Check DNS, Urls + Redirects, Certificates and Content of your Website


 

 

N

 

No trusted Certificate

 

Checked:
04.02.2025 12:57:41

 

Older results

No older results found

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
158.178.138.37
A
158.178.138.37
Sydney/New South Wales/Australia (AU) - Oracle Corporation
No Hostname found
yes


 

2. DNSSEC

 

No DNSSEC - Informations found

 

3. Name Servers

 

No Nameserver entries found

 

4. SOA-Entries

 

No SOA entries found

5. Screenshots

Startaddress: https://158.178.138.37/, address used: https://158.178.138.37/, Screenshot created 2025-02-04 12:58:16 +00:0 url is insecure, certificate invalid

 

Mobil (412px x 732px)

 

1073 milliseconds

 

Screenshot mobile - https://158.178.138.37/
Mobil + Landscape (732px x 412px)

 

1068 milliseconds

 

Screenshot mobile landscape - https://158.178.138.37/
Screen (1280px x 1680px)

 

1154 milliseconds

 

Screenshot Desktop - https://158.178.138.37/

 

Mobile- and other Chrome-Checks


widthheight
visual Viewport412716
content Size560716

 

Fatal: Horizontal scrollbar detected. Content-size width is greater then visual Viewport width.

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://158.178.138.37/
158.178.138.37 gzip used - 397 / 615 - 35.45 %
200

Html is minified: 133.12 %
0.610
H
Server: nginx/1.24.0,(Ubuntu)
Date: Tue, 04 Feb 2025 11:57:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"67a1f979-267"
Content-Type: text/html
Last-Modified: Tue, 04 Feb 2025 11:26:49 GMT
Content-Encoding: gzip
Content-Length: 397

• https://158.178.138.37/
158.178.138.37 gzip used - 397 / 615 - 35.45 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 1/127
200

Html is minified: 133.12 %
Other inline scripts (∑/total): 0/0
9.687
N
Certificate error: RemoteCertificateNameMismatch
Server: nginx/1.24.0,(Ubuntu)
Date: Tue, 04 Feb 2025 11:57:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"67a1f979-267"
Content-Type: text/html
Last-Modified: Tue, 04 Feb 2025 11:26:49 GMT
Content-Encoding: gzip
Content-Length: 397

• http://158.178.138.37/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
158.178.138.37 gzip used - 123 / 162 - 24.07 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 109.46 %
Other inline scripts (∑/total): 0/0
0.313
A
Not Found
Visible Content:
Server: nginx/1.24.0,(Ubuntu)
Date: Tue, 04 Feb 2025 11:57:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Type: text/html
Content-Encoding: gzip
Content-Length: 123

• https://158.178.138.37/
158.178.138.37 gzip used - 397 / 615 - 35.45 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 1/127
200

Html is minified: 133.12 %
Other inline scripts (∑/total): 0/0
7.046
B
Server: nginx/1.24.0,(Ubuntu)
Date: Tue, 04 Feb 2025 11:57:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"67a1f979-267"
Content-Type: text/html
Last-Modified: Tue, 04 Feb 2025 11:26:49 GMT
Content-Encoding: gzip
Content-Length: 397

 

7. Comments



1. General Results, most used to calculate the result

Aname "158.178.138.37" is ipv4 address, public suffix is not defined
AGood: All ip addresses are public addresses
AGood: No cookie sent via http.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):0 complete Content-Type - header (4 urls)
http://158.178.138.37/ 158.178.138.37


Url with incomplete Content-Type - header - missing charset
https://158.178.138.37/ 158.178.138.37


Url with incomplete Content-Type - header - missing charset
http://158.178.138.37/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 158.178.138.37


Url with incomplete Content-Type - header - missing charset
https://158.178.138.37/ 158.178.138.37


Url with incomplete Content-Type - header - missing charset
Bhttps://158.178.138.37/ 158.178.138.37
200

Missing HSTS-Header
HFatal error: http result with http-status 200, no encryption. Add a redirect http ⇒ https, so every connection is secure. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop.
Nhttps://158.178.138.37/ 158.178.138.37
200

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
BNo _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.158.178.138.37

2. Header-Checks

F158.178.138.37 158.178.138.37
Content-Security-Policy
Critical: Missing Header:
F158.178.138.37 158.178.138.37
X-Content-Type-Options
Critical: Missing Header:
F158.178.138.37 158.178.138.37
Referrer-Policy
Critical: Missing Header:
F158.178.138.37 158.178.138.37
Permissions-Policy
Critical: Missing Header:
B158.178.138.37 158.178.138.37
Cross-Origin-Embedder-Policy
Info: Missing Header
B158.178.138.37 158.178.138.37
Cross-Origin-Opener-Policy
Info: Missing Header
B158.178.138.37 158.178.138.37
Cross-Origin-Resource-Policy
Info: Missing Header

3. DNS- and NameServer - Checks


4. Content- and Performance-critical Checks

AGood: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
https://158.178.138.37/ 158.178.138.37
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://158.178.138.37/ 158.178.138.37
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://158.178.138.37/ 158.178.138.37
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://158.178.138.37/ 158.178.138.37
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://158.178.138.37/ 158.178.138.37
200

