Check DNS, Urls + Redirects, Certificates and Content of your Website

...

skip EDNS-Check

skip Content-Check

check links

Top config

Checked:
06.04.2022 08:33:38

Older results

No older results found

1. IP-Addresses

Host	Type	IP-Address	is auth.	∑ Queries	∑ Timeout
cloud.obelix05.duckdns.org	A	90.186.211.171 Hamburg/Free and Hanseatic City of Hamburg/Germany (DE) - Vodafone GmbH Hostname: dslb-090-186-211-171.090.186.pools.vodafone-ip.de	yes	1	0
	AAAA		yes
www.cloud.obelix05.duckdns.org	A	90.186.211.171 Hamburg/Free and Hanseatic City of Hamburg/Germany (DE) - Vodafone GmbH Hostname: dslb-090-186-211-171.090.186.pools.vodafone-ip.de	yes	1	0
	AAAA		yes
*.obelix05.duckdns.org	A	90.186.211.171	yes
	AAAA		yes
	CNAME		yes
*.cloud.obelix05.duckdns.org	A	90.186.211.171	yes
	AAAA		yes
	CNAME		yes

2. DNSSEC

Zone (*)	DNSSEC - Informations

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	3 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 9799, Flags 256


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 47671, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 22.04.2022, 00:00:00 +, Signature-Inception: 01.04.2022, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: org
org	1 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 26974, DigestType 2 and Digest T+3ilMU/Q4oVjEHTlInNeKhr6w2KCur/FHRcDRbh3jI=


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner org., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 19.04.2022, 05:00:00 +, Signature-Inception: 06.04.2022, 04:00:00 +, KeyTag 47671, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 47671 used to validate the DS RRSet in the parent zone


	3 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 10449, Flags 256


	Public Key with Algorithm 8, KeyTag 26974, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 30573, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner org., Algorithm: 8, 1 Labels, original TTL: 900 sec, Signature-expiration: 22.04.2022, 15:23:20 +, Signature-Inception: 01.04.2022, 14:23:20 +, KeyTag 26974, Signer-Name: org


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26974 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 26974, DigestType 2 and Digest "T+3ilMU/Q4oVjEHTlInNeKhr6w2KCur/FHRcDRbh3jI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: duckdns.org
duckdns.org	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "3gitsp85pi8earriv69nd1drdiv6j8m1" between the hashed NSEC3-owner "3girek7tpo8h3m0je8sh7bmjl4tjtv65" and the hashed NextOwner "3giuuaks70tm1fiabnkqdb77rdg4p5o4". So the parent zone confirmes the not-existence of a DS RR. Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner 3girek7tpo8h3m0je8sh7bmjl4tjtv65.org., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 22.04.2022, 15:23:20 +, Signature-Inception: 01.04.2022, 14:23:20 +, KeyTag 10449, Signer-Name: org


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "1i870vj5h429vj9pci7ar6e9gki74tr7" as Owner. That's the Hash of "org" with the NextHashedOwnerName "1i87r64gaju4o91mhkbu7i9ekbs7k8ut". So that domain name is the Closest Encloser of "duckdns.org". Opt-Out: True. Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner 1i870vj5h429vj9pci7ar6e9gki74tr7.org., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 27.04.2022, 06:33:18 +, Signature-Inception: 06.04.2022, 05:33:18 +, KeyTag 10449, Signer-Name: org


	0 DNSKEY RR found




Zone: obelix05.duckdns.org
obelix05.duckdns.org	0 DS RR in the parent zone found


	0 DNSKEY RR found




Zone: cloud.obelix05.duckdns.org
cloud.obelix05.duckdns.org	0 DS RR in the parent zone found


	0 DNSKEY RR found




Zone: www.cloud.obelix05.duckdns.org
www.cloud.obelix05.duckdns.org	0 DS RR in the parent zone found

