Check DNS, Urls + Redirects, Certificates and Content of your Website

...

skip EDNS-Check

skip Content-Check

check links

Tls-Protocol error

Checked:
18.01.2026 06:46:02

Older results

P - 13.09.2025 04:24:34

1. IP-Addresses

Host	Type	IP-Address	is auth.	∑ Queries	∑ Timeout
4get.thebunny.zone	CNAME	thebunny.zone	yes	1	0
	A	45.95.169.36 Sisak/Sisak-Moslavina County/Croatia (HR) - MAXKO d.o.o. No Hostname found	yes
www.4get.thebunny.zone	CNAME	thebunny.zone	yes	1	0
	A	45.95.169.36 Sisak/Sisak-Moslavina County/Croatia (HR) - MAXKO d.o.o. No Hostname found	yes
*.thebunny.zone	A	45.95.169.36	yes
	AAAA		yes
	CNAME	thebunny.zone	yes
*.4get.thebunny.zone	A	45.95.169.36	yes
	AAAA		yes
	CNAME	thebunny.zone	yes

2. DNSSEC

Zone (*)	DNSSEC - Informations

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	3 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 21831, Flags 256


	Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 01.02.2026, 00:00:00 +, Signature-Inception: 11.01.2026, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: zone
zone	1 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 12136, DigestType 2 and Digest RIU+ByqgxZA1G4IrmiP/lWMUEqNYMigWOplVmO92S68=


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner zone., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 31.01.2026, 05:00:00 +, Signature-Inception: 18.01.2026, 04:00:00 +, KeyTag 21831, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 21831 used to validate the DS RRSet in the parent zone


	3 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 12136, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 52179, Flags 256


	Public Key with Algorithm 8, KeyTag 56664, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner zone., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 15:17:42 +, Signature-Inception: 17.01.2026, 14:17:42 +, KeyTag 12136, Signer-Name: zone


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 12136 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 12136, DigestType 2 and Digest "RIU+ByqgxZA1G4IrmiP/lWMUEqNYMigWOplVmO92S68=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: thebunny.zone
thebunny.zone	1 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 17539, DigestType 2 and Digest Uwrc4RWxDjHwsHPMbIsG6apMOoKiXlid6AXXc8Ai38I=


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner thebunny.zone., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 15:17:42 +, Signature-Inception: 17.01.2026, 14:17:42 +, KeyTag 52179, Signer-Name: zone


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 52179 used to validate the DS RRSet in the parent zone


	3 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 14050, Flags 256


	Public Key with Algorithm 8, KeyTag 17539, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 56485, Flags 256


	3 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner thebunny.zone., Algorithm: 8, 2 Labels, original TTL: 10800 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 14050, Signer-Name: thebunny.zone


	RRSIG-Owner thebunny.zone., Algorithm: 8, 2 Labels, original TTL: 10800 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 17539, Signer-Name: thebunny.zone


	RRSIG-Owner thebunny.zone., Algorithm: 8, 2 Labels, original TTL: 10800 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 56485, Signer-Name: thebunny.zone


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 14050 used to validate the DNSKEY RRSet


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 17539 used to validate the DNSKEY RRSet


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 56485 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 17539, DigestType 2 and Digest "Uwrc4RWxDjHwsHPMbIsG6apMOoKiXlid6AXXc8Ai38I=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: 4get.thebunny.zone
4get.thebunny.zone	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "hbrrmkq2jphjq1si7gjf7fmj9bemnja2" between the hashed NSEC3-owner "d1ehgrtenbp6prkjm681q9499f15kdh8" and the hashed NextOwner "m1pv7f63uqc6uid8mufadvlkj6b8k34h". So the parent zone confirmes the not-existence of a DS RR. Bitmap: CNAME, RRSIG Validated: RRSIG-Owner d1ehgrtenbp6prkjm681q9499f15kdh8.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 14050, Signer-Name: thebunny.zone


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "hbrrmkq2jphjq1si7gjf7fmj9bemnja2" between the hashed NSEC3-owner "d1ehgrtenbp6prkjm681q9499f15kdh8" and the hashed NextOwner "m1pv7f63uqc6uid8mufadvlkj6b8k34h". So the parent zone confirmes the not-existence of a DS RR. Bitmap: CNAME, RRSIG Validated: RRSIG-Owner d1ehgrtenbp6prkjm681q9499f15kdh8.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 56485, Signer-Name: thebunny.zone


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "op6sm37n7du2b792d22op38cpu5i2900" as Owner. That's the Hash of "thebunny.zone" with the NextHashedOwnerName "d1ehgrtenbp6prkjm681q9499f15kdh8". So that domain name is the Closest Encloser of "4get.thebunny.zone". Opt-Out: False. Bitmap: A, NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner op6sm37n7du2b792d22op38cpu5i2900.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 14050, Signer-Name: thebunny.zone


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "op6sm37n7du2b792d22op38cpu5i2900" as Owner. That's the Hash of "thebunny.zone" with the NextHashedOwnerName "d1ehgrtenbp6prkjm681q9499f15kdh8". So that domain name is the Closest Encloser of "4get.thebunny.zone". Opt-Out: False. Bitmap: A, NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner op6sm37n7du2b792d22op38cpu5i2900.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 56485, Signer-Name: thebunny.zone


	The ClosestEncloser says, that "*.thebunny.zone" with the Hash "d1ehgrtenbp6prkjm681q9499f15kdh8" is a possible Wildcard of the DS Query Name. But the DS-Query in the parent zone sends a valid NSEC3 RR With the owner "d1ehgrtenbp6prkjm681q9499f15kdh8" and the Next Owner "m1pv7f63uqc6uid8mufadvlkj6b8k34h", so the Hash of the wildcard is between these hashes. So that NSEC3 proves the Not-existence of that wildcard expansion. Opt-Out: False. Bitmap: CNAME, RRSIG Validated: RRSIG-Owner d1ehgrtenbp6prkjm681q9499f15kdh8.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 14050, Signer-Name: thebunny.zone


	The ClosestEncloser says, that "*.thebunny.zone" with the Hash "d1ehgrtenbp6prkjm681q9499f15kdh8" is a possible Wildcard of the DS Query Name. But the DS-Query in the parent zone sends a valid NSEC3 RR With the owner "op6sm37n7du2b792d22op38cpu5i2900" and the Next Owner "d1ehgrtenbp6prkjm681q9499f15kdh8", so the Hash of the wildcard is between these hashes. So that NSEC3 proves the Not-existence of that wildcard expansion. Opt-Out: False. Bitmap: A, NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner op6sm37n7du2b792d22op38cpu5i2900.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 14050, Signer-Name: thebunny.zone


