Check DNS, Urls + Redirects, Certificates and Content of your Website


 

 

I

 

Content problems - mixed content, missing files etc.

 

Checked:
30.10.2024 22:37:55

 

Older results

No older results found

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
nationalcareers.service.gov.uk
A
104.40.146.218
Amsterdam/North Holland/Netherlands (NL) - Microsoft Corporation
No Hostname found
yes
1
0

AAAA

yes


www.nationalcareers.service.gov.uk

Name Error
yes
1
0
*.nationalcareers.service.gov.uk
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


mta-sts.nationalcareers.service.gov.uk
A
13.69.68.39
No Hostname found
yes


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






Status: Valid because published






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 61050, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 11.11.2024, 00:00:00 +, Signature-Inception: 21.10.2024, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: uk

uk
1 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 43876, DigestType 2 and Digest oQftKsG9FNkkFzvH6CehFTWCByOU+Scro34jU7xllgM=






1 RRSIG RR to validate DS RR found






RRSIG-Owner uk., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 12.11.2024, 20:00:00 +, Signature-Inception: 30.10.2024, 19:00:00 +, KeyTag 61050, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 61050 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 43056, Flags 256






Public Key with Algorithm 8, KeyTag 43876, Flags 257 (SEP = Secure Entry Point)






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner uk., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 03.12.2024, 10:44:33 +, Signature-Inception: 29.10.2024, 10:28:29 +, KeyTag 43876, Signer-Name: uk






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 43876 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 43876, DigestType 2 and Digest "oQftKsG9FNkkFzvH6CehFTWCByOU+Scro34jU7xllgM=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: gov.uk

gov.uk
2 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 17539, DigestType 2 and Digest LwoKZduekw9bLAQl9n32ZBbAdhJGUqKB2aj/p3OCj1c=






DS with Algorithm 8, KeyTag 695, DigestType 2 and Digest cndZLb2Jk73nBwTbq9MK/buFBX5ljvFCjxj12aU0vOA=






1 RRSIG RR to validate DS RR found






RRSIG-Owner gov.uk., Algorithm: 8, 2 Labels, original TTL: 300 sec, Signature-expiration: 30.11.2024, 15:26:38 +, Signature-Inception: 26.10.2024, 14:30:46 +, KeyTag 43056, Signer-Name: uk






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 43056 used to validate the DS RRSet in the parent zone






7 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 695, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 16180, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 17539, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 18198, Flags 256






Public Key with Algorithm 8, KeyTag 23541, Flags 256






Public Key with Algorithm 8, KeyTag 52549, Flags 256






Public Key with Algorithm 8, KeyTag 58200, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner gov.uk., Algorithm: 8, 2 Labels, original TTL: 7200 sec, Signature-expiration: 04.12.2024, 00:22:25 +, Signature-Inception: 29.10.2024, 23:59:20 +, KeyTag 695, Signer-Name: gov.uk






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 695 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 695, DigestType 2 and Digest "cndZLb2Jk73nBwTbq9MK/buFBX5ljvFCjxj12aU0vOA=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: service.gov.uk

service.gov.uk
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "4i91e3b55qs2oggpra1u0kr6ql1las9f" between the hashed NSEC3-owner "402102nqi3hugsftrhc2uqul4uf3qs4e" and the hashed NextOwner "4iefetsvbg54jo02mro0eualuil4jbh1". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: CNAME, RRSIG Validated: RRSIG-Owner 402102nqi3hugsftrhc2uqul4uf3qs4e.gov.uk., Algorithm: 8, 3 Labels, original TTL: 14400 sec, Signature-expiration: 28.11.2024, 06:27:02 +, Signature-Inception: 24.10.2024, 06:17:39 +, KeyTag 52549, Signer-Name: gov.uk






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "58i52iqlrcob2peg45is2ano18fc2bjp" as Owner. That's the Hash of "gov.uk" with the NextHashedOwnerName "7vcalb1ug09eqkb77hbagh8evloeao6j". So that domain name is the Closest Encloser of "service.gov.uk". Opt-Out: True.
Bitmap: A, NS, SOA, TXT, AAAA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner 58i52iqlrcob2peg45is2ano18fc2bjp.gov.uk., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 01.12.2024, 06:13:22 +, Signature-Inception: 27.10.2024, 05:48:44 +, KeyTag 52549, Signer-Name: gov.uk






0 DNSKEY RR found









Zone: nationalcareers.service.gov.uk

nationalcareers.service.gov.uk
0 DS RR in the parent zone found






0 DNSKEY RR found









Zone: www.nationalcareers.service.gov.uk

www.nationalcareers.service.gov.uk
0 DS RR in the parent zone found

 

3. Name Servers

DomainNameserverNS-IP
www.nationalcareers.service.gov.uk
  ns-1505.awsdns-60.org

nationalcareers.service.gov.uk
  ns-1505.awsdns-60.org / 5ab1d87bf41690be22d2def7fbab5434 -
205.251.197.225
Herndon/Virginia/United States (US) - Amazon.com


 
2600:9000:5305:e100::1
New York/United States (US) - Amazon.com


  ns-1589.awsdns-06.co.uk / d20ea5b878c84405ebe3af6e94de2ad0 -
205.251.198.53
Ashburn/Virginia/United States (US) - Amazon.com


 
2600:9000:5306:3500::1
Seattle/Washington/United States (US) - Amazon.com


  ns-306.awsdns-38.com / bd63b90d365b5fbdd0e95e8c01ff4101 -
205.251.193.50
Ashburn/Virginia/United States (US) - Amazon.com


 
2600:9000:5301:3200::1
Seattle/Washington/United States (US) - Amazon.com


  ns-841.awsdns-41.net / fb57a6fe339387cfd565b64c08bfd3dc -
205.251.195.73
Sterling/Virginia/United States (US) - Amazon.com


 
2600:9000:5303:4900::1
Seattle/Washington/United States (US) - Amazon.com

service.gov.uk
  ns-1080.awsdns-07.org / c437c83c553e75cdcdde5edf42a06b43 -
205.251.196.56
Ashburn/Virginia/United States (US) - Amazon.com


 
2600:9000:5304:3800::1
New York/United States (US) - Amazon.com


  ns-117.awsdns-14.com / 25831b64dd85b79d4fd0776d8095c364 -
205.251.192.117
Ashburn/Virginia/United States (US) - Amazon.com


 
2600:9000:5300:7500::1
Seattle/Washington/United States (US) - Amazon.com


  ns-1983.awsdns-55.co.uk / f008838abee615f82602030077d29b23 -
205.251.199.191
Ashburn/Virginia/United States (US) - Amazon.com


 
2600:9000:5307:bf00::1
Seattle/Washington/United States (US) - Amazon.com


  ns-831.awsdns-39.net / 022983defdb9a7aeb01c4bad0fd1a405 -
205.251.195.63
Sterling/Virginia/United States (US) - Amazon.com


 
2600:9000:5303:3f00::1
Seattle/Washington/United States (US) - Amazon.com


  ns-cloud-e1.googledomains.com
216.239.32.110
Mountain View/California/United States (US) - Google LLC


 
2001:4860:4802:32::6e
Mountain View/California/United States (US) - Google LLC


  ns-cloud-e2.googledomains.com
216.239.34.110
Mountain View/California/United States (US) - Google LLC


 
2001:4860:4802:34::6e
Mountain View/California/United States (US) - Google LLC


  ns-cloud-e3.googledomains.com
216.239.36.110
Mountain View/California/United States (US) - Google LLC


 
2001:4860:4802:36::6e
Mountain View/California/United States (US) - Google LLC


  ns-cloud-e4.googledomains.com
216.239.38.110
Mountain View/California/United States (US) - Google LLC


 
2001:4860:4802:38::6e
Mountain View/California/United States (US) - Google LLC

gov.uk
  dns1.nic.uk
213.248.216.1
Oxford/England/United Kingdom (GB) - Nominet


 
2a01:618:400::1
Oxford/England/United Kingdom (GB) - Nominet


  dns2.nic.uk
103.49.80.1
Oxford/England/United Kingdom (GB) - NOMINET-NS


 
2401:fd80:400::1
Ashburn/Virginia/United States (US) - Nominet UK


  dns3.nic.uk
213.248.220.1
London/England/United Kingdom (GB) - Nominet


 
2a01:618:404::1
Oxford/England/United Kingdom (GB) - Nominet


  dns4.nic.uk
43.230.48.1
Oxford/England/United Kingdom (GB) - NOMINET-NS


 
2401:fd80:404::1
Sydney/New South Wales/Australia (AU) - Nominet UK


  nsa.nic.uk / u-ci-nominet2.defra1.ultradns
156.154.100.3
New York/United States (US) - NeuStar, Inc.


 
2001:502:ad09::3
Herndon/Virginia/United States (US) - NeuStar, Inc.


  nsb.nic.uk / TLD_Host2.Frankfurt_Node1
156.154.101.3
New York/United States (US) - NeuStar, Inc.


 
2001:502:2eda::3
Herndon/Virginia/United States (US) - NeuStar, Inc.


  nsc.nic.uk / TLD_Host2.Frankfurt_Node1
156.154.102.3
Miami/Florida/United States (US) - NeuStar, Inc.


 
2610:a1:1009::3
Ashburn/Virginia/United States (US) - NeuStar, Inc.


  nsd.nic.uk / TLD_Host1.Frankfurt_Node1
156.154.103.3
New York/United States (US) - NeuStar, Inc.


 
2610:a1:1010::3
Herndon/Virginia/United States (US) - NeuStar, Inc.

uk
  dns1.nic.uk


  dns2.nic.uk


  dns3.nic.uk


  dns4.nic.uk


  nsa.nic.uk / u-ci-nominet1.defra1.ultradns


  nsb.nic.uk / TLD_Host1.Frankfurt_Node1


  nsc.nic.uk / TLD_Host2.Frankfurt_Node1


  nsd.nic.uk / TLD_Host2.Frankfurt_Node1

 

4. SOA-Entries


Domain:uk
Zone-Name:uk
Primary:dns1.nic.uk
Mail:hostmaster.nic.uk
Serial:1730324258
Refresh:7200
Retry:900
Expire:2419200
TTL:10800
num Entries:8


Domain:gov.uk
Zone-Name:gov.uk
Primary:dns1.nic.uk
Mail:hostmaster.nominet.org.uk
Serial:1730313329
Refresh:900
Retry:300
Expire:2419200
TTL:3600
num Entries:16


Domain:service.gov.uk
Zone-Name:service.gov.uk
Primary:ns-831.awsdns-39.net
Mail:awsdns-hostmaster.amazon.com
Serial:1
Refresh:21600
Retry:3600
Expire:259200
TTL:300
num Entries:8


Domain:service.gov.uk
Zone-Name:service.gov.uk
Primary:ns-cloud-e1.googledomains.com
Mail:cloud-dns-hostmaster.google.com
Serial:1
Refresh:21600
Retry:3600
Expire:259200
TTL:300
num Entries:8


Domain:nationalcareers.service.gov.uk
Zone-Name:nationalcareers.service.gov.uk
Primary:ns-1505.awsdns-60.org
Mail:awsdns-hostmaster.amazon.com
Serial:1
Refresh:7200
Retry:900
Expire:1209600
TTL:86400
num Entries:8


Domain:www.nationalcareers.service.gov.uk
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


5. Screenshots

Startaddress: https://nationalcareers.service.gov.uk/, address used: https://nationalcareers.service.gov.uk/, Screenshot created 2024-10-30 22:41:29 +00:0

 

Mobil (412px x 732px)

 

1144 milliseconds

 

Screenshot mobile - https://nationalcareers.service.gov.uk/
Mobil + Landscape (732px x 412px)

 

1087 milliseconds

 

Screenshot mobile landscape - https://nationalcareers.service.gov.uk/
Screen (1280px x 1680px)

 

1375 milliseconds

 

Screenshot Desktop - https://nationalcareers.service.gov.uk/

 

Mobile- and other Chrome-Checks


widthheight
visual Viewport396732
content Size3963531

 

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://nationalcareers.service.gov.uk/
104.40.146.218
302
https://nationalcareers.service.gov.uk/

0.050
A
Connection: Close
Location: https://nationalcareers.service.gov.uk/
Content-Length: 0

• https://nationalcareers.service.gov.uk/
104.40.146.218 No Compression used - 10362 / 36784 - 28.17 % possible
Inline-JavaScript (∑/total): 5/2208 Inline-CSS (∑/total): 0/0
200