3. Name Servers

Domain	Nameserver	NS-IP
www.cloud.obelix05.duckdns.org	• ns1.duckdns.org
	• ns2.duckdns.org
	• ns3.duckdns.org
	• ns4.duckdns.org
	• ns5.duckdns.org
	• ns6.duckdns.org
cloud.obelix05.duckdns.org	• ns1.duckdns.org	99.79.143.35 Toronto/Ontario/Canada (CA) - Amazon.com, Inc.
	• ns2.duckdns.org	35.182.183.211 Toronto/Ontario/Canada (CA) - Amazon Technologies Inc.
	• ns3.duckdns.org	35.183.157.249 Toronto/Ontario/Canada (CA) - Amazon Technologies Inc.
	• ns4.duckdns.org	3.97.51.116 Toronto/Ontario/Canada (CA) - Amazon Technologies Inc.
	• ns5.duckdns.org	99.79.16.64 Toronto/Ontario/Canada (CA) - Amazon.com, Inc.
	• ns6.duckdns.org	3.97.58.28 Toronto/Ontario/Canada (CA) - Amazon Technologies Inc.
obelix05.duckdns.org	• ns1.duckdns.org	99.79.143.35 Toronto/Ontario/Canada (CA) - Amazon.com, Inc.
	• ns2.duckdns.org	35.182.183.211 Toronto/Ontario/Canada (CA) - Amazon Technologies Inc.
	• ns3.duckdns.org	35.183.157.249 Toronto/Ontario/Canada (CA) - Amazon Technologies Inc.
	• ns4.duckdns.org	3.97.51.116 Toronto/Ontario/Canada (CA) - Amazon Technologies Inc.
	• ns5.duckdns.org	99.79.16.64 Toronto/Ontario/Canada (CA) - Amazon.com, Inc.
	• ns6.duckdns.org	3.97.58.28 Toronto/Ontario/Canada (CA) - Amazon Technologies Inc.
duckdns.org	• ns1.duckdns.org	99.79.143.35 Toronto/Ontario/Canada (CA) - Amazon.com, Inc.
	• ns2.duckdns.org	35.182.183.211 Toronto/Ontario/Canada (CA) - Amazon Technologies Inc.
	• ns3.duckdns.org	35.183.157.249 Toronto/Ontario/Canada (CA) - Amazon Technologies Inc.
	• ns4.duckdns.org	3.97.51.116 Toronto/Ontario/Canada (CA) - Amazon Technologies Inc.
	• ns5.duckdns.org	99.79.16.64 Toronto/Ontario/Canada (CA) - Amazon.com, Inc.
	• ns6.duckdns.org	3.97.58.28 Toronto/Ontario/Canada (CA) - Amazon Technologies Inc.
org	• a0.org.afilias-nst.info / ns000b.app5.ams2.afilias-nst.info		•
	• a2.org.afilias-nst.info / LHR8		•
	• b0.org.afilias-nst.org / app23.lax1.hosts.meta.redstone.afilias-nst.info-1633102198		•
	• b2.org.afilias-nst.org / LHR9		•
	• c0.org.afilias-nst.info / app22.nrt1.hosts.meta.redstone.afilias-nst.info-1615580861		•
	• d0.org.afilias-nst.org / app15.nrt1.hosts.meta.redstone.afilias-nst.info-1615580861		•

4. SOA-Entries

Domain:	org
Zone-Name:	org
Primary:	a0.org.afilias-nst.info
Mail:	noc.afilias-nst.info
Serial:	2014790546
Refresh:	1800
Retry:	900
Expire:	604800
TTL:	86400
num Entries:	6

Domain:	duckdns.org
Zone-Name:	duckdns.org
Primary:	ns1.duckdns.org
Mail:	hostmaster.duckdns.org
Serial:	2021081401
Refresh:	6000
Retry:	120
Expire:	2419200
TTL:	600
num Entries:	6

Domain:	obelix05.duckdns.org
Zone-Name:	duckdns.org
Primary:	ns1.duckdns.org
Mail:	hostmaster.duckdns.org
Serial:	2021081401
Refresh:	6000
Retry:	120
Expire:	2419200
TTL:	600
num Entries:	6

Domain:	cloud.obelix05.duckdns.org
Zone-Name:	duckdns.org
Primary:	ns1.duckdns.org
Mail:	hostmaster.duckdns.org
Serial:	2021081401
Refresh:	6000
Retry:	120
Expire:	2419200
TTL:	600
num Entries:	6

Domain:	www.cloud.obelix05.duckdns.org
Zone-Name:	duckdns.org
Primary:	ns1.duckdns.org
Mail:	hostmaster.duckdns.org
Serial:	2021081401
Refresh:	6000
Retry:	120
Expire:	2419200
TTL:	600
num Entries:	6

5. Screenshots

Startaddress: https://cloud.obelix05.duckdns.org/login, address used: https://cloud.obelix05.duckdns.org/login, Screenshot created 2022-04-06 09:01:11 +00:0

Mobil (412px x 732px)

820 milliseconds

Screenshot mobile - https://cloud.obelix05.duckdns.org/login

Mobil + Landscape (732px x 412px)

667 milliseconds

Screenshot mobile landscape - https://cloud.obelix05.duckdns.org/login

Screen (1280px x 1680px)

4931 milliseconds

Screenshot Desktop - https://cloud.obelix05.duckdns.org/login

Mobile- and other Chrome-Checks

	width	height
visual Viewport	412	732
content Size	412	732

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

6. Url-Checks

show header:

Domainname	Http-Status	redirect	Sec.	G
• http://cloud.obelix05.duckdns.org/ 90.186.211.171	308	https://cloud.obelix05.duckdns.org/	0.047	A
Connection: close
Location: https://cloud.obelix05.duckdns.org/
Server: Caddy
Date: Wed, 06 Apr 2022 06:59:51 GMT
Content-Length: 0

• http://www.cloud.obelix05.duckdns.org/ 90.186.211.171	308	https://www.cloud.obelix05.duckdns.org/	0.064	A
Connection: close
Location: https://www.cloud.obelix05.duckdns.org/
Server: Caddy
Date: Wed, 06 Apr 2022 06:59:52 GMT
Content-Length: 0

