primary Name Server found.: dns01.ingdirect.es.
Error: SOA.Primary Name Server not included in the delegation set.: dns01.ingdirect.es.
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AGood: Minimal 2 different name servers (public suffix and public ip address) found: 7 different Name Servers found
AGood: Some Name Servers have IPv6 addresses: 6 Name Servers with IPv6 found (1 Name Servers without IPv6)
AGood: Name servers with different Top Level Domains / Public Suffix List entries found: 7 Name Servers, 2 Top Level Domains: es, net
AGood: Name Servers with different domain names found.: 2 different Domains found
AGood: Name servers with different Country locations found: 7 Name Servers, 4 Countries: DE, ES, FR, US
AInfo: Ipv4-Subnet-list: 7 Name Servers, 5 different subnets (first Byte): 184., 193., 23., 84., 95., 6 different subnets (first two Bytes): 184.85., 193.108., 193.41., 23.211., 84.53., 95.100., 7 different subnets (first three Bytes): 184.85.248., 193.108.91., 193.41.234., 23.211.132., 23.211.133., 84.53.139., 95.100.175.
AGood: Name Server IPv4-addresses from different subnet found:
AInfo: IPv6-Subnet-list: 6 Name Servers with IPv6, 2 different subnets (first block): 2600:, 2a02:, 4 different subnets (first two blocks): 2600:1401:, 2600:1406:, 2600:1480:, 2a02:26f0:, 6 different subnets (first three blocks): 2600:1401:0001:, 2600:1401:0002:, 2600:1406:001b:, 2600:1480:0001:, 2a02:26f0:0067:, 2a02:26f0:0117:, 6 different subnets (first four blocks): 2600:1401:0001:0000:, 2600:1401:0002:0000:, 2600:1406:001b:0000:, 2600:1480:0001:0000:, 2a02:26f0:0067:0000:, 2a02:26f0:0117:0000:
AGood: Name Server IPv6 addresses from different subnets found.
AInfo: Nameserver mit different domain names found. May be a problem with DNS-Updates
XNameserver Timeout checking Echo Capitalization: dns01.ingdirect.es / 193.41.234.11
XNameserver Timeout checking EDNS512: dns01.ingdirect.es / 193.41.234.11
Nameserver doesn't pass all EDNS-Checks: dns01.ingdirect.es: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: dns01.ingdirect.es / 193.41.234.11: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: ns1.nic.es: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns-es.nic.fr: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok (dns.fra.nic.fr). COOKIE: SOA expected, but NOT found, NOERR expected, BADVER found, Version 0 expectend and found. CLIENTSUBNET: ok.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

3. Content- and Performance-critical Checks

AGood: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AGood: Every https result with status 200 supports GZip.
https://www.ing.es/
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://www.ing.es/
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
AGood: Every https connection via port 443 supports the http/2 protocol via ALPN.
Warning: CSS / JavaScript found without GZip support. Send these ressources with GZip. 4 external CSS / JavaScript files without GZip found - 14 with GZip, 18 complete
Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 2 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 0 with Cache-Control max-age too short (minimum 7 days), 16 with Cache-Control long enough, 18 complete.
AGood: All images are sent with a long Cache-Control header (minimum 7 days). So the browser can reuse these files, no download is required. 1 image files with long Cache-Control max-age found
AGood: All checked attribute values are enclosed in quotation marks (" or ').
Wrong: img-elements without alt-attribute or empty alt-attribute found. The alt-attribute ("alternative") is required and should describe the img. So Screenreader and search engines are able to use these informations.: 1 img-elements without alt-attribute, 0 img-elements with empty alt-attribute found.
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
https://www.ing.es/
200
Strict-Transport-Security: max-age=31536000; includeSubdomains,max-age=31536000; includeSubdomains;
Parse Error - Header can't be parsed
https://www.ing.es/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
4.080 seconds
Warning: 404 needs more then one second
ADuration: 187473 milliseconds, 187.473 seconds


8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
www.ing.es
www.ing.es
443
ok
Tls12
ECDH Ephermal
256
Aes128
128
Sha256
error checking OCSP stapling
ok
www.ing.es
www.ing.es
443
ok
Tls12

ECDH Ephermal
256
Aes128
128
Sha256
error checking OCSP stapling
ok
http/2 via ALPN supported 
Tls.1.2
Tls.1.1
no Tls.1.0
http/2 via ALPN supported
Tls.1.2
Tls.1.1
no Tls.1.0
Chain - too much certificates, don't send root certificates
1CN=ing.es, OU=Tecnologia, O=ING Bank N.V. Sucursal en Espana, L=Las Rozas, C=ES, ST=Madrid