Html is minified: 128.72 %
Other inline scripts (∑/total): 0/0
2.493
I
Date: Wed, 30 Oct 2024 21:39:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: ncs_session_cookie=275e12bf-9b74-4b83-8150-feb5afb4d71f; expires=Wed, 27 Nov 2024 21:39:57 GMT; path=/; secure; samesite=none; httponly,BNIS_vid=jPv+W6h1OfKEI85iScw+8LK0EwvRxso/O69tFqYC3Yrysoo2xxaTyqdM32qWl9BdsiXACnUj00GR6zRbewBR/HIPmNwZl2g+oFg9FoLAgj+kt43aXDcSMn1cEV0HQ3z6BYIXDQI/fTE8RXXUXrKhWh/ucWfzCVAtlJ6yFP0jLUaCq1JJsQDEZA==; Path=/,BNIS___utm_is1=HEp/0n2FrNYJz3IzzWuqpIZCkXXvsbA3sRu7sLVGAOct+0HYF1+KYnTC/GV+FjsztSVb9fD8OXavqHvoUPvNKOST9r+nHdyIYzyoyhmxKRTR0ZzQPQyRog==; Max-Age=31536000; Path=/,BNIS___utm_is2=87qOH8ADnm9co2KvCddHelzSMypzX9os2z4lMf2FbHweTKODNjdxonNMWWWxPTg5sUL10ZVXfO0=; Max-Age=10800; Path=/,BNIS___utm_is3=DR2U+73NBLJo3f/7W/AESCqVVXcY+UF7UNNJ+j3r68H7BB2m5s6nxTbDb9TP8bqtR89iLJ3308ujiiz0yLxxIpNX6X1vqrbBtIDzZhUnkco=; Path=/,BNES_ncs_session_cookie=zDjLSxS5GY2qBAtzZN42ePVKgiFH3Z5NSRVUwDOhcjoN0gXHE9eOzjB6VEiwxHtqb4COZhVR5NY/H/RNuE156qdmpioaTVlt1peGtr8ZlL2c+vFvATT9e+fpN16kYv7D; expires=Wed, 27 Nov 2024 21:39:57 GMT; path=/; secure; samesite=none; httponly
Strict-Transport-Security: max-age=31536000; includeSubDomains
Request-Context: appId=cid-v1:4acedac8-96eb-4e6b-9e2d-510eb191f365
OperationId: 86785b72ac844c8233850fc0e7f0948f
Content-Security-Policy: default-src 'self';script-src 'self' 'nonce-OVHC5oIAZZUUeyytCR4O81Zz' https://az416426.vo.msecnd.net/scripts/ www.google-analytics.com 'sha256-OzxeCM8TJjksWkec74qsw2e3+vmC1ifof7TzRHngpoE=' 'sha256-lL/kILkNOhT9vW0QtSSgm0PwfBFV85BwRQotdY9dujk=' 'sha256-sQraM3b+lwZqC1Krr12vIz4t3nESs+z7z4prOEzSlIE=' 'sha256-AG33YdCnVr7TrW7POTo6HW6msAY2iZ6ddqP+CtEo8KQ=' sc-static.net tr.snapchat.com connect.facebook.net www.facebook.com www.googletagmanager.com https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/js/ https://webchat.nationalcareers.service.gov.uk/js/ https://az416426.vo.msecnd.net/scripts/ https://www.youtube.com https://www.google-analytics.com https://optimize.google.com https://*.clarity.ms https://c.bing.com https://www.googleoptimize.com;style-src 'unsafe-inline' https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/css/ https://webchat.nationalcareers.service.gov.uk/css/ https://optimize.google.com https://fonts.googleapis.com https://www.googleoptimize.com;img-src 'self' https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/images/ https://cdn.nationalcareers.service.gov.uk/media/ https://cdsprdwesfstorage.blob.core.windows.net/skills-health-check/QuestionSetImages/ https://webchat.nationalcareers.service.gov.uk/images/ https://webchat.nationalcareers.service.gov.uk/var/ www.google-analytics.com *.doubleclick.net https://i.ytimg.com https://optimize.google.com https://www.googleoptimize.com https://www.googletagmanager.com www.facebook.com;frame-src 'self' https://webchat.nationalcareers.service.gov.uk https://www.youtube-nocookie.com https://optimize.google.com https://tr.snapchat.com;font-src 'self' https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/fonts/ https://fonts.gstatic.com;connect-src 'self' https://webchat.nationalcareers.service.gov.uk https://dc.services.visualstudio.com https://dc.services.visualstudio.com https://www.google-analytics.com https://*.clarity.ms https://c.bing.com https://region1.google-analytics.com https://www.googletagmanager.com tr.snapchat.com;form-action 'self' https://auth.nationalcareers.service.gov.uk tr.snapchat.com;frame-ancestors 'self'
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 0
Feature-Policy: sync-xhr 'self'
Expect-CT: max-age=86400, enforce
X-Permitted-Cross-Domain-Policies: none
Content-Type: text/html; charset=utf-8
Content-Length: 36784

• https://mta-sts.nationalcareers.service.gov.uk/.well-known/mta-sts.txt
13.69.68.39 gzip used - 212 / 112 - -89.29 %
200



B
0 None CN=mta-sts.nationalcareers.service.gov.uk, O=Department for Education, L=Manchester, S=Greater Manchester, C=GB
Date: Wed, 30 Oct 2024 21:40:17 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "222e29377c24d71:0"
Set-Cookie: ARRAffinity=20aa02600d1975c84270563ccb9810d63d7467729e7c7acc178eee0064ce501b;Path=/;HttpOnly;Secure;Domain=mta-sts.nationalcareers.service.gov.uk,ARRAffinitySameSite=20aa02600d1975c84270563ccb9810d63d7467729e7c7acc178eee0064ce501b;Path=/;HttpOnly;SameSite=None;Secure;Domain=mta-sts.nationalcareers.service.gov.uk
Vary: Accept-Encoding
X-Powered-By: ASP.NET
Content-Length: 212
Content-Type: text/plain
Content-Encoding: gzip
Last-Modified: Mon, 29 Mar 2021 09:16:35 GMT

• http://nationalcareers.service.gov.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
104.40.146.218
302
https://nationalcareers.service.gov.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.043
A
Visible Content:
Connection: Close
Location: https://nationalcareers.service.gov.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Content-Length: 0

• https://nationalcareers.service.gov.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

Inline-JavaScript (∑/total): 5/2208 Inline-CSS (∑/total): 0/0
404

Html is minified: 141.66 %
Other inline scripts (∑/total): 0/0
2.606
B
Not Found
Visible Content:
Date: Wed, 30 Oct 2024 21:40:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: ncs_session_cookie=7390f948-93de-43cc-87f5-9d33a32d5c9d; expires=Wed, 27 Nov 2024 21:40:07 GMT; path=/; secure; samesite=none; httponly,BNIS_vid=Wki/kGFm/xYQwKHJSEG0O6C1ggfAglOgBX0kejDRpoL1cMppq+X/3rIihWsW0FH2yd4rpl45st+9J1Le116M/k5sqCdrFG3WhE9hiN+t+09iXGlVRP5tu2l8dnWLTiwQN3XUNmeALVegsd9WW5V0R6iAEXlilxPN5b/6T1W5W29npS8DtPW80A==; Path=/,BNIS___utm_is1=7QwCm9wdO3o597B8EkxsCp0QBJRuALJZtnw3dHM5m2SsFBPql2JfcKcnzSdjVJBjudMI0/aZkXGFoG8mw4BjLZyfLP98S3Hm1Q7Z/NKOAL5Lq0F1HNMliQ==; Max-Age=31536000; Path=/,BNIS___utm_is2=M/+xpSL3Nmgon9hrG4bkW/REMji5FkyClHJ9QXHzW0Y5ZESmcfPLb8N2sPBywuJo3ItGOgHVWvw=; Max-Age=10800; Path=/,BNIS___utm_is3=ropcPzh64URMiGvNmkn7ER02dxbsaw67QuTB9hkOq2cgXuzzoc1QHh0rYGAtPktnE2cEwjtdSj/hAEA1z6L6sbkXJ+p/u8o3CPLvItUhwX0=; Path=/,BNES_ncs_session_cookie=V/9I+8Q4J0CojOiYXnHcai6E/kmmycn59DLStndd9YyP2Qpldy0id62wZOAUSLnSGil5RQ3jHhGRpkzJR1ff3ONjU98P7pLJZ3QHB9s0Dexmf8+nLMqPMlTxkt2QpUsd; expires=Wed, 27 Nov 2024 21:40:07 GMT; path=/; secure; samesite=none; httponly
Strict-Transport-Security: max-age=31536000; includeSubDomains
Request-Context: appId=cid-v1:4acedac8-96eb-4e6b-9e2d-510eb191f365
OperationId: a20e97c066603fa2683e4ead4e4e558d
Content-Security-Policy: default-src 'self';script-src 'self' 'nonce-tr63ltbWghpNg/LS/5Mb5Yv5' https://az416426.vo.msecnd.net/scripts/ www.google-analytics.com 'sha256-OzxeCM8TJjksWkec74qsw2e3+vmC1ifof7TzRHngpoE=' 'sha256-lL/kILkNOhT9vW0QtSSgm0PwfBFV85BwRQotdY9dujk=' 'sha256-sQraM3b+lwZqC1Krr12vIz4t3nESs+z7z4prOEzSlIE=' 'sha256-AG33YdCnVr7TrW7POTo6HW6msAY2iZ6ddqP+CtEo8KQ=' sc-static.net tr.snapchat.com connect.facebook.net www.facebook.com www.googletagmanager.com https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/js/ https://webchat.nationalcareers.service.gov.uk/js/ https://az416426.vo.msecnd.net/scripts/ https://www.youtube.com https://www.google-analytics.com https://optimize.google.com https://*.clarity.ms https://c.bing.com https://www.googleoptimize.com;style-src 'unsafe-inline' https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/css/ https://webchat.nationalcareers.service.gov.uk/css/ https://optimize.google.com https://fonts.googleapis.com https://www.googleoptimize.com;img-src 'self' https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/images/ https://cdn.nationalcareers.service.gov.uk/media/ https://cdsprdwesfstorage.blob.core.windows.net/skills-health-check/QuestionSetImages/ https://webchat.nationalcareers.service.gov.uk/images/ https://webchat.nationalcareers.service.gov.uk/var/ www.google-analytics.com *.doubleclick.net https://i.ytimg.com https://optimize.google.com https://www.googleoptimize.com https://www.googletagmanager.com www.facebook.com;frame-src 'self' https://webchat.nationalcareers.service.gov.uk https://www.youtube-nocookie.com https://optimize.google.com https://tr.snapchat.com;font-src 'self' https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/fonts/ https://fonts.gstatic.com;connect-src 'self' https://webchat.nationalcareers.service.gov.uk https://dc.services.visualstudio.com https://dc.services.visualstudio.com https://www.google-analytics.com https://*.clarity.ms https://c.bing.com https://region1.google-analytics.com https://www.googletagmanager.com tr.snapchat.com;form-action 'self' https://auth.nationalcareers.service.gov.uk tr.snapchat.com;frame-ancestors 'self'
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 0
Feature-Policy: sync-xhr 'self'
Expect-CT: max-age=86400, enforce
X-Permitted-Cross-Domain-Policies: none
Content-Type: text/html; charset=utf-8
Content-Length: 18123

• https://104.40.146.218/
104.40.146.218
503

Html is minified: 966.74 %
2.990
N
Service Unavailable
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Connection: Close <br>Content-Type:text/html
Content-Length: 33807

 

7. Comments


1. General Results, most used to calculate the result

Aname "nationalcareers.service.gov.uk" is domain, public suffix is ".service.gov.uk", top-level-domain is ".uk", top-level-domain-type is "country-code", Country is United Kingdom of Great Britain and Northern Ireland, tld-manager is "Nominet UK", num .uk-domains preloaded: 5306 (complete: 251685)
AGood: All ip addresses are public addresses
Warning: Only one ip address found: nationalcareers.service.gov.uk has only one ip address.
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: nationalcareers.service.gov.uk has no ipv6 address.
AGood: No asked Authoritative Name Server had a timeout
ADNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
AGood: destination is https
AGood - only one version with Http-Status 200
AGood: one preferred version: non-www is preferred
AGood: No cookie sent via http.
AExcellent: Domain is in the Google-Preload-List
AExcellent: Domain is in the Mozilla/Firefox-Preload-List
AHSTS-Preload-Status: Preloaded. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):2 complete Content-Type - header (3 urls)
https://mta-sts.nationalcareers.service.gov.uk/.well-known/mta-sts.txt 13.69.68.39


