Check DNS, Urls + Redirects, Certificates and Content of your Website




X

DNS-problem - authoritative Nameserver refused, not defined or timeout

Checked:
14.04.2019 09:38:20


Older results

No older results found


1. IP-Addresses

HostTIP-Addressis auth.∑ Queries∑ Timeout
51.la
A
14.17.102.104
No Hostname found
yes
1
0

AAAA

yes


www.51.la
C
f7e5541e3e16f351.huaweisafedns.com
yes
1
0

A
183.131.207.226
No Hostname found
yes



2. DNSSEC

Zone (*)DNSSEC - Informations (beta)

Zone: (root)
(root)
1 DS RR published



Status: Valid because published



2 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 8, KeyTag 25266, Flags 256



1 RRSIG RR to validate DNSKEY RR found



Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 02.05.2019, 00:00:00, Signature-Inception: 11.04.2019, 00:00:00, KeyTag 20326, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: la
la
2 DS RR in the parent zone found



1 RRSIG RR to validate DS RR found



Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 27.04.2019, 05:00:00, Signature-Inception: 14.04.2019, 04:00:00, KeyTag 25266, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 25266 used to validate the DS RRSet in the parent zone



3 DNSKEY RR found



Public Key with Algorithm 7, KeyTag 42973, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 7, KeyTag 51882, Flags 256



Public Key with Algorithm 7, KeyTag 60420, Flags 256



1 RRSIG RR to validate DNSKEY RR found



Algorithm: 7, 1 Labels, original TTL: 3600 sec, Signature-expiration: 12.05.2019, 05:25:29, Signature-Inception: 12.04.2019, 02:08:43, KeyTag 42973, Signer-Name: la



Status: Good - Algorithmus 7 and DNSKEY with KeyTag 42973 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 42973, DigestType 1 and Digest "HwzvpCDpEBu1eR86uT6FkXpyl4s=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 42973, DigestType 2 and Digest "59DDvN9g6NhC6ILZC07CY8iIm3YAmEkseYhBwTtOoT8=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: 51.la
51.la
0 DS RR in the parent zone found



DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.



0 DNSKEY RR found





Zone: www.51.la
www.51.la
0 DS RR in the parent zone found

Zone: (root)
(root)
1 DS RR published



Status: Valid because published



2 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 8, KeyTag 25266, Flags 256



1 RRSIG RR to validate DNSKEY RR found



Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 02.05.2019, 00:00:00, Signature-Inception: 11.04.2019, 00:00:00, KeyTag 20326, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: com
com
1 DS RR in the parent zone found



1 RRSIG RR to validate DS RR found



Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 27.04.2019, 05:00:00, Signature-Inception: 14.04.2019, 04:00:00, KeyTag 25266, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 25266 used to validate the DS RRSet in the parent zone



3 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 3800, Flags 256



Public Key with Algorithm 8, KeyTag 16883, Flags 256



Public Key with Algorithm 8, KeyTag 30909, Flags 257 (SEP = Secure Entry Point)



1 RRSIG RR to validate DNSKEY RR found



Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 27.04.2019, 18:25:33, Signature-Inception: 12.04.2019, 18:20:33, KeyTag 30909, Signer-Name: com



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 30909 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 30909, DigestType 2 and Digest "4tPJFvbe6scylOgmj7WIUESoM/xUWViPSpGEz8QaV2Y=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: huaweisafedns.com
huaweisafedns.com
0 DS RR in the parent zone found



DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.



0 DNSKEY RR found





Zone: f7e5541e3e16f351.huaweisafedns.com
f7e5541e3e16f351.huaweisafedns.com
0 DS RR in the parent zone found



