Check DNS, Urls + Redirects, Certificates and Content of your Website


 

 

A+

 

Top configuration, no warnings +Preload

 

Checked:
31.07.2024 20:53:59

 

Older results

No older results found

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
hop-ict.nl
A
212.114.110.201
Utrecht/The Netherlands (NL) - BIT BV
Hostname: mx.hopict.nl
yes
1
0

AAAA
2001:7b8:60c:1:4:47:a1:1
Ede/Gelderland/The Netherlands (NL) - BIT

yes


www.hop-ict.nl
A
212.114.110.201
Utrecht/The Netherlands (NL) - BIT BV
Hostname: mx.hopict.nl
yes
1
0

AAAA
2001:7b8:60c:1:4:47:a1:1
Ede/Gelderland/The Netherlands (NL) - BIT

yes


*.hop-ict.nl
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


mta-sts.hop-ict.nl
A
212.114.110.201
No Hostname found
yes



AAAA
2001:7b8:60c:1:4:47:a1:1

yes


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






Status: Valid because published






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20038, Flags 256






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 21.08.2024, 00:00:00 +, Signature-Inception: 31.07.2024, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: nl

nl
1 DS RR in the parent zone found






DS with Algorithm 13, KeyTag 17153, DigestType 2 and Digest xd/dyR51MlYqNfPCzTCCOJS+CPIBAfGr9FyKuXOfP0k=






1 RRSIG RR to validate DS RR found






RRSIG-Owner nl., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 13.08.2024, 17:00:00 +, Signature-Inception: 31.07.2024, 16:00:00 +, KeyTag 20038, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20038 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 17153, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 13, KeyTag 38714, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner nl., Algorithm: 13, 1 Labels, original TTL: 3600 sec, Signature-expiration: 13.08.2024, 15:25:42 +, Signature-Inception: 30.07.2024, 21:08:26 +, KeyTag 17153, Signer-Name: nl






Status: Good - Algorithmus 13 and DNSKEY with KeyTag 17153 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 17153, DigestType 2 and Digest "xd/dyR51MlYqNfPCzTCCOJS+CPIBAfGr9FyKuXOfP0k=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: hop-ict.nl

hop-ict.nl
1 DS RR in the parent zone found






DS with Algorithm 13, KeyTag 46458, DigestType 2 and Digest FJmTObAQzEmG3VtBlp7fLn8jlUJw3EcZCa2Cw0D3s8w=






1 RRSIG RR to validate DS RR found






RRSIG-Owner hop-ict.nl., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 12.08.2024, 03:49:27 +, Signature-Inception: 28.07.2024, 22:08:22 +, KeyTag 38714, Signer-Name: nl






Status: Good - Algorithmus 13 and DNSKEY with KeyTag 38714 used to validate the DS RRSet in the parent zone






3 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 46458, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 46959, Flags 256






Public Key with Algorithm 8, KeyTag 53775, Flags 256






2 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner hop-ict.nl., Algorithm: 13, 2 Labels, original TTL: 14400 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






RRSIG-Owner hop-ict.nl., Algorithm: 8, 2 Labels, original TTL: 14400 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46959, Signer-Name: hop-ict.nl






Status: Good - Algorithmus 13 and DNSKEY with KeyTag 46458 used to validate the DNSKEY RRSet






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 46959 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 46458, DigestType 2 and Digest "FJmTObAQzEmG3VtBlp7fLn8jlUJw3EcZCa2Cw0D3s8w=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone






RRSIG Type 1 validates the A - Result: 212.114.110.201
Validated: RRSIG-Owner hop-ict.nl., Algorithm: 13, 2 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






RRSIG Type 1 validates the A - Result: 212.114.110.201
Validated: RRSIG-Owner hop-ict.nl., Algorithm: 13, 2 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






RRSIG Type 16 validates the TXT - Result: google-site-verification=Hqv1UiA5OlfyorIFHkKqMJA8VilqxeT3RivncryGHlI v=spf1 a mx ip4:82.139.106.47 ip6:2001:9e0:890e:8c00::/56 a:mx.hopict.nl a:webmail.hopict.nl a:webmail.hop-ict.nl -all
Validated: RRSIG-Owner hop-ict.nl., Algorithm: 13, 2 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






RRSIG Type 16 validates the TXT - Result: google-site-verification=Hqv1UiA5OlfyorIFHkKqMJA8VilqxeT3RivncryGHlI v=spf1 a mx ip4:82.139.106.47 ip6:2001:9e0:890e:8c00::/56 a:mx.hopict.nl a:webmail.hopict.nl a:webmail.hop-ict.nl -all
Validated: RRSIG-Owner hop-ict.nl., Algorithm: 13, 2 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






RRSIG Type 28 validates the AAAA - Result: 2001:07B8:060C:0001:0004:0047:00A1:0001
Validated: RRSIG-Owner hop-ict.nl., Algorithm: 13, 2 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






RRSIG Type 28 validates the AAAA - Result: 2001:07B8:060C:0001:0004:0047:00A1:0001
Validated: RRSIG-Owner hop-ict.nl., Algorithm: 13, 2 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






RRSIG Type 52 validates the TLSA - Result (_443._tcp.hop-ict.nl): _443._tcp.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 _443._tcp.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a
Validated: RRSIG-Owner _443._tcp.hop-ict.nl., Algorithm: 13, 4 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






RRSIG Type 52 validates the TLSA - Result (_443._tcp.hop-ict.nl): _443._tcp.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 _443._tcp.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a
Validated: RRSIG-Owner _443._tcp.hop-ict.nl., Algorithm: 13, 4 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






RRSIG Type 257 validates the CAA - Result: 5|issueletsencrypt.org
Validated: RRSIG-Owner hop-ict.nl., Algorithm: 13, 2 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






RRSIG Type 257 validates the CAA - Result: 5|issueletsencrypt.org
Validated: RRSIG-Owner hop-ict.nl., Algorithm: 13, 2 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






RRSIG Type 1 validates the A - Result: 212.114.110.201
Validated: RRSIG-Owner hop-ict.nl., Algorithm: 8, 2 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46959, Signer-Name: hop-ict.nl






RRSIG Type 1 validates the A - Result: 212.114.110.201
Validated: RRSIG-Owner hop-ict.nl., Algorithm: 8, 2 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46959, Signer-Name: hop-ict.nl






RRSIG Type 16 validates the TXT - Result: google-site-verification=Hqv1UiA5OlfyorIFHkKqMJA8VilqxeT3RivncryGHlI v=spf1 a mx ip4:82.139.106.47 ip6:2001:9e0:890e:8c00::/56 a:mx.hopict.nl a:webmail.hopict.nl a:webmail.hop-ict.nl -all
Validated: RRSIG-Owner hop-ict.nl., Algorithm: 8, 2 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46959, Signer-Name: hop-ict.nl






RRSIG Type 16 validates the TXT - Result: google-site-verification=Hqv1UiA5OlfyorIFHkKqMJA8VilqxeT3RivncryGHlI v=spf1 a mx ip4:82.139.106.47 ip6:2001:9e0:890e:8c00::/56 a:mx.hopict.nl a:webmail.hopict.nl a:webmail.hop-ict.nl -all
Validated: RRSIG-Owner hop-ict.nl., Algorithm: 8, 2 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46959, Signer-Name: hop-ict.nl






RRSIG Type 28 validates the AAAA - Result: 2001:07B8:060C:0001:0004:0047:00A1:0001
Validated: RRSIG-Owner hop-ict.nl., Algorithm: 8, 2 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46959, Signer-Name: hop-ict.nl






RRSIG Type 28 validates the AAAA - Result: 2001:07B8:060C:0001:0004:0047:00A1:0001
Validated: RRSIG-Owner hop-ict.nl., Algorithm: 8, 2 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46959, Signer-Name: hop-ict.nl






RRSIG Type 52 validates the TLSA - Result (_443._tcp.hop-ict.nl): _443._tcp.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 _443._tcp.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a
Validated: RRSIG-Owner _443._tcp.hop-ict.nl., Algorithm: 8, 4 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46959, Signer-Name: hop-ict.nl






RRSIG Type 52 validates the TLSA - Result (_443._tcp.hop-ict.nl): _443._tcp.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 _443._tcp.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a
Validated: RRSIG-Owner _443._tcp.hop-ict.nl., Algorithm: 8, 4 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46959, Signer-Name: hop-ict.nl






RRSIG Type 257 validates the CAA - Result: 5|issueletsencrypt.org
Validated: RRSIG-Owner hop-ict.nl., Algorithm: 8, 2 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46959, Signer-Name: hop-ict.nl






RRSIG Type 257 validates the CAA - Result: 5|issueletsencrypt.org
Validated: RRSIG-Owner hop-ict.nl., Algorithm: 8, 2 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46959, Signer-Name: hop-ict.nl






CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "18h8hphkat0nuo0ptbtmf1ul5h3kgsh7" equal the hashed NSEC3-owner "18h8hphkat0nuo0ptbtmf1ul5h3kgsh7" and the hashed NextOwner "4rttlgiahve0ofd236264e2b72eqtb2g". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, NS, SOA, MX, TXT, AAAA, RRSIG, DNSKEY, NSEC3PARAM, CAA Validated: RRSIG-Owner 18h8hphkat0nuo0ptbtmf1ul5h3kgsh7.hop-ict.nl., Algorithm: 13, 3 Labels, original TTL: 14400 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






Status: Good. NoData-Proof required and found.



Zone: www.hop-ict.nl

www.hop-ict.nl
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "p3jbvb62e77l5cr2h1tc1g37g3qiln0t" between the hashed NSEC3-owner "jcplgk3cflc94g63tlonqrc12ih8attq" and the hashed NextOwner "srdc707os9hh13tmc746micrjmt7g0i0". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: TXT, RRSIG Validated: RRSIG-Owner jcplgk3cflc94g63tlonqrc12ih8attq.hop-ict.nl., Algorithm: 13, 3 Labels, original TTL: 14400 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "p3jbvb62e77l5cr2h1tc1g37g3qiln0t" between the hashed NSEC3-owner "jcplgk3cflc94g63tlonqrc12ih8attq" and the hashed NextOwner "srdc707os9hh13tmc746micrjmt7g0i0". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: TXT, RRSIG Validated: RRSIG-Owner jcplgk3cflc94g63tlonqrc12ih8attq.hop-ict.nl., Algorithm: 8, 3 Labels, original TTL: 14400 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46959, Signer-Name: hop-ict.nl






RRSIG Type 1 validates the A - Result: 212.114.110.201
Validated: RRSIG-Owner www.hop-ict.nl., Algorithm: 13, 3 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






RRSIG Type 1 validates the A - Result: 212.114.110.201
Validated: RRSIG-Owner www.hop-ict.nl., Algorithm: 13, 3 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






RRSIG Type 28 validates the AAAA - Result: 2001:07B8:060C:0001:0004:0047:00A1:0001
Validated: RRSIG-Owner www.hop-ict.nl., Algorithm: 13, 3 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






RRSIG Type 28 validates the AAAA - Result: 2001:07B8:060C:0001:0004:0047:00A1:0001
Validated: RRSIG-Owner www.hop-ict.nl., Algorithm: 13, 3 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






RRSIG Type 52 validates the TLSA - Result (_443._tcp.www.hop-ict.nl): _443._tcp.www.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 _443._tcp.www.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a
Validated: RRSIG-Owner _443._tcp.www.hop-ict.nl., Algorithm: 13, 5 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






RRSIG Type 52 validates the TLSA - Result (_443._tcp.www.hop-ict.nl): _443._tcp.www.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 _443._tcp.www.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a
Validated: RRSIG-Owner _443._tcp.www.hop-ict.nl., Algorithm: 13, 5 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






RRSIG Type 1 validates the A - Result: 212.114.110.201
Validated: RRSIG-Owner www.hop-ict.nl., Algorithm: 8, 3 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46959, Signer-Name: hop-ict.nl






RRSIG Type 1 validates the A - Result: 212.114.110.201
Validated: RRSIG-Owner www.hop-ict.nl., Algorithm: 8, 3 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46959, Signer-Name: hop-ict.nl






RRSIG Type 28 validates the AAAA - Result: 2001:07B8:060C:0001:0004:0047:00A1:0001
Validated: RRSIG-Owner www.hop-ict.nl., Algorithm: 8, 3 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46959, Signer-Name: hop-ict.nl






RRSIG Type 28 validates the AAAA - Result: 2001:07B8:060C:0001:0004:0047:00A1:0001
Validated: RRSIG-Owner www.hop-ict.nl., Algorithm: 8, 3 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46959, Signer-Name: hop-ict.nl






RRSIG Type 52 validates the TLSA - Result (_443._tcp.www.hop-ict.nl): _443._tcp.www.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 _443._tcp.www.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a
Validated: RRSIG-Owner _443._tcp.www.hop-ict.nl., Algorithm: 8, 5 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46959, Signer-Name: hop-ict.nl






RRSIG Type 52 validates the TLSA - Result (_443._tcp.www.hop-ict.nl): _443._tcp.www.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 _443._tcp.www.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a
Validated: RRSIG-Owner _443._tcp.www.hop-ict.nl., Algorithm: 8, 5 Labels, original TTL: 1440 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46959, Signer-Name: hop-ict.nl






CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "p3jbvb62e77l5cr2h1tc1g37g3qiln0t" between the hashed NSEC3-owner "jcplgk3cflc94g63tlonqrc12ih8attq" and the hashed NextOwner "srdc707os9hh13tmc746micrjmt7g0i0". So the zone confirmes the not-existence of that CNAME RR.
Bitmap: TXT, RRSIG Validated: RRSIG-Owner jcplgk3cflc94g63tlonqrc12ih8attq.hop-ict.nl., Algorithm: 13, 3 Labels, original TTL: 14400 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






Status: Fatal / bogus. NoError+NoDataResult sent, the answer says, the query name exists, the NSEC3 covers the Query Name, but there are not enough informations about wildcards: NoError - there must be a confirmed wildcard expansion to create the query name. Recalculate the zone or update the name server software. Or there is a Man in the middle, who has removed one of the required NSEC3-Records, so DNSSEC works.






