Check DNS, Urls + Redirects, Certificates and Content of your Website
0 in Queue, 0 of max. 4 Checks (09:03:42)
Why should you only use Prefix - Cookies?
|
Hall of Fame -
A+
and
A
Short FAQ
show
How do I use that tool?
Insert a valid domain name, without http:// or https://, without www:
yourdomain.com
If you check a domain name, non-www and www (if defined), http and https is checked.
Add a port or / and a file and path:
yourdomain.com:5001
yourdomain.com/subfolder-of-your-domain
yourdomain.com/subfolder/file-to-check.html
yourdomain.com:5001/subfolder/file-to-check.html
Insert a valid / public ipv4- or ipv6-address:
1.1.1.1
2a01:238:301b::1226
ipv6 with port:
[2a01:238:301b::1226]:443
If you check an ip address, you may add your domain name in the "hostname" field.
That's helpful if your domain has an ipv4-address and if you want to add an ipv6-address.
You can check your ipv6-address without having an AAAA-record in your DNS.
Checking ip addresses no DNS-checks are done -> that's very short and helpful, if your name server is buggy / slow.
Sample:
https://check-your-website.server-daten.de/?q=2a01:238:301b::1226&h=www.server-daten.de
- Grade A.
If you check a port, normally one check (http or https) is wrong. Ignore that wrong result. Typical programs use only one protocol with one port. There are some programs (Ookla Speedtest, VestaCP, WebMin) who are able to use one port with both protocols http/https.
Insert a valid
Internationalized Domain Name
(IDN)
First click: The IDN is transformed to the xn-- version.
Second click: The check starts with the xn-- version.
The result of an IDN-check shows both versions.
Sometimes special code parts are updated. That requires, that no check is running. So new jobs are added to the
Queue
, but not executed (max. 0 Checks). Wait some minutes.
QR Code of your domain name required? Double-click in the text box.
Which Grade should I have, if the domain name has a website?
If it is your first certificate: Grade
B
without HSTS
and without Cookie errors. Yes, without HSTS, don't add HSTS if it's your first certificate.
If your certificate renew works: Grade
A
with HSTS. If your certificate renew
really works
, you may add the domain to the Google Preload list. Then browsers use always https to connect your domain. That's Grade
A+
.
Short:
Fatal:
Domain doesn't end with a public suffix, isn't registered, private ip addresses are defined (
Z
,
U
,
Y
).
Port 80 and port 443 must answer, no TCP-errors (
V
,
W
), Timeouts (
T
), Server Errors (
S
)
No global SSL error or only Tls.1.3 (
P
), http over port 443 or https over port 80 (
Q
)
All certificates are valid (no
N
), no misconfiguration (
M
), no wrong redirects (
R
)
No old/weak connection or insecure Cipher Suites (
O
), no Loop (
L
), no different ip addresses of the same domain name with different answers (
K
)
No mixed content / missing resources, errors in svg definitions etc. (
I
)
If you have one of these errors, users may have problems using your site.
Better:
No http result (
H
)
Correct redirects (no
F
,
E
,
D
)
If non-www + www is defined: One destination (no
C
)
No cookies via http or cookie errors, all https cookies secure, SameSite-Attribute (
B
without warnings)
If HSTS is defined: No HSTS-parse errors
If you use HSTS and your certificate is invalid (wrong domain name, expired, revoked), visitors can't create an exception in their browser. So it's impossible to visit your site. HSTS requires an
always valid certificate
, so you shouldn't add HSTS if you don't know your certificate renew works.
But if the certificate renew works, HSTS + Preload is an amazing feature. Browsers connect your domain
only
via https, so it's impossible to add cookies via http.
If your domain is preloaded: That means, your domain is in the alpha source code of Chrome included. Beta follows, then the stable version, two months. Check chrome://net-internals/#hsts - there "Query HSTS/PKP domain". Use server-daten.de to see the output of a preloaded domain, compare it with your domain. If you see "Not found", you have to wait some weeks.
I dont't run a website, I want to check my mail server ...
May be you have a pure mail server without a website. Then check it.
All standard mail ports are checked: 25, 110, 143, 465, 587, 993, 995. With their certificates, port 25 / 587 via STARTTLS.
See the Connections- and the Portcheck-Part.
Check your mail server Cipher Suites: Port 25, 465, 587, 993, 995.
Port 25 / 587 have an additional Open-Relay-Check. That's tested
after
switching to TLS via STARTTLS.
Some informations are domain-specific. If you check mail.yourdomain.net, you won't see a MX-result (because you don't have own MX entries with mail.yourdomain.net). Instead check yourdomain.net.
The result-calculation is website-specific. If you check a pure mail server without port 80 / 443, ignore the grade.
Cipher Suites...
219 Cipher Suites are checked with an own-compiled OpenSsl-Version 1.1.1 (started 2022-08-09). That works with ipv4 and ipv6
That version checks some old and normally deactivated ciphers: RC4, -NULL-, anonymous ciphers.
15 additional Ciphers are checked with the old OpenSsl 0.9.8. Ciphers with MD5, Export-Ciphers. That doesn't work with IPv6. These Ciphers are removed in OpenSsl 1.0.2.
