DNS & HTTP Analysis for rolls-royce.com

Details: Category: Tool Processing Reports

Processing Domain rolls-royce.com on 03/02/2020 14:06:26

This tool is available free to use at GENSupport
Help and Support for your DNS or HTTP issues available on our Forum
Whenever you see a clicking on it will take you to more help
The version of the data model that was used in this report is 1.008
The version that produced this report is 1.023b

Processing DNS Records

Basic Checks
Here we check the basic functioning and security of your DNS
Zone Queries 6 Record Types and 17 Records Found
Zone Transfer Failed
Zone Dump
TXT
_dmarc.rolls-royce.com. TTL 86400 "v=DMARC1; p=none; rua=mailto:This email address is being protected from spambots. You need JavaScript enabled to view it.,mailto:This email address is being protected from spambots. You need JavaScript enabled to view it.; ruf=mailto:This email address is being protected from spambots. You need JavaScript enabled to view it.,mailto:This email address is being protected from spambots. You need JavaScript enabled to view it.;fo=1"
rolls-royce.com. TTL 86400 "MS=ms29802878"
rolls-royce.com. TTL 86400 "amazonses:Pdt1BWi4m29cC2HznbApn/C8/4vEDVNQPlSGDR9pxvA="
rolls-royce.com. TTL 86400 "google-site-verification=2t8VNBG0NapOtx809OYrvGI1ZYq9ENuq6qnBis91uJo"
rolls-royce.com. TTL 86400 "v=spf1 a mx ptr ip4:185.136.189.88 ip4:185.136.188.88 ip4:83.138.172.143 ip4:192.40.173.140 ip4:192.40.173.141 ip4:31.24.32.22" " ip4:195.149.127.16 ip4:46.235.193.39 ip4:46.235.193.40 ip4:194.72.133.15 ip4:205.239.71.40 include:spf.protection.outlook.com include:messagelabs.com ~all"
rolls-royce.com. TTL 86400 "webexdomainverification.=c9002323-b123-4101-bca6-eaf88405cdbd"
A
ns0.bt.net. TTL 86400 217.35.209.188
ns1.bt.net. TTL 86400 217.32.105.91
ns2.bt.net. TTL 86400 217.32.105.90
rolls-royce.com. TTL 86400 52.17.142.199
MX
rolls-royce.com. TTL 300 5 mx1.rolls-royce.c3s2.iphmx.com.
rolls-royce.com. TTL 300 5 mx2.rolls-royce.c3s2.iphmx.com.
NS
rolls-royce.com. TTL 600 ns0.bt.net.
rolls-royce.com. TTL 600 ns1.bt.net.
rolls-royce.com. TTL 600 ns2.bt.net.
SOA
rolls-royce.com. TTL 600 ns0.bt.net. hostmaster.bt.net. 2017022551 28800 7200 604800 86400
CNAME
www.rolls-royce.com. TTL 86400 rolls-royce.production.investis.com.
Nameservers
Here we check the setup of your nameservers. All nameservers on your domain should be listed in the zone and returned in an ANY query along with corresponding A and/or AAAA records resolving their address.
ns2.bt.net 217.32.105.90 Found and Match. (Found in Address Records)
ns1.bt.net 217.32.105.91 Found and Match. (Found in Address Records)
ns0.bt.net 217.35.209.188 Found and Match. (Found in Address Records)
All Name Servers SHOULD BE on Different Subnets