	The ClosestEncloser says, that "*.thebunny.zone" with the Hash "d1ehgrtenbp6prkjm681q9499f15kdh8" is a possible Wildcard of the DS Query Name. But the DS-Query in the parent zone sends a valid NSEC3 RR With the owner "op6sm37n7du2b792d22op38cpu5i2900" and the Next Owner "d1ehgrtenbp6prkjm681q9499f15kdh8", so the Hash of the wildcard is between these hashes. So that NSEC3 proves the Not-existence of that wildcard expansion. Opt-Out: False. Bitmap: A, NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner op6sm37n7du2b792d22op38cpu5i2900.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 56485, Signer-Name: thebunny.zone


	The ClosestEncloser says, that "*.thebunny.zone" with the Hash "d1ehgrtenbp6prkjm681q9499f15kdh8" is a possible Wildcard of the DS Query Name. But the DS-Query in the parent zone sends a valid NSEC3 RR With the owner "d1ehgrtenbp6prkjm681q9499f15kdh8" and the Next Owner "m1pv7f63uqc6uid8mufadvlkj6b8k34h", so the Hash of the wildcard is between these hashes. So that NSEC3 proves the Not-existence of that wildcard expansion. Opt-Out: False. Bitmap: CNAME, RRSIG Validated: RRSIG-Owner d1ehgrtenbp6prkjm681q9499f15kdh8.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 56485, Signer-Name: thebunny.zone


	RRSIG Type 5 validates the CNAME - Result: thebunny.zone. RRSIG Owner has 3 labels, RRSIG Labels = 2, so it's a wildcard expansion, the Query Name doesn't exists. An additional NSEC/NSEC3 is required to confirm the Not-Existence of the query name. Validated: RRSIG-Owner 4get.thebunny.zone., Algorithm: 8, 2 Labels, original TTL: 10800 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 14050, Signer-Name: thebunny.zone


	RRSIG Type 5 validates the CNAME - Result: thebunny.zone. RRSIG Owner has 3 labels, RRSIG Labels = 2, so it's a wildcard expansion, the Query Name doesn't exists. An additional NSEC/NSEC3 is required to confirm the Not-Existence of the query name. Validated: RRSIG-Owner 4get.thebunny.zone., Algorithm: 8, 2 Labels, original TTL: 10800 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 14050, Signer-Name: thebunny.zone


	RRSIG Type 5 validates the CNAME - Result: thebunny.zone. RRSIG Owner has 3 labels, RRSIG Labels = 2, so it's a wildcard expansion, the Query Name doesn't exists. An additional NSEC/NSEC3 is required to confirm the Not-Existence of the query name. Validated: RRSIG-Owner 4get.thebunny.zone., Algorithm: 8, 2 Labels, original TTL: 10800 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 56485, Signer-Name: thebunny.zone


	RRSIG Type 5 validates the CNAME - Result: thebunny.zone. RRSIG Owner has 3 labels, RRSIG Labels = 2, so it's a wildcard expansion, the Query Name doesn't exists. An additional NSEC/NSEC3 is required to confirm the Not-Existence of the query name. Validated: RRSIG-Owner 4get.thebunny.zone., Algorithm: 8, 2 Labels, original TTL: 10800 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 56485, Signer-Name: thebunny.zone


	CNAME-Query sends a valid NSEC3 RR as result with the hashed owner name "d1ehgrtenbp6prkjm681q9499f15kdh8" (unhashed: *.thebunny.zone) as the Wildcard-Expansion of the Closest Encloser of the query name "hbrrmkq2jphjq1si7gjf7fmj9bemnja2". So the Wildcard-Expansion of the Closest Encloser confirms that the query name is generated via wildcard expansion (NoError instead of NXDomain). CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "hbrrmkq2jphjq1si7gjf7fmj9bemnja2" between the hashed NSEC3-owner "d1ehgrtenbp6prkjm681q9499f15kdh8" and the hashed NextOwner "m1pv7f63uqc6uid8mufadvlkj6b8k34h". So the zone confirmes the not-existence of that CNAME RR. Bitmap: CNAME, RRSIG Validated: RRSIG-Owner d1ehgrtenbp6prkjm681q9499f15kdh8.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 56485, Signer-Name: thebunny.zone


	CNAME-Query sends a valid NSEC3 RR as result with the hashed owner name "d1ehgrtenbp6prkjm681q9499f15kdh8" (unhashed: *.thebunny.zone) as the Wildcard-Expansion of the Closest Encloser of the query name "hbrrmkq2jphjq1si7gjf7fmj9bemnja2". So the Wildcard-Expansion of the Closest Encloser confirms that the query name is generated via wildcard expansion (NoError instead of NXDomain). CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "hbrrmkq2jphjq1si7gjf7fmj9bemnja2" between the hashed NSEC3-owner "d1ehgrtenbp6prkjm681q9499f15kdh8" and the hashed NextOwner "m1pv7f63uqc6uid8mufadvlkj6b8k34h". So the zone confirmes the not-existence of that CNAME RR. Bitmap: CNAME, RRSIG Validated: RRSIG-Owner d1ehgrtenbp6prkjm681q9499f15kdh8.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 56485, Signer-Name: thebunny.zone


	Status: Good. NoData-Proof required and found.


	Status: Good. NoData-Proof required and found.


	CNAME-Query sends a valid NSEC3 RR as result with the hashed owner name "d1ehgrtenbp6prkjm681q9499f15kdh8" (unhashed: *.thebunny.zone) as the Wildcard-Expansion of the Closest Encloser of the query name "hbrrmkq2jphjq1si7gjf7fmj9bemnja2". So the Wildcard-Expansion of the Closest Encloser confirms that the query name is generated via wildcard expansion (NoError instead of NXDomain). CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "hbrrmkq2jphjq1si7gjf7fmj9bemnja2" between the hashed NSEC3-owner "d1ehgrtenbp6prkjm681q9499f15kdh8" and the hashed NextOwner "m1pv7f63uqc6uid8mufadvlkj6b8k34h". So the zone confirmes the not-existence of that CNAME RR. Bitmap: CNAME, RRSIG Validated: RRSIG-Owner d1ehgrtenbp6prkjm681q9499f15kdh8.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 56485, Signer-Name: thebunny.zone


	CNAME-Query sends a valid NSEC3 RR as result with the hashed owner name "d1ehgrtenbp6prkjm681q9499f15kdh8" (unhashed: *.thebunny.zone) as the Wildcard-Expansion of the Closest Encloser of the query name "hbrrmkq2jphjq1si7gjf7fmj9bemnja2". So the Wildcard-Expansion of the Closest Encloser confirms that the query name is generated via wildcard expansion (NoError instead of NXDomain). CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "hbrrmkq2jphjq1si7gjf7fmj9bemnja2" between the hashed NSEC3-owner "d1ehgrtenbp6prkjm681q9499f15kdh8" and the hashed NextOwner "m1pv7f63uqc6uid8mufadvlkj6b8k34h". So the zone confirmes the not-existence of that CNAME RR. Bitmap: CNAME, RRSIG Validated: RRSIG-Owner d1ehgrtenbp6prkjm681q9499f15kdh8.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 56485, Signer-Name: thebunny.zone


	Status: Good. NoData-Proof required and found.


