Check DNS, Urls + Redirects, Certificates and Content of your Website

...

skip EDNS-Check

skip Content-Check

check links

No trusted Certificate

Checked:
03.10.2026 10:04:13

Older results

No older results found

1. IP-Addresses

Host	Type	IP-Address	is auth.	∑ Queries	∑ Timeout
test.desire2learn.com	A	1.1.1.1 South Brisbane/Queensland/Australia (AU) - Cloudflare, Inc Hostname: one.one.one.one	yes	1	0
	AAAA		yes
www.test.desire2learn.com		Name Error	yes	1	0
*.desire2learn.com	A	Name Error	yes
	AAAA	Name Error	yes
	CNAME	Name Error	yes
*.test.desire2learn.com	A	Name Error	yes
	AAAA	Name Error	yes
	CNAME	Name Error	yes

2. DNSSEC

Zone (*)	DNSSEC - Informations

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	4 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 8763, Flags 256


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 57780, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 22.10.2026, 00:00:00 +, Signature-Inception: 01.10.2026, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: com
com	1 DS RR in the parent zone found


	DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 16.10.2026, 05:00:00 +, Signature-Inception: 03.10.2026, 04:00:00 +, KeyTag 8763, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 8763 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 13, KeyTag 19718, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 13, KeyTag 41446, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner com., Algorithm: 13, 1 Labels, original TTL: 86400 sec, Signature-expiration: 09.10.2026, 14:02:35 +, Signature-Inception: 24.09.2026, 13:57:35 +, KeyTag 19718, Signer-Name: com


	• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 19718 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest "isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: desire2learn.com
desire2learn.com	3 DS RR in the parent zone found


	DS with Algorithm 13, KeyTag 15213, DigestType 2 and Digest IEUmkIow5ypS6lAwlvGxFV0E+9IZyop3fNx6jf7alIE=


	DS with Algorithm 13, KeyTag 15663, DigestType 2 and Digest 4dsM+OgqcF7z9Maghd1T7NiIuzYyWL7i49arvZLyCd8=


	DS with Algorithm 13, KeyTag 17562, DigestType 2 and Digest x1kr9BPcd/bXVJGEtCQqaQp8n+/oqhq3LSMkSmIKqNI=


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner desire2learn.com., Algorithm: 13, 2 Labels, original TTL: 86400 sec, Signature-expiration: 09.10.2026, 01:02:49 +, Signature-Inception: 01.10.2026, 23:52:49 +, KeyTag 41446, Signer-Name: com


	• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 41446 used to validate the DS RRSet in the parent zone


	3 DNSKEY RR found


	Public Key with Algorithm 13, KeyTag 10174, Flags 256


	Public Key with Algorithm 13, KeyTag 15213, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 13, KeyTag 38575, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner desire2learn.com., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 03.10.2026, 18:00:00 +, Signature-Inception: 03.10.2026, 07:00:00 +, KeyTag 15213, Signer-Name: desire2learn.com


	• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 15213 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 15213, DigestType 2 and Digest "IEUmkIow5ypS6lAwlvGxFV0E+9IZyop3fNx6jf7alIE=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: test.desire2learn.com
test.desire2learn.com	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC RR as result with the domain name between the NSEC-Owner "test.desire2learn.com" and the NextOwner "\000.test.desire2learn.com". So the parent zone confirmes the non-existence of a DS RR. Bitmap: A, PTR, 13, MX, TXT, RP, AAAA, SRV, NAPTR, SSHFP, RRSIG, NSEC, TLSA, 64, 65, 99, CAA


	0 DNSKEY RR found





	RRSIG Type 1 validates the A - Result: 1.1.1.1 Validated: RRSIG-Owner test.desire2learn.com., Algorithm: 13, 3 Labels, original TTL: 0 sec, Signature-expiration: 03.10.2026, 09:05:16 +, Signature-Inception: 03.10.2026, 07:05:16 +, KeyTag 10174, Signer-Name: desire2learn.com


	RRSIG Type 16 validates the TXT - Result: v=spf1 include:a._spf.brightspace.com ~all Validated: RRSIG-Owner test.desire2learn.com., Algorithm: 13, 3 Labels, original TTL: 300 sec, Signature-expiration: 03.10.2026, 09:10:16 +, Signature-Inception: 03.10.2026, 07:05:16 +, KeyTag 10174, Signer-Name: desire2learn.com


	CNAME-Query sends a valid NSEC RR as result with the query name "test.desire2learn.com" equal the NSEC-owner "test.desire2learn.com" and the NextOwner "\000.test.desire2learn.com". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, PTR, 13, MX, TXT, RP, AAAA, SRV, NAPTR, SSHFP, RRSIG, NSEC, TLSA, 64, 65, 99, CAA Validated: RRSIG-Owner test.desire2learn.com., Algorithm: 13, 3 Labels, original TTL: 86400 sec, Signature-expiration: 04.10.2026, 09:05:16 +, Signature-Inception: 03.10.2026, 07:05:16 +, KeyTag 10174, Signer-Name: desire2learn.com


	Status: Good. NoData-Proof required and found.


	AAAA-Query sends a valid NSEC RR as result with the query name "test.desire2learn.com" equal the NSEC-owner "test.desire2learn.com" and the NextOwner "\000.test.desire2learn.com". So the zone confirmes the not-existence of that AAAA RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, PTR, 13, MX, TXT, RP, SRV, NAPTR, SSHFP, RRSIG, NSEC, TLSA, 64, 65, 99, CAA Validated: RRSIG-Owner test.desire2learn.com., Algorithm: 13, 3 Labels, original TTL: 86400 sec, Signature-expiration: 04.10.2026, 09:05:16 +, Signature-Inception: 03.10.2026, 07:05:16 +, KeyTag 10174, Signer-Name: desire2learn.com


	Status: Good. NoData-Proof required and found.


