DNS, SSL/TLS, HTTP and HTML results for opendns.com

DNS Report

DNSSEC                 not offered
Zone transfer (AXFR)   not allowed (OK)
CAA Record             offered (OK)
SPF Record             offered (OK)
DMARC Record           not offered
MTA-STS                not offered
TLSRPT Record          not offered

Raw DNS Records

Name	TTL	Type	Data
opendns.com	86400	SOA	auth1.opendns.com noc @ opendns.com 1581160231 16384 2048 1048576 2560
opendns.com	604800	NS	auth1.opendns.com, IPv4: 208.69.39.2, IPv6: 2620:119:30:0:0:0:0:53
opendns.com	604800	NS	auth2.opendns.com, IPv4: 146.112.60.53, IPv6: 2a04:e4c0:53:0:0:0:0:53
opendns.com	604800	NS	auth3.opendns.com, IPv4: 208.69.39.2
opendns.com	300	A	146.112.62.105
opendns.com	300	CAA	0 issue digicert.com
opendns.com	300	CAA	0 issue letsencrypt.org
opendns.com	3600	CAA	0 issue quovadisglobal.com
opendns.com	60	MX	1 ASPMX.L.GOOGLE.com
opendns.com	120	MX	5 ALT1.ASPMX.L.GOOGLE.com
opendns.com	120	MX	5 ALT2.ASPMX.L.GOOGLE.com
opendns.com	3600	MX	10 ASPMX2.GOOGLEMAIL.com
opendns.com	120	MX	10 ASPMX3.GOOGLEMAIL.com
opendns.com	300	TXT	docusign=2dcbb085-bb7f-44b2-8cdd-c9a93a8c0514
opendns.com	3600	TXT	google-site-verification=1uqoSSYwOE4E7Vue1oAcKDmEt6yn5US6vuQ6shGu2dg
opendns.com	3600	TXT	google-site-verification=VXNIemKQVGZ9Q3215ANNzcTDK5ZejVDwd6RQsQ2u1GI
opendns.com	120	TXT	v=spf1 ptr include:_nets.opendns.com include:mail.zendesk.com include:amazonses.com include:_netblocks.google.com include:_netblocks2.google.com include:_netblocks3.google.com include:spf1.mailgun.org include:spf2.mailgun.org ip4:173.37.147.246 ip4:173.37
www.opendns.com	300	A	146.112.62.105

SSL/TLS Report

 A record via            supplied IP "146.112.62.105"
 rDNS (146.112.62.105):  www.opendns.com. opendns.com.
 Service detected:       HTTP


 SSL/TLS protocols 
 SSLv2      not offered (OK)
 SSLv3      not offered (OK)
 TLS 1      offered
 TLS 1.1    offered
 TLS 1.2    offered (OK)
 TLS 1.3    not offered -- downgraded
 NPN/SPDY   http/1.1 (advertised)
 ALPN/HTTP2 not offered

 SSL/TLS server implementation bugs 

 No bugs found.

 Cipher categories 

 NULL ciphers (no encryption)                  not offered (OK) -- NULL:eNULL
 Anonymous NULL Ciphers (no authentication)    not offered (OK) -- aNULL:ADH
 Export ciphers (w/o ADH+NULL)                 not offered (OK) -- EXPORT:!ADH:!NULL
 LOW: 64 Bit + DES encryption (w/o export)     not offered (OK) -- LOW:DES:!ADH:!EXP:!NULL
 Weak 128 Bit ciphers (SEED, IDEA, RC[2,4])    not offered (OK) -- MEDIUM:!aNULL:!AES:!CAMELLIA:!ARIA:!CHACHA20:!3DES
 Triple DES Ciphers (Medium)                   offered -- 3DES:!aNULL:!ADH
 High encryption (AES+Camellia, no AEAD)       offered (OK) -- HIGH:!NULL:!aNULL:!DES:!3DES:!AESGCM:!CHACHA20:!AESGCM:!CamelliaGCM:!AESCCM8:!AESCCM
 Strong encryption (AEAD ciphers)              offered (OK) -- AESGCM:CHACHA20:AESGCM:CamelliaGCM:AESCCM8:AESCCM


 Robust (perfect) forward secrecy, (P)FS -- omitting Null Authentication/Encryption, 3DES, RC4 

 PFS is offered (OK)          ECDHE-RSA-AES256-GCM-SHA384 
                              ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA 
                              DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 
                              DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA 
                              ECDHE-RSA-AES128-GCM-SHA256 
                              ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA 
                              DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 
                              DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA 
 Elliptic curves offered:     prime256v1 


 Server preferences 

 Has server cipher order?     nope (NOT ok)
 Negotiated protocol          TLSv1.2
 Negotiated cipher            ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256) (limited sense as client will pick)
 Negotiated cipher per proto  (limited sense as client will pick)
     ECDHE-RSA-AES256-SHA:          TLSv1, TLSv1.1
     ECDHE-RSA-AES256-GCM-SHA384:   TLSv1.2
 No further cipher order check has been done as order is determined by the client


 Server defaults (Server Hello) 

 TLS extensions (standard)    "server name/#0" "renegotiation info/#65281"
                              "EC point formats/#11" "session ticket/#35"
                              "status request/#5" "heartbeat/#15"
                              "next protocol/#13172"
 Session Ticket RFC 5077 hint 300 seconds, session tickets keys seems to be rotated < daily
 SSL Session ID support       yes
 Session Resumption           Tickets: yes, ID: no
 TLS clock skew               Random values, no fingerprinting possible 
 Signature Algorithm          SHA256 with RSA
 Server key size              RSA 2048 bits
 Server key usage             Digital Signature, Key Encipherment
 Server extended key usage    TLS Web Server Authentication, TLS Web Client Authentication
 Serial / Fingerprints        03A9064A6F41320D088102A35804CB2B3453 / SHA1 6C5A322CE6A8D8F4C2D9EC879D55058AEA5CEFE5
                              SHA256 51CE989AFC865FE60DA09E752BEED987B084D22637EF4164DA78084BB41B4810
 Common Name (CN)             www.opendns.com
 subjectAltName (SAN)         opendns.com www.opendns.com 
 Issuer                       Let's Encrypt Authority X3 (Let's Encrypt from US)
 Trust (hostname)             Ok via SAN (same w/o SNI)
 Chain of trust               Ok   
 EV cert (experimental)       no 
 Certificate Validity (UTC)   84 >= 30 days (2020-02-03 08:15 --> 2020-05-03 08:15)
 # of certificates provided   2
 Certificate Revocation List  --
 OCSP URI                     http://ocsp.int-x3.letsencrypt.org
 OCSP stapling                offered
 OCSP must staple extension   --
 DNS CAA RR (experimental)    available - please check for match with "Issuer" above
                              issue=digicert.com, issue=letsencrypt.org,
                              issue=quovadisglobal.com
 Certificate Transparency     yes (certificate extension)


