Check DNS, Urls + Redirects, Certificates and Content of your Website

...

skip EDNS-Check

skip Content-Check

check links

Content problems - mixed content, missing files etc.

Checked:
06.11.2025 10:48:38

Older results

No older results found

1. IP-Addresses

Host	Type	IP-Address	is auth.	∑ Queries	∑ Timeout
auth.thanksben.com	CNAME	thanksben-cd-qazhofyh38i37r1j.edge.tenants.eu.auth0.com	yes	1	0
	A	104.17.9.16 Newark/New Jersey/United States (US) - Cloudflare, Inc. No Hostname found	yes
	A	104.17.10.16 Newark/New Jersey/United States (US) - Cloudflare, Inc. No Hostname found	yes
	AAAA	2606:4700::6811:910 Montreal/Quebec/Canada (CA) - Cloudflare, Inc.	yes
	AAAA	2606:4700::6811:a10 Montreal/Quebec/Canada (CA) - Cloudflare, Inc.	yes
www.auth.thanksben.com		Name Error	yes	1	0
*.thanksben.com	A	Name Error	yes
	AAAA	Name Error	yes
	CNAME	Name Error	yes
*.auth.thanksben.com	A	Name Error	yes
	AAAA	Name Error	yes
	CNAME	Name Error	yes

2. DNSSEC

Zone (*)	DNSSEC - Informations

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	3 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 61809, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 21.11.2025, 00:00:00 +, Signature-Inception: 31.10.2025, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: com
com	1 DS RR in the parent zone found


	DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=


	2 RRSIG RR to validate DS RR found


	RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 19.11.2025, 05:00:00 +, Signature-Inception: 06.11.2025, 04:00:00 +, KeyTag 61809, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 61809 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 13, KeyTag 19718, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 13, KeyTag 46539, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner com., Algorithm: 13, 1 Labels, original TTL: 86400 sec, Signature-expiration: 13.11.2025, 14:02:35 +, Signature-Inception: 29.10.2025, 13:57:35 +, KeyTag 19718, Signer-Name: com


	• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 19718 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest "isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: thanksben.com
thanksben.com	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "nstbt5shp7s2kfknvnop8p10n92dbc36" between the hashed NSEC3-owner "nstbr2st8ihdofhgr50n1jb41037q2b0" and the hashed NextOwner "nstcpg4v0onp7ma2h5mu1mb0houcgc0c". So the parent zone confirmes the not-existence of a DS RR. Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner nstbr2st8ihdofhgr50n1jb41037q2b0.com., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 12.11.2025, 01:08:19 +, Signature-Inception: 04.11.2025, 23:58:19 +, KeyTag 46539, Signer-Name: com


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "ck0pojmg874ljref7efn8430qvit8bsm" as Owner. That's the Hash of "com" with the NextHashedOwnerName "ck0q3udg8cekkae7rukpgct1dvssh8ll". So that domain name is the Closest Encloser of "thanksben.com". Opt-Out: True. Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner ck0pojmg874ljref7efn8430qvit8bsm.com., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 11.11.2025, 00:26:37 +, Signature-Inception: 03.11.2025, 23:16:37 +, KeyTag 46539, Signer-Name: com


	0 DNSKEY RR found




Zone: auth.thanksben.com
auth.thanksben.com	0 DS RR in the parent zone found

Zone: www.auth.thanksben.com
www.auth.thanksben.com	0 DS RR in the parent zone found

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	3 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 61809, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 21.11.2025, 00:00:00 +, Signature-Inception: 31.10.2025, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: com
com	1 DS RR in the parent zone found


	DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=


	2 RRSIG RR to validate DS RR found


	RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 19.11.2025, 05:00:00 +, Signature-Inception: 06.11.2025, 04:00:00 +, KeyTag 61809, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 61809 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 13, KeyTag 19718, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 13, KeyTag 46539, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner com., Algorithm: 13, 1 Labels, original TTL: 86400 sec, Signature-expiration: 13.11.2025, 14:02:35 +, Signature-Inception: 29.10.2025, 13:57:35 +, KeyTag 19718, Signer-Name: com


	• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 19718 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest "isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: auth0.com
auth0.com	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "5qcohtoc8o06sa94ehp5gmdvj2ier363" between the hashed NSEC3-owner "5qcoh1v8pac6p5qnkrpf6a7387uaug1p" and the hashed NextOwner "5qcol60iul7bm2qo8ifdmt4jng2r5ieq". So the parent zone confirmes the not-existence of a DS RR. Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner 5qcoh1v8pac6p5qnkrpf6a7387uaug1p.com., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 12.11.2025, 02:47:50 +, Signature-Inception: 05.11.2025, 01:37:50 +, KeyTag 46539, Signer-Name: com


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "ck0pojmg874ljref7efn8430qvit8bsm" as Owner. That's the Hash of "com" with the NextHashedOwnerName "ck0q3udg8cekkae7rukpgct1dvssh8ll". So that domain name is the Closest Encloser of "auth0.com". Opt-Out: True. Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner ck0pojmg874ljref7efn8430qvit8bsm.com., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 11.11.2025, 00:26:37 +, Signature-Inception: 03.11.2025, 23:16:37 +, KeyTag 46539, Signer-Name: com


	0 DNSKEY RR found




Zone: eu.auth0.com
eu.auth0.com	0 DS RR in the parent zone found


	0 DNSKEY RR found




Zone: tenants.eu.auth0.com
tenants.eu.auth0.com	0 DS RR in the parent zone found


	0 DNSKEY RR found




Zone: edge.tenants.eu.auth0.com
edge.tenants.eu.auth0.com	0 DS RR in the parent zone found


	0 DNSKEY RR found




Zone: thanksben-cd-qazhofyh38i37r1j.edge.tenants.eu.auth0.com
thanksben-cd-qazhofyh38i37r1j.edge.tenants.eu.auth0.com	0 DS RR in the parent zone found


	0 DNSKEY RR found

3. Name Servers

Domain	Nameserver	NS-IP
www.auth.thanksben.com	• ns-488.awsdns-61.com
thanksben.com	• ns-1395.awsdns-46.org / d1cca1d329fe56285cdf1626805cb62b -	205.251.197.115 Herndon/Virginia/United States (US) - Amazon.com	•
	•	2600:9000:5305:7300::1 Chicago/Illinois/United States (US) - Amazon.com, Inc.	•
	• ns-1604.awsdns-08.co.uk / 2590f50fa8205e11984644d6dca65fdb -	205.251.198.68 Ashburn/Virginia/United States (US) - Amazon.com	•
	•	2600:9000:5306:4400::1 Seattle/Washington/United States (US) - Amazon.com, Inc.	•
	• ns-488.awsdns-61.com / 66c199fd4824b5eb23c90234ab51c4c8 -	205.251.193.232 Ashburn/Virginia/United States (US) - Amazon.com	•
	•	2600:9000:5301:e800::1 Seattle/Washington/United States (US) - Amazon.com, Inc.	•
	• ns-784.awsdns-34.net / e701d33b5bb1755613e3655a0e9fd1a5 -	205.251.195.16 Chicago/Illinois/United States (US) - Amazon.com	•
	•	2600:9000:5303:1000::1 Seattle/Washington/United States (US) - Amazon.com, Inc.	•
com	• a.gtld-servers.net / nnn1-par6		•
	• b.gtld-servers.net / nnn1-elwaw4		•
	• c.gtld-servers.net / nnn1-par6		•
	• d.gtld-servers.net / nnn1-par6		•
	• e.gtld-servers.net / nnn1-par6		•
	• f.gtld-servers.net / nnn1-defra-4		•
	• g.gtld-servers.net / nnn1-defra-4		•
	• h.gtld-servers.net / nnn1-defra-4		•
	• i.gtld-servers.net / nnn1-defra-4		•
	• j.gtld-servers.net / nnn1-frmrs-2		•
	• k.gtld-servers.net / nnn1-frmrs-2		•
	• l.gtld-servers.net / nnn1-frmrs-2		•
	• m.gtld-servers.net / nnn1-frmrs-2		•

thanksben-cd-qazhofyh38i37r1j.edge.tenants.eu.auth0.com	• kara.ns.cloudflare.com / 67m165	108.162.192.123 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	172.64.32.123 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	173.245.58.123 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	2606:4700:50::adf5:3a7b Montreal/Quebec/Canada (CA) - Cloudflare, Inc.	•
	•	2803:f800:50::6ca2:c07b San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.	•
	•	2a06:98c1:50::ac40:207b London/England/United Kingdom (GB) - CloudFLARENET-EU	•
edge.tenants.eu.auth0.com	• kara.ns.cloudflare.com / 67m86	108.162.192.123 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	172.64.32.123 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	173.245.58.123 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	2606:4700:50::adf5:3a7b Montreal/Quebec/Canada (CA) - Cloudflare, Inc.	•
	•	2803:f800:50::6ca2:c07b San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.	•
	•	2a06:98c1:50::ac40:207b London/England/United Kingdom (GB) - CloudFLARENET-EU	•
tenants.eu.auth0.com	• kara.ns.cloudflare.com / 67m111	108.162.192.123 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	172.64.32.123 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	173.245.58.123 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	2606:4700:50::adf5:3a7b Montreal/Quebec/Canada (CA) - Cloudflare, Inc.	•
	•	2803:f800:50::6ca2:c07b San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.	•
	•	2a06:98c1:50::ac40:207b London/England/United Kingdom (GB) - CloudFLARENET-EU	•
eu.auth0.com	• kara.ns.cloudflare.com / 67m151	108.162.192.123 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	172.64.32.123 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	173.245.58.123 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	2606:4700:50::adf5:3a7b Montreal/Quebec/Canada (CA) - Cloudflare, Inc.	•
	•	2803:f800:50::6ca2:c07b San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.	•
	•	2a06:98c1:50::ac40:207b London/England/United Kingdom (GB) - CloudFLARENET-EU	•
	• sean.ns.cloudflare.com / 67m148	108.162.193.231 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	172.64.33.231 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	173.245.59.231 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	2606:4700:58::adf5:3be7 Montreal/Quebec/Canada (CA) - Cloudflare, Inc.	•
	•	2803:f800:50::6ca2:c1e7 San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.	•
	•	2a06:98c1:50::ac40:21e7 London/England/United Kingdom (GB) - CloudFLARENET-EU	•
auth0.com	• kolton.ns.cloudflare.com / 67m86	108.162.195.25 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	162.159.44.25 Los Angeles/California/United States (US) - Cloudflare, Inc.	•
	•	172.64.35.25 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	2606:4700:58::a29f:2c19 Montreal/Quebec/Canada (CA) - Cloudflare, Inc.	•
	•	2803:f800:50::6ca2:c319 San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.	•
	•	2a06:98c1:50::ac40:2319 London/England/United Kingdom (GB) - CloudFLARENET-EU	•
	• monroe.ns.cloudflare.com / 67m125	108.162.194.153 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	162.159.38.153 Los Angeles/California/United States (US) - Cloudflare, Inc.	•
	•	172.64.34.153 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	2606:4700:50::a29f:2699 Montreal/Quebec/Canada (CA) - Cloudflare, Inc.	•
	•	2803:f800:50::6ca2:c299 San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.	•
	•	2a06:98c1:50::ac40:2299 London/England/United Kingdom (GB) - CloudFLARENET-EU	•
com	• a.gtld-servers.net / nnn1-par6		•
	• b.gtld-servers.net / nnn1-elwaw4		•
	• c.gtld-servers.net / nnn1-par6		•
	• d.gtld-servers.net / nnn1-par6		•
	• e.gtld-servers.net / nnn1-par6		•
	• f.gtld-servers.net / nnn1-defra-4		•
	• g.gtld-servers.net / nnn1-defra-4		•
	• h.gtld-servers.net / nnn1-defra-4		•
	• i.gtld-servers.net / nnn1-defra-4		•
	• j.gtld-servers.net / nnn1-frmrs-2		•
	• k.gtld-servers.net / nnn1-frmrs-2		•
	• l.gtld-servers.net / nnn1-frmrs-2		•
	• m.gtld-servers.net / nnn1-frmrs-2		•

4. SOA-Entries

Domain:	com
Zone-Name:	com
Primary:	a.gtld-servers.net
Mail:	nstld.verisign-grs.com
Serial:	1762422497
Refresh:	1800
Retry:	900
Expire:	604800
TTL:	900
num Entries:	12

Domain:	com
Zone-Name:	com
Primary:	a.gtld-servers.net
Mail:	nstld.verisign-grs.com
Serial:	1762422512
Refresh:	1800
Retry:	900
Expire:	604800
TTL:	900
num Entries:	1

Domain:	thanksben.com
Zone-Name:	thanksben.com
Primary:	ns-488.awsdns-61.com
Mail:	awsdns-hostmaster.amazon.com
Serial:	1
Refresh:	7200
Retry:	900
Expire:	1209600
TTL:	86400
num Entries:	8

Domain:	www.auth.thanksben.com
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:	1


Domain:	com
Zone-Name:	com
Primary:	a.gtld-servers.net
Mail:	nstld.verisign-grs.com
Serial:	1762422542
Refresh:	1800
Retry:	900
Expire:	604800
TTL:	900
num Entries:	1

Domain:	com
Zone-Name:	com
Primary:	a.gtld-servers.net
Mail:	nstld.verisign-grs.com
Serial:	1762422557
Refresh:	1800
Retry:	900
Expire:	604800
TTL:	900
num Entries:	12

Domain:	auth0.com
Zone-Name:	auth0.com
Primary:	kolton.ns.cloudflare.com
Mail:	dns.cloudflare.com
Serial:	2387881860
Refresh:	10000
Retry:	2400
Expire:	604800
TTL:	1800
num Entries:	12

Domain:	eu.auth0.com
Zone-Name:	eu.auth0.com
Primary:	kara.ns.cloudflare.com
Mail:	dns.cloudflare.com
Serial:	2387908052
Refresh:	10000
Retry:	2400
Expire:	604800
TTL:	1800
num Entries:	12

Domain:	tenants.eu.auth0.com
Zone-Name:	eu.auth0.com
Primary:	kara.ns.cloudflare.com
Mail:	dns.cloudflare.com
Serial:	2387908052
Refresh:	10000
Retry:	2400
Expire:	604800
TTL:	1800
num Entries:	6

Domain:	edge.tenants.eu.auth0.com
Zone-Name:	eu.auth0.com
Primary:	kara.ns.cloudflare.com
Mail:	dns.cloudflare.com
Serial:	2387908052
Refresh:	10000
Retry:	2400
Expire:	604800
TTL:	1800
num Entries:	6

Domain:	thanksben-cd-qazhofyh38i37r1j.edge.tenants.eu.auth0.com
Zone-Name:	eu.auth0.com
Primary:	kara.ns.cloudflare.com
Mail:	dns.cloudflare.com
Serial:	2387908052
Refresh:	10000
Retry:	2400
Expire:	604800
TTL:	1800
num Entries:	6

5. Screenshots

Startaddress: https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F, address used: https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F, Screenshot created 2025-11-06 10:53:07 +00:0