	TLSA-Query (_443._tcp.test.desire2learn.com) sends a valid NSEC RR as result with the query name "_443._tcp.test.desire2learn.com" equal the NSEC-owner "_443._tcp.test.desire2learn.com" and the NextOwner "\000._443._tcp.test.desire2learn.com". So the zone confirmes the not-existence of that TLSA RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: RRSIG, NSEC Validated: RRSIG-Owner _443._tcp.test.desire2learn.com., Algorithm: 13, 5 Labels, original TTL: 86400 sec, Signature-expiration: 04.10.2026, 09:05:16 +, Signature-Inception: 03.10.2026, 07:05:16 +, KeyTag 10174, Signer-Name: desire2learn.com


	Status: Good. NoData-Proof required and found.


	CAA-Query sends a valid NSEC RR as result with the query name "test.desire2learn.com" equal the NSEC-owner "test.desire2learn.com" and the NextOwner "\000.test.desire2learn.com". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, PTR, 13, MX, TXT, RP, AAAA, SRV, NAPTR, SSHFP, RRSIG, NSEC, TLSA, 64, 65, 99 Validated: RRSIG-Owner test.desire2learn.com., Algorithm: 13, 3 Labels, original TTL: 86400 sec, Signature-expiration: 04.10.2026, 09:05:16 +, Signature-Inception: 03.10.2026, 07:05:16 +, KeyTag 10174, Signer-Name: desire2learn.com


	Status: Good. NoData-Proof required and found.

Zone: www.test.desire2learn.com
www.test.desire2learn.com	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC RR as result with the domain name between the NSEC-Owner "www.test.desire2learn.com" and the NextOwner "\000.www.test.desire2learn.com". So the parent zone confirmes the non-existence of a DS RR. Bitmap: RRSIG, NSEC

3. Name Servers

Domain	Nameserver	NS-IP
www.test.desire2learn.com	• ns-108.awsdns-13.com
test.desire2learn.com	• ns-108.awsdns-13.com / 10c2654c73b79df5f1c39341aebe58f5 -	205.251.192.108 Herndon/Virginia/United States (US) - Amazon.com	•
	•	2600:9000:5300:6c00::1 Seattle/Washington/United States (US) - Amazon.com, Inc.	•
desire2learn.com	• ns-108.awsdns-13.com / 10c2654c73b79df5f1c39341aebe58f5 -	205.251.192.108 Herndon/Virginia/United States (US) - Amazon.com	•
	•	2600:9000:5300:6c00::1 Seattle/Washington/United States (US) - Amazon.com, Inc.	•
	• ns-1133.awsdns-13.org / d639bd346be8419c341fb43b77d4715a -	205.251.196.109 Herndon/Virginia/United States (US) - Amazon.com	•
	•	2600:9000:5304:6d00::1 Palo Alto/California/United States (US) - Amazon.com, Inc.	•
	• ns-1559.awsdns-02.co.uk / cb4fd8ccf5ad73c4219df60ab6888f66 -	205.251.198.23 Ashburn/Virginia/United States (US) - Amazon.com	•
	•	2600:9000:5306:1700::1 Seattle/Washington/United States (US) - Amazon.com, Inc.	•
	• ns-905.awsdns-49.net / 47bdbf8b29e0695c52c50541d3ad8676 -	205.251.195.137 San Jose/California/United States (US) - Amazon.com	•
	•	2600:9000:5303:8900::1 Seattle/Washington/United States (US) - Amazon.com, Inc.	•
com	• a.gtld-servers.net / nnn1-par6		•
	• b.gtld-servers.net / nnn1-elwaw4		•
	• c.gtld-servers.net / nnn1-par6		•
	• d.gtld-servers.net / nnn1-par6		•
	• e.gtld-servers.net / nnn1-par6		•
	• f.gtld-servers.net / nnn1-gblon-4		•
	• g.gtld-servers.net / nnn1-defra-2b		•
	• h.gtld-servers.net / nnn1-defra-2c		•
	• i.gtld-servers.net / nnn1-defra-2c		•
	• j.gtld-servers.net / nnn1-defra-7a		•
	• k.gtld-servers.net / nnn1-defra-7b		•
	• l.gtld-servers.net / nnn1-defra-7b		•
	• m.gtld-servers.net / nnn1-defra-7b		•

4. SOA-Entries

Domain:	com
Zone-Name:	com
Primary:	a.gtld-servers.net
Mail:	nstld.verisign-grs.com
Serial:	1791014639
Refresh:	1800
Retry:	900
Expire:	604800
TTL:	900
num Entries:	13

Domain:	desire2learn.com
Zone-Name:	desire2learn.com
Primary:	ns-108.awsdns-13.com
Mail:	awsdns-hostmaster.amazon.com
Serial:	1
Refresh:	7200
Retry:	900
Expire:	1209600
TTL:	86400
num Entries:	8

Domain:	test.desire2learn.com
Zone-Name:	desire2learn.com
Primary:	ns-108.awsdns-13.com
Mail:	awsdns-hostmaster.amazon.com
Serial:	1
Refresh:	7200
Retry:	900
Expire:	1209600
TTL:	86400
num Entries:	2

Domain:	www.test.desire2learn.com
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:	1

5. Screenshots

Startaddress: https://test.desire2learn.com/, address used: https://test.desire2learn.com/, Screenshot created 2026-10-03 10:06:15 +00:0

Mobil (412px x 732px)

750 milliseconds

Screenshot mobile - https://test.desire2learn.com/

Mobil + Landscape (732px x 412px)

762 milliseconds

Screenshot mobile landscape - https://test.desire2learn.com/

Screen (1280px x 1680px)

797 milliseconds

Screenshot Desktop - https://test.desire2learn.com/

Mobile- and other Chrome-Checks

	width	height
visual Viewport	412	732
content Size	412	732

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

6. Url-Checks

show header:

Domainname	Http-Status	redirect	Sec.	G
• http://test.desire2learn.com/ 1.1.1.1	409	Html is minified: 100.00 %	0.017	M
Conflict
Date: Sat, 03 Oct 2026 08:05:51 GMT
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: no-store, must-revalidate, no-cache, max-age=0, private, post-check=0, pre-check=0
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: a44a71b44e73af15-TXL
Content-Type: text/plain; charset=UTF-8
Content-Length: 16
Expires: Thu, 01 Jan 1970 00:00:01 GMT

• https://test.desire2learn.com/ 1.1.1.1 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	403	Html is minified: 110.22 % Other inline scripts (∑/total): 0/0	1.866	N
Forbidden
Certificate error: RemoteCertificateNameMismatch
Server: cloudflare
Date: Sat, 03 Oct 2026 08:05:51 GMT
Connection: keep-alive
CF-RAY: a44a71b4bb3c207f-TXL
Content-Type: text/html
Content-Length: 151

• http://test.desire2learn.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 1.1.1.1 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	409	Html is minified: 100.00 % Other inline scripts (∑/total): 0/0	0.017	M
Conflict
Visible Content:
Date: Sat, 03 Oct 2026 08:05:54 GMT
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: no-store, must-revalidate, no-cache, max-age=0, private, post-check=0, pre-check=0
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: a44a71c65fd3af15-TXL
Content-Type: text/plain; charset=UTF-8
Content-Length: 16
Expires: Thu, 01 Jan 1970 00:00:01 GMT

• https://1.1.1.1/ 1.1.1.1	301	https://one.one.one.one/	1.857	B
Date: Sat, 03 Oct 2026 08:05:54 GMT
Connection: keep-alive
Location: https://one.one.one.one/
Server: cloudflare
CF-RAY: a44a71c76c8df69f-TXL
Content-Length: 0

• https://one.one.one.one/ gzip used - 17619 / 56614 - 68.88 % Inline-JavaScript (∑/total): 1/109 Inline-CSS (∑/total): 1/106	200	Html is minified: 102.56 % Other inline scripts (∑/total): 0/0	3.024	B
Date: Sat, 03 Oct 2026 08:05:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: a44a71d9bccc321c-TXL
Access-Control-Allow-Origin: *
Cache-Control: public, must-revalidate, max-age=0
X-Frame-Options: DENY
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=xnLVYePIGVbF1SeVMqP2vJjspAyd0rEOLevPHRZpGWmarodJhrvKFufsyEAZVpFGKJBZ1j%2BQg3zjDD3pArJmkLEApaePMm5XjzSckEesaYFhAME%2BfAIJUc5uOVhsWWzG9aNdOaqJ28NhcVTIo82zgA%3D%3D"}]}
Content-Security-Policy: default-src 'none'; script-src 'self' 'sha256-qcMXZ/ErgDG9p2Htysz9era6iflv8JXya41zOY0slSc=' 'sha256-ydM8qJ+T0Nd7adK8t34/cs0GvvCG0JBujCWzV3uML8E=' 'sha256-TzTXRDJBcbY1qVQheGb/4iSGqKPqCg6XVoerYf5BYMY=' embed.cloudflarestream.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data:; font-src fonts.gstatic.com; connect-src 'self' 1.1.1.1 1.0.0.1 .cloudflare-dns.com .help.every1dns.net; frame-src embed.cloudflarestream.com; manifest-src 'self'
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
ETag: W/"e3b0b55949321bee09e380eb849f90fd"
Alt-Svc: h3=":443"
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Content-Length: 17619