 HTTP header response @ "/" 

 HTTP Status Code             301 Moved Permanently, redirecting to "http://www.opendns.com/" -- Redirect to insecure URL (NOT ok)
 HTTP clock skew              +7 sec from localtime
 Strict Transport Security    2628000 s = 30 days is too short ( >=15465600 seconds recommended), just this domain
 Public Key Pinning           --
 Server banner                nginx/1.17.4
 Application banner           --
 Cookie(s)                    (none issued at "/") -- maybe better try target URL of 30x
 Security headers             X-Frame-Options SAMEORIGIN
                              X-XSS-Protection 1; mode=block
 Reverse Proxy banner         --


 SSL/TLS vulnerabilities 

 Heartbleed (CVE-2014-0160)                not vulnerable (OK), timed out
 CCS (CVE-2014-0224)                       not vulnerable (OK)
 Ticketbleed (CVE-2016-9244), experiment.  not vulnerable (OK), session IDs were returned but potential memory fragments do not differ
 ROBOT                                     not vulnerable (OK)
 Secure Renegotiation (CVE-2009-3555)      not vulnerable (OK)
 Secure Client-Initiated Renegotiation     not vulnerable (OK)
 CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)
 BREACH (CVE-2013-3587)                    no HTTP compression (OK)  - only supplied "/" tested
 POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)
 TLS_FALLBACK_SCSV (RFC 7507)              Downgrade attack prevention supported (OK)
 SWEET32 (CVE-2016-2183, CVE-2016-6329)    VULNERABLE, uses 64 bit block ciphers
 FREAK (CVE-2015-0204)                     not vulnerable (OK)
 DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)
                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services
                                           https://censys.io/ipv4?q=51CE989AFC865FE60DA09E752BEED987B084D22637EF4164DA78084BB41B4810
                                           could help you to find out
 LOGJAM (CVE-2015-4000), experimental      not vulnerable (OK): no DH EXPORT ciphers, no common primes detected
 BEAST (CVE-2011-3389)                     TLS1: ECDHE-RSA-AES256-SHA
                                                 DHE-RSA-AES256-SHA
                                                 DHE-RSA-CAMELLIA256-SHA
                                                 AES256-SHA CAMELLIA256-SHA
                                                 ECDHE-RSA-AES128-SHA
                                                 DHE-RSA-AES128-SHA
                                                 DHE-RSA-CAMELLIA128-SHA
                                                 AES128-SHA CAMELLIA128-SHA
                                                 DES-CBC3-SHA 
                                           VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)
 LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS. Check patches
 RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)


 Tested 364 ciphers, ordered by encryption strength 

Hexcode  Cipher Suite Name (OpenSSL)       KeyExch.   Encryption  Bits     Cipher Suite Name (RFC)
-----------------------------------------------------------------------------------------------------------------------------
 xc030   ECDHE-RSA-AES256-GCM-SHA384       ECDH 256   AESGCM      256      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384              
 xc028   ECDHE-RSA-AES256-SHA384           ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384              
 xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                 
 x9f     DHE-RSA-AES256-GCM-SHA384         DH 2048    AESGCM      256      TLS_DHE_RSA_WITH_AES_256_GCM_SHA384                
 x6b     DHE-RSA-AES256-SHA256             DH 2048    AES         256      TLS_DHE_RSA_WITH_AES_256_CBC_SHA256                
 x39     DHE-RSA-AES256-SHA                DH 2048    AES         256      TLS_DHE_RSA_WITH_AES_256_CBC_SHA                   
 x88     DHE-RSA-CAMELLIA256-SHA           DH 2048    Camellia    256      TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA              
 x9d     AES256-GCM-SHA384                 RSA        AESGCM      256      TLS_RSA_WITH_AES_256_GCM_SHA384                    
 x3d     AES256-SHA256                     RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA256                    
 x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA                       
 x84     CAMELLIA256-SHA                   RSA        Camellia    256      TLS_RSA_WITH_CAMELLIA_256_CBC_SHA                  
 xc02f   ECDHE-RSA-AES128-GCM-SHA256       ECDH 256   AESGCM      128      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256              
 xc027   ECDHE-RSA-AES128-SHA256           ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256              
 xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                 
 x9e     DHE-RSA-AES128-GCM-SHA256         DH 2048    AESGCM      128      TLS_DHE_RSA_WITH_AES_128_GCM_SHA256                
 x67     DHE-RSA-AES128-SHA256             DH 2048    AES         128      TLS_DHE_RSA_WITH_AES_128_CBC_SHA256                
 x33     DHE-RSA-AES128-SHA                DH 2048    AES         128      TLS_DHE_RSA_WITH_AES_128_CBC_SHA                   
 x45     DHE-RSA-CAMELLIA128-SHA           DH 2048    Camellia    128      TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA              
 x9c     AES128-GCM-SHA256                 RSA        AESGCM      128      TLS_RSA_WITH_AES_128_GCM_SHA256                    
 x3c     AES128-SHA256                     RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA256                    
 x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA                       
 x41     CAMELLIA128-SHA                   RSA        Camellia    128      TLS_RSA_WITH_CAMELLIA_128_CBC_SHA                  
 x0a     DES-CBC3-SHA                      RSA        3DES        168      TLS_RSA_WITH_3DES_EDE_CBC_SHA                      


