Check DNS, Urls + Redirects, Certificates and Content of your Website

Host	Type	IP-Address	is auth.	∑ Queries	∑ Timeout
hp-67.com	A	98.246.255.230 Beaverton/Oregon/United States (US) - Comcast Cable Communications, LLC Hostname: c-98-246-255-230.hsd1.or.comcast.net	yes	1	0
	AAAA		yes
www.hp-67.com	A	98.246.255.230 Beaverton/Oregon/United States (US) - Comcast Cable Communications, LLC Hostname: c-98-246-255-230.hsd1.or.comcast.net	yes	1	0
	AAAA		yes
*.hp-67.com	A	Name Error	yes
	AAAA	Name Error	yes
	CNAME	Name Error	yes

2. DNSSEC

Zone (*)	DNSSEC - Informations

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 951, Flags 256


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 02.04.2023, 00:00:00 +, Signature-Inception: 12.03.2023, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: com
com	1 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 30909, DigestType 2 and Digest 4tPJFvbe6scylOgmj7WIUESoM/xUWViPSpGEz8QaV2Y=


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 31.03.2023, 17:00:00 +, Signature-Inception: 18.03.2023, 16:00:00 +, KeyTag 951, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 951 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 30909, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 36739, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 26.03.2023, 18:24:21 +, Signature-Inception: 11.03.2023, 18:19:21 +, KeyTag 30909, Signer-Name: com


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 30909 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 30909, DigestType 2 and Digest "4tPJFvbe6scylOgmj7WIUESoM/xUWViPSpGEz8QaV2Y=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: hp-67.com
hp-67.com	3 DS RR in the parent zone found


	DS with Algorithm 13, KeyTag 26421, DigestType 1 and Digest 3iPVuBE1WM/xCQeTT2VTbCi/xOc=


	DS with Algorithm 13, KeyTag 26421, DigestType 2 and Digest yrEGQDjpaXoLIXAKRhuAIo7cHMbfj4lkfPk1sqU9VqE=


	DS with Algorithm 13, KeyTag 26421, DigestType 4 and Digest pw8qVxaWsexMZFcaR+fSnBnWuO1qud6qNwNUTkoH+2ANLF9RNr4EnNwQQRTe9pNk


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner hp-67.com., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 22.03.2023, 05:47:37 +, Signature-Inception: 15.03.2023, 04:37:37 +, KeyTag 36739, Signer-Name: com


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 36739 used to validate the DS RRSet in the parent zone


	3 DNSKEY RR found


	Public Key with Algorithm 13, KeyTag 5362, Flags 256


	Public Key with Algorithm 13, KeyTag 7567, Flags 256


	Public Key with Algorithm 13, KeyTag 26421, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner hp-67.com., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 30.03.2023, 00:00:00 +, Signature-Inception: 09.03.2023, 00:00:00 +, KeyTag 26421, Signer-Name: hp-67.com


	• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 26421 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 26421, DigestType 1 and Digest "3iPVuBE1WM/xCQeTT2VTbCi/xOc=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone


	• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 26421, DigestType 2 and Digest "yrEGQDjpaXoLIXAKRhuAIo7cHMbfj4lkfPk1sqU9VqE=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone


	• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 26421, DigestType 4 and Digest "pw8qVxaWsexMZFcaR+fSnBnWuO1qud6qNwNUTkoH+2ANLF9RNr4EnNwQQRTe9pNk" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone


	RRSIG Type 1 validates the A - Result: 98.246.255.230 Validated: RRSIG-Owner hp-67.com., Algorithm: 13, 2 Labels, original TTL: 14400 sec, Signature-expiration: 30.03.2023, 00:00:00 +, Signature-Inception: 09.03.2023, 00:00:00 +, KeyTag 7567, Signer-Name: hp-67.com


	RRSIG Type 16 validates the TXT - Result: google-site-verification=f-OrdhKj2tUcgbhr8uPI-XeeauOQguSjG1ffH57FPBQ v=spf1 mx a a:fwdlb.pairnic.com a:mx1.pairnic.com a:mx2.pairnic.com a:mx3.pairnic.com a:mx4.pairnic.com ~all Validated: RRSIG-Owner hp-67.com., Algorithm: 13, 2 Labels, original TTL: 14400 sec, Signature-expiration: 30.03.2023, 00:00:00 +, Signature-Inception: 09.03.2023, 00:00:00 +, KeyTag 7567, Signer-Name: hp-67.com


	RRSIG Type 257 validates the CAA - Result: 5\|issueletsencrypt.org Validated: RRSIG-Owner hp-67.com., Algorithm: 13, 2 Labels, original TTL: 14400 sec, Signature-expiration: 30.03.2023, 00:00:00 +, Signature-Inception: 09.03.2023, 00:00:00 +, KeyTag 7567, Signer-Name: hp-67.com


	CNAME-Query sends a valid NSEC RR as result with the query name "hp-67.com" equal the NSEC-owner "hp-67.com" and the NextOwner "_dmarc.hp-67.com". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, NS, SOA, MX, TXT, RRSIG, NSEC, DNSKEY, CAA Validated: RRSIG-Owner hp-67.com., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 30.03.2023, 00:00:00 +, Signature-Inception: 09.03.2023, 00:00:00 +, KeyTag 7567, Signer-Name: hp-67.com


	Status: Good. NoData-Proof required and found.


	AAAA-Query sends a valid NSEC RR as result with the query name "hp-67.com" equal the NSEC-owner "hp-67.com" and the NextOwner "_dmarc.hp-67.com". So the zone confirmes the not-existence of that AAAA RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, NS, SOA, MX, TXT, RRSIG, NSEC, DNSKEY, CAA Validated: RRSIG-Owner hp-67.com., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 30.03.2023, 00:00:00 +, Signature-Inception: 09.03.2023, 00:00:00 +, KeyTag 7567, Signer-Name: hp-67.com


	Status: Good. NoData-Proof required and found.


	TLSA-Query (_443._tcp.hp-67.com) sends a valid NSEC RR as result with the owner name hp-67.com. So that's the Closest Encloser of the query name. TLSA-Query sends a valid NSEC RR as result and covers the Wildcard expansion of the ClosestEncloser with the owner "hp-67.com" and the NextOwner "_dmarc.hp-67.com". So that NSEC confirms the not-existence of the Wildcard expansion. Bitmap: A, NS, SOA, MX, TXT, RRSIG, NSEC, DNSKEY, CAA Validated: RRSIG-Owner hp-67.com., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 30.03.2023, 00:00:00 +, Signature-Inception: 09.03.2023, 00:00:00 +, KeyTag 7567, Signer-Name: hp-67.com


	Status: Good. NXDomain-Proof required and found.


	TLSA-Query (_443._tcp.hp-67.com) sends a valid NSEC RR as result with the query name "_443._tcp.hp-67.com" between the NSEC-owner "1562094512.67._domainkey.hp-67.com" and the NextOwner "_wpxk96646vhza8x2i8932ggweyke6482.hp-67.com". So the zone confirmes the not-existence of that TLSA RR.TLSA-Query (_443._tcp.hp-67.com) sends a valid NSEC RR as result with the parent Wildcard "*._tcp.hp-67.com" between the NSEC-owner "1562094512.67._domainkey.hp-67.com" and the NextOwner "_wpxk96646vhza8x2i8932ggweyke6482.hp-67.com". So the zone confirmes the not-existence of that Wildcard-expansion. Bitmap: TXT, RRSIG, NSEC Validated: RRSIG-Owner 1562094512.67._domainkey.hp-67.com., Algorithm: 13, 5 Labels, original TTL: 3600 sec, Signature-expiration: 30.03.2023, 00:00:00 +, Signature-Inception: 09.03.2023, 00:00:00 +, KeyTag 7567, Signer-Name: hp-67.com


	Status: Good. NXDomain-Proof required and found.