	Status: Good. NoData-Proof required and found.

Zone: www.4get.thebunny.zone
www.4get.thebunny.zone	0 DS RR in the parent zone found


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "op6sm37n7du2b792d22op38cpu5i2900" as Owner. That's the Hash of "thebunny.zone" with the NextHashedOwnerName "d1ehgrtenbp6prkjm681q9499f15kdh8". So that domain name is the Closest Encloser of "www.4get.thebunny.zone". Opt-Out: False. Bitmap: A, NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner op6sm37n7du2b792d22op38cpu5i2900.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 14050, Signer-Name: thebunny.zone


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "op6sm37n7du2b792d22op38cpu5i2900" as Owner. That's the Hash of "thebunny.zone" with the NextHashedOwnerName "d1ehgrtenbp6prkjm681q9499f15kdh8". So that domain name is the Closest Encloser of "www.4get.thebunny.zone". Opt-Out: False. Bitmap: A, NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner op6sm37n7du2b792d22op38cpu5i2900.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 56485, Signer-Name: thebunny.zone


	The ClosestEncloser says, that "*.thebunny.zone" with the Hash "d1ehgrtenbp6prkjm681q9499f15kdh8" is a possible Wildcard of the DS Query Name. But the DS-Query in the parent zone sends a valid NSEC3 RR With the owner "op6sm37n7du2b792d22op38cpu5i2900" and the Next Owner "d1ehgrtenbp6prkjm681q9499f15kdh8", so the Hash of the wildcard is between these hashes. So that NSEC3 proves the Not-existence of that wildcard expansion. Opt-Out: False. Bitmap: A, NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner op6sm37n7du2b792d22op38cpu5i2900.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 14050, Signer-Name: thebunny.zone


	The ClosestEncloser says, that "*.thebunny.zone" with the Hash "d1ehgrtenbp6prkjm681q9499f15kdh8" is a possible Wildcard of the DS Query Name. But the DS-Query in the parent zone sends a valid NSEC3 RR With the owner "d1ehgrtenbp6prkjm681q9499f15kdh8" and the Next Owner "m1pv7f63uqc6uid8mufadvlkj6b8k34h", so the Hash of the wildcard is between these hashes. So that NSEC3 proves the Not-existence of that wildcard expansion. Opt-Out: False. Bitmap: CNAME, RRSIG Validated: RRSIG-Owner d1ehgrtenbp6prkjm681q9499f15kdh8.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 14050, Signer-Name: thebunny.zone


	The ClosestEncloser says, that "*.thebunny.zone" with the Hash "d1ehgrtenbp6prkjm681q9499f15kdh8" is a possible Wildcard of the DS Query Name. But the DS-Query in the parent zone sends a valid NSEC3 RR With the owner "d1ehgrtenbp6prkjm681q9499f15kdh8" and the Next Owner "m1pv7f63uqc6uid8mufadvlkj6b8k34h", so the Hash of the wildcard is between these hashes. So that NSEC3 proves the Not-existence of that wildcard expansion. Opt-Out: False. Bitmap: CNAME, RRSIG Validated: RRSIG-Owner d1ehgrtenbp6prkjm681q9499f15kdh8.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 56485, Signer-Name: thebunny.zone


	The ClosestEncloser says, that "*.thebunny.zone" with the Hash "d1ehgrtenbp6prkjm681q9499f15kdh8" is a possible Wildcard of the DS Query Name. But the DS-Query in the parent zone sends a valid NSEC3 RR With the owner "op6sm37n7du2b792d22op38cpu5i2900" and the Next Owner "d1ehgrtenbp6prkjm681q9499f15kdh8", so the Hash of the wildcard is between these hashes. So that NSEC3 proves the Not-existence of that wildcard expansion. Opt-Out: False. Bitmap: A, NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner op6sm37n7du2b792d22op38cpu5i2900.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 56485, Signer-Name: thebunny.zone


	RRSIG Type 5 validates the CNAME - Result: thebunny.zone. RRSIG Owner has 4 labels, RRSIG Labels = 2, so it's a wildcard expansion, the Query Name doesn't exists. An additional NSEC/NSEC3 is required to confirm the Not-Existence of the query name. Validated: RRSIG-Owner www.4get.thebunny.zone., Algorithm: 8, 2 Labels, original TTL: 10800 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 14050, Signer-Name: thebunny.zone


	RRSIG Type 5 validates the CNAME - Result: thebunny.zone. RRSIG Owner has 4 labels, RRSIG Labels = 2, so it's a wildcard expansion, the Query Name doesn't exists. An additional NSEC/NSEC3 is required to confirm the Not-Existence of the query name. Validated: RRSIG-Owner www.4get.thebunny.zone., Algorithm: 8, 2 Labels, original TTL: 10800 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 14050, Signer-Name: thebunny.zone


	RRSIG Type 5 validates the CNAME - Result: thebunny.zone. RRSIG Owner has 4 labels, RRSIG Labels = 2, so it's a wildcard expansion, the Query Name doesn't exists. An additional NSEC/NSEC3 is required to confirm the Not-Existence of the query name. Validated: RRSIG-Owner www.4get.thebunny.zone., Algorithm: 8, 2 Labels, original TTL: 10800 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 56485, Signer-Name: thebunny.zone


	RRSIG Type 5 validates the CNAME - Result: thebunny.zone. RRSIG Owner has 4 labels, RRSIG Labels = 2, so it's a wildcard expansion, the Query Name doesn't exists. An additional NSEC/NSEC3 is required to confirm the Not-Existence of the query name. Validated: RRSIG-Owner www.4get.thebunny.zone., Algorithm: 8, 2 Labels, original TTL: 10800 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 56485, Signer-Name: thebunny.zone


	CNAME-Query sends a valid NSEC3 RR as result and covers the hashed Next Closer Name "hbrrmkq2jphjq1si7gjf7fmj9bemnja2" (unhashed: 4get.thebunny.zone) with the owner "d1ehgrtenbp6prkjm681q9499f15kdh8" and the NextOwner "m1pv7f63uqc6uid8mufadvlkj6b8k34h". So that NSEC3 confirms the not-existence of the Next Closer Name. CNAME-Query sends a valid NSEC3 RR as result with the hashed owner name "d1ehgrtenbp6prkjm681q9499f15kdh8" (unhashed: *.thebunny.zone) as the Wildcard-Expansion of the Closest Encloser of the query name "cf79ovqqinjqg5i3c0oed7f82mrs29iq". So the Wildcard-Expansion of the Closest Encloser confirms that the query name is generated via wildcard expansion (NoError instead of NXDomain). Bitmap: CNAME, RRSIG Validated: RRSIG-Owner d1ehgrtenbp6prkjm681q9499f15kdh8.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 56485, Signer-Name: thebunny.zone


	CNAME-Query sends a valid NSEC3 RR as result and covers the hashed Next Closer Name "hbrrmkq2jphjq1si7gjf7fmj9bemnja2" (unhashed: 4get.thebunny.zone) with the owner "d1ehgrtenbp6prkjm681q9499f15kdh8" and the NextOwner "m1pv7f63uqc6uid8mufadvlkj6b8k34h". So that NSEC3 confirms the not-existence of the Next Closer Name. CNAME-Query sends a valid NSEC3 RR as result with the hashed owner name "d1ehgrtenbp6prkjm681q9499f15kdh8" (unhashed: *.thebunny.zone) as the Wildcard-Expansion of the Closest Encloser of the query name "cf79ovqqinjqg5i3c0oed7f82mrs29iq". So the Wildcard-Expansion of the Closest Encloser confirms that the query name is generated via wildcard expansion (NoError instead of NXDomain). Bitmap: CNAME, RRSIG Validated: RRSIG-Owner d1ehgrtenbp6prkjm681q9499f15kdh8.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 56485, Signer-Name: thebunny.zone


	Status: Good. NoData-Proof required and found.