2CN=DigiCert Global CA G2, O=DigiCert Inc, C=US

3CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US


ingdirect.es
193.41.234.22
443
ok
Tls12
ECDH Ephermal
256
Aes128
128
Sha256
error checking OCSP stapling
ok

ingdirect.es
193.41.234.22
443
ok
Tls12

ECDH Ephermal
256
Aes128
128
Sha256
error checking OCSP stapling
ok
no http/2 via ALPN 
No SNI required - domain included in main certificate
Tls.1.2
Tls.1.1
no Tls.1.0
no http/2 via ALPN
No SNI required - domain included in main certificate
Tls.1.2
Tls.1.1
no Tls.1.0
Chain - too much certificates, don't send root certificates
1CN=ingdirect.es, OU=Tecnologia, O=ING Bank N.V. Sucursal en Espana, L=Las Rozas, C=ES, ST=Madrid

2CN=DigiCert Global CA G2, O=DigiCert Inc, C=US

3CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US


www.ingdirect.es
193.41.234.22
443
ok
Tls12
ECDH Ephermal
256
Aes128
128
Sha256
error checking OCSP stapling
ok

www.ingdirect.es
193.41.234.22
443
ok
Tls12

ECDH Ephermal
256
Aes128
128
Sha256
error checking OCSP stapling
ok
no http/2 via ALPN 
No SNI required - domain included in main certificate
Tls.1.2
Tls.1.1
no Tls.1.0
no http/2 via ALPN
No SNI required - domain included in main certificate
Tls.1.2
Tls.1.1
no Tls.1.0
Chain - too much certificates, don't send root certificates
1CN=ingdirect.es, OU=Tecnologia, O=ING Bank N.V. Sucursal en Espana, L=Las Rozas, C=ES, ST=Madrid

2CN=DigiCert Global CA G2, O=DigiCert Inc, C=US

3CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US


ingdirect.es
ingdirect.es
443
ok
Tls12
ECDH Ephermal
256
Aes128
128
Sha256
error checking OCSP stapling
ok

ingdirect.es
ingdirect.es
443
ok
Tls12

ECDH Ephermal
256
Aes128
128
Sha256
error checking OCSP stapling
ok
no http/2 via ALPN 
Tls.1.2
Tls.1.1
no Tls.1.0
no http/2 via ALPN
Tls.1.2
Tls.1.1
no Tls.1.0
Chain - too much certificates, don't send root certificates
1CN=ingdirect.es, OU=Tecnologia, O=ING Bank N.V. Sucursal en Espana, L=Las Rozas, C=ES, ST=Madrid

2CN=DigiCert Global CA G2, O=DigiCert Inc, C=US

3CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US


www.ingdirect.es
www.ingdirect.es
443
ok
Tls12
ECDH Ephermal
256
Aes128
128
Sha256
error checking OCSP stapling
ok

www.ingdirect.es
www.ingdirect.es
443
ok
Tls12

ECDH Ephermal
256
Aes128
128
Sha256
error checking OCSP stapling
ok
no http/2 via ALPN 
Tls.1.2
Tls.1.1
no Tls.1.0
no http/2 via ALPN
Tls.1.2
Tls.1.1
no Tls.1.0
Chain - too much certificates, don't send root certificates
1CN=ingdirect.es, OU=Tecnologia, O=ING Bank N.V. Sucursal en Espana, L=Las Rozas, C=ES, ST=Madrid

2CN=DigiCert Global CA G2, O=DigiCert Inc, C=US

3CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US


193.41.234.22
193.41.234.22
443
name does not match
Tls12
ECDH Ephermal
256
Aes128
128
Sha256
error checking OCSP stapling
ok

193.41.234.22
193.41.234.22
443
name does not match
Tls12

ECDH Ephermal
256
Aes128
128
Sha256
error checking OCSP stapling
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
Tls.1.1
no Tls.1.0
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
Tls.1.1
no Tls.1.0
Chain - too much certificates, don't send root certificates
1CN=ingdirect.es, OU=Tecnologia, O=ING Bank N.V. Sucursal en Espana, L=Las Rozas, C=ES, ST=Madrid

2CN=DigiCert Global CA G2, O=DigiCert Inc, C=US

3CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US


9. Certificates

1.
1.
CN=ingdirect.es, OU=Tecnologia, O=ING Bank N.V. Sucursal en Espana, L=Las Rozas, S=Madrid, C=ES, SERIALNUMBER=33031431, OID.1.3.6.1.4.1.311.60.2.1.3=NL, OID.2.5.4.15=Private Organization
07.09.2019
07.09.2020
17 days expired
www.ingdirect.es, ingdirect.es - 2 entries
1.
1.
CN=ingdirect.es, OU=Tecnologia, O=ING Bank N.V. Sucursal en Espana, L=Las Rozas, S=Madrid, C=ES, SERIALNUMBER=33031431, OID.1.3.6.1.4.1.311.60.2.1.3=NL, OID.2.5.4.15=Private Organization
07.09.2019