 Ciphers per protocol, ordered by encryption strength 

Hexcode  Cipher Suite Name (OpenSSL)       KeyExch.   Encryption  Bits     Cipher Suite Name (RFC)
-----------------------------------------------------------------------------------------------------------------------------
TLS 1.3  
TLS 1.2  
 xc030   ECDHE-RSA-AES256-GCM-SHA384       ECDH 256   AESGCM      256      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384              
 xc028   ECDHE-RSA-AES256-SHA384           ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384              
 xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                 
 x9f     DHE-RSA-AES256-GCM-SHA384         DH 2048    AESGCM      256      TLS_DHE_RSA_WITH_AES_256_GCM_SHA384                
 x6b     DHE-RSA-AES256-SHA256             DH 2048    AES         256      TLS_DHE_RSA_WITH_AES_256_CBC_SHA256                
 x39     DHE-RSA-AES256-SHA                DH 2048    AES         256      TLS_DHE_RSA_WITH_AES_256_CBC_SHA                   
 x88     DHE-RSA-CAMELLIA256-SHA           DH 2048    Camellia    256      TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA              
 x9d     AES256-GCM-SHA384                 RSA        AESGCM      256      TLS_RSA_WITH_AES_256_GCM_SHA384                    
 x3d     AES256-SHA256                     RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA256                    
 x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA                       
 x84     CAMELLIA256-SHA                   RSA        Camellia    256      TLS_RSA_WITH_CAMELLIA_256_CBC_SHA                  
 xc02f   ECDHE-RSA-AES128-GCM-SHA256       ECDH 256   AESGCM      128      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256              
 xc027   ECDHE-RSA-AES128-SHA256           ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256              
 xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                 
 x9e     DHE-RSA-AES128-GCM-SHA256         DH 2048    AESGCM      128      TLS_DHE_RSA_WITH_AES_128_GCM_SHA256                
 x67     DHE-RSA-AES128-SHA256             DH 2048    AES         128      TLS_DHE_RSA_WITH_AES_128_CBC_SHA256                
 x33     DHE-RSA-AES128-SHA                DH 2048    AES         128      TLS_DHE_RSA_WITH_AES_128_CBC_SHA                   
 x45     DHE-RSA-CAMELLIA128-SHA           DH 2048    Camellia    128      TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA              
 x9c     AES128-GCM-SHA256                 RSA        AESGCM      128      TLS_RSA_WITH_AES_128_GCM_SHA256                    
 x3c     AES128-SHA256                     RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA256                    
 x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA                       
 x41     CAMELLIA128-SHA                   RSA        Camellia    128      TLS_RSA_WITH_CAMELLIA_128_CBC_SHA                  
 x0a     DES-CBC3-SHA                      RSA        3DES        168      TLS_RSA_WITH_3DES_EDE_CBC_SHA                      
TLS 1.1  
 xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                 
 x39     DHE-RSA-AES256-SHA                DH 2048    AES         256      TLS_DHE_RSA_WITH_AES_256_CBC_SHA                   
 x88     DHE-RSA-CAMELLIA256-SHA           DH 2048    Camellia    256      TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA              
 x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA                       
 x84     CAMELLIA256-SHA                   RSA        Camellia    256      TLS_RSA_WITH_CAMELLIA_256_CBC_SHA                  
 xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                 
 x33     DHE-RSA-AES128-SHA                DH 2048    AES         128      TLS_DHE_RSA_WITH_AES_128_CBC_SHA                   
 x45     DHE-RSA-CAMELLIA128-SHA           DH 2048    Camellia    128      TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA              
 x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA                       
 x41     CAMELLIA128-SHA                   RSA        Camellia    128      TLS_RSA_WITH_CAMELLIA_128_CBC_SHA                  
 x0a     DES-CBC3-SHA                      RSA        3DES        168      TLS_RSA_WITH_3DES_EDE_CBC_SHA                      
TLS 1  
 xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                 
 x39     DHE-RSA-AES256-SHA                DH 2048    AES         256      TLS_DHE_RSA_WITH_AES_256_CBC_SHA                   
 x88     DHE-RSA-CAMELLIA256-SHA           DH 2048    Camellia    256      TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA              
 x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA                       
 x84     CAMELLIA256-SHA                   RSA        Camellia    256      TLS_RSA_WITH_CAMELLIA_256_CBC_SHA                  
 xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                 
 x33     DHE-RSA-AES128-SHA                DH 2048    AES         128      TLS_DHE_RSA_WITH_AES_128_CBC_SHA                   
 x45     DHE-RSA-CAMELLIA128-SHA           DH 2048    Camellia    128      TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA              
 x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA                       
 x41     CAMELLIA128-SHA                   RSA        Camellia    128      TLS_RSA_WITH_CAMELLIA_128_CBC_SHA                  
 x0a     DES-CBC3-SHA                      RSA        3DES        168      TLS_RSA_WITH_3DES_EDE_CBC_SHA                      
SSLv3  
SSLv2  