	Status: Good. NoData-Proof required and found.


	CNAME-Query sends a valid NSEC3 RR as result and covers the hashed Next Closer Name "hbrrmkq2jphjq1si7gjf7fmj9bemnja2" (unhashed: 4get.thebunny.zone) with the owner "d1ehgrtenbp6prkjm681q9499f15kdh8" and the NextOwner "m1pv7f63uqc6uid8mufadvlkj6b8k34h". So that NSEC3 confirms the not-existence of the Next Closer Name. CNAME-Query sends a valid NSEC3 RR as result with the hashed owner name "d1ehgrtenbp6prkjm681q9499f15kdh8" (unhashed: *.thebunny.zone) as the Wildcard-Expansion of the Closest Encloser of the query name "cf79ovqqinjqg5i3c0oed7f82mrs29iq". So the Wildcard-Expansion of the Closest Encloser confirms that the query name is generated via wildcard expansion (NoError instead of NXDomain). Bitmap: CNAME, RRSIG Validated: RRSIG-Owner d1ehgrtenbp6prkjm681q9499f15kdh8.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 56485, Signer-Name: thebunny.zone


	CNAME-Query sends a valid NSEC3 RR as result and covers the hashed Next Closer Name "hbrrmkq2jphjq1si7gjf7fmj9bemnja2" (unhashed: 4get.thebunny.zone) with the owner "d1ehgrtenbp6prkjm681q9499f15kdh8" and the NextOwner "m1pv7f63uqc6uid8mufadvlkj6b8k34h". So that NSEC3 confirms the not-existence of the Next Closer Name. CNAME-Query sends a valid NSEC3 RR as result with the hashed owner name "d1ehgrtenbp6prkjm681q9499f15kdh8" (unhashed: *.thebunny.zone) as the Wildcard-Expansion of the Closest Encloser of the query name "cf79ovqqinjqg5i3c0oed7f82mrs29iq". So the Wildcard-Expansion of the Closest Encloser confirms that the query name is generated via wildcard expansion (NoError instead of NXDomain). Bitmap: CNAME, RRSIG Validated: RRSIG-Owner d1ehgrtenbp6prkjm681q9499f15kdh8.thebunny.zone., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2026, 08:45:35 +, Signature-Inception: 08.01.2026, 08:45:35 +, KeyTag 56485, Signer-Name: thebunny.zone


	Status: Good. NoData-Proof required and found.


	Status: Good. NoData-Proof required and found.

3. Name Servers

Domain	Nameserver	NS-IP
thebunny.zone	• 1-you.njalla.no	185.193.124.2 Oslo/Oslo County/Norway (NO) - NJALLA	•
	•	2001:67c:235c::2 Malmo/Skåne County/Sweden (SE) - 1337 Services LLC	•
	• 2-can.njalla.in	185.193.124.34 Oslo/Oslo County/Norway (NO) - NJALLA	•
	•	2001:67c:235c::34 Malmo/Skåne County/Sweden (SE) - 1337 Services LLC	•
	• 3-get.njalla.fo	95.215.19.5 Stockholm/Stockholm County/Sweden (SE) - ab stract	•
	•	2001:67c:2354:2::5 Stockholm/Stockholm County/Sweden (SE) - ab stract	•
zone	• v0n0.nic.zone / fra1.micro.hosts.meta.redstone.afilias-nst.info-1740000113		•
	• v0n1.nic.zone / app6.lax1.hosts.meta.redstone.afilias-nst.info-1633102198		•
	• v0n2.nic.zone / app11.nrt1.hosts.meta.redstone.afilias-nst.info-1615580861		•
	• v0n3.nic.zone / fra1.micro.hosts.meta.redstone.afilias-nst.info-1740000113		•
	• v2n0.nic.zone / FRA3		•
	• v2n1.nic.zone / FRA4		•

4. SOA-Entries

Domain:	zone
Zone-Name:	zone
Primary:	v0n0.nic.zone
Mail:	hostmaster.donuts.email
Serial:	1768714508
Refresh:	7200
Retry:	900
Expire:	1209600
TTL:	3600
num Entries:	6

Domain:	thebunny.zone
Zone-Name:	thebunny.zone
Primary:	1-you.njalla.no
Mail:	you.can-get-no.info
Serial:	2026010809
Refresh:	21600
Retry:	7200
Expire:	1814400
TTL:	3600
num Entries:	6

5. Screenshots

Startaddress: https://4get.thebunny.zone/, address used: https://4get.thebunny.zone/, Screenshot created 2025-09-13 04:27:35 +00:0

Mobil (412px x 732px)

1065 milliseconds

Screenshot mobile - https://4get.thebunny.zone/

Mobil + Landscape (732px x 412px)

1072 milliseconds

Screenshot mobile landscape - https://4get.thebunny.zone/

Screen (1280px x 1680px)

1143 milliseconds

Screenshot Desktop - https://4get.thebunny.zone/

Mobile- and other Chrome-Checks

	width	height
visual Viewport	397	717
content Size	399	732

Fatal: Horizontal scrollbar detected. Content-size width is greater then visual Viewport width.