Url with incomplete Content-Type - header - missing charset
Ahttp://nationalcareers.service.gov.uk/ 104.40.146.218
302
https://nationalcareers.service.gov.uk/
Correct redirect http - https with the same domain name
Bhttps://nationalcareers.service.gov.uk/ 104.40.146.218
200
BNIS_vid=jPv+W6h1OfKEI85iScw+8LK0EwvRxso/O69tFqYC3Yrysoo2xxaTyqdM32qWl9BdsiXACnUj00GR6zRbewBR/HIPmNwZl2g+oFg9FoLAgj+kt43aXDcSMn1cEV0HQ3z6BYIXDQI/fTE8RXXUXrKhWh/ucWfzCVAtlJ6yFP0jLUaCq1JJsQDEZA==; Path=/
Cookie sent via https, but not marked as secure
Bhttps://nationalcareers.service.gov.uk/ 104.40.146.218
200
BNIS___utm_is1=HEp/0n2FrNYJz3IzzWuqpIZCkXXvsbA3sRu7sLVGAOct+0HYF1+KYnTC/GV+FjsztSVb9fD8OXavqHvoUPvNKOST9r+nHdyIYzyoyhmxKRTR0ZzQPQyRog==; Max-Age=31536000; Path=/
Cookie sent via https, but not marked as secure
Bhttps://nationalcareers.service.gov.uk/ 104.40.146.218
200
BNIS___utm_is2=87qOH8ADnm9co2KvCddHelzSMypzX9os2z4lMf2FbHweTKODNjdxonNMWWWxPTg5sUL10ZVXfO0=; Max-Age=10800; Path=/
Cookie sent via https, but not marked as secure
Bhttps://nationalcareers.service.gov.uk/ 104.40.146.218
200
BNIS___utm_is3=DR2U+73NBLJo3f/7W/AESCqVVXcY+UF7UNNJ+j3r68H7BB2m5s6nxTbDb9TP8bqtR89iLJ3308ujiiz0yLxxIpNX6X1vqrbBtIDzZhUnkco=; Path=/
Cookie sent via https, but not marked as secure
Bhttps://nationalcareers.service.gov.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
BNIS_vid=Wki/kGFm/xYQwKHJSEG0O6C1ggfAglOgBX0kejDRpoL1cMppq+X/3rIihWsW0FH2yd4rpl45st+9J1Le116M/k5sqCdrFG3WhE9hiN+t+09iXGlVRP5tu2l8dnWLTiwQN3XUNmeALVegsd9WW5V0R6iAEXlilxPN5b/6T1W5W29npS8DtPW80A==; Path=/
Cookie sent via https, but not marked as secure
Bhttps://nationalcareers.service.gov.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
BNIS___utm_is1=7QwCm9wdO3o597B8EkxsCp0QBJRuALJZtnw3dHM5m2SsFBPql2JfcKcnzSdjVJBjudMI0/aZkXGFoG8mw4BjLZyfLP98S3Hm1Q7Z/NKOAL5Lq0F1HNMliQ==; Max-Age=31536000; Path=/
Cookie sent via https, but not marked as secure
Bhttps://nationalcareers.service.gov.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
BNIS___utm_is2=M/+xpSL3Nmgon9hrG4bkW/REMji5FkyClHJ9QXHzW0Y5ZESmcfPLb8N2sPBywuJo3ItGOgHVWvw=; Max-Age=10800; Path=/
Cookie sent via https, but not marked as secure
Bhttps://nationalcareers.service.gov.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
BNIS___utm_is3=ropcPzh64URMiGvNmkn7ER02dxbsaw67QuTB9hkOq2cgXuzzoc1QHh0rYGAtPktnE2cEwjtdSj/hAEA1z6L6sbkXJ+p/u8o3CPLvItUhwX0=; Path=/
Cookie sent via https, but not marked as secure
Bhttps://nationalcareers.service.gov.uk/ 104.40.146.218
200
BNIS_vid=jPv+W6h1OfKEI85iScw+8LK0EwvRxso/O69tFqYC3Yrysoo2xxaTyqdM32qWl9BdsiXACnUj00GR6zRbewBR/HIPmNwZl2g+oFg9FoLAgj+kt43aXDcSMn1cEV0HQ3z6BYIXDQI/fTE8RXXUXrKhWh/ucWfzCVAtlJ6yFP0jLUaCq1JJsQDEZA==; Path=/
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://nationalcareers.service.gov.uk/ 104.40.146.218
200
BNIS___utm_is1=HEp/0n2FrNYJz3IzzWuqpIZCkXXvsbA3sRu7sLVGAOct+0HYF1+KYnTC/GV+FjsztSVb9fD8OXavqHvoUPvNKOST9r+nHdyIYzyoyhmxKRTR0ZzQPQyRog==; Max-Age=31536000; Path=/
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://nationalcareers.service.gov.uk/ 104.40.146.218
200
BNIS___utm_is2=87qOH8ADnm9co2KvCddHelzSMypzX9os2z4lMf2FbHweTKODNjdxonNMWWWxPTg5sUL10ZVXfO0=; Max-Age=10800; Path=/
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://nationalcareers.service.gov.uk/ 104.40.146.218
200
BNIS___utm_is3=DR2U+73NBLJo3f/7W/AESCqVVXcY+UF7UNNJ+j3r68H7BB2m5s6nxTbDb9TP8bqtR89iLJ3308ujiiz0yLxxIpNX6X1vqrbBtIDzZhUnkco=; Path=/
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://nationalcareers.service.gov.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
BNIS_vid=Wki/kGFm/xYQwKHJSEG0O6C1ggfAglOgBX0kejDRpoL1cMppq+X/3rIihWsW0FH2yd4rpl45st+9J1Le116M/k5sqCdrFG3WhE9hiN+t+09iXGlVRP5tu2l8dnWLTiwQN3XUNmeALVegsd9WW5V0R6iAEXlilxPN5b/6T1W5W29npS8DtPW80A==; Path=/
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://nationalcareers.service.gov.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
BNIS___utm_is1=7QwCm9wdO3o597B8EkxsCp0QBJRuALJZtnw3dHM5m2SsFBPql2JfcKcnzSdjVJBjudMI0/aZkXGFoG8mw4BjLZyfLP98S3Hm1Q7Z/NKOAL5Lq0F1HNMliQ==; Max-Age=31536000; Path=/
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://nationalcareers.service.gov.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
BNIS___utm_is2=M/+xpSL3Nmgon9hrG4bkW/REMji5FkyClHJ9QXHzW0Y5ZESmcfPLb8N2sPBywuJo3ItGOgHVWvw=; Max-Age=10800; Path=/
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://nationalcareers.service.gov.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
BNIS___utm_is3=ropcPzh64URMiGvNmkn7ER02dxbsaw67QuTB9hkOq2cgXuzzoc1QHh0rYGAtPktnE2cEwjtdSj/hAEA1z6L6sbkXJ+p/u8o3CPLvItUhwX0=; Path=/
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://mta-sts.nationalcareers.service.gov.uk/.well-known/mta-sts.txt 13.69.68.39
200
ARRAffinity=20aa02600d1975c84270563ccb9810d63d7467729e7c7acc178eee0064ce501b;Path=/;HttpOnly;Secure;Domain=mta-sts.nationalcareers.service.gov.uk
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Ihttps://nationalcareers.service.gov.uk/ 104.40.146.218
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://nationalcareers.service.gov.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Nhttps://104.40.146.218/ 104.40.146.218
503

Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain nationalcareers.service.gov.uk, 1 ip addresses.
AGood: _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Domainname: _mta-sts.nationalcareers.service.gov.uk
AGood: _mta-sts TXT record is valid.
AGood: Subdomain mta-sts found: Subdomain-name: waws-prod-am2-303.westeurope.cloudapp.azure.com, ip : 13.69.68.39
AGood: Certificate of subdomain is valid. mta-sts.nationalcareers.service.gov.uk, ip : 13.69.68.39
AGood: /.well-known/mta-sts.txt with http status 200 found. Complete path: https://mta-sts.nationalcareers.service.gov.uk/.well-known/mta-sts.txt - ip : 13.69.68.39
AGood: mta-sts.txt has the required names "version", "mode", "max_age". waws-prod-am2-303.westeurope.cloudapp.azure.com, ip : 13.69.68.39
AGood: Minimal one mx definition found. waws-prod-am2-303.westeurope.cloudapp.azure.com, ip : 13.69.68.39
AExcellent: Complete and valid MTA-STS found!

2. Header-Checks (Cross-Origin-* headers are alpha - started 2024-06-05)

Anationalcareers.service.gov.uk 104.40.146.218
Content-Security-Policy
Ok: Header without syntax errors found: default-src 'self';script-src 'self' 'nonce-OVHC5oIAZZUUeyytCR4O81Zz' https://az416426.vo.msecnd.net/scripts/ www.google-analytics.com 'sha256-OzxeCM8TJjksWkec74qsw2e3+vmC1ifof7TzRHngpoE=' 'sha256-lL/kILkNOhT9vW0QtSSgm0PwfBFV85BwRQotdY9dujk=' 'sha256-sQraM3b+lwZqC1Krr12vIz4t3nESs+z7z4prOEzSlIE=' 'sha256-AG33YdCnVr7TrW7POTo6HW6msAY2iZ6ddqP+CtEo8KQ=' sc-static.net tr.snapchat.com connect.facebook.net www.facebook.com www.googletagmanager.com https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/js/ https://webchat.nationalcareers.service.gov.uk/js/ https://az416426.vo.msecnd.net/scripts/ https://www.youtube.com https://www.google-analytics.com https://optimize.google.com https://*.clarity.ms https://c.bing.com https://www.googleoptimize.com;style-src 'unsafe-inline' https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/css/ https://webchat.nationalcareers.service.gov.uk/css/ https://optimize.google.com https://fonts.googleapis.com https://www.googleoptimize.com;img-src 'self' https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/images/ https://cdn.nationalcareers.service.gov.uk/media/ https://cdsprdwesfstorage.blob.core.windows.net/skills-health-check/QuestionSetImages/ https://webchat.nationalcareers.service.gov.uk/images/ https://webchat.nationalcareers.service.gov.uk/var/ www.google-analytics.com *.doubleclick.net https://i.ytimg.com https://optimize.google.com https://www.googleoptimize.com https://www.googletagmanager.com www.facebook.com;frame-src 'self' https://webchat.nationalcareers.service.gov.uk https://www.youtube-nocookie.com https://optimize.google.com https://tr.snapchat.com;font-src 'self' https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/fonts/ https://fonts.gstatic.com;connect-src 'self' https://webchat.nationalcareers.service.gov.uk https://dc.services.visualstudio.com https://dc.services.visualstudio.com https://www.google-analytics.com https://*.clarity.ms https://c.bing.com https://region1.google-analytics.com https://www.googletagmanager.com tr.snapchat.com;form-action 'self' https://auth.nationalcareers.service.gov.uk tr.snapchat.com;frame-ancestors 'self'
E

Critical: Duplicated entries found script-src 'self' 'nonce-OVHC5oIAZZUUeyytCR4O81Zz' https://az416426.vo.msecnd.net/scripts/ www.google-analytics.com 'sha256-OzxeCM8TJjksWkec74qsw2e3+vmC1ifof7TzRHngpoE=' 'sha256-lL/kILkNOhT9vW0QtSSgm0PwfBFV85BwRQotdY9dujk=' 'sha256-sQraM3b+lwZqC1Krr12vIz4t3nESs+z7z4prOEzSlIE=' 'sha256-AG33YdCnVr7TrW7POTo6HW6msAY2iZ6ddqP+CtEo8KQ=' sc-static.net tr.snapchat.com connect.facebook.net www.facebook.com www.googletagmanager.com https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/js/ https://webchat.nationalcareers.service.gov.uk/js/ https://az416426.vo.msecnd.net/scripts/ https://www.youtube.com https://www.google-analytics.com https://optimize.google.com https://*.clarity.ms https://c.bing.com https://www.googleoptimize.com

 

Duplicated entries: https://az416426.vo.msecnd.net/scripts/
E

Critical: Duplicated entries found connect-src 'self' https://webchat.nationalcareers.service.gov.uk https://dc.services.visualstudio.com https://dc.services.visualstudio.com https://www.google-analytics.com https://*.clarity.ms https://c.bing.com https://region1.google-analytics.com https://www.googletagmanager.com tr.snapchat.com

 

Duplicated entries: https://dc.services.visualstudio.com
A

Good: default-src directive only with 'none' or 'self', additional sources are blocked.
A

Good: default-src without 'unsafe-inline' or 'unsave-eval'.
A

Good: form-action directive found. That reduces the risk sending data to unwanted domains. form-action is a navigation-directive, so default-src isn't used.
A

Good: frame-ancestors directive found. That limits pages who are allowed to use this page in a frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E

Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A

Good: No object-src found, but the default-src used as fallback is defined and restricted.
A

Good: script-src without 'unsafe-inline' and 'unsafe-eval' found. That's the recommended configuration.
A

Good: script-src without * and a scheme found.
A

Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A

Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A

Ok: Nonce found.
A
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Referrer-Policy
Ok: Header without syntax errors found: strict-origin-when-cross-origin
A
X-Frame-Options
Ok: Header without syntax errors found: SAMEORIGIN
B

Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
Expect-CT
Ok: Header without syntax errors found: max-age=86400, enforce
B

Info: Header is deprecated. May not longer work in modern browsers. max-age=86400, enforce
A
Feature-Policy
Ok: Header without syntax errors found: sync-xhr 'self'
B

Info: Header is deprecated. May not longer work in modern browsers. sync-xhr 'self'
A
X-Xss-Protection
Ok: Header without syntax errors found: 0
B

Info: Header is deprecated. May not longer work in modern browsers. 0
Fnationalcareers.service.gov.uk 104.40.146.218
Permissions-Policy
Critical: Missing Header:
Bnationalcareers.service.gov.uk 104.40.146.218
Cross-Origin-Embedder-Policy
Info: Missing Header
Bnationalcareers.service.gov.uk 104.40.146.218
Cross-Origin-Opener-Policy
Info: Missing Header
Bnationalcareers.service.gov.uk 104.40.146.218
Cross-Origin-Resource-Policy
Info: Missing Header