Zone: www.hp-67.com
www.hp-67.com	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC RR as result with the domain name between the NSEC-Owner "www.hp-67.com" and the NextOwner "hp-67.com". So the parent zone confirmes the non-existence of a DS RR. Bitmap: A, RRSIG, NSEC, CAA


	RRSIG Type 1 validates the A - Result: 98.246.255.230 Validated: RRSIG-Owner www.hp-67.com., Algorithm: 13, 3 Labels, original TTL: 14400 sec, Signature-expiration: 30.03.2023, 00:00:00 +, Signature-Inception: 09.03.2023, 00:00:00 +, KeyTag 7567, Signer-Name: hp-67.com


	RRSIG Type 257 validates the CAA - Result: 5\|issueletsencrypt.org Validated: RRSIG-Owner www.hp-67.com., Algorithm: 13, 3 Labels, original TTL: 14400 sec, Signature-expiration: 30.03.2023, 00:00:00 +, Signature-Inception: 09.03.2023, 00:00:00 +, KeyTag 7567, Signer-Name: hp-67.com


	CNAME-Query sends a valid NSEC RR as result with the query name "www.hp-67.com" equal the NSEC-owner "www.hp-67.com" and the NextOwner "hp-67.com". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, RRSIG, NSEC, CAA Validated: RRSIG-Owner www.hp-67.com., Algorithm: 13, 3 Labels, original TTL: 3600 sec, Signature-expiration: 30.03.2023, 00:00:00 +, Signature-Inception: 09.03.2023, 00:00:00 +, KeyTag 7567, Signer-Name: hp-67.com


	Status: Good. NoData-Proof required and found.


	TXT-Query sends a valid NSEC RR as result with the query name "www.hp-67.com" equal the NSEC-owner "www.hp-67.com" and the NextOwner "hp-67.com". So the zone confirmes the not-existence of that TXT RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, RRSIG, NSEC, CAA Validated: RRSIG-Owner www.hp-67.com., Algorithm: 13, 3 Labels, original TTL: 3600 sec, Signature-expiration: 30.03.2023, 00:00:00 +, Signature-Inception: 09.03.2023, 00:00:00 +, KeyTag 7567, Signer-Name: hp-67.com


	Status: Good. NoData-Proof required and found.


	AAAA-Query sends a valid NSEC RR as result with the query name "www.hp-67.com" equal the NSEC-owner "www.hp-67.com" and the NextOwner "hp-67.com". So the zone confirmes the not-existence of that AAAA RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, RRSIG, NSEC, CAA Validated: RRSIG-Owner www.hp-67.com., Algorithm: 13, 3 Labels, original TTL: 3600 sec, Signature-expiration: 30.03.2023, 00:00:00 +, Signature-Inception: 09.03.2023, 00:00:00 +, KeyTag 7567, Signer-Name: hp-67.com


	Status: Good. NoData-Proof required and found.


	TLSA-Query (_443._tcp.www.hp-67.com) sends a valid NSEC RR as result with the owner name www.hp-67.com. So that's the Closest Encloser of the query name. TLSA-Query sends a valid NSEC RR as result and covers the Wildcard expansion of the ClosestEncloser with the owner "www.hp-67.com" and the NextOwner "hp-67.com". So that NSEC confirms the not-existence of the Wildcard expansion. TLSA-Query (_443._tcp.www.hp-67.com) sends a valid NSEC RR as result with the query name "_443._tcp.www.hp-67.com" between the NSEC-owner "www.hp-67.com" and the NextOwner "hp-67.com". So the zone confirmes the not-existence of that TLSA RR.TLSA-Query (_443._tcp.www.hp-67.com) sends a valid NSEC RR as result with the parent Wildcard "*._tcp.www.hp-67.com" between the NSEC-owner "www.hp-67.com" and the NextOwner "hp-67.com". So the zone confirmes the not-existence of that Wildcard-expansion. Bitmap: A, RRSIG, NSEC, CAA Validated: RRSIG-Owner www.hp-67.com., Algorithm: 13, 3 Labels, original TTL: 3600 sec, Signature-expiration: 30.03.2023, 00:00:00 +, Signature-Inception: 09.03.2023, 00:00:00 +, KeyTag 7567, Signer-Name: hp-67.com


	Status: Good. NXDomain-Proof required and found.

3. Name Servers

Domain	Nameserver	NS-IP
www.hp-67.com	• ns5.pairnic.com / ns5.pairdomains.net		•
hp-67.com	• ns5.pairnic.com / ns5.pairdomains.net	216.92.3.95 Pittsburgh/Pennsylvania/United States (US) - pair Networks	•
	•	2607:f440::d85c:35f Pittsburgh/Pennsylvania/United States (US) - pair Networks	•
	• ns6.pairnic.com / ns6.pairdomains.net	216.146.192.246 Pittsburgh/Pennsylvania/United States (US) - pair Networks	•
	•	2607:f441::d892:c0f6 Denver/Colorado/United States (US) - pair Networks	•
com	• a.gtld-servers.net / nnn1-fra6		•
	• b.gtld-servers.net / nnn1-elpar7		•
	• c.gtld-servers.net / nnn1-fra6		•
	• d.gtld-servers.net / nnn1-fra6		•
	• e.gtld-servers.net / nnn1-fra6		•
	• f.gtld-servers.net / nnn1-fra5		•
	• g.gtld-servers.net / nnn1-fra5		•
	• h.gtld-servers.net / nnn1-fra5		•
	• i.gtld-servers.net / nnn1-fra5		•
	• j.gtld-servers.net / nnn1-nlams-1a		•
	• k.gtld-servers.net / nnn1-nlams-1d		•
	• l.gtld-servers.net / nnn1-nlams-1b		•
	• m.gtld-servers.net / nnn1-nlams-1d		•

4. SOA-Entries

Domain:	com
Zone-Name:	com
Primary:	a.gtld-servers.net
Mail:	nstld.verisign-grs.com
Serial:	1679163808
Refresh:	1800
Retry:	900
Expire:	604800
TTL:	86400
num Entries:	2

Domain:	com
Zone-Name:	com
Primary:	a.gtld-servers.net
Mail:	nstld.verisign-grs.com
Serial:	1679163823
Refresh:	1800
Retry:	900
Expire:	604800
TTL:	86400
num Entries:	11

Domain:	hp-67.com
Zone-Name:	hp-67.com
Primary:	ns5.pairnic.com
Mail:	root.pair.com
Serial:	2023012780
Refresh:	3600
Retry:	300
Expire:	604800
TTL:	3600
num Entries:	4

Domain:	www.hp-67.com
Zone-Name:	hp-67.com
Primary:	ns5.pairnic.com
Mail:	root.pair.com
Serial:	2023012780
Refresh:	3600
Retry:	300
Expire:	604800
TTL:	3600
num Entries:	1

5. Screenshots

Startaddress: https://hp-67.com/, address used: https://hp-67.com/, Screenshot created 2023-03-27 17:45:59 +00:0

Mobil (412px x 732px)

360 milliseconds

Mobil + Landscape (732px x 412px)

305 milliseconds

Screenshot mobile landscape - https://hp-67.com/

Screen (1280px x 1680px)

466 milliseconds

Mobile- and other Chrome-Checks

	width	height
visual Viewport	396	732
content Size	396	2938

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

6. Url-Checks

show header:

Domainname	Http-Status	redirect	Sec.	G
• http://hp-67.com/ 98.246.255.230	301	https://hp-67.com/ Html is minified: 109.46 %	0.390	A
Server: nginx
Date: Sat, 18 Mar 2023 18:25:07 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://hp-67.com/
Content-Security-Policy: upgrade-insecure-requests ; require-trusted-types-for 'script' ; default-src 'none' ; base-uri 'self' https://hp-67.com/ ; frame-ancestors 'none' ; form-action 'self' https://hp-67.com/ ; img-src 'self' https://hp-67.com/ ; script-src 'none' ; style-src 'self' https://hp-67.com/ ; object-src 'none'
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer
Permissions-Policy: midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()