6. Url-Checks

show header:

Domainname	Http-Status	redirect	Sec.	G
• http://4get.thebunny.zone/ 45.95.169.36	308	https://4get.thebunny.zone/	0.107	A
Connection: close
Location: https://4get.thebunny.zone/
Server: Caddy
Date: Sun, 18 Jan 2026 05:47:01 GMT
Content-Length: 0

• http://www.4get.thebunny.zone/ 45.95.169.36	308	https://www.4get.thebunny.zone/	0.060	A
Connection: close
Location: https://www.4get.thebunny.zone/
Server: Caddy
Date: Sun, 18 Jan 2026 05:47:01 GMT
Content-Length: 0

• https://4get.thebunny.zone/ 45.95.169.36	502		2.334	S
Bad Gateway
Alt-Svc: h3=":443"; ma=2592000
Server: Caddy
Date: Sun, 18 Jan 2026 05:47:01 GMT
Content-Length: 0

• https://www.4get.thebunny.zone/ 45.95.169.36	-103		0.076	P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Authentication failed because the remote party sent a TLS alert: 'InternalError' (FF: SSL_ERROR_INTERNAL_ERROR_ALERT)

• http://4get.thebunny.zone/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 45.95.169.36	308	https://4get.thebunny.zone/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	0.054	A
Visible Content:
Connection: close
Location: https://4get.thebunny.zone/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Server: Caddy
Date: Sun, 18 Jan 2026 05:47:05 GMT
Content-Length: 0

• http://www.4get.thebunny.zone/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 45.95.169.36	308	https://www.4get.thebunny.zone/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	0.057	A
Visible Content:
Connection: close
Location: https://www.4get.thebunny.zone/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Server: Caddy
Date: Sun, 18 Jan 2026 05:47:05 GMT
Content-Length: 0

• https://4get.thebunny.zone/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	502		2.270	S
Bad Gateway
Visible Content:
Alt-Svc: h3=":443"; ma=2592000
Server: Caddy
Date: Sun, 18 Jan 2026 05:47:05 GMT
Content-Length: 0

• https://www.4get.thebunny.zone/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	-103		0.080	P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Authentication failed because the remote party sent a TLS alert: 'InternalError' (FF: SSL_ERROR_INTERNAL_ERROR_ALERT)
Visible Content:

• https://45.95.169.36/ 45.95.169.36	-103		0.084	P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Authentication failed because the remote party sent a TLS alert: 'InternalError' (FF: SSL_ERROR_INTERNAL_ERROR_ALERT)

7. Comments

	1. General Results, most used to calculate the result
A	name "4get.thebunny.zone" is subdomain, public suffix is ".zone", top-level-domain is ".zone", top-level-domain-type is "generic", tld-manager is "Binky Moon, LLC", num .zone-domains preloaded: 86 (complete: 276475)
A	Good: All ip addresses are public addresses
	Warning: Only one ip address found: 4get.thebunny.zone has only one ip address.
	Warning: Only one ip address found: www.4get.thebunny.zone has only one ip address.
	Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: 4get.thebunny.zone has no ipv6 address.
	Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: www.4get.thebunny.zone has no ipv6 address.
A	Good: No asked Authoritative Name Server had a timeout
A	Good: No cookie sent via http.
A	Excellent: Main Domain is in the Google-Preload-List
A	Excellent: Main Domain is in the Mozilla/Firefox-Preload-List
A	HSTS-Preload-Status: Preloaded. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
A	http://4get.thebunny.zone/ 45.95.169.36	308	https://4get.thebunny.zone/	Correct redirect http - https with the same domain name
B	https://4get.thebunny.zone/ 45.95.169.36	502		Missing HSTS-Header
B	https://4get.thebunny.zone/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	502		Missing HSTS-Header
C	Error - no version with Http-Status 200
H	Fatal error: No https - result with http-status 200, no encryption
	Info: Checking the ip addresses of that domain name not exact one certificate found. So it's impossible to check if that domain requires Server Name Indication (SNI).: Domain 4get.thebunny.zone, 1 ip addresses.
	Info: Checking the ip addresses of that domain name not exact one certificate found. So it's impossible to check if that domain requires Server Name Indication (SNI).: Domain www.4get.thebunny.zone, 1 ip addresses.
B	No _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.4get.thebunny.zone
	2. Header-Checks
U				No https result with http status 2 or 4 (standard-check) found, no header checked.
	3. DNS- and NameServer - Checks
A	Info:: 10 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 3 Name Servers.
A	Info:: 10 Queries complete, 10 with IPv6, 0 with IPv4.
A	Good: All DNS Queries done via IPv6.
A	Good: Some ip addresses of name servers found with the minimum of two DNS Queries. One to find the TLD-Zone, one to ask the TLD-Zone.1-you.njalla.no (185.193.124.2, 2001:67c:235c::2), 3-get.njalla.fo (2001:67c:2354:2::5, 95.215.19.5)
	Ok (4 - 8):: An average of 3.3 queries per domain name server required to find all ip addresses of all name servers.
A	Info:: 3 different Name Servers found: 1-you.njalla.no, 2-can.njalla.in, 3-get.njalla.fo, 3 Name Servers included in Delegation: 1-you.njalla.no, 2-can.njalla.in, 3-get.njalla.fo, 3 Name Servers included in 1 Zone definitions: 1-you.njalla.no, 2-can.njalla.in, 3-get.njalla.fo, 1 Name Servers listed in SOA.Primary: 1-you.njalla.no.
A	Good: Only one SOA.Primary Name Server found.: 1-you.njalla.no.
A	Good: SOA.Primary Name Server included in the delegation set.: 1-you.njalla.no.
A	Good: All Name Server Domain Names have a Public Suffix.
A	Good: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
A	Good: All Name Server ip addresses are public.
A	Info: Ipv4-Subnet-list: 3 Name Servers, 2 different subnets (first Byte): 185., 95., 2 different subnets (first two Bytes): 185.193., 95.215., 2 different subnets (first three Bytes): 185.193.124., 95.215.19.
A	Good: Name Server IPv4-addresses from different subnet found:
A	Info: IPv6-Subnet-list: 3 Name Servers with IPv6, 1 different subnets (first block): 2001:, 1 different subnets (first two blocks): 2001:067c:, 2 different subnets (first three blocks): 2001:067c:2354:, 2001:067c:235c:, 2 different subnets (first four blocks): 2001:067c:2354:0002:, 2001:067c:235c:0000:
A	Good: Name Server IPv6 addresses from different subnets found.
A	Good: Nameserver supports TCP connections: 6 good Nameserver
A	Good: Nameserver supports Echo Capitalization: 6 good Nameserver
A	Good: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 6 good Nameserver
A	Good: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 6 good Nameserver
	Nameserver doesn't pass all EDNS-Checks: v0n0.nic.zone: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok (fra1.micro.hosts.meta.redstone.afilias-nst.info-1740000113). COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: v0n3.nic.zone: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found (fra1.micro.hosts.meta.redstone.afilias-nst.info-1740000113). COOKIE: fatal timeout. CLIENTSUBNET: ok.
A	Good: All SOA have the same Serial Number
	Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.
	4. Content- and Performance-critical Checks
	https://4get.thebunny.zone/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	502		Fatal: Check of /.well-known/acme-challenge/random-filename has a http status 500 - 599, Server Error. Creating a Letsencrypt certificate via http-01 challenge can't work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
	https://www.4get.thebunny.zone/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	-103		Fatal: Check of /.well-known/acme-challenge/random-filename is blocked, http connection error. Creating a Letsencrypt certificate via http-01 challenge can't work. You need a running webserver (http) and an open port 80. If it's a home server + ipv4, perhaps a correct port forwarding port 80 extern ⇒ working port intern is required. Port 80 / http can redirect to another domain port 80 or port 443, but not other ports. If it's a home server, perhaps your ISP blocks port 80. Then you may use the dns-01 challenge. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
A	Info: No img element found, no alt attribute checked
A	Good: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
A	Duration: 129743 milliseconds, 129.743 seconds

8. Connections

Domain

Port

Cert.