Mobil (412px x 732px)

1127 milliseconds

Screenshot mobile - https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F

Mobil + Landscape (732px x 412px)

1163 milliseconds

Screenshot mobile landscape - https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F

Screen (1280px x 1680px)

1334 milliseconds

Screenshot Desktop - https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F

Mobile- and other Chrome-Checks

	width	height
visual Viewport	412	732
content Size	412	732

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

6. Url-Checks

show header:

Domainname	Http-Status	redirect	Sec.	G
• http://auth.thanksben.com/u/login/ 104.17.9.16	426	Html is minified: 100.44 %	0.063
Date: Thu, 06 Nov 2025 09:52:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
CF-Ray: 99a3b21e4cab44f8-TXL
CF-Cache-Status: HIT
Age: 0
Cache-Control: public, max-age=0, s-maxage=31536000
X-Auth0-L: 0.000
X-Content-Type-Options: nosniff
Set-Cookie: __cf_bm=29qIr03H90JeJahf3SsjKV0zS8GyiSJo8UUgB8AxLP0-1762422722-1.0.1.1-Gb04npqyt2K3RQPEya4nfqCw6OJ5dLglVVCl5RlVQflWKFee6.4yofEFchfICHML; path=/; expires=Thu, 06-Nov-25 10:22:02 GMT; domain=.auth.thanksben.com; HttpOnly
Vary: Accept-Encoding
Alt-Svc: h2=":443"; ma=60
Content-Type: text/html
Content-Length: 226

• http://auth.thanksben.com/u/login/ 104.17.10.16	426	Html is minified: 100.44 %	0.094
Date: Thu, 06 Nov 2025 09:52:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
CF-Ray: 99a3b21d9fe133a5-TXL
CF-Cache-Status: DYNAMIC
Cache-Control: public, max-age=0, s-maxage=31536000
X-Auth0-L: 0.000
X-Content-Type-Options: nosniff
Set-Cookie: __cf_bm=Wz_X7GDo3sx0e7q133ds6.IEcTci.OFenQLyDhpWzMI-1762422722-1.0.1.1-MTSn8tr1TXCSALjG2IyTgX0YZTlykxm_y0eG0qGUJIZFlYoQbfQ5fld6acu3O3Dp; path=/; expires=Thu, 06-Nov-25 10:22:02 GMT; domain=.auth.thanksben.com; HttpOnly
Vary: Accept-Encoding
Alt-Svc: h2=":443"; ma=60
Content-Type: text/html
Content-Length: 226

• http://auth.thanksben.com/u/login/ 2606:4700::6811:910	426	Html is minified: 100.44 %	0.063
Date: Thu, 06 Nov 2025 09:52:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
CF-Ray: 99a3b21eb8a444f2-TXL
CF-Cache-Status: HIT
Age: 0
Cache-Control: public, max-age=0, s-maxage=31536000
X-Auth0-L: 0.000
X-Content-Type-Options: nosniff
Set-Cookie: __cf_bm=jW.26gHFZl3mGk0dAxrZsOlhrBjl8PMcxJXklg4t3V0-1762422722-1.0.1.1-6G5QNQFjRsZs9PUkEoJtj7Zh0X1NvfZCRsGGmeFFvN74T.NdUw0B6OWX02z9l80E; path=/; expires=Thu, 06-Nov-25 10:22:02 GMT; domain=.auth.thanksben.com; HttpOnly
Vary: Accept-Encoding
Alt-Svc: h2=":443"; ma=60
Content-Type: text/html
Content-Length: 226

• http://auth.thanksben.com/u/login/ 2606:4700::6811:a10	426	Html is minified: 100.44 %	0.034
Date: Thu, 06 Nov 2025 09:52:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
CF-Ray: 99a3b21f4f73ca63-TXL
CF-Cache-Status: HIT
Age: 0
Cache-Control: public, max-age=0, s-maxage=31536000
X-Auth0-L: 0.000
X-Content-Type-Options: nosniff
Set-Cookie: __cf_bm=CDaf0zBK.Hc7IpmB4P1ANKLsgFLbuHhifluAIk9BylE-1762422722-1.0.1.1-6nLe5.GRvmY6HGqg_AX9lCOA0lsctmoMoKbi3Ir3mXwV_7_32H4wvIdY3aZIB7hw; path=/; expires=Thu, 06-Nov-25 10:22:02 GMT; domain=.auth.thanksben.com; HttpOnly
Vary: Accept-Encoding
Alt-Svc: h2=":443"; ma=60
Content-Type: text/html
Content-Length: 226

• https://auth.thanksben.com/u/login/ 104.17.9.16	302	https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F Html is minified: 100.00 %	1.970	B
Date: Thu, 06 Nov 2025 09:52:06 GMT
Connection: keep-alive
Server: cloudflare
Location: https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F
CF-Ray: 99a3b2367d2015ec-TXL
CF-Cache-Status: DYNAMIC
Cache-Control: no-store, no-transform, must-revalidate, no-cache, private, post-check=0, pre-check=0
Set-Cookie: did=s%3Av0%3A0a515093-0932-4522-965e-6474344b2bbd.K%2BOhVgE5Nxuofy3vhdsNmOTlt466UbUVM8sy4hHqfck; Path=/; Expires=Fri, 06 Nov 2026 15:52:06 GMT; HttpOnly; Secure; SameSite=None,did_compat=s%3Av0%3A0a515093-0932-4522-965e-6474344b2bbd.K%2BOhVgE5Nxuofy3vhdsNmOTlt466UbUVM8sy4hHqfck; Path=/; Expires=Fri, 06 Nov 2026 15:52:06 GMT; HttpOnly; Secure,__cf_bm=gLyohOx0Xregda2uxbsHc49H_hnacDtYS1eiiIrkFRc-1762422726-1.0.1.1-Do9u8KDfdOm0ZXviU_HrjF3SWxjzc5N9BHIH5d7GRPvYbusI7OQEs.w2bP1qoSkC; path=/; expires=Thu, 06-Nov-25 10:22:06 GMT; domain=.auth.thanksben.com; HttpOnly; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept,Accept-Encoding
X-Auth0-L: 0.011
X-Auth0-RequestId: 63cf464cd2669479a309
X-Content-Type-Options: nosniff
X-RateLimit-Limit: 300
X-RateLimit-Remaining: 299
X-RateLimit-Reset: 1762422727
Alt-Svc: h3=":443"
Content-Type: text/plain; charset=utf-8
Content-Length: 94

• https://auth.thanksben.com/u/login/ 104.17.10.16	302	https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F Html is minified: 100.00 %	2.030	B
Date: Thu, 06 Nov 2025 09:52:02 GMT
Connection: keep-alive
Server: cloudflare
Location: https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F
CF-Ray: 99a3b2205c7ce513-TXL
CF-Cache-Status: DYNAMIC
Cache-Control: no-store, no-transform, must-revalidate, no-cache, private, post-check=0, pre-check=0
Set-Cookie: did=s%3Av0%3A23d6aad0-f4f9-4181-a270-9a6207f5c981.THiABenSjkHBXi0te8VdKtv%2Fhhaa2Ng6C%2FG6LAweilc; Path=/; Expires=Fri, 06 Nov 2026 15:52:02 GMT; HttpOnly; Secure; SameSite=None,did_compat=s%3Av0%3A23d6aad0-f4f9-4181-a270-9a6207f5c981.THiABenSjkHBXi0te8VdKtv%2Fhhaa2Ng6C%2FG6LAweilc; Path=/; Expires=Fri, 06 Nov 2026 15:52:02 GMT; HttpOnly; Secure,__cf_bm=W.0_8rvR2dDwfQErctwrMJ.TFrzdsidM91qOU84xCPE-1762422722-1.0.1.1-_4yjABz4sp7vzmveagWwSR_Cib4.ylNaxvNK6eSmRS.CIMCju3MOwmnvXbLMcJJi; path=/; expires=Thu, 06-Nov-25 10:22:02 GMT; domain=.auth.thanksben.com; HttpOnly; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept,Accept-Encoding
X-Auth0-L: 0.022
X-Auth0-RequestId: 69f402a9f5463f31880b
X-Content-Type-Options: nosniff
X-RateLimit-Limit: 300
X-RateLimit-Remaining: 298
X-RateLimit-Reset: 1762422723
Alt-Svc: h3=":443"
Content-Type: text/plain; charset=utf-8
Content-Length: 94

• https://auth.thanksben.com/u/login/ 2606:4700::6811:910	302	https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F Html is minified: 100.00 %	2.047	B
Date: Thu, 06 Nov 2025 09:52:10 GMT
Connection: keep-alive
Server: cloudflare
Location: https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F
CF-Ray: 99a3b24e288ee50d-TXL
CF-Cache-Status: DYNAMIC
Cache-Control: no-store, no-transform, must-revalidate, no-cache, private, post-check=0, pre-check=0
Set-Cookie: did=s%3Av0%3A3471da72-2987-4340-a5e4-ba3d0b598b9e.KUQ5MesmnOSR%2B7CgE3bCTOb5BbBB8uvUFTWU03zGkDQ; Path=/; Expires=Fri, 06 Nov 2026 15:52:09 GMT; HttpOnly; Secure; SameSite=None,did_compat=s%3Av0%3A3471da72-2987-4340-a5e4-ba3d0b598b9e.KUQ5MesmnOSR%2B7CgE3bCTOb5BbBB8uvUFTWU03zGkDQ; Path=/; Expires=Fri, 06 Nov 2026 15:52:09 GMT; HttpOnly; Secure,__cf_bm=Wl8e46O1PfshCITHBf_jyGm3B6uGXEwRwaT8QJofrh0-1762422730-1.0.1.1-PmKXYgmir4GKgESAE4I7djQ1pDabtBQIc1tj.Fsu6WW2CzXsIZTQLDipJtywd27G; path=/; expires=Thu, 06-Nov-25 10:22:10 GMT; domain=.auth.thanksben.com; HttpOnly; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept,Accept-Encoding
X-Auth0-L: 0.012
X-Auth0-RequestId: 82cea03130625c42bcdb
X-Content-Type-Options: nosniff
X-RateLimit-Limit: 300
X-RateLimit-Remaining: 299
X-RateLimit-Reset: 1762422731
Alt-Svc: h3=":443"
Content-Type: text/plain; charset=utf-8
Content-Length: 94

• https://auth.thanksben.com/u/login/ 2606:4700::6811:a10	302	https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F Html is minified: 100.00 %	2.064	B
Date: Thu, 06 Nov 2025 09:52:13 GMT
Connection: keep-alive
Server: cloudflare
Location: https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F
CF-Ray: 99a3b2639c9f58f6-TXL
CF-Cache-Status: DYNAMIC
Cache-Control: no-store, no-transform, must-revalidate, no-cache, private, post-check=0, pre-check=0
Set-Cookie: did=s%3Av0%3A2df1c998-37a5-4d63-9894-eee6aa0c5db3.Q4TothjcLN9MQ5ZjZt%2BmQPFdhLAF0KP4twrWmwQY7u4; Path=/; Expires=Fri, 06 Nov 2026 15:52:13 GMT; HttpOnly; Secure; SameSite=None,did_compat=s%3Av0%3A2df1c998-37a5-4d63-9894-eee6aa0c5db3.Q4TothjcLN9MQ5ZjZt%2BmQPFdhLAF0KP4twrWmwQY7u4; Path=/; Expires=Fri, 06 Nov 2026 15:52:13 GMT; HttpOnly; Secure,__cf_bm=iXxyC8S1eFRMRbwlrpWfLp56DrhtpLKNYi_1wF1BBf0-1762422733-1.0.1.1-3n3sI0aXDWQbTLmgu.Ff2nDWT10hNy8EwPAuE6G6Vh9Dci4UsYYYs.ZrUkSZdCM8; path=/; expires=Thu, 06-Nov-25 10:22:13 GMT; domain=.auth.thanksben.com; HttpOnly; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept,Accept-Encoding
X-Auth0-L: 0.011
X-Auth0-RequestId: 829fec4f757c81a6339e
X-Content-Type-Options: nosniff
X-RateLimit-Limit: 300
X-RateLimit-Remaining: 299
X-RateLimit-Reset: 1762422735
Alt-Svc: h3=":443"
Content-Type: text/plain; charset=utf-8
Content-Length: 94

• https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F gzip used - 28513 / 95148 - 70.03 % Inline-JavaScript (∑/total): 11/7863 Inline-CSS (∑/total): 5/29338	200	Html is minified: 158.42 % Other inline scripts (∑/total): 2/2989	2.047	I
Date: Thu, 06 Nov 2025 09:52:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
CF-Ray: 99a3b2d339e715ec-TXL
CF-Cache-Status: HIT
Strict-Transport-Security: max-age=31536000
surrogate-control: max-age=2147483647
surrogate-key: www.thanksben.com 6540cf257cea53a471aad784 pageId:6540cf257cea53a471aadada userSystems
x-lambda-id: b9b04691-fa6a-4b06-af29-960c7033c135
Vary: Accept-Encoding
Set-Cookie: _cfuvid=m.pbvepMKVNF2u8LL597Gw4LAsfWJ2VdBr1TVnP3y54-1762422751285-0.0.1.1-604800000; path=/; domain=.www.thanksben.com; HttpOnly; Secure; SameSite=None
Alt-Svc: h3=":443"
Content-Type: text/html
Content-Encoding: gzip
Last-Modified: Tue, 04 Nov 2025 17:39:06 GMT
Content-Length: 28513

• http://auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 104.17.9.16	302	https://dcv.central.prod.a0core.net/auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	0.046
Visible Content:
Date: Thu, 06 Nov 2025 09:52:17 GMT
Connection: keep-alive
CF-RAY: 99a3b27a4f3a44f8-TXL
Location: https://dcv.central.prod.a0core.net/auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Set-Cookie: __cf_bm=e8nzLTyF3Z2TtofIT4M.OEy8NRAFyO.MOv6.YJfz74Y-1762422737-1.0.1.1-FSVKoc3boII0wnXaJF.3MVat1dbEtzZ5zBGpYjV22TI1WPHWePPjsoQ5keYpMY8Y; path=/; expires=Thu, 06-Nov-25 10:22:17 GMT; domain=.auth.thanksben.com; HttpOnly
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
Alt-Svc: h2=":443"; ma=60
Content-Length: 0

• http://auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 104.17.10.16	302	https://dcv.central.prod.a0core.net/auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	0.033
Visible Content:
Date: Thu, 06 Nov 2025 09:52:16 GMT
Connection: keep-alive
CF-RAY: 99a3b27a0e52d81e-TXL
Location: https://dcv.central.prod.a0core.net/auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Set-Cookie: __cf_bm=XsUgJTEuSd3dAX1DYw0pXkjXHPje33WBcDtEl_fjJds-1762422736-1.0.1.1-lUyXfmRD0L7HX1trtgtm0W69sqbVIrXZJUY_CzWL_6xLaOIDFCPlK.Ub88SsnfdV; path=/; expires=Thu, 06-Nov-25 10:22:16 GMT; domain=.auth.thanksben.com; HttpOnly
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
Alt-Svc: h2=":443"; ma=60
Content-Length: 0