• http://www.hp-67.com/ 98.246.255.230	301	https://www.hp-67.com/ Html is minified: 109.46 %	0.380	A
Server: nginx
Date: Sat, 18 Mar 2023 18:25:07 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://www.hp-67.com/
Content-Security-Policy: upgrade-insecure-requests ; require-trusted-types-for 'script' ; default-src 'none' ; base-uri 'self' https://hp-67.com/ ; frame-ancestors 'none' ; form-action 'self' https://hp-67.com/ ; img-src 'self' https://hp-67.com/ ; script-src 'none' ; style-src 'self' https://hp-67.com/ ; object-src 'none'
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer
Permissions-Policy: midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()

• https://www.hp-67.com/ 98.246.255.230	301	https://hp-67.com/ Html is minified: 109.46 %	5.417	A
Server: nginx
Date: Sat, 18 Mar 2023 18:25:15 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://hp-67.com/
Strict-Transport-Security: max-age=31578763; includeSubDomains; preload
X-Frame-Options: DENY
X-Xss-Protection: 0
X-Content-Type-Options: nosniff
Expect-CT: enforce, max-age=300
Content-Security-Policy: upgrade-insecure-requests ; require-trusted-types-for 'script' ; default-src 'none' ; base-uri 'self' https://hp-67.com/ ; frame-ancestors 'none' ; form-action 'self' https://hp-67.com/ ; img-src 'self' https://hp-67.com/ ; script-src 'none' ; style-src 'self' https://hp-67.com/ ; object-src 'none'
Referrer-Policy: no-referrer
Feature-Policy: geolocation 'none'
Permissions-Policy: midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()

• https://hp-67.com/ 98.246.255.230 GZip used - 2759 / 7222 - 61.80 % Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 105.82 %	5.457	A
Server: nginx
Date: Sat, 18 Mar 2023 18:25:08 GMT
Content-Type: text/html; charset=utf-8
Last-Modified: Fri, 28 Oct 2022 18:30:35 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"635c1fcb-1c36"
Strict-Transport-Security: max-age=31578763; includeSubDomains; preload
X-Frame-Options: DENY
X-Xss-Protection: 0
X-Content-Type-Options: nosniff
Content-Security-Policy: upgrade-insecure-requests ; require-trusted-types-for 'script' ; default-src 'none' ; base-uri 'self' https://hp-67.com/ ; frame-ancestors 'none' ; form-action 'self' https://hp-67.com/ ; img-src 'self' https://hp-67.com/ ; script-src 'none' ; style-src 'self' https://hp-67.com/ ; object-src 'none'
Referrer-Policy: no-referrer
Feature-Policy: geolocation 'none'
Permissions-Policy: midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Access-Control-Allow-Origin: https://hp-67.com/
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Cross-Origin-Embedder-Policy: require-corp; report-to 'default'
Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to 'default'
Cross-Origin-Opener-Policy: same-origin; report-to 'default'
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to 'default'
Cross-Origin-Resource-Policy: same-origin
Cache-control: max-age=604800
X-Permitted-Cross-Domain-Policies: master-only
Expect-CT: enforce, max-age=300
Content-Encoding: gzip

• http://hp-67.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 98.246.255.230 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	301	https://hp-67.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de Html is minified: 109.46 %	0.404	A
Visible Content: 301 Moved Permanently nginx
Server: nginx
Date: Sat, 18 Mar 2023 18:25:21 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://hp-67.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Content-Security-Policy: upgrade-insecure-requests ; require-trusted-types-for 'script' ; default-src 'none' ; base-uri 'self' https://hp-67.com/ ; frame-ancestors 'none' ; form-action 'self' https://hp-67.com/ ; img-src 'self' https://hp-67.com/ ; script-src 'none' ; style-src 'self' https://hp-67.com/ ; object-src 'none'
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer
Permissions-Policy: midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()

• http://www.hp-67.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 98.246.255.230 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	301	https://www.hp-67.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de Html is minified: 109.46 %	0.373	A
Visible Content: 301 Moved Permanently nginx
Server: nginx
Date: Sat, 18 Mar 2023 18:25:22 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://www.hp-67.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Content-Security-Policy: upgrade-insecure-requests ; require-trusted-types-for 'script' ; default-src 'none' ; base-uri 'self' https://hp-67.com/ ; frame-ancestors 'none' ; form-action 'self' https://hp-67.com/ ; img-src 'self' https://hp-67.com/ ; script-src 'none' ; style-src 'self' https://hp-67.com/ ; object-src 'none'
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer
Permissions-Policy: midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()

• https://www.hp-67.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	301	https://hp-67.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de Html is minified: 109.46 %	5.103	A
Visible Content: 301 Moved Permanently nginx
Server: nginx
Date: Sat, 18 Mar 2023 18:25:36 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://hp-67.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Strict-Transport-Security: max-age=31578763; includeSubDomains; preload
X-Frame-Options: DENY
X-Xss-Protection: 0
X-Content-Type-Options: nosniff
Expect-CT: enforce, max-age=300
Content-Security-Policy: upgrade-insecure-requests ; require-trusted-types-for 'script' ; default-src 'none' ; base-uri 'self' https://hp-67.com/ ; frame-ancestors 'none' ; form-action 'self' https://hp-67.com/ ; img-src 'self' https://hp-67.com/ ; script-src 'none' ; style-src 'self' https://hp-67.com/ ; object-src 'none'
Referrer-Policy: no-referrer
Feature-Policy: geolocation 'none'
Permissions-Policy: midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()

• https://hp-67.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de GZip used - 107 / 146 - 26.71 % Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	404	Html is minified: 110.61 %	5.064	A
Not Found
Visible Content: 404 Not Found nginx
Server: nginx
Date: Sat, 18 Mar 2023 18:25:29 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Strict-Transport-Security: max-age=31578763; includeSubDomains; preload
X-Frame-Options: DENY
X-Xss-Protection: 0
X-Content-Type-Options: nosniff
Content-Security-Policy: upgrade-insecure-requests ; require-trusted-types-for 'script' ; default-src 'none' ; base-uri 'self' https://hp-67.com/ ; frame-ancestors 'none' ; form-action 'self' https://hp-67.com/ ; img-src 'self' https://hp-67.com/ ; script-src 'none' ; style-src 'self' https://hp-67.com/ ; object-src 'none'
Access-Control-Allow-Origin: https://hp-67.com/
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Content-Encoding: gzip

• https://98.246.255.230/ 98.246.255.230	301	https://hp-67.com/ Html is minified: 109.46 %	5.450	N
Certificate error: RemoteCertificateNameMismatch
Server: nginx
Date: Sat, 18 Mar 2023 18:25:23 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://hp-67.com/
Strict-Transport-Security: max-age=31578763; includeSubDomains; preload
X-Frame-Options: DENY
X-Xss-Protection: 0
X-Content-Type-Options: nosniff
Expect-CT: enforce, max-age=300
Content-Security-Policy: upgrade-insecure-requests ; require-trusted-types-for 'script' ; default-src 'none' ; base-uri 'self' https://hp-67.com/ ; frame-ancestors 'none' ; form-action 'self' https://hp-67.com/ ; img-src 'self' https://hp-67.com/ ; script-src 'none' ; style-src 'self' https://hp-67.com/ ; object-src 'none'
Referrer-Policy: no-referrer
Feature-Policy: geolocation 'none'
Permissions-Policy: midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()