7. Comments

	1. General Results, most used to calculate the result
A	name "test.desire2learn.com" is subdomain, public suffix is ".com", top-level-domain is ".com", top-level-domain-type is "generic", tld-manager is "VeriSign Global Registry Services", num .com-domains preloaded: 108094 (complete: 276475)
A	Good: All ip addresses are public addresses
	Warning: Only one ip address found: test.desire2learn.com has only one ip address.
	Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: test.desire2learn.com has no ipv6 address.
A	Good: No asked Authoritative Name Server had a timeout
A	DNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
A	https://1.1.1.1/ 1.1.1.1	301	https://one.one.one.one/	Correct redirect https to https
A	Good: destination is https
A	Good: No cookie sent via http.
	HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
A	Good: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):1 complete Content-Type - header (2 urls)
	https://test.desire2learn.com/ 1.1.1.1			Url with incomplete Content-Type - header - missing charset
B	https://test.desire2learn.com/ 1.1.1.1	403		Missing HSTS-Header
M	http://test.desire2learn.com/ 1.1.1.1	409		Misconfiguration - main pages should never send http status 400 - 499
M	https://test.desire2learn.com/ 1.1.1.1	403		Misconfiguration - main pages should never send http status 400 - 499
N	https://test.desire2learn.com/ 1.1.1.1	403		Error - Certificate isn't trusted, RemoteCertificateNameMismatch
	Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are the same. So that domain doesn't require Server Name Indication (SNI), it's the primary certificate of that set of ip addresses.: Domain test.desire2learn.com, 1 ip addresses, 1 different http results.
B	No _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.test.desire2learn.com
	2. Header-Checks
F	test.desire2learn.com 1.1.1.1	Content-Security-Policy		Critical: Missing Header:
F	test.desire2learn.com 1.1.1.1	X-Content-Type-Options		Critical: Missing Header:
F	test.desire2learn.com 1.1.1.1	Referrer-Policy		Critical: Missing Header:
F	test.desire2learn.com 1.1.1.1	Permissions-Policy		Critical: Missing Header:
B	test.desire2learn.com 1.1.1.1	Cross-Origin-Embedder-Policy		Info: Missing Header
B	test.desire2learn.com 1.1.1.1	Cross-Origin-Opener-Policy		Info: Missing Header
B	test.desire2learn.com 1.1.1.1	Cross-Origin-Resource-Policy		Info: Missing Header
	3. DNS- and NameServer - Checks
A	Info:: 16 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 4 Name Servers.
A	Info:: 16 Queries complete, 16 with IPv6, 0 with IPv4.
A	Good: All DNS Queries done via IPv6.
	Ok (4 - 8):: An average of 4.0 queries per domain name server required to find all ip addresses of all name servers.
A	Info:: 4 different Name Servers found: ns-108.awsdns-13.com, ns-1133.awsdns-13.org, ns-1559.awsdns-02.co.uk, ns-905.awsdns-49.net, 4 Name Servers included in Delegation: ns-108.awsdns-13.com, ns-1133.awsdns-13.org, ns-1559.awsdns-02.co.uk, ns-905.awsdns-49.net, 4 Name Servers included in 1 Zone definitions: ns-108.awsdns-13.com, ns-1133.awsdns-13.org, ns-1559.awsdns-02.co.uk, ns-905.awsdns-49.net, 1 Name Servers listed in SOA.Primary: ns-108.awsdns-13.com.
A	Good: Only one SOA.Primary Name Server found.: ns-108.awsdns-13.com.
A	Good: SOA.Primary Name Server included in the delegation set.: ns-108.awsdns-13.com.
A	Good: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: ns-108.awsdns-13.com, ns-1133.awsdns-13.org, ns-1559.awsdns-02.co.uk, ns-905.awsdns-49.net
A	Good: All Name Server Domain Names have a Public Suffix.
A	Good: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
A	Good: All Name Server ip addresses are public.
A	Good: Minimal 2 different name servers (public suffix and public ip address) found: 4 different Name Servers found
A	Good: All name servers have ipv4- and ipv6-addresses.: 4 different Name Servers found
A	Good: Name servers with different Top Level Domains / Public Suffix List entries found: 4 Name Servers, 4 Top Level Domains: org, net, com, co.uk
A	Good: Name Servers with different domain names found.: 4 different Domains found
	Warning: All Name Servers from the same Country / IP location.: 4 Name Servers, 1 Countries: US
A	Info: Ipv4-Subnet-list: 4 Name Servers, 1 different subnets (first Byte): 205., 1 different subnets (first two Bytes): 205.251., 4 different subnets (first three Bytes): 205.251.192., 205.251.195., 205.251.196., 205.251.198.
A	Good: Name Server IPv4-addresses from different subnet found:
A	Info: IPv6-Subnet-list: 4 Name Servers with IPv6, 1 different subnets (first block): 2600:, 1 different subnets (first two blocks): 2600:9000:, 4 different subnets (first three blocks): 2600:9000:5300:, 2600:9000:5303:, 2600:9000:5304:, 2600:9000:5306:, 4 different subnets (first four blocks): 2600:9000:5300:6c00:, 2600:9000:5303:8900:, 2600:9000:5304:6d00:, 2600:9000:5306:1700:
A	Good: Name Server IPv6 addresses from different subnets found.
A	Good: Nameserver supports TCP connections: 2 good Nameserver
A	Good: Nameserver supports Echo Capitalization: 2 good Nameserver
A	Good: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 2 good Nameserver
A	Good: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 2 good Nameserver
	Nameserver doesn't pass all EDNS-Checks: ns-108.awsdns-13.com: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
A	Good: All SOA have the same Serial Number
A	Good: CAA entries found, creating certificate is limited: amazon.com is allowed to create certificates
A	Good: CAA entries found, creating certificate is limited: digicert.com is allowed to create certificates
	4. Content- and Performance-critical Checks
	http://test.desire2learn.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 1.1.1.1	409		Fatal: Check of /.well-known/acme-challenge/random-filename has a http status between 400 and 499, but not 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge may not work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
	https://one.one.one.one/	200		Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
A	Good: Every https result with status 200 has a minified Html-Content with a quota lower then 110 %.
A	Good: Every https connection via port 443 supports the http/2 protocol via ALPN.
	https://one.one.one.one/	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 1 script elements without defer/async.
A	Good: All checked attribute values are enclosed in quotation marks (" or ').
	Wrong: img-elements without alt-attribute or empty alt-attribute found. The alt-attribute ("alternative") is required and should describe the img. So Screenreader and search engines are able to use these informations.: 5 img-elements without alt-attribute, 0 img-elements with empty alt-attribute found.
A	Good: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
A	Duration: 127170 milliseconds, 127.170 seconds

8. Connections

Domain

Port

Cert.

Protocol

KeyExchange

Strength

Cipher

Strength

HashAlgorithm

OCSP stapling

Domain/KeyExchange

IP/Strength

Port/Cipher

Cert./Strength

Protocol/HashAlgorithm

OCSP stapling

test.desire2learn.com

1.1.1.1

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

test.desire2learn.com

1.1.1.1

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain - incomplete	1	CN=cloudflare-dns.com, O="Cloudflare, Inc.", L=San Francisco, C=US, ST=California
	2	CN=SSL.com SSL Intermediate CA ECC R2, O=SSL Corp, L=Houston, C=US, ST=Texas

1.1.1.1

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

1.1.1.1

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain - incomplete	1	CN=cloudflare-dns.com, O="Cloudflare, Inc.", L=San Francisco, C=US, ST=California
	2	CN=SSL.com SSL Intermediate CA ECC R2, O=SSL Corp, L=Houston, C=US, ST=Texas

one.one.one.one

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

one.one.one.one

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain - incomplete	1	CN=cloudflare-dns.com, O="Cloudflare, Inc.", L=San Francisco, C=US, ST=California
	2	CN=SSL.com SSL Intermediate CA ECC R2, O=SSL Corp, L=Houston, C=US, ST=Texas