• https://cloud.obelix05.duckdns.org/ 90.186.211.171	302	https://cloud.obelix05.duckdns.org/login	4.603	A
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 0
Content-Security-Policy: frame-ancestors obelix05.duckdns.org *.obelix05.duckdns.org
Content-Type: text/html; charset=UTF-8
Date: Wed, 06 Apr 2022 06:59:52 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Location: https://cloud.obelix05.duckdns.org/login
Permissions-Policy: geolocation=(self 'https://www.googleapis.com/'), microphone=(), camera=(), payment=(), speaker=(), usb=(), battery=()
Pragma: no-cache
Referrer-Policy: no-referrer-when-downgrade,no-referrer
Server: my-nice-webserver
Set-Cookie: oc9pipocyhl5=027db5a006704309fe2c885eef72f9b1; path=/; secure; HttpOnly; SameSite=Lax,oc_sessionPassphrase=r449W2SUgLgRHMwenF5u5fnePs2S8GHqR0yiN%2B08t0%2BtrzSd6wFXFD00tmem4F53sTDEVY4T5zVaUTwEUWzBbC2va7SgJymfSmKrPn6EGICNg9Q2QMJp7o%2FABdA67S9B; path=/; secure; HttpOnly; SameSite=Lax,oc9pipocyhl5=7253aa79bcbebd2d010acce49aa291f5; path=/; secure; HttpOnly; SameSite=Lax,__Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax,__Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Forwarded-Host: cloud.obelix05.duckdns.org
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Powered-By: PHP/8.0.17
X-Robots-Tag: none
X-Xss-Protection: 1; mode=block
Connection: close

• https://www.cloud.obelix05.duckdns.org/ 90.186.211.171	301	https://cloud.obelix05.duckdns.org/	4.437	A
Content-Security-Policy: frame-ancestors obelix05.duckdns.org *.obelix05.duckdns.org
Location: https://cloud.obelix05.duckdns.org/
Permissions-Policy: geolocation=(self 'https://www.googleapis.com/'), microphone=(), camera=(), payment=(), speaker=(), usb=(), battery=()
Referrer-Policy: no-referrer-when-downgrade
Server: my-nice-webserver
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Forwarded-Host: www.cloud.obelix05.duckdns.org
X-Frame-Options: SAMEORIGIN
Date: Wed, 06 Apr 2022 06:59:58 GMT
Content-Length: 0
Connection: close

• https://cloud.obelix05.duckdns.org/login Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 102.36 % Other inline scripts (∑/total): 0/0	4.623	A
small visible content (num chars: 143) This application requires JavaScript for correct operation. Please enable JavaScript and reload the page. LiHannes Nextcloud LiHannes Nextcloud
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
Content-Length: 4287
Content-Security-Policy: frame-ancestors obelix05.duckdns.org *.obelix05.duckdns.org
Content-Type: text/html; charset=UTF-8
Date: Wed, 06 Apr 2022 07:00:08 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'self';microphone 'none';payment 'none'
Permissions-Policy: geolocation=(self 'https://www.googleapis.com/'), microphone=(), camera=(), payment=(), speaker=(), usb=(), battery=()
Pragma: no-cache
Referrer-Policy: no-referrer-when-downgrade,no-referrer
Server: my-nice-webserver
Set-Cookie: oc9pipocyhl5=2c4bd9b84c28a295754486947701478b; path=/; secure; HttpOnly; SameSite=Lax,oc_sessionPassphrase=iTQhj3wUwJiyewT2%2BQ30g5yAwA%2FaNS7F9zzRTogCBPVH4SDUumvfHR7CF6E5yr4RTQWTWpsoAvB98jHDExB9sTdAffM14ejs8qCt4zQle%2FiR3tAofsAmrM%2Fqb7gVQdPU; path=/; secure; HttpOnly; SameSite=Lax,oc9pipocyhl5=ec0a383fb343ac0af4d8fe21f30e5b34; path=/; secure; HttpOnly; SameSite=Lax,__Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax,__Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Forwarded-Host: cloud.obelix05.duckdns.org
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Powered-By: PHP/8.0.17
X-Robots-Tag: none
X-Xss-Protection: 1; mode=block
Connection: close

• http://cloud.obelix05.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 90.186.211.171	308	https://cloud.obelix05.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	0.047	A
Visible Content:
Connection: close
Location: https://cloud.obelix05.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Server: Caddy
Date: Wed, 06 Apr 2022 07:00:03 GMT
Content-Length: 0

• http://www.cloud.obelix05.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 90.186.211.171	308	https://www.cloud.obelix05.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	0.047	A
Visible Content:
Connection: close
Location: https://www.cloud.obelix05.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Server: Caddy
Date: Wed, 06 Apr 2022 07:00:03 GMT
Content-Length: 0

