Check DNS, Urls + Redirects, Certificates and Content of your Website

0 in Queue, 0 of max. 8 Checks (12:42:48)
Why should you only use Prefix - Cookies? |
Hall of Fame - A+ and A

 

Shortcuts: 1. IP-Addresses | 2. DNSSEC | 3. Name Servers | 4. SOA-Entries | 5. Screenshots | 6. Url-Checks | 7. Comments | 8. Connections | 9. Certificates | 10. CT-Logs | 11. Html-Content | 12. Html-Parsing | 13. NameServer-IPAddresses | 14. CAA | 15. TXT | 16. DomainServiceEntries | 17. Cipher Suites | 18. Portchecks |

 

I

 

Content problems - mixed content, missing files etc.

 

Checked:
06.11.2025 03:31:00

 

Older results

No older results found

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
scratch.mit.edu
A
151.101.2.133
Montreal/Quebec/Canada (CA) - Fastly, Inc.
No Hostname found
yes
2
0

A
151.101.66.133
Montreal/Quebec/Canada (CA) - Fastly, Inc.
No Hostname found
yes
2
0

A
151.101.130.133
Montreal/Quebec/Canada (CA) - Fastly, Inc.
No Hostname found
yes
2
0

A
151.101.194.133
Montreal/Quebec/Canada (CA) - Fastly, Inc.
No Hostname found
yes
2
0

AAAA

yes


www.scratch.mit.edu
CNAME
scratch.mit.edu
yes
1
0

A
151.101.2.133
Montreal/Quebec/Canada (CA) - Fastly, Inc.
No Hostname found
yes



A
151.101.66.133
Montreal/Quebec/Canada (CA) - Fastly, Inc.
No Hostname found
yes



A
151.101.130.133
Montreal/Quebec/Canada (CA) - Fastly, Inc.
No Hostname found
yes



A
151.101.194.133
Montreal/Quebec/Canada (CA) - Fastly, Inc.
No Hostname found
yes


*.mit.edu
A
Refused
yes



AAAA
Refused
yes



CNAME
Refused
yes


*.scratch.mit.edu
A

yes



AAAA

yes



CNAME

yes


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






• Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 61809, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 21.11.2025, 00:00:00 +, Signature-Inception: 31.10.2025, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: edu

edu
1 DS RR in the parent zone found






DS with Algorithm 13, KeyTag 35663, DigestType 2 and Digest ouFhQpGDGkdGtaxStLNFNXaHJx6FNTCCdB8c89BqTB0=






1 RRSIG RR to validate DS RR found






RRSIG-Owner edu., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 18.11.2025, 21:00:00 +, Signature-Inception: 05.11.2025, 20:00:00 +, KeyTag 61809, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 61809 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 35663, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 13, KeyTag 35999, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner edu., Algorithm: 13, 1 Labels, original TTL: 86400 sec, Signature-expiration: 11.11.2025, 15:11:14 +, Signature-Inception: 27.10.2025, 15:06:14 +, KeyTag 35663, Signer-Name: edu






• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 35663 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 35663, DigestType 2 and Digest "ouFhQpGDGkdGtaxStLNFNXaHJx6FNTCCdB8c89BqTB0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: mit.edu

mit.edu
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "hek73pofc58u075ppjt13sutspnmklk4" between the hashed NSEC3-owner "he5l03lu789mn7fk2l9q79bs07n1m2bb" and the hashed NextOwner "hg0gs3glnvqftfllsg09865af4lp7rhd". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner he5l03lu789mn7fk2l9q79bs07n1m2bb.edu., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 10.11.2025, 03:01:44 +, Signature-Inception: 03.11.2025, 01:51:44 +, KeyTag 35999, Signer-Name: edu






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "9dhs4ep5g85pf9nufk06hek0o48qgk77" as Owner. That's the Hash of "edu" with the NextHashedOwnerName "9irjmuel398sejh8crdik2h2k85k5243". So that domain name is the Closest Encloser of "mit.edu". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner 9dhs4ep5g85pf9nufk06hek0o48qgk77.edu., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 09.11.2025, 03:01:29 +, Signature-Inception: 02.11.2025, 01:51:29 +, KeyTag 35999, Signer-Name: edu






0 DNSKEY RR found









Zone: scratch.mit.edu

scratch.mit.edu
0 DS RR in the parent zone found






0 DNSKEY RR found









Zone: www.scratch.mit.edu

www.scratch.mit.edu
0 DS RR in the parent zone found

 

3. Name Servers

DomainNameserverNS-IP
scratch.mit.edu
•  ns-1316.awsdns-36.org / da58049a71741df974c826c48c4238b6 -
205.251.197.36
Herndon/Virginia/United States (US) - Amazon.com		•

• 
2600:9000:5305:2400::1
Chicago/Illinois/United States (US) - Amazon.com, Inc.		•

•  ns-1587.awsdns-06.co.uk / 71f0be45f281ec1c9c45fc3c6f2b58ce -
205.251.198.51
Ashburn/Virginia/United States (US) - Amazon.com		•

• 
2600:9000:5306:3300::1
Seattle/Washington/United States (US) - Amazon.com, Inc.		•

•  ns-275.awsdns-34.com / 23e8fd27d1f89bced1610f2a3494e4e9 -
205.251.193.19
Ashburn/Virginia/United States (US) - Amazon.com		•

• 
2600:9000:5301:1300::1
Seattle/Washington/United States (US) - Amazon.com, Inc.		•

•  ns-583.awsdns-08.net / 6dc18b697fff7d51ac26bc5dd7246c5a -
205.251.194.71
Chicago/Illinois/United States (US) - Amazon.com		•

• 
2600:9000:5302:4700::1
Seattle/Washington/United States (US) - Amazon.com, Inc.		•
mit.edu
•  asia1.akam.net
95.100.175.64
Warsaw/Mazovia/Poland (PL) - Akamai Technologies		•

•  asia2.akam.net
95.101.36.64
Cambridge/Massachusetts/United States (US) - Akamai Technologies		•

•  eur5.akam.net
23.74.25.64
Amsterdam/North Holland/The Netherlands (NL) - Akamai International, BV		•

•  ns1-173.akam.net
193.108.91.173
Cambridge/Massachusetts/United States (US) - Akamai International B.V.		•

• 
2600:1401:2::ad
Edison/New Jersey/United States (US) - Akamai International B.V.		•

•  ns1-37.akam.net
193.108.91.37
Cambridge/Massachusetts/United States (US) - Akamai International B.V.		•

• 
2600:1401:2::25
Edison/New Jersey/United States (US) - Akamai International B.V.		•

•  use2.akam.net
96.7.49.64
Cambridge/Massachusetts/United States (US) - Akamai International B.V.		•

•  use5.akam.net
2.16.40.64
London/England/United Kingdom (GB) - Akamai Technologies		•

• 
2600:1403:a::40
Cambridge/Massachusetts/United States (US) - Akamai International B.V.		•

•  usw2.akam.net
184.26.161.64
New York/United States (US) - Akamai International B.V.		•
edu
•  a.edu-servers.net / nnn1-par6
•

•  b.edu-servers.net / nnn1-elvie2
•

•  c.edu-servers.net / nnn1-par6
•

•  d.edu-servers.net / nnn1-par6
•

•  e.edu-servers.net / nnn1-par6
•

•  f.edu-servers.net / nnn1-defra-4
•

•  g.edu-servers.net / nnn1-defra-4
•

•  h.edu-servers.net / nnn1-defra-4
•

•  i.edu-servers.net / nnn1-defra-4
•

•  j.edu-servers.net / nnn1-frmrs-2
•

•  k.edu-servers.net / nnn1-frmrs-2
•

•  l.edu-servers.net / nnn1-frmrs-2
•

•  m.edu-servers.net / nnn1-frmrs-2
•

 

4. SOA-Entries


Domain:edu
Zone-Name:edu
Primary:a.edu-servers.net
Mail:nstld.verisign-grs.com
Serial:1762396237
Refresh:1800
Retry:900
Expire:604800
TTL:900
num Entries:13


Domain:mit.edu
Zone-Name:mit.edu
Primary:use2.akam.net
Mail:network-request.mit.edu
Serial:21922
Refresh:900
Retry:900
Expire:3600000
TTL:3600
num Entries:11


Domain:scratch.mit.edu
Zone-Name:scratch.mit.edu
Primary:ns-1316.awsdns-36.org
Mail:awsdns-hostmaster.amazon.com
Serial:1
Refresh:7200
Retry:900
Expire:1209600
TTL:86400
num Entries:8


5. Screenshots

Startaddress: https://scratch.mit.edu/, address used: https://scratch.mit.edu/, Screenshot created 2025-11-06 03:35:12 +00:0

 

Mobil (412px x 732px)

 

1105 milliseconds

 

Screenshot mobile - https://scratch.mit.edu/
Mobil + Landscape (732px x 412px)

 

1087 milliseconds

 

Screenshot mobile landscape - https://scratch.mit.edu/
Screen (1280px x 1680px)

 

1223 milliseconds

 

Screenshot Desktop - https://scratch.mit.edu/

 

Mobile- and other Chrome-Checks


widthheight
visual Viewport397732
content Size3971961

 

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://scratch.mit.edu/projects/1232721906/
151.101.2.133
301
https://scratch.mit.edu/projects/1232721906/

0.046
A
Connection: close
Retry-After: 0
Location: https://scratch.mit.edu/projects/1232721906/
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:32:50 GMT
Via: 1.1 varnish
X-Served-By: cache-fra-etou8220086-FRA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1762396371.786416,VS0,VE0
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Content-Length: 0

• http://scratch.mit.edu/projects/1232721906/
151.101.66.133
301
https://scratch.mit.edu/projects/1232721906/

0.050
A
Connection: close
Retry-After: 0
Location: https://scratch.mit.edu/projects/1232721906/
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:32:50 GMT
Via: 1.1 varnish
X-Served-By: cache-fra-etou8220194-FRA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1762396371.845816,VS0,VE0
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Content-Length: 0

• http://scratch.mit.edu/projects/1232721906/
151.101.130.133
301
https://scratch.mit.edu/projects/1232721906/

0.046
A
Connection: close
Retry-After: 0
Location: https://scratch.mit.edu/projects/1232721906/
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:32:50 GMT
Via: 1.1 varnish
X-Served-By: cache-fra-etou8220035-FRA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1762396371.649291,VS0,VE0
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Content-Length: 0

• http://scratch.mit.edu/projects/1232721906/
151.101.194.133
301
https://scratch.mit.edu/projects/1232721906/

0.063
A
Connection: close
Retry-After: 0
Location: https://scratch.mit.edu/projects/1232721906/
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:32:50 GMT
Via: 1.1 varnish
X-Served-By: cache-fra-etou8220147-FRA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1762396371.717774,VS0,VE0
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Content-Length: 0

• http://www.scratch.mit.edu/projects/1232721906/
151.101.2.133
301
https://scratch.mit.edu/

0.047
E
Connection: close
Retry-After: 0
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:32:51 GMT
Via: 1.1 varnish
X-Served-By: cache-fra-etou8220092-FRA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1762396371.041329,VS0,VE0
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
Location: https://scratch.mit.edu/
X-Frame-Options: SAMEORIGIN
Content-Length: 0
Content-Type:

• http://www.scratch.mit.edu/projects/1232721906/
151.101.66.133
301
https://scratch.mit.edu/

0.047
E
Connection: close
Retry-After: 0
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:32:51 GMT
Via: 1.1 varnish
X-Served-By: cache-fra-etou8220131-FRA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1762396371.101795,VS0,VE0
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
Location: https://scratch.mit.edu/
X-Frame-Options: SAMEORIGIN
Content-Length: 0
Content-Type:

• http://www.scratch.mit.edu/projects/1232721906/
151.101.130.133
301
https://scratch.mit.edu/

0.046
E
Connection: close
Retry-After: 0
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:32:50 GMT
Via: 1.1 varnish
X-Served-By: cache-fra-etou8220134-FRA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1762396371.917729,VS0,VE0
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
Location: https://scratch.mit.edu/
X-Frame-Options: SAMEORIGIN
Content-Length: 0
Content-Type:

• http://www.scratch.mit.edu/projects/1232721906/
151.101.194.133
301
https://scratch.mit.edu/

0.050
E
Connection: close
Retry-After: 0
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:32:50 GMT
Via: 1.1 varnish
X-Served-By: cache-fra-etou8220184-FRA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1762396371.978417,VS0,VE0
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
Location: https://scratch.mit.edu/
X-Frame-Options: SAMEORIGIN
Content-Length: 0
Content-Type:

• https://www.scratch.mit.edu/projects/1232721906/
151.101.2.133
301
https://scratch.mit.edu/

3.220
A
Connection: close
Retry-After: 0
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:33:20 GMT
Via: 1.1 varnish
X-Served-By: cache-fra-etou8220120-FRA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1762396401.738283,VS0,VE0
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
Location: https://scratch.mit.edu/
X-Frame-Options: SAMEORIGIN
Content-Length: 0
Content-Type:

• https://www.scratch.mit.edu/projects/1232721906/
151.101.66.133
301
https://scratch.mit.edu/

3.233
A
Connection: close
Retry-After: 0
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:33:25 GMT
Via: 1.1 varnish
X-Served-By: cache-fra-etou8220055-FRA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1762396406.594152,VS0,VE0
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
Location: https://scratch.mit.edu/
X-Frame-Options: SAMEORIGIN
Content-Length: 0
Content-Type:

• https://www.scratch.mit.edu/projects/1232721906/
151.101.130.133
301
https://scratch.mit.edu/

3.360
A
Connection: close
Retry-After: 0
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:33:10 GMT
Via: 1.1 varnish
X-Served-By: cache-fra-etou8220024-FRA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1762396391.895226,VS0,VE0
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
Location: https://scratch.mit.edu/
X-Frame-Options: SAMEORIGIN
Content-Length: 0
Content-Type:

• https://www.scratch.mit.edu/projects/1232721906/
151.101.194.133
301
https://scratch.mit.edu/

3.233
A
Connection: close
Retry-After: 0
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:33:15 GMT
Via: 1.1 varnish
X-Served-By: cache-fra-etou8220057-FRA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1762396396.917651,VS0,VE0
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
Location: https://scratch.mit.edu/
X-Frame-Options: SAMEORIGIN
Content-Length: 0
Content-Type:

• https://scratch.mit.edu/projects/1232721906/
151.101.2.133 gzip used - 771 / 1502 - 48.67 %
Inline-JavaScript (∑/total): 1/396 Inline-CSS (∑/total): 0/0		200

Html is minified: 158.11 %
Other inline scripts (∑/total): 0/0		3.404
I
Connection: keep-alive
Cache-Control: public, no-cache, max-age=3600
ETag: "8f85a960eaa22f9ea49491928ec8fac3"
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:33:01 GMT
Via: 1.1 varnish
Age: 2385
X-Served-By: cache-fra-etou8220152-FRA
X-Cache: HIT
X-Cache-Hits: 6
X-Timer: S1762396381.044362,VS0,VE0
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Content-Length: 771
Last-Modified: Wed, 05 Jun 2024 22:09:07 GMT
Content-Type: text/html
Content-Encoding: gzip

• https://scratch.mit.edu/projects/1232721906/
151.101.66.133 gzip used - 771 / 1502 - 48.67 %
Inline-JavaScript (∑/total): 1/396 Inline-CSS (∑/total): 0/0		200

Html is minified: 158.11 %
Other inline scripts (∑/total): 0/0		3.220
I
Connection: keep-alive
Cache-Control: public, no-cache, max-age=3600
ETag: "8f85a960eaa22f9ea49491928ec8fac3"
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:33:06 GMT
Via: 1.1 varnish
Age: 2389
X-Served-By: cache-fra-etou8220163-FRA
X-Cache: HIT
X-Cache-Hits: 9
X-Timer: S1762396386.035781,VS0,VE0
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Content-Length: 771
Last-Modified: Wed, 05 Jun 2024 22:09:07 GMT
Content-Type: text/html
Content-Encoding: gzip