0 DNSKEY RR found





3. Name Servers

DomainNameserverNS-IP
51.la
  ns3.dnsv4.com
14.215.150.14

 
184.105.206.69

 
183.232.90.141

 
52.74.43.18

X 
61.151.180.49

 
182.140.167.169

X 
61.129.8.140

 
59.36.120.145

 
125.39.213.169

  ns4.dnsv4.com
111.161.57.58

 
183.232.90.141

 
61.151.180.50

 
184.105.206.69

 
223.166.151.15

 
14.215.150.15

 
58.251.86.11

 
223.166.151.14

 
52.74.43.18
la
  ns1.nic.la / FMCL-UEZCAO-YJSSPL


  ns2.nic.la / NRDT-75SODK-AB8TIQ


  ns3.nic.la / FMCL-UEZCAO-YJSSPL


  ns4.nic.la / NRDT-75SODK-AB8TIQ


f7e5541e3e16f351.huaweisafedns.com
T  ns1.hwclouds-dns.com
122.112.208.53

 
140.143.83.64

 
43.254.0.68

 
159.138.16.55

 
139.159.208.46

X 
36.27.212.241

 
139.159.208.43

 
159.138.17.59
huaweisafedns.com
  ns1.hwclouds-dns.com


  ns1.hwclouds-dns.net

com
  a.gtld-servers.net


  b.gtld-servers.net


  c.gtld-servers.net


  d.gtld-servers.net


  e.gtld-servers.net


  f.gtld-servers.net


  g.gtld-servers.net


  h.gtld-servers.net


  i.gtld-servers.net


  j.gtld-servers.net


  k.gtld-servers.net


  l.gtld-servers.net


  m.gtld-servers.net


4. SOA-Entries


Domain:la
Primary:ns0.nic.la
Mail:hostmaster.nic.la
Serial:3000490385
Refresh:900
Retry:1800
Expire:6048000
TTL:3600
num Entries:4


Domain:51.la
Primary:ns3.dnsv4.com
Mail:enterprise2dnsadmin.dnspod.com
Serial:1554790622
Refresh:3600
Retry:180
Expire:1209600
TTL:180
num Entries:13



Domain:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1555227688
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:5


Domain:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1555227703
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:8


Domain:huaweisafedns.com
Primary:ns1.hwclouds-dns.com
Mail:hwclouds.cs.huawei.com
Serial:1
Refresh:7200
Retry:900
Expire:1209600
TTL:300
num Entries:2


Domain:f7e5541e3e16f351.huaweisafedns.com
Primary:ns1.hwclouds-dns.com
Mail:hwclouds.cs.huawei.com
Serial:1
Refresh:7200
Retry:900
Expire:1209600
TTL:300
num Entries:5


5. Url-Checks


:

:
Domainname Http-StatusredirectSec.G
• http://51.la/
14.17.102.104
301
https://www.51.la/
0.566
E
Server: nginx/1.12.2
Date: Sun, 14 Apr 2019 07:46:42 GMT
Content-Type: text/html
Content-Length: 185
Connection: close
Location: https://www.51.la/

• http://www.51.la/
183.131.207.226
301
https://www.51.la/
0.677
A
Server: HuaweiCloudWAF
Date: Sun, 14 Apr 2019 07:46:43 GMT
Content-Type: text/html
Content-Length: 185
Connection: close
Set-Cookie: HWWAFSESID=17ee6bb9b29e6bd446; Path=/; Domain=www.51.la,HWWAFSESTIME=1555227999590; Path=/; Domain=www.51.la
Location: https://www.51.la/

• https://51.la/
14.17.102.104
301
https://www.51.la/
2.810
B
Server: nginx/1.12.2
Date: Sun, 14 Apr 2019 07:46:44 GMT
Content-Type: text/html
Content-Length: 185
Connection: close
Location: https://www.51.la/

• https://www.51.la/
183.131.207.226
200

3.807
I
Server: HuaweiCloudWAF
Date: Sun, 14 Apr 2019 07:46:47 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 28296
Connection: close
Set-Cookie: HWWAFSESID=e8b2f8b25b5eaf45e3; Path=/; Domain=www.51.la,HWWAFSESTIME=1555228005132; Path=/; Domain=www.51.la,csrfToken=gMTCU1jnl_g8TgiUusKxN1jh; Path=/; Domain=www.51.la
Accept-Ranges: bytes
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-readtime: 3

• http://51.la/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
14.17.102.104
301
https://www.51.la/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
0.563
E
Visible Content:
Server: nginx/1.12.2
Date: Sun, 14 Apr 2019 07:46:51 GMT
Content-Type: text/html
Content-Length: 185
Connection: close
Location: https://www.51.la/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