7. Comments

	1. General Results, most used to calculate the result
A	name "hp-67.com" is domain, public suffix is ".com", top-level-domain is ".com", top-level-domain-type is "generic", tld-manager is "VeriSign Global Registry Services", num .com-domains preloaded: 85538 (complete: 220007)
A	Good: All ip addresses are public addresses
	Warning: Only one ip address found: hp-67.com has only one ip address.
	Warning: Only one ip address found: www.hp-67.com has only one ip address.
	Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: hp-67.com has no ipv6 address.
	Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: www.hp-67.com has no ipv6 address.
A	Good: No asked Authoritative Name Server had a timeout
A	https://98.246.255.230/ 98.246.255.230	301	https://hp-67.com/	Correct redirect https to https
A	Good: destination is https
A	Good - only one version with Http-Status 200
A	Good: one preferred version: non-www is preferred
A	Good: No cookie sent via http.
A	Good: every https has a Strict Transport Security Header
A	Good: HSTS max-age is long enough, 31578763 seconds = 365 days
A	Good: HSTS has includeSubdomains - directive
A	Good: HSTS has preload directive
A	Excellent: Domain is in the Google-Preload-List
A	Excellent: Domain is in the Mozilla/Firefox-Preload-List
A	HSTS-Preload-Status: Preloaded. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
A	Good: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
A	http://hp-67.com/ 98.246.255.230	301	https://hp-67.com/	Correct redirect http - https with the same domain name
A	http://www.hp-67.com/ 98.246.255.230	301	https://www.hp-67.com/	Correct redirect http - https with the same domain name
N	https://98.246.255.230/ 98.246.255.230	301	https://hp-67.com/	Error - Certificate isn't trusted, RemoteCertificateNameMismatch
	Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are the same. So that domain doesn't require Server Name Indication (SNI), it's the primary certificate of that set of ip addresses.: Domain hp-67.com, 1 ip addresses, 1 different http results.
	Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are the same. So that domain doesn't require Server Name Indication (SNI), it's the primary certificate of that set of ip addresses.: Domain www.hp-67.com, 1 ip addresses, 1 different http results.
B	No _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.hp-67.com
	2. Header-Checks (alpha, started 2022-10-23, may be buggy / incomplete)
A	hp-67.com 98.246.255.230	Content-Security-Policy		Ok: Header without syntax errors found: upgrade-insecure-requests ; require-trusted-types-for 'script' ; default-src 'none' ; base-uri 'self' https://hp-67.com/ ; frame-ancestors 'none' ; form-action 'self' https://hp-67.com/ ; img-src 'self' https://hp-67.com/ ; script-src 'none' ; style-src 'self' https://hp-67.com/ ; object-src 'none'
A				Good: default-src directive only with 'none' or 'self', additional sources are blocked. object-src, script-src
A				Good: default-src without 'unsafe-inline' or 'unsave-eval'. object-src, script-src
A				Good: form-action directive found. That reduces the risk sending data to unwanted domains. form-action is a navigation-directive, so default-src isn't used.
A				Good: frame-ancestors directive found. That limits pages who are allowed to use this page in a frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
A				Good: base-uri directive found. That limits the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A				Good: object-src only with 'none' or 'self' found, no scheme, no other urls. That blocks object / embed / applet - elements.
A				Good: script-src without 'unsafe-inline' and 'unsafe-eval' found. That's the recommended configuration.
A				Good: script-src without * and a scheme found.
A				Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A				Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
C				Info: default-src and some other fetch directives have the same list of values. Remove the other fetch directive, default-src is used as fallback. Directives to remove: object-src, script-src
A		X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
A		Referrer-Policy		Ok: Header without syntax errors found: no-referrer
A		Permissions-Policy		Ok: Header without syntax errors found: midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
A		X-Frame-Options		Ok: Header without syntax errors found: DENY
B				Info: Header is deprecated. May not longer work in modern browsers. DENY. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A		Expect-CT		Ok: Header without syntax errors found: enforce, max-age=300
B				Info: Header is deprecated. May not longer work in modern browsers. enforce, max-age=300
A		Feature-Policy		Ok: Header without syntax errors found: geolocation 'none'
B				Info: Header is deprecated. May not longer work in modern browsers. geolocation 'none'
A		X-Xss-Protection		Ok: Header without syntax errors found: 0
B				Info: Header is deprecated. May not longer work in modern browsers. 0
	3. DNS- and NameServer - Checks
A	Info:: 7 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
A	Info:: 7 Queries complete, 7 with IPv6, 0 with IPv4.
A	Good: All DNS Queries done via IPv6.
	Ok (4 - 8):: An average of 3.5 queries per domain name server required to find all ip addresses of all name servers.
A	Info:: 2 different Name Servers found: ns5.pairnic.com, ns6.pairnic.com, 2 Name Servers included in Delegation: ns5.pairnic.com, ns6.pairnic.com, 2 Name Servers included in 1 Zone definitions: NS5.PAIRNIC.com, NS6.PAIRNIC.com, 1 Name Servers listed in SOA.Primary: ns5.pairnic.com.
A	Good: Only one SOA.Primary Name Server found.: ns5.pairnic.com.
A	Good: SOA.Primary Name Server included in the delegation set.: ns5.pairnic.com.
A	Good: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: NS5.PAIRNIC.com, NS6.PAIRNIC.com
A	Good: All Name Server Domain Names have a Public Suffix.
A	Good: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
A	Good: All Name Server ip addresses are public.
A	Good: Minimal 2 different name servers (public suffix and public ip address) found: 2 different Name Servers found
A	Good: All name servers have ipv4- and ipv6-addresses.: 2 different Name Servers found
	Warning: All Name Servers have the same Top Level Domain / Public Suffix. If there is a problem with that Top Level Domain, your domain may be affected. Better: Use Name Servers with different top level domains.: 2 Name Servers, 1 Top Level Domain: com
	Warning: All Name Servers have the same domain name. If there is a problem with that domain name (or with the name servers of that domain name), your domain may be affected. Better: Use Name Servers with different domain names / different top level domains.: Only one domain name used: pairnic.com
	Warning: All Name Servers from the same Country / IP location.: 2 Name Servers, 1 Countries: US
A	Info: Ipv4-Subnet-list: 2 Name Servers, 1 different subnets (first Byte): 216., 2 different subnets (first two Bytes): 216.146., 216.92., 2 different subnets (first three Bytes): 216.146.192., 216.92.3.
A	Good: Name Server IPv4-addresses from different subnet found:
A	Info: IPv6-Subnet-list: 2 Name Servers with IPv6, 1 different subnets (first block): 2607:, 2 different subnets (first two blocks): 2607:f440:, 2607:f441:, 2 different subnets (first three blocks): 2607:f440:0000:, 2607:f441:0000:, 2 different subnets (first four blocks): 2607:f440:0000:0000:, 2607:f441:0000:0000:
A	Good: Name Server IPv6 addresses from different subnets found.
A	Good: Nameserver supports TCP connections: 4 good Nameserver
A	Good: Nameserver supports Echo Capitalization: 4 good Nameserver
A	Good: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 4 good Nameserver
A	Good: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 4 good Nameserver
A	Good: All SOA have the same Serial Number
A	Good: CAA entries found, creating certificate is limited: letsencrypt.org is allowed to create certificates
	4. Content- and Performance-critical Checks
A	Good: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
A	Good: Every https result with status 200 supports GZip.
A	Good: No https + http status 200 with inline CSS / JavaScript found
A	Good: Every https result with status 200 has a minified Html-Content with a quota lower then 110 %.
A	Good: Every https connection via port 443 supports the http/2 protocol via ALPN.
	Warning: Images with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 1 image files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 0 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 1 complete.
A	Good: All checked attribute values are enclosed in quotation marks (" or ').
A	Good: All img-elements have a valid alt-attribute.: 1 img-elements found.
A	Good: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
	https://hp-67.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	404	5.064 seconds	Warning: 404 needs more then one second
A	Duration: 468557 milliseconds, 468.557 seconds

8. Connections

Domain

Port

Cert.