• https://cloud.obelix05.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	302	https://cloud.obelix05.duckdns.org/login	4.483	A
Visible Content:
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 0
Content-Security-Policy: frame-ancestors obelix05.duckdns.org *.obelix05.duckdns.org
Content-Type: text/html; charset=UTF-8
Date: Wed, 06 Apr 2022 07:00:13 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Location: https://cloud.obelix05.duckdns.org/login
Permissions-Policy: geolocation=(self 'https://www.googleapis.com/'), microphone=(), camera=(), payment=(), speaker=(), usb=(), battery=()
Pragma: no-cache
Referrer-Policy: no-referrer-when-downgrade,no-referrer
Server: my-nice-webserver
Set-Cookie: oc9pipocyhl5=1dfebb0aac12c7bb7b4ffb02e7c8eeb7; path=/; secure; HttpOnly; SameSite=Lax,oc_sessionPassphrase=oNfLzRGqGfdCspA1MMt%2F9CujhubLe5lR9PXKldFXhxR3L2Q3HflNLebp9oWDXJPupWq6KsC1zF6nrLCxCN%2FaRMOmlNl1F2WN7B5R6iDbqIMoNwG65bXgZl2K5bCNK9Wy; path=/; secure; HttpOnly; SameSite=Lax,oc9pipocyhl5=db083da43f615ddec373a14ee010bdb0; path=/; secure; HttpOnly; SameSite=Lax,__Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax,__Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Forwarded-Host: cloud.obelix05.duckdns.org
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Powered-By: PHP/8.0.17
X-Robots-Tag: none
X-Xss-Protection: 1; mode=block
Connection: close

• https://www.cloud.obelix05.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	301	https://cloud.obelix05.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	4.390	A
Visible Content:
Content-Security-Policy: frame-ancestors obelix05.duckdns.org *.obelix05.duckdns.org
Location: https://cloud.obelix05.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Permissions-Policy: geolocation=(self 'https://www.googleapis.com/'), microphone=(), camera=(), payment=(), speaker=(), usb=(), battery=()
Referrer-Policy: no-referrer-when-downgrade
Server: my-nice-webserver
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Forwarded-Host: www.cloud.obelix05.duckdns.org
X-Frame-Options: SAMEORIGIN
Date: Wed, 06 Apr 2022 07:00:20 GMT
Content-Length: 0
Connection: close

• https://90.186.211.171/ 90.186.211.171	-10		0.047	P
SecureChannelFailure - The request was aborted: Could not create SSL/TLS secure channel.