9. Certificates

CN=cloudflare-dns.com, O="Cloudflare, Inc.", L=San Francisco, S=California, C=US

31.12.2025

21.12.2026
expires in 75 days

cloudflare-dns.com, *.cloudflare-dns.com, 1.0.0.1, 1.1.1.1, 162.159.36.1, 162.159.46.1, 2606:4700:4700:0000:0000:0000:0000:1001, 2606:4700:4700:0000:0000:0000:0000:1111, 2606:4700:4700:0000:0000:0000:0000:0064, 2606:4700:4700:0000:0000:0000:0000:6400, one.one.one.one - 11 entries

CN=cloudflare-dns.com, O="Cloudflare, Inc.", L=San Francisco, S=California, C=US

31.12.2025

21.12.2026
expires in 75 days

Keyalgorithm	EC Public Key (256 bit, prime256v1)
Signatur:	ECDSA SHA384
Serial Number:	4ED03304C46B87A8C2EB5569DB9EBA0C
Thumbprint:	F88635017260D40B9EB417BEE73737911B630E59
SHA256 / Certificate:	47AoJnidZT0iTT7ay+Tod8tyhvxMkiZy9iJnQcpXrWU=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	96d43a697cb7b6aa4d64a25d9debcc0fba11f88b08e6b3566ceb2c143ae5f84c
SHA256 hex / Subject Public Key Information (SPKI):	96d43a697cb7b6aa4d64a25d9debcc0fba11f88b08e6b3566ceb2c143ae5f84c (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://ocsps.ssl.com
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=cloudflare-dns.com, O="Cloudflare, Inc.", L=San Francisco, S=California, C=US

31.12.2025

21.12.2026
expires in 75 days

CN=cloudflare-dns.com, O="Cloudflare, Inc.", L=San Francisco, S=California, C=US

31.12.2025

21.12.2026
expires in 75 days

Keyalgorithm	EC Public Key (256 bit, prime256v1)
Signatur:	ECDSA SHA384
Serial Number:	4ED03304C46B87A8C2EB5569DB9EBA0C
Thumbprint:	F88635017260D40B9EB417BEE73737911B630E59
SHA256 / Certificate:	47AoJnidZT0iTT7ay+Tod8tyhvxMkiZy9iJnQcpXrWU=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	96d43a697cb7b6aa4d64a25d9debcc0fba11f88b08e6b3566ceb2c143ae5f84c
SHA256 hex / Subject Public Key Information (SPKI):	96d43a697cb7b6aa4d64a25d9debcc0fba11f88b08e6b3566ceb2c143ae5f84c (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://ocsps.ssl.com
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=SSL.com SSL Intermediate CA ECC R2, O=SSL Corp, L=Houston, S=Texas, C=US

07.03.2019

03.03.2034
expires in 2704 days

CN=SSL.com SSL Intermediate CA ECC R2, O=SSL Corp, L=Houston, S=Texas, C=US

07.03.2019

03.03.2034
expires in 2704 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	ECDSA SHA384
Serial Number:	1CD71212DE1510D91282DA33104A102F
Thumbprint:	9219612E901C4904F9835EE8C2ADD54FF0B797FD
SHA256 / Certificate:	lItxEa9C9UbVec/1ziveyCE03ZkUhCvdsMUocutgTjk=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	cc6800e0e5380e325dbe945852a6e2e5587683d5b939cfcf80a8a1cbd9a42ec1
SHA256 hex / Subject Public Key Information (SPKI):	cc6800e0e5380e325dbe945852a6e2e5587683d5b939cfcf80a8a1cbd9a42ec1
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsps.ssl.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=SSL.com SSL Intermediate CA ECC R2, O=SSL Corp, L=Houston, S=Texas, C=US

07.03.2019

03.03.2034
expires in 2704 days

CN=SSL.com SSL Intermediate CA ECC R2, O=SSL Corp, L=Houston, S=Texas, C=US

07.03.2019

03.03.2034
expires in 2704 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	ECDSA SHA384
Serial Number:	1CD71212DE1510D91282DA33104A102F
Thumbprint:	9219612E901C4904F9835EE8C2ADD54FF0B797FD
SHA256 / Certificate:	lItxEa9C9UbVec/1ziveyCE03ZkUhCvdsMUocutgTjk=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	cc6800e0e5380e325dbe945852a6e2e5587683d5b939cfcf80a8a1cbd9a42ec1
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsps.ssl.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, S=Texas, C=US

14.02.2019

12.02.2027
expires in 128 days

CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, S=Texas, C=US

14.02.2019

12.02.2027
expires in 128 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	3F2C608C5CF96321
Thumbprint:	8F650CB9C02E39CCCE1AA17C8425E16D7F22DB0B
SHA256 / Certificate:	BrlyKmmcV9/xhp9DC0ebtutJquEYTqycUyXBM0o06kw=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	a320f4d534d7be97c1ae8dd0499735bc895c323add2d388bfccf662c23d7f99a
SHA256 hex / Subject Public Key Information (SPKI):	a320f4d534d7be97c1ae8dd0499735bc895c323add2d388bfccf662c23d7f99a
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsps.ssl.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, S=Texas, C=US

12.02.2016

12.02.2041
expires in 5242 days

CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, S=Texas, C=US

12.02.2016

12.02.2041
expires in 5242 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	ECDSA SHA256
Serial Number:	75E6DFCBC1685BA8
Thumbprint:	C3197C3924E654AF1BC4AB20957AE2C30E13026A
SHA256 / Certificate:	NBe7BsxgB9oblhySC4q0zj+tgg5Kowuay8SnTr3OvGU=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	a320f4d534d7be97c1ae8dd0499735bc895c323add2d388bfccf662c23d7f99a
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, S=Texas, C=US