3. DNS- and NameServer - Checks

AInfo:: 16 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 4 Name Servers.
AInfo:: 16 Queries complete, 16 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
Ok (4 - 8):: An average of 4.0 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 4 different Name Servers found: ns-1505.awsdns-60.org, ns-1589.awsdns-06.co.uk, ns-306.awsdns-38.com, ns-841.awsdns-41.net, 4 Name Servers included in Delegation: ns-1505.awsdns-60.org, ns-1589.awsdns-06.co.uk, ns-306.awsdns-38.com, ns-841.awsdns-41.net, 4 Name Servers included in 1 Zone definitions: ns-1505.awsdns-60.org, ns-1589.awsdns-06.co.uk, ns-306.awsdns-38.com, ns-841.awsdns-41.net, 1 Name Servers listed in SOA.Primary: ns-1505.awsdns-60.org.
AGood: Only one SOA.Primary Name Server found.: ns-1505.awsdns-60.org.
AGood: SOA.Primary Name Server included in the delegation set.: ns-1505.awsdns-60.org.
AGood: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: ns-1505.awsdns-60.org, ns-1589.awsdns-06.co.uk, ns-306.awsdns-38.com, ns-841.awsdns-41.net
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AGood: Minimal 2 different name servers (public suffix and public ip address) found: 4 different Name Servers found
AGood: All name servers have ipv4- and ipv6-addresses.: 4 different Name Servers found
AGood: Name servers with different Top Level Domains / Public Suffix List entries found: 4 Name Servers, 4 Top Level Domains: org, net, com, co.uk
AGood: Name Servers with different domain names found.: 4 different Domains found
Warning: All Name Servers from the same Country / IP location.: 4 Name Servers, 1 Countries: US
AInfo: Ipv4-Subnet-list: 4 Name Servers, 1 different subnets (first Byte): 205., 1 different subnets (first two Bytes): 205.251., 4 different subnets (first three Bytes): 205.251.193., 205.251.195., 205.251.197., 205.251.198.
AGood: Name Server IPv4-addresses from different subnet found:
AInfo: IPv6-Subnet-list: 4 Name Servers with IPv6, 1 different subnets (first block): 2600:, 1 different subnets (first two blocks): 2600:9000:, 4 different subnets (first three blocks): 2600:9000:5301:, 2600:9000:5303:, 2600:9000:5305:, 2600:9000:5306:, 4 different subnets (first four blocks): 2600:9000:5301:3200:, 2600:9000:5303:4900:, 2600:9000:5305:e100:, 2600:9000:5306:3500:
AGood: Name Server IPv6 addresses from different subnets found.
AGood: Nameserver supports TCP connections: 8 good Nameserver
AGood: Nameserver supports Echo Capitalization: 8 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 8 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 8 good Nameserver
Nameserver doesn't pass all EDNS-Checks: dns1.nic.uk: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns1.nic.uk / 213.248.216.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns1.nic.uk / 2a01:618:400::1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns2.nic.uk: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns2.nic.uk / 103.49.80.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns2.nic.uk / 2401:fd80:400::1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns3.nic.uk: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns3.nic.uk / 213.248.220.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns3.nic.uk / 2a01:618:404::1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns4.nic.uk: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns4.nic.uk / 43.230.48.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns4.nic.uk / 2401:fd80:404::1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns-1505.awsdns-60.org: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

4. Content- and Performance-critical Checks

AGood: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
https://nationalcareers.service.gov.uk/ 104.40.146.218
200

Warning: https result with status 200 and size greater then 1024 Bytes without Compression found. Add Compression support (gzip, deflate, br - these are checked) so the html content is compressed.
https://nationalcareers.service.gov.uk/ 104.40.146.218
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://nationalcareers.service.gov.uk/ 104.40.146.218
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://nationalcareers.service.gov.uk/ 104.40.146.218
200

Warning: Https connections (Standard Port 443) found without support of the http/2 protocol via ALPN. Http/2 is the new Http-Version (old: http 1.1) with some important new features. Update your server software so http/2 is available. Only one TCP-connection per Server (that's a performance boost), Header-Compression and Server Pushs are available. Domain Sharding and Inline-CSS/Javascript shouldn't used with http/2.
https://mta-sts.nationalcareers.service.gov.uk/.well-known/mta-sts.txt 13.69.68.39
200

Warning: Https connections (Standard Port 443) found without support of the http/2 protocol via ALPN. Http/2 is the new Http-Version (old: http 1.1) with some important new features. Update your server software so http/2 is available. Only one TCP-connection per Server (that's a performance boost), Header-Compression and Server Pushs are available. Domain Sharding and Inline-CSS/Javascript shouldn't used with http/2.
https://nationalcareers.service.gov.uk/ 104.40.146.218
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 4 script elements without defer/async.
https://nationalcareers.service.gov.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 4 script elements without defer/async.
AGood: All CSS / JavaScript files are sent compressed (gzip, deflate, br checked). That reduces the content of the files. 10 external CSS / JavaScript files found
Warning: Svg-Images greater 1024 Bytes without internal compression are found. Svg is an Xml-Application, so Compression is required to reduce the size of the file. 5 images (type image/svg+xml, image/x-icon, image/vnd.microsoft.icon) found without compression.
AGood: All images with internal compression not compressed. Some Images (.png, .jpg, .jpeg, .webp, .gif) are already compressed, so an additional compression isn't helpful. 4 images (type image/png, image/jpg, image/jpeg, image/webp, image/gif) found without additional Compression. Not required because these images are already compressed
Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 2 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 0 with Cache-Control max-age too short (minimum 7 days), 8 with Cache-Control long enough, 10 complete.
AGood: All images are sent with a long Cache-Control header (minimum 7 days). So the browser can reuse these files, no download is required. 17 image files with long Cache-Control max-age found
AGood: All checked attribute values are enclosed in quotation marks (" or ').
AGood: Some img-elements have a valid alt-attribute.: 17 img-elements found, 9 img-elements with correct alt-attributes (defined, not an empty value).
Wrong: img-elements without alt-attribute or empty alt-attribute found. The alt-attribute ("alternative") is required and should describe the img. So Screenreader and search engines are able to use these informations.: 0 img-elements without alt-attribute, 8 img-elements with empty alt-attribute found.
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
https://nationalcareers.service.gov.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
2.606 seconds
Warning: 404 needs more then one second
ADuration: 221033 milliseconds, 221.033 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
nationalcareers.service.gov.uk
104.40.146.218
443
ok
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
nationalcareers.service.gov.uk
104.40.146.218
443
ok
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
no http/2 via ALPN 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=nationalcareers.service.gov.uk, O=Department for Education, L=Manchester, C=GB, ST=Greater Manchester


2CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE


3CN=GlobalSign, OU=GlobalSign Root CA - R3, O=GlobalSign


nationalcareers.service.gov.uk
nationalcareers.service.gov.uk
443
ok
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok

nationalcareers.service.gov.uk
nationalcareers.service.gov.uk
443
ok
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
no http/2 via ALPN 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=nationalcareers.service.gov.uk, O=Department for Education, L=Manchester, C=GB, ST=Greater Manchester


2CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE


3CN=GlobalSign, OU=GlobalSign Root CA - R3, O=GlobalSign


mta-sts.nationalcareers.service.gov.uk
13.69.68.39
443
ok
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok

mta-sts.nationalcareers.service.gov.uk
13.69.68.39
443
ok
Tls12

ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
no http/2 via ALPN 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2


104.40.146.218
104.40.146.218
443
Certificate/chain invalid and wrong name
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok

104.40.146.218
104.40.146.218
443
Certificate/chain invalid and wrong name
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=draft.nationalcareers.service.gov.uk, O=Department For Education, L=Coventry, C=GB


2CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US


3CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US

 

9. Certificates

1.
1.
CN=nationalcareers.service.gov.uk, O=Department for Education, L=Manchester, S=Greater Manchester, C=GB
04.10.2024
05.11.2025
expires in 365 days
nationalcareers.service.gov.uk - 1 entry
1.
1.
CN=nationalcareers.service.gov.uk, O=Department for Education, L=Manchester, S=Greater Manchester, C=GB
04.10.2024

05.11.2025
expires in 365 days


nationalcareers.service.gov.uk - 1 entry

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:7DC6A70C255628E11F2BD83C
Thumbprint:393F3B36BEDA5B00750C93D4B9AC70456A3D3B60
SHA256 / Certificate:DAuvYCsTeIXBKvgiYMwhTr7OZO3fv9nC+wx7ax2nCQg=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):f830f6b819981ba16954397f56385988a1c37fbc75a45addb1a622294cd13c7d
SHA256 hex / Subject Public Key Information (SPKI):f830f6b819981ba16954397f56385988a1c37fbc75a45addb1a622294cd13c7d (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.globalsign.com/gsrsaovsslca2018
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=nationalcareers.service.gov.uk, O=Department for Education, L=Manchester, S=Greater Manchester, C=GB
04.10.2024
05.11.2025
expires in 365 days
nationalcareers.service.gov.uk - 1 entry

2.
CN=nationalcareers.service.gov.uk, O=Department for Education, L=Manchester, S=Greater Manchester, C=GB
04.10.2024

05.11.2025
expires in 365 days


nationalcareers.service.gov.uk - 1 entry

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:7DC6A70C255628E11F2BD83C
Thumbprint:393F3B36BEDA5B00750C93D4B9AC70456A3D3B60
SHA256 / Certificate:DAuvYCsTeIXBKvgiYMwhTr7OZO3fv9nC+wx7ax2nCQg=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):f830f6b819981ba16954397f56385988a1c37fbc75a45addb1a622294cd13c7d
SHA256 hex / Subject Public Key Information (SPKI):f830f6b819981ba16954397f56385988a1c37fbc75a45addb1a622294cd13c7d (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.globalsign.com/gsrsaovsslca2018
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




3.
CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE
21.11.2018
21.11.2028
expires in 1477 days


3.
CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE
21.11.2018

21.11.2028
expires in 1477 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:01EE5F221DFC623BD4333A8557
Thumbprint:DFE83023062B997682708B4EAB8E819AFF5D9775
SHA256 / Certificate:tnb/oxeeiBIJOhter+6HauemqvIxB42tG/shzSiTdko=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):8444e9815bda2c2d1bbdc186dedd1cbaa887bebe17c8fd8c4f00a2aa18115b05
SHA256 hex / Subject Public Key Information (SPKI):8444e9815bda2c2d1bbdc186dedd1cbaa887bebe17c8fd8c4f00a2aa18115b05
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp2.globalsign.com/rootr3
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




4.
CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE
21.11.2018
21.11.2028
expires in 1477 days


4.
CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE
21.11.2018

21.11.2028
expires in 1477 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:01EE5F221DFC623BD4333A8557
Thumbprint:DFE83023062B997682708B4EAB8E819AFF5D9775
SHA256 / Certificate:tnb/oxeeiBIJOhter+6HauemqvIxB42tG/shzSiTdko=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):8444e9815bda2c2d1bbdc186dedd1cbaa887bebe17c8fd8c4f00a2aa18115b05
SHA256 hex / Subject Public Key Information (SPKI):8444e9815bda2c2d1bbdc186dedd1cbaa887bebe17c8fd8c4f00a2aa18115b05
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp2.globalsign.com/rootr3
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




5.
CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3
19.09.2018
28.01.2028
expires in 1179 days


5.
CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3
19.09.2018

28.01.2028
expires in 1179 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:01EE5F169DFF97352B6465D66A
Thumbprint:0BBFAB97059595E8D1EC48E89EB8657C0E5AAE71
SHA256 / Certificate:RF7seLxhIVBEoDeWVqotXbXkL3bLcLjRTCB3qpQ9Trs=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):706bb1017c855c59169bad5c1781cf597f12d2cad2f63d1a4aa37493800ffb80
SHA256 hex / Subject Public Key Information (SPKI):706bb1017c855c59169bad5c1781cf597f12d2cad2f63d1a4aa37493800ffb80
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.globalsign.com/rootr1
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




6.
CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3
18.03.2009
18.03.2029
expires in 1594 days


6.
CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3
18.03.2009

18.03.2029
expires in 1594 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:04000000000121585308A2
Thumbprint:D69B561148F01C77C54578C10926DF5B856976AD
SHA256 / Certificate:y7Ui17fxJ61qAROGW98c1BAufQdZr2NafPRyDcljxTs=
SHA256 hex / Cert (DANE * 0 1):cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b
SHA256 hex / PublicKey (DANE * 1 1):706bb1017c855c59169bad5c1781cf597f12d2cad2f63d1a4aa37493800ffb80
SHA256 hex / Subject Public Key Information (SPKI):706bb1017c855c59169bad5c1781cf597f12d2cad2f63d1a4aa37493800ffb80
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:





7.
CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE
01.09.1998
28.01.2028
expires in 1179 days


7.
CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE
01.09.1998

28.01.2028
expires in 1179 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:040000000001154B5AC394
Thumbprint:B1BC968BD4F49D622AA89A81F2150152A41D829C
SHA256 / Certificate:69QQQOS7PsdCyeOB0x7ypBpItmhclufO88HfbNQzHJk=
SHA256 hex / Cert (DANE * 0 1):ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99
SHA256 hex / PublicKey (DANE * 1 1):2bcee858158cf5465fc9d76f0dfa312fef25a4dca8501da9b46b67d1fbfa1b64
SHA256 hex / Subject Public Key Information (SPKI):2bcee858158cf5465fc9d76f0dfa312fef25a4dca8501da9b46b67d1fbfa1b64
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




2.
1.
CN=draft.nationalcareers.service.gov.uk, O=Department For Education, L=Coventry, C=GB
21.06.2023
21.06.2024
137 days expired
draft.nationalcareers.service.gov.uk - 1 entry
2.
1.
CN=draft.nationalcareers.service.gov.uk, O=Department For Education, L=Coventry, C=GB
21.06.2023

21.06.2024
137 days expired


draft.nationalcareers.service.gov.uk - 1 entry

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:058F90AD65F89C76380A9D3E26382CC0
Thumbprint:1F0B77937C2F4AF971F86365BC31987CCCA177A9
SHA256 / Certificate:rkjXLk89fxyacRturgpInqQdSPMXsKSMnW6ZbyUlQhM=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):e20e49dadd2b776e982896bedb8832bf7f0fc0476f791bb1f8e7c5a20b9abce5
SHA256 hex / Subject Public Key Information (SPKI):e20e49dadd2b776e982896bedb8832bf7f0fc0476f791bb1f8e7c5a20b9abce5 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)


NotTimeValid: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.