Warning: Https connections (Standard Port 443) found without support of the http/2 protocol via ALPN. Http/2 is the new Http-Version (old: http 1.1) with some important new features. Update your server software so http/2 is available. Only one TCP-connection per Server (that's a performance boost), Header-Compression and Server Pushs are available. Domain Sharding and Inline-CSS/Javascript shouldn't used with http/2.
https://158.178.138.37/ 158.178.138.37
200

Warning: Https connections (Standard Port 443) found without support of the http/2 protocol via ALPN. Http/2 is the new Http-Version (old: http 1.1) with some important new features. Update your server software so http/2 is available. Only one TCP-connection per Server (that's a performance boost), Header-Compression and Server Pushs are available. Domain Sharding and Inline-CSS/Javascript shouldn't used with http/2.
AGood: All checked attribute values are enclosed in quotation marks (" or ').
AInfo: No img element found, no alt attribute checked
ADuration: 42124 milliseconds, 42.124 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
158.178.138.37
158.178.138.37
443
name does not match
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
158.178.138.37
158.178.138.37
443
name does not match
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
no http/2 via ALPN 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=panel.gumby.dev


2CN=E5, O=Let's Encrypt, C=US


158.178.138.37
158.178.138.37
443
ok
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok

158.178.138.37
158.178.138.37
443
ok
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - incomplete

1CN=panel.gumby.dev


2CN=E5, O=Let's Encrypt, C=US

 

9. Certificates

1.
1.
CN=panel.gumby.dev
04.02.2025
05.05.2025
expires in 75 days
panel.gumby.dev - 1 entry
1.
1.
CN=panel.gumby.dev
04.02.2025

05.05.2025
expires in 75 days


panel.gumby.dev - 1 entry

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:0434546D74818E8929CD350E11B50B74D2ED
Thumbprint:DF6D493FCD9F6DA2E8425ACCD2F8763EFFF9D36F
SHA256 / Certificate:mA57t/3aSpvz//pWPDQnm3z0y7OxxsjY347UY/9usmQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):4a51ed96f2cf521691d527805853029cb751ed02308c3bacdff3cbd2a3da1e4d
SHA256 hex / Subject Public Key Information (SPKI):4a51ed96f2cf521691d527805853029cb751ed02308c3bacdff3cbd2a3da1e4d (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://e5.o.lencr.org
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=E5, O=Let's Encrypt, C=US
13.03.2024
13.03.2027
expires in 752 days


2.
CN=E5, O=Let's Encrypt, C=US
13.03.2024

13.03.2027
expires in 752 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:SHA256 With RSA-Encryption
Serial Number:00838F6C63CEB1398C6206628315C9FDDE
Thumbprint:5F28D9C589EE4BF31A11B78C72B8D13F079DDC45
SHA256 / Certificate:Xf2zzzGybyPYfAnzoM72QvZAaan7fP4pJwu13A8eFrs=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):3586d4ecf070578cbd27aedce20b964e48bc149faeb9dad72f46b857869172b8
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015
04.06.2035
expires in 3757 days


3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015

04.06.2035
expires in 3757 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:008210CFB0D240E3594463E0BB63828B00
Thumbprint:CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

No CertSpotter - CT-Log entries found

 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

No CRT - CT-Log entries found

 

11. Html-Content - Entries

Summary


Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://158.178.138.37/
158.178.138.37
a

2

0


0
0
0

https://158.178.138.37/
158.178.138.37
a

2

0


0
0
0

 

Details (currently limited to 500 rows - some problems with spam users)

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsgStatus
https://158.178.138.37/
158.178.138.37
a

http://nginx.com/


1
ok















a

http://nginx.com/


1
ok















a

http://nginx.org/


1
ok















a

http://nginx.org/


1
ok














158.178.138.37
a

http://nginx.com/


1
ok















a

http://nginx.com/


1
ok















a

http://nginx.org/


1
ok















a

http://nginx.org/


1
ok














 

12. Html-Parsing via https://validator.w3.org/nu/

Url used (first standard-https-result with http status 200): https://158.178.138.37/

Summary

Good: No non-document-errors
1 errors
1 warnings

TypeMessagenum found
1.errorThe character encoding was not declared. Proceeding using windows-1252.1
2.warningConsider adding a lang attribute to the html start tag to declare the language of this document.1

Details


TypeMessage + Sample
1errorThe character encoding was not declared. Proceeding using windows-1252.


2warningConsider adding a lang attribute to the html start tag to declare the language of this document.

From line 1, column 16 to line 2, column 6

TYPE html> <html> <head

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers:

 

 

No NameServer - IP address - Informations found

 

14. CAA - Entries

No CAA entries found

 

15. TXT - Entries

No TXT entries found

 

16. DomainService - Entries

No DomainServiceEntries entries found

 

 

17. Cipher Suites

No results

 

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

 

 

Permalink: https://check-your-website.server-daten.de/?i=9ca7006c-bb15-426c-acd8-9de90e90adc1

 

Last Result: https://check-your-website.server-daten.de/?q=158.178.138.37 - 2025-02-04 12:57:41

 

Do you like this page? Support this tool, add a link on your page:

 

<a href="https://check-your-website.server-daten.de/?q=158.178.138.37" target="_blank">Check this Site: 158.178.138.37</a>

 

 

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

 

QR-Code of this page - https://check-your-website.server-daten.de/?d=158.178.138.37