Protocol

KeyExchange

Strength

Cipher

Strength

HashAlgorithm

OCSP stapling

Domain/KeyExchange

IP/Strength

Port/Cipher

Cert./Strength

Protocol/HashAlgorithm

OCSP stapling

4get.thebunny.zone

45.95.169.36

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

4get.thebunny.zone

45.95.169.36

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=4get.thebunny.zone
	2	CN=E7, O=Let's Encrypt, C=US

4get.thebunny.zone

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

4get.thebunny.zone

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=4get.thebunny.zone
	2	CN=E7, O=Let's Encrypt, C=US

9. Certificates

CN=4get.thebunny.zone

11.12.2025

11.03.2026
expires in 25 days

4get.thebunny.zone - 1 entry

CN=4get.thebunny.zone

11.12.2025

11.03.2026
expires in 25 days

4get.thebunny.zone - 1 entry

Keyalgorithm	EC Public Key (256 bit, prime256v1)
Signatur:	ECDSA SHA384
Serial Number:	055FFBE18D5FA2496F7981BD0B7B1BF6037B
Thumbprint:	C709D06501A90DAE9D59AC2A5F29602ACCE136C3
SHA256 / Certificate:	gUdiWmdD4BOsurnAF5y5dVZqrp85cLi8Mzse+dyMwfA=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	ce7f9293a317533ca58d87915a9f9b702bad94c30f7f77aef9c3e68c21f1c12f
SHA256 hex / Subject Public Key Information (SPKI):	ce7f9293a317533ca58d87915a9f9b702bad94c30f7f77aef9c3e68c21f1c12f (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=E7, O=Let's Encrypt, C=US

13.03.2024

13.03.2027
expires in 392 days

CN=E7, O=Let's Encrypt, C=US

13.03.2024

13.03.2027
expires in 392 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00AA75F1E62B8F0A220966D38BBFD4BAA1
Thumbprint:	3B73C17E3DF87CF3AA77F1389219EB5EDD519E7F
SHA256 / Certificate:	rrH9dBDoO8lvXaPGp8LBu4NtH6XLhucIUViQ5Ciodws=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	cbbc559b44d524d6a132bdac672744da3407f12aae5d5f722c5f6c7913871c75
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3397 days

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3397 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	008210CFB0D240E3594463E0BB63828B00
Thumbprint:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:	lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):	96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuer				last 7 days	active	num Certs
CN=E5, O=Let's Encrypt, C=US				0	0	2
CN=E7, O=Let's Encrypt, C=US				0	1	1
CN=E6, O=Let's Encrypt, C=US				0	0	1

CertSpotter-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
13044946272 leaf cert	CN=E7, O=Let's Encrypt, C=US	2025-12-11 15:58:16	2026-03-11 15:58:15	4get.thebunny.zone - 1 entries
11494263673 leaf cert	CN=E5, O=Let's Encrypt, C=US	2025-08-14 19:33:02	2025-11-12 19:33:01	4get.thebunny.zone - 1 entries
10746563844 leaf cert	CN=E5, O=Let's Encrypt, C=US	2025-06-13 12:32:50	2025-09-11 12:32:49	4get.thebunny.zone - 1 entries
9500893964 leaf cert	CN=E6, O=Let's Encrypt, C=US	2025-02-13 19:36:28	2025-05-14 19:36:27	4get.thebunny.zone - 1 entries

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Issuer				last 7 days	active	num Certs
CN=E5, O=Let's Encrypt, C=US				0	0	4
CN=E6, O=Let's Encrypt, C=US				0	0	2

CRT-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
20335114517 precert	CN=E5, O=Let's Encrypt, C=US	2025-08-14 17:33:02	2025-11-12 18:33:01	4get.thebunny.zone 1 entries
18999832042 precert	CN=E5, O=Let's Encrypt, C=US	2025-06-13 10:32:50	2025-09-11 10:32:49	4get.thebunny.zone 1 entries
17848596020 precert	CN=E6, O=Let's Encrypt, C=US	2025-04-14 16:47:10	2025-07-13 16:47:09	4get.thebunny.zone 1 entries
17188076263 leaf cert	CN=E6, O=Let's Encrypt, C=US	2025-02-13 18:36:28	2025-05-14 17:36:27	4get.thebunny.zone 1 entries
16123517545 leaf cert	CN=E5, O=Let's Encrypt, C=US	2024-12-15 19:28:59	2025-03-15 19:28:58	4get.thebunny.zone 1 entries
14963802124 leaf cert	CN=E5, O=Let's Encrypt, C=US	2024-10-16 19:22:01	2025-01-14 20:22:00	4get.thebunny.zone 1 entries

11. Html-Content - Entries

No Html-Content entries found. Only checked if https + status 200/401/403/404

12. Html-Parsing via https://validator.w3.org/nu/

No https result http status 200 and Content-Type text/html or text/xml found, no Html-Parsing - Check

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: 1-you.njalla.no, 2-can.njalla.in, 3-get.njalla.fo

QNr.	Domain	Type	NS used
1	no	NS	l.root-servers.net (2001:500:9f::42)
	Answer: i.nic.no, njet.norid.no, not.norid.no, x.nic.no, y.nic.no, z.nic.no
2	1-you.njalla.no: 185.193.124.2, 2001:67c:235c::2	NS	i.nic.no (2001:67c:1010:1::53)
3	in	NS	j.root-servers.net (2001:503:c27::2:30)
	Answer: ns01.trs-dns.com, ns01.trs-dns.net, ns10.trs-dns.info, ns10.trs-dns.org
4	2-can.njalla.in	NS	ns01.trs-dns.com (2620:57:4001::1)
	Answer: ns1.njal.la, ns2.njal.la, ns3.njal.la
5	fo	NS	f.root-servers.net (2001:500:2f::f)
	Answer: a.nic.fo, b.nic.fo, c.nic.fo, d.nic.fo
6	3-get.njalla.fo: 2001:67c:2354:2::5, 95.215.19.5	NS	a.nic.fo (2001:67c:13cc::1:27)
7	la	NS	k.root-servers.net (2001:7fd::1)
	Answer: ns1.nic.la, ns2.nic.la, ns3.nic.la, ns4.nic.la
8	ns1.njal.la: 2001:67c:2354:2::5, 95.215.19.5	NS	ns1.nic.la (2a04:2b00:13cc::1:15)
	Answer: ns2.njal.la 185.193.124.34, 2001:67c:235c::34
	Answer: ns3.njal.la 185.193.124.2, 2001:67c:235c::2
9	2-can.njalla.in: 185.193.124.34	A	ns1.njal.la (2001:67c:2354:2::5)
10	2-can.njalla.in: 2001:67c:235c::34	AAAA	ns1.njal.la (2001:67c:2354:2::5)