2.
CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
30.03.2021
30.03.2031
expires in 2336 days


2.
CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
30.03.2021

30.03.2031
expires in 2336 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0CF5BD062B5602F47AB8502C23CCF066
Thumbprint:1B511ABEAD59C6CE207077C0BF0E0043B1382612
SHA256 / Certificate:yAJfn8Zf38lbPKjMeGe5pYe1J3lzlXkXRj/IE9C2Jak=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):59e738e674221702af1edb87c5200c1a4b75f64fae3d2c3d265124c61bd83c79
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




3.
CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013
15.01.2038
expires in 4819 days


3.
CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013

15.01.2038
expires in 4819 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:033AF1E6A711A9A0BB2864B11D09FAE5
Thumbprint:DF3C24F9BFD666761B268073FE06D1CC8D4F82A4
SHA256 / Certificate:yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18=
SHA256 hex / Cert (DANE * 0 1):cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA256 hex / PublicKey (DANE * 1 1):8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SHA256 hex / Subject Public Key Information (SPKI):8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




3.
1.
CN=mta-sts.nationalcareers.service.gov.uk, O=Department for Education, L=Manchester, S=Greater Manchester, C=GB
29.04.2024
31.05.2025
expires in 207 days
mta-sts.nationalcareers.service.gov.uk - 1 entry
3.
1.
CN=mta-sts.nationalcareers.service.gov.uk, O=Department for Education, L=Manchester, S=Greater Manchester, C=GB
29.04.2024

31.05.2025
expires in 207 days


mta-sts.nationalcareers.service.gov.uk - 1 entry

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:5539A545472009E704FC4A2B
Thumbprint:CA007AA7A11932DA6F771EA139578548AF906D1A
SHA256 / Certificate:DZshbe5dB0XDqBmSDbSQ6SeNfjQzmmd6ywoU+ZFAgKo=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):07f579d7856a078b7ad9fa1b663bf2f1fc54c0792901b3a8b2572f73ae23d174
SHA256 hex / Subject Public Key Information (SPKI):07f579d7856a078b7ad9fa1b663bf2f1fc54c0792901b3a8b2572f73ae23d174 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.globalsign.com/gsrsaovsslca2018
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=mta-sts.nationalcareers.service.gov.uk, O=Department for Education, L=Manchester, S=Greater Manchester, C=GB
29.04.2024
31.05.2025
expires in 207 days
mta-sts.nationalcareers.service.gov.uk - 1 entry

2.
CN=mta-sts.nationalcareers.service.gov.uk, O=Department for Education, L=Manchester, S=Greater Manchester, C=GB
29.04.2024

31.05.2025
expires in 207 days


mta-sts.nationalcareers.service.gov.uk - 1 entry

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:5539A545472009E704FC4A2B
Thumbprint:CA007AA7A11932DA6F771EA139578548AF906D1A
SHA256 / Certificate:DZshbe5dB0XDqBmSDbSQ6SeNfjQzmmd6ywoU+ZFAgKo=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):07f579d7856a078b7ad9fa1b663bf2f1fc54c0792901b3a8b2572f73ae23d174
SHA256 hex / Subject Public Key Information (SPKI):07f579d7856a078b7ad9fa1b663bf2f1fc54c0792901b3a8b2572f73ae23d174 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.globalsign.com/gsrsaovsslca2018
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




3.
CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE
21.11.2018
21.11.2028
expires in 1477 days


3.
CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE
21.11.2018

21.11.2028
expires in 1477 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:01EE5F221DFC623BD4333A8557
Thumbprint:DFE83023062B997682708B4EAB8E819AFF5D9775
SHA256 / Certificate:tnb/oxeeiBIJOhter+6HauemqvIxB42tG/shzSiTdko=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):8444e9815bda2c2d1bbdc186dedd1cbaa887bebe17c8fd8c4f00a2aa18115b05
SHA256 hex / Subject Public Key Information (SPKI):8444e9815bda2c2d1bbdc186dedd1cbaa887bebe17c8fd8c4f00a2aa18115b05
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp2.globalsign.com/rootr3
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




4.
CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE
21.11.2018
21.11.2028
expires in 1477 days


4.
CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE
21.11.2018

21.11.2028
expires in 1477 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:01EE5F221DFC623BD4333A8557
Thumbprint:DFE83023062B997682708B4EAB8E819AFF5D9775
SHA256 / Certificate:tnb/oxeeiBIJOhter+6HauemqvIxB42tG/shzSiTdko=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):8444e9815bda2c2d1bbdc186dedd1cbaa887bebe17c8fd8c4f00a2aa18115b05
SHA256 hex / Subject Public Key Information (SPKI):8444e9815bda2c2d1bbdc186dedd1cbaa887bebe17c8fd8c4f00a2aa18115b05
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp2.globalsign.com/rootr3
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




5.
CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3
19.09.2018
28.01.2028
expires in 1179 days


5.
CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3
19.09.2018

28.01.2028
expires in 1179 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:01EE5F169DFF97352B6465D66A
Thumbprint:0BBFAB97059595E8D1EC48E89EB8657C0E5AAE71
SHA256 / Certificate:RF7seLxhIVBEoDeWVqotXbXkL3bLcLjRTCB3qpQ9Trs=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):706bb1017c855c59169bad5c1781cf597f12d2cad2f63d1a4aa37493800ffb80
SHA256 hex / Subject Public Key Information (SPKI):706bb1017c855c59169bad5c1781cf597f12d2cad2f63d1a4aa37493800ffb80
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.globalsign.com/rootr1
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




6.
CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3
18.03.2009
18.03.2029
expires in 1594 days


6.
CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3
18.03.2009

18.03.2029
expires in 1594 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:04000000000121585308A2
Thumbprint:D69B561148F01C77C54578C10926DF5B856976AD
SHA256 / Certificate:y7Ui17fxJ61qAROGW98c1BAufQdZr2NafPRyDcljxTs=
SHA256 hex / Cert (DANE * 0 1):cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b
SHA256 hex / PublicKey (DANE * 1 1):706bb1017c855c59169bad5c1781cf597f12d2cad2f63d1a4aa37493800ffb80
SHA256 hex / Subject Public Key Information (SPKI):706bb1017c855c59169bad5c1781cf597f12d2cad2f63d1a4aa37493800ffb80
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:





7.
CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE
01.09.1998
28.01.2028
expires in 1179 days


7.
CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE
01.09.1998

28.01.2028
expires in 1179 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:040000000001154B5AC394
Thumbprint:B1BC968BD4F49D622AA89A81F2150152A41D829C
SHA256 / Certificate:69QQQOS7PsdCyeOB0x7ypBpItmhclufO88HfbNQzHJk=
SHA256 hex / Cert (DANE * 0 1):ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99
SHA256 hex / PublicKey (DANE * 1 1):2bcee858158cf5465fc9d76f0dfa312fef25a4dca8501da9b46b67d1fbfa1b64
SHA256 hex / Subject Public Key Information (SPKI):2bcee858158cf5465fc9d76f0dfa312fef25a4dca8501da9b46b67d1fbfa1b64
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuerlast 7 daysactivenum Certs
CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE
0
1
2

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
8322095357
precert
CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE
2024-10-04 00:00:29
2025-11-05 00:00:28
nationalcareers.service.gov.uk - 1 entries


5946118142
leaf cert
CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE
2023-10-03 00:00:15
2024-11-03 00:00:14
nationalcareers.service.gov.uk - 1 entries


 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Issuerlast 7 daysactivenum Certs
CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE
0
1
2

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
14788875561
precert
CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE
2024-10-03 22:00:29
2025-11-04 23:00:28
nationalcareers.service.gov.uk
1 entries


14788881360
leaf cert
CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE
2023-10-02 22:00:15
2024-11-02 23:00:14
nationalcareers.service.gov.uk
1 entries


 

11. Html-Content - Entries

Summary


Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://nationalcareers.service.gov.uk/
104.40.146.218
a

51

0


0
0
0


form

1
18,051 Bytes
0
1
0
0
0
0


iframe

2

0


0
0
0


img

17
1,403,626 Bytes
0
17
0
0
0
0


link
stylesheet
1
41,470 Bytes
0
1
0
0
0
0


link
other
3
17,108 Bytes
1
3
0
0
0
0


meta
og
1
8,677 Bytes
0
1
0
0
0
0


meta
other
3

0


0
0
0


script

4
157,109 Bytes
4
4
0
0
0
0

https://nationalcareers.service.gov.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
a

31

0


0
0
0


iframe

1

0


0
0
0


link
stylesheet
1
41,470 Bytes
0
1
0
0
0
0


link
other
3
17,108 Bytes
1
3
0
0
0
0


meta
og
1
8,677 Bytes
0
1
0
0
0
0


meta
other
3

0


0
0
0


script

4
157,109 Bytes
4
4
0
0
0
0

 

Details

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsgStatus
https://nationalcareers.service.gov.uk/
104.40.146.218
a




6
ok















a

#main-content


1
ok















a

#triageLevelOne


1
ok















a

#triageLevelTwo


2
ok















a

/


1
ok















a

/about-us


1
ok















a

/action-plans


1
ok















a

/careers-advice


1
ok















a

/contact-us


2
ok















a

/explore-careers


3
ok















a

/find-a-course


3
ok















a

/help


1
ok















a

/help/accessibility


1
ok















a

/help/cookies


1
ok















a

/help/cookie-settings/


3
ok















a

/help/information-sources


1
ok















a

/help/terms-and-conditions


1
ok















a

/job-profiles/warehouse-worker


1
ok















a

/seasonal-work


1
ok















a

/skills-assessment


3
ok















a

/webchat/chat


2
ok















a

https://careerswales.gov.wales/


1
ok















a

https://dferesearch.fra1.qualtrics.com/jfe/form/SV_4TMvchACdXh77Ya


1
ok















a

https://nationalcareers.service.gov.uk/contact-us


1
ok















a

https://www.facebook.com/NationalCareersService/


1
ok















a

https://www.instagram.com/national_careers_service/


1
ok















a

https://www.linkedin.com/company/national-careers/


1
ok















a

https://www.myworldofwork.co.uk/


1
ok















a

https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/


1
ok















a

https://www.nationalarchives.gov.uk/information-management/re-using-public-sector-information/uk-government-licensing-framework/crown-copyright/


1
ok















a

https://www.nidirect.gov.uk/campaigns/careers


1
ok















a

https://www.youtube.com/channel/UCX6LhqOoog4lf9RKFASeVrg/featured


1
ok















a

https://X.com/NationalCareers


1
ok















a

tel:0800100900


2
ok















form
get
/triagetool
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





18051 Bytes








iframe
src
https://www.googletagmanager.com/ns.html?id=GTM-554PPX9


1
ok















iframe
src
https://www.youtube-nocookie.com/embed/l20H5EVRfGc?si=lMvor1LgsPyNGtB2


1
ok















img
src
https://cdn.nationalcareers.service.gov.uk/media/checkbox.svg
200

2
ok
no alt-Attributeimage/svg+xml
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 with long duration found.
No Compression - 1081 Bytes






ETag: "0x8DCF1B2116260C2"



img
src
https://cdn.nationalcareers.service.gov.uk/media/compass.svg
200

2
ok
no alt-Attributeimage/svg+xml
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 with long duration found.
No Compression - 1943 Bytes






ETag: "0x8DCF1B211659492"



img
src
https://cdn.nationalcareers.service.gov.uk/media/headers/homepage-desktop-header.png
200

1
ok
alt: Woman sat at a laptop and wearing a headset in an office.image/png
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 with long duration found.
No Compression - 588238 Bytes






ETag: "0x8DB81DFAFA54447"



img
src
https://cdn.nationalcareers.service.gov.uk/media/headers/homepage-mobile-header.png
200

1
ok
alt: Woman sat at a laptop and wearing a headset in an office.image/png
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 with long duration found.
No Compression - 197509 Bytes






ETag: "0x8DB81DFAF936C91"



img
src
https://cdn.nationalcareers.service.gov.uk/media/homepage-featured-banner/seasonal-jobs-2024-featured-desktop.png
200

1
ok
alt: Seasonal workimage/png
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 with long duration found.
No Compression - 366468 Bytes