• http://www.51.la/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
183.131.207.226
301
https://www.51.la/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
0.733
A
Visible Content:
Server: HuaweiCloudWAF
Date: Sun, 14 Apr 2019 07:46:51 GMT
Content-Type: text/html
Content-Length: 185
Connection: close
Set-Cookie: HWWAFSESID=eb7d39a66d3a58f637; Path=/; Domain=www.51.la,HWWAFSESTIME=1555228008716; Path=/; Domain=www.51.la
Location: https://www.51.la/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

• https://www.51.la/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

200

4.403

Visible Content:
Server: HuaweiCloudWAF
Date: Sun, 14 Apr 2019 07:46:54 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 10295
Connection: close
Set-Cookie: HWWAFSESID=14c219729d7132602a; Path=/; Domain=www.51.la,HWWAFSESTIME=1555228010978; Path=/; Domain=www.51.la,csrfToken=oGHBJ9DZxjX5qtbzUpnMAELO; Path=/; Domain=www.51.la
Accept-Ranges: bytes
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-readtime: 1

6. Comments (GZip / Html minfied / Cache-Control is beta)

Aname "51.la" is domain, public suffix is "la", top-level-domain-type is "country-code", Country is Lao People's Democratic Republic (the), tld-manager is "Lao National Internet Committee (LANIC), Ministry of Posts and Telecommunications"
Agood: All ip addresses are public addresses
Agood: destination is https
Agood: one preferred version: www is preferred
AGood: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
Ahttp://www.51.la/ 183.131.207.226
301
https://www.51.la/
correct redirect http - https with the same domain name
Bhttps://51.la/ 14.17.102.104
301

Missing HSTS-Header
Bhttps://www.51.la/ 183.131.207.226
200

Missing HSTS-Header
Bhttps://www.51.la/ 183.131.207.226
200
HWWAFSESID=e8b2f8b25b5eaf45e3; Path=/; Domain=www.51.la
Cookie sent via https, but not marked as secure
Bhttps://www.51.la/ 183.131.207.226
200
HWWAFSESTIME=1555228005132; Path=/; Domain=www.51.la
Cookie sent via https, but not marked as secure
Bhttps://www.51.la/ 183.131.207.226
200
csrfToken=gMTCU1jnl_g8TgiUusKxN1jh; Path=/; Domain=www.51.la
Cookie sent via https, but not marked as secure
Ehttp://51.la/ 14.17.102.104
301
https://www.51.la/
Wrong redirect one domain http to other domain https. First redirect to https without new dns query, so the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
Ihttps://www.51.la/ 183.131.207.226
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions
XFatal error: Nameserver isn't defined or has timeout
XFatal error: Nameserver doesn't support echo capitalization: ns1.hwclouds-dns.com / 139.159.208.43
XFatal error: Nameserver doesn't support echo capitalization: ns1.hwclouds-dns.com / 139.159.208.46
XFatal error: Nameserver doesn't support echo capitalization: ns1.hwclouds-dns.com / 140.143.83.64
XFatal error: Nameserver doesn't support echo capitalization: ns1.hwclouds-dns.com / 36.27.212.241
XFatal error: Nameserver doesn't support TCP connection: ns3.dnsv4.com / 182.140.167.169: Timeout
XFatal error: Nameserver doesn't support TCP connection: ns1.hwclouds-dns.com / 36.27.212.241: Fatal error (-14). Details: Unable to read data from the transport connection: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. - A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond
XFatal error: Nameserver doesn't support TCP connection: ns3.dnsv4.com / 61.129.8.140: Fatal error (-14). Details: Unable to read data from the transport connection: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. - A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond
XFatal error: Nameserver doesn't support TCP connection: ns4.dnsv4.com / 14.215.150.15: Timeout
XFatal error: Nameserver doesn't support TCP connection: ns4.dnsv4.com / 58.251.86.11: Timeout
XFatal error: Nameserver doesn't support TCP connection: ns3.dnsv4.com / 61.151.180.49: Fatal error (-14). Details: Unable to read data from the transport connection: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. - A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond
AGood: Nameserver supports Echo Capitalization: 18 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 18 good Nameserver
Nameserver doesn't pass all EDNS-Checks: ns1.hwclouds-dns.com / 159.138.16.55: OP100: fatal timeout. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns1.hwclouds-dns.com / 159.138.17.59: OP100: fatal timeout. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns1.hwclouds-dns.com / 36.27.212.241: OP100: fatal timeout. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: fatal timeout. NSID: ok. COOKIE: ok. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: ns1.hwclouds-dns.com / 122.112.208.53: OP100: fatal timeout. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns1.hwclouds-dns.com / 43.254.0.68: OP100: fatal timeout. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns3.dnsv4.com / 61.129.8.140: OP100: ok. FLAGS: ok. V1: fatal timeout. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: fatal timeout. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns3.dnsv4.com / 61.151.180.49: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: fatal timeout. DNSSEC: ok. V1DNSSEC: ok. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns4.dnsv4.com / 183.232.90.141: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: fatal timeout. V1DNSSEC: ok. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns4.dnsv4.com / 61.151.180.50: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: fatal timeout. DNSSEC: ok. V1DNSSEC: ok. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.
https://www.51.la/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
200