• http://auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2606:4700::6811:910	302	https://dcv.central.prod.a0core.net/auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	0.030
Visible Content:
Date: Thu, 06 Nov 2025 09:52:17 GMT
Connection: keep-alive
CF-RAY: 99a3b27abf5444f2-TXL
Location: https://dcv.central.prod.a0core.net/auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Set-Cookie: __cf_bm=RwcWSyY0UU3fYJ.Ro1byYZYwFQWZbRyPkaV520BzHSg-1762422737-1.0.1.1-bMt.6YX290caI_5eD1CFE8JjvbQzpQIQHt_SyEzhwGdEkFFFMFIboeHjENGlcrbK; path=/; expires=Thu, 06-Nov-25 10:22:17 GMT; domain=.auth.thanksben.com; HttpOnly
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
Alt-Svc: h2=":443"; ma=60
Content-Length: 0

• http://auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2606:4700::6811:a10	302	https://dcv.central.prod.a0core.net/auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	0.030
Visible Content:
Date: Thu, 06 Nov 2025 09:52:17 GMT
Connection: keep-alive
CF-RAY: 99a3b27b1c12ca63-TXL
Location: https://dcv.central.prod.a0core.net/auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Set-Cookie: __cf_bm=JaTD_ZSUM4h8scUVbr.cLU5S_mN52xOhOAd2knlT1sk-1762422737-1.0.1.1-iC3BBly2Z773.S4TD12m17nZVSBPSTTVMXNaYwrUWm7MquYDADFoJHd20h3_d8nL; path=/; expires=Thu, 06-Nov-25 10:22:17 GMT; domain=.auth.thanksben.com; HttpOnly
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
Alt-Svc: h2=":443"; ma=60
Content-Length: 0

• https://dcv.central.prod.a0core.net/auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	403	Html is minified: 100.41 % Other inline scripts (∑/total): 0/0	6.200	M
Forbidden
Visible Content:
Date: Thu, 06 Nov 2025 09:52:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-amz-request-id: R6549SG4P21GEVPD
x-amz-id-2: VcYV3idyWafl1Ou1/jQnwevMD6v8YdHvQwdsg6xrT+giZBEBQXmiWUY+aOlhGPBLUWodpAdF/KI=
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Auth0-L: 0.037
Content-Type: application/xml
Content-Length: 243

• https://104.17.9.16/u/login/ 104.17.9.16 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	403	Html is minified: 110.22 % Other inline scripts (∑/total): 0/0	1.923	N
Forbidden
Certificate error: RemoteCertificateNameMismatch
Server: cloudflare
Date: Thu, 06 Nov 2025 09:52:20 GMT
Connection: keep-alive
CF-RAY: 99a3b2931a56e525-TXL
Content-Type: text/html
Content-Length: 151

• https://104.17.10.16/u/login/ 104.17.10.16 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	403	Html is minified: 110.22 % Other inline scripts (∑/total): 0/0	1.936	N
Forbidden
Certificate error: RemoteCertificateNameMismatch
Server: cloudflare
Date: Thu, 06 Nov 2025 09:52:17 GMT
Connection: keep-alive
CF-RAY: 99a3b27e0e23e523-TXL
Content-Type: text/html
Content-Length: 151

• https://[2606:4700:0000:0000:0000:0000:6811:0910]/u/login/ 2606:4700::6811:910 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	403	Html is minified: 110.22 % Other inline scripts (∑/total): 0/0	1.890	N
Forbidden
Certificate error: RemoteCertificateNameMismatch
Server: cloudflare
Date: Thu, 06 Nov 2025 09:52:24 GMT
Connection: keep-alive
CF-RAY: 99a3b2a8a893e512-TXL
Content-Type: text/html
Content-Length: 151

• https://[2606:4700:0000:0000:0000:0000:6811:0a10]/u/login/ 2606:4700::6811:a10 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	403	Html is minified: 110.22 % Other inline scripts (∑/total): 0/0	1.856	N
Forbidden
Certificate error: RemoteCertificateNameMismatch
Server: cloudflare
Date: Thu, 06 Nov 2025 09:52:27 GMT
Connection: keep-alive
CF-RAY: 99a3b2bdf96fe511-TXL
Content-Type: text/html
Content-Length: 151

7. Comments

	1. General Results, most used to calculate the result
A	name "auth.thanksben.com" is subdomain, public suffix is ".com", top-level-domain is ".com", top-level-domain-type is "generic", tld-manager is "VeriSign Global Registry Services", num .com-domains preloaded: 108094 (complete: 276475)
A	Good: All ip addresses are public addresses
A	Good: Minimal 2 ip addresses per domain name found: auth.thanksben.com has 4 different ip addresses (authoritative).
A	Good: Ipv4 and Ipv6 addresses per domain name found: auth.thanksben.com has 2 ipv4, 2 ipv6 addresses
A	Good: No asked Authoritative Name Server had a timeout
A	DNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
A	Good: destination is https
A	Good - only one version with Http-Status 200
A	Good: one preferred version: www is preferred
A	Good: every cookie sent via https is marked as secure
	HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
A	Good: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):0 complete Content-Type - header (6 urls)
	https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F			Url with incomplete Content-Type - header - missing charset
	https://dcv.central.prod.a0core.net/auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de			Url with incomplete Content-Type - header - missing charset
	https://104.17.9.16/u/login/ 104.17.9.16			Url with incomplete Content-Type - header - missing charset
	https://104.17.10.16/u/login/ 104.17.10.16			Url with incomplete Content-Type - header - missing charset
	https://[2606:4700:0000:0000:0000:0000:6811:0910]/u/login/ 2606:4700::6811:910			Url with incomplete Content-Type - header - missing charset
	https://[2606:4700:0000:0000:0000:0000:6811:0a10]/u/login/ 2606:4700::6811:a10			Url with incomplete Content-Type - header - missing charset
	http://auth.thanksben.com/u/login/ 104.17.9.16	426	__cf_bm=29qIr03H90JeJahf3SsjKV0zS8GyiSJo8UUgB8AxLP0-1762422722-1.0.1.1-Gb04npqyt2K3RQPEya4nfqCw6OJ5dLglVVCl5RlVQflWKFee6.4yofEFchfICHML; path=/; expires=Thu, 06-Nov-25 10:22:02 GMT; domain=.auth.thanksben.com; HttpOnly	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://auth.thanksben.com/u/login/ 104.17.10.16	426	__cf_bm=Wz_X7GDo3sx0e7q133ds6.IEcTci.OFenQLyDhpWzMI-1762422722-1.0.1.1-MTSn8tr1TXCSALjG2IyTgX0YZTlykxm_y0eG0qGUJIZFlYoQbfQ5fld6acu3O3Dp; path=/; expires=Thu, 06-Nov-25 10:22:02 GMT; domain=.auth.thanksben.com; HttpOnly	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://auth.thanksben.com/u/login/ 2606:4700::6811:910	426	__cf_bm=jW.26gHFZl3mGk0dAxrZsOlhrBjl8PMcxJXklg4t3V0-1762422722-1.0.1.1-6G5QNQFjRsZs9PUkEoJtj7Zh0X1NvfZCRsGGmeFFvN74T.NdUw0B6OWX02z9l80E; path=/; expires=Thu, 06-Nov-25 10:22:02 GMT; domain=.auth.thanksben.com; HttpOnly	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://auth.thanksben.com/u/login/ 2606:4700::6811:a10	426	__cf_bm=CDaf0zBK.Hc7IpmB4P1ANKLsgFLbuHhifluAIk9BylE-1762422722-1.0.1.1-6nLe5.GRvmY6HGqg_AX9lCOA0lsctmoMoKbi3Ir3mXwV_7_32H4wvIdY3aZIB7hw; path=/; expires=Thu, 06-Nov-25 10:22:02 GMT; domain=.auth.thanksben.com; HttpOnly	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 104.17.9.16	302	__cf_bm=e8nzLTyF3Z2TtofIT4M.OEy8NRAFyO.MOv6.YJfz74Y-1762422737-1.0.1.1-FSVKoc3boII0wnXaJF.3MVat1dbEtzZ5zBGpYjV22TI1WPHWePPjsoQ5keYpMY8Y; path=/; expires=Thu, 06-Nov-25 10:22:17 GMT; domain=.auth.thanksben.com; HttpOnly	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 104.17.10.16	302	__cf_bm=XsUgJTEuSd3dAX1DYw0pXkjXHPje33WBcDtEl_fjJds-1762422736-1.0.1.1-lUyXfmRD0L7HX1trtgtm0W69sqbVIrXZJUY_CzWL_6xLaOIDFCPlK.Ub88SsnfdV; path=/; expires=Thu, 06-Nov-25 10:22:16 GMT; domain=.auth.thanksben.com; HttpOnly	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2606:4700::6811:910	302	__cf_bm=RwcWSyY0UU3fYJ.Ro1byYZYwFQWZbRyPkaV520BzHSg-1762422737-1.0.1.1-bMt.6YX290caI_5eD1CFE8JjvbQzpQIQHt_SyEzhwGdEkFFFMFIboeHjENGlcrbK; path=/; expires=Thu, 06-Nov-25 10:22:17 GMT; domain=.auth.thanksben.com; HttpOnly	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
	http://auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2606:4700::6811:a10	302	__cf_bm=JaTD_ZSUM4h8scUVbr.cLU5S_mN52xOhOAd2knlT1sk-1762422737-1.0.1.1-iC3BBly2Z773.S4TD12m17nZVSBPSTTVMXNaYwrUWm7MquYDADFoJHd20h3_d8nL; path=/; expires=Thu, 06-Nov-25 10:22:17 GMT; domain=.auth.thanksben.com; HttpOnly	Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
B	http://auth.thanksben.com/u/login/ 104.17.9.16	426	__cf_bm=29qIr03H90JeJahf3SsjKV0zS8GyiSJo8UUgB8AxLP0-1762422722-1.0.1.1-Gb04npqyt2K3RQPEya4nfqCw6OJ5dLglVVCl5RlVQflWKFee6.4yofEFchfICHML; path=/; expires=Thu, 06-Nov-25 10:22:02 GMT; domain=.auth.thanksben.com; HttpOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://auth.thanksben.com/u/login/ 104.17.10.16	426	__cf_bm=Wz_X7GDo3sx0e7q133ds6.IEcTci.OFenQLyDhpWzMI-1762422722-1.0.1.1-MTSn8tr1TXCSALjG2IyTgX0YZTlykxm_y0eG0qGUJIZFlYoQbfQ5fld6acu3O3Dp; path=/; expires=Thu, 06-Nov-25 10:22:02 GMT; domain=.auth.thanksben.com; HttpOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://auth.thanksben.com/u/login/ 2606:4700::6811:910	426	__cf_bm=jW.26gHFZl3mGk0dAxrZsOlhrBjl8PMcxJXklg4t3V0-1762422722-1.0.1.1-6G5QNQFjRsZs9PUkEoJtj7Zh0X1NvfZCRsGGmeFFvN74T.NdUw0B6OWX02z9l80E; path=/; expires=Thu, 06-Nov-25 10:22:02 GMT; domain=.auth.thanksben.com; HttpOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://auth.thanksben.com/u/login/ 2606:4700::6811:a10	426	__cf_bm=CDaf0zBK.Hc7IpmB4P1ANKLsgFLbuHhifluAIk9BylE-1762422722-1.0.1.1-6nLe5.GRvmY6HGqg_AX9lCOA0lsctmoMoKbi3Ir3mXwV_7_32H4wvIdY3aZIB7hw; path=/; expires=Thu, 06-Nov-25 10:22:02 GMT; domain=.auth.thanksben.com; HttpOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://auth.thanksben.com/u/login/ 104.17.9.16	302	did_compat=s%3Av0%3A0a515093-0932-4522-965e-6474344b2bbd.K%2BOhVgE5Nxuofy3vhdsNmOTlt466UbUVM8sy4hHqfck; Path=/; Expires=Fri, 06 Nov 2026 15:52:06 GMT; HttpOnly; Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://auth.thanksben.com/u/login/ 104.17.10.16	302	did_compat=s%3Av0%3A23d6aad0-f4f9-4181-a270-9a6207f5c981.THiABenSjkHBXi0te8VdKtv%2Fhhaa2Ng6C%2FG6LAweilc; Path=/; Expires=Fri, 06 Nov 2026 15:52:02 GMT; HttpOnly; Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://auth.thanksben.com/u/login/ 2606:4700::6811:910	302	did_compat=s%3Av0%3A3471da72-2987-4340-a5e4-ba3d0b598b9e.KUQ5MesmnOSR%2B7CgE3bCTOb5BbBB8uvUFTWU03zGkDQ; Path=/; Expires=Fri, 06 Nov 2026 15:52:09 GMT; HttpOnly; Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	https://auth.thanksben.com/u/login/ 2606:4700::6811:a10	302	did_compat=s%3Av0%3A2df1c998-37a5-4d63-9894-eee6aa0c5db3.Q4TothjcLN9MQ5ZjZt%2BmQPFdhLAF0KP4twrWmwQY7u4; Path=/; Expires=Fri, 06 Nov 2026 15:52:13 GMT; HttpOnly; Secure	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 104.17.9.16	302	__cf_bm=e8nzLTyF3Z2TtofIT4M.OEy8NRAFyO.MOv6.YJfz74Y-1762422737-1.0.1.1-FSVKoc3boII0wnXaJF.3MVat1dbEtzZ5zBGpYjV22TI1WPHWePPjsoQ5keYpMY8Y; path=/; expires=Thu, 06-Nov-25 10:22:17 GMT; domain=.auth.thanksben.com; HttpOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 104.17.10.16	302	__cf_bm=XsUgJTEuSd3dAX1DYw0pXkjXHPje33WBcDtEl_fjJds-1762422736-1.0.1.1-lUyXfmRD0L7HX1trtgtm0W69sqbVIrXZJUY_CzWL_6xLaOIDFCPlK.Ub88SsnfdV; path=/; expires=Thu, 06-Nov-25 10:22:16 GMT; domain=.auth.thanksben.com; HttpOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2606:4700::6811:910	302	__cf_bm=RwcWSyY0UU3fYJ.Ro1byYZYwFQWZbRyPkaV520BzHSg-1762422737-1.0.1.1-bMt.6YX290caI_5eD1CFE8JjvbQzpQIQHt_SyEzhwGdEkFFFMFIboeHjENGlcrbK; path=/; expires=Thu, 06-Nov-25 10:22:17 GMT; domain=.auth.thanksben.com; HttpOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
B	http://auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2606:4700::6811:a10	302	__cf_bm=JaTD_ZSUM4h8scUVbr.cLU5S_mN52xOhOAd2knlT1sk-1762422737-1.0.1.1-iC3BBly2Z773.S4TD12m17nZVSBPSTTVMXNaYwrUWm7MquYDADFoJHd20h3_d8nL; path=/; expires=Thu, 06-Nov-25 10:22:17 GMT; domain=.auth.thanksben.com; HttpOnly	Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
I	https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F	200		Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
M	http://auth.thanksben.com/u/login/ 104.17.9.16	426		Misconfiguration - main pages should never send http status 400 - 499
M	http://auth.thanksben.com/u/login/ 104.17.10.16	426		Misconfiguration - main pages should never send http status 400 - 499
M	http://auth.thanksben.com/u/login/ 2606:4700::6811:910	426		Misconfiguration - main pages should never send http status 400 - 499
M	http://auth.thanksben.com/u/login/ 2606:4700::6811:a10	426		Misconfiguration - main pages should never send http status 400 - 499
M	https://104.17.9.16/u/login/ 104.17.9.16	403		Misconfiguration - main pages should never send http status 400 - 499
M	https://104.17.10.16/u/login/ 104.17.10.16	403		Misconfiguration - main pages should never send http status 400 - 499
M	https://[2606:4700:0000:0000:0000:0000:6811:0910]/u/login/ 2606:4700::6811:910	403		Misconfiguration - main pages should never send http status 400 - 499
M	https://[2606:4700:0000:0000:0000:0000:6811:0a10]/u/login/ 2606:4700::6811:a10	403		Misconfiguration - main pages should never send http status 400 - 499
N	https://104.17.9.16/u/login/ 104.17.9.16	403		Error - Certificate isn't trusted, RemoteCertificateNameMismatch
N	https://104.17.10.16/u/login/ 104.17.10.16	403		Error - Certificate isn't trusted, RemoteCertificateNameMismatch
N	https://[2606:4700:0000:0000:0000:0000:6811:0910]/u/login/ 2606:4700::6811:910	403		Error - Certificate isn't trusted, RemoteCertificateNameMismatch
N	https://[2606:4700:0000:0000:0000:0000:6811:0a10]/u/login/ 2606:4700::6811:a10	403		Error - Certificate isn't trusted, RemoteCertificateNameMismatch
A	Good: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain auth.thanksben.com, 4 ip addresses.
	Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain auth.thanksben.com, 4 ip addresses.
B	No _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.auth.thanksben.com
	2. Header-Checks
F	www.thanksben.com	Content-Security-Policy		Critical: Missing Header:
F	www.thanksben.com	X-Content-Type-Options		Critical: Missing Header:
F	www.thanksben.com	Referrer-Policy		Critical: Missing Header:
F	www.thanksben.com	Permissions-Policy		Critical: Missing Header:
B	www.thanksben.com	Cross-Origin-Embedder-Policy		Info: Missing Header
B	www.thanksben.com	Cross-Origin-Opener-Policy		Info: Missing Header
B	www.thanksben.com	Cross-Origin-Resource-Policy		Info: Missing Header
	3. DNS- and NameServer - Checks
A	Info:: 16 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 4 Name Servers.
A	Info:: 16 Queries complete, 16 with IPv6, 0 with IPv4.
A	Good: All DNS Queries done via IPv6.
	Ok (4 - 8):: An average of 4.0 queries per domain name server required to find all ip addresses of all name servers.
A	Info:: 4 different Name Servers found: ns-1395.awsdns-46.org, ns-1604.awsdns-08.co.uk, ns-488.awsdns-61.com, ns-784.awsdns-34.net, 4 Name Servers included in Delegation: ns-1395.awsdns-46.org, ns-1604.awsdns-08.co.uk, ns-488.awsdns-61.com, ns-784.awsdns-34.net, 4 Name Servers included in 1 Zone definitions: ns-1395.awsdns-46.org, ns-1604.awsdns-08.co.uk, ns-488.awsdns-61.com, ns-784.awsdns-34.net, 1 Name Servers listed in SOA.Primary: ns-488.awsdns-61.com.
A	Good: Only one SOA.Primary Name Server found.: ns-488.awsdns-61.com.
A	Good: SOA.Primary Name Server included in the delegation set.: ns-488.awsdns-61.com.
A	Good: All Name Server Domain Names have a Public Suffix.
A	Good: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
A	Good: All Name Server ip addresses are public.
A	Info: Ipv4-Subnet-list: 4 Name Servers, 1 different subnets (first Byte): 205., 1 different subnets (first two Bytes): 205.251., 4 different subnets (first three Bytes): 205.251.193., 205.251.195., 205.251.197., 205.251.198.
A	Good: Name Server IPv4-addresses from different subnet found:
A	Info: IPv6-Subnet-list: 4 Name Servers with IPv6, 1 different subnets (first block): 2600:, 1 different subnets (first two blocks): 2600:9000:, 4 different subnets (first three blocks): 2600:9000:5301:, 2600:9000:5303:, 2600:9000:5305:, 2600:9000:5306:, 4 different subnets (first four blocks): 2600:9000:5301:e800:, 2600:9000:5303:1000:, 2600:9000:5305:7300:, 2600:9000:5306:4400:
A	Good: Name Server IPv6 addresses from different subnets found.
A	Good: Nameserver supports TCP connections: 8 good Nameserver
A	Good: Nameserver supports Echo Capitalization: 8 good Nameserver
A	Good: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 8 good Nameserver
A	Good: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 8 good Nameserver
	Nameserver doesn't pass all EDNS-Checks: ns-488.awsdns-61.com: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
A	Good: All SOA have the same Serial Number
A	Good: CAA entries found, creating certificate is limited: digicert.com is allowed to create certificates
A	Good: CAA entries found, creating certificate is limited: letsencrypt.org is allowed to create certificates
	4. Content- and Performance-critical Checks
	https://dcv.central.prod.a0core.net/auth.thanksben.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	403		Fatal: Check of /.well-known/acme-challenge/random-filename has a http status 401 / 403 Not Allowed / Forbidden. A http status 404 - Not Found - is expected. Creating a Letsencrypt certificate via http-01 challenge may not work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
A	Good: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
	https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F	200		Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
	https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F	200		Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
A	Good: Every https connection via port 443 supports the http/2 protocol via ALPN.
A	Good: Some script Elements (type text/javascript) with a src-Attribute have a defer / async - Attribute. So loading and executing these JavaScripts doesn't block parsing and rendering the Html-Output.
	https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 4 script elements without defer/async.
A	Good: All CSS / JavaScript files are sent compressed (gzip, deflate, br checked). That reduces the content of the files. 9 external CSS / JavaScript files found
A	Good: All svg-Images greater 1024 Bytes without internal compression are compressed. Svg is an Xml-Application, so Compression reduces the size of the file. 3 images (type image/svg+xml, image/x-icon, image/vnd.microsoft.icon) found with compression.
A	Good: All images with internal compression not compressed. Some Images (.png, .jpg, .jpeg, .webp, .gif) are already compressed, so an additional compression isn't helpful. 9 images (type image/png, image/jpg, image/jpeg, image/webp, image/gif) found without additional Compression. Not required because these images are already compressed
	Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 1 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 5 with Cache-Control max-age too short (minimum 7 days), 4 with Cache-Control long enough, 10 complete.
	Warning: Images with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 3 image files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 8 with Cache-Control max-age too short (minimum 7 days), 11 with Cache-Control long enough, 22 complete.
A	Good: All checked attribute values are enclosed in quotation marks (" or ').
A	Good: Some img-elements have a valid alt-attribute.: 9 img-elements found, 1 img-elements with correct alt-attributes (defined, not an empty value).
	Wrong: img-elements without alt-attribute or empty alt-attribute found. The alt-attribute ("alternative") is required and should describe the img. So Screenreader and search engines are able to use these informations.: 0 img-elements without alt-attribute, 8 img-elements with empty alt-attribute found.
A	Good: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
A	Duration: 278270 milliseconds, 278.270 seconds