Processing 6 TXT Records

DMARC Record:
The DMARC Record defines how MTA's should response when parsing DKIM and SPF records
v=dmarc1 (The Version of this record)
p=none (The Policy to implement on FAIL)
rua=mailto:This email address is being protected from spambots. You need JavaScript enabled to view it.,mailto:This email address is being protected from spambots. You need JavaScript enabled to view it. (Reporting URI of aggregate reports)
ruf=mailto:This email address is being protected from spambots. You need JavaScript enabled to view it.,mailto:This email address is being protected from spambots. You need JavaScript enabled to view it. (Reporting URI for forensic reports)
fo=1 (Dictates what type of authentication/alignment vulnerabilities are reported)
Microsoft Office 365 Verification Record
This record is used to identify this domain as an Office 365 domain
ms=ms29802878
Amazon SES Domain Verification
This record is used by Amazon SES to validate domains for their email service
amazonses:pdt1bwi4m29cc2hznbapn/c8/4vedvnqplsgdr9pxva=
Google Domain Verification Record
This record is used by Google to validate domain ownership when setting up Google Analytics etc
google-site-verification=2t8vnbg0napotx809oyrvgi1zyq9enuq6qnbis91ujo
SPF Record:
The SPF Record defines which IP addresses are permitted to send email on this domain's behalf
v=spf1 (The SPF Format Version Number)
a (Permit servers listed in A records -extra lookup, some server's won't bother)
mx (Permit servers listed in MX records -extra lookup, some server's won't bother)
ptr
ip4:185.136.189.88 (The IPv4 Address of a permitted sender - make sure this scopes your outgoing mail server)
ip4:185.136.188.88 (The IPv4 Address of a permitted sender - make sure this scopes your outgoing mail server)
ip4:83.138.172.143 (The IPv4 Address of a permitted sender - make sure this scopes your outgoing mail server)
ip4:192.40.173.140 (The IPv4 Address of a permitted sender - make sure this scopes your outgoing mail server)
ip4:192.40.173.141 (The IPv4 Address of a permitted sender - make sure this scopes your outgoing mail server)
ip4:31.24.32.22 (The IPv4 Address of a permitted sender - make sure this scopes your outgoing mail server)
ip4:195.149.127.16 (The IPv4 Address of a permitted sender - make sure this scopes your outgoing mail server)
ip4:46.235.193.39 (The IPv4 Address of a permitted sender - make sure this scopes your outgoing mail server)
ip4:46.235.193.40 (The IPv4 Address of a permitted sender - make sure this scopes your outgoing mail server)
ip4:194.72.133.15 (The IPv4 Address of a permitted sender - make sure this scopes your outgoing mail server)
ip4:205.239.71.40 (The IPv4 Address of a permitted sender - make sure this scopes your outgoing mail server)
include:spf.protection.outlook.com (An Include - Additional look-ups required, some server's won't bother.)
include:messagelabs.com (An Include - Additional look-ups required, some server's won't bother.)
~all (Permit other hosts but take note)
Unknown Record:
We cannot identify this record. If you know what it is and its no longer needed then remove it
webexdomainverification.=c9002323-b123-4101-bca6-eaf88405cdbd

Processing 2 MX (Mail Exchanger) Records

These Records determine the servers (mail servers) responsible for handling your incomming email. Each service is given a priority and they will be used in that order. If all the priorities are the same then they will be used in a round-robin fashion
Priority 5 handled by host mx1.rolls-royce.c3s2.iphmx.com. [68.232.139.209] Valid
Email Handled Third Party
Port 25 (smtp) : Open
Priority 5 handled by host mx2.rolls-royce.c3s2.iphmx.com. [68.232.139.211] Valid
Email Handled Third Party
Port 25 (smtp) : Open

Processing 1 CNAME (Alias) Records

These records are aliases making one hostname relate to another. These are often used to match hosts back to clusters or internal referencs that may change.
www.rolls-royce.com. rolls-royce.production.investis.com.

Processing 4 A (IPv4 Address) Records

These records define the IP Addresse(s) of the servers responsible for hosting your webiste and other resouces on your domain. The www record is the most common one and will be used to identify your website address
Host: ns0.bt.net. = IP: [217.35.209.188] Valid Unreachable TX:1 RX:0 LOSS:100%
Host: ns1.bt.net. = IP: [217.32.105.91] Valid Unreachable TX:1 RX:0 LOSS:100%
Host: ns2.bt.net. = IP: [217.32.105.90] Valid Unreachable TX:1 RX:0 LOSS:100%
Host: rolls-royce.com. = IP: [52.17.142.199] Valid Unreachable TX:1 RX:0 LOSS:100%

Processing AAAA (IPv6 Address) Records

These records define the IP Addresse(s) of the servers responsible for hosting your webiste and other resouces on your domain