 Client simulations 

 Android 2.3.7                TLSv1.0 AES128-SHA
 Android 4.0.4                TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Android 4.1.1                TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Android 4.2.2                TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Android 4.3                  TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Android 4.4.2                TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Android 5.0.0                TLSv1.2 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Android 6.0                  TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Android 7.0                  TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 27 Win 7              TLSv1.1 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Chrome 28 Win 7              TLSv1.1 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Chrome 29 Win 7              TLSv1.1 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Chrome 30 Win 7              TLSv1.2 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Chrome 31 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 32 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 33 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 34 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 35 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 36 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 37 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 39 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 40 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 42 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 43 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 45 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 47 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 48 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 49 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 49 XP SP3             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 50 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 51 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 57 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 65 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 69 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 70 Win 10             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 10.0.12 ESR Win 7    TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Firefox 17.0.7 ESR Win 7     TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Firefox 21 Fedora 19         TLSv1.0 DHE-RSA-CAMELLIA256-SHA, 2048 bit DH
 Firefox 21 Win 7             TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Firefox 22 Win 7             TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Firefox 24.2.0 ESR Win 7     TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Firefox 24 Win 7             TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Firefox 26 Win 8             TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Firefox 27 Win 8             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 29 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 30 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 31.3.0 ESR Win 7     TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 31 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 32 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 34 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 35 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 37 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 39 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 41 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 42 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 44 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 45 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 46 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 47 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 49 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 49 XP SP3            TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 53 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 59 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 62 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 IE 6 XP                      No connection
 IE 7 Vista                   TLSv1.0 AES128-SHA
 IE 8-10 Win 7                TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 IE 8 Win 7                   TLSv1.0 AES128-SHA
 IE 8 XP                      TLSv1.0 DES-CBC3-SHA
 IE 9 Win 7                   TLSv1.0 AES128-SHA
 IE 10 Win Phone 8.0          TLSv1.0 AES128-SHA
 IE 11 Win 7                  TLSv1.2 ECDHE-RSA-AES256-SHA384, 256 bit ECDH (P-256)
 IE 11 Win 8.1                TLSv1.2 ECDHE-RSA-AES256-SHA384, 256 bit ECDH (P-256)
 IE 11 Win Phone 8.1          TLSv1.2 AES128-SHA256
 IE 11 Win Phone 8.1 Update   TLSv1.2 ECDHE-RSA-AES256-SHA384, 256 bit ECDH (P-256)
 IE 11 Win 10                 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 IE 11 Win 10 Preview         TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Edge 12 Win 10               TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Edge 13 Win 10               TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Edge 13 Win Phone 10         TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Edge 15 Win 10               TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Opera 12.15 Win 7            TLSv1.0 DHE-RSA-AES256-SHA, 2048 bit DH
 Opera 15 Win 7               TLSv1.1 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Opera 16 Win 7               TLSv1.1 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Opera 17 Win 7               TLSv1.2 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Safari 5.1.9 OS X 10.6.8     TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Safari 5 iOS 5.1.1           TLSv1.2 ECDHE-RSA-AES256-SHA384, 256 bit ECDH (P-256)
 Safari 6.0.4 OS X 10.8.4     TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Safari 6 iOS 6.0.1           TLSv1.2 ECDHE-RSA-AES256-SHA384, 256 bit ECDH (P-256)
 Safari 7 iOS 7.1             TLSv1.2 ECDHE-RSA-AES256-SHA384, 256 bit ECDH (P-256)
 Safari 7 OS X 10.9           TLSv1.2 ECDHE-RSA-AES256-SHA384, 256 bit ECDH (P-256)
 Safari 8 iOS 8.0 Beta        TLSv1.2 ECDHE-RSA-AES256-SHA384, 256 bit ECDH (P-256)
 Safari 8 iOS 8.4             TLSv1.2 ECDHE-RSA-AES256-SHA384, 256 bit ECDH (P-256)
 Safari 8 OS X 10.10          TLSv1.2 ECDHE-RSA-AES256-SHA384, 256 bit ECDH (P-256)
 Safari 9 iOS 9               TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Safari 9 OS X 10.11          TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Safari 10 iOS 10             TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Safari 10 OS X 10.12         TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Tor 17.0.9 Win 7             TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Apple ATS 9 iOS 9            TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Baidu Jan 2015               TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 BingBot Dec 2013             TLSv1.0 AES128-SHA
 BingPreview Dec 2013         TLSv1.0 DHE-RSA-AES256-SHA, 2048 bit DH
 BingPreview Jun 2014         TLSv1.0 DHE-RSA-AES256-SHA, 2048 bit DH
 BingPreview Jan 2015         TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Googlebot Oct 2013           TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Googlebot Jun 2014           TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Googlebot Feb 2015           TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Googlebot Feb 2018           TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Yahoo Slurp Oct 2013         TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Yahoo Slurp Jun 2014         TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Yahoo Slurp Jan 2015         TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 YandexBot 3.0                No connection
 YandexBot May 2014           TLSv1.0 DHE-RSA-AES256-SHA, 2048 bit DH
 YandexBot Sep 2014           TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 YandexBot Jan 2015           TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Java 6u45                    TLSv1.0 AES128-SHA
 Java 7u25                    TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Java 8b132                   TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Java 8u111                   TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Java 8u161                   TLSv1.2 ECDHE-RSA-AES256-SHA384, 256 bit ECDH (P-256)
 Java 8u31                    TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Java 9.0.4                   TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 OpenSSL 0.9.8y               TLSv1.0 DHE-RSA-AES256-SHA, 2048 bit DH
 OpenSSL 1.0.1h               TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 OpenSSL 1.0.1l               TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 OpenSSL 1.0.2e               TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)

Security HTTP Headers

HTTP Strict Transport Security (HSTS)   offered (OK)
Content Security Policy (CSP)           not offered (NOT ok)
X-Frame-Options                         offered (OK)
X-XSS-Protection                        offered (OK)
X-Content-Type-Options                  not offered
Expect-CT                               not offered
Referrer Policy                         not offered
Feature Policy                          not offered
Web Server Version Disclosure           offered (NOT ok)
Web Application Disclosure              not offered (OK)
HTTP Public Key Pins (HPKP)             not offered, deprecated

Connection Performance
Keep Alive Connection                   offered (OK)
Content Encoding (Compression)          offered (Gzip) OK, for static pages or if no secrets in the page

Raw HTTP Headers

HTTP/1.1	200 OK
Connection	keep-alive
Content-Encoding	gzip
Content-Type	text/html
Date	Sat, 08 Feb 2020 11:28:16 GMT
ETag	W/"5dc1b200-4465"
Last-Modified	Tue, 05 Nov 2019 17:31:44 GMT
Server	nginx/1.17.4
Strict-Transport-Security	max-age=2628000
X-Frame-Options	SAMEORIGIN
X-XSS-Protection	1; mode=block