07.09.2020
17 days expired
www.ingdirect.es, ingdirect.es - 2 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:092A7C32A5E2857A57681990FE37C137
Thumbprint:36DD95816438D2BF57C890D6FFB84200728290DE
SHA256 / Certificate:TiE+YnK3HyNex2nZCQWe0drLizekOJRtVLaU+ImaSJ8=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):bcfa4ac652b2bd7360ab936a823db4ff9b04c348e7b74c863d5e67ff81ead6cf
SHA256 hex / Subject Public Key Information (SPKI):0700d46f222ef0c40c8d62cfb41066c69f0a387c8646ed3758a421ca352fbaa4
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)


2.
CN=DigiCert Global CA G2, O=DigiCert Inc, C=US
01.08.2013
01.08.2028
expires in 2868 days


2.
CN=DigiCert Global CA G2, O=DigiCert Inc, C=US
01.08.2013

01.08.2028
expires in 2868 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0C8EE0C90D6A89158804061EE241F9AF
Thumbprint:D6AEE31631F7ABC56B9DE8ABECCC4108A626B104
SHA256 / Certificate:j6xXZDnJ/T7xU7Ufnt0NOBtd97h1Wc6+ygQpfdRKY5s=
SHA256 hex / Cert (DANE * 0 1):8fac576439c9fd3ef153b51f9edd0d381b5df7b87559cebeca04297dd44a639b
SHA256 hex / PublicKey (DANE * 1 1):9e3378ad11bedb674d5c08bec9bf1edd4332a60ccf50f1e5bf8f9fa142f09758
SHA256 hex / Subject Public Key Information (SPKI):945d4164682de0a1dd50109af8a8bf3d366a1c86bb54fc4d1ac2210b09f1e707
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:


3.
CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013
15.01.2038
expires in 6322 days


3.
CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013

15.01.2038
expires in 6322 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:033AF1E6A711A9A0BB2864B11D09FAE5
Thumbprint:DF3C24F9BFD666761B268073FE06D1CC8D4F82A4
SHA256 / Certificate:yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18=
SHA256 hex / Cert (DANE * 0 1):cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA256 hex / PublicKey (DANE * 1 1):8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SHA256 hex / Subject Public Key Information (SPKI):730b033f268fc0605ba1093cda0c0a50c8b826c41fbd1b787e5962e52ea160e3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:


2.
1.
CN=ing.es, OU=Tecnologia, O=ING Bank N.V. Sucursal en Espana, L=Las Rozas, S=Madrid, C=ES, SERIALNUMBER=33031431, OID.1.3.6.1.4.1.311.60.2.1.3=NL, OID.2.5.4.15=Private Organization
07.09.2019
07.09.2021
expires in 348 days
www.ing.es, ing.es - 2 entries
2.
1.
CN=ing.es, OU=Tecnologia, O=ING Bank N.V. Sucursal en Espana, L=Las Rozas, S=Madrid, C=ES, SERIALNUMBER=33031431, OID.1.3.6.1.4.1.311.60.2.1.3=NL, OID.2.5.4.15=Private Organization
07.09.2019

07.09.2021
expires in 348 days
www.ing.es, ing.es - 2 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0BB224A21062255C044C20A6A0D856FD
Thumbprint:F224C2E152434F375FDA2B320B741ED7B2FB978F
SHA256 / Certificate:xgyrB9WUHyKBsOCx1WnLs1lDVQdq++RMvkodoHb/H4E=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):33d32898d2418769b67e3737bcabfb26125304498fe53cc21255dd3a6acb79a6
SHA256 hex / Subject Public Key Information (SPKI):c13fd8325066f91b0d16a355746e3702130159b4f8fa21cae9873a2fd1ed4225
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)


2.
CN=DigiCert Global CA G2, O=DigiCert Inc, C=US
01.08.2013
01.08.2028
expires in 2868 days


2.
CN=DigiCert Global CA G2, O=DigiCert Inc, C=US
01.08.2013

01.08.2028
expires in 2868 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0C8EE0C90D6A89158804061EE241F9AF
Thumbprint:D6AEE31631F7ABC56B9DE8ABECCC4108A626B104
SHA256 / Certificate:j6xXZDnJ/T7xU7Ufnt0NOBtd97h1Wc6+ygQpfdRKY5s=
SHA256 hex / Cert (DANE * 0 1):8fac576439c9fd3ef153b51f9edd0d381b5df7b87559cebeca04297dd44a639b
SHA256 hex / PublicKey (DANE * 1 1):9e3378ad11bedb674d5c08bec9bf1edd4332a60ccf50f1e5bf8f9fa142f09758
SHA256 hex / Subject Public Key Information (SPKI):945d4164682de0a1dd50109af8a8bf3d366a1c86bb54fc4d1ac2210b09f1e707
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:


3.
CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013
15.01.2038
expires in 6322 days


3.
CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013

15.01.2038
expires in 6322 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:033AF1E6A711A9A0BB2864B11D09FAE5
Thumbprint:DF3C24F9BFD666761B268073FE06D1CC8D4F82A4
SHA256 / Certificate:yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18=
SHA256 hex / Cert (DANE * 0 1):cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA256 hex / PublicKey (DANE * 1 1):8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SHA256 hex / Subject Public Key Information (SPKI):730b033f268fc0605ba1093cda0c0a50c8b826c41fbd1b787e5962e52ea160e3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:



10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

No CertSpotter - CT-Log entries found


2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > 2019 are listed

No CRT - CT-Log entries found


11. Html-Content - Entries

Summary

Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://www.ing.es/
link
stylesheet
2
66 Bytes
0
2
0
0
0
0


link
other
12
3,249 Bytes
0
1
0
0
0
0


meta
other
6

0


0
0
0


script

6
138 Bytes
0
6
0
0
0
0

Details

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsgStatus
https://www.ing.es/

link
canonical
https://www.ing.es/


1
ok








link
import
/wc/bower_components/ing-uic-cms-breadcrumb/ing-uic-cms-breadcrumb.html


1
ok








link
import
/wc/bower_components/ing-uic-cms-cards-carousel/ing-uic-cms-cards-carousel.html


1
ok








link
import
/wc/bower_components/ing-uic-cms-content/ing-uic-cms-content.html


1
ok








link
import
/wc/bower_components/ing-uic-cms-content-narrow/ing-uic-cms-content-narrow.html


1
ok








link
import
/wc/bower_components/ing-uic-cms-footer/ing-uic-cms-footer.html


1
ok








link
import
/wc/bower_components/ing-uic-cms-header/ing-uic-cms-header.html


1
ok








link
import
/wc/bower_components/ing-uic-cms-hero-card/ing-uic-cms-hero-card.html


1
ok








link
import
/wc/bower_components/ing-uic-cms-layout/ing-uic-cms-layout.html


1
ok








link
import
/wc/bower_components/ing-uic-cms-match-products/ing-uic-cms-match-products.html


1
ok








link
import
/wc/bower_components/ing-uic-cms-products-grid/ing-uic-cms-products-grid.html


1
ok








link
shortcut icon
/site/binaries/content/gallery/hipposp/favicon.png
200

1
ok
image/png;charset=UTF-8, missing X-Content-Type-Options nosniff

No Cache-Control header
No GZip - 3249 Bytes






link
stylesheet
/webfiles/1584619978512/css/base-model-layout.css
200

1
ok
text/css;charset=UTF-8, missing X-Content-Type-Options nosniff

Cache-Control: max-age=31536000 - with long duration found.
GZip required: 66 Bytes




local SRI possible, possible hash-values:

sha256-2xR4jRC+R6ObaLZiuOxs+9UR+wZJvnJZp3a/WAKDECQ=
sha384-48Ey/FhvLklnVlbEqKJ6ED8faQ+KcntHo9xaWx6RoJRKiFx/Q1MncsBg6Tb11TuY
sha512-DfYoeQMDYCpt9ElkH+fT5NoZ5c5CqnQg0dQLWJpdgngWXMYVreeQRWbTqJE77Qg6vmKpWJZMalXAOVZrBCpx4Q==

<link rel="stylesheet" href="/webfiles/1584619978512/css/base-model-layout.css" crossorigin="anonymous" integrity="sha256-2xR4jRC+R6ObaLZiuOxs+9UR+wZJvnJZp3a/WAKDECQ=" />




link
stylesheet
/webfiles/1584619978512/css/flex.css
200

1
ok
text/css;charset=UTF-8, missing X-Content-Type-Options nosniff

Cache-Control: max-age=31536000 - with long duration found.
GZip: 485/1902 Bytes




local SRI possible, possible hash-values:

sha256-UBKX9j3HHrUWpBFueJAZQNcg6ijPFDaRdMAPXWp4MZA=
sha384-gfhp35Qk+S/ISPZgyOPEnACH5ooDOKbZFvjU4EJHe6Ny18ZDqN852h4FRattovMX
sha512-joRYI3sNvY6PlP3cmDEci0XQoFjBp0rkQQ7i+LYoINEY8ElcqZDYAVzxOy7leq5h+nq2Eszqanp8bEei2HFOvw==

<link rel="stylesheet" href="/webfiles/1584619978512/css/flex.css" crossorigin="anonymous" integrity="sha256-UBKX9j3HHrUWpBFueJAZQNcg6ijPFDaRdMAPXWp4MZA=" />




meta

utf-8


1
ok








meta
X-UA-Compatible
IE=7; IE=8


1
ok








meta
X-UA-Compatible
IE=edge,chrome=1


1
ok








meta
description
ING, el banco online sin comisiones para particulares: Cuenta NÓMINA, Cuenta NARANJA, Fondos de inversión, Hipotecas y más. Descubre todas las ventajas del banco naranja y vente ahora a ING. Nos adaptamos a ti. Banco online ING.