TXT-Query sends a valid NSEC3 RR as result with the hashed query name "p3jbvb62e77l5cr2h1tc1g37g3qiln0t" between the hashed NSEC3-owner "jcplgk3cflc94g63tlonqrc12ih8attq" and the hashed NextOwner "srdc707os9hh13tmc746micrjmt7g0i0". So the zone confirmes the not-existence of that TXT RR.
Bitmap: TXT, RRSIG Validated: RRSIG-Owner jcplgk3cflc94g63tlonqrc12ih8attq.hop-ict.nl., Algorithm: 13, 3 Labels, original TTL: 14400 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






Status: Fatal / bogus. NoError+NoDataResult sent, the answer says, the query name exists, the NSEC3 covers the Query Name, but there are not enough informations about wildcards: NoError - there must be a confirmed wildcard expansion to create the query name. Recalculate the zone or update the name server software. Or there is a Man in the middle, who has removed one of the required NSEC3-Records, so DNSSEC works.






CAA-Query sends a valid NSEC3 RR as result with the hashed query name "p3jbvb62e77l5cr2h1tc1g37g3qiln0t" between the hashed NSEC3-owner "jcplgk3cflc94g63tlonqrc12ih8attq" and the hashed NextOwner "srdc707os9hh13tmc746micrjmt7g0i0". So the zone confirmes the not-existence of that CAA RR.
Bitmap: TXT, RRSIG Validated: RRSIG-Owner jcplgk3cflc94g63tlonqrc12ih8attq.hop-ict.nl., Algorithm: 13, 3 Labels, original TTL: 14400 sec, Signature-expiration: 08.08.2024, 00:00:00 +, Signature-Inception: 18.07.2024, 00:00:00 +, KeyTag 46458, Signer-Name: hop-ict.nl






Status: Fatal / bogus. NoError+NoDataResult sent, the answer says, the query name exists, the NSEC3 covers the Query Name, but there are not enough informations about wildcards: NoError - there must be a confirmed wildcard expansion to create the query name. Recalculate the zone or update the name server software. Or there is a Man in the middle, who has removed one of the required NSEC3-Records, so DNSSEC works.

 

3. Name Servers

DomainNameserverNS-IP
www.hop-ict.nl
  dns1.hosted.nl / dns1.whitelabelsolutions.nl

hop-ict.nl
  dns1.hosted.nl / dns1.whitelabelsolutions.nl
91.230.244.50
Zevenaar/Gelderland/The Netherlands (NL) - Triple IT Group Network


 
2001:7b8:60c:1:4:47:10:1
Ede/Gelderland/The Netherlands (NL) - BIT


  dns2.hosted.nl / dns2.whitelabelsolutions.nl
185.69.100.202
Lelystad/Flevoland/The Netherlands (NL) - ArnixBV


 
2a01:a680:a1:12:1:a:0:201
Amsterdam/North Holland/The Netherlands (NL) - Vertixo BV


  dns3.hosted.nl / dns3.hosted.nl
217.18.64.10
Amsterdam/North Holland/The Netherlands (NL) - Infopact Netwerkdiensten B.V.


 
2a00:19c0:a064:10::1
Amsterdam/North Holland/The Netherlands (NL) - Infopact Netwerkdiensten B.V.

nl
  ns1.dns.nl / eqx-fr-ns01-6194


  ns3.dns.nl / tld-all-ffm1@53024


  ns4.dns.nl / FRA1

 

4. SOA-Entries


Domain:nl
Zone-Name:nl
Primary:ns1.dns.nl
Mail:hostmaster.domain-registry.nl
Serial:2024073137
Refresh:3600
Retry:600
Expire:2419200
TTL:600
num Entries:3


Domain:hop-ict.nl
Zone-Name:hop-ict.nl
Primary:dns1.hosted.nl
Mail:support.hosted.nl
Serial:2024075948
Refresh:3600
Retry:3600
Expire:604800
TTL:14400
num Entries:6


Domain:www.hop-ict.nl
Zone-Name:hop-ict.nl
Primary:dns1.hosted.nl
Mail:support.hosted.nl
Serial:2024075948
Refresh:3600
Retry:3600
Expire:604800
TTL:14400
num Entries:1


5. Screenshots

Startaddress: https://www.hopict.nl/, address used: https://www.hopict.nl/, Screenshot created 2024-07-31 21:03:34 +00:0

 

Mobil (412px x 732px)

 

1085 milliseconds

 

Screenshot mobile - https://www.hopict.nl/
Mobil + Landscape (732px x 412px)

 

1090 milliseconds

 

Screenshot mobile landscape - https://www.hopict.nl/
Screen (1280px x 1680px)

 

1203 milliseconds

 

Screenshot Desktop - https://www.hopict.nl/

 

Mobile- and other Chrome-Checks


widthheight
visual Viewport396732
content Size3961887

 

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://hop-ict.nl/
212.114.110.201
301
https://hop-ict.nl/
Html is minified: 109.46 %
0.063
A
Server: nginx
Date: Wed, 31 Jul 2024 18:54:39 GMT
Connection: close
Location: https://hop-ict.nl/
Content-Type: text/html
Content-Length: 162

• http://hop-ict.nl/
2001:7b8:60c:1:4:47:a1:1
301
https://hop-ict.nl/
Html is minified: 109.46 %
0.060
A
Server: nginx
Date: Wed, 31 Jul 2024 18:54:39 GMT
Connection: close
Location: https://hop-ict.nl/
Content-Type: text/html
Content-Length: 162

• http://www.hop-ict.nl/
212.114.110.201
301
https://www.hop-ict.nl/
Html is minified: 109.46 %
0.060
A
Server: nginx
Date: Wed, 31 Jul 2024 18:54:39 GMT
Connection: close
Location: https://www.hop-ict.nl/
Content-Type: text/html
Content-Length: 162

• http://www.hop-ict.nl/
2001:7b8:60c:1:4:47:a1:1
301
https://www.hop-ict.nl/
Html is minified: 109.46 %
0.060
A
Server: nginx
Date: Wed, 31 Jul 2024 18:54:39 GMT
Connection: close
Location: https://www.hop-ict.nl/
Content-Type: text/html
Content-Length: 162

• https://hop-ict.nl/
212.114.110.201
302
https://www.hopict.nl/

3.376
A
Server: nginx
Date: Wed, 31 Jul 2024 18:54:39 GMT
Transfer-Encoding: chunked
Connection: close
Location: https://www.hopict.nl/
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Referrer-Policy: same-origin
Permissions-Policy: interest-cohort=()
Content-Security-Policy: default-src 'none'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'none';
Access-Control-Allow-Origin: hop-ict.nl
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Resource-Policy: same-origin
Public-Key-Pins: pin-sha256="A1H22GIJ4+ioDNRuhpDt4l/Lg4W0O3hwdlyA/DdDWoo="; pin-sha256="bdrBhpj38ffhxpubzkINl0rG+UyossdhcBYj+Zx2fcc="; pin-sha256="C5+lpZ7tcVwmwQIMcRtPbsQtWLABXhQzejna0wHFr8M="; pin-sha256="YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg="; max-age=31536000; includeSubdomains
Content-Type: text/html; charset=UTF-8

• https://hop-ict.nl/
2001:7b8:60c:1:4:47:a1:1
302
https://www.hopict.nl/

3.240
A
Server: nginx
Date: Wed, 31 Jul 2024 18:54:44 GMT
Transfer-Encoding: chunked
Connection: close
Location: https://www.hopict.nl/
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Referrer-Policy: same-origin
Permissions-Policy: interest-cohort=()
Content-Security-Policy: default-src 'none'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'none';
Access-Control-Allow-Origin: hop-ict.nl
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Resource-Policy: same-origin
Public-Key-Pins: pin-sha256="A1H22GIJ4+ioDNRuhpDt4l/Lg4W0O3hwdlyA/DdDWoo="; pin-sha256="bdrBhpj38ffhxpubzkINl0rG+UyossdhcBYj+Zx2fcc="; pin-sha256="C5+lpZ7tcVwmwQIMcRtPbsQtWLABXhQzejna0wHFr8M="; pin-sha256="YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg="; max-age=31536000; includeSubdomains
Content-Type: text/html; charset=UTF-8

• https://www.hop-ict.nl/
212.114.110.201
302
https://www.hopict.nl/

3.373
A
Server: nginx
Date: Wed, 31 Jul 2024 18:54:48 GMT
Transfer-Encoding: chunked
Connection: close
Location: https://www.hopict.nl/
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Referrer-Policy: same-origin
Permissions-Policy: interest-cohort=()
Content-Security-Policy: default-src 'none'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'none';
Access-Control-Allow-Origin: hop-ict.nl
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Resource-Policy: same-origin
Public-Key-Pins: pin-sha256="A1H22GIJ4+ioDNRuhpDt4l/Lg4W0O3hwdlyA/DdDWoo="; pin-sha256="bdrBhpj38ffhxpubzkINl0rG+UyossdhcBYj+Zx2fcc="; pin-sha256="C5+lpZ7tcVwmwQIMcRtPbsQtWLABXhQzejna0wHFr8M="; pin-sha256="YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg="; max-age=31536000; includeSubdomains
Content-Type: text/html; charset=UTF-8

• https://www.hop-ict.nl/
2001:7b8:60c:1:4:47:a1:1
302
https://www.hopict.nl/

3.207
A
Server: nginx
Date: Wed, 31 Jul 2024 18:54:52 GMT
Transfer-Encoding: chunked
Connection: close
Location: https://www.hopict.nl/
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Referrer-Policy: same-origin
Permissions-Policy: interest-cohort=()
Content-Security-Policy: default-src 'none'; script-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'none';
Access-Control-Allow-Origin: hop-ict.nl
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Resource-Policy: same-origin
Public-Key-Pins: pin-sha256="A1H22GIJ4+ioDNRuhpDt4l/Lg4W0O3hwdlyA/DdDWoo="; pin-sha256="bdrBhpj38ffhxpubzkINl0rG+UyossdhcBYj+Zx2fcc="; pin-sha256="C5+lpZ7tcVwmwQIMcRtPbsQtWLABXhQzejna0wHFr8M="; pin-sha256="YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg="; max-age=31536000; includeSubdomains
Content-Type: text/html; charset=UTF-8

• https://mta-sts.hop-ict.nl/.well-known/mta-sts.txt
212.114.110.201
200



A
0 None CN=hopict.nl
Server: nginx
Date: Wed, 31 Jul 2024 18:55:24 GMT
Connection: close
ETag: "657821ce-61"
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Referrer-Policy: same-origin
Permissions-Policy: interest-cohort=()
Content-Security-Policy: default-src 'none'; script-src 'none'; form-action 'none'; frame-ancestors 'none'; base-uri 'none';
Public-Key-Pins: pin-sha256="A1H22GIJ4+ioDNRuhpDt4l/Lg4W0O3hwdlyA/DdDWoo="; pin-sha256="bdrBhpj38ffhxpubzkINl0rG+UyossdhcBYj+Zx2fcc="; pin-sha256="C5+lpZ7tcVwmwQIMcRtPbsQtWLABXhQzejna0wHFr8M=";max-age=31536000; pin-sha256="YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg="; includeSubdomains
Accept-Ranges: bytes
Content-Type: text/plain
Content-Length: 97
Last-Modified: Tue, 12 Dec 2023 09:03:10 GMT