8. Connections

Domain

Port

Cert.

Protocol

KeyExchange

Strength

Cipher

Strength

HashAlgorithm

OCSP stapling

Domain/KeyExchange

IP/Strength

Port/Cipher

Cert./Strength

Protocol/HashAlgorithm

OCSP stapling

www.thanksben.com

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

www.thanksben.com

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=www.thanksben.com
	2	CN=WE1, O=Google Trust Services, C=US
	3	CN=GTS Root R4, O=Google Trust Services LLC, C=US

auth.thanksben.com

104.17.9.16

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

auth.thanksben.com

104.17.9.16

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=auth.thanksben.com
	2	CN=E7, O=Let's Encrypt, C=US

auth.thanksben.com

104.17.10.16

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

auth.thanksben.com

104.17.10.16

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=auth.thanksben.com
	2	CN=E7, O=Let's Encrypt, C=US

auth.thanksben.com

2606:4700::6811:910

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

auth.thanksben.com

2606:4700::6811:910

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=auth.thanksben.com
	2	CN=E7, O=Let's Encrypt, C=US

auth.thanksben.com

2606:4700::6811:a10

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

auth.thanksben.com

2606:4700::6811:a10

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=auth.thanksben.com
	2	CN=E7, O=Let's Encrypt, C=US

dcv.central.prod.a0core.net

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

dcv.central.prod.a0core.net

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

no http/2 via ALPN

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

no http/2 via ALPN

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=*.central.prod.a0core.net
	2	CN=R12, O=Let's Encrypt, C=US

104.17.9.16

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

104.17.9.16

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=eu.auth0.com
	2	CN=E7, O=Let's Encrypt, C=US

104.17.10.16

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

104.17.10.16

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=eu.auth0.com
	2	CN=E7, O=Let's Encrypt, C=US

[2606:4700:0000:0000:0000:0000:6811:0910]

2606:4700::6811:910

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

[2606:4700:0000:0000:0000:0000:6811:0910]

2606:4700::6811:910

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=eu.auth0.com
	2	CN=E7, O=Let's Encrypt, C=US

[2606:4700:0000:0000:0000:0000:6811:0a10]

2606:4700::6811:a10

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

[2606:4700:0000:0000:0000:0000:6811:0a10]

2606:4700::6811:a10

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=eu.auth0.com
	2	CN=E7, O=Let's Encrypt, C=US

9. Certificates

CN=auth.thanksben.com

28.10.2025

26.01.2026
expires in 50 days

auth.thanksben.com - 1 entry

CN=auth.thanksben.com

28.10.2025

26.01.2026
expires in 50 days

auth.thanksben.com - 1 entry

Keyalgorithm	EC Public Key (256 bit, prime256v1)
Signatur:	ECDSA SHA384
Serial Number:	069F0F59AAE972A574042FD47F6B64B7314A
Thumbprint:	2101546167C8D5D2AE9828925060B532B0CF0143
SHA256 / Certificate:	b5SlEpe5r2mFfImQ29lboYlafQRbFYlVYv6R8M7k6Vo=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	a29fb9cee83d71fb4b9a7c5109679869b3cce64f608114a7b67ab1c54acb3d88
SHA256 hex / Subject Public Key Information (SPKI):	a29fb9cee83d71fb4b9a7c5109679869b3cce64f608114a7b67ab1c54acb3d88 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=E7, O=Let's Encrypt, C=US

13.03.2024

13.03.2027
expires in 461 days

CN=E7, O=Let's Encrypt, C=US

13.03.2024

13.03.2027
expires in 461 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00AA75F1E62B8F0A220966D38BBFD4BAA1
Thumbprint:	3B73C17E3DF87CF3AA77F1389219EB5EDD519E7F
SHA256 / Certificate:	rrH9dBDoO8lvXaPGp8LBu4NtH6XLhucIUViQ5Ciodws=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	cbbc559b44d524d6a132bdac672744da3407f12aae5d5f722c5f6c7913871c75
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3466 days

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3466 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	008210CFB0D240E3594463E0BB63828B00
Thumbprint:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:	lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):	96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=eu.auth0.com

08.09.2025

07.12.2025 16:36:05
expires in 0 days

*.edge.tenants.eu.auth0.com, *.eu.auth0.com, *.guardian.eu.auth0.com, *.webtask.eu.auth0.com, eu.auth0.com - 5 entries

CN=eu.auth0.com

08.09.2025

07.12.2025
expires in 0 days

*.edge.tenants.eu.auth0.com, *.eu.auth0.com, *.guardian.eu.auth0.com, *.webtask.eu.auth0.com, eu.auth0.com - 5 entries

Keyalgorithm	EC Public Key (256 bit, prime256v1)
Signatur:	ECDSA SHA384
Serial Number:	068911054E29B6FC68AE324510A5C6F9FE34
Thumbprint:	659100CF38FB221DC28004C5C82509EA33A293C1
SHA256 / Certificate:	f4y2eAzUOpnh/xU8peO+Zyyd6YuhvzCV+N8Y871n5Jg=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	1783274402e967bc024e6c9faa0436e56e523fdddf0997a8a7560ee22354d3b3
SHA256 hex / Subject Public Key Information (SPKI):	1783274402e967bc024e6c9faa0436e56e523fdddf0997a8a7560ee22354d3b3 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=E7, O=Let's Encrypt, C=US

13.03.2024

13.03.2027
expires in 461 days

CN=E7, O=Let's Encrypt, C=US

13.03.2024

13.03.2027
expires in 461 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00AA75F1E62B8F0A220966D38BBFD4BAA1
Thumbprint:	3B73C17E3DF87CF3AA77F1389219EB5EDD519E7F
SHA256 / Certificate:	rrH9dBDoO8lvXaPGp8LBu4NtH6XLhucIUViQ5Ciodws=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	cbbc559b44d524d6a132bdac672744da3407f12aae5d5f722c5f6c7913871c75
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3466 days

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3466 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	008210CFB0D240E3594463E0BB63828B00
Thumbprint:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:	lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):	96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=www.thanksben.com

20.10.2025

18.01.2026
expires in 42 days

www.thanksben.com - 1 entry

CN=www.thanksben.com

20.10.2025

18.01.2026
expires in 42 days

www.thanksben.com - 1 entry

Keyalgorithm	EC Public Key (256 bit, prime256v1)
Signatur:	ECDSA SHA256
Serial Number:	00AAE338721860860F0DF4B1F02A266671
Thumbprint:	C1B418A98AB927A7BE4683BC96F71A8057BE740D
SHA256 / Certificate:	VTyz3YmYCYPru5o33H0FSmNCN8520rQmHZtpFxV5luM=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	984a5cdd06b13a5ee9f524cef063f43a385cdf9696d4e1e6c9535dd8a4e349dc
SHA256 hex / Subject Public Key Information (SPKI):	984a5cdd06b13a5ee9f524cef063f43a385cdf9696d4e1e6c9535dd8a4e349dc (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://o.pki.goog/s/we1/quM
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=WE1, O=Google Trust Services, C=US

13.12.2023

20.02.2029
expires in 1171 days

CN=WE1, O=Google Trust Services, C=US

13.12.2023

20.02.2029
expires in 1171 days

Keyalgorithm	EC Public Key (256 bit, prime256v1)
Signatur:	ECDSA SHA384
Serial Number:	7FF31977972C224A76155D13B6D685E3
Thumbprint:	108FBF794E18EC5347A414E4370CC4506C297AB2
SHA256 / Certificate:	HfwWBfutNY2LyET3bRUgP6ycpcGnn9SFf/ryhk++v5Y=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	908769e8d34477cc2cba0632c88605b22d7294c0840f78596d247c645b1afc0e
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=GTS Root R4, O=Google Trust Services LLC, C=US