Protocol

KeyExchange

Strength

Cipher

Strength

HashAlgorithm

OCSP stapling

Domain/KeyExchange

IP/Strength

Port/Cipher

Cert./Strength

Protocol/HashAlgorithm

OCSP stapling

hp-67.com

98.246.255.230

443

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

supported

hp-67.com

98.246.255.230

443

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

supported

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=hp-67.com
	2	CN=E1, O=Let's Encrypt, C=US
	3	CN=ISRG Root X2, O=Internet Security Research Group, C=US

www.hp-67.com

98.246.255.230

443

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

supported

www.hp-67.com

98.246.255.230

443

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

supported

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=hp-67.com
	2	CN=E1, O=Let's Encrypt, C=US
	3	CN=ISRG Root X2, O=Internet Security Research Group, C=US

hp-67.com

443

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

supported

hp-67.com

443

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=hp-67.com
	2	CN=E1, O=Let's Encrypt, C=US
	3	CN=ISRG Root X2, O=Internet Security Research Group, C=US

www.hp-67.com

443

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

supported

www.hp-67.com

443

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=hp-67.com
	2	CN=E1, O=Let's Encrypt, C=US
	3	CN=ISRG Root X2, O=Internet Security Research Group, C=US

98.246.255.230

443

name does not match

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

supported

98.246.255.230

443

name does not match

Tls12

ECDH Ephermal

384

Aes256

256

Sha384

supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=hp-67.com
	2	CN=E1, O=Let's Encrypt, C=US
	3	CN=ISRG Root X2, O=Internet Security Research Group, C=US

9. Certificates

CN=hp-67.com

02.02.2023

03.05.2023
expires in 36 days

hp-67.com, www.hp-67.com - 2 entries

CN=hp-67.com

02.02.2023

03.05.2023
expires in 36 days

hp-67.com, www.hp-67.com - 2 entries

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	ECDSA SHA384
Serial Number:	03997E3B729230983B6D42885492511B74B4
Thumbprint:	6A9D55DCE3A742DC37960489B44064928F2D5F27
SHA256 / Certificate:	cOWfe7ph8NeO6LVeNGpttmigP+yfZQtBgbYUmOOLn6w=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	d64afca3c763be66eeffb73663f4edbb111f942785599ad6663d2c52757814c7
SHA256 hex / Subject Public Key Information (SPKI):	d64afca3c763be66eeffb73663f4edbb111f942785599ad6663d2c52757814c7 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://e1.o.lencr.org
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=hp-67.com

02.02.2023

03.05.2023
expires in 36 days

hp-67.com, www.hp-67.com - 2 entries

CN=hp-67.com

02.02.2023

03.05.2023
expires in 36 days

hp-67.com, www.hp-67.com - 2 entries

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	ECDSA SHA384
Serial Number:	03997E3B729230983B6D42885492511B74B4
Thumbprint:	6A9D55DCE3A742DC37960489B44064928F2D5F27
SHA256 / Certificate:	cOWfe7ph8NeO6LVeNGpttmigP+yfZQtBgbYUmOOLn6w=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	d64afca3c763be66eeffb73663f4edbb111f942785599ad6663d2c52757814c7
SHA256 hex / Subject Public Key Information (SPKI):	d64afca3c763be66eeffb73663f4edbb111f942785599ad6663d2c52757814c7 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://e1.o.lencr.org
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=E1, O=Let's Encrypt, C=US

04.09.2020

15.09.2025
expires in 902 days

CN=E1, O=Let's Encrypt, C=US

04.09.2020

15.09.2025
expires in 902 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	ECDSA SHA384
Serial Number:	00B3BDDFF8A7845BBCE903A04135B34A45
Thumbprint:	091E8EA1B256A312962AF6C140C0FBF079A407B3
SHA256 / Certificate:	RklOMDeQWd8YvlISQwXmBvxZBw5bIQds4ROVS2BRfNo=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	276fe8a8c4ec7611565bf9fce6dcace9be320c1b5bea27596b2204071ed04f10
SHA256 hex / Subject Public Key Information (SPKI):	276fe8a8c4ec7611565bf9fce6dcace9be320c1b5bea27596b2204071ed04f10
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=E1, O=Let's Encrypt, C=US

04.09.2020

15.09.2025
expires in 902 days

CN=E1, O=Let's Encrypt, C=US

04.09.2020

15.09.2025
expires in 902 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	ECDSA SHA384
Serial Number:	00B3BDDFF8A7845BBCE903A04135B34A45
Thumbprint:	091E8EA1B256A312962AF6C140C0FBF079A407B3
SHA256 / Certificate:	RklOMDeQWd8YvlISQwXmBvxZBw5bIQds4ROVS2BRfNo=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	276fe8a8c4ec7611565bf9fce6dcace9be320c1b5bea27596b2204071ed04f10
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=ISRG Root X2, O=Internet Security Research Group, C=US

04.09.2020

15.09.2025
expires in 902 days

CN=ISRG Root X2, O=Internet Security Research Group, C=US

04.09.2020

15.09.2025
expires in 902 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	079E492886376FD40848C23FC631E463
Thumbprint:	151682F5218C0A511C28F4060A73B9CA78CE9A53
SHA256 / Certificate:	iwW2jMZZ5e0PyzjyyUL7/SAOby/5+F1jxplO9eCwJwE=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):	762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=ISRG Root X2, O=Internet Security Research Group, C=US

04.09.2020

17.09.2040
expires in 6383 days

CN=ISRG Root X2, O=Internet Security Research Group, C=US

04.09.2020

17.09.2040
expires in 6383 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	ECDSA SHA384
Serial Number:	41D29DD172EAEEA780C12C6CE92F8752
Thumbprint:	BDB1B93CD5978D45C6261455F8DB95C75AD153AF
SHA256 / Certificate:	aXKbjhWobvwXelevtxcd/GSt0owvyozxUH40RTzLFHA=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 4451 days

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 4451 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	008210CFB0D240E3594463E0BB63828B00
Thumbprint:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:	lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):	96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuer				last 7 days	active	num Certs
CN=E1, O=Let's Encrypt, C=US				1	2	13
CN=R3, O=Let's Encrypt, C=US				0	0	3

CertSpotter-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
4996492602 leaf cert	CN=E1, O=Let's Encrypt, C=US	2023-03-25 19:37:12	2023-06-23 19:37:11	hp-67.com, www.hp-67.com - 2 entries
4769414182 leaf cert	CN=E1, O=Let's Encrypt, C=US	2023-02-02 20:04:51	2023-05-03 20:04:50	hp-67.com, www.hp-67.com - 2 entries
4575438830 leaf cert	CN=E1, O=Let's Encrypt, C=US	2022-12-20 21:27:31	2023-03-20 21:27:30	hp-67.com, www.hp-67.com - 2 entries
4443257018 leaf cert	CN=E1, O=Let's Encrypt, C=US	2022-11-19 20:20:48	2023-02-17 20:20:47	hp-67.com, www.hp-67.com - 2 entries
4286511263 leaf cert	CN=E1, O=Let's Encrypt, C=US	2022-10-11 18:15:20	2023-01-09 18:15:19	hp-67.com, www.hp-67.com - 2 entries
4121475114 leaf cert	CN=R3, O=Let's Encrypt, C=US	2022-08-30 21:23:59	2022-11-28 21:23:58	hp-67.com, www.hp-67.com - 2 entries
4121455744 leaf cert	CN=E1, O=Let's Encrypt, C=US	2022-08-30 21:16:08	2022-11-28 21:16:07	hp-67.com, www.hp-67.com - 2 entries
4013834433 leaf cert	CN=E1, O=Let's Encrypt, C=US	2022-08-01 19:31:48	2022-10-30 19:31:47	hp-67.com, www.hp-67.com - 2 entries
4013771063 leaf cert	CN=R3, O=Let's Encrypt, C=US	2022-08-01 19:24:00	2022-10-30 19:23:59	hp-67.com, www.hp-67.com - 2 entries
3906258643 leaf cert	CN=E1, O=Let's Encrypt, C=US	2022-07-02 23:20:26	2022-09-30 23:20:25	hp-67.com, www.hp-67.com - 2 entries
3906189166 leaf cert	CN=R3, O=Let's Encrypt, C=US	2022-07-02 22:57:57	2022-09-30 22:57:56	hp-67.com, www.hp-67.com - 2 entries
3822116788 leaf cert	CN=E1, O=Let's Encrypt, C=US	2022-06-08 19:52:38	2022-09-06 19:52:37	hp-67.com, www.hp-67.com - 2 entries
3760980200 leaf cert	CN=E1, O=Let's Encrypt, C=US	2022-05-23 20:14:10	2022-08-21 20:14:09	hp-67.com, www.hp-67.com - 2 entries
3675838344 leaf cert	CN=E1, O=Let's Encrypt, C=US	2022-04-29 15:26:14	2022-07-28 15:26:13	hp-67.com, www.hp-67.com - 2 entries
3620614515 leaf cert	CN=E1, O=Let's Encrypt, C=US	2022-04-12 22:19:13	2022-07-11 22:19:12	hp-67.com, www.hp-67.com - 2 entries
3484579225 leaf cert	CN=E1, O=Let's Encrypt, C=US	2022-03-04 16:10:17	2022-06-02 16:10:16	hp-67.com, www.hp-67.com - 2 entries