• https://scratch.mit.edu/projects/1232721906/
151.101.130.133 gzip used - 771 / 1502 - 48.67 %
Inline-JavaScript (∑/total): 1/396 Inline-CSS (∑/total): 0/0		200

Html is minified: 158.11 %
Other inline scripts (∑/total): 0/0		3.360
I
Connection: keep-alive
Cache-Control: public, no-cache, max-age=3600
ETag: "8f85a960eaa22f9ea49491928ec8fac3"
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:32:51 GMT
Via: 1.1 varnish
Age: 2375
X-Served-By: cache-fra-etou8220042-FRA
X-Cache: HIT
X-Cache-Hits: 5
X-Timer: S1762396371.233050,VS0,VE0
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Content-Length: 771
Last-Modified: Wed, 05 Jun 2024 22:09:07 GMT
Content-Type: text/html
Content-Encoding: gzip

• https://scratch.mit.edu/projects/1232721906/
151.101.194.133 gzip used - 771 / 1502 - 48.67 %
Inline-JavaScript (∑/total): 1/396 Inline-CSS (∑/total): 0/0		200

Html is minified: 158.11 %
Other inline scripts (∑/total): 0/0		3.217
I
Connection: keep-alive
Cache-Control: public, no-cache, max-age=3600
ETag: "8f85a960eaa22f9ea49491928ec8fac3"
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:32:56 GMT
Via: 1.1 varnish
Age: 2380
X-Served-By: cache-fra-etou8220162-FRA
X-Cache: HIT
X-Cache-Hits: 7
X-Timer: S1762396376.201761,VS0,VE0
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Content-Length: 771
Last-Modified: Wed, 05 Jun 2024 22:09:07 GMT
Content-Type: text/html
Content-Encoding: gzip

• https://scratch.mit.edu/
gzip used - 1226 / 3060 - 59.93 %
Inline-JavaScript (∑/total): 2/1061 Inline-CSS (∑/total): 0/0		200

Html is minified: 166.58 %
Other inline scripts (∑/total): 0/0		3.233
I
Connection: keep-alive
Cache-Control: public, no-cache, max-age=3600
ETag: "3a395dc2c69faa7ae62b4c6bb85994a7"
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:34:05 GMT
Via: 1.1 varnish
Age: 2339
X-Served-By: cache-fra-etou8220039-FRA
X-Cache: HIT
X-Cache-Hits: 3
X-Timer: S1762396446.641586,VS0,VE1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Content-Length: 1226
Last-Modified: Wed, 05 Jun 2024 22:09:08 GMT
Content-Type: text/html
Content-Encoding: gzip

• http://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
151.101.2.133
301
https://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.046
A
Visible Content:
Connection: close
Retry-After: 0
Location: https://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:33:30 GMT
Via: 1.1 varnish
X-Served-By: cache-fra-etou8220109-FRA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1762396411.629742,VS0,VE0
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Content-Length: 0

• http://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
151.101.66.133
301
https://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.046
A
Visible Content:
Connection: close
Retry-After: 0
Location: https://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:33:30 GMT
Via: 1.1 varnish
X-Served-By: cache-fra-etou8220148-FRA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1762396411.700769,VS0,VE0
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Content-Length: 0

• http://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
151.101.130.133
301
https://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.063
A
Visible Content:
Connection: close
Retry-After: 0
Location: https://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:33:30 GMT
Via: 1.1 varnish
X-Served-By: cache-fra-etou8220117-FRA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1762396410.488305,VS0,VE0
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Content-Length: 0

• http://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
151.101.194.133
301
https://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.060
A
Visible Content:
Connection: close
Retry-After: 0
Location: https://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:33:30 GMT
Via: 1.1 varnish
X-Served-By: cache-fra-etou8220153-FRA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1762396411.558931,VS0,VE0
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Content-Length: 0

• http://www.scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
151.101.2.133
301
https://scratch.mit.edu/

0.063
E
Visible Content:
Connection: close
Retry-After: 0
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:33:30 GMT
Via: 1.1 varnish
X-Served-By: cache-fra-etou8220096-FRA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1762396411.917980,VS0,VE0
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
Location: https://scratch.mit.edu/
X-Frame-Options: SAMEORIGIN
Content-Length: 0
Content-Type:

• http://www.scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
151.101.66.133
301
https://scratch.mit.edu/

0.063
E
Visible Content:
Connection: close
Retry-After: 0
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:33:30 GMT
Via: 1.1 varnish
X-Served-By: cache-fra-etou8220173-FRA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1762396411.997202,VS0,VE0
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
Location: https://scratch.mit.edu/
X-Frame-Options: SAMEORIGIN
Content-Length: 0
Content-Type:

• http://www.scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
151.101.130.133
301
https://scratch.mit.edu/

0.063
E
Visible Content:
Connection: close
Retry-After: 0
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:33:30 GMT
Via: 1.1 varnish
X-Served-By: cache-fra-etou8220084-FRA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1762396411.776972,VS0,VE0
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
Location: https://scratch.mit.edu/
X-Frame-Options: SAMEORIGIN
Content-Length: 0
Content-Type:

• http://www.scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
151.101.194.133
301
https://scratch.mit.edu/

0.046
E
Visible Content:
Connection: close
Retry-After: 0
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:33:30 GMT
Via: 1.1 varnish
X-Served-By: cache-fra-etou8220138-FRA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1762396411.847963,VS0,VE0
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
Location: https://scratch.mit.edu/
X-Frame-Options: SAMEORIGIN
Content-Length: 0
Content-Type:

• https://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
gzip used - 7250 / 27705 - 73.83 %
Inline-JavaScript (∑/total): 7/2887 Inline-CSS (∑/total): 1/370		404

Html is minified: 150.71 %
Other inline scripts (∑/total): 9/5970		3.597
B
NOT FOUND
Visible Content:
Connection: keep-alive
Set-Cookie: scratchsessionsid=; expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Path=/,scratchcsrftoken=s6hqbQkDGS6NUMiYMLVURq6xCxaxzFp7; Domain=.scratch.mit.edu; expires=Thu, 05-Nov-2026 02:34:10 GMT; Max-Age=31449600; Path=/; secure
Cache-Control: no-cache, max-age=0
Age: 0
Via: 1.1 varnish (Varnish/5.2),1.1 varnish,1.1 varnish
Accept-Ranges: bytes
Date: Thu, 06 Nov 2025 02:34:10 GMT
X-Served-By: varnish01, cache-bos4680-BOS, cache-fra-etou8220039-FRA
X-Cache: MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0
X-Timer: S1762396451.521729,VS0,VE290
Vary: Cookie,Accept-Language,Accept-Encoding
Strict-Transport-Security: max-age=31536000
X-Vcl-Version: 926
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Content-Length: 7250
Content-Language: en
Content-Encoding: gzip
Content-Type: text/html; charset=utf-8

• https://151.101.2.133/projects/1232721906/
151.101.2.133
421

Html is minified: 102.11 %
6.920
N
Misdirected Request
Certificate error: RemoteCertificateNameMismatch
Connection: keep-alive
x-served-by: cache-fra-etou8220179
Content-Length: 291
Content-Type: text/plain; charset=utf-8

• https://151.101.66.133/projects/1232721906/
151.101.66.133
421

Html is minified: 102.11 %
6.923
N
Misdirected Request
Certificate error: RemoteCertificateNameMismatch
Connection: keep-alive
x-served-by: cache-fra-etou8220079
Content-Length: 291
Content-Type: text/plain; charset=utf-8

• https://151.101.130.133/projects/1232721906/
151.101.130.133
421

Html is minified: 102.11 %
6.937
N
Misdirected Request
Certificate error: RemoteCertificateNameMismatch
Connection: keep-alive
x-served-by: cache-fra-etou8220049
Content-Length: 291
Content-Type: text/plain; charset=utf-8

• https://151.101.194.133/projects/1232721906/
151.101.194.133
421

Html is minified: 102.11 %
6.923
N
Misdirected Request
Certificate error: RemoteCertificateNameMismatch
Connection: keep-alive
x-served-by: cache-fra-etou8220147
Content-Length: 291
Content-Type: text/plain; charset=utf-8

 

7. Comments


1. General Results, most used to calculate the result

Aname "scratch.mit.edu" is subdomain, public suffix is ".edu", top-level-domain is ".edu", top-level-domain-type is "sponsored", tld-manager is "EDUCAUSE", num .edu-domains preloaded: 87 (complete: 276475)
AGood: All ip addresses are public addresses
AGood: Minimal 2 ip addresses per domain name found: scratch.mit.edu has 4 different ip addresses (authoritative).
AGood: Minimal 2 ip addresses per domain name found: www.scratch.mit.edu has 4 different ip addresses (authoritative).
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: scratch.mit.edu has no ipv6 address.
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: www.scratch.mit.edu has no ipv6 address.
AGood: No asked Authoritative Name Server had a timeout
AGood: destination is https
AGood: No cookie sent via http.
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):1 complete Content-Type - header (6 urls)
https://scratch.mit.edu/


Url with incomplete Content-Type - header - missing charset
https://scratch.mit.edu/projects/1232721906/ 151.101.2.133


Url with incomplete Content-Type - header - missing charset
https://scratch.mit.edu/projects/1232721906/ 151.101.66.133


Url with incomplete Content-Type - header - missing charset
https://scratch.mit.edu/projects/1232721906/ 151.101.130.133


Url with incomplete Content-Type - header - missing charset
https://scratch.mit.edu/projects/1232721906/ 151.101.194.133


Url with incomplete Content-Type - header - missing charset
Ahttp://scratch.mit.edu/projects/1232721906/ 151.101.2.133
301
https://scratch.mit.edu/projects/1232721906/
Correct redirect http - https with the same domain name
Ahttp://scratch.mit.edu/projects/1232721906/ 151.101.66.133
301
https://scratch.mit.edu/projects/1232721906/
Correct redirect http - https with the same domain name
Ahttp://scratch.mit.edu/projects/1232721906/ 151.101.130.133
301
https://scratch.mit.edu/projects/1232721906/
Correct redirect http - https with the same domain name
Ahttp://scratch.mit.edu/projects/1232721906/ 151.101.194.133
301
https://scratch.mit.edu/projects/1232721906/
Correct redirect http - https with the same domain name
Bhttps://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
scratchsessionsid=; expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Path=/
Cookie sent via https, but not marked as secure
Bhttps://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
scratchsessionsid=; expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Path=/
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
scratchcsrftoken=s6hqbQkDGS6NUMiYMLVURq6xCxaxzFp7; Domain=.scratch.mit.edu; expires=Thu, 05-Nov-2026 02:34:10 GMT; Max-Age=31449600; Path=/; secure
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
CError - more then one version with Http-Status 200. After all redirects, all users (and search engines) should see the same https url: Non-www or www, but not both with http status 200.
Ehttp://www.scratch.mit.edu/projects/1232721906/ 151.101.2.133
301
https://scratch.mit.edu/
Wrong redirect one domain http to other domain https. First redirect to https without new dns query, so the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
Ehttp://www.scratch.mit.edu/projects/1232721906/ 151.101.66.133
301
https://scratch.mit.edu/
Wrong redirect one domain http to other domain https. First redirect to https without new dns query, so the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
Ehttp://www.scratch.mit.edu/projects/1232721906/ 151.101.130.133
301
https://scratch.mit.edu/
Wrong redirect one domain http to other domain https. First redirect to https without new dns query, so the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
Ehttp://www.scratch.mit.edu/projects/1232721906/ 151.101.194.133
301
https://scratch.mit.edu/
Wrong redirect one domain http to other domain https. First redirect to https without new dns query, so the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
Ihttps://scratch.mit.edu/projects/1232721906/ 151.101.130.133
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://scratch.mit.edu/projects/1232721906/ 151.101.194.133
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://scratch.mit.edu/projects/1232721906/ 151.101.2.133
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://scratch.mit.edu/projects/1232721906/ 151.101.66.133
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://scratch.mit.edu/
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Mhttps://151.101.2.133/projects/1232721906/ 151.101.2.133
421

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://151.101.66.133/projects/1232721906/ 151.101.66.133
421

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://151.101.130.133/projects/1232721906/ 151.101.130.133
421

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://151.101.194.133/projects/1232721906/ 151.101.194.133
421

Misconfiguration - main pages should never send http status 400 - 499
Nhttps://151.101.2.133/projects/1232721906/ 151.101.2.133
421

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://151.101.66.133/projects/1232721906/ 151.101.66.133
421

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://151.101.130.133/projects/1232721906/ 151.101.130.133
421

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://151.101.194.133/projects/1232721906/ 151.101.194.133
421

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
AGood: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain scratch.mit.edu, 4 ip addresses.
AGood: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain www.scratch.mit.edu, 4 ip addresses.
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain scratch.mit.edu, 4 ip addresses.
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain www.scratch.mit.edu, 4 ip addresses.
AGood: _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Domainname: _mta-sts.scratch.mit.edu
BBad: _mta-sts TXT found, but invalid

2. Header-Checks

Ascratch.mit.edu
X-Frame-Options
Ok: Header without syntax errors found: SAMEORIGIN
B

Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Ascratch.mit.edu 151.101.2.133
X-Frame-Options
Ok: Header without syntax errors found: SAMEORIGIN
B

Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Ascratch.mit.edu 151.101.66.133
X-Frame-Options
Ok: Header without syntax errors found: SAMEORIGIN
B

Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Ascratch.mit.edu 151.101.130.133
X-Frame-Options
Ok: Header without syntax errors found: SAMEORIGIN
B

Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Ascratch.mit.edu 151.101.194.133
X-Frame-Options
Ok: Header without syntax errors found: SAMEORIGIN
B

Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Fscratch.mit.edu 151.101.2.133
Content-Security-Policy
Critical: Missing Header:
Fscratch.mit.edu 151.101.2.133
X-Content-Type-Options
Critical: Missing Header:
Fscratch.mit.edu 151.101.2.133
Referrer-Policy
Critical: Missing Header:
Fscratch.mit.edu 151.101.2.133
Permissions-Policy
Critical: Missing Header:
Bscratch.mit.edu 151.101.2.133
Cross-Origin-Embedder-Policy
Info: Missing Header
Bscratch.mit.edu 151.101.2.133
Cross-Origin-Opener-Policy
Info: Missing Header
Bscratch.mit.edu 151.101.2.133
Cross-Origin-Resource-Policy
Info: Missing Header
Fscratch.mit.edu 151.101.66.133
Content-Security-Policy
Critical: Missing Header:
Fscratch.mit.edu 151.101.66.133
X-Content-Type-Options
Critical: Missing Header:
Fscratch.mit.edu 151.101.66.133
Referrer-Policy
Critical: Missing Header:
Fscratch.mit.edu 151.101.66.133
Permissions-Policy
Critical: Missing Header:
Bscratch.mit.edu 151.101.66.133
Cross-Origin-Embedder-Policy
Info: Missing Header
Bscratch.mit.edu 151.101.66.133
Cross-Origin-Opener-Policy
Info: Missing Header
Bscratch.mit.edu 151.101.66.133
Cross-Origin-Resource-Policy
Info: Missing Header
Fscratch.mit.edu 151.101.130.133
Content-Security-Policy
Critical: Missing Header:
Fscratch.mit.edu 151.101.130.133
X-Content-Type-Options
Critical: Missing Header:
Fscratch.mit.edu 151.101.130.133
Referrer-Policy
Critical: Missing Header:
Fscratch.mit.edu 151.101.130.133
Permissions-Policy
Critical: Missing Header:
Bscratch.mit.edu 151.101.130.133
Cross-Origin-Embedder-Policy
Info: Missing Header
Bscratch.mit.edu 151.101.130.133
Cross-Origin-Opener-Policy
Info: Missing Header
Bscratch.mit.edu 151.101.130.133
Cross-Origin-Resource-Policy
Info: Missing Header
Fscratch.mit.edu 151.101.194.133
Content-Security-Policy
Critical: Missing Header:
Fscratch.mit.edu 151.101.194.133
X-Content-Type-Options
Critical: Missing Header:
Fscratch.mit.edu 151.101.194.133
Referrer-Policy
Critical: Missing Header:
Fscratch.mit.edu 151.101.194.133
Permissions-Policy
Critical: Missing Header:
Bscratch.mit.edu 151.101.194.133
Cross-Origin-Embedder-Policy
Info: Missing Header
Bscratch.mit.edu 151.101.194.133
Cross-Origin-Opener-Policy
Info: Missing Header
Bscratch.mit.edu 151.101.194.133
Cross-Origin-Resource-Policy
Info: Missing Header
Fscratch.mit.edu
Content-Security-Policy
Critical: Missing Header:
Fscratch.mit.edu
X-Content-Type-Options
Critical: Missing Header:
Fscratch.mit.edu
Referrer-Policy
Critical: Missing Header:
Fscratch.mit.edu
Permissions-Policy
Critical: Missing Header:
Bscratch.mit.edu
Cross-Origin-Embedder-Policy
Info: Missing Header
Bscratch.mit.edu
Cross-Origin-Opener-Policy
Info: Missing Header
Bscratch.mit.edu
Cross-Origin-Resource-Policy
Info: Missing Header

3. DNS- and NameServer - Checks

AInfo:: 16 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 4 Name Servers.
AInfo:: 16 Queries complete, 16 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
Ok (4 - 8):: An average of 4.0 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 4 different Name Servers found: ns-1316.awsdns-36.org, ns-1587.awsdns-06.co.uk, ns-275.awsdns-34.com, ns-583.awsdns-08.net, 4 Name Servers included in Delegation: ns-1316.awsdns-36.org, ns-1587.awsdns-06.co.uk, ns-275.awsdns-34.com, ns-583.awsdns-08.net, 4 Name Servers included in 1 Zone definitions: ns-1316.awsdns-36.org, ns-1587.awsdns-06.co.uk, ns-275.awsdns-34.com, ns-583.awsdns-08.net, 1 Name Servers listed in SOA.Primary: ns-1316.awsdns-36.org.
AGood: Only one SOA.Primary Name Server found.: ns-1316.awsdns-36.org.
AGood: SOA.Primary Name Server included in the delegation set.: ns-1316.awsdns-36.org.
AGood: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: ns-1316.awsdns-36.org, ns-1587.awsdns-06.co.uk, ns-275.awsdns-34.com, ns-583.awsdns-08.net
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AGood: Minimal 2 different name servers (public suffix and public ip address) found: 4 different Name Servers found
AGood: All name servers have ipv4- and ipv6-addresses.: 4 different Name Servers found
AGood: Name servers with different Top Level Domains / Public Suffix List entries found: 4 Name Servers, 4 Top Level Domains: org, net, com, co.uk
AGood: Name Servers with different domain names found.: 4 different Domains found
Warning: All Name Servers from the same Country / IP location.: 4 Name Servers, 1 Countries: US
AInfo: Ipv4-Subnet-list: 4 Name Servers, 1 different subnets (first Byte): 205., 1 different subnets (first two Bytes): 205.251., 4 different subnets (first three Bytes): 205.251.193., 205.251.194., 205.251.197., 205.251.198.
AGood: Name Server IPv4-addresses from different subnet found:
AInfo: IPv6-Subnet-list: 4 Name Servers with IPv6, 1 different subnets (first block): 2600:, 1 different subnets (first two blocks): 2600:9000:, 4 different subnets (first three blocks): 2600:9000:5301:, 2600:9000:5302:, 2600:9000:5305:, 2600:9000:5306:, 4 different subnets (first four blocks): 2600:9000:5301:1300:, 2600:9000:5302:4700:, 2600:9000:5305:2400:, 2600:9000:5306:3300:
AGood: Name Server IPv6 addresses from different subnets found.
AGood: Nameserver supports TCP connections: 8 good Nameserver
AGood: Nameserver supports Echo Capitalization: 8 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 8 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 8 good Nameserver
AGood: All SOA have the same Serial Number
AGood: CAA entries found, creating certificate is limited: amazontrust.com is allowed to create certificates
AGood: CAA entries found, creating certificate is limited: certainly.com is allowed to create certificates
AGood: CAA entries found, creating certificate is limited: comodoca.com is allowed to create certificates
AGood: CAA entries found, creating certificate is limited: letsencrypt.org is allowed to create certificates
AGood: CAA entries found, creating certificate is limited: amazontrust.com is allowed to create wildcard-certificates
AGood: CAA entries found, creating certificate is limited: comodoca.com is allowed to create wildcard-certificates
AGood: CAA entries found, creating certificate is limited: letsencrypt.org is allowed to create wildcard-certificates
Warning: Unknown CAA found: certainly.com isn't defined. Unknown entry. May be wrong written, may be not longer valid. May be a missing entry in this tool.

4. Content- and Performance-critical Checks

AGood: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AGood: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
https://scratch.mit.edu/
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://scratch.mit.edu/projects/1232721906/ 151.101.2.133
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://scratch.mit.edu/projects/1232721906/ 151.101.66.133
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://scratch.mit.edu/projects/1232721906/ 151.101.130.133
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://scratch.mit.edu/projects/1232721906/ 151.101.194.133
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://scratch.mit.edu/
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://scratch.mit.edu/projects/1232721906/ 151.101.2.133
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://scratch.mit.edu/projects/1232721906/ 151.101.66.133
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://scratch.mit.edu/projects/1232721906/ 151.101.130.133
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://scratch.mit.edu/projects/1232721906/ 151.101.194.133
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
AGood: Every https connection via port 443 supports the http/2 protocol via ALPN.
https://scratch.mit.edu/
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 4 script elements without defer/async.
https://scratch.mit.edu/projects/1232721906/ 151.101.2.133
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 4 script elements without defer/async.
https://scratch.mit.edu/projects/1232721906/ 151.101.66.133
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 4 script elements without defer/async.
https://scratch.mit.edu/projects/1232721906/ 151.101.130.133
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 4 script elements without defer/async.
https://scratch.mit.edu/projects/1232721906/ 151.101.194.133
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 4 script elements without defer/async.
https://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 12 script elements without defer/async.
AGood: All CSS / JavaScript files are sent compressed (gzip, deflate, br checked). That reduces the content of the files. 47 external CSS / JavaScript files found
AGood: All images with internal compression not compressed. Some Images (.png, .jpg, .jpeg, .webp, .gif) are already compressed, so an additional compression isn't helpful. 1 images (type image/png, image/jpg, image/jpeg, image/webp, image/gif) found without additional Compression. Not required because these images are already compressed
Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 0 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 36 with Cache-Control max-age too short (minimum 7 days), 15 with Cache-Control long enough, 51 complete.
AGood: All images are sent with a long Cache-Control header (minimum 7 days). So the browser can reuse these files, no download is required. 1 image files with long Cache-Control max-age found
AGood: All checked attribute values are enclosed in quotation marks (" or ').
Wrong: img-elements without alt-attribute or empty alt-attribute found. The alt-attribute ("alternative") is required and should describe the img. So Screenreader and search engines are able to use these informations.: 1 img-elements without alt-attribute, 0 img-elements with empty alt-attribute found.
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
http://scratch.mit.edu/projects/1232721906/ 151.101.2.133
301

Warning: HSTS header sent via http has no effect
http://scratch.mit.edu/projects/1232721906/ 151.101.66.133
301

Warning: HSTS header sent via http has no effect
http://scratch.mit.edu/projects/1232721906/ 151.101.130.133
301

Warning: HSTS header sent via http has no effect
http://scratch.mit.edu/projects/1232721906/ 151.101.194.133
301

Warning: HSTS header sent via http has no effect
http://www.scratch.mit.edu/projects/1232721906/ 151.101.2.133
301

Warning: HSTS header sent via http has no effect
http://www.scratch.mit.edu/projects/1232721906/ 151.101.66.133
301

Warning: HSTS header sent via http has no effect
http://www.scratch.mit.edu/projects/1232721906/ 151.101.130.133
301

Warning: HSTS header sent via http has no effect
http://www.scratch.mit.edu/projects/1232721906/ 151.101.194.133
301

Warning: HSTS header sent via http has no effect
https://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
3.597 seconds
Warning: 404 needs more then one second
ADuration: 259320 milliseconds, 259.320 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
scratch.mit.edu
scratch.mit.edu
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
scratch.mit.edu
scratch.mit.edu
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
 Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=scratch.mit.edu


2CN=R13, O=Let's Encrypt, C=US


scratch.mit.edu
151.101.2.133
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

scratch.mit.edu
151.101.2.133
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=scratch.mit.edu


2CN=R13, O=Let's Encrypt, C=US


scratch.mit.edu
151.101.66.133
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

scratch.mit.edu
151.101.66.133
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=scratch.mit.edu


2CN=R13, O=Let's Encrypt, C=US


scratch.mit.edu
151.101.130.133
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

scratch.mit.edu
151.101.130.133
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=scratch.mit.edu


2CN=R13, O=Let's Encrypt, C=US


scratch.mit.edu
151.101.194.133
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

scratch.mit.edu
151.101.194.133
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=scratch.mit.edu


2CN=R13, O=Let's Encrypt, C=US


www.scratch.mit.edu
151.101.2.133
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.scratch.mit.edu
151.101.2.133
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.scratch.mit.edu


2CN=R13, O=Let's Encrypt, C=US


www.scratch.mit.edu
151.101.66.133
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.scratch.mit.edu
151.101.66.133
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.scratch.mit.edu


2CN=R13, O=Let's Encrypt, C=US


www.scratch.mit.edu
151.101.130.133
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.scratch.mit.edu
151.101.130.133
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.scratch.mit.edu


2CN=R13, O=Let's Encrypt, C=US


www.scratch.mit.edu
151.101.194.133
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.scratch.mit.edu
151.101.194.133
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.scratch.mit.edu


2CN=R13, O=Let's Encrypt, C=US


scratch.mit.edu
scratch.mit.edu
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

scratch.mit.edu
scratch.mit.edu
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
 Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - incomplete

1CN=scratch.mit.edu


2CN=R13, O=Let's Encrypt, C=US


151.101.2.133
151.101.2.133
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
supported
ok

151.101.2.133
151.101.2.133
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
supported
ok
http/2 via ALPN supported 
Cert sent without SNI 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2


151.101.66.133
151.101.66.133
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
supported
ok

151.101.66.133
151.101.66.133
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
supported
ok
http/2 via ALPN supported 
Cert sent without SNI 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2


151.101.130.133
151.101.130.133
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
supported
ok

151.101.130.133
151.101.130.133
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
supported
ok
http/2 via ALPN supported 
Cert sent without SNI 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2


151.101.194.133
151.101.194.133
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
supported
ok

151.101.194.133
151.101.194.133
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
supported
ok
http/2 via ALPN supported 
Cert sent without SNI 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

 

9. Certificates

1.
1.
CN=scratch.mit.edu
10.09.2025
09.12.2025
40 days expired		scratch.mit.edu - 1 entry
1.
1.
CN=scratch.mit.edu
10.09.2025

09.12.2025
40 days expired


scratch.mit.edu - 1 entry

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0643C454AD27CDECB4C0C77C2971CA2E780B
Thumbprint:BAD57E5F7A5924A28B3E2965E96711467770E0CF
SHA256 / Certificate:BqIB6t2GJigSPw63KM94go0uaxn+XfEkGtkK77dx5zg=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):097ed7b3ea35aea64fbc774d2d56b0ea1db4aeecf1656cb9e0a295e1c8453d6c
SHA256 hex / Subject Public Key Information (SPKI):097ed7b3ea35aea64fbc774d2d56b0ea1db4aeecf1656cb9e0a295e1c8453d6c (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=R13, O=Let's Encrypt, C=US
13.03.2024
13.03.2027
expires in 419 days

2.
CN=R13, O=Let's Encrypt, C=US
13.03.2024

13.03.2027
expires in 419 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:5A00F212D8D4B480F3924157EA298305
Thumbprint:22FF89586561FC2D52F77491E9F1EFF1B80BE33E
SHA256 / Certificate:07EoIWqEP47xMhUB9d9Spd9Sk57iwZKXcSzT3k1Bk1Q=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):025490860b498ab73c6a12f27a49ad5fe230fafe3ac8f6112c9b7d0aad46941d
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015
04.06.2035
expires in 3424 days

3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015

04.06.2035
expires in 3424 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:008210CFB0D240E3594463E0BB63828B00
Thumbprint:CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




2.
1.
CN=*.scratch.mit.edu
10.09.2025
09.12.2025
40 days expired		*.scratch.mit.edu - 1 entry
2.
1.
CN=*.scratch.mit.edu
10.09.2025

09.12.2025
40 days expired


*.scratch.mit.edu - 1 entry

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:05CFF445C597E8DA0ACC36604EC7CA11D140
Thumbprint:BAB33246D97F75FAD314BA9787F4149C20C6121C
SHA256 / Certificate:p6vYMPNvvGmJL7AgRIUnlYzC69Bdq9xOrwqEsRlmUxE=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):097ed7b3ea35aea64fbc774d2d56b0ea1db4aeecf1656cb9e0a295e1c8453d6c
SHA256 hex / Subject Public Key Information (SPKI):097ed7b3ea35aea64fbc774d2d56b0ea1db4aeecf1656cb9e0a295e1c8453d6c (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=R13, O=Let's Encrypt, C=US
13.03.2024
13.03.2027
expires in 419 days

2.
CN=R13, O=Let's Encrypt, C=US
13.03.2024

13.03.2027
expires in 419 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:5A00F212D8D4B480F3924157EA298305
Thumbprint:22FF89586561FC2D52F77491E9F1EFF1B80BE33E
SHA256 / Certificate:07EoIWqEP47xMhUB9d9Spd9Sk57iwZKXcSzT3k1Bk1Q=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):025490860b498ab73c6a12f27a49ad5fe230fafe3ac8f6112c9b7d0aad46941d
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015
04.06.2035
expires in 3424 days

3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015

04.06.2035
expires in 3424 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:008210CFB0D240E3594463E0BB63828B00
Thumbprint:CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




3.
1.
CN=d.sni-645-default.ssl.fastly.net
11.03.2025
12.04.2026
expires in 84 days		d.sni-645-default.ssl.fastly.net - 1 entry
3.
1.
CN=d.sni-645-default.ssl.fastly.net
11.03.2025

12.04.2026
expires in 84 days


d.sni-645-default.ssl.fastly.net - 1 entry

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:01840566CC3FE7022E544B53624C9121
Thumbprint:47293924D88DE5FFFED81715E184BF39EDBC6150
SHA256 / Certificate:FkQ5e9LdqEgNBdNqdgzVLTKwk4FZlRFiTtfTTtUSeVQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):9d39d993c1b3d47056cf86a14380d06b748934adbe2c918d5e90da7fd38a30cd
SHA256 hex / Subject Public Key Information (SPKI):9d39d993c1b3d47056cf86a14380d06b748934adbe2c918d5e90da7fd38a30cd (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2025q1
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=GlobalSign Atlas R3 DV TLS CA 2025 Q1, O=GlobalSign nv-sa, C=BE
16.10.2024
16.10.2026
expires in 271 days