• https://mta-sts.hop-ict.nl/.well-known/mta-sts.txt
2001:7b8:60c:1:4:47:a1:1
200



A
0 None CN=hopict.nl
Server: nginx
Date: Wed, 31 Jul 2024 18:55:28 GMT
Connection: close
ETag: "657821ce-61"
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Referrer-Policy: same-origin
Permissions-Policy: interest-cohort=()
Content-Security-Policy: default-src 'none'; script-src 'none'; form-action 'none'; frame-ancestors 'none'; base-uri 'none';
Public-Key-Pins: pin-sha256="A1H22GIJ4+ioDNRuhpDt4l/Lg4W0O3hwdlyA/DdDWoo="; pin-sha256="bdrBhpj38ffhxpubzkINl0rG+UyossdhcBYj+Zx2fcc="; pin-sha256="C5+lpZ7tcVwmwQIMcRtPbsQtWLABXhQzejna0wHFr8M=";max-age=31536000; pin-sha256="YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg="; includeSubdomains
Accept-Ranges: bytes
Content-Type: text/plain
Content-Length: 97
Last-Modified: Tue, 12 Dec 2023 09:03:10 GMT

• https://www.hopict.nl/
No Compression used - 16702 / 90872 - 18.38 % possible
Inline-JavaScript (∑/total): 8/3598 Inline-CSS (∑/total): 8/74415
200

Html is minified: 794.06 %
Other inline scripts (∑/total): 5/4852
5.597
A
Server: nginx
Date: Wed, 31 Jul 2024 18:55:06 GMT
Transfer-Encoding: chunked
Connection: close
Link: <https://www.hopict.nl/wp-json/>; rel="https://api.w.org/"
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Referrer-Policy: same-origin
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Content-Security-Policy: default-src 'unsafe-inline' 'self' https://hopict.nl; script-src 'unsafe-inline'; worker-src https://hopict.nl/; form-action 'self'; frame-ancestors 'self'; base-uri 'self'; report-uri https://7b4kjwj8.uriports.com/reports/report; report-to default
Access-Control-Allow-Origin: hopict.nl
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Resource-Policy: same-origin
Public-Key-Pins: pin-sha256="A1H22GIJ4+ioDNRuhpDt4l/Lg4W0O3hwdlyA/DdDWoo="; pin-sha256="bdrBhpj38ffhxpubzkINl0rG+UyossdhcBYj+Zx2fcc="; pin-sha256="C5+lpZ7tcVwmwQIMcRtPbsQtWLABXhQzejna0wHFr8M="; pin-sha256="YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg="; max-age=31536000; includeSubdomains
Content-Type: text/html; charset=UTF-8

• http://hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
212.114.110.201
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
301
https://hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 109.46 %
Other inline scripts (∑/total): 0/0
0.060
A
Visible Content:
Server: nginx
Date: Wed, 31 Jul 2024 18:54:56 GMT
Connection: close
Location: https://hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Content-Type: text/html
Content-Length: 162

• http://hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2001:7b8:60c:1:4:47:a1:1
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
301
https://hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 109.46 %
Other inline scripts (∑/total): 0/0
0.060
A
Visible Content:
Server: nginx
Date: Wed, 31 Jul 2024 18:54:56 GMT
Connection: close
Location: https://hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Content-Type: text/html
Content-Length: 162

• http://www.hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
212.114.110.201
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
301
https://www.hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 109.46 %
Other inline scripts (∑/total): 0/0
0.057
A
Visible Content:
Server: nginx
Date: Wed, 31 Jul 2024 18:54:56 GMT
Connection: close
Location: https://www.hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Content-Type: text/html
Content-Length: 162

• http://www.hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2001:7b8:60c:1:4:47:a1:1
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
301
https://www.hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 109.46 %
Other inline scripts (∑/total): 0/0
0.060
A
Visible Content:
Server: nginx
Date: Wed, 31 Jul 2024 18:54:56 GMT
Connection: close
Location: https://www.hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Content-Type: text/html
Content-Length: 162

• https://hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 110.61 %
Other inline scripts (∑/total): 0/0
3.350
A
Not Found
Visible Content:
Server: nginx
Date: Wed, 31 Jul 2024 18:55:11 GMT
Connection: close
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Permissions-Policy: interest-cohort=()
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Resource-Policy: same-origin
Content-Type: text/html
Content-Length: 146

• https://www.hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 110.61 %
Other inline scripts (∑/total): 0/0
3.347
A
Not Found
Visible Content:
Server: nginx
Date: Wed, 31 Jul 2024 18:55:15 GMT
Connection: close
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Permissions-Policy: interest-cohort=()
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Resource-Policy: same-origin
Content-Type: text/html
Content-Length: 146

• https://212.114.110.201/
212.114.110.201 No Compression used - 161 / 168 - 95.83 % possible
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
200

Html is minified: 129.23 %
Other inline scripts (∑/total): 0/0
2.347
N
Certificate error: RemoteCertificateNameMismatch
Server: nginx
Date: Wed, 31 Jul 2024 18:54:57 GMT
Connection: close
ETag: "668d2d61-a8"
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Referrer-Policy: same-origin
Permissions-Policy: interest-cohort=()
Content-Security-Policy: default-src 'none'; script-src 'none'; form-action 'none'; frame-ancestors 'none'; base-uri 'none';
Public-Key-Pins: pin-sha256="du73BaFf/uQ0x93Sq16wO+kOr1Rr6RX59Aj37g0szRM="; pin-sha256="NYbU7PBwV4y9J67c4guWTki8FJ+uudrXL0a4V4aRcrg="; pin-sha256="C5+lpZ7tcVwmwQIMcRtPbsQtWLABXhQzejna0wHFr8M=";max-age=31536000; pin-sha256="YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg="; includeSubdomains
Accept-Ranges: bytes
Content-Type: text/html
Content-Length: 168
Last-Modified: Tue, 09 Jul 2024 12:30:25 GMT

• https://[2001:07b8:060c:0001:0004:0047:00a1:0001]/
2001:7b8:60c:1:4:47:a1:1 No Compression used - 161 / 168 - 95.83 % possible
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
200

Html is minified: 129.23 %
Other inline scripts (∑/total): 0/0
2.400
N
Certificate error: RemoteCertificateNameMismatch
Server: nginx
Date: Wed, 31 Jul 2024 18:55:00 GMT
Connection: close
ETag: "668d2d61-a8"
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Referrer-Policy: same-origin
Permissions-Policy: interest-cohort=()
Content-Security-Policy: default-src 'none'; script-src 'none'; form-action 'none'; frame-ancestors 'none'; base-uri 'none';
Public-Key-Pins: pin-sha256="du73BaFf/uQ0x93Sq16wO+kOr1Rr6RX59Aj37g0szRM="; pin-sha256="NYbU7PBwV4y9J67c4guWTki8FJ+uudrXL0a4V4aRcrg="; pin-sha256="C5+lpZ7tcVwmwQIMcRtPbsQtWLABXhQzejna0wHFr8M=";max-age=31536000; pin-sha256="YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg="; includeSubdomains
Accept-Ranges: bytes
Content-Type: text/html
Content-Length: 168
Last-Modified: Tue, 09 Jul 2024 12:30:25 GMT

 

7. Comments


1. General Results, most used to calculate the result

Aname "hop-ict.nl" is domain, public suffix is ".nl", top-level-domain is ".nl", top-level-domain-type is "country-code", Country is Netherlands (the), tld-manager is "SIDN (Stichting Internet Domeinregistratie Nederland)", num .nl-domains preloaded: 5322 (complete: 245733)
AGood: All ip addresses are public addresses
AGood: Minimal 2 ip addresses per domain name found: hop-ict.nl has 2 different ip addresses (authoritative).
AGood: Minimal 2 ip addresses per domain name found: www.hop-ict.nl has 2 different ip addresses (authoritative).
AGood: Ipv4 and Ipv6 addresses per domain name found: hop-ict.nl has 1 ipv4, 1 ipv6 addresses
AGood: Ipv4 and Ipv6 addresses per domain name found: www.hop-ict.nl has 1 ipv4, 1 ipv6 addresses
AGood: No asked Authoritative Name Server had a timeout
Ahttps://hop-ict.nl/ 212.114.110.201


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a confirms the Certificate with the same value
Ahttps://hop-ict.nl/ 212.114.110.201


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 confirms the Certificate with the same value
Ahttps://hop-ict.nl/ 212.114.110.201


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a confirms the Certificate with the same value
Ahttps://hop-ict.nl/ 212.114.110.201


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 confirms the Certificate with the same value
Ahttps://hop-ict.nl/ 2001:7b8:60c:1:4:47:a1:1


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 confirms the Certificate with the same value
Ahttps://hop-ict.nl/ 2001:7b8:60c:1:4:47:a1:1


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a confirms the Certificate with the same value
Ahttps://hop-ict.nl/ 2001:7b8:60c:1:4:47:a1:1


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 confirms the Certificate with the same value
Ahttps://hop-ict.nl/ 2001:7b8:60c:1:4:47:a1:1


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a confirms the Certificate with the same value
Ahttps://hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a confirms the Certificate with the same value
Ahttps://hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 confirms the Certificate with the same value
Ahttps://hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a confirms the Certificate with the same value
Ahttps://hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 confirms the Certificate with the same value
Ahttps://212.114.110.201/ 212.114.110.201


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a confirms the Certificate with the same value
Ahttps://212.114.110.201/ 212.114.110.201


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 confirms the Certificate with the same value
Ahttps://212.114.110.201/ 212.114.110.201


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a confirms the Certificate with the same value
Ahttps://212.114.110.201/ 212.114.110.201


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 confirms the Certificate with the same value
Ahttps://[2001:07b8:060c:0001:0004:0047:00a1:0001]/ 2001:7b8:60c:1:4:47:a1:1


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 confirms the Certificate with the same value
Ahttps://[2001:07b8:060c:0001:0004:0047:00a1:0001]/ 2001:7b8:60c:1:4:47:a1:1


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a confirms the Certificate with the same value
Ahttps://[2001:07b8:060c:0001:0004:0047:00a1:0001]/ 2001:7b8:60c:1:4:47:a1:1


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 confirms the Certificate with the same value
Ahttps://[2001:07b8:060c:0001:0004:0047:00a1:0001]/ 2001:7b8:60c:1:4:47:a1:1


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a confirms the Certificate with the same value
Ahttps://mta-sts.hop-ict.nl/.well-known/mta-sts.txt 212.114.110.201


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 confirms the Certificate with the same value
Ahttps://mta-sts.hop-ict.nl/.well-known/mta-sts.txt 212.114.110.201


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a confirms the Certificate with the same value
Ahttps://mta-sts.hop-ict.nl/.well-known/mta-sts.txt 212.114.110.201


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 confirms the Certificate with the same value
Ahttps://mta-sts.hop-ict.nl/.well-known/mta-sts.txt 212.114.110.201


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a confirms the Certificate with the same value
Ahttps://mta-sts.hop-ict.nl/.well-known/mta-sts.txt 2001:7b8:60c:1:4:47:a1:1


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a confirms the Certificate with the same value
Ahttps://mta-sts.hop-ict.nl/.well-known/mta-sts.txt 2001:7b8:60c:1:4:47:a1:1


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 confirms the Certificate with the same value
Ahttps://mta-sts.hop-ict.nl/.well-known/mta-sts.txt 2001:7b8:60c:1:4:47:a1:1


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a confirms the Certificate with the same value
Ahttps://mta-sts.hop-ict.nl/.well-known/mta-sts.txt 2001:7b8:60c:1:4:47:a1:1


Good: Valid DANE - entry found: signed Data _443._tcp.hop-ict.nl: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 confirms the Certificate with the same value
Ahttps://www.hop-ict.nl/ 212.114.110.201
302
https://www.hopict.nl/
Correct redirect https to https
Ahttps://www.hop-ict.nl/ 2001:7b8:60c:1:4:47:a1:1
302
https://www.hopict.nl/
Correct redirect https to https
AGood: destination is https
AGood - only one version with Http-Status 200
AGood: one preferred version: www is preferred
AGood: No cookie sent via http.
AGood: every https has a Strict Transport Security Header
AGood: HSTS max-age is long enough, 31536000 seconds = 365 days
AGood: HSTS has includeSubdomains - directive
AGood: HSTS has preload directive
AExcellent: Domain is in the Google-Preload-List
AExcellent: Domain is in the Mozilla/Firefox-Preload-List
AHSTS-Preload-Status: Preloaded. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):1 complete Content-Type - header (7 urls)
https://hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de


Url with incomplete Content-Type - header - missing charset
https://www.hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de