1
ok








meta
keywords
ING , banco, online, sin comisiones, people in progress, fresh banking, fondos, hipotecas, cuentas, sin gastos


1
ok








meta
viewport
width=device-width, minimum-scale=1, initial-scale=1, user-scalable=yes


1
ok








script
src
/hippotealium/utag.sync.js
302
https://tags.tiqcdn.com/utag/ing/es-main/prod/utag.sync.js
1
ok
Missing defer / async attribute. text/html, X-Content-Type-Options nosniff found

138 Bytes




local SRI possible, possible hash-values:

sha256-dT4N1U8oxPcAm5wLGKaK7RdUFr2LfRNIWCZFhuqsVvA=
sha384-tKZlm08M4qltg6R7mYFILLRLk+Bnh34w8bWF3r+ri4UHhXdwaVInH326uyP+XncY
sha512-ofD2891niKHXySLGqPyB1HCdvQvyhDMCP7j70VH2Rdqglsbp3WcPt/hsFpmUJRShHBg6oJ8AGBQvgjZo+yoKog==

<script src="/hippotealium/utag.sync.js" crossorigin="anonymous" integrity="sha256-dT4N1U8oxPcAm5wLGKaK7RdUFr2LfRNIWCZFhuqsVvA=" />




script
src
/webfiles/1584619978512/js/browsers.js
200

1
ok
Missing defer / async attribute. application/javascript;charset=UTF-8, missing X-Content-Type-Options nosniff

Cache-Control: max-age=31536000 - with long duration found.
GZip: 667/1463 Bytes




local SRI possible, possible hash-values:

sha256-gmxxIqAojIDxnltTI8RwSBLUQ2Qfj/O7TmVHrDB8/FY=
sha384-SU0RyCFqppEku/WBN/LJKyxalU1n07t2F/P1c10JXQ4xOmySrSmaAuTIksgmWj4i
sha512-EIF+ZCLYfGD5hxEvNGNxsZcCQDNZ09oCBeHThUbkEn6w798vqLL/mRkUOFxAX+KEVErGycRKp9thJm9X+urd1Q==

<script src="/webfiles/1584619978512/js/browsers.js" crossorigin="anonymous" integrity="sha256-gmxxIqAojIDxnltTI8RwSBLUQ2Qfj/O7TmVHrDB8/FY=" />




script
src
/webfiles/1584619978512/js/hippoCommon.js
200

1
ok
Missing defer / async attribute. application/javascript;charset=UTF-8, missing X-Content-Type-Options nosniff

Cache-Control: max-age=31536000 - with long duration found.
GZip: 417/928 Bytes




local SRI possible, possible hash-values:

sha256-6khcHoo8OmvIk35VulsjaSwiVsEHlDm/kNd1yMPr+xw=
sha384-Qz1wVVvRexp/Cqbna9MzZfMtiSX2Tw14uMOvbUCtd135Y4OwDu2btSQPSx+VsmxR
sha512-GHDPKImgpbhRNUCzVUa9RaiVQsYfx8OxN6hPWWlusslZx9FSK2v1qqPeBSoSGEC7pqL+nKt2axIhaV/bqeNx3g==

<script src="/webfiles/1584619978512/js/hippoCommon.js" crossorigin="anonymous" integrity="sha256-6khcHoo8OmvIk35VulsjaSwiVsEHlDm/kNd1yMPr+xw=" />




script
src
/webfiles/1584619978512/js/jquery/jquery-1.12.0.min.js
200

1
ok
Missing defer / async attribute. application/javascript;charset=UTF-8, missing X-Content-Type-Options nosniff

Cache-Control: max-age=31536000 - with long duration found.
GZip: 34076/97362 Bytes




local SRI possible, possible hash-values:

sha256-Xxq2X+KtazgaGuA2cWR1v3jJsuMJUozyIXDB3e793L8=
sha384-XxcvoeNF5V0ZfksTnV+bejnCsJjOOIzN6UVwF85WBsAnU3zeYh5bloN+L4WLgeNE
sha512-K7Zj7PGsHk2fpY3Jwvbuo9nKc541MofFrrLaUUO9zqghnJxbZ3Zn35W/ZeXvbT2RtSujxGbw8PgkqpoZXXbGhw==