2.
CN=GlobalSign Atlas R3 DV TLS CA 2025 Q1, O=GlobalSign nv-sa, C=BE
16.10.2024

16.10.2026
expires in 271 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:008214413B0571A1A6810A8E520E0574F1
Thumbprint:9C5CB67070BE3B685CCBF8D1EA02282B650533A0
SHA256 / Certificate:C7KlKEDx3hBAEYJ2hypj8JhuQrFdOh13efH3dXyZKtw=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):41fdda5d3a237fd9859c1131fd6a7905ed339ee50b0bb06f04a58deb6ef5d35d
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp2.globalsign.com/rootr3
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




3.
CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3
18.03.2009
18.03.2029
expires in 1155 days

3.
CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3
18.03.2009

18.03.2029
expires in 1155 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:04000000000121585308A2
Thumbprint:D69B561148F01C77C54578C10926DF5B856976AD
SHA256 / Certificate:y7Ui17fxJ61qAROGW98c1BAufQdZr2NafPRyDcljxTs=
SHA256 hex / Cert (DANE * 0 1):cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b
SHA256 hex / PublicKey (DANE * 1 1):706bb1017c855c59169bad5c1781cf597f12d2cad2f63d1a4aa37493800ffb80
SHA256 hex / Subject Public Key Information (SPKI):706bb1017c855c59169bad5c1781cf597f12d2cad2f63d1a4aa37493800ffb80
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuerlast 7 daysactivenum Certs
CN=R13, O=Let's Encrypt, C=US
0
1
2
CN=R10, O=Let's Encrypt, C=US
0
0
1
CN=R11, O=Let's Encrypt, C=US
0
0
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
12641133686
leaf cert		CN=R13, O=Let's Encrypt, C=US
2025-11-09 06:47:56
2026-02-07 06:47:55
scratch.mit.edu - 1 entries


11821032323
leaf cert		CN=R13, O=Let's Encrypt, C=US
2025-09-10 07:43:43
2025-12-09 07:43:42
scratch.mit.edu - 1 entries


11088027672
leaf cert		CN=R10, O=Let's Encrypt, C=US
2025-07-12 08:38:06
2025-10-10 08:38:05
scratch.mit.edu - 1 entries


9204806691
leaf cert		CN=R11, O=Let's Encrypt, C=US
2025-01-13 11:22:43
2025-04-13 11:22:42
scratch.mit.edu - 1 entries


 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Issuerlast 7 daysactivenum Certs
CN=R13, O=Let's Encrypt, C=US
0
1
2
CN=R10, O=Let's Encrypt, C=US
0
0
1
CN=R11, O=Let's Encrypt, C=US
0
0
1

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
22330890023
leaf cert		CN=R13, O=Let's Encrypt, C=US
2025-11-09 05:47:56
2026-02-07 05:47:55
scratch.mit.edu
1 entries


20918047875
leaf cert		CN=R13, O=Let's Encrypt, C=US
2025-09-10 05:43:43
2025-12-09 06:43:42
scratch.mit.edu
1 entries


19611397071
leaf cert		CN=R10, O=Let's Encrypt, C=US
2025-07-12 06:38:06
2025-10-10 06:38:05
scratch.mit.edu
1 entries


18380028350
leaf cert		CN=R11, O=Let's Encrypt, C=US
2025-05-13 07:32:52
2025-08-11 07:32:51
scratch.mit.edu
1 entries


 

11. Html-Content - Entries

Summary


Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://scratch.mit.edu/
iframe

1

0


0
0
0


link
stylesheet
3
9,899 Bytes
0
3
0
0
0
0


link
other
1
1,347 Bytes
1
1
0
0
0
0


meta
og
8
34,690 Bytes
0
2
0
0
0
0


meta
other
6

0


0
0
0


script

4
1,524,085 Bytes
4
4
0
0
0
0

https://scratch.mit.edu/projects/1232721906/
151.101.2.133		iframe

1

0


0
0
0


link
stylesheet
3
15,546 Bytes
0
3
0
0
0
0


link
other
1
1,347 Bytes
1
1
0
0
0
0


meta
other
4

0


0
0
0


script

4
7,947,328 Bytes
4
4
0
0
0
0

https://scratch.mit.edu/projects/1232721906/
151.101.66.133		iframe

1

0


0
0
0


link
stylesheet
3
15,546 Bytes
0
3
0
0
0
0


link
other
1
1,347 Bytes
1
1
0
0
0
0


meta
other
4

0


0
0
0


script

4
7,947,328 Bytes
4
4
0
0
0
0

https://scratch.mit.edu/projects/1232721906/
151.101.130.133		iframe

1

0


0
0
0


link
stylesheet
3
15,546 Bytes
0
3
0
0
0
0


link
other
1
1,347 Bytes
1
1
0
0
0
0


meta
other
4

0


0
0
0


script

4
7,947,328 Bytes
4
4
0
0
0
0

https://scratch.mit.edu/projects/1232721906/
151.101.194.133		iframe

1

0


0
0
0


link
stylesheet
3
15,546 Bytes
0
3
0
0
0
0


link
other
1
1,347 Bytes
1
1
0
0
0
0


meta
other
4

0


0
0
0


script

4
7,947,328 Bytes
4
4
0
0
0
0

https://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
a (14)

39

0


0
0
0


form

4
9,465 Bytes
0
4
0
0
0
0


iframe

4

0


0
0
0


img

1
7,978 Bytes
0
1
0
0
0
0


link
stylesheet
4
18,442 Bytes
0
4
0
0
0
0


meta
og
4
7,247 Bytes
1
1
0
0
0
0


meta
other
2

0


0
0
0


script

12
147,232 Bytes
11
12
0
0
0
0

 

Details (currently limited to 500 rows - some problems with spam users)

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsg∑Status
https://scratch.mit.edu/

iframe
src
https://www.googletagmanager.com/ns.html?id=GTM-NBMRDKQ


1
ok















link
shortcut icon
/favicon.ico
200

1
Problems with Content-Type - Header - see details
image/x-icon
missing X-Content-Type-Options nosniff

This combination of Media Type "image" and MediaSubType "x-icon" was never defined. Use "image/vnd.microsoft.icon" instead. See https://www.iana.org/assignments/media-types/media-types.xhtml


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 1347/4286 Bytes






ETag: "d87fa1fd90a60ea12aa77f10872fc6a0"



link
stylesheet
/common.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff




Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 722/2052 Bytes






ETag: "5d58d0f58a1f767203ed0d63a3257c52"

local SRI possible, possible hash-values:

 

sha256-gNFPTYQV+yKkTlrUaLroS9enmkydYFTFOyafKAWzNTE=
sha384-kFZ9sazesO7cOyzJ+zseySRbxyIbEeA/t/wHKOKrYio0mgb+Akij7O7koMyjfXgM
sha512-Pu9ziXNfa8WA4vSNRetEjzPmhxqv94Yw0B2G5x2O7UWcRqoBg0T2/A9DooZ+IpSdEk3wpARful2HZetDnVGYxg==

 

<link rel="stylesheet" href="/common.css" crossorigin="anonymous" integrity="sha256-gNFPTYQV+yKkTlrUaLroS9enmkydYFTFOyafKAWzNTE=" />



link
stylesheet
/css/lib/normalize.min.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff




Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 907/1936 Bytes






ETag: "c49464d97dab3b78079fd3c29876ffb6"

local SRI possible, possible hash-values:

 

sha256-n8phBLrKZ6mASq7/CwtFXGNka6LlnfJVEmmTJjcAZVM=
sha384-r5WjWcKyackNYVJjilXudkwxgwt5b9kBQAviL69T60K0L47UAfqw5bG/UzVE4EpY
sha512-mhN1pGCd0B4/A7h09BhxQgDCc7MLbnOCU7JyYV9JtGfTOuUBb78MRS3BVOhQLV5t4OX175UCsAGdq1h1QFihBg==

 

<link rel="stylesheet" href="/css/lib/normalize.min.css" crossorigin="anonymous" integrity="sha256-n8phBLrKZ6mASq7/CwtFXGNka6LlnfJVEmmTJjcAZVM=" />



link
stylesheet
/splash.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff




Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 8270/52315 Bytes






ETag: "00e55d6a8a695368874af1844b0de7a2"

local SRI possible, possible hash-values:

 

sha256-AekQYJPOTm9Vbtzv6pSfqPJcR6j/ZrXoCcKj1slaCHI=
sha384-w53EUmoUtI5wMRMIE77bpMgJQXjy8b/jfEkcqTyAuJ9kQ0o+aWsb3E57sQ1NrHM/
sha512-eVxMs7esjnPXU03fHVywK8BYIJ8YUSIatb1A7oOBVkYxFddI2KgxuX0yJuM1gJng39M416uUxO22RzazTLXzUg==

 

<link rel="stylesheet" href="/splash.css" crossorigin="anonymous" integrity="sha256-AekQYJPOTm9Vbtzv6pSfqPJcR6j/ZrXoCcKj1slaCHI=" />



meta
charset
 UTF-8


1
ok















meta
og:description
Scratch is a free programming language and online community where you can create your own interactive stories, games, and animations.


1
ok















meta
og:image
https://scratch.mit.edu/images/scratch-og.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff




Cache-Control: public, no-cache, max-age=3600 - max-age too short.
No Compression - 33464 Bytes






ETag: "36b61d9e3be2ac699127271a7632422f"



meta
og:image:height
860


1
ok















meta
og:image:type
image/png


1
ok















meta
og:image:width
986


1
ok















meta
og:title
Scratch - Imagine, Program, Share


1
ok















meta
og:type
website


1
ok















meta
og:url
https://scratch.mit.edu/
200

1
ok
text/html
missing X-Content-Type-Options nosniff




1226 Bytes






ETag: "3a395dc2c69faa7ae62b4c6bb85994a7"



meta
x-ua-compatible
ie=edge


1
ok















meta
description
Scratch is a free programming language and online community where you can create your own interactive stories, games, and animations.


1
ok















meta
format-detection
telephone=no


1
ok















meta
google-site-verification
m_3TAXDreGTFyoYnEmU9mcKB4Xtw5mw6yRkuJtXRKxM


1
ok















meta
viewport
width=device-width,initial-scale=1


1
ok















script
src
/js/common.bundle.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 112187/368504 Bytes






ETag: "6ee551d7c01b2448a4db75ca706ec341"

local SRI possible, possible hash-values:

 

sha256-Z0BVIBF3MoNlVI+y/Kxu0YeAzhVslZhueo6O9IlyoeM=
sha384-NksF4eIYpntcwufC4n8wP15Jd4R19Kbg0HTPCVFVTOaeTzdu2deX+Hp3EuomTsKs
sha512-wCSGdlNKyz3f4z+RtOU01IA6yNjz7YDUI4JuxtROzWHyuKjoHoZe4eoM7gkg8rISF5DnBtPJmSxzdRfvgKfRRQ==

 

<script src="/js/common.bundle.js" crossorigin="anonymous" integrity="sha256-Z0BVIBF3MoNlVI+y/Kxu0YeAzhVslZhueo6O9IlyoeM=" />



script
src
/js/polyfill.min.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 12538/37106 Bytes






ETag: "f463c0e9535b00d408b6b77cb2aa868f"

local SRI possible, possible hash-values:

 

sha256-1DnMKHqN8xtvLMhaMx48y1MROZ82FfqfrMGG9OlGo/4=
sha384-tMoQrDwc4yugJ6Sh4ZV86geRhfqPu6r+x8yaYmo/2B/YK6ivaT8nKj2G23aYoT/f
sha512-XBdX5sTt/uiektusV2QgIw+wx6TIdIOTDu1J3mRfQ+JXNa3ou0FJbDCJPXbkN1WG9C0UW7cvSIVoghT+/VPPLg==

 

<script src="/js/polyfill.min.js" crossorigin="anonymous" integrity="sha256-1DnMKHqN8xtvLMhaMx48y1MROZ82FfqfrMGG9OlGo/4=" />



script
src
/js/splash.bundle.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 198949/710999 Bytes






ETag: "89f390b47f3497d9ff02576d14863a36"

local SRI possible, possible hash-values:

 

sha256-BIN6rJldy0cKIiYbwpqo+jyIlTkwrfU8uB0VPx8b6kY=
sha384-+IYFLSI+PzSqMImPdNdol2IWHkQ4BEOpP52XNklgvKcdWQE7RYkrSDVgrdxjPryf
sha512-CN1kbooIf+fiVK1dyrvpXvNrUefupbBfzfb5BHQvkIHw718lB6aGtD4jE3V+lsHb+W7ffw5Ca3ZSsc8uKaF14A==

 

<script src="/js/splash.bundle.js" crossorigin="anonymous" integrity="sha256-BIN6rJldy0cKIiYbwpqo+jyIlTkwrfU8uB0VPx8b6kY=" />



script
src
/js/splash.intl.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 1200411/4210813 Bytes






ETag: "2b69b5b6677e273dbb9712a831e44757"

local SRI possible, possible hash-values:

 

sha256-QOGyt25uoCw7PxuMgFews4M8wAUKtJMeKXTfj7tmeXc=
sha384-lUuV93IaQP73sLt0TFR++sqcBdNT/0r/0xhIkP7jKepnamsKL9TFWPivfcCVRlEu
sha512-cTTv/AVx4uEbWiw8PZSSS0cyIxauzgP7ecV2Qv1I/Y/a1vmRF5nbVaR1dAdsjLyx/LUAbt5FHSYbW0vp7J4gFw==

 

<script src="/js/splash.intl.js" crossorigin="anonymous" integrity="sha256-QOGyt25uoCw7PxuMgFews4M8wAUKtJMeKXTfj7tmeXc=" />


151.101.2.133
iframe
src
https://www.googletagmanager.com/ns.html?id=GTM-NBMRDKQ


1
ok















link
shortcut icon
/favicon.ico
200

1
Problems with Content-Type - Header - see details
image/x-icon
missing X-Content-Type-Options nosniff

This combination of Media Type "image" and MediaSubType "x-icon" was never defined. Use "image/vnd.microsoft.icon" instead. See https://www.iana.org/assignments/media-types/media-types.xhtml


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 1347/4286 Bytes






ETag: "d87fa1fd90a60ea12aa77f10872fc6a0"



link
stylesheet
/common.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff




Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 722/2052 Bytes






ETag: "5d58d0f58a1f767203ed0d63a3257c52"

local SRI possible, possible hash-values:

 

sha256-gNFPTYQV+yKkTlrUaLroS9enmkydYFTFOyafKAWzNTE=
sha384-kFZ9sazesO7cOyzJ+zseySRbxyIbEeA/t/wHKOKrYio0mgb+Akij7O7koMyjfXgM
sha512-Pu9ziXNfa8WA4vSNRetEjzPmhxqv94Yw0B2G5x2O7UWcRqoBg0T2/A9DooZ+IpSdEk3wpARful2HZetDnVGYxg==

 

<link rel="stylesheet" href="/common.css" crossorigin="anonymous" integrity="sha256-gNFPTYQV+yKkTlrUaLroS9enmkydYFTFOyafKAWzNTE=" />



link
stylesheet
/css/lib/normalize.min.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff




Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 907/1936 Bytes






ETag: "c49464d97dab3b78079fd3c29876ffb6"

local SRI possible, possible hash-values:

 

sha256-n8phBLrKZ6mASq7/CwtFXGNka6LlnfJVEmmTJjcAZVM=
sha384-r5WjWcKyackNYVJjilXudkwxgwt5b9kBQAviL69T60K0L47UAfqw5bG/UzVE4EpY
sha512-mhN1pGCd0B4/A7h09BhxQgDCc7MLbnOCU7JyYV9JtGfTOuUBb78MRS3BVOhQLV5t4OX175UCsAGdq1h1QFihBg==