Url with incomplete Content-Type - header - missing charset
https://212.114.110.201/ 212.114.110.201


Url with incomplete Content-Type - header - missing charset
https://[2001:07b8:060c:0001:0004:0047:00a1:0001]/ 2001:7b8:60c:1:4:47:a1:1


Url with incomplete Content-Type - header - missing charset
https://mta-sts.hop-ict.nl/.well-known/mta-sts.txt 212.114.110.201


Url with incomplete Content-Type - header - missing charset
https://mta-sts.hop-ict.nl/.well-known/mta-sts.txt 2001:7b8:60c:1:4:47:a1:1


Url with incomplete Content-Type - header - missing charset
Ahttp://hop-ict.nl/ 212.114.110.201
301
https://hop-ict.nl/
Correct redirect http - https with the same domain name
Ahttp://hop-ict.nl/ 2001:7b8:60c:1:4:47:a1:1
301
https://hop-ict.nl/
Correct redirect http - https with the same domain name
Ahttp://www.hop-ict.nl/ 212.114.110.201
301
https://www.hop-ict.nl/
Correct redirect http - https with the same domain name
Ahttp://www.hop-ict.nl/ 2001:7b8:60c:1:4:47:a1:1
301
https://www.hop-ict.nl/
Correct redirect http - https with the same domain name
Nhttps://212.114.110.201/ 212.114.110.201
200

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://[2001:07b8:060c:0001:0004:0047:00a1:0001]/ 2001:7b8:60c:1:4:47:a1:1
200

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
AGood: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain hop-ict.nl, 2 ip addresses.
AGood: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain www.hop-ict.nl, 2 ip addresses.
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain hop-ict.nl, 2 ip addresses.
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain www.hop-ict.nl, 2 ip addresses.
AGood: _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Domainname: _mta-sts.hop-ict.nl
AGood: _mta-sts TXT record is valid.
AGood: Subdomain mta-sts found: Subdomain-name: mta-sts.hopict.nl, ip : 212.114.110.201
AGood: Subdomain mta-sts found: Subdomain-name: mta-sts.hopict.nl, ip : 2001:7b8:60c:1:4:47:a1:1
AGood: Certificate of subdomain is valid. mta-sts.hop-ict.nl, ip : 212.114.110.201
AGood: Certificate of subdomain is valid. mta-sts.hop-ict.nl, ip : 2001:7b8:60c:1:4:47:a1:1
AGood: /.well-known/mta-sts.txt with http status 200 found. Complete path: https://mta-sts.hop-ict.nl/.well-known/mta-sts.txt - ip : 212.114.110.201
AGood: /.well-known/mta-sts.txt with http status 200 found. Complete path: https://mta-sts.hop-ict.nl/.well-known/mta-sts.txt - ip : 2001:7b8:60c:1:4:47:a1:1
AGood: mta-sts.txt has the required names "version", "mode", "max_age". mta-sts.hopict.nl, ip : 2001:7b8:60c:1:4:47:a1:1
AGood: mta-sts.txt has the required names "version", "mode", "max_age". mta-sts.hopict.nl, ip : 212.114.110.201
AGood: Minimal one mx definition found. mta-sts.hopict.nl, ip : 2001:7b8:60c:1:4:47:a1:1
AGood: Minimal one mx definition found. mta-sts.hopict.nl, ip : 212.114.110.201
AExcellent: Complete and valid MTA-STS found!

2. Header-Checks

Awww.hopict.nl
Content-Security-Policy
Ok: Header without syntax errors found: default-src 'unsafe-inline' 'self' https://hopict.nl; script-src 'unsafe-inline'; worker-src https://hopict.nl/; form-action 'self'; frame-ancestors 'self'; base-uri 'self'; report-uri https://7b4kjwj8.uriports.com/reports/report; report-to default
B

Info: Header-Element is deprecated. report-uri https://7b4kjwj8.uriports.com/reports/report
F

Bad: default-src with 'unsafe-inline' or 'unsave-eval'. That's dangerous, don't use it. script-src
A

Good: form-action directive found. That reduces the risk sending data to unwanted domains. form-action is a navigation-directive, so default-src isn't used.
A

Good: frame-ancestors directive found. That limits pages who are allowed to use this page in a frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
A

Good: base-uri directive found. That limits the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
E

Critical: No object-src defined, the default-src used as fallback allows too much. object / embed / applet shouldn't be able to load these resources.
F

Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
A

Good: script-src without * and a scheme found.
A

Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A

Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
C

Info: default-src and some other fetch directives have the same list of values. Remove the other fetch directive, default-src is used as fallback. Directives to remove: default
C

Info: default-src and some other fetch directives have the same list of values. Remove the other fetch directive, default-src is used as fallback. Directives to remove: script-src
A
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Referrer-Policy
Ok: Header without syntax errors found: same-origin
A
Permissions-Policy
Ok: Header without syntax errors found: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
A
X-Frame-Options
Ok: Header without syntax errors found: DENY
B

Info: Header is deprecated. May not longer work in modern browsers. DENY. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
X-Xss-Protection
Ok: Header without syntax errors found: 0
B

Info: Header is deprecated. May not longer work in modern browsers. 0
A
Cross-Origin-Embedder-Policy
Ok: Header without syntax errors found: require-corp
A
Cross-Origin-Opener-Policy
Ok: Header without syntax errors found: same-origin
A
Cross-Origin-Resource-Policy
Ok: Header without syntax errors found: same-origin

3. DNS- and NameServer - Checks

AInfo:: 2 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 3 Name Servers.
AInfo:: 2 Queries complete, 2 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
AGood: Some ip addresses of name servers found with the minimum of two DNS Queries. One to find the TLD-Zone, one to ask the TLD-Zone.dns1.hosted.nl (2001:7b8:60c:1:4:47:10:1, 91.230.244.50), dns2.hosted.nl (185.69.100.202, 2a01:a680:a1:12:1:a:0:201), dns3.hosted.nl (217.18.64.10, 2a00:19c0:a064:10::1)
AGood (1 - 3.0):: An average of 0.7 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 3 different Name Servers found: dns1.hosted.nl, dns2.hosted.nl, dns3.hosted.nl, 3 Name Servers included in Delegation: dns1.hosted.nl, dns2.hosted.nl, dns3.hosted.nl, 3 Name Servers included in 1 Zone definitions: dns1.hosted.nl, dns2.hosted.nl, dns3.hosted.nl, 1 Name Servers listed in SOA.Primary: dns1.hosted.nl.
AGood: Only one SOA.Primary Name Server found.: dns1.hosted.nl.
AGood: SOA.Primary Name Server included in the delegation set.: dns1.hosted.nl.
AGood: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: dns1.hosted.nl, dns2.hosted.nl, dns3.hosted.nl
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AGood: Minimal 2 different name servers (public suffix and public ip address) found: 3 different Name Servers found
AGood: All name servers have ipv4- and ipv6-addresses.: 3 different Name Servers found
Warning: All Name Servers have the same Top Level Domain / Public Suffix. If there is a problem with that Top Level Domain, your domain may be affected. Better: Use Name Servers with different top level domains.: 3 Name Servers, 1 Top Level Domain: nl
Warning: All Name Servers have the same domain name. If there is a problem with that domain name (or with the name servers of that domain name), your domain may be affected. Better: Use Name Servers with different domain names / different top level domains.: Only one domain name used: hosted.nl
Warning: All Name Servers from the same Country / IP location.: 3 Name Servers, 1 Countries: NL
AInfo: Ipv4-Subnet-list: 3 Name Servers, 3 different subnets (first Byte): 185., 217., 91., 3 different subnets (first two Bytes): 185.69., 217.18., 91.230., 3 different subnets (first three Bytes): 185.69.100., 217.18.64., 91.230.244.
AExcellent: Every Name Server IPv4-address starts with an unique Byte.
AInfo: IPv6-Subnet-list: 3 Name Servers with IPv6, 3 different subnets (first block): 2001:, 2a00:, 2a01:, 3 different subnets (first two blocks): 2001:07b8:, 2a00:19c0:, 2a01:a680:, 3 different subnets (first three blocks): 2001:07b8:060c:, 2a00:19c0:a064:, 2a01:a680:00a1:, 3 different subnets (first four blocks): 2001:07b8:060c:0001:, 2a00:19c0:a064:0010:, 2a01:a680:00a1:0012:
AExcellent: Every Name Server IPv6-address starts with an unique Hex-block
AGood: Nameserver supports TCP connections: 6 good Nameserver
AGood: Nameserver supports Echo Capitalization: 6 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 6 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 6 good Nameserver
Nameserver doesn't pass all EDNS-Checks: ns4.dns.nl: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok (FRA1). COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
AGood: All SOA have the same Serial Number
AGood: CAA entries found, creating certificate is limited: letsencrypt.org is allowed to create certificates

4. Content- and Performance-critical Checks

AGood: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
https://www.hopict.nl/
200

Warning: https result with status 200 and size greater then 1024 Bytes without Compression found. Add Compression support (gzip, deflate, br - these are checked) so the html content is compressed.
https://www.hopict.nl/
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://www.hopict.nl/
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://212.114.110.201/ 212.114.110.201
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://[2001:07b8:060c:0001:0004:0047:00a1:0001]/ 2001:7b8:60c:1:4:47:a1:1
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
AGood: Every https connection via port 443 supports the http/2 protocol via ALPN.
https://www.hopict.nl/
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 4 script elements without defer/async.
Warning: CSS / JavaScript found without Compression. Compress these ressources, gzip, deflate, br are checked. 9 external CSS / JavaScript files without GZip found - 0 with GZip, 9 complete
AGood: All images with internal compression not compressed. Some Images (.png, .jpg, .jpeg, .webp, .gif) are already compressed, so an additional compression isn't helpful. 5 images (type image/png, image/jpg) found without additional GZip. Not required because these images are already compressed
AGood: All CSS / JavaScript files are sent with a long Cache-Control header (minimum 7 days). So the browser can re-use these files, no download is required. 9 external CSS / JavaScript files with long Cache-Control max-age found
Warning: Images with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 1 image files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 0 with Cache-Control max-age too short (minimum 7 days), 6 with Cache-Control long enough, 7 complete.
AGood: All checked attribute values are enclosed in quotation marks (" or ').
AGood: Some img-elements have a valid alt-attribute.: 2 img-elements found, 1 img-elements with correct alt-attributes (defined, not an empty value).
Wrong: img-elements without alt-attribute or empty alt-attribute found. The alt-attribute ("alternative") is required and should describe the img. So Screenreader and search engines are able to use these informations.: 1 img-elements without alt-attribute, 0 img-elements with empty alt-attribute found.
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
https://hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
3.350 seconds
Warning: 404 needs more then one second
https://www.hop-ict.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
3.347 seconds
Warning: 404 needs more then one second
ADuration: 591334 milliseconds, 591.334 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
hop-ict.nl
212.114.110.201
443
ok
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
hop-ict.nl
212.114.110.201
443
ok
Tls12

ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=hopict.nl


2CN=R11, O=Let's Encrypt, C=US


hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
443
ok
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok

hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
443
ok
Tls12

ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=hopict.nl


2CN=R11, O=Let's Encrypt, C=US


www.hopict.nl
www.hopict.nl
443
ok
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok

www.hopict.nl
www.hopict.nl
443
ok
Tls12

ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=hopict.nl


2CN=R11, O=Let's Encrypt, C=US


www.hop-ict.nl
212.114.110.201
443
ok
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok

www.hop-ict.nl
212.114.110.201
443
ok
Tls12

ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=hopict.nl


2CN=R11, O=Let's Encrypt, C=US


www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
443
ok
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok

www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
443
ok
Tls12

ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=hopict.nl


2CN=R11, O=Let's Encrypt, C=US


hop-ict.nl
hop-ict.nl
443
ok
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok

hop-ict.nl
hop-ict.nl
443
ok
Tls12

ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=hopict.nl


2CN=R11, O=Let's Encrypt, C=US


www.hop-ict.nl
www.hop-ict.nl
443
ok
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok

www.hop-ict.nl
www.hop-ict.nl
443
ok
Tls12

ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=hopict.nl


2CN=R11, O=Let's Encrypt, C=US


mta-sts.hop-ict.nl
212.114.110.201
443
ok
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok

mta-sts.hop-ict.nl
212.114.110.201
443
ok
Tls12

ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=hopict.nl


2CN=R11, O=Let's Encrypt, C=US


mta-sts.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
443
ok
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok

mta-sts.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
443
ok
Tls12

ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=hopict.nl


2CN=R11, O=Let's Encrypt, C=US


212.114.110.201
212.114.110.201
443
name does not match
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok

212.114.110.201
212.114.110.201
443
name does not match
Tls12

ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=mta-sts.4x4-experience.nl


2CN=E5, O=Let's Encrypt, C=US


[2001:07b8:060c:0001:0004:0047:00a1:0001]
2001:7b8:60c:1:4:47:a1:1
443
name does not match
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok

[2001:07b8:060c:0001:0004:0047:00a1:0001]
2001:7b8:60c:1:4:47:a1:1
443
name does not match
Tls12

ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=mta-sts.4x4-experience.nl


2CN=E5, O=Let's Encrypt, C=US


hop-ict.nl
212.114.110.201
25
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok

hop-ict.nl
212.114.110.201
25
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok
 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2


hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
25
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok

hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
25
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok
 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2


www.hop-ict.nl
212.114.110.201
25
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok

www.hop-ict.nl
212.114.110.201
25
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok
 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2


www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
25
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok

www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
25
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok
 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

 

9. Certificates

1.
1.
CN=hopict.nl
27.07.2024
25.10.2024
111 days expired
hop-ict.nl, hopict.nl, librenms.hopict.nl, mta-sts.hop-ict.nl, mta-sts.hopict.nl, mx.hopict.nl, mx1.hopict.nl, phpmysql.hopict.nl, www.hop-ict.nl, www.hopict.nl - 10 entries
1.
1.
CN=hopict.nl
27.07.2024

25.10.2024
111 days expired


hop-ict.nl, hopict.nl, librenms.hopict.nl, mta-sts.hop-ict.nl, mta-sts.hopict.nl, mx.hopict.nl, mx1.hopict.nl, phpmysql.hopict.nl, www.hop-ict.nl, www.hopict.nl - 10 entries

KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:03B4B7FF1EDCE025EBBE889319656B3A6791
Thumbprint:3103E66EB3C933313C1BD9151890B4A87221B7BF
SHA256 / Certificate:nhZRQC7vgIx7Oz7Kdc4hWEwG/9TaMUKSZSN+FHqlrFQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a
SHA256 hex / Subject Public Key Information (SPKI):0351f6d86209e3e8a80cd46e8690ede25fcb8385b43b7870765c80fc37435a8a (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://r11.o.lencr.org
OCSP - must staple:yes
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=R11, O=Let's Encrypt, C=US
13.03.2024
13.03.2027
expires in 758 days


2.
CN=R11, O=Let's Encrypt, C=US
13.03.2024

13.03.2027
expires in 758 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:008A7D3E13D62F30EF2386BD29076B34F8
Thumbprint:696DB3AF0DFFC17E65C6A20D925C5A7BD24DEC7E
SHA256 / Certificate:WR6c5shj06B56fq+FHjHM5omshJp3eeVIRNhAkrjGkQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015
04.06.2035
expires in 3763 days


3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015

04.06.2035
expires in 3763 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:008210CFB0D240E3594463E0BB63828B00
Thumbprint:CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




2.
1.
CN=mta-sts.4x4-experience.nl
09.07.2024
07.10.2024
129 days expired
4x4-experience.nl, mta-sts.4x4-experience.nl, www.4x4-experience.nl - 3 entries
2.
1.
CN=mta-sts.4x4-experience.nl
09.07.2024

07.10.2024
129 days expired


4x4-experience.nl, mta-sts.4x4-experience.nl, www.4x4-experience.nl - 3 entries

KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:04FE686C12CA3FB0F72D14D8FA45BEF716C1
Thumbprint:ABF9D5C5893D5A782227C9EAEA562A9EA8F5CFA0
SHA256 / Certificate:iiMuONboTktbfNU80Spad41DlLQC6hNtQqPlg715Mu0=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):76eef705a15ffee434c7ddd2ab5eb03be90eaf546be915f9f408f7ee0d2ccd13
SHA256 hex / Subject Public Key Information (SPKI):76eef705a15ffee434c7ddd2ab5eb03be90eaf546be915f9f408f7ee0d2ccd13 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://e5.o.lencr.org
OCSP - must staple:yes
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)


NotTimeValid: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.


2.
CN=E5, O=Let's Encrypt, C=US
13.03.2024
13.03.2027
expires in 758 days


2.
CN=E5, O=Let's Encrypt, C=US
13.03.2024

13.03.2027
expires in 758 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:SHA256 With RSA-Encryption
Serial Number:00838F6C63CEB1398C6206628315C9FDDE
Thumbprint:5F28D9C589EE4BF31A11B78C72B8D13F079DDC45
SHA256 / Certificate:Xf2zzzGybyPYfAnzoM72QvZAaan7fP4pJwu13A8eFrs=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):3586d4ecf070578cbd27aedce20b964e48bc149faeb9dad72f46b857869172b8
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015
04.06.2035
expires in 3763 days


3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015

04.06.2035
expires in 3763 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:008210CFB0D240E3594463E0BB63828B00
Thumbprint:CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuerlast 7 daysactivenum Certs
CN=R11, O=Let's Encrypt, C=US
0
2
3
CN=E5, O=Let's Encrypt, C=US
0
0
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
9307512893
leaf cert
CN=R11, O=Let's Encrypt, C=US
2025-01-24 08:32:35
2025-04-24 08:32:34
hopict.nl, hop-ict.nl, librenms.hopict.nl, mta-sts.hopict.nl, mta-sts.hop-ict.nl, mx.hopict.nl, mx1.hopict.nl, phpmysql.hopict.nl, www.hopict.nl, www.hop-ict.nl - 10 entries


8749767167
leaf cert
CN=R11, O=Let's Encrypt, C=US
2024-11-25 00:18:03
2025-02-23 00:18:02
hopict.nl, hop-ict.nl, librenms.hopict.nl, mta-sts.hopict.nl, mta-sts.hop-ict.nl, mx.hopict.nl, mx1.hopict.nl, phpmysql.hopict.nl, www.hopict.nl, www.hop-ict.nl - 10 entries


7840098709
leaf cert
CN=E5, O=Let's Encrypt, C=US
2024-07-31 17:26:22
2024-10-29 17:26:21
www.hop-ict.nl - 1 entries


7811011747
leaf cert
CN=R11, O=Let's Encrypt, C=US
2024-07-27 19:21:26
2024-10-25 19:21:25
hopict.nl, hop-ict.nl, librenms.hopict.nl, mta-sts.hopict.nl, mta-sts.hop-ict.nl, mx.hopict.nl, mx1.hopict.nl, phpmysql.hopict.nl, www.hopict.nl, www.hop-ict.nl - 10 entries


 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Issuerlast 7 daysactivenum Certs
CN=R3, O=Let's Encrypt, C=US
0 /0 new
0
3
CN=R11, O=Let's Encrypt, C=US
0
0
1

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
13911800495
precert
CN=R11, O=Let's Encrypt, C=US
2024-07-27 17:21:26
2024-10-25 17:21:25
hopict.nl, hop-ict.nl, librenms.hopict.nl, mta-sts.hopict.nl, mta-sts.hop-ict.nl, mx.hopict.nl, mx1.hopict.nl, phpmysql.hopict.nl, www.hopict.nl, www.hop-ict.nl
10 entries


12866200981
leaf cert
CN=R3, O=Let's Encrypt, C=US
2024-04-26 20:45:48
2024-07-25 20:45:47
hopict.nl, hop-ict.nl, librenms.hopict.nl, mta-sts.hopict.nl, mta-sts.hop-ict.nl, mx.hopict.nl, mx1.hopict.nl, phpmysql.hopict.nl, www.hopict.nl, www.hop-ict.nl
10 entries


12850964023
leaf cert
CN=R3, O=Let's Encrypt, C=US
2024-04-25 14:14:30
2024-07-24 14:14:29
hopict.nl, hop-ict.nl, librenms.hopict.nl, mta-sts.hopict.nl, mta-sts.hop-ict.nl, mx.hopict.nl, mx1.hopict.nl, phpmysql.hopict.nl, www.hopict.nl, www.hop-ict.nl
10 entries


12538170264
leaf cert
CN=R3, O=Let's Encrypt, C=US
2024-03-30 03:52:17
2024-06-28 02:52:16
hopict.nl, hop-ict.nl, librenms.hopict.nl, mta-sts.hopict.nl, mta-sts.hop-ict.nl, mx.hopict.nl, mx1.hopict.nl, phpmysql.hopict.nl, www.hopict.nl, www.hop-ict.nl
10 entries


 

11. Html-Content - Entries

Summary


Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://www.hopict.nl/
a

10

0


0
0
0


img

2
22,287 Bytes
0
6
0
0
0
0


link
alternate
2

0


0
0
0


link
stylesheet
5
881,990 Bytes
0
5
0
0
0
0


link
other
8
45,603 Bytes
0
3
0
0
0
0


meta
og
6

0
1
0
0
0
0


meta
twitter
3

0


0
0
0


meta
other
9
55,490 Bytes
0
1
0
0
0
0


script

4
111,760 Bytes
0
4
0
0
0
0

 

Details (currently limited to 500 rows - some problems with spam users)

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsgStatus
https://www.hopict.nl/

a

#primary


1
ok















a

https://www.hopict.nl/


3
ok















a

https://www.hopict.nl/cloud/


1
ok















a

https://www.hopict.nl/contact/


2
ok















a

https://www.hopict.nl/ict-beheer/


1
ok















a

https://www.hopict.nl/voip/


1
ok















a

mailto:info@hopict.nl


1
ok















img
src
https://www.hopict.nl/wp-content/uploads/2016/03/Plaatje-Home-300x225.jpg
200

1
ok
alt: Plaatje-Homeimage/jpeg
X-Content-Type-Options nosniff found





Cache-Control: max-age=315360000 with long duration found.
No Compression - 16355 Bytes








img
src
https://www.hopict.nl/wp-content/uploads/2016/03/cropped-Logo-Header.png
200

1
ok
no alt-Attributeimage/png
X-Content-Type-Options nosniff found





Cache-Control: max-age=315360000 with long duration found.
No Compression - 5932 Bytes







srcset
https://www.hopict.nl/wp-content/uploads/2016/03/cropped-Logo-Header.png 300w, https://www.hopict.nl/wp-content/uploads/2016/03/cropped-Logo-Header-100x17.png 100w, https://www.hopict.nl/wp-content/uploads/2016/03/cropped-Logo-Header-150x26.png 150w, https://www.hopict.nl/wp-content/uploads/2016/03/cropped-Logo-Header-200x34.png 200w


1
ok







https://www.hopict.nl/wp-content/uploads/2016/03/cropped-Logo-Header-100x17.png 100w
200

1
ok
image/png
X-Content-Type-Options nosniff found





Cache-Control: max-age=315360000 with long duration found.
No Compression - 1770 Bytes







https://www.hopict.nl/wp-content/uploads/2016/03/cropped-Logo-Header-150x26.png 150w
200

1
ok
image/png
X-Content-Type-Options nosniff found





Cache-Control: max-age=315360000 with long duration found.
No Compression - 3333 Bytes







https://www.hopict.nl/wp-content/uploads/2016/03/cropped-Logo-Header-200x34.png 200w
200

1
ok
image/png
X-Content-Type-Options nosniff found





Cache-Control: max-age=315360000 with long duration found.
No Compression - 4467 Bytes







https://www.hopict.nl/wp-content/uploads/2016/03/cropped-Logo-Header.png 300w
200

1
ok
image/png
X-Content-Type-Options nosniff found





Cache-Control: max-age=315360000 with long duration found.
No Compression - 5932 Bytes






link
alternate
https://www.hopict.nl/comments/feed/


1
ok















link
alternate
https://www.hopict.nl/feed/


1
ok















link
apple-touch-icon
https://www.hopict.nl/wp-content/uploads/2016/03/cropped-favicon-180x180.png
200

1
ok
image/png
X-Content-Type-Options nosniff found





Cache-Control: max-age=315360000 with long duration found.
No Compression - 26356 Bytes








link
canonical
https://www.hopict.nl/


1
ok















link
EditURI
https://www.hopict.nl/xmlrpc.php?rsd


1
ok















link
https://api.w.org/
https://www.hopict.nl/wp-json/


1
ok















link
icon
https://www.hopict.nl/wp-content/uploads/2016/03/cropped-favicon-192x192.png
200

1
ok
image/png
X-Content-Type-Options nosniff found





Cache-Control: max-age=315360000 with long duration found.
No Compression - 17989 Bytes








link
icon
https://www.hopict.nl/wp-content/uploads/2016/03/cropped-favicon-32x32.png
200

1
ok
image/png
X-Content-Type-Options nosniff found





Cache-Control: max-age=315360000 with long duration found.
No Compression - 1258 Bytes








link
pingback
https://www.hopict.nl/xmlrpc.php


1
ok















link
profile
http://gmpg.org/xfn/11


1
ok















link
stylesheet
https://www.hopict.nl/wp-content/plugins/responsive-add-ons/includes/css/style.min.css?ver=3.0.8
200