Cleaned HTML

<!DOCTYPE html>
<html lang="en-US" prefix="og: http://ogp.me/ns#">
<head>

<script>
<![CDATA[
(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push(
{'gtm.start': new Date().getTime(),event:'gtm.js'}
);var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-NRNHZWW');
]]>
</script>
<script>
<![CDATA[
// setting GA Custom var values to form field names
window.testVarMap = {
1: 'Website_Test_Group_1_c',
2: 'Website_Test_Group_2__c',
3: 'Website_Test_Group_3__c',
4: 'Website_Test_Group_4__c',
5: 'Website_Test_Group_5__c'
};
]]>
</script>
<meta http-equiv="content-type" content="text/html; charset=utf-8" />
<meta name="viewport" content="width=device-width" />
<meta name="robots" content="NOODP" />
<title>Cloud Delivered Enterprise Security by OpenDNS</title>
<meta name="description" content="/" />
<link rel="canonical" href="https://www.opendns.comPredict and prevent attacks before they happen using our cloud-delivered enterprise security service. Protect any device, anywhere with OpenDNS." />
<meta property="og:locale" content="en_US" />
<meta property="og:type" content="website" />
<meta property="og:title" content="Cloud Delivered Enterprise Security by OpenDNS" />
<meta property="og:description" content="/" />
<meta property="og:url" content="https://www.opendns.comPredict and prevent attacks before they happen using our cloud-delivered enterprise security service. Protect any device, anywhere with OpenDNS." />
<meta property="og:site_name" content="OpenDNS" />
<meta property="og:image" content="https://d15ni2z53ptwz9.cloudfront.net/opendns-www/img/opendns-logo-100x38.png" />
<link rel='dns-prefetch' href='//s.w.org' />
<link rel="stylesheet" type="text/css" media="screen" href="/dist/css/styles.bundle.css" />
<link rel='stylesheet' id='flexslider-css' href='https://d15ni2z53ptwz9.cloudfront.net/opendns-www/css/flexslider.css' type='text/css' media='all' />
<link rel='stylesheet' id='qtip-css' href='https://d15ni2z53ptwz9.cloudfront.net/css/jquery.qtip.css?v=2' type='text/css' media='all' />
<link rel='stylesheet' id='fancybox-css' href='https://d15ni2z53ptwz9.cloudfront.net/opendns-www/css/jquery.fancybox.css' type='text/css' media='all' />
<link rel='stylesheet' id='chosen-css' href='https://d15ni2z53ptwz9.cloudfront.net/opendns-www/css/chosen.css' type='text/css' media='all' />
<link rel='stylesheet' id='fontawesome-css' href='https://d1t6urij26il7f.cloudfront.net/font-awesome.css?v=2' type='text/css' media='all' />
<link href="//customer.cludo.com/css/504/8844/cludo-search.min.css" type="text/css" rel="stylesheet" />
<script src="https://s3-us-west-1.amazonaws.com/webteam-cdn/js/jquery-3.4.1.min.js"></script>
<script type="text/javascript" src="//cdn.bizible.com/scripts/bizible.js" async="async"></script>
<style type="text/css">
/*<![CDATA[*/
img.c4 {display:none;}
div.c3 {background-image: url(https://d15ni2z53ptwz9.cloudfront.net/opendns-www/img/Homepage-hero.jpg);}
iframe.c2 {display:none}
iframe.c1 {display:none;visibility:hidden}
/*]]>*/
</style>
</head>
<body data-responsejs='{ "create": [{ "prop": "width", "prefix": "min-", "breakpoints": [0, 472, 712, 952] }] }' class="home page-template page-template-page-home-test page-template-page-home-test-php page page-id-1463 index homepage-main promotion using">
<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-NRNHZWW" height="0" width="0" class="c1"></iframe></noscript>
<section id="cisco-banner">
<div class="grid">
<div class="cisco-banner-logo"><a href="http://www.cisco.com/" target="_blank"><img src="https://d15ni2z53ptwz9.cloudfront.net/opendns-www/img/Cisco_Logo_RGB_Screen_White.png" class="cisco-logo--light" alt="OpenDNS is now a part of Cisco" title="OpenDNS is now a part of Cisco" /> <img src="https://d15ni2z53ptwz9.cloudfront.net/opendns-www/img/cisco-dark-logo.png" class="cisco-logo--dark" alt="OpenDNS is now a part of Cisco" title="OpenDNS is now a part of Cisco" /></a></div>
<div class="cisco-banner-learn-more">
<p>OpenDNS is now part of Cisco <a href="http://www.cisco.com/web/about/ac49/ac0/ac1/ac259/opendns.html" target="_blank">Learn More <i class="fa fa-caret-right"></i></a></p>
</div>
<div class="cisco-banner-about"><a href="http://www.cisco.com/web/about/index.html" target="_blank">About Cisco</a></div>
</div>
</section>
<div class="offscreen-nav"><a href="/" class="offscreen-nav-logo-link"><img class="offscreen-nav-logo" src="https://d15ni2z53ptwz9.cloudfront.net/opendns-www/img/logo-opendns.png" alt="Cloud Web Security for Businesses - Umbrella by OpenDNS" /></a>
<div class="offscreen-nav-container">
<ul id="menu-header-nav-business" class="offscreen-nav-menu">
<li class="menu-item"><a class="offscreen-nav-section-heading" href="https://umbrella.cisco.com/" target="">Enterprise</a></li>
</ul>
<ul id="menu-header-nav-msp" class="offscreen-nav-menu">
<li class="menu-item"><a class="offscreen-nav-section-heading" href="https://umbrella.cisco.com/partners/" target="">Partners</a></li>
</ul>
<ul id="menu-header-nav-personal" class="offscreen-nav-menu">
<li class="menu-item"><a class="offscreen-nav-section-heading" href="/home-internet-security/" target="">Consumer</a></li>
</ul>
<ul id="menu-header-nav-about" class="offscreen-nav-menu">
<li class="menu-item"><a class="offscreen-nav-section-heading" href="/about/" target="">About Us</a></li>
</ul>
<div class="persona-top">
<ul id="menu-header-nav-secondary" class="menu">
<li id="menu-item-32037" class="search-link menu-item menu-item-type-post_type menu-item-object-page menu-item-32037"><a href="/search/">Search</a></li>
<li id="menu-item-32039" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-32039"><a href="/support">Support</a></li>
<li id="menu-item-32041" class="login hidden menu-item menu-item-type-custom menu-item-object-custom menu-item-32041"><a href="https://login.opendns.com/?return_to=https://dashboard.opendns.com/">Login</a></li>
<li id="menu-item-32043" class="logout hidden menu-item menu-item-type-custom menu-item-object-custom menu-item-32043"><a href="https://dashboard.opendns.com/">Dashboard</a></li>
</ul>
</div>
</div>
</div>
<section class="page">
<header class="header">
<div class="grid"><a href="/" title="Cloud-Delivered Network Security and Threat Intelligence" class="header-logo-link"><img src="https://d15ni2z53ptwz9.cloudfront.net/opendns-www/img/logo-opendns.png" alt="Cloud-Delivered Network Security and Threat Intelligence" title="Cloud-Delivered Network Security and Threat Intelligence" class="header-logo-img" /></a>
<div class="header-offscreen-nav-trigger"></div>
<ul id="menu-header-nav-homepage" class="header-menu">
<li class="menu-item menu-item-type-custom menu-item-object-custom"><a href="https://umbrella.cisco.com/" target="">Enterprise</a></li>
<li class="menu-item menu-item-type-custom menu-item-object-custom"><a href="https://umbrella.cisco.com/partners" target="">MSP & Partners</a></li>
<li class="menu-item menu-item-type-post_type menu-item-object-page"><a href="/home-internet-security/" target="">Consumer</a></li>