12.02.2016

12.02.2041
expires in 5242 days

CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, S=Texas, C=US

12.02.2016

12.02.2041
expires in 5242 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	7B2C9BD316803299
Thumbprint:	B7AB3308D1EA4477BA1480125A6FBDA936490CBB
SHA256 / Certificate:	hWZqVi7gvlzpJcHYiQpvdqh+wW1NfV8p6nQZzyASO2k=
SHA256 hex / Cert (DANE * 0 1):	85666a562ee0be5ce925c1d8890a6f76a87ec16d4d7d5f29ea7419cf20123b69
SHA256 hex / PublicKey (DANE * 1 1):	d1c45377ebdcd618cd1651dc2e02c21d751e5aa9fcd1b3431ff6ecf6a31348fa
SHA256 hex / Subject Public Key Information (SPKI):	d1c45377ebdcd618cd1651dc2e02c21d751e5aa9fcd1b3431ff6ecf6a31348fa
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

No CertSpotter - CT-Log entries found

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

No CRT - CT-Log entries found

11. Html-Content - Entries

Summary

							Subresource Integrity (SRI)
Domainname	HtmlElement	rel/property	∑	∑ size	∑ problems	∑ int.	∑ ext.	∑ Origin poss.	∑ SRI ParseErrors	∑ SRI valid	∑ SRI missing
https://one.one.one.one/	a		40		0			0	0	0
	img		5		0			0	0	0
	link	stylesheet	1		0			0	0	0
	link	other	4		0			0	0	0
	meta	twitter	7		0			0	0	0
	meta	apple	1		0			0	0	0
	meta	og	4		0			0	0	0
	meta	other	7		0			0	0	0
	script		1		0			0	0	0

Details (currently limited to 500 rows - some problems with spam users)

Domainname	Html-Element	name/equiv/ property/rel	href/src/content
https://one.one.one.one/	a		/ar-EG/	1	ok
					ok


	a		/de-DE/	1	ok
					ok


	a		/dns/	1	ok
					ok


	a		/es-ES/	1	ok
					ok


	a		/fa-IR/	1	ok
					ok


	a		/family/	1	ok
					ok


	a		/fr-FR/	1	ok
					ok


	a		/he-IL/	1	ok
					ok


	a		/id-ID/	1	ok
					ok


	a		/it-IT/	1	ok
					ok


	a		/ja-JP/	1	ok
					ok


	a		/ko-KR/	1	ok
					ok


	a		/nl-NL/	1	ok
					ok


	a		/pl-PL/	1	ok
					ok


	a		/pt-BR/	1	ok
					ok


	a		/ru-RU/	1	ok
					ok


	a		/tr-TR/	1	ok
					ok


	a		/uk-UA/	1	ok
					ok


	a		/zh-Hans/	1	ok
					ok


	a		/zh-Hant/	1	ok
					ok


	a		https://1111-releases.cloudflareclient.com/mac/latest	2	ok
					ok


	a		https://1111-releases.cloudflareclient.com/win/latest	2	ok
					ok


	a		https://blog.cloudflare.com/warp-for-desktop	2	ok
					ok


	a		https://cloudflare.com	2	ok
					ok


	a		https://developers.cloudflare.com/warpclient/setting-up/linux/	1	ok
					ok


	a		https://developers.cloudflare.com/warpclient/setting-up/macOS/	1	ok
					ok


	a		https://developers.cloudflare.com/warpclient/setting-up/windows/	1	ok
					ok


	a		https://itunes.apple.com/us/app/1-1-1-1-faster-internet/id1423538627	2	ok
					ok


	a		https://pkg.cloudflareclient.com/	2	ok
					ok


	a		https://play.google.com/store/apps/details?id=com.cloudflare.onedotonedotonedotone	2	ok
					ok


	a		https://twitter.com/intent/tweet?text=ISPs%20spy%20on%20your%20Internet%20traffic%20and%20sell%20the%20data.%20I%27m%20using%201.1.1.1%20with%20WARP%2C%20a%20free%20app%20which%20makes%20the%20Internet%20on%20my%20phone%20faster%20and%20more%20private.%20You%20should%20get%20the%20app%20too%3A%20https%3A//one.one.one.one	1	ok
					ok


	a		https://www.cloudflare.com/careers/departments/	1	ok
					ok


	a		https://www.dnsperf.com/#!dns-resolvers	1	ok
					ok


	img	src	/media/lighthouse.svg	1	ok
	no alt-Attribute				ok


	img	src	/media/warp-desktop.png	1	ok
	no alt-Attribute				ok


	img	src	/media/warp-desktop-2.png	1	ok
	no alt-Attribute				ok


	img	src	/media/warp-desktop-3.png	1	ok
	no alt-Attribute				ok


	img	src	/media/warp-plus.png	1	ok
	no alt-Attribute				ok


	link	canonical	https://1.1.1.1	1	ok
					ok


	link	icon	favicon.ico	1	ok
					ok


	link	manifest	/media/manifest.json	1	ok
					ok


	link	shortcut icon	/favicon.ico	1	ok
					ok


	link	stylesheet	/site-aa686e0e9e4d122550f8.css	1	ok
					ok


	meta	charset	utf-8	1	ok
					ok


	meta	og:image	https://1.1.1.1/media/social-share.png	1	ok
					ok


	meta	og:title	1.1.1.1 — The free app that makes your Internet faster.	1	ok
					ok


	meta	og:url	https://1.1.1.1	1	ok
					ok


	meta	og:video	https://1.1.1.1/media/open-graph.mp4	1	ok
					ok


	meta	X-UA-Compatible	IE=edge, chrome=1	1	ok
					ok


	meta	apple-itunes-app	app-id=1423538627	1	ok
					ok


	meta	author	1.1.1.1	1	ok
					ok


	meta	description	Install the free app that makes your phone’s Internet more fast, private, and reliable.	1	ok
					ok


	meta	generator	1.1.1.1	1	ok
					ok


	meta	og:description	Install the free app that makes your phone’s Internet more fast, private, and reliable.	1	ok
					ok


	meta	twitter:card	summary_large_image	1	ok
					ok


	meta	twitter:creator	@Cloudflare	1	ok
					ok


	meta	twitter:description	Install the free app that makes your phone’s Internet more fast, private, and reliable.	1	ok
					ok


	meta	twitter:image	https://1.1.1.1/media/social-share.png	1	ok
					ok


	meta	twitter:site	@Cloudflare	1	ok
					ok


	meta	twitter:title	1.1.1.1 — The free app that makes your Internet faster.	2	ok
					ok


	meta	viewport	initial-scale=1, width=device-width	1	ok
					ok


	script	src	/site-aa686e0e9e4d122550f8.js	1	ok
	Missing defer / async attribute.				ok