15.11.2023

28.01.2028
expires in 782 days

CN=GTS Root R4, O=Google Trust Services LLC, C=US

15.11.2023

28.01.2028
expires in 782 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	7FE530BF331343BEDD821610493D8A1B
Thumbprint:	932BED339AA69212C89375B79304B475490B89A0
SHA256 / Certificate:	drJ7gKWAJ9w88dpo2sFwEO2TmX0LYD4vrb6FASSTtac=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	9847e5653e5e9e847516e5cb818606aa7544a19be67fd7366d506988e8d84347
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE

01.09.1998

28.01.2028
expires in 782 days

CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE

01.09.1998

28.01.2028
expires in 782 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA-1 with RSA Encryption
Serial Number:	040000000001154B5AC394
Thumbprint:	B1BC968BD4F49D622AA89A81F2150152A41D829C
SHA256 / Certificate:	69QQQOS7PsdCyeOB0x7ypBpItmhclufO88HfbNQzHJk=
SHA256 hex / Cert (DANE * 0 1):	ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99
SHA256 hex / PublicKey (DANE * 1 1):	2bcee858158cf5465fc9d76f0dfa312fef25a4dca8501da9b46b67d1fbfa1b64
SHA256 hex / Subject Public Key Information (SPKI):	2bcee858158cf5465fc9d76f0dfa312fef25a4dca8501da9b46b67d1fbfa1b64
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=*.central.prod.a0core.net

06.11.2025

04.02.2026
expires in 59 days

*.central-usw2-2225.prod.a0core.net, *.central.prod.a0core.net, *.teams.central.prod.a0core.net - 3 entries

CN=*.central.prod.a0core.net

06.11.2025

04.02.2026
expires in 59 days

*.central-usw2-2225.prod.a0core.net, *.central.prod.a0core.net, *.teams.central.prod.a0core.net - 3 entries

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	06E226D7FB7E9B09A9EBF0DFB482EDAA3ACD
Thumbprint:	1CE039E22FC9E89899EE175FE85C919B2D5A10CC
SHA256 / Certificate:	DeEjkVyDriWh0QRnND2IHRhdV2h+CqInc+TJgBcfeDU=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	d4d924449fe2e34a607c9d1107259febc3050c0a766d70d958aa4e3fb316dbda
SHA256 hex / Subject Public Key Information (SPKI):	d4d924449fe2e34a607c9d1107259febc3050c0a766d70d958aa4e3fb316dbda (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=R12, O=Let's Encrypt, C=US

13.03.2024

13.03.2027
expires in 461 days

CN=R12, O=Let's Encrypt, C=US

13.03.2024

13.03.2027
expires in 461 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00C212324B70A9B49171DC40F7E285263C
Thumbprint:	EE44782835D8FB31394DA5CEB840DC93849BCF5A
SHA256 / Certificate:	Ex/Od4QBaJmloAIDqe/IDxjrvXVYBxftwVU1gJMINuw=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	919c0df7a787b597ed056ace654b1de9c0387acf349f73734a4fd7b58cf612a4
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3466 days

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3466 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	008210CFB0D240E3594463E0BB63828B00
Thumbprint:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:	lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):	96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuer				last 7 days	active	num Certs
CN=E7, O=Let's Encrypt, C=US				0	1	2
CN=R13, O=Let's Encrypt, C=US				0	1	1
CN=R12, O=Let's Encrypt, C=US				0	0	1

CertSpotter-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
12481255143 leaf cert	CN=R13, O=Let's Encrypt, C=US	2025-10-28 03:29:32	2026-01-26 03:29:31	auth.thanksben.com - 1 entries
12481259278 leaf cert	CN=E7, O=Let's Encrypt, C=US	2025-10-28 03:29:25	2026-01-26 03:29:24	auth.thanksben.com - 1 entries
11672693772 leaf cert	CN=R12, O=Let's Encrypt, C=US	2025-08-29 05:21:35	2025-11-27 05:21:34	auth.thanksben.com - 1 entries
11672690557 leaf cert	CN=E7, O=Let's Encrypt, C=US	2025-08-29 05:21:28	2025-11-27 05:21:27	auth.thanksben.com - 1 entries

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Issuer				last 7 days	active	num Certs
CN=E7, O=Let's Encrypt, C=US				0	1	2
CN=R13, O=Let's Encrypt, C=US				0	1	1
CN=R10, O=Let's Encrypt, C=US				0	0	1
CN=R12, O=Let's Encrypt, C=US				0	0	1
CN=E5, O=Let's Encrypt, C=US				0	0	1

CRT-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
22053875270 leaf cert	CN=R13, O=Let's Encrypt, C=US	2025-10-28 02:29:32	2026-01-26 02:29:31	auth.thanksben.com 1 entries
22053875190 leaf cert	CN=E7, O=Let's Encrypt, C=US	2025-10-28 02:29:25	2026-01-26 02:29:24	auth.thanksben.com 1 entries
20648324930 leaf cert	CN=R12, O=Let's Encrypt, C=US	2025-08-29 03:21:35	2025-11-27 04:21:34	auth.thanksben.com 1 entries
20648320495 precert	CN=E7, O=Let's Encrypt, C=US	2025-08-29 03:21:28	2025-11-27 04:21:27	auth.thanksben.com 1 entries
19350581685 precert	CN=R10, O=Let's Encrypt, C=US	2025-06-30 09:46:57	2025-09-28 09:46:56	auth.thanksben.com 1 entries
19350580270 leaf cert	CN=E5, O=Let's Encrypt, C=US	2025-06-30 09:46:42	2025-09-28 09:46:41	auth.thanksben.com 1 entries

11. Html-Content - Entries

Summary

							Subresource Integrity (SRI)
Domainname	HtmlElement	rel/property	∑	∑ size	∑ problems	∑ int.	∑ ext.	∑ Origin poss.	∑ SRI ParseErrors	∑ SRI valid	∑ SRI missing
https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F	a		47		0			0	0	0
	form		1		0			0	0	0
	img		9	233,143 Bytes	0	0	19	19	0	0	-19
	link	stylesheet	1	110,468 Bytes	0	0	1	1	0	0	-1
	link	other	3	6,307 Bytes	0	0	2	2	0	0	-2
	meta	og	3		0			0	0	0
	meta	twitter	1		0			0	0	0
	meta	other	7		0			0	0	0
	script		9	715,534 Bytes	6	0	9	7	0	1	-6

Details (currently limited to 500 rows - some problems with spam users)

Domainname	Html-Element	name/equiv/ property/rel	href/src/content	HttpStatus	∑	Status
https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F	a		/				1	ok
								ok


	a		/about-us				2	ok
								ok


	a		/benefits-benchmarking				1	ok
								ok


	a		/ben-for-brokers				1	ok
								ok


	a		/blog				1	ok
								ok


	a		/book-a-demo				3	ok
								ok


	a		/careers				3	ok
								ok


	a		/contact				2	ok
								ok


	a		/country-guides				1	ok
								ok


	a		/country-guides/employee-benefits-in-the-uk				1	ok
								ok


	a		/customer-stories				2	ok
								ok


	a		/employee-benefits-catalogue				1	ok
								ok


	a		/features/advanced-communications				1	ok
								ok


	a		/features/rewards-recognition				2	ok
								ok


	a		/features/total-reward-statement				1	ok
								ok


	a		/global-workforce				1	ok
								ok


	a		/how-it-works				1	ok
								ok


	a		/landing-page/the-no-nonsense-guide-to-ai-in-benefits				1	ok
								ok


	a		/legal				2	ok
								ok


	a		/log-in				2	ok
								ok


	a		/mixed-workforce				1	ok
								ok


	a		/newsletter				1	ok
								ok


	a		/podcast				1	ok
								ok


	a		/pricing				2	ok
								ok


	a		/pricing/ben-starter-plan				1	ok
								ok


	a		/products/benefits-management-enrolment				1	ok
								ok


	a		/products/flexible-spending-allowances				1	ok
								ok


	a		/resources				1	ok
								ok


	a		/resources/employee-benefits-cost-calculator				1	ok
								ok


	a		/resources/guides				1	ok
								ok


	a		/resources/policy-templates				1	ok
								ok


	a		/the-no-nonsense-guide-to-ai-in-benefits				1	ok
								ok


	a		/webinars				1	ok
								ok


	a		https://brand.thanksben.com/				1	ok
								ok


	a		https://help.thanksben.com/en/				1	ok
								ok


	a		https://trust.thanksben.com/				1	ok
								ok


	form	get					1	ok
								ok


	img	src	https://cdn.prod.website-files.com/6540cf257cea53a471aad784/6540cf257cea53a471aadb63_mail-01.svg		200		1	ok
	no alt-Attribute			image/svg+xml missing X-Content-Type-Options nosniff				ok
	Cache-Control: must-revalidate, max-age=31536000 with long duration found.			Compression (br): 510/1050 Bytes
	ETag: W/"4dc4b08d28563ed422f23ec6e1e10790"
	Server-Header Access-Control-Allow-Origin: *			Cross-Origin Resource Sharing (CORS) supported
	missing crossorigin=anonymous\|use-credentials and integrity - attribute, possible hash-values: sha256-PLnmpHxEgvvcoQ3iFv0J8ROrDzY3H8iEsmAl08ZN3GA= sha384-RAZJp0RYRZnXcMbYyYD5MdwnsR42BsSuZspITlbNmLaZ6pCx/j/+zoMkl8rApncx sha512-gdL/jtgqIA4FQNNytYTZi276HeTxHWnNpnBT0yx+uRva+O/SkwDQChakdWHxAFp+MYVRIfzzuSPFA2ufxgqufg== <img src="https://cdn.prod.website-files.com/6540cf257cea53a471aad784/6540cf257cea53a471aadb63_mail-01.svg" crossorigin="anonymous" integrity="sha256-PLnmpHxEgvvcoQ3iFv0J8ROrDzY3H8iEsmAl08ZN3GA=" />

	img	src	https://cdn.prod.website-files.com/6540cf257cea53a471aad784/6540cf257cea53a471aadb7d_alert-circle.svg		200		1	ok
	no alt-Attribute			image/svg+xml missing X-Content-Type-Options nosniff				ok
	Cache-Control: must-revalidate, max-age=31536000 with long duration found.			324 Bytes
	ETag: W/"9ee2e092d00f292d0266ca9ae7d96764"
	Server-Header Access-Control-Allow-Origin: *			Cross-Origin Resource Sharing (CORS) supported
	missing crossorigin=anonymous\|use-credentials and integrity - attribute, possible hash-values: sha256-AhAwLBhEZ2GSA7kGoaOIAWdYiDv7IJPqXvLqx5/X8K0= sha384-3VyhVj9iV7EPxgM3orVccm3HJYCLh7AKjfMUYDclUz03490OYAovosdhxILlTjBD sha512-jw/agIxuuaEnWE5SxTHD4bdHIOgoezaukVWUSC/FefDMs1VW/G+jQAeIUHtMGEd2WjsKD9n5XfstPvSYlNM35w== <img src="https://cdn.prod.website-files.com/6540cf257cea53a471aad784/6540cf257cea53a471aadb7d_alert-circle.svg" crossorigin="anonymous" integrity="sha256-AhAwLBhEZ2GSA7kGoaOIAWdYiDv7IJPqXvLqx5/X8K0=" />

	img	src	https://cdn.prod.website-files.com/6540cf257cea53a471aad784/65410fe70126ab97b2246eab_Ben%20logo%20icon.svg		200		1	ok
	alt: Ben logo icon			image/svg+xml missing X-Content-Type-Options nosniff				ok
	Cache-Control: must-revalidate, max-age=31536000 with long duration found.			Compression (br): 624/1323 Bytes
	ETag: W/"f76d048d469fd8c4075e939bcfac89e4"
	Server-Header Access-Control-Allow-Origin: *			Cross-Origin Resource Sharing (CORS) supported
	missing crossorigin=anonymous\|use-credentials and integrity - attribute, possible hash-values: sha256-V+sw/msoUEo2fPiahYZES5FBw98/ACpr4DW/I23giBo= sha384-8L63UbRLc+ktAc1Wpc8ZQnBC61XppAqnFjcsi/L4aCH3oQCY0QPjvisaIKLGl2sm sha512-ngley03lAatFqHY8SJMSrza/VfM9Y0wbJd1w/U2/8U56WioCla5lt5D65KsziK/wsM+X15mxRCwIAKtNbbPdOA== <img src="https://cdn.prod.website-files.com/6540cf257cea53a471aad784/65410fe70126ab97b2246eab_Ben%20logo%20icon.svg" crossorigin="anonymous" integrity="sha256-V+sw/msoUEo2fPiahYZES5FBw98/ACpr4DW/I23giBo=" />

	img	src	https://cdn.prod.website-files.com/6540cf257cea53a471aad784/6890bdab603e93d7e4405ed4_Image%20(17).avif		200		1	ok
	no alt-Attribute			image/avif missing X-Content-Type-Options nosniff				ok
	Cache-Control: must-revalidate, max-age=84600 - max-age too short.			No Compression - 9449 Bytes
	ETag: "746ffbd4c5673bccec7b45c339d25013"
	Server-Header Access-Control-Allow-Origin: *			Cross-Origin Resource Sharing (CORS) supported
	missing crossorigin=anonymous\|use-credentials and integrity - attribute, possible hash-values: sha256-ZBsHleW3IGTtcBx6WJtgnh3kemX4Sts8xWk9F+yNPdw= sha384-5JhL7IYxXU3ax163vsi9HgERBa8ykidxHktGg5wM9BLSCTZgOUwvW77ejVreviJl sha512-Q95l5u/mHSQPEkDMFOyYE9lsGX59XyZQTMNrtjqkMiHE90V7jcvPKxXZm6UiixalGuaGXLMpI1byTELsTwxAcg== <img src="https://cdn.prod.website-files.com/6540cf257cea53a471aad784/6890bdab603e93d7e4405ed4_Image%20(17).avif" crossorigin="anonymous" integrity="sha256-ZBsHleW3IGTtcBx6WJtgnh3kemX4Sts8xWk9F+yNPdw=" />