Warning: Not existing ACME-file, but Server sends 200, not 404 or redirect. May be a problem creating a Letsencrypt certificate. Checking /.well-known/acme-challenge/random-filename - a http status 404 - Not Found - is expected. If your server sends content and a http status 200, the validation file (87 bytes, token, dot and the hash of the public part of the account key) may be invisible, so Letsencrypt can't validate your domain. If it is an application that sends this content, perhaps create an exception, so /.well-known/acme-challenge sends raw files. Or create a redirect to another domain and / or port 443, but your Letsencrypt client must support such a solution. Certbot: Use webroot as authenticator - https://certbot.eff.org/docs/using.html Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
AInfo: Different Server-Headers found
ADuration: 875944 milliseconds, 875.944 seconds


7. Connections (http/2 - check is BETA)

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
51.la
14.17.102.104
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
error checking OCSP stapling
ok
51.la
14.17.102.104
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
error checking OCSP stapling
ok
Chain (complete)
1CN=*.51.la, OU=Domain Control Validated

2CN=GlobalSign Domain Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE
www.51.la
183.131.207.226
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
error checking OCSP stapling
ok
www.51.la
183.131.207.226
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
error checking OCSP stapling
ok
Chain (complete)
1CN=*.51.la, OU=Domain Control Validated

2CN=GlobalSign Domain Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE
www.51.la
www.51.la
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
error checking OCSP stapling
ok
www.51.la
www.51.la
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
error checking OCSP stapling
ok
Chain (complete)
1CN=*.51.la, OU=Domain Control Validated

2CN=GlobalSign Domain Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE


8. Certificates

1.
1.
CN=*.51.la, OU=Domain Control Validated
15.01.2018
15.04.2021
expires in 540 days
*.51.la, 51.la - 2 entries
1.
1.
CN=*.51.la, OU=Domain Control Validated
15.01.2018

15.04.2021
expires in 540 days
*.51.la, 51.la - 2 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:649FF495D3BF32A4BEDC69EE
Thumbprint:BBA624FB6B8B285D23F0586831CA49B2E2C34A45
SHA256 / Certificate:KwNG5iL/7I0H1aPDIY2Uu+gDjrg5GzI6v5sTtBTrt04=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):11f2f105217cb017a6f985b226c95526df6414b4f59406c13ebe086e69d91c15
OCSP - Url:http://ocsp2.globalsign.com/gsdomainvalsha2g2
OCSP - must staple:no
Certificate Transparency:yes


2.
CN=GlobalSign Domain Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE
20.02.2014
20.02.2024
expires in 1581 days


2.
CN=GlobalSign Domain Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE
20.02.2014

20.02.2024
expires in 1581 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:040000000001444EF03E20
Thumbprint:736A4DC679D682DA321563647C60F699F0DFC268
SHA256 / Certificate:v99M8/FDrQ25EtirOnwS9he56mDOix9ORPdCcPshsZs=
SHA256 hex / Cert (DANE * 0 1):bfdf4cf3f143ad0db912d8ab3a7c12f617b9ea60ce8b1f4e44f74270fb21b19b
SHA256 hex / PublicKey (DANE * 1 1):3cbd7f4d30c47bd0a6da56f65f4b62c72402ef368f4449bf57420726c7130a6c
OCSP - Url:http://ocsp.globalsign.com/rootr1
OCSP - must staple:no
Certificate Transparency:no