12. Html-Parsing via https://validator.w3.org/nu/

No https result http status 200 and Content-Type text/html or text/xml found, no Html-Parsing - Check

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: ns-108.awsdns-13.com, ns-1133.awsdns-13.org, ns-1559.awsdns-02.co.uk, ns-905.awsdns-49.net

QNr.	Domain	Type	NS used
1	com	NS	f.root-servers.net (2001:500:2f::f)
	Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2	ns-108.awsdns-13.com	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: g-ns-1165.awsdns-13.com, g-ns-14.awsdns-13.com, g-ns-1741.awsdns-13.com, g-ns-589.awsdns-13.com
	Answer: g-ns-1165.awsdns-13.com 205.251.196.141, 2600:9000:5304:8d00::1
	Answer: g-ns-14.awsdns-13.com 205.251.192.14, 2600:9000:5300:e00::1
	Answer: g-ns-1741.awsdns-13.com 205.251.198.205, 2600:9000:5306:cd00::1
	Answer: g-ns-589.awsdns-13.com 205.251.194.77, 2600:9000:5302:4d00::1
3	org	NS	l.root-servers.net (2001:500:9f::42)
	Answer: a0.org.afilias-nst.info, a2.org.afilias-nst.info, b0.org.afilias-nst.org, b2.org.afilias-nst.org, c0.org.afilias-nst.info, d0.org.afilias-nst.org
4	ns-1133.awsdns-13.org	NS	a0.org.afilias-nst.info (2001:500:e::1)
	Answer: g-ns-1040.awsdns-13.org, g-ns-141.awsdns-13.org, g-ns-1613.awsdns-13.org, g-ns-719.awsdns-13.org
	Answer: g-ns-1040.awsdns-13.org 205.251.196.16, 2600:9000:5304:1000::1
	Answer: g-ns-141.awsdns-13.org 205.251.192.141, 2600:9000:5300:8d00::1
	Answer: g-ns-1613.awsdns-13.org 205.251.198.77, 2600:9000:5306:4d00::1
	Answer: g-ns-719.awsdns-13.org 205.251.194.207, 2600:9000:5302:cf00::1
5	uk	NS	k.root-servers.net (2001:7fd::1)
	Answer: dns1.nic.uk, dns2.nic.uk, dns3.nic.uk, dns4.nic.uk, nsa.nic.uk, nsb.nic.uk, nsc.nic.uk, nsd.nic.uk
6	ns-1559.awsdns-02.co.uk	NS	dns1.nic.uk (2a01:618:400::1)
	Answer: g-ns-1477.awsdns-02.co.uk, g-ns-1798.awsdns-02.co.uk, g-ns-322.awsdns-02.co.uk, g-ns-898.awsdns-02.co.uk
	Answer: g-ns-1477.awsdns-02.co.uk 205.251.197.197, 2600:9000:5305:c500::1
	Answer: g-ns-1798.awsdns-02.co.uk 205.251.199.6, 2600:9000:5307:600::1
	Answer: g-ns-322.awsdns-02.co.uk 205.251.193.66, 2600:9000:5301:4200::1
	Answer: g-ns-898.awsdns-02.co.uk 205.251.195.130, 2600:9000:5303:8200::1
7	net	NS	b.root-servers.net (2001:500:200::b)
	Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
8	ns-905.awsdns-49.net	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: g-ns-1393.awsdns-49.net, g-ns-1969.awsdns-49.net, g-ns-498.awsdns-49.net, g-ns-819.awsdns-49.net
	Answer: g-ns-1393.awsdns-49.net 205.251.197.113, 2600:9000:5305:7100::1
	Answer: g-ns-1969.awsdns-49.net 205.251.199.177, 2600:9000:5307:b100::1
	Answer: g-ns-498.awsdns-49.net 205.251.193.242, 2600:9000:5301:f200::1
	Answer: g-ns-819.awsdns-49.net 205.251.195.51, 2600:9000:5303:3300::1
9	ns-108.awsdns-13.com: 205.251.192.108	A	g-ns-1165.awsdns-13.com (2600:9000:5304:8d00::1)
10	ns-108.awsdns-13.com: 2600:9000:5300:6c00::1	AAAA	g-ns-1165.awsdns-13.com (2600:9000:5304:8d00::1)
11	ns-1133.awsdns-13.org: 205.251.196.109	A	g-ns-1040.awsdns-13.org (2600:9000:5304:1000::1)
12	ns-1133.awsdns-13.org: 2600:9000:5304:6d00::1	AAAA	g-ns-1040.awsdns-13.org (2600:9000:5304:1000::1)
13	ns-1559.awsdns-02.co.uk: 205.251.198.23	A	g-ns-1477.awsdns-02.co.uk (2600:9000:5305:c500::1)
14	ns-1559.awsdns-02.co.uk: 2600:9000:5306:1700::1	AAAA	g-ns-1477.awsdns-02.co.uk (2600:9000:5305:c500::1)
15	ns-905.awsdns-49.net: 205.251.195.137	A	g-ns-1393.awsdns-49.net (2600:9000:5305:7100::1)
16	ns-905.awsdns-49.net: 2600:9000:5303:8900::1	AAAA	g-ns-1393.awsdns-49.net (2600:9000:5305:7100::1)

14. CAA - Entries

Domainname	flag	Name	Value	∑ Queries
test.desire2learn.com	0		no CAA entry found	1
desire2learn.com	5	issue	amazon.com	1
	5	issue	digicert.com	1
	5	iodef	mailto:soeplatform@d2l.com	1
com	0		no CAA entry found	1