	img	src	https://cdn.prod.website-files.com/6540cf257cea53a471aad784/6890bed3a2c26923a148034f_globe-04.svg		200		1	ok
	no alt-Attribute			image/svg+xml missing X-Content-Type-Options nosniff				ok
	Cache-Control: must-revalidate, max-age=31536000 with long duration found.			Compression (br): 832/1593 Bytes
	ETag: W/"07b2298d2103ab9f8c527ff53f12eb6e"
	Server-Header Access-Control-Allow-Origin: *			Cross-Origin Resource Sharing (CORS) supported
	missing crossorigin=anonymous\|use-credentials and integrity - attribute, possible hash-values: sha256-1fCKe6gX6om6quOUnXDPyTtRAEovrK1dEPrZPDdmHyQ= sha384-kh55bj/QgEQY+D91g/B2kgygLNCzZZoWRAb277JlZYJH4vRlXcW8TdBV512HMoud sha512-RsVegb5YGM7WeUoDjfATaunWTOd62nGCENekNuPRetWrcjuBO6w4M3T5oCbKAPH6KJ70Jh8oJMBTvbDtH2Qzgw== <img src="https://cdn.prod.website-files.com/6540cf257cea53a471aad784/6890bed3a2c26923a148034f_globe-04.svg" crossorigin="anonymous" integrity="sha256-1fCKe6gX6om6quOUnXDPyTtRAEovrK1dEPrZPDdmHyQ=" />

	img	src	https://cdn.prod.website-files.com/6540cf257cea53a471aad784/6890bef526d2687b7b0b2873_users-03.svg		200		1	ok
	no alt-Attribute			image/svg+xml missing X-Content-Type-Options nosniff				ok
	Cache-Control: must-revalidate, max-age=31536000 with long duration found.			535 Bytes
	ETag: W/"f4abd5b9002751b3acad85f6c2dc9aa4"
	Server-Header Access-Control-Allow-Origin: *			Cross-Origin Resource Sharing (CORS) supported
	missing crossorigin=anonymous\|use-credentials and integrity - attribute, possible hash-values: sha256-0j3x5+t28pNVaKsAnFgh6X9Sl9+fwvbkeRcHUhjSGRk= sha384-hTiVPzBDmz0i25jejoYy+ujtaSHWwk01UdysqLQybk36QA+X0xHAN7JbYC4O7hR7 sha512-MtRd11+0sTHDd25zdzuBt7q6728+ndbAt+VRM2uurqT9CV3VUBdkKaDYijWqtZgXuaEhGd9eTFR1kybzPegJPA== <img src="https://cdn.prod.website-files.com/6540cf257cea53a471aad784/6890bef526d2687b7b0b2873_users-03.svg" crossorigin="anonymous" integrity="sha256-0j3x5+t28pNVaKsAnFgh6X9Sl9+fwvbkeRcHUhjSGRk=" />

	img	src	https://cdn.prod.website-files.com/6540cf257cea53a471aad784/6540cf257cea53a471aadb87_9ec8e4616e36066a1713441cdd29b289.webp		200		1	ok
	no alt-Attribute			image/webp missing X-Content-Type-Options nosniff				ok
		Cache-Control: must-revalidate, max-age=84600 - max-age too short.		No Compression - 14952 Bytes
	ETag: "639c7ba0707af4e3e31318a2d3cd3009"
		srcset	https://cdn.prod.website-files.com/6540cf257cea53a471aad784/6540cf257cea53a471aadb87_9ec8e4616e36066a1713441cdd29b289-p-500.png 500w, https://cdn.prod.website-files.com/6540cf257cea53a471aad784/6540cf257cea53a471aadb87_9ec8e4616e36066a1713441cdd29b289.webp 640w				1	ok
								ok
		https://cdn.prod.website-files.com/6540cf257cea53a471aad784/6540cf257cea53a471aadb87_9ec8e4616e36066a1713441cdd29b289-p-500.png 500w			200		1	ok
				image/webp missing X-Content-Type-Options nosniff				ok
		Cache-Control: must-revalidate, max-age=84600 - max-age too short.		No Compression - 12750 Bytes
	ETag: "8b7a1410f4ef9797cc2b7b35a4199909"
		https://cdn.prod.website-files.com/6540cf257cea53a471aad784/6540cf257cea53a471aadb87_9ec8e4616e36066a1713441cdd29b289.webp 640w			200		1	ok
				image/webp missing X-Content-Type-Options nosniff				ok
		Cache-Control: must-revalidate, max-age=84600 - max-age too short.		No Compression - 14952 Bytes
	ETag: "639c7ba0707af4e3e31318a2d3cd3009"
	img	src	https://cdn.prod.website-files.com/6540cf257cea53a471aad784/68540eb7a71094369a09851a_35edf5d750c92fa8e849f163236717a9_684c0a35bc0cc732394bae1c_cp-new-image-p-2000.avif		200		1	ok
	no alt-Attribute			image/avif missing X-Content-Type-Options nosniff				ok
		Cache-Control: must-revalidate, max-age=84600 - max-age too short.		No Compression - 161201 Bytes
	ETag: "7e8ecda426593d0533b430c3f893073d"
		srcset	https://cdn.prod.website-files.com/6540cf257cea53a471aad784/68540eb7a71094369a09851a_35edf5d750c92fa8e849f163236717a9_684c0a35bc0cc732394bae1c_cp-new-image-p-2000-p-500.avif 500w, https://cdn.prod.website-files.com/6540cf257cea53a471aad784/68540eb7a71094369a09851a_35edf5d750c92fa8e849f163236717a9_684c0a35bc0cc732394bae1c_cp-new-image-p-2000-p-800.avif 800w, https://cdn.prod.website-files.com/6540cf257cea53a471aad784/68540eb7a71094369a09851a_35edf5d750c92fa8e849f163236717a9_684c0a35bc0cc732394bae1c_cp-new-image-p-2000.avif 1216w				1	ok
								ok
		https://cdn.prod.website-files.com/6540cf257cea53a471aad784/68540eb7a71094369a09851a_35edf5d750c92fa8e849f163236717a9_684c0a35bc0cc732394bae1c_cp-new-image-p-2000-p-500.avif 500w			200		1	ok
				image/avif missing X-Content-Type-Options nosniff				ok
		Cache-Control: must-revalidate, max-age=84600 - max-age too short.		No Compression - 36242 Bytes
	ETag: "2cabaa76d5e76386c6581823d2ddc905"
		https://cdn.prod.website-files.com/6540cf257cea53a471aad784/68540eb7a71094369a09851a_35edf5d750c92fa8e849f163236717a9_684c0a35bc0cc732394bae1c_cp-new-image-p-2000-p-800.avif 800w			200		1	ok
				image/avif missing X-Content-Type-Options nosniff				ok
		Cache-Control: must-revalidate, max-age=84600 - max-age too short.		No Compression - 87684 Bytes
	ETag: "6ec569dbfa32cdedecb06905c48454f5"
		https://cdn.prod.website-files.com/6540cf257cea53a471aad784/68540eb7a71094369a09851a_35edf5d750c92fa8e849f163236717a9_684c0a35bc0cc732394bae1c_cp-new-image-p-2000.avif 1216w			200		1	ok
				image/avif missing X-Content-Type-Options nosniff				ok
		Cache-Control: must-revalidate, max-age=84600 - max-age too short.		No Compression - 161201 Bytes
	ETag: "7e8ecda426593d0533b430c3f893073d"
	img	src	https://cdn.prod.website-files.com/6540cf257cea53a471aad784/68b97f03c9a733d401af94df_image_2025-09-04_13-41-04.webp		200		1	ok
	no alt-Attribute			image/webp missing X-Content-Type-Options nosniff				ok
		Cache-Control: must-revalidate, max-age=31536000 with long duration found.		No Compression - 44716 Bytes
	ETag: "c6fdc7b2c9a046d4b2563e5b46a7bdbf"
		srcset	https://cdn.prod.website-files.com/6540cf257cea53a471aad784/68b97f03c9a733d401af94df_image_2025-09-04_13-41-04-p-500.webp 500w, https://cdn.prod.website-files.com/6540cf257cea53a471aad784/68b97f03c9a733d401af94df_image_2025-09-04_13-41-04-p-800.webp 800w, https://cdn.prod.website-files.com/6540cf257cea53a471aad784/68b97f03c9a733d401af94df_image_2025-09-04_13-41-04-p-1080.webp 1080w, https://cdn.prod.website-files.com/6540cf257cea53a471aad784/68b97f03c9a733d401af94df_image_2025-09-04_13-41-04-p-1600.webp 1600w, https://cdn.prod.website-files.com/6540cf257cea53a471aad784/68b97f03c9a733d401af94df_image_2025-09-04_13-41-04.webp 1920w				1	ok
								ok
		https://cdn.prod.website-files.com/6540cf257cea53a471aad784/68b97f03c9a733d401af94df_image_2025-09-04_13-41-04-p-500.webp 500w			200		1	ok
				image/webp missing X-Content-Type-Options nosniff				ok
		Cache-Control: must-revalidate, max-age=31536000 with long duration found.		No Compression - 5632 Bytes
	ETag: "f42d7ffcecc0f7d3b52feb8ed627b764"
		https://cdn.prod.website-files.com/6540cf257cea53a471aad784/68b97f03c9a733d401af94df_image_2025-09-04_13-41-04-p-800.webp 800w			200		1	ok
				image/webp missing X-Content-Type-Options nosniff				ok
		Cache-Control: must-revalidate, max-age=31536000 with long duration found.		No Compression - 9574 Bytes
	ETag: "677a6ee0fc0d921526785d6aace1f190"
		https://cdn.prod.website-files.com/6540cf257cea53a471aad784/68b97f03c9a733d401af94df_image_2025-09-04_13-41-04-p-1080.webp 1080w			200		1	ok
				image/webp missing X-Content-Type-Options nosniff				ok
		Cache-Control: must-revalidate, max-age=31536000 with long duration found.		No Compression - 14260 Bytes
	ETag: "4f888546e1cd55129d92b655e44f62cc"
		https://cdn.prod.website-files.com/6540cf257cea53a471aad784/68b97f03c9a733d401af94df_image_2025-09-04_13-41-04-p-1600.webp 1600w			200		1	ok
				image/webp missing X-Content-Type-Options nosniff				ok
		Cache-Control: must-revalidate, max-age=31536000 with long duration found.		No Compression - 23574 Bytes
	ETag: "321df6174a6701b9f0e9cdc48c799f33"
		https://cdn.prod.website-files.com/6540cf257cea53a471aad784/68b97f03c9a733d401af94df_image_2025-09-04_13-41-04.webp 1920w			200		1	ok
				image/webp missing X-Content-Type-Options nosniff				ok
		Cache-Control: must-revalidate, max-age=31536000 with long duration found.		No Compression - 44716 Bytes
	ETag: "c6fdc7b2c9a046d4b2563e5b46a7bdbf"
	link	apple-touch-icon	https://cdn.prod.website-files.com/6540cf257cea53a471aad784/654e286603cb2ad915638e27_Variant6-1.png		200		1	ok
				image/png missing X-Content-Type-Options nosniff				ok
	Cache-Control: must-revalidate, max-age=31536000 with long duration found.			No Compression - 5524 Bytes
	ETag: "7439640766b967a29dbc6417b3bd409d"
	Server-Header Access-Control-Allow-Origin: *			Cross-Origin Resource Sharing (CORS) supported
	missing crossorigin=anonymous\|use-credentials and integrity - attribute, possible hash-values: sha256-bvlG8dQHcqClhtEsDNkxVUpOCUm7ydOhADipFTMePso= sha384-Q7n5u6ZnFMtrnHqKyuiZiAAV68XglF0oGB6MQkPb1K8z5DGqU8HQQNa3n1V+AUic sha512-7do5RkaWWiFprZK4H28Vzw7A6RVZ5oAESCUMn4EHEoXvHXQvLomdz+Rjndl8tEYR1t0Sub/p4WZxb58eyngZkQ== <link rel="apple-touch-icon" href="https://cdn.prod.website-files.com/6540cf257cea53a471aad784/654e286603cb2ad915638e27_Variant6-1.png" crossorigin="anonymous" integrity="sha256-bvlG8dQHcqClhtEsDNkxVUpOCUm7ydOhADipFTMePso=" />

	link	canonical	https://www.thanksben.com/log-in				1	ok
								ok


	link	shortcut icon	https://cdn.prod.website-files.com/6540cf257cea53a471aad784/654e285edc5b054a2ed01223_Variant6.png		200		1	ok
				image/png missing X-Content-Type-Options nosniff				ok
	Cache-Control: must-revalidate, max-age=31536000 with long duration found.			No Compression - 783 Bytes
	ETag: "1b9526eebcab6028387242bb053e373f"
	Server-Header Access-Control-Allow-Origin: *			Cross-Origin Resource Sharing (CORS) supported
	missing crossorigin=anonymous\|use-credentials and integrity - attribute, possible hash-values: sha256-xOJUdews75QC1dZ/P8uaIYu3pU2ygenK2P2qkl+9YRQ= sha384-MIaYvZ0+zwZdab7ik4sWwDtmF1kypfFdjv/87tVDTpMdt+PSl+B6d9a83Udq6Nd9 sha512-qj+I6thWyBd2Ge7S0ba6eIdQkFTnlpDn2K5klurL3HBfUMe5GJVq/m6pSmSBjXPdry7AozB1Vyp2yqBiUI3AEw== <link rel="shortcut icon" href="https://cdn.prod.website-files.com/6540cf257cea53a471aad784/654e285edc5b054a2ed01223_Variant6.png" crossorigin="anonymous" integrity="sha256-xOJUdews75QC1dZ/P8uaIYu3pU2ygenK2P2qkl+9YRQ=" />

	link	stylesheet	https://cdn.prod.website-files.com/6540cf257cea53a471aad784/css/ben-staging.webflow.shared.ec2c8dbef.min.css		200		1	ok
				text/css missing X-Content-Type-Options nosniff				ok
	Cache-Control: public, max-age=31536000, immutable - with long duration found.			Compression (br): 110468/649840 Bytes
	ETag: W/"ec2c8dbef678fce8f1eca3c59733bb09"
	Server-Header Access-Control-Allow-Origin: *			Cross-Origin Resource Sharing (CORS) supported
	missing crossorigin=anonymous\|use-credentials and integrity - attribute, possible hash-values: sha256-YFKpxg88mtKddBq2+jaJI4aufM9Uy3sU3wMajZ4c/wQ= sha384-amKwbGkIacjH6jWXztkTyEai94baMx5i0ZOhUvSTg7+rh2RmwT2/Pd6KfLqWOMnR sha512-2IlpTNn2edTDC2bsfHZ4f/OlLDsMbmMGqRO5E9UH525XUfByoMX6kBZkyrKyrXgbDMG1I6yttamAo92fOgCG2w== <link rel="stylesheet" href="https://cdn.prod.website-files.com/6540cf257cea53a471aad784/css/ben-staging.webflow.shared.ec2c8dbef.min.css" crossorigin="anonymous" integrity="sha256-YFKpxg88mtKddBq2+jaJI4aufM9Uy3sU3wMajZ4c/wQ=" />

	meta	charset	utf-8				1	ok
								ok


	meta	og:description	Login and get access to your company benefits. Enter your email to be redirected to your company login page.				1	ok
								ok


	meta	og:title	Login to the Ben employee benefits platform				1	ok
								ok


	meta	og:type	website				1	ok
								ok


	meta	twitter:description	Login and get access to your company benefits. Enter your email to be redirected to your company login page.				1	ok
								ok