1
ok
text/css
X-Content-Type-Options nosniff found





Cache-Control: max-age=315360000 - with long duration found.
Compression required: 21588 Bytes






local SRI possible, possible hash-values:

 

sha256-UahMideNFdWlX6ZuZV03EXA65vaWRUz+WOhAU+vaggM=
sha384-jB75laiZNiaLwV6nQtPfGqPCqIFYGciSKtsmZkx5KKnwWkTF6bwHpFd+nIbUTWMf
sha512-VnJccW7a+9hqC4i5rVE7Ff/PLSvp5NaRRC01uzwmaKVGl0Ti6vZWMKI2t4Mt+UNFe9hIO1lxN0aBSKqHXnyqNQ==

 

<link rel="stylesheet" href="https://www.hopict.nl/wp-content/plugins/responsive-add-ons/includes/css/style.min.css?ver=3.0.8" crossorigin="anonymous" integrity="sha256-UahMideNFdWlX6ZuZV03EXA65vaWRUz+WOhAU+vaggM=" />



link
stylesheet
https://www.hopict.nl/wp-content/plugins/responsive-add-ons/includes/megamenu/assets/megamenu.css?ver=3.0.8
200

1
ok
text/css
X-Content-Type-Options nosniff found





Cache-Control: max-age=315360000 - with long duration found.
339 Bytes






local SRI possible, possible hash-values:

 

sha256-IHsC8IaUiClLgxdQUDjRuzXFQu6zmPf1f9OBvpgbuR0=
sha384-YgNxScjwFQJIi0W4J8HqldxVBX2sfo91t23vCSelCw4ioHnOfFiyVZySg9Y6BAgt
sha512-TxPWiIc/2meEekNvnZwBXEn+xY4pKTaEIkZFR8o4ApGsHS8icP60GaHqJlW1d/V1xUJtc38wsh6lDuvsnvacNA==

 

<link rel="stylesheet" href="https://www.hopict.nl/wp-content/plugins/responsive-add-ons/includes/megamenu/assets/megamenu.css?ver=3.0.8" crossorigin="anonymous" integrity="sha256-IHsC8IaUiClLgxdQUDjRuzXFQu6zmPf1f9OBvpgbuR0=" />



link
stylesheet
https://www.hopict.nl/wp-content/themes/responsive/core/css/icomoon/style.min.css?ver=5.0.9
200

1
ok
text/css
X-Content-Type-Options nosniff found





Cache-Control: max-age=315360000 - with long duration found.
Compression required: 5644 Bytes






local SRI possible, possible hash-values:

 

sha256-X7BOfmORDLHHC3GEJhu9bWUx3HSYtYAjA1CWsUKyPiA=
sha384-VEgxky+6wCpXbCmoh8FOByI/roqFZexKxELT/rpW+BdywSRPAJdSbPVKaXk94GN3
sha512-NHfNogu3IoDWjI2+xJAW0+MjR6Gv4NomS5jHn39Cu1vDYCyrjdSdAzxUHsosq8q/203sZwbVbuyOa+FwUNa+4g==

 

<link rel="stylesheet" href="https://www.hopict.nl/wp-content/themes/responsive/core/css/icomoon/style.min.css?ver=5.0.9" crossorigin="anonymous" integrity="sha256-X7BOfmORDLHHC3GEJhu9bWUx3HSYtYAjA1CWsUKyPiA=" />


Content loaded via url("...")

 

fonts/icomoon.eot?fcynq81
fonts/icomoon.eot?fcynq8#iefix1
fonts/icomoon.svg?fcynq8#icomoon1
fonts/icomoon.ttf?fcynq81
fonts/icomoon.woff?fcynq81

link
stylesheet
https://www.hopict.nl/wp-content/themes/responsive/core/css/style.min.css?ver=5.0.9
200

1
ok
text/css
X-Content-Type-Options nosniff found





Cache-Control: max-age=315360000 - with long duration found.
Compression required: 742000 Bytes






local SRI possible, possible hash-values:

 

sha256-5VducXLEREswrmlHQCCzWa/ynbO/TisuyfmjDkmTR50=
sha384-2ddtXdbwqo4NOJMB/4NMGLnNE8ADQt7vYXj+dEIDkM1uDl5VMhvAdo04yPl2fJjx
sha512-LJSEteOPueqOVYhKmXjEI2yQmYKMKfZU5XJJxNj44xbDuWtSbmzKSj10qYmidFkfyrtcw9AJCLBG+baMxV8xOw==

 

<link rel="stylesheet" href="https://www.hopict.nl/wp-content/themes/responsive/core/css/style.min.css?ver=5.0.9" crossorigin="anonymous" integrity="sha256-5VducXLEREswrmlHQCCzWa/ynbO/TisuyfmjDkmTR50=" />


Content loaded via url("...")

 

../images/line.svg1

link
stylesheet
https://www.hopict.nl/wp-includes/css/dist/block-library/style.min.css?ver=6.6.1
200

1
ok
text/css
X-Content-Type-Options nosniff found





Cache-Control: max-age=315360000 - with long duration found.
Compression required: 112419 Bytes






local SRI possible, possible hash-values:

 

sha256-iFyJ6CQ2z6PQoKWpsva+bhUDRXyBDMiO0sCbRXCun9Y=
sha384-9S7euJ+1crDuNft50DMQkLk5czMu8i45ob+8c88yb4pQUIz6tTAlC9p+JeCEFdno
sha512-Fgej8qsn03fVUivFt9DrxQR+C5NSx6SZeNgtMSjr4TcTr0c40FrR0yxaPFTODseH+Uv+JQc/6q89XTv/i02i5Q==

 

<link rel="stylesheet" href="https://www.hopict.nl/wp-includes/css/dist/block-library/style.min.css?ver=6.6.1" crossorigin="anonymous" integrity="sha256-iFyJ6CQ2z6PQoKWpsva+bhUDRXyBDMiO0sCbRXCun9Y=" />


Content loaded via url("...")

 

data:image/svg+xml;utf8,<svg viewBox="0 0 100 100" xmlns="http://www.w3.org/2000/svg"><circle cx="50" cy="50" r="50"/></svg>2

meta
charset
UTF-8


1
ok















meta
og:description
Ontdek de voordelen van een goede automatisering en maak kennis met een professionele partner voor uw ICT oplossingen


1
ok















meta
og:locale
nl_NL


1
ok















meta
og:site_name
|


1
ok















meta
og:title
Professionele partner in de ICT


1
ok















meta
og:type
article


1
ok















meta
og:url
https://www.hopict.nl/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





90872 Bytes








meta
description
Ontdek de voordelen van een goede automatisering en maak kennis met een professionele partner voor uw ICT oplossingen


1
ok















meta
generator
All in One SEO (AIOSEO) 4.6.7.1


1
ok















meta
generator
WordPress 6.6.1


1
ok















meta
google
nositelinkssearchbox


1
ok















meta
keywords
ict-onderhoud en monitoring,compleet ict-beheer,cloud werkplekker,server installaties,netwerk installaties,wifi netwerken


1
ok















meta
msapplication-TileImage
https://www.hopict.nl/wp-content/uploads/2016/03/cropped-favicon-270x270.png
200

1
ok
image/png
X-Content-Type-Options nosniff found





Cache-Control: max-age=315360000 with long duration found.
No Compression - 55490 Bytes








meta
robots
max-image-preview:large


1
ok















meta
twitter:card
summary


1
ok















meta
twitter:description
Ontdek de voordelen van een goede automatisering en maak kennis met een professionele partner voor uw ICT oplossingen


1
ok















meta
twitter:title
Professionele partner in de ICT


1
ok















meta
viewport
width=device-width, initial-scale=1.0


1
ok















script
src
https://www.hopict.nl/wp-content/plugins/responsive-add-ons/includes/megamenu/assets/mega-menu.js?ver=3.0.8
200

1
ok
Missing defer / async attribute. application/javascript
X-Content-Type-Options nosniff found





Cache-Control: max-age=315360000 - with long duration found.
Compression required: 5943 Bytes






local SRI possible, possible hash-values:

 

sha256-UWiAy2BplRel7SIirthz5I8dQjcKBquak48TEM5pfKg=
sha384-v5NpppS3ngKc/nYDbzjWStzDcobuNFFbnnUJALobYwqztksNjvUCAy3IFBiVa6z5
sha512-si7Z1NcWf7E3H/UpyVUO+xT3Djsx1OrQW9TzYZKBXs6jdhOkdHMMwDmT69aurANvVxD41Cnju9smMJtWxrNuPg==

 

<script src="https://www.hopict.nl/wp-content/plugins/responsive-add-ons/includes/megamenu/assets/mega-menu.js?ver=3.0.8" crossorigin="anonymous" integrity="sha256-UWiAy2BplRel7SIirthz5I8dQjcKBquak48TEM5pfKg=" />



script
src
https://www.hopict.nl/wp-content/themes/responsive/core/js/navigation.min.js?ver=5.0.9
200

1
ok
Missing defer / async attribute. application/javascript
X-Content-Type-Options nosniff found





Cache-Control: max-age=315360000 - with long duration found.
Compression required: 4687 Bytes






local SRI possible, possible hash-values:

 

sha256-ncpNYquNi8ItAGIX00q9HGrYJVcfpeuPAHBfILkJc8s=
sha384-Qw+gFFViKzyZYQ3fcF08itO5U8yAzsABgvXXNfTNsD2sGsR9Rg/OF0c/FcZF1tOc
sha512-XT/Iugr+GCo87snkA6U1b1AlMssEnLdPBqXOQ3r+xFkxmhl57qVHvUTvMeBNSzEhPC7ZLDugpJVkT6h1QkOjHw==

 

<script src="https://www.hopict.nl/wp-content/themes/responsive/core/js/navigation.min.js?ver=5.0.9" crossorigin="anonymous" integrity="sha256-ncpNYquNi8ItAGIX00q9HGrYJVcfpeuPAHBfILkJc8s=" />



script
src
https://www.hopict.nl/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
200

1
ok
Missing defer / async attribute. application/javascript
X-Content-Type-Options nosniff found





Cache-Control: max-age=315360000 - with long duration found.
Compression required: 87553 Bytes






local SRI possible, possible hash-values:

 

sha256-y28tMsSdHCsl6f/Jqq+j+DB1NGwBvNSubrGHOSpCks8=
sha384-vT0xsrWPQ3JMjk9+X3p3J4glfdqQsMBzYwpxS1LPybrkJs6kZDw7slFXJ2iUkUy4
sha512-/Hn9t2djAl3Dn6wEWiFf8VXvL0kqDpZAB51vCJ+mIYrys6t8bq9jaCfe6SlOaTmpWrJFVOhwyXZnnCVWetY3TA==

 

<script src="https://www.hopict.nl/wp-includes/js/jquery/jquery.min.js?ver=3.7.1" crossorigin="anonymous" integrity="sha256-y28tMsSdHCsl6f/Jqq+j+DB1NGwBvNSubrGHOSpCks8=" />



script
src
https://www.hopict.nl/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
200

1
ok
Missing defer / async attribute. application/javascript
X-Content-Type-Options nosniff found





Cache-Control: max-age=315360000 - with long duration found.
Compression required: 13577 Bytes






local SRI possible, possible hash-values:

 

sha256-UnTxHm+zKuDPLfufgEMnKGXDl6fEIjtM+n1Q6lL73ok=
sha384-ez4i72z0XhJqm0ZRoQkpPN0bDV8Kw8PK3n8kjEZsWhRDrfICLd0AGghHJB+vytx0
sha512-jWvlRVCKHDgni4rXgMN1iuSKJeThLu5EM3WqVgMdmzVvjJDyLU8lEUD6P2VgOvQFIxZeM8ri4tYvx47BBuPXMQ==

 

<script src="https://www.hopict.nl/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1" crossorigin="anonymous" integrity="sha256-UnTxHm+zKuDPLfufgEMnKGXDl6fEIjtM+n1Q6lL73ok=" />


 

12. Html-Parsing via https://validator.w3.org/nu/

Small Code update, wait one minute

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: dns1.hosted.nl, dns2.hosted.nl, dns3.hosted.nl

 

QNr.DomainTypeNS used
1
nl
NS
e.root-servers.net (2001:500:a8::e)

Answer: ns1.dns.nl, ns3.dns.nl, ns4.dns.nl
2
dns1.hosted.nl: 2001:7b8:60c:1:4:47:10:1, 91.230.244.50
NS
ns1.dns.nl (2001:678:2c:0:194:0:28:53)