7. Comments

	1. General Results, most used to calculate the result
A	name "cloud.obelix05.duckdns.org" is subdomain, public suffix is ".duckdns.org", top-level-domain is ".org", top-level-domain-type is "generic", tld-manager is "Public Interest Registry (PIR)", num .org-domains preloaded: 5904 (complete: 175327)
A	Good: All ip addresses are public addresses
	Warning: Only one ip address found: cloud.obelix05.duckdns.org has only one ip address.
	Warning: Only one ip address found: www.cloud.obelix05.duckdns.org has only one ip address.
	Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: cloud.obelix05.duckdns.org has no ipv6 address.
	Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: www.cloud.obelix05.duckdns.org has no ipv6 address.
A	Good: No asked Authoritative Name Server had a timeout
A	https://cloud.obelix05.duckdns.org/ 90.186.211.171	302	https://cloud.obelix05.duckdns.org/login	Correct redirect https to https
A	https://cloud.obelix05.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	302	https://cloud.obelix05.duckdns.org/login	Correct redirect https to https
A	Good: destination is https
A	Good - only one version with Http-Status 200
A	Good: one preferred version: non-www is preferred
A	Good: No cookie sent via http.
A	Good: every cookie sent via https is marked as secure
A	Good: Every cookie has a SameSite Attribute with a correct value Strict/Lax/None
A	Good: HSTS has preload directive
	Warning: HSTS preload sent, but not in Preload-List. Never send a preload directive if you don't know what preload means. Check https://hstspreload.org/ to learn the basics about the Google-Preload list. If you send a preload directive, you should immediately add your domain to the HSTS preload list via https://hstspreload.org/ . If Google accepts the domain, so the status is "pending": Note that new entries are hardcoded into the Chrome source code and can take several months before they reach the stable version. So you will see this message some months. If you don't want that or if you don't understand "preload", but if you send a preload directive and if you have correct A-redirects, everybody can add your domain to that list. Then you may have problems, it's not easy to undo that. So if you don't want your domain preloaded, remove the preload directive.
	HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
A	Good: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
A	http://cloud.obelix05.duckdns.org/ 90.186.211.171	308	https://cloud.obelix05.duckdns.org/	Correct redirect http - https with the same domain name
A	http://www.cloud.obelix05.duckdns.org/ 90.186.211.171	308	https://www.cloud.obelix05.duckdns.org/	Correct redirect http - https with the same domain name
P	https://90.186.211.171/ 90.186.211.171	-10		Error creating a TLS-Connection: No more details available.
X	Fatal error: Nameserver doesn't support TCP connection: ns1.duckdns.org: Timeout
X	Fatal error: Nameserver doesn't support TCP connection: ns1.duckdns.org / 99.79.143.35: Timeout
X	Fatal error: Nameserver doesn't support TCP connection: ns2.duckdns.org: Timeout
X	Fatal error: Nameserver doesn't support TCP connection: ns2.duckdns.org / 35.182.183.211: Timeout
X	Fatal error: Nameserver doesn't support TCP connection: ns3.duckdns.org: Timeout
X	Fatal error: Nameserver doesn't support TCP connection: ns3.duckdns.org / 35.183.157.249: Timeout
X	Fatal error: Nameserver doesn't support TCP connection: ns4.duckdns.org: Timeout
X	Fatal error: Nameserver doesn't support TCP connection: ns4.duckdns.org / 3.97.51.116: Timeout
X	Fatal error: Nameserver doesn't support TCP connection: ns5.duckdns.org: Timeout
X	Fatal error: Nameserver doesn't support TCP connection: ns5.duckdns.org / 99.79.16.64: Timeout
X	Fatal error: Nameserver doesn't support TCP connection: ns6.duckdns.org: Timeout
X	Fatal error: Nameserver doesn't support TCP connection: ns6.duckdns.org / 3.97.58.28: Timeout
	Info: Checking the ip addresses of that domain name not exact one certificate found. So it's impossible to check if that domain requires Server Name Indication (SNI).: Domain cloud.obelix05.duckdns.org, 1 ip addresses.
	Info: Checking the ip addresses of that domain name not exact one certificate found. So it's impossible to check if that domain requires Server Name Indication (SNI).: Domain www.cloud.obelix05.duckdns.org, 1 ip addresses.
	2. Header-Checks
	3. DNS- and NameServer - Checks
A	Info:: 2 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 6 Name Servers.
A	Info:: 2 Queries complete, 2 with IPv6, 0 with IPv4.
A	Good: All DNS Queries done via IPv6.
A	Good: Some ip addresses of name servers found with the minimum of two DNS Queries. One to find the TLD-Zone, one to ask the TLD-Zone.ns1.duckdns.org (99.79.143.35), ns2.duckdns.org (35.182.183.211), ns3.duckdns.org (35.183.157.249), ns4.duckdns.org (3.97.51.116), ns5.duckdns.org (99.79.16.64), ns6.duckdns.org (3.97.58.28)
A	Good (1 - 3.0):: An average of 0.3 queries per domain name server required to find all ip addresses of all name servers.
A	Info:: 6 different Name Servers found: ns1.duckdns.org, ns2.duckdns.org, ns3.duckdns.org, ns4.duckdns.org, ns5.duckdns.org, ns6.duckdns.org, 6 Name Servers included in Delegation: ns1.duckdns.org, ns2.duckdns.org, ns3.duckdns.org, ns4.duckdns.org, ns5.duckdns.org, ns6.duckdns.org, 6 Name Servers included in 1 Zone definitions: ns1.duckdns.org, ns2.duckdns.org, ns3.duckdns.org, ns4.duckdns.org, ns5.duckdns.org, ns6.duckdns.org, 1 Name Servers listed in SOA.Primary: ns1.duckdns.org.
A	Good: Only one SOA.Primary Name Server found.: ns1.duckdns.org.
A	Good: SOA.Primary Name Server included in the delegation set.: ns1.duckdns.org.
A	Good: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: ns1.duckdns.org, ns2.duckdns.org, ns3.duckdns.org, ns4.duckdns.org, ns5.duckdns.org, ns6.duckdns.org
A	Good: All Name Server Domain Names have a Public Suffix.
A	Good: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
A	Good: All Name Server ip addresses are public.
A	Good: Minimal 2 different name servers (public suffix and public ip address) found: 6 different Name Servers found
	Warning: No Name Server IPv6 address found. IPv6 is the future, so your name servers should be visible via IPv6.: 6 different Name Servers found
	Warning: All Name Servers have the same Top Level Domain / Public Suffix. If there is a problem with that Top Level Domain, your domain may be affected. Better: Use Name Servers with different top level domains.: 6 Name Servers, 1 Top Level Domain: duckdns.org
	Warning: All Name Servers have the same domain name. If there is a problem with that domain name (or with the name servers of that domain name), your domain may be affected. Better: Use Name Servers with different domain names / different top level domains.: Only one domain name used:
	Warning: All Name Servers from the same Country / IP location.: 6 Name Servers, 1 Countries: CA
A	Info: Ipv4-Subnet-list: 6 Name Servers, 3 different subnets (first Byte): 3., 35., 99., 4 different subnets (first two Bytes): 3.97., 35.182., 35.183., 99.79., 6 different subnets (first three Bytes): 3.97.51., 3.97.58., 35.182.183., 35.183.157., 99.79.143., 99.79.16.
A	Good: Name Server IPv4-addresses from different subnet found:
A	Good: Nameserver supports Echo Capitalization: 6 good Nameserver
A	Good: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 6 good Nameserver
	Nameserver doesn't pass all EDNS-Checks: b0.org.afilias-nst.org: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok (app23.lax1.hosts.meta.redstone.afilias-nst.info-1633102198). COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns1.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns1.duckdns.org / 99.79.143.35: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns1.duckdns.org / 99.79.143.35: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns1.duckdns.org / 99.79.143.35: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns2.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns2.duckdns.org / 35.182.183.211: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns2.duckdns.org / 35.182.183.211: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns2.duckdns.org / 35.182.183.211: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns3.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns3.duckdns.org / 35.183.157.249: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns3.duckdns.org / 35.183.157.249: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns3.duckdns.org / 35.183.157.249: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns4.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns4.duckdns.org / 3.97.51.116: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns4.duckdns.org / 3.97.51.116: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns4.duckdns.org / 3.97.51.116: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns5.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns5.duckdns.org / 99.79.16.64: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns5.duckdns.org / 99.79.16.64: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns5.duckdns.org / 99.79.16.64: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns6.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns6.duckdns.org / 3.97.58.28: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns6.duckdns.org / 3.97.58.28: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns6.duckdns.org / 3.97.58.28: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
A	Good: All SOA have the same Serial Number
	Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.
	4. Content- and Performance-critical Checks
A	Good: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
A	Good: No https + http status 200 with inline CSS / JavaScript found
A	Good: Every https result with status 200 has a minified Html-Content with a quota lower then 110 %.
A	Good: Every https connection via port 443 supports the http/2 protocol via ALPN.
A	Good: All script Elements (type text/javascript) and src-Attribute have a defer / async - Attribute. So loading and executing these JavaScripts doesn't block parsing and rendering the Html-Output.
	Warning: CSS / JavaScript found without Compression. Compress these ressources, gzip, deflate, br are checked. 1 external CSS / JavaScript files without GZip found - 18 with GZip, 19 complete
	Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 0 external CSS / JavaScript files without Cache-Control-Header, 1 with Cache-Control, but no max-age, 1 with Cache-Control max-age too short (minimum 7 days), 17 with Cache-Control long enough, 19 complete.
A	Good: All checked attribute values are enclosed in quotation marks (" or ').
A	Info: No img element found, no alt attribute checked
A	Good: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
A	Info: Different Server-Headers found
A	Duration: 1669654 milliseconds, 1669.654 seconds