14. CAA - Entries

Domainname	flag	Value	∑ Queries
www.4get.thebunny.zone			1
4get.thebunny.zone			1
thebunny.zone	0	no CAA entry found	1
zone	0	no CAA entry found	1

15. TXT - Entries

Domainname	Status	∑ Queries
thebunny.zone	ok	1
4get.thebunny.zone		1
www.4get.thebunny.zone		1
_acme-challenge.4get.thebunny.zone		1
_acme-challenge.www.4get.thebunny.zone		1
_acme-challenge.4get.thebunny.zone.thebunny.zone		1
_acme-challenge.4get.thebunny.zone.4get.thebunny.zone		1
_acme-challenge.www.4get.thebunny.zone.4get.thebunny.zone		1
_acme-challenge.www.4get.thebunny.zone.www.4get.thebunny.zone		1

16. DomainService - Entries

Type		Domain	Pref	Value	DNS-error	num Answers	Status	Description
SPF	TXT	4get.thebunny.zone					32768	TXT expected, but CNAME found. CNAME not allowed, only TXT queries are allowed. See RFC 7208, 4.4.

17. Cipher Suites

Summary
Domain	IP	Port	num Ciphers	time	Std.Protocol	Forward Secrecy
4get.thebunny.zone	45.95.169.36	443	3 Ciphers	33.80 sec		0 without, 3 FS	100.00 %
Complete		1	3 Ciphers 3.00 Ciphers/Check	33.80 sec	33.80 sec/Check	0 without, 3 FS	100.00 %

Details
Domain	IP	Port	Cipher (OpenSsl / IANA)
4get.thebunny.zone	45.95.169.36	443	ECDHE-ECDSA-CHACHA20-POLY1305		(Recommended)	TLSv1.2	0xCC,0xA9	FS
3 Ciphers, 33.80 sec			TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
			ECDH		ECDSA	CHACHA20/POLY1305(256)	AEAD
			ECDHE-ECDSA-AES256-GCM-SHA384		(Recommended)	TLSv1.2	0xC0,0x2C	FS
			TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
			ECDH		ECDSA	AESGCM(256)	AEAD
			ECDHE-ECDSA-AES128-GCM-SHA256		(Recommended)	TLSv1.2	0xC0,0x2B	FS
			TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
			ECDH		ECDSA	AESGCM(128)	AEAD

18. Portchecks

Domain	IP	Port	Description	Result	Answer
4get.thebunny.zone	45.95.169.36	21	FTP

4get.thebunny.zone	45.95.169.36	21	FTP
4get.thebunny.zone	45.95.169.36	22	SSH	open
SSH-2.0-OpenSSH_10.0p2 Debian-7
4get.thebunny.zone	45.95.169.36	22	SSH	open	SSH-2.0-OpenSSH_10.0p2 Debian-7	Bad: SSH without DNS SSHFP Record found
4get.thebunny.zone	45.95.169.36	25	SMTP

4get.thebunny.zone	45.95.169.36	25	SMTP
4get.thebunny.zone	45.95.169.36	53	DNS

4get.thebunny.zone	45.95.169.36	53	DNS
4get.thebunny.zone	45.95.169.36	110	POP3

4get.thebunny.zone	45.95.169.36	110	POP3
4get.thebunny.zone	45.95.169.36	143	IMAP

4get.thebunny.zone	45.95.169.36	143	IMAP
4get.thebunny.zone	45.95.169.36	465	SMTP (encrypted)

4get.thebunny.zone	45.95.169.36	465	SMTP (encrypted)
4get.thebunny.zone	45.95.169.36	587	SMTP (encrypted, submission)

4get.thebunny.zone	45.95.169.36	587	SMTP (encrypted, submission)
4get.thebunny.zone	45.95.169.36	993	IMAP (encrypted)

4get.thebunny.zone	45.95.169.36	993	IMAP (encrypted)
4get.thebunny.zone	45.95.169.36	995	POP3 (encrypted)

4get.thebunny.zone	45.95.169.36	995	POP3 (encrypted)
4get.thebunny.zone	45.95.169.36	1433	MS SQL

4get.thebunny.zone	45.95.169.36	1433	MS SQL
4get.thebunny.zone	45.95.169.36	2082	cPanel (http)

4get.thebunny.zone	45.95.169.36	2082	cPanel (http)
4get.thebunny.zone	45.95.169.36	2083	cPanel (https)

4get.thebunny.zone	45.95.169.36	2083	cPanel (https)
4get.thebunny.zone	45.95.169.36	2086	WHM (http)

4get.thebunny.zone	45.95.169.36	2086	WHM (http)
4get.thebunny.zone	45.95.169.36	2087	WHM (https)

4get.thebunny.zone	45.95.169.36	2087	WHM (https)
4get.thebunny.zone	45.95.169.36	2089	cPanel Licensing

4get.thebunny.zone	45.95.169.36	2089	cPanel Licensing
4get.thebunny.zone	45.95.169.36	2095	cPanel Webmail (http)

4get.thebunny.zone	45.95.169.36	2095	cPanel Webmail (http)
4get.thebunny.zone	45.95.169.36	2096	cPanel Webmail (https)

4get.thebunny.zone	45.95.169.36	2096	cPanel Webmail (https)
4get.thebunny.zone	45.95.169.36	2222	DirectAdmin (http)

4get.thebunny.zone	45.95.169.36	2222	DirectAdmin (http)
4get.thebunny.zone	45.95.169.36	2222	DirectAdmin (https)

4get.thebunny.zone	45.95.169.36	2222	DirectAdmin (https)
4get.thebunny.zone	45.95.169.36	3306	mySql

4get.thebunny.zone	45.95.169.36	3306	mySql
4get.thebunny.zone	45.95.169.36	5224	Plesk Licensing

4get.thebunny.zone	45.95.169.36	5224	Plesk Licensing
4get.thebunny.zone	45.95.169.36	5432	PostgreSQL

4get.thebunny.zone	45.95.169.36	5432	PostgreSQL
4get.thebunny.zone	45.95.169.36	8080	Ookla Speedtest (http)

4get.thebunny.zone	45.95.169.36	8080	Ookla Speedtest (http)
4get.thebunny.zone	45.95.169.36	8080	Ookla Speedtest (https)

4get.thebunny.zone	45.95.169.36	8080	Ookla Speedtest (https)
4get.thebunny.zone	45.95.169.36	8083	VestaCP http

4get.thebunny.zone	45.95.169.36	8083	VestaCP http
4get.thebunny.zone	45.95.169.36	8083	VestaCP https

4get.thebunny.zone	45.95.169.36	8083	VestaCP https
4get.thebunny.zone	45.95.169.36	8443	Plesk Administration (https)

4get.thebunny.zone	45.95.169.36	8443	Plesk Administration (https)
4get.thebunny.zone	45.95.169.36	8447	Plesk Installer + Updates