3.
CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE
01.09.1998
28.01.2028
expires in 3019 days


3.
CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE
01.09.1998

28.01.2028
expires in 3019 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:040000000001154B5AC394
Thumbprint:B1BC968BD4F49D622AA89A81F2150152A41D829C
SHA256 / Certificate:69QQQOS7PsdCyeOB0x7ypBpItmhclufO88HfbNQzHJk=
SHA256 hex / Cert (DANE * 0 1):ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99
SHA256 hex / PublicKey (DANE * 1 1):2bcee858158cf5465fc9d76f0dfa312fef25a4dca8501da9b46b67d1fbfa1b64
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no



9. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates

No CertSpotter - Certificate-Transparency-Log informations found. The feature is new (startet 2019-05-07), so recheck this domain.


2. Source crt.sh - old and new certificates, sometimes very slow.

Issuerlast 7 daysactivenum Certs
CN=GlobalSign Domain Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE
0
2
5

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
313448807
leaf cert
CN=GlobalSign Domain Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE
2018-01-15 08:13:29
2021-03-19 02:35:56
*.users.51.la, Domain Control Validated, users.51.la
2 entries


313426578
leaf cert
CN=GlobalSign Domain Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE
2018-01-15 08:13:04
2021-04-15 07:13:04
*.51.la, 51.la, Domain Control Validated
2 entries


112343439
leaf cert
CN=GlobalSign Domain Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE
2017-04-01 03:20:42
2018-04-02 03:20:42
*.51.la, 51.la, Domain Control Validated
2 entries


100365138
leaf cert
CN=GlobalSign Domain Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE
2017-02-16 02:35:56
2018-02-17 02:35:56
*.users.51.la, Domain Control Validated, users.51.la
2 entries


92551468
precert
CN=GlobalSign Domain Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE
2017-02-15 01:21:50
2018-02-16 01:21:50
*.user.51.la, Domain Control Validated, user.51.la
2 entries



10. Html-Content - Entries

Summary

Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://www.51.la/
183.131.207.226
a

84

0







form

1
43 Bytes
0







img

19
71,816 Bytes
17







link
stylesheet
3
8,312 Bytes
3







link
other
1
16,958 Bytes
0







meta
other
6

0







script

6
27,520 Bytes
4







style-attribute

6
16,178 Bytes
6






Details (GZip part is BETA, may be wrong / incomplete)

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsgStatus
https://www.51.la/
183.131.207.226
a