 

<link rel="stylesheet" href="/css/lib/normalize.min.css" crossorigin="anonymous" integrity="sha256-n8phBLrKZ6mASq7/CwtFXGNka6LlnfJVEmmTJjcAZVM=" />



link
stylesheet
/projects.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff




Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 13917/92613 Bytes






ETag: "28fa62fd6b6155b3a052532cd9e3052e"

local SRI possible, possible hash-values:

 

sha256-n1Ic5JRBuFA+SpuEuDnpgPBO1wa+oBsvuYDljK7Vluk=
sha384-nMxMXLcUreGe4Zk1XD9a0NFSHR4g6uYRTAQiWx3GiagEAySf23DWLGo2LgKAckQ6
sha512-iuPFCc4XdbJaCJNitfSn8o6jaIaAN98IB5R8nZZJm4RIk7Py1njIRlsW/ZK3AnwjKdBzcXB4ZUk2lk7JYAWe2Q==

 

<link rel="stylesheet" href="/projects.css" crossorigin="anonymous" integrity="sha256-n1Ic5JRBuFA+SpuEuDnpgPBO1wa+oBsvuYDljK7Vluk=" />



meta
charset
 UTF-8


1
ok















meta
x-ua-compatible
ie=edge


1
ok















meta
format-detection
telephone=no


1
ok















meta
viewport
width=device-width,initial-scale=1


1
ok















script
src
/js/common.bundle.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 112187/368504 Bytes






ETag: "6ee551d7c01b2448a4db75ca706ec341"

local SRI possible, possible hash-values:

 

sha256-Z0BVIBF3MoNlVI+y/Kxu0YeAzhVslZhueo6O9IlyoeM=
sha384-NksF4eIYpntcwufC4n8wP15Jd4R19Kbg0HTPCVFVTOaeTzdu2deX+Hp3EuomTsKs
sha512-wCSGdlNKyz3f4z+RtOU01IA6yNjz7YDUI4JuxtROzWHyuKjoHoZe4eoM7gkg8rISF5DnBtPJmSxzdRfvgKfRRQ==

 

<script src="/js/common.bundle.js" crossorigin="anonymous" integrity="sha256-Z0BVIBF3MoNlVI+y/Kxu0YeAzhVslZhueo6O9IlyoeM=" />



script
src
/js/polyfill.min.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 12538/37106 Bytes






ETag: "f463c0e9535b00d408b6b77cb2aa868f"

local SRI possible, possible hash-values:

 

sha256-1DnMKHqN8xtvLMhaMx48y1MROZ82FfqfrMGG9OlGo/4=
sha384-tMoQrDwc4yugJ6Sh4ZV86geRhfqPu6r+x8yaYmo/2B/YK6ivaT8nKj2G23aYoT/f
sha512-XBdX5sTt/uiektusV2QgIw+wx6TIdIOTDu1J3mRfQ+JXNa3ou0FJbDCJPXbkN1WG9C0UW7cvSIVoghT+/VPPLg==

 

<script src="/js/polyfill.min.js" crossorigin="anonymous" integrity="sha256-1DnMKHqN8xtvLMhaMx48y1MROZ82FfqfrMGG9OlGo/4=" />



script
src
/js/projects.bundle.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 6550613/20206244 Bytes






ETag: "e669aba1908f32fc44f349a7a000460d-2"

local SRI possible, possible hash-values:

 

sha256-avpkYnN0bCUHoQqtIclFsa4WXKyyHmWk/5/GH9ydMZc=
sha384-A79b7cNPjGmePE4QeDdZVGZE652uY0QikcvugrPlkQiZnjnVxMW95NA9MP5we4vP
sha512-ERlK4DqeREGUSX3bOoS1EGuFEYbcMr+YnGMJZwp/qI8MsJrPXMl2G119F1BwZz37HlY79tWWhoTvGs89tHl77Q==

 

<script src="/js/projects.bundle.js" crossorigin="anonymous" integrity="sha256-avpkYnN0bCUHoQqtIclFsa4WXKyyHmWk/5/GH9ydMZc=" />



script
src
/js/projects.intl.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 1271990/4482534 Bytes






ETag: "1bd5051a59bcb169267ff486e1932c1e"

local SRI possible, possible hash-values:

 

sha256-qrv6QJc8kg1rZnfsrRzqWI5A6nWziqjH+CMsZmwpddA=
sha384-xpJRDyM4GcSZ1zIuPhKKN/lbOkQg8ag+2mLJyZJbNpbqgyYqhKOoGJs4a9zCDz3/
sha512-M3eFXZKdXE+hlGh8O1ofHR61lZqQh8XAG9tkV8twfA2z5d/XEkt3pBPWmj6lxTFmFq288DEajAMnLdTAHoHC8Q==

 

<script src="/js/projects.intl.js" crossorigin="anonymous" integrity="sha256-qrv6QJc8kg1rZnfsrRzqWI5A6nWziqjH+CMsZmwpddA=" />


151.101.66.133
iframe
src
https://www.googletagmanager.com/ns.html?id=GTM-NBMRDKQ


1
ok















link
shortcut icon
/favicon.ico
200

1
Problems with Content-Type - Header - see details
image/x-icon
missing X-Content-Type-Options nosniff

This combination of Media Type "image" and MediaSubType "x-icon" was never defined. Use "image/vnd.microsoft.icon" instead. See https://www.iana.org/assignments/media-types/media-types.xhtml


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 1347/4286 Bytes






ETag: "d87fa1fd90a60ea12aa77f10872fc6a0"



link
stylesheet
/common.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff




Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 722/2052 Bytes






ETag: "5d58d0f58a1f767203ed0d63a3257c52"

local SRI possible, possible hash-values:

 

sha256-gNFPTYQV+yKkTlrUaLroS9enmkydYFTFOyafKAWzNTE=
sha384-kFZ9sazesO7cOyzJ+zseySRbxyIbEeA/t/wHKOKrYio0mgb+Akij7O7koMyjfXgM
sha512-Pu9ziXNfa8WA4vSNRetEjzPmhxqv94Yw0B2G5x2O7UWcRqoBg0T2/A9DooZ+IpSdEk3wpARful2HZetDnVGYxg==

 

<link rel="stylesheet" href="/common.css" crossorigin="anonymous" integrity="sha256-gNFPTYQV+yKkTlrUaLroS9enmkydYFTFOyafKAWzNTE=" />



link
stylesheet
/css/lib/normalize.min.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff




Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 907/1936 Bytes






ETag: "c49464d97dab3b78079fd3c29876ffb6"

local SRI possible, possible hash-values:

 

sha256-n8phBLrKZ6mASq7/CwtFXGNka6LlnfJVEmmTJjcAZVM=
sha384-r5WjWcKyackNYVJjilXudkwxgwt5b9kBQAviL69T60K0L47UAfqw5bG/UzVE4EpY
sha512-mhN1pGCd0B4/A7h09BhxQgDCc7MLbnOCU7JyYV9JtGfTOuUBb78MRS3BVOhQLV5t4OX175UCsAGdq1h1QFihBg==

 

<link rel="stylesheet" href="/css/lib/normalize.min.css" crossorigin="anonymous" integrity="sha256-n8phBLrKZ6mASq7/CwtFXGNka6LlnfJVEmmTJjcAZVM=" />



link
stylesheet
/projects.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff




Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 13917/92613 Bytes






ETag: "28fa62fd6b6155b3a052532cd9e3052e"

local SRI possible, possible hash-values:

 

sha256-n1Ic5JRBuFA+SpuEuDnpgPBO1wa+oBsvuYDljK7Vluk=
sha384-nMxMXLcUreGe4Zk1XD9a0NFSHR4g6uYRTAQiWx3GiagEAySf23DWLGo2LgKAckQ6
sha512-iuPFCc4XdbJaCJNitfSn8o6jaIaAN98IB5R8nZZJm4RIk7Py1njIRlsW/ZK3AnwjKdBzcXB4ZUk2lk7JYAWe2Q==

 

<link rel="stylesheet" href="/projects.css" crossorigin="anonymous" integrity="sha256-n1Ic5JRBuFA+SpuEuDnpgPBO1wa+oBsvuYDljK7Vluk=" />



meta
charset
 UTF-8


1
ok















meta
x-ua-compatible
ie=edge


1
ok















meta
format-detection
telephone=no


1
ok















meta
viewport
width=device-width,initial-scale=1


1
ok















script
src
/js/common.bundle.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 112187/368504 Bytes






ETag: "6ee551d7c01b2448a4db75ca706ec341"

local SRI possible, possible hash-values:

 

sha256-Z0BVIBF3MoNlVI+y/Kxu0YeAzhVslZhueo6O9IlyoeM=
sha384-NksF4eIYpntcwufC4n8wP15Jd4R19Kbg0HTPCVFVTOaeTzdu2deX+Hp3EuomTsKs
sha512-wCSGdlNKyz3f4z+RtOU01IA6yNjz7YDUI4JuxtROzWHyuKjoHoZe4eoM7gkg8rISF5DnBtPJmSxzdRfvgKfRRQ==

 

<script src="/js/common.bundle.js" crossorigin="anonymous" integrity="sha256-Z0BVIBF3MoNlVI+y/Kxu0YeAzhVslZhueo6O9IlyoeM=" />



script
src
/js/polyfill.min.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 12538/37106 Bytes






ETag: "f463c0e9535b00d408b6b77cb2aa868f"

local SRI possible, possible hash-values:

 

sha256-1DnMKHqN8xtvLMhaMx48y1MROZ82FfqfrMGG9OlGo/4=
sha384-tMoQrDwc4yugJ6Sh4ZV86geRhfqPu6r+x8yaYmo/2B/YK6ivaT8nKj2G23aYoT/f
sha512-XBdX5sTt/uiektusV2QgIw+wx6TIdIOTDu1J3mRfQ+JXNa3ou0FJbDCJPXbkN1WG9C0UW7cvSIVoghT+/VPPLg==

 

<script src="/js/polyfill.min.js" crossorigin="anonymous" integrity="sha256-1DnMKHqN8xtvLMhaMx48y1MROZ82FfqfrMGG9OlGo/4=" />



script
src
/js/projects.bundle.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 6550613/20206244 Bytes






ETag: "e669aba1908f32fc44f349a7a000460d-2"

local SRI possible, possible hash-values:

 

sha256-avpkYnN0bCUHoQqtIclFsa4WXKyyHmWk/5/GH9ydMZc=
sha384-A79b7cNPjGmePE4QeDdZVGZE652uY0QikcvugrPlkQiZnjnVxMW95NA9MP5we4vP
sha512-ERlK4DqeREGUSX3bOoS1EGuFEYbcMr+YnGMJZwp/qI8MsJrPXMl2G119F1BwZz37HlY79tWWhoTvGs89tHl77Q==

 

<script src="/js/projects.bundle.js" crossorigin="anonymous" integrity="sha256-avpkYnN0bCUHoQqtIclFsa4WXKyyHmWk/5/GH9ydMZc=" />



script
src
/js/projects.intl.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 1271990/4482534 Bytes






ETag: "1bd5051a59bcb169267ff486e1932c1e"

local SRI possible, possible hash-values:

 

sha256-qrv6QJc8kg1rZnfsrRzqWI5A6nWziqjH+CMsZmwpddA=
sha384-xpJRDyM4GcSZ1zIuPhKKN/lbOkQg8ag+2mLJyZJbNpbqgyYqhKOoGJs4a9zCDz3/
sha512-M3eFXZKdXE+hlGh8O1ofHR61lZqQh8XAG9tkV8twfA2z5d/XEkt3pBPWmj6lxTFmFq288DEajAMnLdTAHoHC8Q==

 

<script src="/js/projects.intl.js" crossorigin="anonymous" integrity="sha256-qrv6QJc8kg1rZnfsrRzqWI5A6nWziqjH+CMsZmwpddA=" />


https://scratch.mit.edu/projects/1232721906/
151.101.130.133
iframe
src
https://www.googletagmanager.com/ns.html?id=GTM-NBMRDKQ


1
ok















link
shortcut icon
/favicon.ico
200

1
Problems with Content-Type - Header - see details
image/x-icon
missing X-Content-Type-Options nosniff

This combination of Media Type "image" and MediaSubType "x-icon" was never defined. Use "image/vnd.microsoft.icon" instead. See https://www.iana.org/assignments/media-types/media-types.xhtml


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 1347/4286 Bytes






ETag: "d87fa1fd90a60ea12aa77f10872fc6a0"



link
stylesheet
/common.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff




Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 722/2052 Bytes






ETag: "5d58d0f58a1f767203ed0d63a3257c52"

local SRI possible, possible hash-values:

 

sha256-gNFPTYQV+yKkTlrUaLroS9enmkydYFTFOyafKAWzNTE=
sha384-kFZ9sazesO7cOyzJ+zseySRbxyIbEeA/t/wHKOKrYio0mgb+Akij7O7koMyjfXgM
sha512-Pu9ziXNfa8WA4vSNRetEjzPmhxqv94Yw0B2G5x2O7UWcRqoBg0T2/A9DooZ+IpSdEk3wpARful2HZetDnVGYxg==

 

<link rel="stylesheet" href="/common.css" crossorigin="anonymous" integrity="sha256-gNFPTYQV+yKkTlrUaLroS9enmkydYFTFOyafKAWzNTE=" />



link
stylesheet
/css/lib/normalize.min.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff




Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 907/1936 Bytes






ETag: "c49464d97dab3b78079fd3c29876ffb6"

local SRI possible, possible hash-values:

 

sha256-n8phBLrKZ6mASq7/CwtFXGNka6LlnfJVEmmTJjcAZVM=
sha384-r5WjWcKyackNYVJjilXudkwxgwt5b9kBQAviL69T60K0L47UAfqw5bG/UzVE4EpY
sha512-mhN1pGCd0B4/A7h09BhxQgDCc7MLbnOCU7JyYV9JtGfTOuUBb78MRS3BVOhQLV5t4OX175UCsAGdq1h1QFihBg==

 

<link rel="stylesheet" href="/css/lib/normalize.min.css" crossorigin="anonymous" integrity="sha256-n8phBLrKZ6mASq7/CwtFXGNka6LlnfJVEmmTJjcAZVM=" />



link
stylesheet
/projects.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff




Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 13917/92613 Bytes






ETag: "28fa62fd6b6155b3a052532cd9e3052e"

local SRI possible, possible hash-values:

 

sha256-n1Ic5JRBuFA+SpuEuDnpgPBO1wa+oBsvuYDljK7Vluk=
sha384-nMxMXLcUreGe4Zk1XD9a0NFSHR4g6uYRTAQiWx3GiagEAySf23DWLGo2LgKAckQ6
sha512-iuPFCc4XdbJaCJNitfSn8o6jaIaAN98IB5R8nZZJm4RIk7Py1njIRlsW/ZK3AnwjKdBzcXB4ZUk2lk7JYAWe2Q==

 

<link rel="stylesheet" href="/projects.css" crossorigin="anonymous" integrity="sha256-n1Ic5JRBuFA+SpuEuDnpgPBO1wa+oBsvuYDljK7Vluk=" />



meta
charset
 UTF-8


1
ok















meta
x-ua-compatible
ie=edge


1
ok















meta
format-detection
telephone=no


1
ok















meta
viewport
width=device-width,initial-scale=1


1
ok















script
src
/js/common.bundle.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 112187/368504 Bytes






ETag: "6ee551d7c01b2448a4db75ca706ec341"

local SRI possible, possible hash-values:

 

sha256-Z0BVIBF3MoNlVI+y/Kxu0YeAzhVslZhueo6O9IlyoeM=
sha384-NksF4eIYpntcwufC4n8wP15Jd4R19Kbg0HTPCVFVTOaeTzdu2deX+Hp3EuomTsKs
sha512-wCSGdlNKyz3f4z+RtOU01IA6yNjz7YDUI4JuxtROzWHyuKjoHoZe4eoM7gkg8rISF5DnBtPJmSxzdRfvgKfRRQ==

 

<script src="/js/common.bundle.js" crossorigin="anonymous" integrity="sha256-Z0BVIBF3MoNlVI+y/Kxu0YeAzhVslZhueo6O9IlyoeM=" />



script
src
/js/polyfill.min.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 12538/37106 Bytes






ETag: "f463c0e9535b00d408b6b77cb2aa868f"

local SRI possible, possible hash-values:

 

sha256-1DnMKHqN8xtvLMhaMx48y1MROZ82FfqfrMGG9OlGo/4=
sha384-tMoQrDwc4yugJ6Sh4ZV86geRhfqPu6r+x8yaYmo/2B/YK6ivaT8nKj2G23aYoT/f
sha512-XBdX5sTt/uiektusV2QgIw+wx6TIdIOTDu1J3mRfQ+JXNa3ou0FJbDCJPXbkN1WG9C0UW7cvSIVoghT+/VPPLg==

 

<script src="/js/polyfill.min.js" crossorigin="anonymous" integrity="sha256-1DnMKHqN8xtvLMhaMx48y1MROZ82FfqfrMGG9OlGo/4=" />



script
src
/js/projects.bundle.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 6550613/20206244 Bytes






ETag: "e669aba1908f32fc44f349a7a000460d-2"

local SRI possible, possible hash-values:

 

sha256-avpkYnN0bCUHoQqtIclFsa4WXKyyHmWk/5/GH9ydMZc=
sha384-A79b7cNPjGmePE4QeDdZVGZE652uY0QikcvugrPlkQiZnjnVxMW95NA9MP5we4vP
sha512-ERlK4DqeREGUSX3bOoS1EGuFEYbcMr+YnGMJZwp/qI8MsJrPXMl2G119F1BwZz37HlY79tWWhoTvGs89tHl77Q==

 

<script src="/js/projects.bundle.js" crossorigin="anonymous" integrity="sha256-avpkYnN0bCUHoQqtIclFsa4WXKyyHmWk/5/GH9ydMZc=" />



script
src
/js/projects.intl.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 1271990/4482534 Bytes






ETag: "1bd5051a59bcb169267ff486e1932c1e"

local SRI possible, possible hash-values:

 

sha256-qrv6QJc8kg1rZnfsrRzqWI5A6nWziqjH+CMsZmwpddA=
sha384-xpJRDyM4GcSZ1zIuPhKKN/lbOkQg8ag+2mLJyZJbNpbqgyYqhKOoGJs4a9zCDz3/
sha512-M3eFXZKdXE+hlGh8O1ofHR61lZqQh8XAG9tkV8twfA2z5d/XEkt3pBPWmj6lxTFmFq288DEajAMnLdTAHoHC8Q==

 

<script src="/js/projects.intl.js" crossorigin="anonymous" integrity="sha256-qrv6QJc8kg1rZnfsrRzqWI5A6nWziqjH+CMsZmwpddA=" />


151.101.194.133
iframe
src
https://www.googletagmanager.com/ns.html?id=GTM-NBMRDKQ


1
ok















link
shortcut icon
/favicon.ico
200

1
Problems with Content-Type - Header - see details
image/x-icon
missing X-Content-Type-Options nosniff

This combination of Media Type "image" and MediaSubType "x-icon" was never defined. Use "image/vnd.microsoft.icon" instead. See https://www.iana.org/assignments/media-types/media-types.xhtml


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 1347/4286 Bytes






ETag: "d87fa1fd90a60ea12aa77f10872fc6a0"



link
stylesheet
/common.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff




Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 722/2052 Bytes






ETag: "5d58d0f58a1f767203ed0d63a3257c52"

local SRI possible, possible hash-values:

 

sha256-gNFPTYQV+yKkTlrUaLroS9enmkydYFTFOyafKAWzNTE=
sha384-kFZ9sazesO7cOyzJ+zseySRbxyIbEeA/t/wHKOKrYio0mgb+Akij7O7koMyjfXgM
sha512-Pu9ziXNfa8WA4vSNRetEjzPmhxqv94Yw0B2G5x2O7UWcRqoBg0T2/A9DooZ+IpSdEk3wpARful2HZetDnVGYxg==

 

<link rel="stylesheet" href="/common.css" crossorigin="anonymous" integrity="sha256-gNFPTYQV+yKkTlrUaLroS9enmkydYFTFOyafKAWzNTE=" />



link
stylesheet
/css/lib/normalize.min.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff




Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 907/1936 Bytes






ETag: "c49464d97dab3b78079fd3c29876ffb6"

local SRI possible, possible hash-values:

 

sha256-n8phBLrKZ6mASq7/CwtFXGNka6LlnfJVEmmTJjcAZVM=
sha384-r5WjWcKyackNYVJjilXudkwxgwt5b9kBQAviL69T60K0L47UAfqw5bG/UzVE4EpY
sha512-mhN1pGCd0B4/A7h09BhxQgDCc7MLbnOCU7JyYV9JtGfTOuUBb78MRS3BVOhQLV5t4OX175UCsAGdq1h1QFihBg==

 

<link rel="stylesheet" href="/css/lib/normalize.min.css" crossorigin="anonymous" integrity="sha256-n8phBLrKZ6mASq7/CwtFXGNka6LlnfJVEmmTJjcAZVM=" />



link
stylesheet
/projects.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff




Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 13917/92613 Bytes






ETag: "28fa62fd6b6155b3a052532cd9e3052e"

local SRI possible, possible hash-values:

 

sha256-n1Ic5JRBuFA+SpuEuDnpgPBO1wa+oBsvuYDljK7Vluk=
sha384-nMxMXLcUreGe4Zk1XD9a0NFSHR4g6uYRTAQiWx3GiagEAySf23DWLGo2LgKAckQ6
sha512-iuPFCc4XdbJaCJNitfSn8o6jaIaAN98IB5R8nZZJm4RIk7Py1njIRlsW/ZK3AnwjKdBzcXB4ZUk2lk7JYAWe2Q==

 

<link rel="stylesheet" href="/projects.css" crossorigin="anonymous" integrity="sha256-n1Ic5JRBuFA+SpuEuDnpgPBO1wa+oBsvuYDljK7Vluk=" />



meta
charset
 UTF-8


1
ok















meta
x-ua-compatible
ie=edge


1
ok















meta
format-detection
telephone=no


1
ok















meta
viewport
width=device-width,initial-scale=1


1
ok















script
src
/js/common.bundle.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 112187/368504 Bytes






ETag: "6ee551d7c01b2448a4db75ca706ec341"

local SRI possible, possible hash-values:

 

sha256-Z0BVIBF3MoNlVI+y/Kxu0YeAzhVslZhueo6O9IlyoeM=
sha384-NksF4eIYpntcwufC4n8wP15Jd4R19Kbg0HTPCVFVTOaeTzdu2deX+Hp3EuomTsKs
sha512-wCSGdlNKyz3f4z+RtOU01IA6yNjz7YDUI4JuxtROzWHyuKjoHoZe4eoM7gkg8rISF5DnBtPJmSxzdRfvgKfRRQ==

 

<script src="/js/common.bundle.js" crossorigin="anonymous" integrity="sha256-Z0BVIBF3MoNlVI+y/Kxu0YeAzhVslZhueo6O9IlyoeM=" />



script
src
/js/polyfill.min.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 12538/37106 Bytes






ETag: "f463c0e9535b00d408b6b77cb2aa868f"

local SRI possible, possible hash-values:

 

sha256-1DnMKHqN8xtvLMhaMx48y1MROZ82FfqfrMGG9OlGo/4=
sha384-tMoQrDwc4yugJ6Sh4ZV86geRhfqPu6r+x8yaYmo/2B/YK6ivaT8nKj2G23aYoT/f
sha512-XBdX5sTt/uiektusV2QgIw+wx6TIdIOTDu1J3mRfQ+JXNa3ou0FJbDCJPXbkN1WG9C0UW7cvSIVoghT+/VPPLg==

 

<script src="/js/polyfill.min.js" crossorigin="anonymous" integrity="sha256-1DnMKHqN8xtvLMhaMx48y1MROZ82FfqfrMGG9OlGo/4=" />



script
src
/js/projects.bundle.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 6550613/20206244 Bytes






ETag: "e669aba1908f32fc44f349a7a000460d-2"

local SRI possible, possible hash-values:

 

sha256-avpkYnN0bCUHoQqtIclFsa4WXKyyHmWk/5/GH9ydMZc=
sha384-A79b7cNPjGmePE4QeDdZVGZE652uY0QikcvugrPlkQiZnjnVxMW95NA9MP5we4vP
sha512-ERlK4DqeREGUSX3bOoS1EGuFEYbcMr+YnGMJZwp/qI8MsJrPXMl2G119F1BwZz37HlY79tWWhoTvGs89tHl77Q==

 

<script src="/js/projects.bundle.js" crossorigin="anonymous" integrity="sha256-avpkYnN0bCUHoQqtIclFsa4WXKyyHmWk/5/GH9ydMZc=" />



script
src
/js/projects.intl.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, no-cache, max-age=3600 - max-age too short.
Compression (gzip): 1271990/4482534 Bytes






ETag: "1bd5051a59bcb169267ff486e1932c1e"

local SRI possible, possible hash-values:

 

sha256-qrv6QJc8kg1rZnfsrRzqWI5A6nWziqjH+CMsZmwpddA=
sha384-xpJRDyM4GcSZ1zIuPhKKN/lbOkQg8ag+2mLJyZJbNpbqgyYqhKOoGJs4a9zCDz3/
sha512-M3eFXZKdXE+hlGh8O1ofHR61lZqQh8XAG9tkV8twfA2z5d/XEkt3pBPWmj6lxTFmFq288DEajAMnLdTAHoHC8Q==

 

<script src="/js/projects.intl.js" crossorigin="anonymous" integrity="sha256-qrv6QJc8kg1rZnfsrRzqWI5A6nWziqjH+CMsZmwpddA=" />


https://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

a




1
ok















a

#


2
ok















a

/


1
ok















a

/about/


2
ok















a (1)

/community_guidelines/


1
Space between attribute name and "=" or "=" and attribute value found.















a

/conference/


1
ok















a (1)

/contact-us/


1
Space between attribute name and "=" or "=" and attribute value found.















a (1)

/cookies/


1
Space between attribute name and "=" or "=" and attribute value found.















a

/developers


1
ok















a (1)

/discuss/


1
Space between attribute name and "=" or "=" and attribute value found.















a (1)

/DMCA/


1
Space between attribute name and "=" or "=" and attribute value found.















a (1)

/donate


1
Space between attribute name and "=" or "=" and attribute value found.















a (1)

/download


1
Space between attribute name and "=" or "=" and attribute value found.















a

/educators/


1
ok















a

/explore/projects/all


1
ok















a

/ideas


1
ok















a (1)

/ideas


1
Space between attribute name and "=" or "=" and attribute value found.















a

/info/credits/


1
ok















a (1)

/info/faq/


1
Space between attribute name and "=" or "=" and attribute value found.















a

/info/faq/#accounts


1
ok















a

/jobs/


1
ok















a

/parents/


1
ok















a

/privacy_policy


1
ok















a

/privacy_policy/


1
ok















a

/projects/editor/?tip_bar=home


1
ok















a (1)

/starter-projects


1
Space between attribute name and "=" or "=" and attribute value found.















a (1)

/statistics/


1
Space between attribute name and "=" or "=" and attribute value found.















a

/store


1
ok















a

/terms_of_use/


1
ok















a

http://day.scratch.mit.edu/


1
ok















a

http://scratched.gse.harvard.edu/


1
ok















a (1)

http://wiki.scratch.mit.edu/


1
Space between attribute name and "=" or "=" and attribute value found.















a

http://www.scratchfoundation.org/


1
ok















a

http://www.scratchjr.org/


1
ok















a (1)

https://accessibility.mit.edu/


1
Space between attribute name and "=" or "=" and attribute value found.















a (1)

https://www.scratchfoundation.org/dsa/


1
Space between attribute name and "=" or "=" and attribute value found.















a

https://www.scratchfoundation.org/supporters


1
ok















form
post
/i18n/setlang/
302
https://scratch.mit.edu/
1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff




0 Bytes








form
post
/login/
200

1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff




7035 Bytes








form
get
/search/projects
200

2
ok
text/html
missing X-Content-Type-Options nosniff




1215 Bytes






ETag: "0c9a731acb0ec9544940f29da8c44847"



iframe




3
ok















iframe
src
https://www.googletagmanager.com/ns.html?id=GTM-NBMRDKQ


1
ok















img
src
//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__/images/404-giga.png
200

1
ok
no alt-Attributeimage/png
missing X-Content-Type-Options nosniff




Cache-Control: max-age=315360000 with long duration found.
No Compression - 7978 Bytes






ETag: "64836b5a-1f2a"



link
stylesheet
//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__//css/handheld.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff




Cache-Control: max-age=315360000 - with long duration found.
162 Bytes






ETag: W/"64836b5f-106"

local SRI possible, possible hash-values:

 

sha256-W3phgVuFlDpfjoMI7UMcZKDGxTc1/VTamFh8K9oUMQU=
sha384-WVNwkI2UgF7YWREfAvEnnOskGd27RG1nC7b/9nVrqdR2HUkhljWzM09ex2VOm5CC
sha512-lBp7VmcQp38S3UhlagALXOJQDdy3SLQs9/4thhAQ6hYUoTavTwVRgk3V16xOWhWEri+jVpglc+UuyupN8jpXOg==

 

<link rel="stylesheet" href="//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__//css/handheld.css" crossorigin="anonymous" integrity="sha256-W3phgVuFlDpfjoMI7UMcZKDGxTc1/VTamFh8K9oUMQU=" />



link
stylesheet
//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__/css/main.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff




Cache-Control: max-age=315360000 - with long duration found.
Compression (gzip): 17777/90731 Bytes






ETag: W/"68cc5dd7-1626b"

local SRI possible, possible hash-values:

 

sha256-dwXY+mage+GF4mCRFb9wz+7Vz2yAeBt+W51r1dD6Q7s=
sha384-bntqYHOdpgrqOUHT3Ak4hWMe4SpquW98wAdkM/H++Buuvy/LOXdsIyXPSCHdQ1M+
sha512-fiKgJ6oOk0RlQDff1TB8winN5FCok2W5xHwaywKWQncQUuFUZbCM3nr3V0/qeoih6rIrJkFilokbqESF47fveQ==

 

<link rel="stylesheet" href="//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__/css/main.css" crossorigin="anonymous" integrity="sha256-dwXY+mage+GF4mCRFb9wz+7Vz2yAeBt+W51r1dD6Q7s=" />



link
stylesheet
//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__/css/pages/http-errors.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff




Cache-Control: max-age=315360000 - with long duration found.
287 Bytes






ETag: W/"64836b5f-287"

local SRI possible, possible hash-values:

 

sha256-bbDI1zk4CMfN7enfFN+bhsU2u2TZLFJyNWmes3tFTyQ=
sha384-j70UzzUDDoditZHMxO3w6XpQHB/KYZnWyxQUR3IqAFESqyFLx0CQiTyy1sxUQ/7e
sha512-7ndGJQpf9U5egqBJ1L2l73LsCdQNumnzvSpr6GZm6Zd1QguPvJYrLwyqbzWfF6pZ48AkrXXGg8GgmfXyPVmyhw==

 