ETag: "0x8DCF1E7AEDC8810"



img
src
https://cdn.nationalcareers.service.gov.uk/media/homepage-featured-banner/seasonal-jobs-2024-featured-mobile.png
200

1
ok
alt: Seaosonal workimage/png
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 with long duration found.
No Compression - 128124 Bytes






ETag: "0x8DCF1E7AEBC0CFD"



img
src
https://cdn.nationalcareers.service.gov.uk/media/magnifying-glass.svg
200

2
ok
no alt-Attributeimage/svg+xml
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 with long duration found.
1011 Bytes






ETag: "0x8DCF1B2116609AC"



img
src
https://cdn.nationalcareers.service.gov.uk/media/speak-to-an-adviser.svg
200

2
ok
no alt-Attributeimage/svg+xml
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 with long duration found.
1009 Bytes






ETag: "0x8DCF1B21163C019"



img
src
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/images/facebook.svg
200

1
ok
alt: Facebookimage/svg+xml
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 with long duration found.
322 Bytes






ETag: "0x8DCF917ECEB6FB7"



img
src
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/images/instagram.svg
200

1
ok
alt: Instagramimage/svg+xml
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 with long duration found.
877 Bytes






ETag: "0x8DCF917ECFC5D8F"



img
src
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/images/linkedin.svg
200

1
ok
alt: LinkedInimage/svg+xml
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 with long duration found.
484 Bytes






ETag: "0x8DCF917ECF8DB42"



img
src
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/images/x.svg
200

1
ok
alt: Ximage/svg+xml
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 with long duration found.
No Compression - 111228 Bytes






ETag: "0x8DCF917ECF49624"



img
src
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/images/youtube.svg
200

1
ok
alt: Youtubeimage/svg+xml
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 with long duration found.
288 Bytes






ETag: "0x8DCF917ECF706D9"



link
apple-touch-icon
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/images/govuk-icon-180-tudor-crown.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 with long duration found.
No Compression - 1605 Bytes






ETag: "0x8DCF917ECE35A8A"



link
mask-icon
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/images/govuk-icon-mask-tudor-crown.svg
200

1
ok
image/svg+xml
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 with long duration found.
Compression (gzip): 1249/2942 Bytes






ETag: "0x8DCF917ECE2704B+gzip"



link
shortcut icon
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/images/govuk-favicon-tudor-crown.ico
200

1
Problems with Content-Type - Header - see details
image/x-icon
missing X-Content-Type-Options nosniff


This combination of Media Type "image" and MediaSubType "x-icon" was never defined. Use "image/vnd.microsoft.icon" instead. See https://www.iana.org/assignments/media-types/media-types.xhtml


Cache-Control: max-age=604800 with long duration found.
No Compression - 14254 Bytes






ETag: "0x8DCF917ECE9E94E"



link
stylesheet
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/css/all.min.css?lwP7Obft9Ib6GDNHx3gOmw==
200

1
ok
text/css
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 - with long duration found.
Compression (gzip): 41470/309503 Bytes






ETag: "0x8DCF917ECEDE059+gzip"

local SRI possible, possible hash-values:

 

sha256-OOFXqCuV9x9yicwGkBbpyCmeslPgwadYMZVloVsHezA=
sha384-i/fBecbSP6V6cQijmpS9kBCZRKVFf/7tLFMVYExAXtVTTMvxQQqS+ePlEcwlq0XT
sha512-wXrw4TOA+EoLPXNB06lv59C6XmYPGxVOJ8k+H2T1HsysRokZ8aPrxFEcWKJXqHE8pnw4w345KyjND7JXUVFH9Q==

 

<link rel="stylesheet" href="https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/css/all.min.css?lwP7Obft9Ib6GDNHx3gOmw==" crossorigin="anonymous" integrity="sha256-OOFXqCuV9x9yicwGkBbpyCmeslPgwadYMZVloVsHezA=" />


Content loaded via url("...")

 

../images/icon-search-2x.png1
../images/ncs-logo.png1
/nationalcareers_toolkit/fonts/bold-affa96571d-v2.woff1
/nationalcareers_toolkit/fonts/bold-b542beb274-v2.woff21
/nationalcareers_toolkit/fonts/light-94a07e06a1-v2.woff21
/nationalcareers_toolkit/fonts/light-f591b13f7d-v2.woff1
/nationalcareers_toolkit/images/arrow-sprite.png2
/nationalcareers_toolkit/images/bbc-bitesize-logo.png1
/nationalcareers_toolkit/images/calendar-alt.svg1
/nationalcareers_toolkit/images/chart-line-solid2.svg1
/nationalcareers_toolkit/images/chart-line-solid3.svg1
/nationalcareers_toolkit/images/chart-line-solid4.svg1
/nationalcareers_toolkit/images/clock.svg1
/nationalcareers_toolkit/images/govuk-crest.png1
/nationalcareers_toolkit/images/govuk-crest-2x.png1
/nationalcareers_toolkit/images/icon-pointer.png1
/nationalcareers_toolkit/images/icon-pointer-2x.png1
/nationalcareers_toolkit/images/icon-search-2x.png4
/nationalcareers_toolkit/images/pound-sign.svg1
/nationalcareers_toolkit/images/thumbs-down.svg1
/nationalcareers_toolkit/images/thumbs-up.svg1
data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 36 36' width='40' height='40'%3E%3Cpath d='M25.7 24.8L21.9 21c.7-1 1.1-2.2 1.1-3.5 0-3.6-2.9-6.5-6.5-6.5S10 13.9 10 17.5s2.9 6.5 6.5 6.5c1.6 0 3-.6 4.1-1.5l3.7 3.7 1.4-1.4zM12 17.5c0-2.5 2-4.5 4.5-4.5s4.5 2 4.5 4.5-2 4.5-4.5 4.5-4.5-2-4.5-4.5z' fill='currentColor'%3E%3C/path%3E%3C/svg%3E1
feed-icon-black.png1
icon-search-2x.png1

meta
charset
utf-8


1
ok















meta
og:image
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/images/govuk-opengraph-image-tudor-crown.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 with long duration found.
No Compression - 8677 Bytes






ETag: "0x8DCF917ECEB96B7"



meta
X-UA-Compatible
IE=edge


1
ok















meta
viewport
width=device-width, initial-scale=1


1
ok















script
src
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/js/dfc-app-pages.min.js?1orKfbRch2fgZaBVsMxXsA==
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/x-javascript
missing X-Content-Type-Options nosniff


Unknown Combination of MediaType "application" and Media Sub Type "x-javascript". Combinations must be IANA-registered, see https://www.iana.org/assignments/media-types/media-types.xhtml


Cache-Control: max-age=604800 - with long duration found.
Compression (gzip): 1771/6220 Bytes






ETag: "0x8DCF917ED103076+gzip"

local SRI possible, possible hash-values:

 

sha256-krOPqjv+/FtgrwoynF7Joz6Juo3gl/PF7nFgM+osYfA=
sha384-y6ASz2w9scVcZuqzfjAYgUVovIj/RJkuWWSQ8Xc0YnjIe3ZO/IIWuKXMKaQnXo0G
sha512-/NjXKHYpMQEAryhsW9bTFrK+hBnL3Df+0K7WnC6d6W3q4lcyRXutokPLCijnKUl9Zdmgr5XU3gllK33xhsiGqQ==

 

<script src="https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/js/dfc-app-pages.min.js?1orKfbRch2fgZaBVsMxXsA==" crossorigin="anonymous" integrity="sha256-krOPqjv+/FtgrwoynF7Joz6Juo3gl/PF7nFgM+osYfA=" />



script
src
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/js/dfcdigital.min.js?TWMgt3yu1dkYaYP+3MShBQ==
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/x-javascript
missing X-Content-Type-Options nosniff


Unknown Combination of MediaType "application" and Media Sub Type "x-javascript". Combinations must be IANA-registered, see https://www.iana.org/assignments/media-types/media-types.xhtml


Cache-Control: max-age=604800 - with long duration found.
Compression (gzip): 27462/98610 Bytes






ETag: "0x8DCF917ED17D088+gzip"

local SRI possible, possible hash-values:

 

sha256-1MGwudA4PuBcHfgGlioVY+csEtk0iab+x/2ND3ShcB8=
sha384-o1b/4AIKyfB46MCmZaXAPcuTtKACGEO4jWBkGWXz93IDsjYeMVnn54Nply6c6npB
sha512-COoM074iwklUgNxomA/4TmYFKP3eoFlmi2YHHmOTPVKqTrxHQvQPx2CLLq+XAo4HMVw3sDkRUEPQ0Y1+IzV4Ag==

 

<script src="https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/js/dfcdigital.min.js?TWMgt3yu1dkYaYP+3MShBQ==" crossorigin="anonymous" integrity="sha256-1MGwudA4PuBcHfgGlioVY+csEtk0iab+x/2ND3ShcB8=" />



script
src
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/js/jquerybundle.min.js?dBd9K6hVvxSPO6CvO4kqiw==
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/x-javascript
missing X-Content-Type-Options nosniff


Unknown Combination of MediaType "application" and Media Sub Type "x-javascript". Combinations must be IANA-registered, see https://www.iana.org/assignments/media-types/media-types.xhtml


Cache-Control: max-age=604800 - with long duration found.
Compression (gzip): 48481/149044 Bytes






ETag: "0x8DCF917ED18BABE+gzip"

local SRI possible, possible hash-values:

 

sha256-twskhLa6hbjBcTEJLWLLZMU+fFIBJsRG+L/YLjPKc8U=
sha384-QixczPSg6jSVcArM0jHYPcUbuXvtUc17ouXvzWzaFC2xeEqADGWoLCgG9XL1lJZA
sha512-C48ebfTpwPf2a2zbtYKY1QdKdX86EPqCAk0PIGBLraHup6muyFL8hgnzkqhHyQRlcIcLb78qHulgsRI3dA46EA==

 

<script src="https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/js/jquerybundle.min.js?dBd9K6hVvxSPO6CvO4kqiw==" crossorigin="anonymous" integrity="sha256-twskhLa6hbjBcTEJLWLLZMU+fFIBJsRG+L/YLjPKc8U=" />



script
src
https://webchat.nationalcareers.service.gov.uk/widget/js/loader.js?bot=c76a0bc0-3b27-11ed-aee7-0242ac140009?2024103019
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


No Cache-Control - header
Compression (gzip): 79395/217726 Bytes






ETag: W/"670977ba-3527e"

local SRI possible, possible hash-values:

 

sha256-jVVPw/VON7SgFoPou5GP0k8wETnDPNeEbu6BMMd5fiQ=
sha384-rWSilUEadjqh1jCcc2eU8CQTA1MQyuz6bLxz12JQWo38JCX18QD3gYPCCXgeicX7
sha512-7z1iL0LyL8ArmBlrwwUVQKpag8l99lJkhWuw5tT47wWPyEp0jq/xN+ryaa8SyguJPsDLIHdt9b7djvtZJStR7A==

 

<script src="https://webchat.nationalcareers.service.gov.uk/widget/js/loader.js?bot=c76a0bc0-3b27-11ed-aee7-0242ac140009?2024103019" crossorigin="anonymous" integrity="sha256-jVVPw/VON7SgFoPou5GP0k8wETnDPNeEbu6BMMd5fiQ=" />


https://nationalcareers.service.gov.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

a




6
ok















a

#main-content


1
ok















a

/


2
ok















a

/about-us


1
ok















a

/action-plans


1
ok















a

/alerts


1
ok















a

/careers-advice


1
ok















a

/contact-us


1
ok















a

/explore-careers


1
ok















a

/find-a-course


1
ok















a

/help


1
ok















a

/help/accessibility


1
ok















a

/help/cookies


1
ok















a

/help/cookie-settings/


3
ok















a

/help/information-sources


1
ok















a

/help/terms-and-conditions


1
ok















a

/skills-assessment


1
ok















a

https://careerswales.gov.wales/


1
ok















a

https://dferesearch.fra1.qualtrics.com/jfe/form/SV_4TMvchACdXh77Ya


1
ok















a

https://www.myworldofwork.co.uk/


1
ok















a

https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/


1
ok















a

https://www.nationalarchives.gov.uk/information-management/re-using-public-sector-information/uk-government-licensing-framework/crown-copyright/


1
ok















a

https://www.nidirect.gov.uk/campaigns/careers


1
ok















iframe
src
https://www.googletagmanager.com/ns.html?id=GTM-554PPX9


1
ok















link
apple-touch-icon
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/images/govuk-icon-180-tudor-crown.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 with long duration found.
No Compression - 1605 Bytes






ETag: "0x8DCF917ECE35A8A"



link
mask-icon
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/images/govuk-icon-mask-tudor-crown.svg
200

1
ok
image/svg+xml
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 with long duration found.
Compression (gzip): 1249/2942 Bytes






ETag: "0x8DCF917ECE2704B+gzip"



link
shortcut icon
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/images/govuk-favicon-tudor-crown.ico
200

1
Problems with Content-Type - Header - see details
image/x-icon
missing X-Content-Type-Options nosniff


This combination of Media Type "image" and MediaSubType "x-icon" was never defined. Use "image/vnd.microsoft.icon" instead. See https://www.iana.org/assignments/media-types/media-types.xhtml


Cache-Control: max-age=604800 with long duration found.
No Compression - 14254 Bytes






ETag: "0x8DCF917ECE9E94E"



link
stylesheet
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/css/all.min.css?lwP7Obft9Ib6GDNHx3gOmw==
200

1
ok
text/css
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 - with long duration found.
Compression (gzip): 41470/309503 Bytes






ETag: "0x8DCF917ECEDE059+gzip"

local SRI possible, possible hash-values:

 

sha256-OOFXqCuV9x9yicwGkBbpyCmeslPgwadYMZVloVsHezA=
sha384-i/fBecbSP6V6cQijmpS9kBCZRKVFf/7tLFMVYExAXtVTTMvxQQqS+ePlEcwlq0XT
sha512-wXrw4TOA+EoLPXNB06lv59C6XmYPGxVOJ8k+H2T1HsysRokZ8aPrxFEcWKJXqHE8pnw4w345KyjND7JXUVFH9Q==

 

<link rel="stylesheet" href="https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/css/all.min.css?lwP7Obft9Ib6GDNHx3gOmw==" crossorigin="anonymous" integrity="sha256-OOFXqCuV9x9yicwGkBbpyCmeslPgwadYMZVloVsHezA=" />


Content loaded via url("...")