Processing Domain Public Records

Domain Name WHOIS Information - rolls-royce.com
Domain Name ROLLS-ROYCE.COM
Registry Domain ID 370916_DOMAIN_COM-VRSN
Registrar WHOIS Server whois.corporatedomains.com
Registrar URL: http://www.cscglobal.com/global/web/csc/digital-brand-services.html
Updated Date: 2018-07-17T05:38:49Z
Creation Date: 1997-07-22T04:00:00Z
Registry Expiry Date: 2020-07-21T04:00:00Z
Registrar CSC Corporate Domains, Inc.
Registrar IANA ID 299
Registrar Abuse Contact Email This email address is being protected from spambots. You need JavaScript enabled to view it.
Registrar Abuse Contact Phone 8887802723
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server NS0.BT.NET
Name Server NS1.BT.NET
Name Server NS2.BT.NET
DNSSEC unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
Website Hosting WHOIS Information - 217.35.209.188
NetRange 217.0.0.0 - 217.255.255.255
CIDR 217.0.0.0/8
NetHandle NET-217-0-0-0-1
Parent ()
NetType Allocated to RIPE NCC
OriginAS
Organization RIPE Network Coordination Centre (RIPE)
RegDate 2000-06-04
Updated 2009-03-25
Ref: https://rdap.arin.net/registry/ip/217.0.0.0
ResourceLink: https://apps.db.ripe.net/search/query.html
ResourceLink whois.ripe.net
OrgName RIPE Network Coordination Centre
OrgId RIPE
Address P.O. Box 10096
City Amsterdam
StateProv
PostalCode 1001EB
Country NL
RegDate
Updated 2013-07-29
Ref: https://rdap.arin.net/registry/entity/RIPE
ReferralServer: whois://whois.ripe.net
ResourceLink: https://apps.db.ripe.net/search/query.html
OrgAbuseHandle ABUSE3850-ARIN
OrgAbuseName Abuse Contact
OrgAbusePhone +31205354444
OrgAbuseEmail abuse@ripe.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
OrgTechHandle RNO29-ARIN
OrgTechName RIPE NCC Operations
OrgTechPhone +31 20 535 4444
OrgTechEmail hostmaster@ripe.net
OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
inetnum 217.35.209.0 - 217.35.209.255
country GB
admin-c BS1474-RIPE
tech-c BS1474-RIPE
status ASSIGNED PA
mnt-by BTNET-MNT
mnt-lower BTNET-MNT
mnt-routes BTNET-MNT
created: 2002-08-24T09:06:24Z
last-modified: 2002-08-24T09:06:24Z
source RIPE
role BTnet Support
address Adhara
address Adastral Park
address Martlesham Heath
address Ipswich
address SUFFLK IP5 3RE
address GB
phone +44 800 0858963 5
phone +44 1473 336231
admin-c FLS15-RIPE
tech-c BS1474-RIPE
nic-hdl BS1474-RIPE
mnt-by BTNET-MNT
created: 2002-04-30T07:54:10Z
last-modified: 2009-11-19T15:52:52Z
route 217.32.0.0/12
origin AS2856
mnt-by BTNET-INFRA-MNT
created: 2013-07-16T15:21:16Z
last-modified: 2014-07-31T07:35:10Z

Processing Website

Website Headers for www.rolls-royce.com
We will obtain the headers from your website and parse them for validity
Web Server is
Server header does not contain version information
Request Response HTTP/1.1 200 OK OK
SSL is available and enabled
/OU=Domain Control Validated/CN=*.rolls-royce.com
Locality
Organisation
Certificate Scope *.rolls-royce.com
Certificate Issuer
Country BE
Organisation GlobalSign nv-sa
Certificate Scope GlobalSign Domain Validation CA - SHA256 - G2
Certificate Validity
Valid From 190219095239Z
Valid To 200220095239Z
Certificate Ciphers
SN RSA-SHA256
LN sha256WithRSAEncryption
Certificate Extensions
Alternative Hostnames DNS:*.rolls-royce.com, DNS:www.welcome.rolls-royce.com, DNS:www.mylearning.rolls-royce.com, DNS:rolls-royce.com
Key Usage TLS Web Server Authentication, TLS Web Client Authentication
There was a redirect to https://www.rolls-royce.com/
General
allow Valid methods for a specified resource after a 405 : Missing
location For Redirects specifies the target : Missing
connection Control options for the current connection [keep-alive]
x-powered-by Specifies Technology in use - Security Risk : Missing
x-aspnet-version Specifies the ASP.net version - Security Risk : Missing
accept-ranges To advertise its support of partial requests : Missing
link Used to express typed relationship with another resource : Missing
upgrade HTTP/2 (The latest and faster version of HTTP is available : Missing
Security
referrer-policy Modifies the algorithm used to populate the Referer Header : Missing
x-xss-protection Prevents pages loading when XSS is detected : Missing
feature-policy Allow or Deny the use of browser features : Missing
p3p Platform for Privacy Preferences : Missing
content-security-policy CSP Content Security Policy : Missing
x-frame-options Can we open this response in an iframe : Missing
Cross Origin
access-control-allow-origin Can we share the response with the given origin : Missing
access-control-allow-credentials Tells Browsers whether to expose the response to frontend JavaScript : Missing
access-control-expose-headers Indicates which headers can be exposed as part of the Response : Missing
access-control-max-age Indicates how long the results of a preflight request can be stored : Missing
access-control-allow-methods Methods allowed when accessing the resource in response to a preflight request : Missing
access-control-allow-headers Indicates which headers can be used during the actual request : Missing
Content
content-language The natural language or languages of the intended audience : Missing
transfer-encoding The form of encoding used : Missing
content-length The length of the response body : Missing
content-type The Media type of the Response Body [text/html; charset=utf-8]
date The date and time of generation [Mon, 03 Feb 2020 14:02:42 GMT]
content-disposition An opportunity to raise a File Download dialogue box : Missing
content-encoding The type of encoding/compression used on the Response : Missing
content-location An alternate location for the returned data : Missing
content-range Where in a full body message this partial message belongs : Missing
etag An identifier for a specific version of a resource : Missing
vary how to match future request headers : Missing
x-content-type-options Types in Content-Type should NOT be changed : Missing
Cache
cache-control Tells caches whether they may cache this object [no-cache]
expires Gives the date/time after which the response is considered stale [-1]
last-modified The last modified date for the requested object : Missing
pragma Implementation-specific fields for caching [no-cache]
x-cache-action From an Intermediate cache : Missing
x-cache-hits Intermediate Cache Hits count : Missing
x-cache-age Intermediate Cache Content Age : Missing
via Informs the client of proxies through which the response was sent : Missing
age The Age this page has been cached in a proxy : Missing
x-served-by The Cache that served this response : Missing
x-cache Indicates if the cache served cached content : Missing
x-via-fastly Specific headers from Fastly : Missing
Strict Transport Security (HSTS) Policy
strict-transport-security A HSTS Policy for the client with scope : Missing
Cookies and Fragments
set-cookie Cookie Data to store locally [ASP.NET_SessionId=rccwrfxjieuvrfzunpnxb40i; path=/; secure; HttpOnly; SameSite=Lax]
Other
x-backend-server Identifies the backend server providing this response : Missing
x-robots-tag Search engine Robot Directive : Missing
gen Used by some of the GEN Tools to verify zone ownership : Missing
cf-cache-status Cloudflare Specific Header indicating cache status for this response : Missing
x-aspnetmvc-version ASP MVC Version Number - Security Risk : Missing
Robots.txt
You have a robots.txt file and it appears to be valid
Allow Entries (0) - Specific Allow
Disallow Entries (522) - Specific Disallow
Sitemap Entries (0) - Sitemaps
Other Entries (19)