/


2
ok








a

/doc/


1
ok








a

/doc/ru-he-tian-jia-tong-ji-dai-ma-ff1f.html


1
ok








a

/doc/tong-ji-zhi-biao-de-biao-zhun-shi-shi-yao-ff1f.html


1
ok








a

/login


1
ok








a

/login#forget


1
ok








a

/news/detail?id=263&from=list


3
ok








a

/news/detail?id=355&from=list


1
ok








a

/news/list


2
ok








a

/ranking/browser


1
ok








a

/ranking/day


3
ok








a

/ranking/os


1
ok








a

/ranking/search_engine


1
ok








a

/ranking/week


1
ok








a

/register


2
ok








a

/report/attraction/visit_depth?comId=2260177


1
ok








a

/report/main?comId=2260177


2
ok








a

/report/online?comId=2260177


1
ok








a

/service/biz_contact


1
ok








a

/service/copyright_notice


1
ok








a

/service/friend_link


2
ok








a

/service/special_user


1
ok








a

/service/terms_of_service


1
ok








a

/service/update_log


1
ok








a

/user/feedback


1
ok








a

http://4053555.com/


1
ok








a

http://bbs.zol.com.cn/


1
ok








a

http://liulanqi.2018.cn/


1
ok








a

http://lm.wx168178.com


2
ok








a

http://new.weijuju.com


1
ok








a

http://pgtx.mabu688.cn


1
ok








a

http://www.2898.com


1
ok








a

http://www.alexa.cn/


1
ok








a

http://www.beian.gov.cn/portal/registerSystemInfo?recordcode=44010602004893


1
ok








a

http://www.cddgg.com/


1
ok








a

http://www.cssmoban.com/


1
ok








a

http://www.hy755.cn/


1
ok








a

http://www.iis7.com/


1
ok








a

http://www.im286.com


1
ok








a

http://www.jisuapp.cn/


1
ok








a

http://www.miitbeian.gov.cn/


1
ok








a

http://www.pipimp3.com/


1
ok








a

http://www.win2007.com/


1
ok








a

http://www.ylmf888.com


1
ok








a

http://www.ylmfwin100.com/


1
ok








a

https://www.51.la/doc/ru-he-tian-jia-tong-ji-dai-ma-ff1f.html


1
ok








a

https://www.51.la/news/detail?id=185&from=list


1
ok








a

https://www.51.la/news/detail?id=343&from=list


1
ok








a

https://www.51.la/news/detail?id=421&from=list


1
ok








a

https://www.51.la/news/detail?id=425&from=list


1
ok








a

https://www.51.la/report/main?comId=2260177


1
ok








a

https://www.bt.cn/


1
ok








a

https://www.dedemao.com


1
ok








a

https://www.gwin8818.com/


1
ok








a

https://www.hongtu777.com


1
ok








a

https://www.huzhan.com/


1
ok








a

https://www.vpsor.cn


1
ok








a

https://www.yuntask.com/


1
ok








a

https://www.zhongjie.com/


1
ok








a

javascript:;


15
ok








form

/user/feedback/add
302
text/html; charset=utf-8
/login
1
ok

43 Bytes






img
src
//images.51.la/v5/images/index/wechat.png
403
text/html
Forbidden
1
Forbidden

2681 Bytes






img
src
/images/index/wechat.png
200
image/png

1
ok

No Cache-Control header







img
src
https://ia.51.la/go1?id=19421897&pvFlag=1
200
application/octet-stream

1
ok

0 Bytes






img
src
https://images.51.la/20180612120208-ACEAD405D9AFAA2BAEF8B3ABB2A6BA04.png
403
text/html
Forbidden
1
Forbidden

2756 Bytes






img
src
https://images.51.la/20181129185858-默认标题_自定义px_2018.11.29 (3).png
403
text/html
Forbidden
1
Forbidden

2909 Bytes






img
src
https://images.51.la/20181129185903-默认标题_自定义px_2018.11.29 (4).png
403
text/html
Forbidden
1
Forbidden

2909 Bytes






img
src
https://images.51.la/20181129185940-默认标题_自定义px_2018.11.29 (6).png
403
text/html
Forbidden
1
Forbidden

2911 Bytes






img
src
https://images.51.la/20181129185947-默认标题_自定义px_2018.11.29 (7).png
403
text/html
Forbidden
1
Forbidden

2909 Bytes






img
src
https://images.51.la/20181129185954-默认标题_自定义px_2018.11.29 (8).png
403
text/html
Forbidden
1
Forbidden

2911 Bytes






img
src
https://images.51.la/20181129190007-默认标题_自定义px_2018.11.29 (10).png
403
text/html
Forbidden
1
Forbidden

2912 Bytes






img
src
https://images.51.la/20181129190020-默认标题_自定义px_2018.11.29 (9).png
403
text/html
Forbidden
1
Forbidden

2911 Bytes






img
src
https://images.51.la/20181129190027-默认标题_自定义px_2018.11.29 (11).png
403
text/html
Forbidden
1
Forbidden

2914 Bytes






img
src
https://images.51.la/20181129190043-默认标题_自定义px_2018.11.29 (12).png
403
text/html
Forbidden
1
Forbidden

2912 Bytes






img
src
https://images.51.la/20181129190049-默认标题_自定义px_2018.11.29 (13).png
403
text/html
Forbidden
1
Forbidden

2914 Bytes






img
src
https://images.51.la/20181226164435-images.gif
403
text/html
Forbidden
1
Forbidden

2680 Bytes






img
src
https://images.51.la/20190125095248-A1-2761322447.gif
403
text/html
Forbidden
1
Forbidden

2699 Bytes






img
src
https://images.51.la/20190401174358-冠赢.gif
403
text/html
Forbidden
1
Forbidden

2714 Bytes






img
src
https://images.51.la/20190402160748-A1-2-4.2.jpg
403
text/html
Forbidden
1
Forbidden

2684 Bytes






img
src
https://images.51.la/20190402160813-A1-2-4.2.jpg
403
text/html
Forbidden
1
Forbidden