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Issuer				last 7 days	active	num Certs
CN=E1, O=Let's Encrypt, C=US				0	1	15
CN=R3, O=Let's Encrypt, C=US				0 /0 new	0	3

CRT-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
8644262502 leaf cert	CN=E1, O=Let's Encrypt, C=US	2023-02-02 19:04:51	2023-05-03 18:04:50	hp-67.com, www.hp-67.com 2 entries
8255828052 leaf cert	CN=E1, O=Let's Encrypt, C=US	2022-12-20 20:27:31	2023-03-20 20:27:30	hp-67.com, www.hp-67.com 2 entries
8017474902 leaf cert	CN=E1, O=Let's Encrypt, C=US	2022-11-19 19:20:48	2023-02-17 19:20:47	hp-67.com, www.hp-67.com 2 entries
7742870929 leaf cert	CN=E1, O=Let's Encrypt, C=US	2022-10-11 16:15:20	2023-01-09 17:15:19	hp-67.com, www.hp-67.com 2 entries
7440735524 precert	CN=R3, O=Let's Encrypt, C=US	2022-08-30 19:23:59	2022-11-28 20:23:58	hp-67.com, www.hp-67.com 2 entries
7440695579 precert	CN=E1, O=Let's Encrypt, C=US	2022-08-30 19:16:08	2022-11-28 20:16:07	hp-67.com, www.hp-67.com 2 entries
7246870067 precert	CN=E1, O=Let's Encrypt, C=US	2022-08-01 17:31:48	2022-10-30 18:31:47	hp-67.com, www.hp-67.com 2 entries
7246839896 leaf cert	CN=R3, O=Let's Encrypt, C=US	2022-08-01 17:24:00	2022-10-30 18:23:59	hp-67.com, www.hp-67.com 2 entries
7050545898 leaf cert	CN=E1, O=Let's Encrypt, C=US	2022-07-02 21:20:26	2022-09-30 21:20:25	hp-67.com, www.hp-67.com 2 entries
7050372189 leaf cert	CN=R3, O=Let's Encrypt, C=US	2022-07-02 20:57:57	2022-09-30 20:57:56	hp-67.com, www.hp-67.com 2 entries
6901025598 leaf cert	CN=E1, O=Let's Encrypt, C=US	2022-06-08 17:52:38	2022-09-06 17:52:37	hp-67.com, www.hp-67.com 2 entries
6788605841 precert	CN=E1, O=Let's Encrypt, C=US	2022-05-23 18:14:10	2022-08-21 18:14:09	hp-67.com, www.hp-67.com 2 entries
6639272840 leaf cert	CN=E1, O=Let's Encrypt, C=US	2022-04-29 13:26:14	2022-07-28 13:26:13	hp-67.com, www.hp-67.com 2 entries
6532744183 precert	CN=E1, O=Let's Encrypt, C=US	2022-04-12 20:19:13	2022-07-11 20:19:12	hp-67.com, www.hp-67.com 2 entries
6283750132 leaf cert	CN=E1, O=Let's Encrypt, C=US	2022-03-04 15:10:17	2022-06-02 14:10:16	hp-67.com, www.hp-67.com 2 entries
6012180314 leaf cert	CN=E1, O=Let's Encrypt, C=US	2022-01-19 21:55:42	2022-04-19 20:55:41	hp-67.com, www.hp-67.com 2 entries
5750129469 precert	CN=E1, O=Let's Encrypt, C=US	2021-12-06 22:06:53	2022-03-06 22:06:52	hp-67.com, www.hp-67.com 2 entries
5495370374 leaf cert	CN=E1, O=Let's Encrypt, C=US	2021-10-27 18:44:58	2022-01-25 19:44:57	hp-67.com, www.hp-67.com 2 entries

11. Html-Content - Entries

Summary

							Subresource Integrity (SRI)
Domainname	HtmlElement	rel/property	∑	∑ size	∑ problems	∑ int.	∑ ext.	∑ Origin poss.	∑ SRI ParseErrors	∑ SRI valid	∑ SRI missing
https://hp-67.com/ 98.246.255.230	a		51		0			0	0	0
	img		1	87,070 Bytes	0	1	0	0	0	0
	meta	other	5		0			0	0	0

Details

Domainname	Html-Element	name/equiv/ property/rel	href/src/content	HttpStatus	∑
https://hp-67.com/ 98.246.255.230	a		Audio.html			1	ok
							ok


	a		Business.html			1	ok
							ok


	a		Chocolate.html			1	ok
							ok


	a		Companies.html			1	ok
							ok


	a		Computers.html			1	ok
							ok


	a		Edu-n-Tran.html			1	ok
							ok


	a		Electronics.html			1	ok
							ok


	a		Entertainment.html			1	ok
							ok


	a		Environment.html			1	ok
							ok


	a		Gov.html			1	ok
							ok


	a		gps.html			1	ok
							ok


	a		Hardware.html			1	ok
							ok


	a		https://hp-67.com/privacy.html			1	ok
							ok


	a		https://hp-67.com/terms.html			1	ok
							ok


	a		https://support.google.com/accounts/answer/32050			1	ok
							ok


	a		https://support.microsoft.com/kb/278835			1	ok
							ok


	a		https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored			1	ok
							ok


	a		https://termsfeed.com/blog/gdpr/#Individual_Rights_Under_the_GDPR			1	ok
							ok


	a		https://www.allaboutcookies.org/			1	ok
							ok


	a		https://www.disney.com/			1	ok
							ok


	a		https://www.Dolby.com/			1	ok
							ok


	a		https://www.earthweek.com/			1	ok
							ok


	a		https://www.FreeBSD.org/			1	ok
							ok


	a		https://www.freebsd.org/doc/en_US.ISO8859-1/books/faq/index.html			1	ok
							ok


	a		https://www.FreeBSD.org/handbook/handbook.html			1	ok
							ok


	a		https://www.google.com/			1	ok
							ok


	a		https://www.hpmuseum.org/			1	ok
							ok


	a		https://www.Intel.com/			1	ok
							ok


	a		https://www.irobot.com/			1	ok
							ok


	a		https://www.metacrawler.com/			1	ok
							ok


	a		https://www.nasa.gov/			1	ok
							ok


	a		https://www.nasdaq.com/			1	ok
							ok


	a		https://www.networkadvertising.org/			1	ok
							ok


	a		https://www.ragtimers.org/			1	ok
							ok


	a		https://www.termsfeed.com/			1	ok
							ok


	a		https://www.thx.com/			1	ok
							ok


	a		https://www.wamu.com/			1	ok
							ok


	a		https://www.yahoo.com/			1	ok
							ok


	a		Internet.html			1	ok
							ok


	a		Lego.html			1	ok
							ok


	a		Music.html			1	ok
							ok


	a		Oregon.html			1	ok
							ok


	a		People.html			1	ok
							ok


	a		Portland.html			1	ok
							ok


	a		Radio.html			1	ok
							ok


	a		Reference.html			1	ok
							ok


	a		Regional.html			1	ok
							ok


	a		Science.html			1	ok
							ok


	a		Shopping.html			1	ok
							ok


	a		Software.html			1	ok
							ok


	a		TV.html			1	ok
							ok


	img	src	https://hp-67.com/HP67.webp		200	1	ok
	alt: Photograph of a HP-67 Calculator.			image/webp, X-Content-Type-Options nosniff found			ok
	No Cache-Control header			No GZip - 87070 Bytes

	meta	cache-control	max-age=604800			1	ok
							ok


	meta	date	2022-0828T14:46:00+00:00			1	ok
							ok


	meta	description	HP-67.com			1	ok
							ok


	meta	keywords	HP calculator, GPS, Math, Science, Ragtime, NASA, Astronomy Picture of the Day, Chocolate, Portland, Oregon			1	ok
							ok


	meta	viewport	width=device-width, initial-scale=1			1	ok
							ok

12. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: ns5.pairnic.com, ns6.pairnic.com