Answer: dns2.hosted.nl
185.69.100.202, 2a01:a680:a1:12:1:a:0:201

Answer: dns3.hosted.nl
217.18.64.10, 2a00:19c0:a064:10::1

 

14. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.hop-ict.nl
0

no CAA entry found
1
0
hop-ict.nl
5
issue
letsencrypt.org
1
0
nl
0

no CAA entry found
1
0

 

15. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
hop-ict.nl
google-site-verification=Hqv1UiA5OlfyorIFHkKqMJA8VilqxeT3RivncryGHlI
ok
1
0
hop-ict.nl
v=spf1 a mx ip4:82.139.106.47 ip6:2001:9e0:890e:8c00::/56 a:mx.hopict.nl a:webmail.hopict.nl a:webmail.hop-ict.nl -all
ok
1
0
www.hop-ict.nl

ok
1
0
_acme-challenge.hop-ict.nl

Name Error - The domain name does not exist
1
0
_acme-challenge.www.hop-ict.nl

Name Error - The domain name does not exist
1
0
_acme-challenge.hop-ict.nl.hop-ict.nl

Name Error - The domain name does not exist
1
0
_acme-challenge.www.hop-ict.nl.hop-ict.nl

Name Error - The domain name does not exist
1
0
_acme-challenge.www.hop-ict.nl.www.hop-ict.nl

Name Error - The domain name does not exist
1
0

 

16. DomainService - Entries

TypeDomainPrefValueDNS-errornum AnswersStatusDescription
MX

hop-ict.nl
10
mx.hopict.nl
01ok

A


212.114.110.201
01ok

AAAA


2001:7b8:60c:1:4:47:a1:1
01ok

CNAME


00ok
_mta-sts
TXT
_mta-sts.hop-ict.nl

v=STSv1; id=20210429131031
ok
mta-sts
CNAME
mta-sts.hop-ict.nl

mta-sts.hopict.nl
ok

A
mta-sts.hopict.nl

212.114.110.201
ok

mta-sts.txt file
Content of https://mta-sts.hop-ict.nl/.well-known/mta-sts.txt - see RFC 8461 text/plainok




version: STSv1
ok




mode: enforce
ok




mx: hopict.nl
ok




mx: mx.hopict.nl
ok




mx: webmail.hopict.nl
ok




max_age: 86401
ok

AAAA
mta-sts.hopict.nl

2001:7b8:60c:1:4:47:a1:1
ok

mta-sts.txt file
Content of https://mta-sts.hop-ict.nl/.well-known/mta-sts.txt - see RFC 8461 text/plainok




version: STSv1
ok




mode: enforce
ok




mx: hopict.nl
ok




mx: mx.hopict.nl
ok




mx: webmail.hopict.nl
ok




max_age: 86401
ok
SMTP-TLS Reporting
TXT
_smtp._tls.hop-ict.nl

v=TLSRPTv1; rua=mailto:tls-reports@hopict.nl
ok
SPF
TXT
hop-ict.nl

v=spf1 a mx ip4:82.139.106.47 ip6:2001:9e0:890e:8c00::/56 a:mx.hopict.nl a:webmail.hopict.nl a:webmail.hop-ict.nl -all
ok

A
hop-ict.nl

212.114.110.201
okDuplicated ipv4 found.

AAAA
hop-ict.nl

2001:7b8:60c:1:4:47:a1:1
okDuplicated ipv6 found.

MX
hop-ict.nl

mx.hopict.nl
ok

MX-A
mx.hopict.nl

212.114.110.201
okDuplicated ipv4 found.

MX-AAAA
mx.hopict.nl

2001:7b8:60c:1:4:47:a1:1
okDuplicated ipv6 found.

TXT
hop-ict.nl

ip4:82.139.106.47
8192Duplicated ipv4 found.

A
mx.hopict.nl

212.114.110.201
okDuplicated ipv4 found.

AAAA
mx.hopict.nl

2001:7b8:60c:1:4:47:a1:1
okDuplicated ipv6 found.

A
webmail.hopict.nl

82.139.106.47
8192Duplicated ipv4 found.

AAAA
webmail.hopict.nl

2001:9e0:890e:8c01:5d11:a0b:b27:59a
16384Duplicated ipv6 found.

A
webmail.hop-ict.nl

82.139.106.47
8192Duplicated ipv4 found.

AAAA
webmail.hop-ict.nl

2001:9e0:890e:8c01:5d11:a0b:b27:59a
16384Duplicated ipv6 found.
_dmarc
TXT
_dmarc.hop-ict.nl

v=DMARC1; p=quarantine; rua=mailto:tls-reports@hop-ict.nl
ok

 

 

17. Cipher Suites

Summary
DomainIPPortnum CipherstimeStd.ProtocolForward Secrecy
hop-ict.nl
212.114.110.201
25
7 Ciphers61.42 secSMTP
0 without, 7 FS
100.00 %
hop-ict.nl
212.114.110.201
443
3 Ciphers34.38 sec
0 without, 3 FS
100.00 %
hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
25
7 Ciphers54.54 secSMTP
0 without, 7 FS
100.00 %
hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
443
3 Ciphers28.11 sec
0 without, 3 FS
100.00 %
www.hop-ict.nl
212.114.110.201
25
7 Ciphers67.40 secSMTP
0 without, 7 FS
100.00 %
www.hop-ict.nl
212.114.110.201
443
3 Ciphers34.19 sec
0 without, 3 FS
100.00 %
www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
25
7 Ciphers54.38 secSMTP
0 without, 7 FS
100.00 %
www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
443
3 Ciphers26.99 sec
0 without, 3 FS
100.00 %
Complete

8
40 Ciphers
5.00 Ciphers/Check
361.40 sec45.18 sec/Check
0 without, 40 FS
100.00 %

Details
DomainIPPortCipher (OpenSsl / IANA)
hop-ict.nl
212.114.110.201
25
ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS
7 Ciphers, 61.42 sec
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
RSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

ECDH
RSA
AESGCM(256)
AEAD




DHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xAA
FS

TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256

DH
RSA
CHACHA20/POLY1305(256)
AEAD




DHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0x00,0x9F
FS

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

DH
RSA
AESGCM(256)
AEAD




ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

ECDH
RSA
AESGCM(128)
AEAD




DHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0x00,0x9E
FS

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

DH
RSA
AESGCM(128)
AEAD




ECDHE-RSA-AES256-SHA384
(Weak)
TLSv1.2
0xC0,0x28
FS

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

ECDH
RSA
AES(256)
SHA384



443
ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS
3 Ciphers, 34.38 sec
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
RSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

ECDH
RSA
AESGCM(256)
AEAD




DHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0x00,0x9F
FS

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

DH
RSA
AESGCM(256)
AEAD


2001:7b8:60c:1:4:47:a1:1
25
ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS
7 Ciphers, 54.54 sec
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
RSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

ECDH
RSA
AESGCM(256)
AEAD




DHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xAA
FS

TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256

DH
RSA
CHACHA20/POLY1305(256)
AEAD




DHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0x00,0x9F
FS

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

DH
RSA
AESGCM(256)
AEAD




ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

ECDH
RSA
AESGCM(128)
AEAD




DHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0x00,0x9E
FS

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

DH
RSA
AESGCM(128)
AEAD




ECDHE-RSA-AES256-SHA384
(Weak)
TLSv1.2
0xC0,0x28
FS

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

ECDH
RSA
AES(256)
SHA384



443
ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS
3 Ciphers, 28.11 sec
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
RSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

ECDH
RSA
AESGCM(256)
AEAD




DHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0x00,0x9F
FS

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

DH
RSA
AESGCM(256)
AEAD

www.hop-ict.nl
212.114.110.201
25
ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS
7 Ciphers, 67.40 sec
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
RSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

ECDH
RSA
AESGCM(256)
AEAD




DHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xAA
FS

TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256

DH
RSA
CHACHA20/POLY1305(256)
AEAD




DHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0x00,0x9F
FS

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

DH
RSA
AESGCM(256)
AEAD




ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

ECDH
RSA
AESGCM(128)
AEAD




DHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0x00,0x9E
FS

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

DH
RSA
AESGCM(128)
AEAD




ECDHE-RSA-AES256-SHA384
(Weak)
TLSv1.2
0xC0,0x28
FS

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

ECDH
RSA
AES(256)
SHA384



443
ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS
3 Ciphers, 34.19 sec
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
RSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

ECDH
RSA
AESGCM(256)
AEAD




DHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0x00,0x9F
FS

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

DH
RSA
AESGCM(256)
AEAD


2001:7b8:60c:1:4:47:a1:1
25
ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS
7 Ciphers, 54.38 sec
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
RSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

ECDH
RSA
AESGCM(256)
AEAD




DHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xAA
FS

TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256

DH
RSA
CHACHA20/POLY1305(256)
AEAD




DHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0x00,0x9F
FS

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

DH
RSA
AESGCM(256)
AEAD




ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

ECDH
RSA
AESGCM(128)
AEAD




DHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0x00,0x9E
FS

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

DH
RSA
AESGCM(128)
AEAD




ECDHE-RSA-AES256-SHA384
(Weak)
TLSv1.2
0xC0,0x28
FS

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

ECDH
RSA
AES(256)
SHA384



443
ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS
3 Ciphers, 26.99 sec
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
RSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

ECDH
RSA
AESGCM(256)
AEAD




DHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0x00,0x9F
FS

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

DH
RSA
AESGCM(256)
AEAD

 

18. Portchecks

DomainIPPortDescriptionResultAnswer
hop-ict.nl
212.114.110.201
21
FTP



hop-ict.nl
212.114.110.201
21
FTP



hop-ict.nl
212.114.110.201
22
SSH



hop-ict.nl
212.114.110.201
22
SSH



hop-ict.nl
212.114.110.201
25
SMTP
open
220-mx.hopict.nl

 

Answer EHLO: 250-mx.hopict.nl 250-SIZE 31457280 250-VRFY 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250-SMTPUTF8 250 CHUNKING

 

Answer AUTH LOGIN: (no AUTH option found)
Mail certificate is valid
hop-ict.nl
212.114.110.201
25
SMTP
open
220-mx.hopict.nl
Mail certificate is valid

Answer EHLO: 250-mx.hopict.nl 250-SIZE 31457280 250-VRFY 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250-SMTPUTF8 250 CHUNKING Good: STARTTLS found


Excellent: No unencrypted login possible
hop-ict.nl
212.114.110.201
53
DNS



hop-ict.nl
212.114.110.201
53
DNS



hop-ict.nl
212.114.110.201
110
POP3



hop-ict.nl
212.114.110.201
110
POP3



hop-ict.nl
212.114.110.201
143
IMAP



hop-ict.nl
212.114.110.201
143
IMAP



hop-ict.nl
212.114.110.201
465
SMTP (encrypted)



hop-ict.nl
212.114.110.201
465
SMTP (encrypted)



hop-ict.nl
212.114.110.201
587
SMTP (encrypted, submission)



hop-ict.nl
212.114.110.201
587
SMTP (encrypted, submission)



hop-ict.nl
212.114.110.201
993
IMAP (encrypted)



hop-ict.nl
212.114.110.201
993
IMAP (encrypted)



hop-ict.nl
212.114.110.201
995
POP3 (encrypted)



hop-ict.nl
212.114.110.201
995
POP3 (encrypted)



hop-ict.nl
212.114.110.201
1433
MS SQL



hop-ict.nl
212.114.110.201
1433
MS SQL



hop-ict.nl
212.114.110.201
2082
cPanel (http)



hop-ict.nl
212.114.110.201
2082
cPanel (http)



hop-ict.nl
212.114.110.201
2083
cPanel (https)



hop-ict.nl
212.114.110.201
2083
cPanel (https)



hop-ict.nl
212.114.110.201
2086
WHM (http)



hop-ict.nl
212.114.110.201
2086
WHM (http)



hop-ict.nl
212.114.110.201
2087
WHM (https)



hop-ict.nl
212.114.110.201
2087
WHM (https)



hop-ict.nl
212.114.110.201
2089
cPanel Licensing



hop-ict.nl
212.114.110.201
2089
cPanel Licensing



hop-ict.nl
212.114.110.201
2095
cPanel Webmail (http)



hop-ict.nl
212.114.110.201
2095
cPanel Webmail (http)



hop-ict.nl
212.114.110.201
2096
cPanel Webmail (https)



hop-ict.nl
212.114.110.201
2096
cPanel Webmail (https)



hop-ict.nl
212.114.110.201
2222
DirectAdmin (http)



hop-ict.nl
212.114.110.201
2222
DirectAdmin (http)



hop-ict.nl
212.114.110.201
2222
DirectAdmin (https)



hop-ict.nl
212.114.110.201
2222
DirectAdmin (https)



hop-ict.nl
212.114.110.201
3306
mySql



hop-ict.nl
212.114.110.201
3306
mySql



hop-ict.nl
212.114.110.201
5224
Plesk Licensing



hop-ict.nl
212.114.110.201
5224
Plesk Licensing



hop-ict.nl
212.114.110.201
5432
PostgreSQL



hop-ict.nl
212.114.110.201
5432
PostgreSQL



hop-ict.nl
212.114.110.201
8080
Ookla Speedtest (http)



hop-ict.nl
212.114.110.201
8080
Ookla Speedtest (http)



hop-ict.nl
212.114.110.201
8080
Ookla Speedtest (https)



hop-ict.nl
212.114.110.201
8080
Ookla Speedtest (https)



hop-ict.nl
212.114.110.201
8083
VestaCP http



hop-ict.nl
212.114.110.201
8083
VestaCP http



hop-ict.nl
212.114.110.201
8083
VestaCP https



hop-ict.nl
212.114.110.201
8083
VestaCP https



hop-ict.nl
212.114.110.201
8443
Plesk Administration (https)



hop-ict.nl
212.114.110.201
8443
Plesk Administration (https)



hop-ict.nl
212.114.110.201
8447
Plesk Installer + Updates



hop-ict.nl
212.114.110.201
8447
Plesk Installer + Updates



hop-ict.nl
212.114.110.201
8880
Plesk Administration (http)



hop-ict.nl
212.114.110.201
8880
Plesk Administration (http)



hop-ict.nl
212.114.110.201
10000
Webmin (http)



hop-ict.nl
212.114.110.201
10000
Webmin (http)



hop-ict.nl
212.114.110.201
10000
Webmin (https)



hop-ict.nl
212.114.110.201
10000
Webmin (https)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
21
FTP