 

../images/icon-search-2x.png1
../images/ncs-logo.png1
/nationalcareers_toolkit/fonts/bold-affa96571d-v2.woff1
/nationalcareers_toolkit/fonts/bold-b542beb274-v2.woff21
/nationalcareers_toolkit/fonts/light-94a07e06a1-v2.woff21
/nationalcareers_toolkit/fonts/light-f591b13f7d-v2.woff1
/nationalcareers_toolkit/images/arrow-sprite.png2
/nationalcareers_toolkit/images/bbc-bitesize-logo.png1
/nationalcareers_toolkit/images/calendar-alt.svg1
/nationalcareers_toolkit/images/chart-line-solid2.svg1
/nationalcareers_toolkit/images/chart-line-solid3.svg1
/nationalcareers_toolkit/images/chart-line-solid4.svg1
/nationalcareers_toolkit/images/clock.svg1
/nationalcareers_toolkit/images/govuk-crest.png1
/nationalcareers_toolkit/images/govuk-crest-2x.png1
/nationalcareers_toolkit/images/icon-pointer.png1
/nationalcareers_toolkit/images/icon-pointer-2x.png1
/nationalcareers_toolkit/images/icon-search-2x.png4
/nationalcareers_toolkit/images/pound-sign.svg1
/nationalcareers_toolkit/images/thumbs-down.svg1
/nationalcareers_toolkit/images/thumbs-up.svg1
data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 36 36' width='40' height='40'%3E%3Cpath d='M25.7 24.8L21.9 21c.7-1 1.1-2.2 1.1-3.5 0-3.6-2.9-6.5-6.5-6.5S10 13.9 10 17.5s2.9 6.5 6.5 6.5c1.6 0 3-.6 4.1-1.5l3.7 3.7 1.4-1.4zM12 17.5c0-2.5 2-4.5 4.5-4.5s4.5 2 4.5 4.5-2 4.5-4.5 4.5-4.5-2-4.5-4.5z' fill='currentColor'%3E%3C/path%3E%3C/svg%3E1
feed-icon-black.png1
icon-search-2x.png1

meta
charset
utf-8


1
ok















meta
og:image
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/images/govuk-opengraph-image-tudor-crown.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604800 with long duration found.
No Compression - 8677 Bytes






ETag: "0x8DCF917ECEB96B7"



meta
X-UA-Compatible
IE=edge


1
ok















meta
viewport
width=device-width, initial-scale=1


1
ok















script
src
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/js/dfc-app-pages.min.js?1orKfbRch2fgZaBVsMxXsA==
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/x-javascript
missing X-Content-Type-Options nosniff


Unknown Combination of MediaType "application" and Media Sub Type "x-javascript". Combinations must be IANA-registered, see https://www.iana.org/assignments/media-types/media-types.xhtml


Cache-Control: max-age=604800 - with long duration found.
Compression (gzip): 1771/6220 Bytes






ETag: "0x8DCF917ED103076+gzip"

local SRI possible, possible hash-values:

 

sha256-krOPqjv+/FtgrwoynF7Joz6Juo3gl/PF7nFgM+osYfA=
sha384-y6ASz2w9scVcZuqzfjAYgUVovIj/RJkuWWSQ8Xc0YnjIe3ZO/IIWuKXMKaQnXo0G
sha512-/NjXKHYpMQEAryhsW9bTFrK+hBnL3Df+0K7WnC6d6W3q4lcyRXutokPLCijnKUl9Zdmgr5XU3gllK33xhsiGqQ==

 

<script src="https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/js/dfc-app-pages.min.js?1orKfbRch2fgZaBVsMxXsA==" crossorigin="anonymous" integrity="sha256-krOPqjv+/FtgrwoynF7Joz6Juo3gl/PF7nFgM+osYfA=" />



script
src
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/js/dfcdigital.min.js?TWMgt3yu1dkYaYP+3MShBQ==
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/x-javascript
missing X-Content-Type-Options nosniff


Unknown Combination of MediaType "application" and Media Sub Type "x-javascript". Combinations must be IANA-registered, see https://www.iana.org/assignments/media-types/media-types.xhtml


Cache-Control: max-age=604800 - with long duration found.
Compression (gzip): 27462/98610 Bytes






ETag: "0x8DCF917ED17D088+gzip"

local SRI possible, possible hash-values:

 

sha256-1MGwudA4PuBcHfgGlioVY+csEtk0iab+x/2ND3ShcB8=
sha384-o1b/4AIKyfB46MCmZaXAPcuTtKACGEO4jWBkGWXz93IDsjYeMVnn54Nply6c6npB
sha512-COoM074iwklUgNxomA/4TmYFKP3eoFlmi2YHHmOTPVKqTrxHQvQPx2CLLq+XAo4HMVw3sDkRUEPQ0Y1+IzV4Ag==

 

<script src="https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/js/dfcdigital.min.js?TWMgt3yu1dkYaYP+3MShBQ==" crossorigin="anonymous" integrity="sha256-1MGwudA4PuBcHfgGlioVY+csEtk0iab+x/2ND3ShcB8=" />



script
src
https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/js/jquerybundle.min.js?dBd9K6hVvxSPO6CvO4kqiw==
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/x-javascript
missing X-Content-Type-Options nosniff


Unknown Combination of MediaType "application" and Media Sub Type "x-javascript". Combinations must be IANA-registered, see https://www.iana.org/assignments/media-types/media-types.xhtml


Cache-Control: max-age=604800 - with long duration found.
Compression (gzip): 48481/149044 Bytes






ETag: "0x8DCF917ED18BABE+gzip"

local SRI possible, possible hash-values:

 

sha256-twskhLa6hbjBcTEJLWLLZMU+fFIBJsRG+L/YLjPKc8U=
sha384-QixczPSg6jSVcArM0jHYPcUbuXvtUc17ouXvzWzaFC2xeEqADGWoLCgG9XL1lJZA
sha512-C48ebfTpwPf2a2zbtYKY1QdKdX86EPqCAk0PIGBLraHup6muyFL8hgnzkqhHyQRlcIcLb78qHulgsRI3dA46EA==

 

<script src="https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/js/jquerybundle.min.js?dBd9K6hVvxSPO6CvO4kqiw==" crossorigin="anonymous" integrity="sha256-twskhLa6hbjBcTEJLWLLZMU+fFIBJsRG+L/YLjPKc8U=" />



script
src
https://webchat.nationalcareers.service.gov.uk/widget/js/loader.js?bot=c76a0bc0-3b27-11ed-aee7-0242ac140009?2024103019
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


No Cache-Control - header
Compression (gzip): 79395/217726 Bytes






ETag: W/"670977ba-3527e"

local SRI possible, possible hash-values:

 

sha256-jVVPw/VON7SgFoPou5GP0k8wETnDPNeEbu6BMMd5fiQ=
sha384-rWSilUEadjqh1jCcc2eU8CQTA1MQyuz6bLxz12JQWo38JCX18QD3gYPCCXgeicX7
sha512-7z1iL0LyL8ArmBlrwwUVQKpag8l99lJkhWuw5tT47wWPyEp0jq/xN+ryaa8SyguJPsDLIHdt9b7djvtZJStR7A==

 

<script src="https://webchat.nationalcareers.service.gov.uk/widget/js/loader.js?bot=c76a0bc0-3b27-11ed-aee7-0242ac140009?2024103019" crossorigin="anonymous" integrity="sha256-jVVPw/VON7SgFoPou5GP0k8wETnDPNeEbu6BMMd5fiQ=" />


 

12. Html-Parsing via https://validator.nu/ / https://validator.w3.org/nu/ (started 2024-09-28, 09:00, alpha)

  Unfortunately, there are differences between the first used validator.nu and validator.w3.org/nu/ - switched to validator.w3.org/nu/. Looks like some error messages (link - fetchpriority attribute) of validator.nu are obsolete, not seen in the w3.org-version and not found in the current specification: link may have a fetchpriority attribute.

Url used (first standard-https-result with http status 200): https://nationalcareers.service.gov.uk/

Summary

Good: No non-document-errors
5 errors
15 warnings

TypeMessagenum found
1.errorElement div not allowed as child of element h1 in this context. (Suppressing further errors from this subtree.)2
2.errorAttribute name not allowed on element div at this point.1
3.errorBad value Very Satisfied for attribute name on element a: An ID must not contain whitespace.1
4.errorBad value Very Unsatisfied for attribute name on element a: An ID must not contain whitespace.1
5.warningThe type attribute is unnecessary for JavaScript resources.6
6.warningThe name attribute is obsolete. Consider putting an id attribute on the nearest container instead.5
7.warningThe banner role is unnecessary for element header.1
8.warningThe button role is unnecessary for element button.1
9.warningThe main role is unnecessary for element main.1
10.warningThe contentinfo role is unnecessary for element footer.1

Details


TypeMessage + Sample
1errorElement div not allowed as child of element h1 in this context. (Suppressing further errors from this subtree.)

From line 182, column 25 to line 182, column 48

<div class="block mb-5">
2errorElement div not allowed as child of element h1 in this context. (Suppressing further errors from this subtree.)

From line 189, column 25 to line 189, column 47

<div class="block ncs">
3errorAttribute name not allowed on element div at this point.

From line 498, column 9 to line 498, column 108

> <div class="rating flex-row" name="2" style="flex-direction: row-reverse; justify-content: center;">
4errorBad value Very Satisfied for attribute name on element a: An ID must not contain whitespace.

From line 499, column 13 to line 499, column 123

<a id="exitBtn5Stars" class="5 stars" name="Very Satisfied" aria-label="Very Satisfied (5 Stars)" tabindex="0">★</a>
5errorBad value Very Unsatisfied for attribute name on element a: An ID must not contain whitespace.

From line 503, column 13 to line 503, column 126

<a id="exitBtn1Stars" class="1 stars" name="Very Unsatisfied" aria-label="Very Unsatisfied (1 Star)" tabindex="0">★</a>
6warningThe type attribute is unnecessary for JavaScript resources.

From line 25, column 1 to line 25, column 64

arity --> <script type="text/javascript" nonce="OVHC5oIAZZUUeyytCR4O81Zz"> (
7warningThe type attribute is unnecessary for JavaScript resources.

From line 48, column 1 to line 48, column 64

<script type="text/javascript" nonce="OVHC5oIAZZUUeyytCR4O81Zz">
8warningThe banner role is unnecessary for element header.

From line 104, column 1 to line 104, column 80

> </div> <header class="govuk-header " role="banner" data-module="govuk-header" id="top"> <
9warningThe button role is unnecessary for element button.

From line 110, column 9 to line 110, column 175

<button type="button" role="button" class="govuk-header__menu-button govuk-js-header-toggle" aria-controls="navigation" aria-label="Show or hide Top Level Navigation">Menu</
10warningThe main role is unnecessary for element main.

From line 157, column 5 to line 157, column 95

ion> <main class="govuk-!-padding-top-0 govuk-!-padding-bottom-0" id="main-content" role="main">
11warningThe name attribute is obsolete. Consider putting an id attribute on the nearest container instead.

From line 499, column 13 to line 499, column 123

<a id="exitBtn5Stars" class="5 stars" name="Very Satisfied" aria-label="Very Satisfied (5 Stars)" tabindex="0">★</a>
12warningThe name attribute is obsolete. Consider putting an id attribute on the nearest container instead.

From line 500, column 13 to line 500, column 113

<a id="exitBtn4Stars" class="4 stars" name="Satisfied" aria-label="Satisfied (4 Stars)" tabindex="0">★</a>
13warningThe name attribute is obsolete. Consider putting an id attribute on the nearest container instead.

From line 501, column 13 to line 501, column 109

<a id="exitBtn3Stars" class="3 stars" name="Neutral" aria-label="Neutral (3 Stars)" tabindex="0">★</a>
14warningThe name attribute is obsolete. Consider putting an id attribute on the nearest container instead.

From line 502, column 13 to line 502, column 117

<a id="exitBtn2Stars" class="2 stars" name="Unsatisfied" aria-label="Unsatisfied (2 Stars)" tabindex="0">★</a>
15warningThe name attribute is obsolete. Consider putting an id attribute on the nearest container instead.