QNr.	Domain	Type	NS used
1	com	NS	e.root-servers.net (2001:500:a8::e)
	Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2	ns5.pairnic.com	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: ns0.ns0.com, ns00.ns0.com, ns1.pair.com
	Answer: ns0.ns0.com 209.197.64.1, 2607:f440::d1c5:4001
	Answer: ns00.ns0.com 216.92.60.60, 2607:f440::d85c:3c3c
	Answer: ns1.pair.com 209.68.1.11
3	ns6.pairnic.com	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: ns0.ns0.com, ns00.ns0.com, ns1.pair.com
	Answer: ns0.ns0.com 209.197.64.1, 2607:f440::d1c5:4001
	Answer: ns00.ns0.com 216.92.60.60, 2607:f440::d85c:3c3c
	Answer: ns1.pair.com 209.68.1.11
4	ns5.pairnic.com: 216.92.3.95	A	ns0.ns0.com (2607:f440::d1c5:4001)
5	ns5.pairnic.com: 2607:f440::d85c:35f	AAAA	ns0.ns0.com (2607:f440::d1c5:4001)
6	ns6.pairnic.com: 216.146.192.246	A	ns0.ns0.com (2607:f440::d1c5:4001)
7	ns6.pairnic.com: 2607:f441::d892:c0f6	AAAA	ns0.ns0.com (2607:f440::d1c5:4001)

13. CAA - Entries

Domainname	flag	Name	Value	∑ Queries
www.hp-67.com	5	issue	letsencrypt.org	1
hp-67.com	5	issue	letsencrypt.org	1
com	0		no CAA entry found	1

14. TXT - Entries

Domainname	TXT Entry	Status	∑ Queries
hp-67.com	google-site-verification=f-OrdhKj2tUcgbhr8uPI-XeeauOQguSjG1ffH57FPBQ	ok	1
hp-67.com	v=spf1 mx a a:fwdlb.pairnic.com a:mx1.pairnic.com a:mx2.pairnic.com a:mx3.pairnic.com a:mx4.pairnic.com ~all	ok	1
www.hp-67.com		ok	1
_acme-challenge.hp-67.com		Name Error - The domain name does not exist	1
_acme-challenge.www.hp-67.com		Name Error - The domain name does not exist	1
_acme-challenge.hp-67.com.hp-67.com		Name Error - The domain name does not exist	1
_acme-challenge.www.hp-67.com.hp-67.com		Name Error - The domain name does not exist	1
_acme-challenge.www.hp-67.com.www.hp-67.com		Name Error - The domain name does not exist	1

15. DomainService - Entries (SSHFP Check is new - 2022-09-24, may be incomplete, alpha, some results are required)

Type		Domain	Pref	Value	num Answers	Status
MX		hp-67.com	5	fwdlb.pairnic.com	5	ok
	A			216.92.3.120	1	ok
	CNAME				0	ok
MX		hp-67.com	10	mx4.pairnic.com	5	ok
	A			216.92.3.23	1	ok
	CNAME				0	ok
MX		hp-67.com	10	mx3.pairnic.com	5	ok
	A			216.92.3.22	1	ok
	CNAME				0	ok
MX		hp-67.com	10	mx1.pairnic.com	5	ok
	A			216.92.3.20	1	ok
	CNAME				0	ok
MX		hp-67.com	10	mx2.pairnic.com	5	ok
	A			216.92.3.21	1	ok
	CNAME				0	ok
_dmarc	TXT	_dmarc.hp-67.com		v=DMARC1; p=quarantine; rua=mailto:62867c31cf5563893f65f14f02cca8c2-d@dmarc.report-uri.com; ruf=mailto:62867c31cf5563893f65f14f02cca8c2-d@dmarc.report-uri.com; fo=0:1:d:s; pct=100; adkim=r; aspf=r	1	ok

16. Cipher Suites

Domain	IP	Port	Cipher (OpenSsl / IANA)
hp-67.com	98.246.255.230	443	ECDHE-ECDSA-AES256-GCM-SHA384	(Recommended)	TLSv1.2	0xC0,0x2C	FS
1 Ciphers, 88.63 sec			TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
			ECDH	ECDSA	AESGCM(256)	AEAD
www.hp-67.com	98.246.255.230	443	ECDHE-ECDSA-AES256-GCM-SHA384	(Recommended)	TLSv1.2	0xC0,0x2C	FS
1 Ciphers, 88.51 sec			TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
			ECDH	ECDSA	AESGCM(256)	AEAD

17. Portchecks

Domain	IP	Port	Description	Result	Answer
hp-67.com	98.246.255.230	21	FTP

hp-67.com	98.246.255.230	21	FTP
hp-67.com	98.246.255.230	22	SSH	open
SSH-2.0-OpenSSH_9.1
hp-67.com	98.246.255.230	22	SSH	open	SSH-2.0-OpenSSH_9.1	Bad: SSH without DNS SSHFP Record found
					Possible DNS SSHFP Entries: hp-67.com IN SSHFP 3 2 be06ae76c96cea907933b29b46edf4199adec10f9f77c0d136e4089bc8f73f6c hp-67.com IN SSHFP 4 2 1c1f2d1d1cf6b04cd41e6dc859932c15519d33f9efe3db52d892e1e5801e4590
hp-67.com	98.246.255.230	25	SMTP

hp-67.com	98.246.255.230	25	SMTP
hp-67.com	98.246.255.230	53	DNS

hp-67.com	98.246.255.230	53	DNS
hp-67.com	98.246.255.230	110	POP3

hp-67.com	98.246.255.230	110	POP3
hp-67.com	98.246.255.230	143	IMAP

hp-67.com	98.246.255.230	143	IMAP
hp-67.com	98.246.255.230	465	SMTP (encrypted)

hp-67.com	98.246.255.230	465	SMTP (encrypted)
hp-67.com	98.246.255.230	587	SMTP (encrypted, submission)

hp-67.com	98.246.255.230	587	SMTP (encrypted, submission)
hp-67.com	98.246.255.230	993	IMAP (encrypted)

hp-67.com	98.246.255.230	993	IMAP (encrypted)
hp-67.com	98.246.255.230	995	POP3 (encrypted)

hp-67.com	98.246.255.230	995	POP3 (encrypted)
hp-67.com	98.246.255.230	1433	MS SQL

hp-67.com	98.246.255.230	1433	MS SQL
hp-67.com	98.246.255.230	2082	cPanel (http)

hp-67.com	98.246.255.230	2082	cPanel (http)
hp-67.com	98.246.255.230	2083	cPanel (https)

hp-67.com	98.246.255.230	2083	cPanel (https)
hp-67.com	98.246.255.230	2086	WHM (http)

hp-67.com	98.246.255.230	2086	WHM (http)
hp-67.com	98.246.255.230	2087	WHM (https)

hp-67.com	98.246.255.230	2087	WHM (https)
hp-67.com	98.246.255.230	2089	cPanel Licensing

hp-67.com	98.246.255.230	2089	cPanel Licensing
hp-67.com	98.246.255.230	2095	cPanel Webmail (http)

hp-67.com	98.246.255.230	2095	cPanel Webmail (http)
hp-67.com	98.246.255.230	2096	cPanel Webmail (https)

hp-67.com	98.246.255.230	2096	cPanel Webmail (https)
hp-67.com	98.246.255.230	2222	DirectAdmin (http)