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
21
FTP



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
22
SSH



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
22
SSH



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
25
SMTP
open
220-mx.hopict.nl

 

Answer EHLO: 250-mx.hopict.nl 250-SIZE 31457280 250-VRFY 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250-SMTPUTF8 250 CHUNKING

 

Answer AUTH LOGIN: (no AUTH option found)
Mail certificate is valid
hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
25
SMTP
open
220-mx.hopict.nl
Mail certificate is valid

Answer EHLO: 250-mx.hopict.nl 250-SIZE 31457280 250-VRFY 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250-SMTPUTF8 250 CHUNKING Good: STARTTLS found


Excellent: No unencrypted login possible
hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
53
DNS



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
53
DNS



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
110
POP3



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
110
POP3



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
143
IMAP



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
143
IMAP



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
465
SMTP (encrypted)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
465
SMTP (encrypted)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
587
SMTP (encrypted, submission)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
587
SMTP (encrypted, submission)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
993
IMAP (encrypted)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
993
IMAP (encrypted)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
995
POP3 (encrypted)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
995
POP3 (encrypted)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
1433
MS SQL



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
1433
MS SQL



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2082
cPanel (http)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2082
cPanel (http)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2083
cPanel (https)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2083
cPanel (https)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2086
WHM (http)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2086
WHM (http)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2087
WHM (https)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2087
WHM (https)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2089
cPanel Licensing



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2089
cPanel Licensing



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2095
cPanel Webmail (http)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2095
cPanel Webmail (http)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2096
cPanel Webmail (https)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2096
cPanel Webmail (https)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2222
DirectAdmin (http)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2222
DirectAdmin (http)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2222
DirectAdmin (https)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2222
DirectAdmin (https)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
3306
mySql



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
3306
mySql



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
5224
Plesk Licensing



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
5224
Plesk Licensing



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
5432
PostgreSQL



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
5432
PostgreSQL



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8080
Ookla Speedtest (http)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8080
Ookla Speedtest (http)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8080
Ookla Speedtest (https)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8080
Ookla Speedtest (https)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8083
VestaCP http



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8083
VestaCP http



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8083
VestaCP https



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8083
VestaCP https



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8443
Plesk Administration (https)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8443
Plesk Administration (https)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8447
Plesk Installer + Updates



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8447
Plesk Installer + Updates



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8880
Plesk Administration (http)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8880
Plesk Administration (http)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
10000
Webmin (http)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
10000
Webmin (http)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
10000
Webmin (https)



hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
10000
Webmin (https)



www.hop-ict.nl
212.114.110.201
21
FTP



www.hop-ict.nl
212.114.110.201
21
FTP



www.hop-ict.nl
212.114.110.201
22
SSH



www.hop-ict.nl
212.114.110.201
22
SSH



www.hop-ict.nl
212.114.110.201
25
SMTP
open
220 mx.hopict.nl

 

Answer EHLO: 250-mx.hopict.nl 250-PIPELINING 250-SIZE 31457280 250-VRFY 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-SMTPUTF8 250 CHUNKING

 

Answer AUTH LOGIN: (no AUTH option found)
Mail certificate is valid
www.hop-ict.nl
212.114.110.201
25
SMTP
open
220 mx.hopict.nl
Mail certificate is valid

Answer EHLO: 250-mx.hopict.nl 250-PIPELINING 250-SIZE 31457280 250-VRFY 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-SMTPUTF8 250 CHUNKING Good: STARTTLS found


Excellent: No unencrypted login possible
www.hop-ict.nl
212.114.110.201
53
DNS



www.hop-ict.nl
212.114.110.201
53
DNS



www.hop-ict.nl
212.114.110.201
110
POP3



www.hop-ict.nl
212.114.110.201
110
POP3



www.hop-ict.nl
212.114.110.201
143
IMAP



www.hop-ict.nl
212.114.110.201
143
IMAP



www.hop-ict.nl
212.114.110.201
465
SMTP (encrypted)



www.hop-ict.nl
212.114.110.201
465
SMTP (encrypted)



www.hop-ict.nl
212.114.110.201
587
SMTP (encrypted, submission)



www.hop-ict.nl
212.114.110.201
587
SMTP (encrypted, submission)



www.hop-ict.nl
212.114.110.201
993
IMAP (encrypted)



www.hop-ict.nl
212.114.110.201
993
IMAP (encrypted)



www.hop-ict.nl
212.114.110.201
995
POP3 (encrypted)



www.hop-ict.nl
212.114.110.201
995
POP3 (encrypted)



www.hop-ict.nl
212.114.110.201
1433
MS SQL



www.hop-ict.nl
212.114.110.201
1433
MS SQL



www.hop-ict.nl
212.114.110.201
2082
cPanel (http)



www.hop-ict.nl
212.114.110.201
2082
cPanel (http)



www.hop-ict.nl
212.114.110.201
2083
cPanel (https)



www.hop-ict.nl
212.114.110.201
2083
cPanel (https)



www.hop-ict.nl
212.114.110.201
2086
WHM (http)



www.hop-ict.nl
212.114.110.201
2086
WHM (http)



www.hop-ict.nl
212.114.110.201
2087
WHM (https)



www.hop-ict.nl
212.114.110.201
2087
WHM (https)



www.hop-ict.nl
212.114.110.201
2089
cPanel Licensing



www.hop-ict.nl
212.114.110.201
2089
cPanel Licensing



www.hop-ict.nl
212.114.110.201
2095
cPanel Webmail (http)



www.hop-ict.nl
212.114.110.201
2095
cPanel Webmail (http)



www.hop-ict.nl
212.114.110.201
2096
cPanel Webmail (https)



www.hop-ict.nl
212.114.110.201
2096
cPanel Webmail (https)



www.hop-ict.nl
212.114.110.201
2222
DirectAdmin (http)



www.hop-ict.nl
212.114.110.201
2222
DirectAdmin (http)



www.hop-ict.nl
212.114.110.201
2222
DirectAdmin (https)



www.hop-ict.nl
212.114.110.201
2222
DirectAdmin (https)



www.hop-ict.nl
212.114.110.201
3306
mySql



www.hop-ict.nl
212.114.110.201
3306
mySql



www.hop-ict.nl
212.114.110.201
5224
Plesk Licensing



www.hop-ict.nl
212.114.110.201
5224
Plesk Licensing



www.hop-ict.nl
212.114.110.201
5432
PostgreSQL



www.hop-ict.nl
212.114.110.201
5432
PostgreSQL



www.hop-ict.nl
212.114.110.201
8080
Ookla Speedtest (http)



www.hop-ict.nl
212.114.110.201
8080
Ookla Speedtest (http)



www.hop-ict.nl
212.114.110.201
8080
Ookla Speedtest (https)



www.hop-ict.nl
212.114.110.201
8080
Ookla Speedtest (https)



www.hop-ict.nl
212.114.110.201
8083
VestaCP http



www.hop-ict.nl
212.114.110.201
8083
VestaCP http



www.hop-ict.nl
212.114.110.201
8083
VestaCP https



www.hop-ict.nl
212.114.110.201
8083
VestaCP https



www.hop-ict.nl
212.114.110.201
8443
Plesk Administration (https)



www.hop-ict.nl
212.114.110.201
8443
Plesk Administration (https)



www.hop-ict.nl
212.114.110.201
8447
Plesk Installer + Updates



www.hop-ict.nl
212.114.110.201
8447
Plesk Installer + Updates



www.hop-ict.nl
212.114.110.201
8880
Plesk Administration (http)



www.hop-ict.nl
212.114.110.201
8880
Plesk Administration (http)



www.hop-ict.nl
212.114.110.201
10000
Webmin (http)



www.hop-ict.nl
212.114.110.201
10000
Webmin (http)



www.hop-ict.nl
212.114.110.201
10000
Webmin (https)



www.hop-ict.nl
212.114.110.201
10000
Webmin (https)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
21
FTP



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
21
FTP



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
22
SSH



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
22
SSH



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
25
SMTP
open
220 mx.hopict.nl

 

Answer EHLO: 250-mx.hopict.nl 250-PIPELINING 250-SIZE 31457280 250-VRFY 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-SMTPUTF8 250 CHUNKING

 

Answer AUTH LOGIN: (no AUTH option found)
Mail certificate is valid
www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
25
SMTP
open
220 mx.hopict.nl
Mail certificate is valid

Answer EHLO: 250-mx.hopict.nl 250-PIPELINING 250-SIZE 31457280 250-VRFY 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-SMTPUTF8 250 CHUNKING Good: STARTTLS found


Excellent: No unencrypted login possible
www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
53
DNS



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
53
DNS



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
110
POP3



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
110
POP3



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
143
IMAP



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
143
IMAP



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
465
SMTP (encrypted)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
465
SMTP (encrypted)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
587
SMTP (encrypted, submission)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
587
SMTP (encrypted, submission)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
993
IMAP (encrypted)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
993
IMAP (encrypted)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
995
POP3 (encrypted)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
995
POP3 (encrypted)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
1433
MS SQL



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
1433
MS SQL



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2082
cPanel (http)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2082
cPanel (http)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2083
cPanel (https)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2083
cPanel (https)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2086
WHM (http)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2086
WHM (http)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2087
WHM (https)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2087
WHM (https)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2089
cPanel Licensing



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2089
cPanel Licensing



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2095
cPanel Webmail (http)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2095
cPanel Webmail (http)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2096
cPanel Webmail (https)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2096
cPanel Webmail (https)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2222
DirectAdmin (http)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2222
DirectAdmin (http)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2222
DirectAdmin (https)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
2222
DirectAdmin (https)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
3306
mySql



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
3306
mySql



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
5224
Plesk Licensing



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
5224
Plesk Licensing



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
5432
PostgreSQL



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
5432
PostgreSQL



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8080
Ookla Speedtest (http)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8080
Ookla Speedtest (http)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8080
Ookla Speedtest (https)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8080
Ookla Speedtest (https)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8083
VestaCP http



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8083
VestaCP http



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8083
VestaCP https



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8083
VestaCP https



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8443
Plesk Administration (https)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8443
Plesk Administration (https)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8447
Plesk Installer + Updates



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8447
Plesk Installer + Updates



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8880
Plesk Administration (http)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
8880
Plesk Administration (http)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
10000
Webmin (http)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
10000
Webmin (http)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
10000
Webmin (https)



www.hop-ict.nl
2001:7b8:60c:1:4:47:a1:1
10000
Webmin (https)



 

 

Permalink: https://check-your-website.server-daten.de/?i=2eca0c12-572c-45a4-ab3c-0b1c49214dfe

 

Last Result: https://check-your-website.server-daten.de/?q=hop-ict.nl - 2024-07-31 20:53:59

 

Do you like this page? Support this tool, add a link on your page:

 

<a href="https://check-your-website.server-daten.de/?q=hop-ict.nl" target="_blank">Check this Site: hop-ict.nl</a>

 

 

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

 

QR-Code of this page - https://check-your-website.server-daten.de/?d=hop-ict.nl