<li class="menu-item menu-item-type-post_type menu-item-object-page"><a href="/about/" target="">About Us</a></li>
</ul>
<div class="header-persona-top">
<ul id="menu-header-nav-secondary-1" class="menu">
<li class="search-link menu-item menu-item-type-post_type menu-item-object-page menu-item-32037"><a href="/search/">Search</a></li>
<li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-32039"><a href="/support">Support</a></li>
<li class="login hidden menu-item menu-item-type-custom menu-item-object-custom menu-item-32041"><a href="https://login.opendns.com/?return_to=https://dashboard.opendns.com/">Login</a></li>
<li class="logout hidden menu-item menu-item-type-custom menu-item-object-custom menu-item-32043"><a href="https://dashboard.umbrella.com/">Dashboard</a></li>
</ul>
</div>
<script src="/assets/js/menu.js?v=2"></script></div>
</header>
<script type="text/javascript">
//<![CDATA[
var axel = Math.random() + "";
var a = axel * 10000000000000;
document.write('<iframe src="https://4645336.fls.doubleclick.net/activityi;src=4645336;type=q115l0;cat=unive0;ord=' + a + '?" width="1" height="1" style="display:none"><\/iframe>');
//]]>
</script> <noscript><iframe src="https://4645336.fls.doubleclick.net/activityi;src=4645336;type=q115l0;cat=unive0;ord=1?" width="1" height="1" class="c2"></iframe></noscript>
<div class="content">
<div class="image-banner homepage-hero">
<div class="banner c3"></div>
<div class="grid">
<h1 class="image-banner-heading"></h1>
<div>
<h1 class="image-banner-heading">Improve Your</h1>
<div>
<h1 class="image-banner-heading">Internet</h1>
</div>
</div>
</div>
</div>
<div class="nav-tiles grid">
<div class="nav-tile" href="https://umbrella.cisco.com/"><img class="nav-tiles__icon" src="https://d15ni2z53ptwz9.cloudfront.net/opendns-www/img/Enterprise-icon.svg" />
<h2 class="nav-tiles__heading">Enterprise Security</h2>
<p class="nav-tile__copy">Cisco Umbrella provides protection against threats on the internet such as malware, phishing, and ransomware.</p>
<a class="nav-tiles__cta" href="https://umbrella.cisco.com">Visit umbrella.cisco.com</a></div>
<div class="nav-tile" href="https://opendns.com/home-internet-security"><img class="nav-tiles__icon" src="https://d15ni2z53ptwz9.cloudfront.net/opendns-www/img/Consumer-icon.svg" />
<h2 class="nav-tiles__heading">Consumer</h2>
<p class="nav-tile__copy">OpenDNS is a suite of consumer products aimed at making your internet faster, safer, and more reliable.</p>
<a class="nav-tiles__cta" href="/home-internet-security/">Learn more</a></div>
</div>
<div class="flex-banner grid">
<h2 class="flex-banner-heading">Why users love OpenDNS</h2>
<div>
<div class="flex-banner__item"><img class="flex-banner__icon" src="https://d15ni2z53ptwz9.cloudfront.net/opendns-www/img/Delivers-faster-internet.svg" />
<h3 class="flex-banner__title">Delivers faster, more reliable home internet</h3>
<p class="flex-banner__copy">Thanks to our global data centers and peering partnerships, we shorten the routes between every network and our data centers–making your internet access even faster.</p>
</div>
<div class="flex-banner__item"><img class="flex-banner__icon" src="https://d15ni2z53ptwz9.cloudfront.net/opendns-www/img/Safer-internet.svg" />
<h3 class="flex-banner__title">Helps make the web a safer place</h3>
<p class="flex-banner__copy">With filtering or pre-configured protection, you can safeguard your family against adult content and more. It’s the easiest way to add parental and content filtering controls to every device in your home.</p>
</div>
<div class="flex-banner__item"><img class="flex-banner__icon" src="https://d15ni2z53ptwz9.cloudfront.net/opendns-www/img/Easy-to-use.svg" />
<h3 class="flex-banner__title">Easy to set up</h3>
<p class="flex-banner__copy">Get OpenDNS up and running in your home quickly and easy. PhD in Computer Science not required. Thanks to our helpful guides and knowledge base, set up is a breeze.</p>
</div>
</div>
</div>
<div class="stats grid">
<h2 class="stats__title">Numbers We Are Proud Of</h2>
<div class="box left-box">
<div><span class='number'>90</span><span class='type'>million</span></div>
<div class="stat-label">global users</div>
</div>
<div class="box middle-box">
<div><span class='number'>140</span><span class='type'>billion</span></div>
<div class="stat-label">daily DNS requests</div>
</div>
<div class="box right-box">
<div><span class='number'>100</span><span class='type'>percent</span></div>
<div class="stat-label">reliability & uptime</div>
</div>
</div>
</div>
</section>
<footer>
<div class="top">
<div class="grid">
<div class="main-column nav-footer">
<ul class="main">
<li class="columns menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children">
<h3 class="title">Quick Links</h3>
<ul class="submenu">
<li class="menu-item menu-item-type-post_type menu-item-object-page"><a href="/about/innovations/">OpenDNS Innovations</a></li>
<li class="menu-item menu-item-type-custom menu-item-object-custom"><a href="https://signup.opendns.com/premiumdns/">Premium DNS</a></li>
</ul>
</li>
<li class="columns menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children">
<h3 class="title">Who We Are</h3>
<ul class="submenu">
<li class="menu-item menu-item-type-post_type menu-item-object-page"><a href="/data-center-locations/">Data Center Locations</a></li>
</ul>
</li>
<li class="columns menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children">
<h3 class="title">Learn More</h3>
<ul class="submenu">
<li class="menu-item menu-item-type-custom menu-item-object-custom"><a href="/about/#community">Community</a></li>
</ul>
</li>
</ul>
</div>
<div class="right-column">
<ul class="social">
<li><a href="https://community.spiceworks.com/pages/opendns" class="spiceworks"><span>Spiceworks</span></a></li>
<li><a href="https://twitter.com/opendns" class="twitter"><i class="fa fa-twitter"></i><span>Twitter</span></a></li>
<li><a href="https://plus.google.com/+opendns" class="google-plus"><i class="fa fa-google-plus"></i><span>Google+</span></a></li>
<li><a href="https://www.facebook.com/OpenDNS" class="facebook"><i class="fa fa-facebook"></i><span>Facebook</span></a></li>
<li><a href="https://www.linkedin.com/company/opendns" class="linkedin"><i class="fa fa-linkedin"></i><span>LinkedIn</span></a></li>
</ul>
</div>
</div>
</div>
<div class="bottom">
<div class="grid">
<p>© OpenDNS, 2019<span class="ips">208.67.222.222 · 208.67.220.220</span></p>
<ul id="menu-footer-nav-legal" class="terms">
<li id="menu-item-31907" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-31907"><a href="http://www.cisco.com/c/en/us/about/legal/privacy-full.html">Privacy Policy</a></li>
<li id="menu-item-31909" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-31909"><a href="/sitemap/">Sitemap</a></li>
</ul>
</div>
</div>
</footer>
<script type="text/javascript">
//<![CDATA[
_bizo_data_partner_id = "5425";
//]]>
</script>
<script type="text/javascript">
//<![CDATA[