8. Connections

Domain

Port

Cert.

Protocol

KeyExchange

Strength

Cipher

Strength

HashAlgorithm

OCSP stapling

Domain/KeyExchange

IP/Strength

Port/Cipher

Cert./Strength

Protocol/HashAlgorithm

OCSP stapling

cloud.obelix05.duckdns.org

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

cloud.obelix05.duckdns.org

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0

Chain - too much certificates, don't send root certificates	1	CN=cloud.obelix05.duckdns.org
	2	CN=R3, O=Let's Encrypt, C=US
	3	CN=ISRG Root X1, O=Internet Security Research Group, C=US

cloud.obelix05.duckdns.org

90.186.211.171

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

cloud.obelix05.duckdns.org

90.186.211.171

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0

Chain - too much certificates, don't send root certificates	1	CN=cloud.obelix05.duckdns.org
	2	CN=R3, O=Let's Encrypt, C=US
	3	CN=ISRG Root X1, O=Internet Security Research Group, C=US

www.cloud.obelix05.duckdns.org

90.186.211.171

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

www.cloud.obelix05.duckdns.org

90.186.211.171

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0

Chain - too much certificates, don't send root certificates	1	CN=www.cloud.obelix05.duckdns.org
	2	CN=R3, O=Let's Encrypt, C=US
	3	CN=ISRG Root X1, O=Internet Security Research Group, C=US

www.cloud.obelix05.duckdns.org

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

www.cloud.obelix05.duckdns.org

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0

Chain - too much certificates, don't send root certificates	1	CN=www.cloud.obelix05.duckdns.org
	2	CN=R3, O=Let's Encrypt, C=US
	3	CN=ISRG Root X1, O=Internet Security Research Group, C=US

9. Certificates

CN=cloud.obelix05.duckdns.org

31.03.2022

29.06.2022
1048 days expired

cloud.obelix05.duckdns.org - 1 entry

CN=cloud.obelix05.duckdns.org

31.03.2022

29.06.2022
1048 days expired

cloud.obelix05.duckdns.org - 1 entry

Keyalgorithm	EC Public Key (256 bit, prime256v1)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	0376A0CF4A04EB9A746A936CD6F5A44ADEB5
Thumbprint:	2B52D334ED9EA86115791A9FF6FD87C737863261
SHA256 / Certificate:	fw+uCV5LrxN7dZkr3wIEAmJFlYfWul8+1rZY2tjwO/g=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	f8c608bb84a8c35b2081a7f6c907186872310231f53a8bdd2871b4e14b3c62bf
SHA256 hex / Subject Public Key Information (SPKI):	f8c608bb84a8c35b2081a7f6c907186872310231f53a8bdd2871b4e14b3c62bf (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://r3.o.lencr.org
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=R3, O=Let's Encrypt, C=US

04.09.2020

15.09.2025
expires in 126 days

CN=R3, O=Let's Encrypt, C=US

04.09.2020

15.09.2025
expires in 126 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00912B084ACF0C18A753F6D62E25A75F5A
Thumbprint:	A053375BFE84E8B748782C7CEE15827A6AF5A405
SHA256 / Certificate:	Z63RFmsCCuYbj1/JaBPATCqliZYHloZVcqPH5zdhPf0=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SHA256 hex / Subject Public Key Information (SPKI):	8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3675 days

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3675 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	008210CFB0D240E3594463E0BB63828B00
Thumbprint:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:	lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):	96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=www.cloud.obelix05.duckdns.org