<script src="/webfiles/1584619978512/js/jquery/jquery-1.12.0.min.js" crossorigin="anonymous" integrity="sha256-Xxq2X+KtazgaGuA2cWR1v3jJsuMJUozyIXDB3e793L8=" />




script
src
/webfiles/1584619978512/js/mdetect.js
200

1
ok
Missing defer / async attribute. application/javascript;charset=UTF-8, missing X-Content-Type-Options nosniff

Cache-Control: max-age=31536000 - with long duration found.
GZip: 2746/11390 Bytes




local SRI possible, possible hash-values:

sha256-UMYHknCpCWMgHHeEcdnXkuSjKIAt+NICw9ZdWoUgNC4=
sha384-UaTcs4BSHsP9Snyyy1g6YrDXs7zV6voBeEjnO4YtANvYYnzFPOz/I/ikMnD0miAk
sha512-TqX/Tro18aJhrm4IVIPbFl1+ctZgwR00iiXVkCyeyUOF+GiS3eILG31iinn4ZpQjjQW6jVWeJwAUo01NVKZuKQ==

<script src="/webfiles/1584619978512/js/mdetect.js" crossorigin="anonymous" integrity="sha256-UMYHknCpCWMgHHeEcdnXkuSjKIAt+NICw9ZdWoUgNC4=" />




script
src
/webfiles/1584619978512/js/scrollSpy.js
200

1
ok
Missing defer / async attribute. application/javascript;charset=UTF-8, missing X-Content-Type-Options nosniff

Cache-Control: max-age=31536000 - with long duration found.
GZip: 908/3081 Bytes




local SRI possible, possible hash-values:

sha256-UW12cADfB+RBeNZphNOmSJQDCb+IOOwxQj9tH6E5yNM=
sha384-/jZiYNwkEuDCmv/eZwW29BnL9Rma+Yf4DaSs9+iKRyY7WemY7txyOG4CmH0wcftE
sha512-0Hz/hUCQXHQOwq07aetuUovCKoHd9dllQmhB0ZM6ZorcD0fjZ4gX70xY+pqo/IeLe1JffUS9DgyVoMqCzjruAg==

<script src="/webfiles/1584619978512/js/scrollSpy.js" crossorigin="anonymous" integrity="sha256-UW12cADfB+RBeNZphNOmSJQDCb+IOOwxQj9tH6E5yNM=" />




12. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: a11-64.akam.net, a1-165.akam.net, a16-67.akam.net, a20-65.akam.net, a6-66.akam.net, a9-67.akam.net, dns01.ingdirect.es

QNr.DomainTypeNS used
1
net
NS
k.root-servers.net (2001:7fd::1)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2
a11-64.akam.net
NS
e.gtld-servers.net (2001:502:1ca1::30)

Answer: a1-67.akam.net, a11-67.akam.net, a12-67.akam.net, a13-67.akam.net, a18-67.akam.net, a22-67.akam.net, a28-67.akam.net, a3-67.akam.net, a4-67.akam.net, a5-67.akam.net, a6-67.akam.net, a7-67.akam.net, a9-67.akam.net

Answer: a1-67.akam.net
193.108.91.67, 2600:1401:2::43

Answer: a11-67.akam.net
84.53.139.67

Answer: a12-67.akam.net
184.26.160.67

Answer: a13-67.akam.net
2.22.230.67

Answer: a18-67.akam.net
95.101.36.67

Answer: a22-67.akam.net
23.211.61.67

Answer: a28-67.akam.net
95.100.173.67

Answer: a3-67.akam.net
96.7.49.67

Answer: a5-67.akam.net
95.100.168.67

Answer: a7-67.akam.net
23.61.199.67

Answer: a9-67.akam.net
184.85.248.67
3
a1-165.akam.net
NS
e.gtld-servers.net (2001:502:1ca1::30)

Answer: a1-67.akam.net, a11-67.akam.net, a12-67.akam.net, a13-67.akam.net, a18-67.akam.net, a22-67.akam.net, a28-67.akam.net, a3-67.akam.net, a4-67.akam.net, a5-67.akam.net, a6-67.akam.net, a7-67.akam.net, a9-67.akam.net

Answer: a1-67.akam.net
193.108.91.67, 2600:1401:2::43

Answer: a11-67.akam.net
84.53.139.67

Answer: a12-67.akam.net
184.26.160.67

Answer: a13-67.akam.net
2.22.230.67

Answer: a18-67.akam.net
95.101.36.67

Answer: a22-67.akam.net
23.211.61.67

Answer: a28-67.akam.net
95.100.173.67

Answer: a3-67.akam.net
96.7.49.67

Answer: a5-67.akam.net
95.100.168.67

Answer: a7-67.akam.net
23.61.199.67

Answer: a9-67.akam.net
184.85.248.67
4
a16-67.akam.net
NS
e.gtld-servers.net (2001:502:1ca1::30)