<link rel="stylesheet" href="//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__/css/pages/http-errors.css" crossorigin="anonymous" integrity="sha256-bbDI1zk4CMfN7enfFN+bhsU2u2TZLFJyNWmes3tFTyQ=" />



link
stylesheet
//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__/vendor/redmond/jquery.ui.all.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff




Cache-Control: max-age=315360000 - with long duration found.
216 Bytes






ETag: W/"64836b5f-124"

local SRI possible, possible hash-values:

 

sha256-m6lfAnYY67bxLCWGJr3xX7IFaUEsbzMPhaIn42Y/9VU=
sha384-0k4jplZJKUI/opjt13+ODnogo5TDvWCCTfO1qwS5GnBINiSGr0nc2hsKAx2dufux
sha512-R5HRu+b9nx90Htejzo1XOKLCtyan1GVgjN95adnLfxMJn78ewtl/e3jImNBi57s98cW9o5TMuJC4Y3rpyJ5aoA==

 

<link rel="stylesheet" href="//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__/vendor/redmond/jquery.ui.all.css" crossorigin="anonymous" integrity="sha256-m6lfAnYY67bxLCWGJr3xX7IFaUEsbzMPhaIn42Y/9VU=" />



meta
og:description
Make games, stories and interactive art with Scratch. (scratch.mit.edu)


1
ok















meta
og:title
Scratch - Imagine, Program, Share


1
ok















meta
og:type
website


1
ok















meta
og:url
https://scratch.mit.edu/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
NOT FOUND
1
missing file
text/html; charset=utf-8
missing X-Content-Type-Options nosniff




7247 Bytes








meta
X-UA-Compatible
IE=Edge


1
ok















meta
google-site-verification
m_3TAXDreGTFyoYnEmU9mcKB4Xtw5mw6yRkuJtXRKxM


1
ok















script
src
//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__//js/apps/global.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=315360000 - with long duration found.
Compression (gzip): 1190/3300 Bytes






ETag: W/"64836b5a-ce4"

local SRI possible, possible hash-values:

 

sha256-LJ6lpJAOpRamL9IcGQAG71DcLJGCeJPlcv8H89XHrfI=
sha384-13d42Ew3Fw9+YtgsD1uAMd4eiz0+Hp6uU4G6Crbpy8dgbPha1MTj6FZa5jKA5fex
sha512-ymohRmq+RMIfns2Ue542Vy4Pdh5rryy+Q5+o6/1QH5+wKnrWv84Uy98xBD4HhOQLT9L2xamobItV2iRzsd47kA==

 

<script src="//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__//js/apps/global.js" crossorigin="anonymous" integrity="sha256-LJ6lpJAOpRamL9IcGQAG71DcLJGCeJPlcv8H89XHrfI=" />



script
src
//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__//js/apps/registration/main.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=315360000 - with long duration found.
Compression (gzip): 3864/16783 Bytes






ETag: W/"64836b5a-418f"

local SRI possible, possible hash-values:

 

sha256-iRKoLGDLBzmxDMJpdeYzL+ntT3QXCF5DtkCXfR98M/Q=
sha384-4od/eNk08suijep4fMJPP/rDKA1uBqk7hM7wnPKofjjt8Y0TUZ6RdgTAfv6ueFCX
sha512-88C7l9NH0egrUnCF1nL4D/0NRvpKjB3vtGeAEpxBRuTzz3c1H8ZQne7ZPCZ5C7jS6LdT7V9ETKCwdazHya4KDQ==

 

<script src="//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__//js/apps/registration/main.js" crossorigin="anonymous" integrity="sha256-iRKoLGDLBzmxDMJpdeYzL+ntT3QXCF5DtkCXfR98M/Q=" />



script
src
//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__//js/gaq-ga4.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=315360000 - with long duration found.
Compression (gzip): 636/1537 Bytes






ETag: W/"64c130a7-601"

local SRI possible, possible hash-values:

 

sha256-h9wEdJCB+4EZwros0sTTUIeXe7WZisLgaH9imKAuDxo=
sha384-3vpczeT9yIM15kHVuDl7cpYgjIccFQ73iGmJeTF/nym5yTx3OQW5pfLps6yoiSZn
sha512-BS2ynNsVW9/WLapsuwr2Z9jJUta6pv6IV7OUjY2LfRZZXOcwCaQRuPdaujrx/dc+0OQ8Tyz7FBA34qOZzYmv8g==

 

<script src="//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__//js/gaq-ga4.js" crossorigin="anonymous" integrity="sha256-h9wEdJCB+4EZwros0sTTUIeXe7WZisLgaH9imKAuDxo=" />



script
src
//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__//js/jquery.min.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=315360000 - with long duration found.
Compression (gzip): 33262/95931 Bytes






ETag: W/"64836b5a-176bb"

local SRI possible, possible hash-values:

 

sha256-Ls0pXSlb7AYs7evhd+VLnWsZ/AqEHcXBeMZUycz/CcA=
sha384-Pn+PczAsODRZ2PiGg0IheRROpP7lXO1NTIjiPo6cca8TliBvaeil42fobhzvZd74
sha512-eBrO3JneTOjVPZtDoVjGReqxsj39/WtXs8RCsRrMSjRODVsAZ9S3i7Fzq73tdfuRxBDytaWPcdQ4qmJm0EjZig==

 

<script src="//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__//js/jquery.min.js" crossorigin="anonymous" integrity="sha256-Ls0pXSlb7AYs7evhd+VLnWsZ/AqEHcXBeMZUycz/CcA=" />



script
src
//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__//js/jquery-ui.min.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=315360000 - with long duration found.
Compression (gzip): 64296/240427 Bytes






ETag: W/"64836b5a-3ab2b"

local SRI possible, possible hash-values:

 

sha256-xNjb53/rY+WmG+4L6tTl9m6PpqknWZvRt0rO1SRnJzw=
sha384-YWP9O4NjmcGo4oEJFXvvYSEzuHIvey+LbXkBNJ1Kd0yfugEZN9NCQNpRYBVC1RvA
sha512-BHDCWLtdp0XpAFccP2NifCbJfYoYhsRSZOUM3KnAxy2b/Ay3Bn91frud+3A95brA4wDWV3yEOZrJqgV8aZRXUQ==

 

<script src="//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__//js/jquery-ui.min.js" crossorigin="anonymous" integrity="sha256-xNjb53/rY+WmG+4L6tTl9m6PpqknWZvRt0rO1SRnJzw=" />



script
src
//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__/js/account-nav.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=315360000 - with long duration found.
Compression (gzip): 1354/4231 Bytes






ETag: W/"64836b5a-1087"

local SRI possible, possible hash-values:

 

sha256-vyeOfnezzp3jzLia2stq39BN0l+TvB0CxlFJyPPtNUY=
sha384-QNWtoZZKdJdhJx70ltsIXWu7tv1R8M+aDHjhzAUejXGOZlofTayFkYieKHgqBgpT
sha512-pU2MgnukgdAf3yJmWt3QEQgk3gFBLWp0DBfFRwqduNAzs2hz4W/7GFTTsOF9DdKEKhxDQABAUdXFHefVEnSOVw==

 

<script src="//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__/js/account-nav.js" crossorigin="anonymous" integrity="sha256-vyeOfnezzp3jzLia2stq39BN0l+TvB0CxlFJyPPtNUY=" />



script
src
//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__/js/base.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=315360000 - with long duration found.
Compression (gzip): 13177/49587 Bytes






ETag: W/"68cc5de2-c1b3"

local SRI possible, possible hash-values:

 

sha256-DYz3qli+waCIb8Kn3aOsso24YJ3irPLv2RnpYIJ1cOM=
sha384-QE5MStQXoVyYHOPpU0FducqTL6r0AczeahgImd8oP9MsmW2iiHQL4ziBoFno/eWm
sha512-n+BDfE+fgvXrCyhEvN9oWpladTaUQrKWOcnwRRYcVCszqxC+rvR6fsb3T7DJaRX57gDrUHqEarq3aQBUrAKRiA==

 

<script src="//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__/js/base.js" crossorigin="anonymous" integrity="sha256-DYz3qli+waCIb8Kn3aOsso24YJ3irPLv2RnpYIJ1cOM=" />



script
src
//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__/js/lazyload.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=315360000 - with long duration found.
Compression (gzip): 1417/3669 Bytes






ETag: W/"68cc5de2-e55"

local SRI possible, possible hash-values:

 

sha256-hCCQx8jZ9io41EnhxUxrr0rFlnEgd2FjH3wzDsXKa/Y=
sha384-BSmSaxENDS6F5LhU/uvVIT+vCR+6gZdc46XRLFzhnZn9KGAvBuqy6Vetkco8OYCt
sha512-ETH0ek25R190CqQWOq/bWIm28FiYIHOZXLjQ1zc5fQ4y2xGgnaiQlbz1YYiFglmGe+ZnedF43p9bmX8PusmJ1A==

 

<script src="//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__/js/lazyload.js" crossorigin="anonymous" integrity="sha256-hCCQx8jZ9io41EnhxUxrr0rFlnEgd2FjH3wzDsXKa/Y=" />



script
src
//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__/js/lib/jquery.timeago.settings.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=315360000 - with long duration found.
247 Bytes






ETag: W/"64836b5a-256"

local SRI possible, possible hash-values:

 

sha256-46qgO6y9psQyz8DwE9mrg7EsLOklqxBLH1asFZr8Xe4=
sha384-PMQsD1D0gkWzQBVupfYHbCh25PsKFPxrSjWFbK6U0Cow6v65S4a93aREpbbPcdS0
sha512-m6dVuuGTE3WenT9ZHDlem7fNWd5e2IA6iyj+meTdM5MJp00hVeDLiTIImZzUA4+wwo+XkUDdCD8T1VCxzlsK5g==

 

<script src="//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__/js/lib/jquery.timeago.settings.js" crossorigin="anonymous" integrity="sha256-46qgO6y9psQyz8DwE9mrg7EsLOklqxBLH1asFZr8Xe4=" />



script
src
//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__/js/lib/underscore-min.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=315360000 - with long duration found.
Compression (gzip): 4635/13582 Bytes






ETag: W/"64836b5a-350e"

local SRI possible, possible hash-values:

 

sha256-A6461iCC1OdEPeaQBnYdLlm0nn8RvCCbiloBdi0o1rI=
sha384-5lulS4RMY2HpBHhOM1StRNcUSJtIkPKhM9XCHH2A0AXuIcwXWAXKU0/2LqgAyYGg
sha512-fUWG46/k5JrNjsIwQfNuxUJdXszE/xovm1MVeV6pZ0kvNo/uCi7ayVUAauGzqS/pcUEFRhX9uswruAjXYqArdQ==

 

<script src="//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__/js/lib/underscore-min.js" crossorigin="anonymous" integrity="sha256-A6461iCC1OdEPeaQBnYdLlm0nn8RvCCbiloBdi0o1rI=" />



script
src
//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__/js/main.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=315360000 - with long duration found.
Compression (gzip): 22408/70364 Bytes






ETag: W/"68cc5dda-112dc"

local SRI possible, possible hash-values:

 

sha256-ERWafBpxRH7NsR6wVDDD829xD6VVtvvIeVB5d1f2E3o=
sha384-pLFM6mEKqdhdbIhNbY9Jp5lAG8CazEKGcpWn2k7KN2lyuJ9iIAqGNl1+nY1yriMI
sha512-DhT3wETWnAx6WBs0JhJfAy1EFa5sPCWs/t5z7M4w5xoQ62ky8XBME3+ODmeE1DvC+qtUx661xCJNPtDUxwC2zw==

 

<script src="//cdn.scratch.mit.edu/scratchr2/static/__5b3e40ec58a840b41702360e9891321b__/js/main.js" crossorigin="anonymous" integrity="sha256-ERWafBpxRH7NsR6wVDDD829xD6VVtvvIeVB5d1f2E3o=" />



script
src
/jsi18n/
200

1
ok
Missing defer / async attribute. text/javascript
missing X-Content-Type-Options nosniff




Compression (gzip): 746/2372 Bytes






local SRI possible, possible hash-values:

 

sha256-QYXy1NJ2PJ+O05UknTl9QRbpHOp5mGdnR5kBpmN22fo=
sha384-oYqTrV2+54VbXkyu2nHV4xcUdD1dTqMgZI50h3H9DBLQEsqTkWJlxqd1FTSrPyHV
sha512-pdvDXcjuhC9ReJcjIIlKBvipWdo5P2Ibg/cmNagzmZTnD9FlPwmTYHUtWZkNZHr5Lz5/OGsha5jpYrBb3IioSQ==

 

<script src="/jsi18n/" crossorigin="anonymous" integrity="sha256-QYXy1NJ2PJ+O05UknTl9QRbpHOp5mGdnR5kBpmN22fo=" />


 

12. Html-Parsing via https://validator.w3.org/nu/

Url used (first standard-https-result with http status 200): https://scratch.mit.edu/projects/1232721906/

Summary

Good: No non-document-errors
1 errors
0 warnings

TypeMessagenum found
1.errorElement head is missing a required instance of child element title.1

Details


TypeMessage + Sample
1errorElement head is missing a required instance of child element title.

From line 5, column 540 to line 5, column 546

></script></head><body>

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: ns-1316.awsdns-36.org, ns-1587.awsdns-06.co.uk, ns-275.awsdns-34.com, ns-583.awsdns-08.net

 

QNr.DomainTypeNS used
1
org
NS
b.root-servers.net (2001:500:200::b)

Answer: a0.org.afilias-nst.info, a2.org.afilias-nst.info, b0.org.afilias-nst.org, b2.org.afilias-nst.org, c0.org.afilias-nst.info, d0.org.afilias-nst.org
2
ns-1316.awsdns-36.org
NS
a0.org.afilias-nst.info (2001:500:e::1)

Answer: g-ns-1063.awsdns-36.org, g-ns-1636.awsdns-36.org, g-ns-164.awsdns-36.org, g-ns-742.awsdns-36.org

Answer: g-ns-1063.awsdns-36.org
205.251.196.39, 2600:9000:5304:2700::1

Answer: g-ns-1636.awsdns-36.org
205.251.198.100, 2600:9000:5306:6400::1

Answer: g-ns-164.awsdns-36.org
205.251.192.164, 2600:9000:5300:a400::1

Answer: g-ns-742.awsdns-36.org
205.251.194.230, 2600:9000:5302:e600::1
3
uk
NS
f.root-servers.net (2001:500:2f::f)

Answer: dns1.nic.uk, dns2.nic.uk, dns3.nic.uk, dns4.nic.uk, nsa.nic.uk, nsb.nic.uk, nsc.nic.uk, nsd.nic.uk
4
ns-1587.awsdns-06.co.uk
NS
dns1.nic.uk (2a01:618:400::1)

Answer: g-ns-1481.awsdns-06.co.uk, g-ns-1802.awsdns-06.co.uk, g-ns-326.awsdns-06.co.uk, g-ns-902.awsdns-06.co.uk

Answer: g-ns-1481.awsdns-06.co.uk
205.251.197.201, 2600:9000:5305:c900::1

Answer: g-ns-1802.awsdns-06.co.uk
205.251.199.10, 2600:9000:5307:a00::1

Answer: g-ns-326.awsdns-06.co.uk
205.251.193.70, 2600:9000:5301:4600::1

Answer: g-ns-902.awsdns-06.co.uk
205.251.195.134, 2600:9000:5303:8600::1
5
com
NS
m.root-servers.net (2001:dc3::35)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
6
ns-275.awsdns-34.com
NS
l.gtld-servers.net (2001:500:d937::30)

Answer: g-ns-1186.awsdns-34.com, g-ns-1762.awsdns-34.com, g-ns-35.awsdns-34.com, g-ns-610.awsdns-34.com