	meta	twitter:title	Login to the Ben employee benefits platform				1	ok
								ok


	meta	description	Login and get access to your company benefits. Enter your email to be redirected to your company login page.				1	ok
								ok


	meta	google-site-verification	YCaCJnLOlRRPmuDUSPRBSHBcbZplcmFjdC2hxLbe0SM				1	ok
								ok


	meta	robots	noindex				1	ok
								ok


	meta	twitter:card	summary_large_image				1	ok
								ok


	meta	viewport	width=device-width, initial-scale=1				1	ok
								ok


	script	src	//js.hsforms.net/forms/embed/v2.js		200		1	Problems with Content-Type - Header - see details
	Missing defer / async attribute.			application/javascript; charset=utf-8 X-Content-Type-Options nosniff found		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
	Cache-Control: max-age=300, s-maxage=600 - max-age too short.			Compression (gzip): 191627/590015 Bytes
	ETag: W/"ee75b7af42f690f585d77a5369807b3e"
	Server-Header Access-Control-Allow-Origin: *			Cross-Origin Resource Sharing (CORS) supported
	missing crossorigin=anonymous\|use-credentials and integrity - attribute, possible hash-values: sha256-aGgkF+V+v9BvW54Q/OlpKR67/TbbNrz0ZhHQ3klUjcc= sha384-w3VA0C+bu8BJzyV5kh727ppoddblyoOG3Cmmk3QAuuBAQdqPEDVwCruPSWahV0OD sha512-bn16XhNWxSRvfRNvxq/b/zlkNUc76Z7ESXs0x4ONPe9/Y9DZ2oSrZf5V+iT0vf2pdQa/iWeu4yIxjpZSkpEkAA== <script src="//js.hsforms.net/forms/embed/v2.js" crossorigin="anonymous" integrity="sha256-aGgkF+V+v9BvW54Q/OlpKR67/TbbNrz0ZhHQ3klUjcc=" />

	script	src	//js.hs-scripts.com/6629053.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found			application/javascript; charset=utf-8 X-Content-Type-Options nosniff found		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
	Cache-Control: public, max-age=90 - max-age too short.			Compression (gzip): 637/2038 Bytes
	Server-Header Access-Control-Allow-Origin: https://www.thanksben.com			Cross-Origin Resource Sharing (CORS) not supported

	script	src	https://api.consentpro.com/v1/cdn/runtime/6540cf257cea53a471aad784/ff2bad7d6f2159c8.js		200		1	Problems with Content-Type - Header - see details
	async attribute found			application/javascript missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
	Cache-Control: public, max-age=31536000, immutable - with long duration found.			Compression (br): 308999/1079670 Bytes
	Server-Header Access-Control-Allow-Origin: *			Cross-Origin Resource Sharing (CORS) supported
	missing crossorigin=anonymous\|use-credentials and integrity - attribute, possible hash-values: sha256-x6Lv+tHzfjSkIK9lT78b5ZYRRGx2tueXgcO4sZMY1ao= sha384-EGh8p1tMOBMStBgB4m7+BA0h8uot1ceamtapeCBan//rkRPlpb9tOqQwFNEa9u/U sha512-3dwZ5L1M0IEXzDZLe4kHZ92lWT5JXPU3eajmDGCQGVa6KXnl79gxdzOuaKDD9NcH16OHKEIqX/Qn92NSUqTsQA== <script src="https://api.consentpro.com/v1/cdn/runtime/6540cf257cea53a471aad784/ff2bad7d6f2159c8.js" crossorigin="anonymous" integrity="sha256-x6Lv+tHzfjSkIK9lT78b5ZYRRGx2tueXgcO4sZMY1ao=" />

	script	src	https://cdn.prod.website-files.com/6540cf257cea53a471aad784%2F6544eda5f000985a163a8687%2F6874dcb6c6f0683f896b0e4f%2Ffinsweetcomponentsconfig-1.0.2.js		200		1	Problems with Content-Type - Header - see details
	async attribute found			application/javascript missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
	Cache-Control: must-revalidate, max-age=84600 - max-age too short.			Compression (gzip): 735/1526 Bytes
	ETag: "8fd348b05a463d4e0cc04bc96e14b020"
	Server-Header Access-Control-Allow-Origin: *			Cross-Origin Resource Sharing (CORS) supported
	missing crossorigin=anonymous\|use-credentials and integrity - attribute, possible hash-values: sha256-yOCtdMq8flPPJlgXewYjPiLUpI6u2eKCSrDqJwXWe84= sha384-jyum9Jwra+9uRq9zVJgVKE/aKVwTbc/GLjCi/2YItTbzEZrEvecIYcB57QyB0hvd sha512-8KrnZiQj+OPpc5DYfQ13LXnNF20j3JHtO6wJMISL7iuhavgf6NkkK5jcKiW34q/U9ZPX1RvXwsPIBEfBH/XOZg== <script src="https://cdn.prod.website-files.com/6540cf257cea53a471aad784%2F6544eda5f000985a163a8687%2F6874dcb6c6f0683f896b0e4f%2Ffinsweetcomponentsconfig-1.0.2.js" crossorigin="anonymous" integrity="sha256-yOCtdMq8flPPJlgXewYjPiLUpI6u2eKCSrDqJwXWe84=" />

	script	src	https://cdn.prod.website-files.com/6540cf257cea53a471aad784/js/webflow.7cbb6ff3.7cb2349e10c4a2fe.js		200		1	ok
	Missing defer / async attribute.			text/javascript missing X-Content-Type-Options nosniff				ok
	Cache-Control: public, max-age=31536000, immutable - with long duration found.			Compression (br): 84619/610136 Bytes
	ETag: W/"e406b4d443d2a5c7b24a3d72a98607ce"
	Server-Header Access-Control-Allow-Origin: *			Cross-Origin Resource Sharing (CORS) supported
	missing crossorigin=anonymous\|use-credentials and integrity - attribute, possible hash-values: sha256-OX/g25OyxffnsbQt7qUEI3lSarESpR2Nx9bCWLhDfWI= sha384-hjqXYCie4w55WSQQY0bsnRMBRTFeFKV/Ui7p97rqPs/gz/TTYAZq1+cWUyLa1mXv sha512-UKvVKA2fvscDQCKJHuoKqW5scEocFvnMkZm2e3lnpEuC6y33GpUGzjNiMYVMv59+8iZacausiv6J07kWzcGLyg== <script src="https://cdn.prod.website-files.com/6540cf257cea53a471aad784/js/webflow.7cbb6ff3.7cb2349e10c4a2fe.js" crossorigin="anonymous" integrity="sha256-OX/g25OyxffnsbQt7qUEI3lSarESpR2Nx9bCWLhDfWI=" />

	script	src	https://cdn.prod.website-files.com/6540cf257cea53a471aad784/js/webflow.schunk.57d5559d2f0cd9f8.js		200		1	ok
	Missing defer / async attribute.			text/javascript missing X-Content-Type-Options nosniff				ok
	Cache-Control: public, max-age=31536000, immutable - with long duration found.			Compression (br): 98054/367274 Bytes
	ETag: W/"6ed8c285ce228cd4ad03696a895d3fb0"
	Server-Header Access-Control-Allow-Origin: *			Cross-Origin Resource Sharing (CORS) supported
	missing crossorigin=anonymous\|use-credentials and integrity - attribute, possible hash-values: sha256-UlLVVk1cZM+x5Tqeo+fcWxSrl9QPz6KAhzwR4IGp+yY= sha384-i4OFK6WLNM1uYqVhUYjs3j+XCeERClkPxVruQKn4Nmqnm+KxRUqflE4FssTahGwJ sha512-ZEcXKjU5bF+TjcFX4ebjLxijMSBqjf3E6OJWzAZDDdlApEcdiEanIpD3UwHqtcgJ/vv0SkLvLuXxI/akbymhvA== <script src="https://cdn.prod.website-files.com/6540cf257cea53a471aad784/js/webflow.schunk.57d5559d2f0cd9f8.js" crossorigin="anonymous" integrity="sha256-UlLVVk1cZM+x5Tqeo+fcWxSrl9QPz6KAhzwR4IGp+yY=" />

	script	src	https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6540cf257cea53a471aad784		200		1	Problems with Content-Type - Header - see details
	Missing defer / async attribute.			application/javascript missing X-Content-Type-Options nosniff		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
	Cache-Control: must-revalidate, max-age=84600 - max-age too short.			Compression (br): 30121/89476 Bytes
	ETag: W/"dc5e7f18c8d36ac1d3d4753a87c98d0a"
	Server-Header Access-Control-Allow-Origin: *			Cross-Origin Resource Sharing (CORS) supported
	integrity: sha256-9/aliU8dGd2tb6OSsuzixeV4y/faTqgFtohetphbbj0= crossorigin: anonymous				No SRI Parse error			valid

	script	src	https://hubspotv2.use1-marketplace-1p-apps-prod-red.if.webflow.services/static/disable-hubspot-chatbot.js		200		1	ok
	defer attribute found async attribute found			text/javascript; charset=utf-8 missing X-Content-Type-Options nosniff				ok
	No Cache-Control - header			105 Bytes
	Server-Header Access-Control-Allow-Origin: *			Cross-Origin Resource Sharing (CORS) supported
	missing crossorigin=anonymous\|use-credentials and integrity - attribute, possible hash-values: sha256-jru9pz9qsPtoYSVFE52TKOdPxAyDXLnaR0QuJ9GfE1Y= sha384-NSfUE73AxtdaObGs61QjYCOevjJAKCKcdO/NNrHcSrKZkjNae7gkh4/TPPN55eHE sha512-0Ohw3Q2NiWhaZmQSFDCPnpluhmxfNzrLSi+x7yk63fk+yS+cXANo8eO0cHizgHXuXr7+b8Kt2Zd26cLjSeI1Tw== <script src="https://hubspotv2.use1-marketplace-1p-apps-prod-red.if.webflow.services/static/disable-hubspot-chatbot.js" crossorigin="anonymous" integrity="sha256-jru9pz9qsPtoYSVFE52TKOdPxAyDXLnaR0QuJ9GfE1Y=" />

	script	src	https://js.hs-scripts.com/6629053.js		200		1	Problems with Content-Type - Header - see details
	defer attribute found async attribute found			application/javascript; charset=utf-8 X-Content-Type-Options nosniff found		This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.		Problems with Content-Type - Header - see details
	Cache-Control: public, max-age=90 - max-age too short.			Compression (gzip): 637/2038 Bytes
	Server-Header Access-Control-Allow-Origin: https://www.thanksben.com			Cross-Origin Resource Sharing (CORS) not supported

12. Html-Parsing via https://validator.w3.org/nu/

	Type	Message	num found
Url used (first standard-https-result with http status 200): https://www.thanksben.com/log-in?iss=https%3A%2F%2Fauth.thanksben.com%2F