(function() {
var s = document.getElementsByTagName("script")[0];
var b = document.createElement("script");
b.type = "text/javascript";
b.async = true;
b.src = (window.location.protocol === "https:" ? "https://sjs" : "http://js") + ".bizographics.com/insight.min.js";
s.parentNode.insertBefore(b, s);
})();
//]]>
</script> <noscript><img height="1" width="1" alt="" class="c4" src="//www.bizographics.com/collect/?pid=5425&fmt=gif" /></noscript>
<script type="text/javascript">
//<![CDATA[

setTimeout(function(){var a=document.createElement("script");
var b=document.getElementsByTagName("script")[0];
a.src=document.location.protocol+"//dnn506yrbagrg.cloudfront.net/pages/scripts/0011/6878.js?"+Math.floor(new Date().getTime()/3600000);
a.async=true;a.type="text/javascript";b.parentNode.insertBefore(a,b)}, 1);
//]]>
</script>
<script>
<![CDATA[

var s = ("https:" == document.location.protocol) ? "https://ssl.pathful.com/js/scripts/secure.js":"http://pathful.com/js/scripts/capture.js"; document.write(unescape("%3Cscript src='"+s+"' type='text/javascript'%3E%3C/script%3E"));
]]>
</script>
<script>
<![CDATA[

document.cookie = "headerContactTest=false;path=/;expires=Thu, 01 Jan 1970 00:00:01 GMT";
]]>
</script>
<script type='text/javascript' src='/assets/js/combined-footer.min.js'></script>
</body>
</html>

Warnings Errors and Accessibility

line 172 column 175 - Warning: '<' + '/' + letter not allowed here
line 187 column 25 - Warning: <div> isn't allowed in <h1> elements
line 186 column 33 - Info: <h1> previously mentioned
line 187 column 42 - Warning: discarding unexpected </div>
line 187 column 48 - Warning: <div> isn't allowed in <h1> elements
line 187 column 25 - Info: <h1> previously mentioned
line 187 column 61 - Warning: discarding unexpected </div>
line 335 column 103 - Warning: unescaped & or unknown entity "&fmt"

Accessibility Checks:

line 67 column 11 - Access: [6.1.1.3]: style sheets require testing (style attribute).
line 175 column 1 - Access: [6.1.1.3]: style sheets require testing (style attribute).
line 184 column 25 - Access: [6.1.1.3]: style sheets require testing (style attribute).
line 335 column 3 - Access: [6.1.1.3]: style sheets require testing (style attribute).
line 6 column 5 - Access: [6.2.2.2]: text equivalents require updating (script).
line 6 column 5 - Access: [6.3.1.1]: programmatic objects require testing (script).
line 6 column 5 - Access: [8.1.1.1]: ensure programmatic objects are accessible (script).
line 6 column 5 - Access: [7.1.1.1]: remove flicker (script).
line 6 column 5 - Access: [2.1.1.4]: ensure information not conveyed through color alone (script).
line 6 column 5 - Access: [1.1.10.1]: <script> missing <noscript> section.
line 13 column 5 - Access: [6.2.2.2]: text equivalents require updating (script).
line 13 column 5 - Access: [6.3.1.1]: programmatic objects require testing (script).
line 13 column 5 - Access: [8.1.1.1]: ensure programmatic objects are accessible (script).
line 13 column 5 - Access: [7.1.1.1]: remove flicker (script).
line 13 column 5 - Access: [2.1.1.4]: ensure information not conveyed through color alone (script).
line 13 column 5 - Access: [1.1.10.1]: <script> missing <noscript> section.
line 41 column 5 - Access: [6.1.1.1]: style sheets require testing (link).
line 43 column 5 - Access: [6.1.1.1]: style sheets require testing (link).
line 44 column 5 - Access: [6.1.1.1]: style sheets require testing (link).
line 45 column 5 - Access: [6.1.1.1]: style sheets require testing (link).
line 46 column 5 - Access: [6.1.1.1]: style sheets require testing (link).
line 47 column 5 - Access: [6.1.1.1]: style sheets require testing (link).
line 50 column 5 - Access: [6.1.1.1]: style sheets require testing (link).
line 53 column 5 - Access: [6.2.2.2]: text equivalents require updating (script).
line 53 column 5 - Access: [6.3.1.1]: programmatic objects require testing (script).
line 53 column 5 - Access: [8.1.1.1]: ensure programmatic objects are accessible (script).
line 53 column 5 - Access: [7.1.1.1]: remove flicker (script).
line 53 column 5 - Access: [2.1.1.4]: ensure information not conveyed through color alone (script).
line 53 column 5 - Access: [1.1.10.1]: <script> missing <noscript> section.
line 55 column 5 - Access: [6.2.2.2]: text equivalents require updating (script).
line 55 column 5 - Access: [6.3.1.1]: programmatic objects require testing (script).
line 55 column 5 - Access: [8.1.1.1]: ensure programmatic objects are accessible (script).
line 55 column 5 - Access: [7.1.1.1]: remove flicker (script).
line 55 column 5 - Access: [2.1.1.4]: ensure information not conveyed through color alone (script).
line 55 column 5 - Access: [1.1.10.1]: <script> missing <noscript> section.
line 67 column 11 - Access: [6.2.1.1]: <frame> source invalid.
line 73 column 25 - Access: [10.1.1.2]: new windows require warning (_blank).
line 74 column 33 - Access: [2.1.1.1]: ensure information not conveyed through color alone (image).
line 75 column 33 - Access: [1.1.2.1]: <img> missing 'longdesc' and d-link.
line 75 column 33 - Access: [2.1.1.1]: ensure information not conveyed through color alone (image).
line 76 column 25 - Access: [1.1.2.1]: <img> missing 'longdesc' and d-link.
line 79 column 57 - Access: [10.1.1.2]: new windows require warning (_blank).
line 82 column 25 - Access: [10.1.1.2]: new windows require warning (_blank).
line 89 column 17 - Access: [2.1.1.1]: ensure information not conveyed through color alone (image).
line 90 column 9 - Access: [1.1.2.1]: <img> missing 'longdesc' and d-link.
line 116 column 151 - Access: [13.1.1.1]: link text not meaningful.
line 128 column 17 - Access: [2.1.1.1]: ensure information not conveyed through color alone (image).
line 129 column 9 - Access: [1.1.2.1]: <img> missing 'longdesc' and d-link.
line 154 column 130 - Access: [13.1.1.1]: link text not meaningful.
line 158 column 17 - Access: [6.2.2.2]: text equivalents require updating (script).
line 158 column 17 - Access: [6.3.1.1]: programmatic objects require testing (script).
line 158 column 17 - Access: [8.1.1.1]: ensure programmatic objects are accessible (script).
line 158 column 17 - Access: [7.1.1.1]: remove flicker (script).
line 158 column 17 - Access: [2.1.1.4]: ensure information not conveyed through color alone (script).
line 158 column 17 - Access: [1.1.10.1]: <script> missing <noscript> section.
line 169 column 1 - Access: [6.2.2.2]: text equivalents require updating (script).
line 169 column 1 - Access: [6.3.1.1]: programmatic objects require testing (script).
line 169 column 1 - Access: [8.1.1.1]: ensure programmatic objects are accessible (script).
line 169 column 1 - Access: [7.1.1.1]: remove flicker (script).
line 169 column 1 - Access: [2.1.1.4]: ensure information not conveyed through color alone (script).
line 169 column 1 - Access: [1.1.10.1]: <script> missing <noscript> section.
line 175 column 1 - Access: [6.2.1.1]: <frame> source invalid.
line 196 column 49 - Access: [2.1.1.1]: ensure information not conveyed through color alone (image).
line 197 column 41 - Access: [1.1.1.1]: <img> missing 'alt' text.
line 197 column 41 - Access: [1.1.2.1]: <img> missing 'longdesc' and d-link.
line 202 column 49 - Access: [2.1.1.1]: ensure information not conveyed through color alone (image).
line 203 column 41 - Access: [1.1.1.1]: <img> missing 'alt' text.
line 203 column 41 - Access: [1.1.2.1]: <img> missing 'longdesc' and d-link.
line 215 column 57 - Access: [2.1.1.1]: ensure information not conveyed through color alone (image).
line 216 column 57 - Access: [1.1.1.1]: <img> missing 'alt' text.
line 216 column 57 - Access: [1.1.2.1]: <img> missing 'longdesc' and d-link.
line 220 column 57 - Access: [2.1.1.1]: ensure information not conveyed through color alone (image).
line 221 column 57 - Access: [1.1.1.1]: <img> missing 'alt' text.
line 221 column 57 - Access: [1.1.2.1]: <img> missing 'longdesc' and d-link.
line 225 column 57 - Access: [2.1.1.1]: ensure information not conveyed through color alone (image).
line 226 column 57 - Access: [1.1.1.1]: <img> missing 'alt' text.
line 226 column 57 - Access: [1.1.2.1]: <img> missing 'longdesc' and d-link.
line 321 column 1 - Access: [6.2.2.2]: text equivalents require updating (script).
line 321 column 1 - Access: [6.3.1.1]: programmatic objects require testing (script).
line 321 column 1 - Access: [8.1.1.1]: ensure programmatic objects are accessible (script).
line 321 column 1 - Access: [7.1.1.1]: remove flicker (script).
line 321 column 1 - Access: [2.1.1.4]: ensure information not conveyed through color alone (script).
line 321 column 1 - Access: [1.1.10.1]: <script> missing <noscript> section.
line 324 column 1 - Access: [6.2.2.2]: text equivalents require updating (script).
line 324 column 1 - Access: [6.3.1.1]: programmatic objects require testing (script).
line 324 column 1 - Access: [8.1.1.1]: ensure programmatic objects are accessible (script).
line 324 column 1 - Access: [7.1.1.1]: remove flicker (script).
line 324 column 1 - Access: [2.1.1.4]: ensure information not conveyed through color alone (script).
line 324 column 1 - Access: [1.1.10.1]: <script> missing <noscript> section.
line 335 column 3 - Access: [2.1.1.1]: ensure information not conveyed through color alone (image).
line 335 column 115 - Access: [1.1.1.1]: <img> missing 'alt' text.
line 338 column 1 - Access: [6.2.2.2]: text equivalents require updating (script).
line 338 column 1 - Access: [6.3.1.1]: programmatic objects require testing (script).
line 338 column 1 - Access: [8.1.1.1]: ensure programmatic objects are accessible (script).
line 338 column 1 - Access: [7.1.1.1]: remove flicker (script).
line 338 column 1 - Access: [2.1.1.4]: ensure information not conveyed through color alone (script).
line 338 column 1 - Access: [1.1.10.1]: <script> missing <noscript> section.
line 345 column 1 - Access: [6.2.2.2]: text equivalents require updating (script).
line 345 column 1 - Access: [6.3.1.1]: programmatic objects require testing (script).
line 345 column 1 - Access: [8.1.1.1]: ensure programmatic objects are accessible (script).
line 345 column 1 - Access: [7.1.1.1]: remove flicker (script).
line 345 column 1 - Access: [2.1.1.4]: ensure information not conveyed through color alone (script).
line 345 column 1 - Access: [1.1.10.1]: <script> missing <noscript> section.
line 350 column 1 - Access: [6.2.2.2]: text equivalents require updating (script).
line 350 column 1 - Access: [6.3.1.1]: programmatic objects require testing (script).
line 350 column 1 - Access: [8.1.1.1]: ensure programmatic objects are accessible (script).
line 350 column 1 - Access: [7.1.1.1]: remove flicker (script).
line 350 column 1 - Access: [2.1.1.4]: ensure information not conveyed through color alone (script).
line 350 column 1 - Access: [1.1.10.1]: <script> missing <noscript> section.
line 354 column 1 - Access: [6.2.2.2]: text equivalents require updating (script).
line 354 column 1 - Access: [6.3.1.1]: programmatic objects require testing (script).
line 354 column 1 - Access: [8.1.1.1]: ensure programmatic objects are accessible (script).
line 354 column 1 - Access: [7.1.1.1]: remove flicker (script).
line 354 column 1 - Access: [2.1.1.4]: ensure information not conveyed through color alone (script).
line 354 column 1 - Access: [1.1.10.1]: <script> missing <noscript> section.
line 94 column 33 - Warning: <a> attribute "target" lacks value
line 99 column 33 - Warning: <a> attribute "target" lacks value
line 104 column 33 - Warning: <a> attribute "target" lacks value
line 109 column 33 - Warning: <a> attribute "target" lacks value
line 136 column 5 - Warning: <a> attribute "target" lacks value
line 139 column 5 - Warning: <a> attribute "target" lacks value
line 142 column 5 - Warning: <a> attribute "target" lacks value
line 145 column 5 - Warning: <a> attribute "target" lacks value
line 195 column 41 - Warning: <div> proprietary attribute "href"
line 201 column 41 - Warning: <div> proprietary attribute "href"
Info: Document content looks like HTML5
<HTMLYSE> found 16 warnings and 0 errors!

Test DNS, SSL/TLS, HTTP and HTML

Test results for opendns.com

DNS Report

SSL/TLS Report

Security HTTP Headers

Cleaned HTML

Warnings Errors and Accessibility