05.04.2022

04.07.2022
1043 days expired

www.cloud.obelix05.duckdns.org - 1 entry

CN=www.cloud.obelix05.duckdns.org

05.04.2022

04.07.2022
1043 days expired

www.cloud.obelix05.duckdns.org - 1 entry

Keyalgorithm	EC Public Key (256 bit, prime256v1)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	03DD3E4C8AC6D6ECA07DEDDD380B4E04B04E
Thumbprint:	AE893B2F903C0690F391163F03293DFF787BD103
SHA256 / Certificate:	5H2YtN8slV/kHNVmZyOlqNoxWS/lxi3bsMCT0BoqtXI=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	ca4e9edebd47b72a2f860e8c538f408eb56ac8491310cbbbede69d0486d44f91
SHA256 hex / Subject Public Key Information (SPKI):	ca4e9edebd47b72a2f860e8c538f408eb56ac8491310cbbbede69d0486d44f91 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://r3.o.lencr.org
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=R3, O=Let's Encrypt, C=US

04.09.2020

15.09.2025
expires in 126 days

CN=R3, O=Let's Encrypt, C=US

04.09.2020

15.09.2025
expires in 126 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00912B084ACF0C18A753F6D62E25A75F5A
Thumbprint:	A053375BFE84E8B748782C7CEE15827A6AF5A405
SHA256 / Certificate:	Z63RFmsCCuYbj1/JaBPATCqliZYHloZVcqPH5zdhPf0=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SHA256 hex / Subject Public Key Information (SPKI):	8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3675 days

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3675 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	008210CFB0D240E3594463E0BB63828B00
Thumbprint:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:	lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):	96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Small Code Update - wait one minute

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Small Code Update - wait one minute

11. Html-Content - Entries

Summary

							Subresource Integrity (SRI)
Domainname	HtmlElement	rel/property	∑	∑ size	∑ problems	∑ int.	∑ ext.	∑ Origin poss.	∑ SRI ParseErrors	∑ SRI valid	∑ SRI missing
https://cloud.obelix05.duckdns.org/login	a		2	9,599 Bytes	0	1	1	0	0	0
	link	stylesheet	6	11,004 Bytes	0	6	0	0	0	0
	link	other	4	7,900 Bytes	0	3	0	0	0	0
	meta	apple	1		0			0	0	0
	meta	og	6	27,505 Bytes	0	2	0	0	0	0
	meta	other	5		0			0	0	0
	script		13	88,402 Bytes	0	13	0	0	0	0

Details (currently limited to 500 rows - some problems with spam users)

Domainname

Html-Element

name/equiv/ property/rel

href/src/content

HttpStatus

msg

∑

Status

https://cloud.obelix05.duckdns.org/login

https://cloud.obelix05.duckdns.org

302

https://cloud.obelix05.duckdns.org/login

text/html; charset=UTF-8
X-Content-Type-Options nosniff found

0 Bytes

https://www.enable-javascript.com/

200

text/html; charset=utf-8
missing X-Content-Type-Options nosniff

9599 Bytes

link

apple-touch-icon

/core/img/favicon-touch.png

200

image/png
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable with long duration found.

No Compression - 4196 Bytes

link

icon

/core/img/favicon.ico

200

image/vnd.microsoft.icon
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable with long duration found.

No Compression - 3262 Bytes

link

manifest

/core/img/manifest.json

link

mask-icon

/core/img/favicon-mask.svg

200

image/svg+xml
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable with long duration found.

442 Bytes

link

stylesheet

/apps/accessibility/css/user-a82fd95db10ff25dfad39f07372ebe37

200

text/css;charset=UTF-8
X-Content-Type-Options nosniff found

Cache-Control: max-age=31536000, immutable - with long duration found.

Compression required: 2894 Bytes

local SRI possible, possible hash-values:

sha256-yRG/lmG3c+jup8tzr7lGf7oGbrPUFhRiDRUP+SduSJ8=
sha384-tKk1TFYe6iwZOvmiR9biIgx2/TnVmt1CEImk0dRVp593leBasp1UMosIETy0D1Ni
sha512-uavyi848s0jctEWMkQ7Rrsq1h8s9RMsvizS4SF0SBvBPB8CECJeXWRgL6ErSAWqePR7dlAodZC344hsBVoIDrQ==

Content loaded via url("...")