Summary
	Good: No non-document-errors
	32 errors
	11 warnings
1.	error	CSS: Parse Error.	10
2.	error	CSS: `color`: Parse Error.	6
3.	error	Element `style` not allowed as child of element `div` in this context. (Suppressing further errors from this subtree.)	4
4.	error	Attribute `fs-consent-categories` not allowed on element `script` at this point.	2
5.	error	Attribute `fs-consent-scripttype` not allowed on element `script` at this point.	2
6.	error	Bad value `fs-consent` for attribute `type` on element `script`: Subtype missing.	2
7.	error	Attribute `finsweet` not allowed on element `script` at this point.	2
8.	error	CSS: `font-smoothing`: Property `font-smoothing` doesn't exist.	2
9.	error	Attribute `siteid` not allowed on element `script` at this point.	1
10.	error	Attribute `fs-scrolldisable-element` not allowed on element `div` at this point.	1
11.	warning	The `type` attribute is unnecessary for JavaScript resources.	9
12.	warning	The `charset` attribute on the `script` element is obsolete.	1
13.	warning	The `navigation` role is unnecessary for element `nav`.	1
Details
	Type	Message + Sample
1	error	Bad value `fs-consent` for attribute `type` on element `script`: Subtype missing.
		From line 29, column 1 to line 29, column 119
		nsent --> <script type="fs-consent" id="vwoCode" fs-consent-categories="personalization" fs-consent-scripttype="text/javascript"> wind
2	error	Attribute `fs-consent-categories` not allowed on element `script` at this point.
		From line 29, column 1 to line 29, column 119
		nsent --> <script type="fs-consent" id="vwoCode" fs-consent-categories="personalization" fs-consent-scripttype="text/javascript"> wind
3	error	Attribute `fs-consent-scripttype` not allowed on element `script` at this point.
		From line 29, column 1 to line 29, column 119
		nsent --> <script type="fs-consent" id="vwoCode" fs-consent-categories="personalization" fs-consent-scripttype="text/javascript"> wind
4	error	Attribute `siteid` not allowed on element `script` at this point.
		From line 85, column 10 to line 85, column 252
		</script><script src="https://cdn.prod.website-files.com/6540cf257cea53a471aad784%2F6544eda5f000985a163a8687%2F6874dcb6c6f0683f896b0e4f%2Ffinsweetcomponentsconfig-1.0.2.js" type="module" async="" siteId="6540cf257cea53a471aad784" finsweet="components"></scri
5	error	Attribute `finsweet` not allowed on element `script` at this point.
		From line 85, column 10 to line 85, column 252
		</script><script src="https://cdn.prod.website-files.com/6540cf257cea53a471aad784%2F6544eda5f000985a163a8687%2F6874dcb6c6f0683f896b0e4f%2Ffinsweetcomponentsconfig-1.0.2.js" type="module" async="" siteId="6540cf257cea53a471aad784" finsweet="components"></scri
6	error	Attribute `finsweet` not allowed on element `script` at this point.
		From line 85, column 262 to line 85, column 416
		></script><script src="https://api.consentpro.com/v1/cdn/runtime/6540cf257cea53a471aad784/ff2bad7d6f2159c8.js" type="text/javascript" finsweet="consentpro" async=""></scri
7	error	Element `style` not allowed as child of element `div` in this context. (Suppressing further errors from this subtree.)
		From line 85, column 875 to line 85, column 881
		w-embed"><style> /*
8	error	CSS: `font-smoothing`: Property `font-smoothing` doesn't exist.
		From line 117, column 21 to line 117, column 31
		moothing: antialiased;
9	error	CSS: Parse Error.
		From line 234, column 4 to line 235, column 2
		} }@media
10	error	CSS: Parse Error.
		From line 238, column 4 to line 239, column 2
		rtant; }} @m
11	error	CSS: Parse Error.
		From line 239, column 4 to line 240, column 2
		t; } }@media
12	error	CSS: Parse Error.
		From line 243, column 4 to line 244, column 2
		rtant; }} .
13	error	CSS: Parse Error.
		From line 244, column 4 to line 246, column 2
		t; } }.margi
14	error	CSS: `color`: Parse Error.
		From line 380, column 34 to line 380, column 34
		nd-primary--500); /*Replace wi
15	error	CSS: `color`: Parse Error.
		From line 558, column 34 to line 558, column 34
		nd-primary--500); } .blog
16	error	CSS: `color`: Parse Error.
		From line 562, column 36 to line 562, column 45
		ary--500) !important; }
17	error	Attribute `fs-scrolldisable-element` not allowed on element `div` at this point.
		From line 603, column 174 to line 603, column 413
		</a></div><div data-animation="default" class="nav_component w-nav" data-easing2="ease" fs-scrolldisable-element="smart-nav" data-easing="ease" data-collapse="medium" data-w-id="4b8483bb-e05d-87c0-35fc-1c33de685c62" role="banner" data-duration="400"><div c
18	error	Element `style` not allowed as child of element `div` in this context. (Suppressing further errors from this subtree.)
		From line 691, column 2048 to line 691, column 2054
		w-embed"><style> .hu
19	error	Element `style` not allowed as child of element `div` in this context. (Suppressing further errors from this subtree.)
		From line 826, column 50 to line 826, column 56
		w-embed"><style> /*
20	error	CSS: `font-smoothing`: Property `font-smoothing` doesn't exist.
		From line 858, column 21 to line 858, column 31
		moothing: antialiased;
21	error	CSS: Parse Error.
		From line 975, column 4 to line 976, column 2
		} }@media
22	error	CSS: Parse Error.
		From line 979, column 4 to line 980, column 2
		rtant; }} @m
23	error	CSS: Parse Error.
		From line 980, column 4 to line 981, column 2
		t; } }@media
24	error	CSS: Parse Error.
		From line 984, column 4 to line 985, column 2
		rtant; }} .
25	error	CSS: Parse Error.
		From line 985, column 4 to line 987, column 2
		t; } }.margi
26	error	CSS: `color`: Parse Error.
		From line 1121, column 34 to line 1121, column 34
		nd-primary--500); /*Replace wi
27	error	CSS: `color`: Parse Error.
		From line 1299, column 34 to line 1299, column 34
		nd-primary--500); } .blog
28	error	CSS: `color`: Parse Error.
		From line 1303, column 36 to line 1303, column 45
		ary--500) !important; }
29	error	Element `style` not allowed as child of element `div` in this context. (Suppressing further errors from this subtree.)
		From line 1421, column 46 to line 1421, column 52
		w-embed"><style> /*
30	error	Bad value `fs-consent` for attribute `type` on element `script`: Subtype missing.
		From line 1472, column 1 to line 1472, column 168
		nsent --> <script type="fs-consent" id="hs-script-loader" defer="" src="//js.hs-scripts.com/6629053.js" fs-consent-categories="analytics" fs-consent-scripttype="text/javascript"></scri
31	error	Attribute `fs-consent-categories` not allowed on element `script` at this point.
		From line 1472, column 1 to line 1472, column 168
		nsent --> <script type="fs-consent" id="hs-script-loader" defer="" src="//js.hs-scripts.com/6629053.js" fs-consent-categories="analytics" fs-consent-scripttype="text/javascript"></scri
32	error	Attribute `fs-consent-scripttype` not allowed on element `script` at this point.
		From line 1472, column 1 to line 1472, column 168
		nsent --> <script type="fs-consent" id="hs-script-loader" defer="" src="//js.hs-scripts.com/6629053.js" fs-consent-categories="analytics" fs-consent-scripttype="text/javascript"></scri
33	warning	The `type` attribute is unnecessary for JavaScript resources.
		From line 1, column 1400 to line 1, column 1430
		ext/css"/><script type="text/javascript">!funct
34	warning	The `charset` attribute on the `script` element is obsolete.
		From line 26, column 1 to line 26, column 88
		Form --> <script charset="utf-8" type="text/javascript" src="//js.hsforms.net/forms/embed/v2.js"></scri
35	warning	The `type` attribute is unnecessary for JavaScript resources.
		From line 26, column 1 to line 26, column 88
		Form --> <script charset="utf-8" type="text/javascript" src="//js.hsforms.net/forms/embed/v2.js"></scri
36	warning	The `type` attribute is unnecessary for JavaScript resources.
		From line 85, column 262 to line 85, column 416
		></script><script src="https://api.consentpro.com/v1/cdn/runtime/6540cf257cea53a471aad784/ff2bad7d6f2159c8.js" type="text/javascript" finsweet="consentpro" async=""></scri
37	warning	The `type` attribute is unnecessary for JavaScript resources.
		From line 85, column 426 to line 85, column 456
		></script><script type="text/javascript">window
38	warning	The `navigation` role is unnecessary for element `nav`.
		From line 614, column 23 to line 614, column 73
		</a></div><nav role="navigation" class="nav_menu w-nav-menu"><div c
39	warning	The `type` attribute is unnecessary for JavaScript resources.
		From line 1471, column 1868 to line 1471, column 2094
		div></div><script src="https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6540cf257cea53a471aad784" type="text/javascript" integrity="sha256-9/aliU8dGd2tb6OSsuzixeV4y/faTqgFtohetphbbj0=" crossorigin="anonymous"></scri
40	warning	The `type` attribute is unnecessary for JavaScript resources.
		From line 1471, column 2104 to line 1471, column 2238
		></script><script src="https://cdn.prod.website-files.com/6540cf257cea53a471aad784/js/webflow.schunk.57d5559d2f0cd9f8.js" type="text/javascript"></scri
41	warning	The `type` attribute is unnecessary for JavaScript resources.
		From line 1471, column 2248 to line 1471, column 2384
		></script><script src="https://cdn.prod.website-files.com/6540cf257cea53a471aad784/js/webflow.7cbb6ff3.7cb2349e10c4a2fe.js" type="text/javascript"></scri
42	warning	The `type` attribute is unnecessary for JavaScript resources.
		From line 1602, column 10 to line 1602, column 170
		</script><script src="https://hubspotv2.use1-marketplace-1p-apps-prod-red.if.webflow.services/static/disable-hubspot-chatbot.js" type="text/javascript" async="" defer=""></scri
43	warning	The `type` attribute is unnecessary for JavaScript resources.
		From line 1602, column 180 to line 1602, column 271
		></script><script src="https://js.hs-scripts.com/6629053.js" type="text/javascript" async="" defer=""></scri

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: ns-1395.awsdns-46.org, ns-1604.awsdns-08.co.uk, ns-488.awsdns-61.com, ns-784.awsdns-34.net

QNr.	Domain	Type	NS used
1	org	NS	g.root-servers.net (2001:500:12::d0d)
	Answer: a0.org.afilias-nst.info, a2.org.afilias-nst.info, b0.org.afilias-nst.org, b2.org.afilias-nst.org, c0.org.afilias-nst.info, d0.org.afilias-nst.org
2	ns-1395.awsdns-46.org	NS	a0.org.afilias-nst.info (2001:500:e::1)
	Answer: g-ns-1073.awsdns-46.org, g-ns-1646.awsdns-46.org, g-ns-174.awsdns-46.org, g-ns-752.awsdns-46.org
	Answer: g-ns-1073.awsdns-46.org 205.251.196.49, 2600:9000:5304:3100::1
	Answer: g-ns-1646.awsdns-46.org 205.251.198.110, 2600:9000:5306:6e00::1
	Answer: g-ns-174.awsdns-46.org 205.251.192.174, 2600:9000:5300:ae00::1
	Answer: g-ns-752.awsdns-46.org 205.251.194.240, 2600:9000:5302:f000::1
3	uk	NS	e.root-servers.net (2001:500:a8::e)
	Answer: dns1.nic.uk, dns2.nic.uk, dns3.nic.uk, dns4.nic.uk, nsa.nic.uk, nsb.nic.uk, nsc.nic.uk, nsd.nic.uk
4	ns-1604.awsdns-08.co.uk	NS	dns1.nic.uk (2a01:618:400::1)
	Answer: g-ns-1483.awsdns-08.co.uk, g-ns-1804.awsdns-08.co.uk, g-ns-328.awsdns-08.co.uk, g-ns-904.awsdns-08.co.uk
	Answer: g-ns-1483.awsdns-08.co.uk 205.251.197.203, 2600:9000:5305:cb00::1
	Answer: g-ns-1804.awsdns-08.co.uk 205.251.199.12, 2600:9000:5307:c00::1
	Answer: g-ns-328.awsdns-08.co.uk 205.251.193.72, 2600:9000:5301:4800::1
	Answer: g-ns-904.awsdns-08.co.uk 205.251.195.136, 2600:9000:5303:8800::1
5	com	NS	a.root-servers.net (2001:503:ba3e::2:30)
	Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
6	ns-488.awsdns-61.com	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: g-ns-1213.awsdns-61.com, g-ns-1789.awsdns-61.com, g-ns-62.awsdns-61.com, g-ns-637.awsdns-61.com
	Answer: g-ns-1213.awsdns-61.com 205.251.196.189, 2600:9000:5304:bd00::1
	Answer: g-ns-1789.awsdns-61.com 205.251.198.253, 2600:9000:5306:fd00::1
	Answer: g-ns-62.awsdns-61.com 205.251.192.62, 2600:9000:5300:3e00::1
	Answer: g-ns-637.awsdns-61.com 205.251.194.125, 2600:9000:5302:7d00::1
7	net	NS	a.root-servers.net (2001:503:ba3e::2:30)
	Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
8	ns-784.awsdns-34.net	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: g-ns-1378.awsdns-34.net, g-ns-1954.awsdns-34.net, g-ns-483.awsdns-34.net, g-ns-804.awsdns-34.net
	Answer: g-ns-1378.awsdns-34.net 205.251.197.98, 2600:9000:5305:6200::1
	Answer: g-ns-1954.awsdns-34.net 205.251.199.162, 2600:9000:5307:a200::1
	Answer: g-ns-483.awsdns-34.net 205.251.193.227, 2600:9000:5301:e300::1
	Answer: g-ns-804.awsdns-34.net 205.251.195.36, 2600:9000:5303:2400::1
9	ns-1395.awsdns-46.org: 205.251.197.115	A	g-ns-1073.awsdns-46.org (2600:9000:5304:3100::1)
10	ns-1395.awsdns-46.org: 2600:9000:5305:7300::1	AAAA	g-ns-1073.awsdns-46.org (2600:9000:5304:3100::1)
11	ns-1604.awsdns-08.co.uk: 205.251.198.68	A	g-ns-1483.awsdns-08.co.uk (2600:9000:5305:cb00::1)
12	ns-1604.awsdns-08.co.uk: 2600:9000:5306:4400::1	AAAA	g-ns-1483.awsdns-08.co.uk (2600:9000:5305:cb00::1)
13	ns-488.awsdns-61.com: 205.251.193.232	A	g-ns-1213.awsdns-61.com (2600:9000:5304:bd00::1)
14	ns-488.awsdns-61.com: 2600:9000:5301:e800::1	AAAA	g-ns-1213.awsdns-61.com (2600:9000:5304:bd00::1)
15	ns-784.awsdns-34.net: 205.251.195.16	A	g-ns-1378.awsdns-34.net (2600:9000:5305:6200::1)
16	ns-784.awsdns-34.net: 2600:9000:5303:1000::1	AAAA	g-ns-1378.awsdns-34.net (2600:9000:5305:6200::1)

14. CAA - Entries

Domainname	flag	Name	Value	∑ Queries
thanksben-cd-qazhofyh38i37r1j.edge.tenants.eu.auth0.com	5	issue	digicert.com	1
	5	issue	letsencrypt.org	1
edge.tenants.eu.auth0.com	0		no CAA entry found	1
tenants.eu.auth0.com	0		no CAA entry found	1
auth.thanksben.com				1
thanksben.com	0		no CAA entry found	1
eu.auth0.com	0		no CAA entry found	1
auth0.com	0		no CAA entry found	1
com	0		no CAA entry found	1
	0		no CAA entry found	1

15. TXT - Entries

Domainname	TXT Entry	Status	∑ Queries
thanksben.com	ahrefs-site-verification_b217afcf8b2b5112f0250d8a239ce23fe82c55e9cce69f8f6b684905cef9adec	ok	1
thanksben.com	atlassian-domain-verification=ojUFPvbHLB6ialDL2wMxjv5tTxXIRPAup5HmK/JgcA/iTpac60uR/pFQ/1avkYuH	ok	1
thanksben.com	google-site-verification=2Sez6R_z9qZfz7fIbbBH8oTqyhI9DdIckgs9PPx0Vh8	ok	1
thanksben.com	jetbrains-domain-verification=7prarm1xvrc1d34qaxlf9n4lz	ok	1
thanksben.com	linear-domain-verification=rvsac3k9ph4b	ok	1
thanksben.com	v=spf1 include:_spf.google.com include:amazonses.com include:mail.zendesk.com include:6629053.spf10.hubspotemail.net ~all	ok	1
auth.thanksben.com			1
_acme-challenge.auth.thanksben.com		Name Error - The domain name does not exist	1
_acme-challenge.auth.thanksben.com.thanksben.com		Name Error - The domain name does not exist	1
_acme-challenge.auth.thanksben.com.auth.thanksben.com		Name Error - The domain name does not exist	1
_acme-challenge.thanksben-cd-qazhofyh38i37r1j.edge.tenants.eu.auth0.com		Name Error - The domain name does not exist	1
_acme-challenge.thanksben-cd-qazhofyh38i37r1j.edge.tenants.eu.auth0.com.thanksben-cd-qazhofyh38i37r1j.edge.tenants.eu.auth0.com		Name Error - The domain name does not exist	1

16. DomainService - Entries

Type		Domain	Pref	Value	DNS-error	num Answers	Status	Description
SPF	TXT	auth.thanksben.com					32768	TXT expected, but CNAME found. CNAME not allowed, only TXT queries are allowed. See RFC 7208, 4.4.

17. Cipher Suites

Skipped, CDN used or too many ip addresses

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

Permalink: https://check-your-website.server-daten.de/?i=82f69ad8-f6e0-4f47-8234-00f77ee7b8b0

Last Result: https://check-your-website.server-daten.de/?q=auth.thanksben.com%2Fu%2Flogin%2F - 2025-11-06 10:48:38

Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=auth.thanksben.com%2Fu%2Flogin%2F" target="_blank">Check this Site: auth.thanksben.com%2Fu%2Flogin%2F</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

QR-Code of this page - https://check-your-website.server-daten.de/?d=auth.thanksben.com/u/login/

Check DNS, Urls + Redirects, Certificates and Content of your Website

Older results

1. IP-Addresses

2. DNSSEC

3. Name Servers

4. SOA-Entries

5. Screenshots

Mobile- and other Chrome-Checks

6. Url-Checks

7. Comments

1. General Results, most used to calculate the result

2. Header-Checks

3. DNS- and NameServer - Checks

4. Content- and Performance-critical Checks

8. Connections

9. Certificates

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

11. Html-Content - Entries

Summary

Details (currently limited to 500 rows - some problems with spam users)

12. Html-Parsing via https://validator.w3.org/nu/

Summary

Details

13. Nameserver - IP-Adresses

14. CAA - Entries

15. TXT - Entries

16. DomainService - Entries

17. Cipher Suites

18. Portchecks