Answer: g-ns-1186.awsdns-34.com
205.251.196.162, 2600:9000:5304:a200::1

Answer: g-ns-1762.awsdns-34.com
205.251.198.226, 2600:9000:5306:e200::1

Answer: g-ns-35.awsdns-34.com
205.251.192.35, 2600:9000:5300:2300::1

Answer: g-ns-610.awsdns-34.com
205.251.194.98, 2600:9000:5302:6200::1
7
net
NS
d.root-servers.net (2001:500:2d::d)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
8
ns-583.awsdns-08.net
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: g-ns-1352.awsdns-08.net, g-ns-1928.awsdns-08.net, g-ns-457.awsdns-08.net, g-ns-778.awsdns-08.net

Answer: g-ns-1352.awsdns-08.net
205.251.197.72, 2600:9000:5305:4800::1

Answer: g-ns-1928.awsdns-08.net
205.251.199.136, 2600:9000:5307:8800::1

Answer: g-ns-457.awsdns-08.net
205.251.193.201, 2600:9000:5301:c900::1

Answer: g-ns-778.awsdns-08.net
205.251.195.10, 2600:9000:5303:a00::1
9
ns-1316.awsdns-36.org: 205.251.197.36
A
g-ns-1063.awsdns-36.org (2600:9000:5304:2700::1)
10
ns-1316.awsdns-36.org: 2600:9000:5305:2400::1
AAAA
g-ns-1063.awsdns-36.org (2600:9000:5304:2700::1)
11
ns-1587.awsdns-06.co.uk: 205.251.198.51
A
g-ns-1481.awsdns-06.co.uk (2600:9000:5305:c900::1)
12
ns-1587.awsdns-06.co.uk: 2600:9000:5306:3300::1
AAAA
g-ns-1481.awsdns-06.co.uk (2600:9000:5305:c900::1)
13
ns-275.awsdns-34.com: 205.251.193.19
A
g-ns-1186.awsdns-34.com (2600:9000:5304:a200::1)
14
ns-275.awsdns-34.com: 2600:9000:5301:1300::1
AAAA
g-ns-1186.awsdns-34.com (2600:9000:5304:a200::1)
15
ns-583.awsdns-08.net: 205.251.194.71
A
g-ns-1352.awsdns-08.net (2600:9000:5305:4800::1)
16
ns-583.awsdns-08.net: 2600:9000:5302:4700::1
AAAA
g-ns-1352.awsdns-08.net (2600:9000:5305:4800::1)

 

14. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.scratch.mit.edu
5
issue
amazontrust.com
1
0

9
issuewild
amazontrust.com
1
0

5
issue
certainly.com
1
0

5
issue
comodoca.com
1
0

9
issuewild
comodoca.com
1
0

5
issue
letsencrypt.org
1
0

9
issuewild
letsencrypt.org
1
0
scratch.mit.edu
5
issue
amazontrust.com
1
0

9
issuewild
amazontrust.com
1
0

5
issue
certainly.com
1
0

5
issue
comodoca.com
1
0

9
issuewild
comodoca.com
1
0

5
issue
letsencrypt.org
1
0

9
issuewild
letsencrypt.org
1
0
mit.edu
0

no CAA entry found
1
0
edu
0

no CAA entry found
1
0

 

15. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
mit.edu
*fastly-domain-delegation-hnb9joooe7gojgqu4eth-00494769-2025-08-23
ok
1
0
mit.edu
1VNZ334aKc8FypCKDhIMOQBsKFd8gCgTFQuPlDwQfzPNxPCKonTOnhuFQ8+kE32E2TgkBiOp9EFab5nfVc+38g==
ok
1
0
mit.edu
adobe-idp-site-verification=0817e32603f0dda03188b9f1f3bbaf4f754c5322926036af8890df7bf65cb90d
ok
1
0
mit.edu
airtable-manual-domain-verification=ce83c94e-0127-4fd3-9265-3b37a46a7b8a
ok
1
0
mit.edu
airtable-verification=4283ac2aa983e97636807d478d6bf30c
ok
1
0
mit.edu
airtable-verification=46ae122907d40a1413b6a05898774435
ok
1
0
mit.edu
amazonses:asyYfDTQj+TCy9t5jFbakgwGbomDqXREEs3KdC0iMQE=
ok
1
0
mit.edu
docusign=37fbdad0-5267-4b79-9402-ff9df7e9331f
ok
1
0
mit.edu
docusign=78c4c36c-1180-44b1-b277-be9be4a08b73
ok
1
0
mit.edu
e2ma-verification=86jgb
ok
1
0
mit.edu
e2ma-verification=8awbb
ok
1
0
mit.edu
e2ma-verification=c8d4
ok
1
0
mit.edu
e2ma-verification=mongb
ok
1
0
mit.edu
ecgkc7fnflsm01hh6uqjr86h02
ok
1
0
mit.edu
google-site-verification=6ethhhET4cfz7L1Dfve9bCOTAqMr6IU79Va6gb8HxlA
ok
1
0
mit.edu
google-site-verification=b4-1loZHD1WzNmews_hsTTKL__gLblD6iKBFbA4j97c
ok
1
0
mit.edu
google-site-verification=pqf9o422iIeT7mzfZmQwkpLYH3VTlB05OC9c_OncFOg
ok
1
0
mit.edu
google-site-verification=qNAffaSjUkhb2JCBb1BQ2nXAkcNYLeLc7G6vjMRD1js
ok
1
0
mit.edu
include:4920340.spf07.hubspotemail.net
ok
1
0
mit.edu
mandrill_verify.28vVgPhRZLda1o_v90CPWg
ok
1
0
mit.edu
mgverify=2a07014ab707abf9b6f984210c05ef7a1fd905296aebe173776844c14db61c1e
ok
1
0
mit.edu
openai-domain-verification=dv-pavuNIk1XG88x99BoqSFI0Zs
ok
1
0
mit.edu
pardot_310211_*=a4e9728d1b90355b6240f4d7778cc4da11c10a20552ae99e6ed03d8e48c06583
ok
1
0
mit.edu
stripe-verification=fe726543b783764b2ba9137f4e675faa0709416ac7a5d9f50e21248a706ad93d
ok
1
0
mit.edu
v=spf1 include:_s00430413.autospf.email -all
ok
1
0
scratch.mit.edu
atlassian-domain-verification=h/rIpslkTE3Xkt301FwcbetLf74abvghh7xVy7hCpyIdcKlaRAY2mgdcEX1kZT/w
ok
1
0
scratch.mit.edu
MS=ms93891149
ok
1
0
scratch.mit.edu
v=spf1 ip4:18.1.61.130/32 ip4:18.1.61.132/32 ip4:18.1.61.133/32 ip4:198.2.128.0/24 ip4:198.2.132.0/22 ip4:198.2.136.0/23 ip4:198.2.177.0/24 ip4:198.2.178.0/23 ip4:198.2.180.0/24 ip4:198.2.186.0/23 ip4:205.201.131.128/25 ip4:205.2 01.134.128/25 ip4:205.201.136.0/23 ip4:205.201.139.0/24 ip4:50.31.32.0/19 ip4:67.228.50.32/27 ip4:75.126.200.128/27 ip4:75.126.253.0/24 ip4:167.89.0.0/17 ip4:173.193.132.0/23 ip4:174.36.80.208/28 ip4:174.36.92.96/27 ip4:192.254.112.0/20 ip4:198.21.0.0/21 ip4:198.37.144.0/20 ip4:208.117.48.0/20 ip4:23.253.182.0/23 ip4:50.23.218.192/27 ip4:104.130.96.0/28 ip4:104.130.122.0/23 ip4:166.78.68.0/22 ip4:173.193.210.32/27 ip4:174.37.226.64/27 ip4:184.173.105.0/24 ip4:184.173.153.0/24 ip4:192.237.158.0/23 ip4:19 8.61.254.0/23 ip4:208.43.239.136/30 ip4:209.61.151.0/24 ip4:64.18.0.0/20 ip4:64.233.160.0/19 ip4:66.102.0.0/20 ip4:66.249.80.0/20 ip4:72.14.192.0/18 ip4:74.125.0.0/16 ip4:108.177.8.0/21 ip4:172.217.0.0/19 ip4:173.194.0.0/16 ip4:207.126.144.0/20 ip4:209.8 5.128.0/17 ip4:216.58.192.0/
ok
1
0
www.scratch.mit.edu
atlassian-domain-verification=h/rIpslkTE3Xkt301FwcbetLf74abvghh7xVy7hCpyIdcKlaRAY2mgdcEX1kZT/w
ok
1
0
www.scratch.mit.edu
MS=ms93891149
ok
1
0
www.scratch.mit.edu
v=spf1 ip4:18.1.61.130/32 ip4:18.1.61.132/32 ip4:18.1.61.133/32 ip4:198.2.128.0/24 ip4:198.2.132.0/22 ip4:198.2.136.0/23 ip4:198.2.177.0/24 ip4:198.2.178.0/23 ip4:198.2.180.0/24 ip4:198.2.186.0/23 ip4:205.201.131.128/25 ip4:205.2 01.134.128/25 ip4:205.201.136.0/23 ip4:205.201.139.0/24 ip4:50.31.32.0/19 ip4:67.228.50.32/27 ip4:75.126.200.128/27 ip4:75.126.253.0/24 ip4:167.89.0.0/17 ip4:173.193.132.0/23 ip4:174.36.80.208/28 ip4:174.36.92.96/27 ip4:192.254.112.0/20 ip4:198.21.0.0/21 ip4:198.37.144.0/20 ip4:208.117.48.0/20 ip4:23.253.182.0/23 ip4:50.23.218.192/27 ip4:104.130.96.0/28 ip4:104.130.122.0/23 ip4:166.78.68.0/22 ip4:173.193.210.32/27 ip4:174.37.226.64/27 ip4:184.173.105.0/24 ip4:184.173.153.0/24 ip4:192.237.158.0/23 ip4:19 8.61.254.0/23 ip4:208.43.239.136/30 ip4:209.61.151.0/24 ip4:64.18.0.0/20 ip4:64.233.160.0/19 ip4:66.102.0.0/20 ip4:66.249.80.0/20 ip4:72.14.192.0/18 ip4:74.125.0.0/16 ip4:108.177.8.0/21 ip4:172.217.0.0/19 ip4:173.194.0.0/16 ip4:207.126.144.0/20 ip4:209.8 5.128.0/17 ip4:216.58.192.0/
ok
1
0
_acme-challenge.scratch.mit.edu


1
0
_acme-challenge.www.scratch.mit.edu
v=spf1 -all
missing entry or wrong length
1
0
_acme-challenge.scratch.mit.edu.mit.edu

Name Error - The domain name does not exist
1
0
_acme-challenge.scratch.mit.edu.scratch.mit.edu
v=spf1 -all
 perhaps wrong
1
0
_acme-challenge.www.scratch.mit.edu.scratch.mit.edu
v=spf1 -all
 perhaps wrong
1
0
_acme-challenge.www.scratch.mit.edu.www.scratch.mit.edu
v=spf1 -all
 perhaps wrong
1
0

 

16. DomainService - Entries

TypeDomainPrefValueDNS-errornum AnswersStatusDescription
MX

scratch.mit.edu
1
aspmx.l.google.com
03ok

A


74.125.71.26
01ok

AAAA


2a00:1450:400c:c09::1a
01ok

CNAME


00ok
MX

scratch.mit.edu
5
alt1.aspmx.l.google.com
03ok

A


192.178.213.27
01ok

AAAA


2a00:1450:4013:c1e::1a
01ok

CNAME


00ok
MX

scratch.mit.edu
10
alt2.aspmx.l.google.com
03ok

A


142.250.147.27
01ok

AAAA


2a00:1450:4025:c01::1a
01ok

CNAME


00ok
_mta-sts
TXT
_mta-sts.scratch.mit.edu

v=spf1 -all
2A MTA-STS TXT Entry (Mail Transfer Agent Strict Transport Security) must start with "'v=STSv1". Do you really want to create a MTA-STS? Or is it the effect of a wildcard * DNS?
SPF
TXT
scratch.mit.edu

v=spf1 ip4:18.1.61.130/32 ip4:18.1.61.132/32 ip4:18.1.61.133/32 ip4:198.2.128.0/24 ip4:198.2.132.0/22 ip4:198.2.136.0/23 ip4:198.2.177.0/24 ip4:198.2.178.0/23 ip4:198.2.180.0/24 ip4:198.2.186.0/23 ip4:205.201.131.128/25 ip4:205.201.134.128/25 ip4:205.201.136.0/23 ip4:205.201.139.0/24 ip4:50.31.32.0/19 ip4:67.228.50.32/27 ip4:75.126.200.128/27 ip4:75.126.253.0/24 ip4:167.89.0.0/17 ip4:173.193.132.0/23 ip4:174.36.80.208/28 ip4:174.36.92.96/27 ip4:192.254.112.0/20 ip4:198.21.0.0/21 ip4:198.37.144.0/20 ip4:208.117.48.0/20 ip4:23.253.182.0/23 ip4:50.23.218.192/27 ip4:104.130.96.0/28 ip4:104.130.122.0/23 ip4:166.78.68.0/22 ip4:173.193.210.32/27 ip4:174.37.226.64/27 ip4:184.173.105.0/24 ip4:184.173.153.0/24 ip4:192.237.158.0/23 ip4:198.61.254.0/23 ip4:208.43.239.136/30 ip4:209.61.151.0/24 ip4:64.18.0.0/20 ip4:64.233.160.0/19 ip4:66.102.0.0/20 ip4:66.249.80.0/20 ip4:72.14.192.0/18 ip4:74.125.0.0/16 ip4:108.177.8.0/21 ip4:172.217.0.0/19 ip4:173.194.0.0/16 ip4:207.126.144.0/20 ip4:209.85.128.0/17 ip4:216.58.192.0/19 ip4:216.239.32.0/19 ip6:2001:4860:4000::/36 ip6:2404:6800:4000::/36 ip6:2607:f8b0:4000::/36 ip6:2800:3f0:4000::/36 ip6:2a00:1450:4000::/36 ip6:2c0f:fb50:4000::/36 include:mail.zendesk.com ~all
ok

TXT
mail.zendesk.com

v=spf1 ip4:103.151.192.0/23 ip4:185.12.80.0/22 ip4:188.172.128.0/20 ip4:192.161.144.0/20 ip4:216.198.0.0/18 ~all
ok
_dmarc
TXT
_dmarc.scratch.mit.edu

v=DMARC1; p=none;
ok

				 
			

				 
			
17. Cipher Suites



Skipped, CDN used or too many ip addresses

				 
			
18. Portchecks



No open Ports <> 80 / 443 found, so no additional Ports checked.



				 
			

				 
			

Permalink: https://check-your-website.server-daten.de/?i=8dbbacd4-95a0-4535-8621-065647cb8da7

				 
			


Last Result: https://check-your-website.server-daten.de/?q=scratch.mit.edu%2Fprojects%2F1232721906%2F - 2025-11-06 03:31:00

				 
			
Do you like this page? Support this tool, add a link on your page:

				 
			
<a href="https://check-your-website.server-daten.de/?q=scratch.mit.edu%2Fprojects%2F1232721906%2F" target="_blank">Check this Site: scratch.mit.edu%2Fprojects%2F1232721906%2F</a>

				 
			

				 
			


Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

				 
			
QR-Code of this page - https://check-your-website.server-daten.de/?d=scratch.mit.edu/projects/1232721906/

				 
			

				 
			



Jürgen Auer • Friedenstr. 37 • 10249 Berlin • +49(0)30 420 200 60 • info@sql-und-xml.de • 
USt-IdNr.: DE221734518

				 
			


Errors, ideas, questions? Use the 
Contact form • A project using

Server-Daten - Web Database solutions