4get.thebunny.zone	45.95.169.36	8447	Plesk Installer + Updates
4get.thebunny.zone	45.95.169.36	8880	Plesk Administration (http)

4get.thebunny.zone	45.95.169.36	8880	Plesk Administration (http)
4get.thebunny.zone	45.95.169.36	10000	Webmin (http)

4get.thebunny.zone	45.95.169.36	10000	Webmin (http)
4get.thebunny.zone	45.95.169.36	10000	Webmin (https)

4get.thebunny.zone	45.95.169.36	10000	Webmin (https)
www.4get.thebunny.zone	45.95.169.36	21	FTP

www.4get.thebunny.zone	45.95.169.36	21	FTP
www.4get.thebunny.zone	45.95.169.36	22	SSH	open
SSH-2.0-OpenSSH_10.0p2 Debian-7
www.4get.thebunny.zone	45.95.169.36	22	SSH	open	SSH-2.0-OpenSSH_10.0p2 Debian-7	Bad: SSH without DNS SSHFP Record found
www.4get.thebunny.zone	45.95.169.36	25	SMTP

www.4get.thebunny.zone	45.95.169.36	25	SMTP
www.4get.thebunny.zone	45.95.169.36	53	DNS

www.4get.thebunny.zone	45.95.169.36	53	DNS
www.4get.thebunny.zone	45.95.169.36	110	POP3

www.4get.thebunny.zone	45.95.169.36	110	POP3
www.4get.thebunny.zone	45.95.169.36	143	IMAP

www.4get.thebunny.zone	45.95.169.36	143	IMAP
www.4get.thebunny.zone	45.95.169.36	465	SMTP (encrypted)

www.4get.thebunny.zone	45.95.169.36	465	SMTP (encrypted)
www.4get.thebunny.zone	45.95.169.36	587	SMTP (encrypted, submission)

www.4get.thebunny.zone	45.95.169.36	587	SMTP (encrypted, submission)
www.4get.thebunny.zone	45.95.169.36	993	IMAP (encrypted)

www.4get.thebunny.zone	45.95.169.36	993	IMAP (encrypted)
www.4get.thebunny.zone	45.95.169.36	995	POP3 (encrypted)

www.4get.thebunny.zone	45.95.169.36	995	POP3 (encrypted)
www.4get.thebunny.zone	45.95.169.36	1433	MS SQL

www.4get.thebunny.zone	45.95.169.36	1433	MS SQL
www.4get.thebunny.zone	45.95.169.36	2082	cPanel (http)

www.4get.thebunny.zone	45.95.169.36	2082	cPanel (http)
www.4get.thebunny.zone	45.95.169.36	2083	cPanel (https)

www.4get.thebunny.zone	45.95.169.36	2083	cPanel (https)
www.4get.thebunny.zone	45.95.169.36	2086	WHM (http)

www.4get.thebunny.zone	45.95.169.36	2086	WHM (http)
www.4get.thebunny.zone	45.95.169.36	2087	WHM (https)

www.4get.thebunny.zone	45.95.169.36	2087	WHM (https)
www.4get.thebunny.zone	45.95.169.36	2089	cPanel Licensing

www.4get.thebunny.zone	45.95.169.36	2089	cPanel Licensing
www.4get.thebunny.zone	45.95.169.36	2095	cPanel Webmail (http)

www.4get.thebunny.zone	45.95.169.36	2095	cPanel Webmail (http)
www.4get.thebunny.zone	45.95.169.36	2096	cPanel Webmail (https)

www.4get.thebunny.zone	45.95.169.36	2096	cPanel Webmail (https)
www.4get.thebunny.zone	45.95.169.36	2222	DirectAdmin (http)

www.4get.thebunny.zone	45.95.169.36	2222	DirectAdmin (http)
www.4get.thebunny.zone	45.95.169.36	2222	DirectAdmin (https)

www.4get.thebunny.zone	45.95.169.36	2222	DirectAdmin (https)
www.4get.thebunny.zone	45.95.169.36	3306	mySql

www.4get.thebunny.zone	45.95.169.36	3306	mySql
www.4get.thebunny.zone	45.95.169.36	5224	Plesk Licensing

www.4get.thebunny.zone	45.95.169.36	5224	Plesk Licensing
www.4get.thebunny.zone	45.95.169.36	5432	PostgreSQL

www.4get.thebunny.zone	45.95.169.36	5432	PostgreSQL
www.4get.thebunny.zone	45.95.169.36	8080	Ookla Speedtest (http)

www.4get.thebunny.zone	45.95.169.36	8080	Ookla Speedtest (http)
www.4get.thebunny.zone	45.95.169.36	8080	Ookla Speedtest (https)

www.4get.thebunny.zone	45.95.169.36	8080	Ookla Speedtest (https)
www.4get.thebunny.zone	45.95.169.36	8083	VestaCP http

www.4get.thebunny.zone	45.95.169.36	8083	VestaCP http
www.4get.thebunny.zone	45.95.169.36	8083	VestaCP https

www.4get.thebunny.zone	45.95.169.36	8083	VestaCP https
www.4get.thebunny.zone	45.95.169.36	8443	Plesk Administration (https)

www.4get.thebunny.zone	45.95.169.36	8443	Plesk Administration (https)
www.4get.thebunny.zone	45.95.169.36	8447	Plesk Installer + Updates

www.4get.thebunny.zone	45.95.169.36	8447	Plesk Installer + Updates
www.4get.thebunny.zone	45.95.169.36	8880	Plesk Administration (http)

www.4get.thebunny.zone	45.95.169.36	8880	Plesk Administration (http)
www.4get.thebunny.zone	45.95.169.36	10000	Webmin (http)

www.4get.thebunny.zone	45.95.169.36	10000	Webmin (http)
www.4get.thebunny.zone	45.95.169.36	10000	Webmin (https)

www.4get.thebunny.zone	45.95.169.36	10000	Webmin (https)

Permalink: https://check-your-website.server-daten.de/?i=1b5cfa48-171b-4af2-8f70-2bfc6c8c08b0

Last Result: https://check-your-website.server-daten.de/?q=4get.thebunny.zone - 2026-01-18 06:46:02

Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=4get.thebunny.zone" target="_blank">Check this Site: 4get.thebunny.zone</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

QR-Code of this page - https://check-your-website.server-daten.de/?d=4get.thebunny.zone

Check DNS, Urls + Redirects, Certificates and Content of your Website

Older results

1. IP-Addresses

2. DNSSEC

3. Name Servers

4. SOA-Entries

5. Screenshots

Mobile- and other Chrome-Checks

6. Url-Checks

7. Comments

1. General Results, most used to calculate the result

2. Header-Checks

3. DNS- and NameServer - Checks

4. Content- and Performance-critical Checks

8. Connections

9. Certificates

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

11. Html-Content - Entries

12. Html-Parsing via https://validator.w3.org/nu/

13. Nameserver - IP-Adresses

14. CAA - Entries

15. TXT - Entries

16. DomainService - Entries

17. Cipher Suites

18. Portchecks