Answer: a1-67.akam.net, a11-67.akam.net, a12-67.akam.net, a13-67.akam.net, a18-67.akam.net, a22-67.akam.net, a28-67.akam.net, a3-67.akam.net, a4-67.akam.net, a5-67.akam.net, a6-67.akam.net, a7-67.akam.net, a9-67.akam.net

Answer: a1-67.akam.net
193.108.91.67, 2600:1401:2::43

Answer: a11-67.akam.net
84.53.139.67

Answer: a12-67.akam.net
184.26.160.67

Answer: a13-67.akam.net
2.22.230.67

Answer: a18-67.akam.net
95.101.36.67

Answer: a22-67.akam.net
23.211.61.67

Answer: a28-67.akam.net
95.100.173.67

Answer: a3-67.akam.net
96.7.49.67

Answer: a5-67.akam.net
95.100.168.67

Answer: a7-67.akam.net
23.61.199.67

Answer: a9-67.akam.net
184.85.248.67
5
a20-65.akam.net
NS
e.gtld-servers.net (2001:502:1ca1::30)

Answer: a1-67.akam.net, a11-67.akam.net, a12-67.akam.net, a13-67.akam.net, a18-67.akam.net, a22-67.akam.net, a28-67.akam.net, a3-67.akam.net, a4-67.akam.net, a5-67.akam.net, a6-67.akam.net, a7-67.akam.net, a9-67.akam.net

Answer: a1-67.akam.net
193.108.91.67, 2600:1401:2::43

Answer: a11-67.akam.net
84.53.139.67

Answer: a12-67.akam.net
184.26.160.67

Answer: a13-67.akam.net
2.22.230.67

Answer: a18-67.akam.net
95.101.36.67

Answer: a22-67.akam.net
23.211.61.67

Answer: a28-67.akam.net
95.100.173.67

Answer: a3-67.akam.net
96.7.49.67

Answer: a5-67.akam.net
95.100.168.67

Answer: a7-67.akam.net
23.61.199.67

Answer: a9-67.akam.net
184.85.248.67
6
a6-66.akam.net
NS
e.gtld-servers.net (2001:502:1ca1::30)

Answer: a1-67.akam.net, a11-67.akam.net, a12-67.akam.net, a13-67.akam.net, a18-67.akam.net, a22-67.akam.net, a28-67.akam.net, a3-67.akam.net, a4-67.akam.net, a5-67.akam.net, a6-67.akam.net, a7-67.akam.net, a9-67.akam.net

Answer: a1-67.akam.net
193.108.91.67, 2600:1401:2::43

Answer: a11-67.akam.net
84.53.139.67

Answer: a12-67.akam.net
184.26.160.67

Answer: a13-67.akam.net
2.22.230.67

Answer: a18-67.akam.net
95.101.36.67

Answer: a22-67.akam.net
23.211.61.67

Answer: a28-67.akam.net
95.100.173.67

Answer: a3-67.akam.net
96.7.49.67

Answer: a5-67.akam.net
95.100.168.67

Answer: a7-67.akam.net
23.61.199.67

Answer: a9-67.akam.net
184.85.248.67
7
es
NS
b.root-servers.net (2001:500:200::b)

Answer: a.nic.es, f.nic.es, g.nic.es, h.nic.es, ns-es.nic.fr, ns1.cesca.es, ssdns-tld.nic.cl
8
dns01.ingdirect.es
NS
a.nic.es (2001:67c:21cc:2000::64:41)

Answer: a1-165.akam.net, a11-64.akam.net, a16-67.akam.net, a20-65.akam.net, a6-66.akam.net, a9-67.akam.net
9
a4-67.akam.net: 72.246.46.67
NS
e.gtld-servers.net (2001:502:1ca1::30)

Answer: a1-67.akam.net
193.108.91.67, 2600:1401:2::43

Answer: a11-67.akam.net
84.53.139.67

Answer: a12-67.akam.net
184.26.160.67

Answer: a13-67.akam.net
2.22.230.67

Answer: a18-67.akam.net
95.101.36.67

Answer: a22-67.akam.net
23.211.61.67

Answer: a28-67.akam.net
95.100.173.67

Answer: a3-67.akam.net
96.7.49.67

Answer: a5-67.akam.net
95.100.168.67

Answer: a7-67.akam.net
23.61.199.67

Answer: a9-67.akam.net
184.85.248.67
10
a6-67.akam.net
NS
e.gtld-servers.net (2001:502:1ca1::30)