2686 Bytes






link
shortcut icon
/favicon.ico
200
image/vnd.microsoft.icon

1
ok

No Cache-Control header







link
stylesheet
//images.51.la/v5/dist/front-style2.css?v=1554982261581
403
text/html
Forbidden
1
Forbidden

2723 Bytes






link
stylesheet
//images.51.la/v5/js/vendor/peppermint/peppermint.required.css?v=1554982261581
403
text/html
Forbidden
1
Forbidden

2794 Bytes






link
stylesheet
//images.51.la/v5/js/vendor/peppermint/peppermint.suggested.css?v=1554982261581
403
text/html
Forbidden
1
Forbidden

2795 Bytes






meta

UTF-8


1
ok








meta
X-UA-Compatible
IE=Edge


1
ok








meta
baidu-site-verification
OrUy4NqAIe


1
ok








meta
description
我要啦 统计面向网站站长提供免费的、功能完善的、人性化的网站流量统计分析服务


1
ok








meta
keywords
51la,网站数据分析,网站流量统计,访问统计,网站流量查询,网站流量排名,网站统计,我要啦


1
ok








meta
referrer
always


1
ok








script
src
//images.51.la/v5/dist/global.js?v=1554982261581
403
text/html
Forbidden
1
Forbidden

2702 Bytes






script
src
//images.51.la/v5/dist/index.js?v=1554982261581
403
text/html
Forbidden
1
Forbidden

2701 Bytes






script
src
//images.51.la/v5/js/vendor/jquery.js
403
text/html
Forbidden
1
Forbidden

2669 Bytes






script
src
//images.51.la/v5/js/vendor/peppermint/peppermint.min.js
403
text/html
Forbidden
1
Forbidden

2728 Bytes






script
src
//js.users.51.la/19236546.js
200
application/javascript;charset=UTF-8

1
ok

No Cache-Control - header
GZip required: 5010 Bytes






script
src
https://s22.cnzz.com/z_stat.php?id=1273154340&web_id=1273154340
200
application/javascript

1
ok

No Cache-Control - header
GZip required: 11710 Bytes






style-attribute

https://images.51.la/20190212100220-1.jpg
403
text/html
Forbidden
1
Forbidden

2663 Bytes






style-attribute

https://images.51.la/20190212100727-2.jpg
403
text/html
Forbidden
1
Forbidden

2665 Bytes






style-attribute

https://images.51.la/20190212103044-3.1.jpg
403
text/html
Forbidden
1
Forbidden

2669 Bytes






style-attribute

https://images.51.la/20190212103430-4.jpg
403
text/html
Forbidden
1
Forbidden

2665 Bytes






style-attribute

https://images.51.la/20190409152804-动态咨询-首页banner.jpg
403
text/html
Forbidden
1
Forbidden

2845 Bytes






style-attribute

https://images.51.la/20190411164725-API.png
403
text/html
Forbidden
1
Forbidden

2671 Bytes






11. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
f7e5541e3e16f351.huaweisafedns.com
0

no CAA entry found
1
0
huaweisafedns.com
0

no CAA entry found
1
0
www.51.la



1
0
51.la
0

no CAA entry found
1
0
com
0

no CAA entry found
1
0
la
0

no CAA entry found
1
0


12. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
51.la

ok
1
0
www.51.la


1
0
_acme-challenge.51.la

missing entry or wrong length
1
0
_acme-challenge.www.51.la

missing entry or wrong length
1
0
_acme-challenge.51.la.51.la

perhaps wrong
1
0
f7e5541e3e16f351.huaweisafedns.com

ok
1
0
_acme-challenge.www.51.la.www.51.la

perhaps wrong
1
0
_acme-challenge.f7e5541e3e16f351.huaweisafedns.com

Name Error - The domain name does not exist
1
0
_acme-challenge.f7e5541e3e16f351.huaweisafedns.com.f7e5541e3e16f351.huaweisafedns.com

Name Error - The domain name does not exist
1
0


13. Portchecks (BETA)

No Port informations found. The feature is new (startet 2019-07-09), so recheck this domain.



Permalink: https://check-your-website.server-daten.de/?i=9f9204b3-648f-4e28-b719-41b76425f583


Last Result: https://check-your-website.server-daten.de/?q=51.la - 2019-04-14 09:38:20


Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=51.la" target="_blank">Check this Site: 51.la</a>