15. TXT - Entries

Domainname	TXT Entry	Status	∑ Queries
desire2learn.com	00d6100000080toeaq	ok	1
desire2learn.com	apple-domain-verification=MeLeVVyApyKYBSz6	ok	1
desire2learn.com	docusign=62e304fd-fb66-4e9e-b8f9-748a3a089d47	ok	1
desire2learn.com	google-site-verification=A6IH_O_zeCmSL8QSLkgdwtHCwXbTxQdKBiud1fzNRHA	ok	1
desire2learn.com	konsRtf4yNaWlC8rwoC5mJgGnUMmYzzfB9Bs1XoyxMK20r5uOeKU3PaBRImrywWqWo4iE7MMkzB9AyGn8nl7Ng==	ok	1
desire2learn.com	v=spf1 include:a._spf.brightspace.com include:spf.protection.outlook.com include:coremotivesmarketing.com include:amazonses.com include:sendgrid.net a:d2l-com.mail.protection.outlook.com ip4:3.98.115.100 ~all	ok	1
desire2learn.com	zscaler-verification-257910/145548230-09042025-pb201247	ok	1
test.desire2learn.com	v=spf1 include:a._spf.brightspace.com ~all	ok	1
_acme-challenge.test.desire2learn.com		Name Error - The domain name does not exist	1
_acme-challenge.test.desire2learn.com.desire2learn.com		Name Error - The domain name does not exist	1
_acme-challenge.test.desire2learn.com.test.desire2learn.com		Name Error - The domain name does not exist	1

16. DomainService - Entries

Type		Domain	Pref	Value	DNS-error	num Answers	Status
MX		test.desire2learn.com	30	gourmand.brightspace.com	0	1	ok
	A			34.206.126.97	0	1	ok
	CNAME				0	0	ok
SPF	TXT	test.desire2learn.com		v=spf1 include:a._spf.brightspace.com ~all			ok
	TXT	a._spf.brightspace.com		v=spf1 ip4:3.93.92.113 ip4:3.95.92.33 ip4:3.208.170.109 ip4:3.209.245.19 ip4:3.210.92.39 ip4:3.216.53.87 ip4:13.54.0.137 ip4:13.54.3.158 ip4:13.54.44.75 ip4:13.54.69.230 ip4:34.192.186.31 ip4:34.192.219.221 ip4:34.193.35.224 ip4:34.193.36.133 ip4:34.206.126.97 ip4:34.238.72.77 ip4:34.251.196.222 ip4:34.251.218.99 ip4:35.182.71.56 ip4:35.182.104.93 ip4:35.183.172.144 ip4:52.2.133.101 ip4:3.96.78.245 ip4:99.79.105.152 ip4:99.79.164.233 ip4:52.200.51.42 ip4:50.19.115.162 include:b._spf.brightspace.com ~all			ok
	TXT	b._spf.brightspace.com		v=spf1 ip4:52.18.230.4 ip4:52.19.25.186 ip4:52.19.101.83 ip4:52.44.18.33 ip4:52.60.141.24 ip4:52.60.156.213 ip4:52.74.158.142 ip4:52.76.8.151 ip4:52.76.52.112 ip4:52.214.126.95 ip4:52.221.8.78 ip4:54.76.226.94 ip4:54.89.131.35 ip4:54.226.84.189 ip4:99.79.113.105 ip4:52.204.22.122 ip4:54.242.44.93 ip4:3.226.173.167 ip4:54.208.23.129 ip4:3.92.150.237 ip4:54.166.219.243 ip4:35.182.213.139 ip4:99.79.159.239 ip4:54.157.92.248 ip4:99.79.185.196 ip4:99.79.102.212 ip4:99.79.84.42 ip4:99.79.159.57 ip4:35.183.221.135 ip4:99.79.84.236 ip4:52.60.171.2 ip4:3.248.55.94 ip4:63.35.93.80 ip4:52.49.201.29 ip4:3.213.96.58 ip4:35.174.95.1 ip4:44.193.100.84 ip4:3.223.105.150 ip4:52.21.232.180 ip4:34.197.184.81 ip4:52.204.62.29 ip4:3.219.17.227 ip4:3.212.211.133 ip4:34.239.195.152 ip4:54.159.168.147 ip4:3.221.31.41 ip4:15.206.47.138 ip4:35.154.33.144 ip4:3.6.121.180 ip4:43.204.203.250 ip4:13.127.80.230 ip4:43.205.156.55 ip4:54.164.13.199 ip4:3.0.107.183 ip4:54.254.163.105 ~all			ok

17. Cipher Suites

Skipped, CDN used or too many ip addresses

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

Permalink: https://check-your-website.server-daten.de/?i=83bcd60b-6923-44ba-ab81-b8c307e96dc9

Last Result: https://check-your-website.server-daten.de/?q=test.desire2learn.com - 2026-10-03 10:04:13

Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=test.desire2learn.com" target="_blank">Check this Site: test.desire2learn.com</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

QR-Code of this page - https://check-your-website.server-daten.de/?d=test.desire2learn.com

Check DNS, Urls + Redirects, Certificates and Content of your Website

Older results

1. IP-Addresses

2. DNSSEC

3. Name Servers

4. SOA-Entries

5. Screenshots

Mobile- and other Chrome-Checks

6. Url-Checks

7. Comments

1. General Results, most used to calculate the result

2. Header-Checks

3. DNS- and NameServer - Checks

4. Content- and Performance-critical Checks

8. Connections

9. Certificates

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

11. Html-Content - Entries

Summary

Details (currently limited to 500 rows - some problems with spam users)

12. Html-Parsing via https://validator.w3.org/nu/

13. Nameserver - IP-Adresses

14. CAA - Entries

15. TXT - Entries

16. DomainService - Entries

17. Cipher Suites

18. Portchecks