Answer: a1-67.akam.net, a11-67.akam.net, a12-67.akam.net, a13-67.akam.net, a18-67.akam.net, a22-67.akam.net, a28-67.akam.net, a3-67.akam.net, a4-67.akam.net, a5-67.akam.net, a6-67.akam.net, a7-67.akam.net, a9-67.akam.net

Answer: a1-67.akam.net
193.108.91.67, 2600:1401:2::43

Answer: a11-67.akam.net
84.53.139.67

Answer: a12-67.akam.net
184.26.160.67

Answer: a13-67.akam.net
2.22.230.67

Answer: a18-67.akam.net
95.101.36.67

Answer: a22-67.akam.net
23.211.61.67

Answer: a28-67.akam.net
95.100.173.67

Answer: a3-67.akam.net
96.7.49.67

Answer: a4-67.akam.net
72.246.46.67

Answer: a5-67.akam.net
95.100.168.67

Answer: a7-67.akam.net
23.61.199.67

Answer: a9-67.akam.net
184.85.248.67
11
a11-64.akam.net: 84.53.139.64
A
a1-67.akam.net (2600:1401:2::43)
12
a11-64.akam.net: 2600:1480:1::40
AAAA
a1-67.akam.net (2600:1401:2::43)
13
a1-165.akam.net: 193.108.91.165
A
a1-67.akam.net (2600:1401:2::43)
14
a1-165.akam.net: 2600:1401:2::a5
AAAA
a1-67.akam.net (2600:1401:2::43)
15
a16-67.akam.net: 23.211.132.67
A
a1-67.akam.net (2600:1401:2::43)
16
a16-67.akam.net: 2600:1406:1b::43
AAAA
a1-67.akam.net (2600:1401:2::43)
17
a20-65.akam.net: 95.100.175.65
A
a1-67.akam.net (2600:1401:2::43)
18
a20-65.akam.net: 2a02:26f0:67::41
AAAA
a1-67.akam.net (2600:1401:2::43)
19
a6-66.akam.net: 23.211.133.66
A
a1-67.akam.net (2600:1401:2::43)
20
a6-66.akam.net: 2600:1401:1::42
AAAA
a1-67.akam.net (2600:1401:2::43)
21
dns01.ingdirect.es: 193.41.234.11
A
a1-165.akam.net (2600:1401:2::a5)
22
dns01.ingdirect.es: No AAAA record found
AAAA
a1-165.akam.net (2600:1401:2::a5)
23
a6-67.akam.net: 23.211.133.67
A
a1-67.akam.net (2600:1401:2::43)
24
a6-67.akam.net: 2600:1401:1::43
AAAA
a1-67.akam.net (2600:1401:2::43)


13. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.ingdirect.es
0

no CAA entry found
1
0
ingdirect.es
0

no CAA entry found
1
0
es
0

no CAA entry found
1
0


14. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
ingdirect.es
2ae09eda4182391432b06144c71bcfbd
ok
1
0
ingdirect.es
gBIBs0F+wQQMfJKBMqWAZhDZIoA73Gej8h6py2e9aFQRLogG2V4tGUS50A7YYlgCVbRvOoIfi+Waa2mUk7mWqg==
ok
1
0
ingdirect.es
MS=D39C3FCCA4182CD6B24811EEF56FA030C9CC5B2B
ok
1
0
ingdirect.es
MS=ms84998660
ok
1
0
ingdirect.es
t3wttc90bmwzcr9jp8yts7lxmctpcb5s
ok
1
0
ingdirect.es
v=spf1 ip4:193.41.234.0/24 include:spf.gms.es include:rnmk.com include:_spf.ing.net -all
ok
1
0
ingdirect.es
ztqrw775dd0bsv1ks7kgkklmkq1r91t3
ok
1
0
www.ingdirect.es

ok
1
0
_acme-challenge.ingdirect.es

Name Error - The domain name does not exist
1
0
_acme-challenge.www.ingdirect.es

Name Error - The domain name does not exist
1
0
_acme-challenge.ingdirect.es.ingdirect.es

Name Error - The domain name does not exist
1
0
_acme-challenge.www.ingdirect.es.ingdirect.es

Name Error - The domain name does not exist
1
0
_acme-challenge.www.ingdirect.es.www.ingdirect.es

Name Error - The domain name does not exist
1
0


15. Portchecks

No Port checks



Permalink: https://check-your-website.server-daten.de/?i=0076e4e8-2031-46fe-bcd9-7ee35a1a1c80


Last Result: https://check-your-website.server-daten.de/?q=ingdirect.es - 2020-08-01 09:53:54


Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=ingdirect.es" target="_blank">Check this Site: ingdirect.es</a>