hp-67.com	98.246.255.230	2222	DirectAdmin (http)
hp-67.com	98.246.255.230	2222	DirectAdmin (https)

hp-67.com	98.246.255.230	2222	DirectAdmin (https)
hp-67.com	98.246.255.230	3306	mySql

hp-67.com	98.246.255.230	3306	mySql
hp-67.com	98.246.255.230	5224	Plesk Licensing

hp-67.com	98.246.255.230	5224	Plesk Licensing
hp-67.com	98.246.255.230	5432	PostgreSQL

hp-67.com	98.246.255.230	5432	PostgreSQL
hp-67.com	98.246.255.230	8080	Ookla Speedtest (http)

hp-67.com	98.246.255.230	8080	Ookla Speedtest (http)
hp-67.com	98.246.255.230	8080	Ookla Speedtest (https)

hp-67.com	98.246.255.230	8080	Ookla Speedtest (https)
hp-67.com	98.246.255.230	8083	VestaCP http

hp-67.com	98.246.255.230	8083	VestaCP http
hp-67.com	98.246.255.230	8083	VestaCP https

hp-67.com	98.246.255.230	8083	VestaCP https
hp-67.com	98.246.255.230	8443	Plesk Administration (https)

hp-67.com	98.246.255.230	8443	Plesk Administration (https)
hp-67.com	98.246.255.230	8447	Plesk Installer + Updates

hp-67.com	98.246.255.230	8447	Plesk Installer + Updates
hp-67.com	98.246.255.230	8880	Plesk Administration (http)

hp-67.com	98.246.255.230	8880	Plesk Administration (http)
hp-67.com	98.246.255.230	10000	Webmin (http)

hp-67.com	98.246.255.230	10000	Webmin (http)
hp-67.com	98.246.255.230	10000	Webmin (https)

hp-67.com	98.246.255.230	10000	Webmin (https)
www.hp-67.com	98.246.255.230	21	FTP

www.hp-67.com	98.246.255.230	21	FTP
www.hp-67.com	98.246.255.230	22	SSH	open
SSH-2.0-OpenSSH_9.1
www.hp-67.com	98.246.255.230	22	SSH	open	SSH-2.0-OpenSSH_9.1	Bad: SSH without DNS SSHFP Record found
					Possible DNS SSHFP Entries: www.hp-67.com IN SSHFP 3 2 be06ae76c96cea907933b29b46edf4199adec10f9f77c0d136e4089bc8f73f6c www.hp-67.com IN SSHFP 4 2 1c1f2d1d1cf6b04cd41e6dc859932c15519d33f9efe3db52d892e1e5801e4590
www.hp-67.com	98.246.255.230	25	SMTP

www.hp-67.com	98.246.255.230	25	SMTP
www.hp-67.com	98.246.255.230	53	DNS

www.hp-67.com	98.246.255.230	53	DNS
www.hp-67.com	98.246.255.230	110	POP3

www.hp-67.com	98.246.255.230	110	POP3
www.hp-67.com	98.246.255.230	143	IMAP

www.hp-67.com	98.246.255.230	143	IMAP
www.hp-67.com	98.246.255.230	465	SMTP (encrypted)

www.hp-67.com	98.246.255.230	465	SMTP (encrypted)
www.hp-67.com	98.246.255.230	587	SMTP (encrypted, submission)

www.hp-67.com	98.246.255.230	587	SMTP (encrypted, submission)
www.hp-67.com	98.246.255.230	993	IMAP (encrypted)

www.hp-67.com	98.246.255.230	993	IMAP (encrypted)
www.hp-67.com	98.246.255.230	995	POP3 (encrypted)

www.hp-67.com	98.246.255.230	995	POP3 (encrypted)
www.hp-67.com	98.246.255.230	1433	MS SQL

www.hp-67.com	98.246.255.230	1433	MS SQL
www.hp-67.com	98.246.255.230	2082	cPanel (http)

www.hp-67.com	98.246.255.230	2082	cPanel (http)
www.hp-67.com	98.246.255.230	2083	cPanel (https)

www.hp-67.com	98.246.255.230	2083	cPanel (https)
www.hp-67.com	98.246.255.230	2086	WHM (http)

www.hp-67.com	98.246.255.230	2086	WHM (http)
www.hp-67.com	98.246.255.230	2087	WHM (https)

www.hp-67.com	98.246.255.230	2087	WHM (https)
www.hp-67.com	98.246.255.230	2089	cPanel Licensing

www.hp-67.com	98.246.255.230	2089	cPanel Licensing
www.hp-67.com	98.246.255.230	2095	cPanel Webmail (http)

www.hp-67.com	98.246.255.230	2095	cPanel Webmail (http)
www.hp-67.com	98.246.255.230	2096	cPanel Webmail (https)

www.hp-67.com	98.246.255.230	2096	cPanel Webmail (https)
www.hp-67.com	98.246.255.230	2222	DirectAdmin (http)

www.hp-67.com	98.246.255.230	2222	DirectAdmin (http)
www.hp-67.com	98.246.255.230	2222	DirectAdmin (https)

www.hp-67.com	98.246.255.230	2222	DirectAdmin (https)
www.hp-67.com	98.246.255.230	3306	mySql

www.hp-67.com	98.246.255.230	3306	mySql
www.hp-67.com	98.246.255.230	5224	Plesk Licensing

www.hp-67.com	98.246.255.230	5224	Plesk Licensing
www.hp-67.com	98.246.255.230	5432	PostgreSQL

www.hp-67.com	98.246.255.230	5432	PostgreSQL
www.hp-67.com	98.246.255.230	8080	Ookla Speedtest (http)

www.hp-67.com	98.246.255.230	8080	Ookla Speedtest (http)
www.hp-67.com	98.246.255.230	8080	Ookla Speedtest (https)

www.hp-67.com	98.246.255.230	8080	Ookla Speedtest (https)
www.hp-67.com	98.246.255.230	8083	VestaCP http

www.hp-67.com	98.246.255.230	8083	VestaCP http
www.hp-67.com	98.246.255.230	8083	VestaCP https

www.hp-67.com	98.246.255.230	8083	VestaCP https
www.hp-67.com	98.246.255.230	8443	Plesk Administration (https)

www.hp-67.com	98.246.255.230	8443	Plesk Administration (https)
www.hp-67.com	98.246.255.230	8447	Plesk Installer + Updates

www.hp-67.com	98.246.255.230	8447	Plesk Installer + Updates
www.hp-67.com	98.246.255.230	8880	Plesk Administration (http)

www.hp-67.com	98.246.255.230	8880	Plesk Administration (http)
www.hp-67.com	98.246.255.230	10000	Webmin (http)

www.hp-67.com	98.246.255.230	10000	Webmin (http)
www.hp-67.com	98.246.255.230	10000	Webmin (https)

www.hp-67.com	98.246.255.230	10000	Webmin (https)

Permalink: https://check-your-website.server-daten.de/?i=0fa82a93-41da-4e8c-9327-2487cdd2b032

Last Result: https://check-your-website.server-daten.de/?q=hp-67.com - 2023-03-27 17:40:04

Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=hp-67.com" target="_blank">Check this Site: hp-67.com</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

Check DNS, Urls + Redirects, Certificates and Content of your Website

Older results

1. IP-Addresses

2. DNSSEC

3. Name Servers

4. SOA-Entries

5. Screenshots

Mobile- and other Chrome-Checks

6. Url-Checks

7. Comments

1. General Results, most used to calculate the result

2. Header-Checks (alpha, started 2022-10-23, may be buggy / incomplete)

3. DNS- and NameServer - Checks

4. Content- and Performance-critical Checks

8. Connections

9. Certificates

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

11. Html-Content - Entries

Summary

Details

12. Nameserver - IP-Adresses

13. CAA - Entries

14. TXT - Entries

15. DomainService - Entries (SSHFP Check is new - 2022-09-24, may be incomplete, alpha, some results are required)

16. Cipher Suites

17. Portchecks