From line 503, column 13 to line 503, column 126

<a id="exitBtn1Stars" class="1 stars" name="Very Unsatisfied" aria-label="Very Unsatisfied (1 Star)" tabindex="0">★</a>
16warningThe contentinfo role is unnecessary for element footer.

From line 507, column 1 to line 507, column 49

v> </div> <footer class="govuk-footer " role="contentinfo"> <
17warningThe type attribute is unnecessary for JavaScript resources.

From line 587, column 13 to line 587, column 197

<script src="https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/js/jquerybundle.min.js?dBd9K6hVvxSPO6CvO4kqiw==" type="text/javascript" nonce="OVHC5oIAZZUUeyytCR4O81Zz"></scri
18warningThe type attribute is unnecessary for JavaScript resources.

From line 588, column 9 to line 588, column 196

> <script src="https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/js/dfcdigital.min.js?TWMgt3yu1dkYaYP&#x2B;3MShBQ==" type="text/javascript" nonce="OVHC5oIAZZUUeyytCR4O81Zz"></scri
19warningThe type attribute is unnecessary for JavaScript resources.

From line 589, column 9 to line 589, column 197

> <script src="https://webchat.nationalcareers.service.gov.uk/widget/js/loader.js?bot=c76a0bc0-3b27-11ed-aee7-0242ac140009?2024103019" type="text/javascript" nonce="OVHC5oIAZZUUeyytCR4O81Zz"></scri
20warningThe type attribute is unnecessary for JavaScript resources.

From line 590, column 9 to line 590, column 194

> <script src="https://cdn.nationalcareers.service.gov.uk/nationalcareers_toolkit/js/dfc-app-pages.min.js?1orKfbRch2fgZaBVsMxXsA==" type="text/javascript" nonce="OVHC5oIAZZUUeyytCR4O81Zz"></scri

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: ns-1505.awsdns-60.org, ns-1589.awsdns-06.co.uk, ns-306.awsdns-38.com, ns-841.awsdns-41.net

 

QNr.DomainTypeNS used
1
org
NS
k.root-servers.net (2001:7fd::1)

Answer: a0.org.afilias-nst.info, a2.org.afilias-nst.info, b0.org.afilias-nst.org, b2.org.afilias-nst.org, c0.org.afilias-nst.info, d0.org.afilias-nst.org
2
ns-1505.awsdns-60.org
NS
a0.org.afilias-nst.info (2001:500:e::1)

Answer: g-ns-1087.awsdns-60.org, g-ns-1660.awsdns-60.org, g-ns-188.awsdns-60.org, g-ns-766.awsdns-60.org

Answer: g-ns-1087.awsdns-60.org
205.251.196.63, 2600:9000:5304:3f00::1

Answer: g-ns-1660.awsdns-60.org
205.251.198.124, 2600:9000:5306:7c00::1

Answer: g-ns-188.awsdns-60.org
205.251.192.188, 2600:9000:5300:bc00::1

Answer: g-ns-766.awsdns-60.org
205.251.194.254, 2600:9000:5302:fe00::1
3
uk
NS
a.root-servers.net (2001:503:ba3e::2:30)

Answer: dns1.nic.uk, dns2.nic.uk, dns3.nic.uk, dns4.nic.uk, nsa.nic.uk, nsb.nic.uk, nsc.nic.uk, nsd.nic.uk
4
ns-1589.awsdns-06.co.uk
NS
dns1.nic.uk (2a01:618:400::1)

Answer: g-ns-1481.awsdns-06.co.uk, g-ns-1802.awsdns-06.co.uk, g-ns-326.awsdns-06.co.uk, g-ns-902.awsdns-06.co.uk

Answer: g-ns-1481.awsdns-06.co.uk
205.251.197.201, 2600:9000:5305:c900::1

Answer: g-ns-1802.awsdns-06.co.uk
205.251.199.10, 2600:9000:5307:a00::1

Answer: g-ns-326.awsdns-06.co.uk
205.251.193.70, 2600:9000:5301:4600::1

Answer: g-ns-902.awsdns-06.co.uk
205.251.195.134, 2600:9000:5303:8600::1
5
com
NS
d.root-servers.net (2001:500:2d::d)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
6
ns-306.awsdns-38.com
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: g-ns-1190.awsdns-38.com, g-ns-1766.awsdns-38.com, g-ns-39.awsdns-38.com, g-ns-614.awsdns-38.com

Answer: g-ns-1190.awsdns-38.com
205.251.196.166, 2600:9000:5304:a600::1

Answer: g-ns-1766.awsdns-38.com
205.251.198.230, 2600:9000:5306:e600::1

Answer: g-ns-39.awsdns-38.com
205.251.192.39, 2600:9000:5300:2700::1

Answer: g-ns-614.awsdns-38.com
205.251.194.102, 2600:9000:5302:6600::1
7
net
NS
e.root-servers.net (2001:500:a8::e)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
8
ns-841.awsdns-41.net
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: g-ns-1385.awsdns-41.net, g-ns-1961.awsdns-41.net, g-ns-490.awsdns-41.net, g-ns-811.awsdns-41.net

Answer: g-ns-1385.awsdns-41.net
205.251.197.105, 2600:9000:5305:6900::1

Answer: g-ns-1961.awsdns-41.net
205.251.199.169, 2600:9000:5307:a900::1

Answer: g-ns-490.awsdns-41.net
205.251.193.234, 2600:9000:5301:ea00::1

Answer: g-ns-811.awsdns-41.net
205.251.195.43, 2600:9000:5303:2b00::1
9
ns-1505.awsdns-60.org: 205.251.197.225
A
g-ns-1087.awsdns-60.org (2600:9000:5304:3f00::1)
10
ns-1505.awsdns-60.org: 2600:9000:5305:e100::1
AAAA
g-ns-1087.awsdns-60.org (2600:9000:5304:3f00::1)
11
ns-1589.awsdns-06.co.uk: 205.251.198.53
A
g-ns-1481.awsdns-06.co.uk (2600:9000:5305:c900::1)
12
ns-1589.awsdns-06.co.uk: 2600:9000:5306:3500::1
AAAA
g-ns-1481.awsdns-06.co.uk (2600:9000:5305:c900::1)
13
ns-306.awsdns-38.com: 205.251.193.50
A
g-ns-1190.awsdns-38.com (2600:9000:5304:a600::1)
14
ns-306.awsdns-38.com: 2600:9000:5301:3200::1
AAAA
g-ns-1190.awsdns-38.com (2600:9000:5304:a600::1)
15
ns-841.awsdns-41.net: 205.251.195.73
A
g-ns-1385.awsdns-41.net (2600:9000:5305:6900::1)
16
ns-841.awsdns-41.net: 2600:9000:5303:4900::1
AAAA
g-ns-1385.awsdns-41.net (2600:9000:5305:6900::1)

 

14. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
nationalcareers.service.gov.uk
0

no CAA entry found
1
0
service.gov.uk
0

no CAA entry found
1
0
gov.uk
0

no CAA entry found
1
0
uk
0

no CAA entry found
1
0

 

15. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
nationalcareers.service.gov.uk
_globalsign-domain-verification=iwL2l2mDHHr9iurb3NxhixxWKDWG3YsXnJ7qk5Uow1
ok
1
0
nationalcareers.service.gov.uk
5n7mxfl94p1g8wy7w3f5pzyx4bbwj8s2
ok
1
0
nationalcareers.service.gov.uk
MS=ms70960879
ok
1
0
nationalcareers.service.gov.uk
v=spf1 include:spf.protection.outlook.com a:mail5.timeforstorm.com a:mail6.timeforstorm.com ~all
ok
1
0
_acme-challenge.nationalcareers.service.gov.uk

Name Error - The domain name does not exist
1
0
_acme-challenge.nationalcareers.service.gov.uk.nationalcareers.service.gov.uk

Name Error - The domain name does not exist
1
0

 

16. DomainService - Entries

TypeDomainPrefValueDNS-errornum AnswersStatusDescription
MX

nationalcareers.service.gov.uk
0
nationalcareers-service-gov-uk.mail.protection.outlook.com
01ok

A


52.101.68.29
04ok

A


52.101.73.15
04ok

A


52.101.68.0
04ok

A


52.101.68.18
04ok

CNAME


-40ok
_mta-sts
TXT
_mta-sts.nationalcareers.service.gov.uk

v=STSv1; id=20210323T1000;
ok
mta-sts
CNAME
mta-sts.nationalcareers.service.gov.uk

app-t1pr-mtasts-nationalcareersservice.azurewebsites.net
ok
mta-sts
CNAME
waws-prod-am2-303.sip.azurewebsites.windows.net

waws-prod-am2-303.westeurope.cloudapp.azure.com
ok
mta-sts
CNAME
app-t1pr-mtasts-nationalcareersservice.azurewebsites.net

waws-prod-am2-303.sip.azurewebsites.windows.net
ok

A
waws-prod-am2-303.westeurope.cloudapp.azure.com

13.69.68.39
ok

mta-sts.txt file
Content of https://mta-sts.nationalcareers.service.gov.uk/.well-known/mta-sts.txt - see RFC 8461 text/plainok




version: STSv1
ok




mode: enforce
ok




mx: nationalcareers-service-gov-uk.mail.protection.outlook.com
ok




max_age: 1814400 
ok
SMTP-TLS Reporting
TXT
_smtp._tls.nationalcareers.service.gov.uk

v=TLSRPTv1;rua=mailto:tls-rua@mailcheck.service.ncsc.gov.uk
ok
SPF
TXT
nationalcareers.service.gov.uk

v=spf1 include:spf.protection.outlook.com a:mail5.timeforstorm.com a:mail6.timeforstorm.com ~all
ok

TXT
spf.protection.outlook.com

v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/15 ip4:52.102.0.0/16 ip4:52.103.0.0/17 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/49 ip6:2a01:111:f403:8000::/51 ip6:2a01:111:f403:c000::/51 ip6:2a01:111:f403:f000::/52 -all
ok

A
mail5.timeforstorm.com

95.131.155.78
ok

A
mail6.timeforstorm.com

213.216.147.97
ok
_dmarc
TXT
_dmarc.nationalcareers.service.gov.uk

v=DMARC1;p=reject;fo=1;pct=100;rua=mailto:dmarc-rua@dmarc.service.gov.uk,mailto:dmarc-rua@education.gov.uk;ruf=mailto:dmarc_ruf@education.gov.uk
ok

TXT
nationalcareers.service.gov.uk._report._dmarc.dmarc.service.gov.uk

mailto:dmarc-rua@dmarc.service.gov.uk
okMail domain unequal current domain. Check required, if there is a confirming _report._dmarc-Record. See RFC 7489, 7.1.

TXT
nationalcareers.service.gov.uk._report._dmarc.education.gov.uk

mailto:dmarc-rua@education.gov.uk
okMail domain unequal current domain. Check required, if there is a confirming _report._dmarc-Record. See RFC 7489, 7.1.

TXT
nationalcareers.service.gov.uk._report._dmarc.dmarc.service.gov.uk

v=DMARC1;
okConfirmed. Sending reports to external domain is allowed.

TXT
nationalcareers.service.gov.uk._report._dmarc.education.gov.uk

v=DMARC1
okConfirmed. Sending reports to external domain is allowed.

TXT
nationalcareers.service.gov.uk._report._dmarc.education.gov.uk

mailto:dmarc_ruf@education.gov.uk
okMail domain unequal current domain. Check required, if there is a confirming _report._dmarc-Record. See RFC 7489, 7.1.

TXT
nationalcareers.service.gov.uk._report._dmarc.education.gov.uk

v=DMARC1
okConfirmed. Sending reports to external domain is allowed.

 

 

17. Cipher Suites

Summary
DomainIPPortnum CipherstimeStd.ProtocolForward Secrecy
nationalcareers.service.gov.uk
104.40.146.218
443
4 Ciphers34.33 sec
0 without, 4 FS
100.00 %
Complete

1
4 Ciphers
4.00 Ciphers/Check
34.33 sec34.33 sec/Check
0 without, 4 FS
100.00 %

Details
DomainIPPortCipher (OpenSsl / IANA)
nationalcareers.service.gov.uk
104.40.146.218
443
ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS
4 Ciphers, 34.33 sec
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

ECDH
RSA
AESGCM(256)
AEAD




DHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0x00,0x9F
FS

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

DH
RSA
AESGCM(256)
AEAD




ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

ECDH
RSA
AESGCM(128)
AEAD




DHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0x00,0x9E
FS

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

DH
RSA
AESGCM(128)
AEAD

 

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

 

 

Permalink: https://check-your-website.server-daten.de/?i=a89049df-96a1-452f-81e6-f2ad6bbc033e

 

Last Result: https://check-your-website.server-daten.de/?q=nationalcareers.service.gov.uk - 2024-10-30 22:37:55

 

Do you like this page? Support this tool, add a link on your page:

 

<a href="https://check-your-website.server-daten.de/?q=nationalcareers.service.gov.uk" target="_blank">Check this Site: nationalcareers.service.gov.uk</a>

 

 

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

 

QR-Code of this page - https://check-your-website.server-daten.de/?d=nationalcareers.service.gov.uk