Processing Website Profile Data

Website Render for www.rolls-royce.com
Technology Profile rolls-royce.com
We will check for fingerprints of common website technologies
Name : SiteCore
Confidence : low
Version :
MOZ Rank Profile https://www.rolls-royce.com/
We will retrieve your Ranking Profile from Moz.com
237483 The number of external, equity links
319649 The number of internal and external equity and non-equity links
71 The Domain Authority (DA) ( 0->100 )
62 The Page Authority (PA) ( 0->100 )
6.199999809 The MozRank of the Domain ( 0->10 )
Google Safe Browsing https://www.rolls-royce.com/
We will retrieve Safe Browsing Status from Google
This site is NOT listed as being unsafe by Google
PhishTank Lookup https://www.rolls-royce.com/
We will check PhishTank to see if your site is listed
This site is NOT listed as being unsafe by PhishTank
Alexa Rank Profile https://www.rolls-royce.com/
We will retrieve your Ranking Profile from Alexa.com
The number of external in links
Un-Ranked Your Alexa Rank
Meta Profile https://www.rolls-royce.com/
We will check the entire body for metadata
description : Rolls-Royce is a pre-eminent engineering company focused on world-class power and propulsion systems.
google-site-verification : XshdwD0LsXvqU-oloAbzze2rDqmPva-WP3smS-9JKzE
viewport : width=device-width, initial-scale=1.0, maximum-scale=1.0
format-detection : telephone=no
theme-color : #10069f

Processing Completed

Performance Profile
DNS Lookups : 0.16 seconds
DNS Folding/Unfolding : 0.00 seconds
DNS Nameserver Checks : 0.00 seconds
DNS TXT Records : 0.00 seconds
DNS MX Records : 0.09 seconds
DNS CNAME : 0.00 seconds
DNS Address : 40.04 seconds
WHOIS Lookups : 1.72 seconds
First CURL : 0.08 seconds
Second CURL : 0.63 seconds
SSL Lookup : 0.56 seconds
Header Parsing : 0.00 seconds
Robots.txt Parsing : 0.11 seconds
Website Profile : 7.19 seconds
Website MozData : 0.32 seconds
Safe Browsing : 0.07 seconds
PhishTank : 0.06 seconds
Website Alexa : 0.60 seconds
Website META : 0.44 seconds
The process is now completed and the results are shown above. The raw processing data is available HERE. Please take a moment to consider each test and its response. DNS, SMTP and HTTP are not simple protocols and it is way beyond the scope of this tool to suggest improvements, but you are welcome to request assistance via our Forum.