Official versions: 1.1.1 doesn't check weak ciphers, 1.0.2 doesn't work with ipv6. Using these official versions it was impossible to check ipv6 with RC4 / -NULL- / anon.
Check of one combination Domain + IP + Port: Max. 60 - 120 seconds. Longer: Your configuration is too slow or you use too much Cipher Suites. Max. 10 - 20 are required. Half of all Cipher Checks need max. 120 seconds, 2 checks per second.
Ssl2 / Ssl3 active, insecure Ciphers or missing FS (Forward Secrecy) - Grade O. That's a global server configuration, so all ports are used to calculate the result.
Older results are not recalculated, so you may see results Grade B + no FS etc.
Check
Find
...
skip EDNS-Check
skip Content-Check
check links
Find
∑
A+
Top + Preload
667
A
Top
2726
B
no HSTS, unsecure Cookies
12100
C
Many http status 200
6497
D
redir http ⇒ http
617
E
http ⇒ https other domain
6076
F
https ⇒ http
942
H
result http
7452
I
Content problems
19099
J
General Configuration
1976
K
ip addresses with diff. status
182
L
Loop - fatal
3699
M
Misconfiguration
6302
N
Certificate not trusted
78914
O
old connection
6793
P
Tls-Protocol error
5256
Q
http sent over port 443
5294
R
redir not existing domain
1014
S
Server error (500)
9756
T
Timeout
44703
U
Unknown - no dns / wrong IDN
14899
V
Connect failure
38131
W
wrong Web-Response
8616
X
DNS-problem Nameserver
53023
Y
private IP
6474
Z
private, tld not in PSL
3424
⁕
running jobs
0
⁂
Queue
0
#
error
0
started
2018-10-27
1,862 days
Domains
185.09 / day
344,633
last 24 h
Dom./Checks
96/110
Checks
277.26 / day
516,260
Current
7a6707da55b9.sn.mynetname.net
T
attt-interop.tn
X
woikecloud.ddns.net
X
sebekhet.org
O
loadex.com.au
N
aula.alexmontv.nl
W
dcindymedia.org
S
fleurophoenix.com
P
q2cf3zh.com
V
joeshimkus.com
A+
lahelmondia.nl
N
comcastbusiness.com
T
stewartservers.com
X
hostkey.com
I-
infotep.gob.do
M
gafitvapp.win:8080
W
uaenorth.azure.glb.confluent.cloud
X
jailatm.com
O
hazem.gg
A
meteomatic.nl/radarchief9
E
iamq.dev
S
smartv.com
N
kirsch.tech
O
nc.kirsch.tech
N
swingsign.com
P
cp.ramard.com.ar
S
mahdia.ru
X
maomi.fi
V
easyticketing.it
X
undangan.kk3.my.id
X
Good
joeshimkus.com
A+
gamberorotto.com
A+
server-daten.de
A+
hazem.gg
A
kikimagtravel.fr
A
pathway.com
C
meteomatic.nl/radarchief9
E
adm88.amoba88.com
E
sphinxnet.com
H
support.jpcvdp.nl
H
hostkey.com
I
hslrooms.med.nyu.edu
I
furiousdice.co.uk
I
konnyaku.mydns.jp
L
infotep.gob.do
M
acfondos.info
M
emby.nolla.eu
M
loadex.com.au
N
lahelmondia.nl
N
smartv.com
N
nc.kirsch.tech
N
consolelog.store
N
nas.mxj.fr
N
bile.media
N
callo.nz
N
invoices.wizidee.com
N
video-player.vas.it
N
84.149.105.8
N
pr5140.staging.deploys.pathway.com
N
sebekhet.org
O
Worst
store.fitorforestal.com
Y
attt-interop.tn
X
woikecloud.ddns.net
X
stewartservers.com
X
uaenorth.azure.glb.confluent.cloud
X
mahdia.ru
X
easyticketing.it
X
undangan.kk3.my.id
X
happyeservice.dtac.co.th
X
ddch.dtac.co.th
X
sslshopper.com
X
dtac.co.th
X
arcgis.springgrove.org
X
springgrove.org
X
vle.ase.md
X
servicedesk.softvision.com.br
X
ethiotelecom.et
X
musee-bossuet.fr
X
oixio.dedyn.io
X
si7a20209.ddns.net
X
syndicat-eau-maillet36.fr
X
smartsmart.dev
X
staging.deploys.pathway.com
X
dvnielsalas.zapto.org
X
aula.alexmontv.nl
W
gafitvapp.win:8080
W
analytics-dev.interatica.com:3000/reports/test_show_nv1/genmab-duobody-nv1
W
tinypig.co.uk
W
invoices.aife.wizidee.com/process
W
q2cf3zh.com
V
Do you like this page? Support this tool, add a link on your page:
<a href="https://check-your-website.server-daten.de/" target="_blank">Check your Website</a>
Copy to Clipboard
Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro
I agree
By clicking on the button you agree that cookies are stored in your browser.
I don't agree
Information on the stored cookies can be found at
data protection#Cookies
.