/apps/accessibility/css/../../../core/img/actions/checkbox-mark-dark.svg

/apps/accessibility/css/../../../core/img/actions/checkbox-mixed-dark.svg

/core/img/background.png?v=6

/core/img/logo/logo.png?v=6

/svg/core/actions/add?color=000&v=1

/svg/core/actions/add?color=fff&v=1

/svg/core/actions/address?color=000&v=1

/svg/core/actions/address?color=fff&v=1

/svg/core/actions/alert-outline?color=000&v=1

/svg/core/actions/alert-outline?color=fff&v=1

/svg/core/actions/arrow-left?color=000&v=1

/svg/core/actions/arrow-left?color=fff&v=1

/svg/core/actions/arrow-right?color=000&v=1

/svg/core/actions/arrow-right?color=fff&v=1

/svg/core/actions/audio?color=000&v=2

/svg/core/actions/audio?color=fff&v=2

/svg/core/actions/audio-off?color=000&v=1

/svg/core/actions/audio-off?color=fff&v=1

/svg/core/actions/caret?color=000&v=1

/svg/core/actions/caret?color=fff&v=1

/svg/core/actions/checkmark?color=000&v=1

/svg/core/actions/checkmark?color=46ba61&v=1

/svg/core/actions/checkmark?color=fff&v=1

/svg/core/actions/clippy?color=000&v=2

/svg/core/actions/clippy?color=fff&v=2

/svg/core/actions/close?color=000&v=1

/svg/core/actions/close?color=fff&v=2

/svg/core/actions/comment?color=000&v=1

/svg/core/actions/comment?color=fff&v=1

/svg/core/actions/confirm?color=000&v=2

/svg/core/actions/confirm?color=fff&v=2

/svg/core/actions/confirm-fade?color=fff&v=2

/svg/core/actions/delete?color=000&v=1

/svg/core/actions/delete?color=e9322d&v=1

/svg/core/actions/delete?color=fff&v=1

/svg/core/actions/details?color=000&v=1

/svg/core/actions/details?color=fff&v=1

/svg/core/actions/disabled-user?color=000&v=1

/svg/core/actions/disabled-user?color=fff&v=1

/svg/core/actions/disabled-users?color=000&v=1

/svg/core/actions/disabled-users?color=fff&v=1

/svg/core/actions/download?color=000&v=1

/svg/core/actions/download?color=fff&v=1

/svg/core/actions/edit?color=000&v=1

/svg/core/actions/edit?color=fff&v=1

/svg/core/actions/error?color=000&v=1

/svg/core/actions/error?color=e9322d&v=1

/svg/core/actions/error?color=fff&v=1

/svg/core/actions/external?color=000&v=1

/svg/core/actions/external?color=fff&v=1

/svg/core/actions/filter?color=000&v=1

/svg/core/actions/filter?color=fff&v=1

/svg/core/actions/fullscreen?color=000&v=1

/svg/core/actions/fullscreen?color=fff&v=1

/svg/core/actions/group?color=000&v=1

/svg/core/actions/group?color=fff&v=1

/svg/core/actions/history?color=000&v=2

/svg/core/actions/history?color=fff&v=2

/svg/core/actions/info?color=000&v=1

/svg/core/actions/info?color=fff&v=1

/svg/core/actions/logout?color=000&v=1

/svg/core/actions/logout?color=fff&v=1

/svg/core/actions/mail?color=000&v=1

/svg/core/actions/mail?color=fff&v=1

/svg/core/actions/menu?color=000&v=1

/svg/core/actions/menu?color=fff&v=1

/svg/core/actions/menu-sidebar?color=000&v=1

/svg/core/actions/menu-sidebar?color=fff&v=1

/svg/core/actions/more?color=000&v=1

/svg/core/actions/more?color=fff&v=1

/svg/core/actions/password?color=000&v=1

/svg/core/actions/password?color=fff&v=1

/svg/core/actions/pause?color=000&v=1

/svg/core/actions/pause?color=fff&v=1

/svg/core/actions/play?color=000&v=1

/svg/core/actions/play?color=fff&v=1

/svg/core/actions/play-add?color=000&v=1

/svg/core/actions/play-add?color=fff&v=1

/svg/core/actions/play-next?color=000&v=1

/svg/core/actions/play-next?color=fff&v=1

/svg/core/actions/play-previous?color=000&v=1

/svg/core/actions/play-previous?color=fff&v=1

/svg/core/actions/projects?color=000&v=1

/svg/core/actions/projects?color=fff&v=1

/svg/core/actions/public?color=000&v=1

/svg/core/actions/public?color=fff&v=1

/svg/core/actions/quota?color=000&v=1

/svg/core/actions/quota?color=fff&v=1

/svg/core/actions/rename?color=000&v=1

/svg/core/actions/rename?color=fff&v=1

/svg/core/actions/screen?color=000&v=1

/svg/core/actions/screen?color=fff&v=1

/svg/core/actions/screen-off?color=000&v=1

/svg/core/actions/screen-off?color=fff&v=1

/svg/core/actions/search?color=000&v=1

/svg/core/actions/search?color=fff&v=1

/svg/core/actions/search?color=fffffe&v=1

/svg/core/actions/settings?color=fff&v=1

/svg/core/actions/settings-dark?color=000&v=1

/svg/core/actions/settings-dark?color=fff&v=1

/svg/core/actions/share?color=000&v=1

/svg/core/actions/share?color=fff&v=1

/svg/core/actions/sound?color=000&v=1

/svg/core/actions/sound?color=fff&v=1

/svg/core/actions/sound-off?color=000&v=1

/svg/core/actions/sound-off?color=fff&v=1

/svg/core/actions/star?color=000&v=1

/svg/core/actions/star?color=fff&v=1

/svg/core/actions/star-dark?color=FC0&v=1

/svg/core/actions/star-dark?color=fff&v=1

/svg/core/actions/tag?color=000&v=2

/svg/core/actions/tag?color=fff&v=1

/svg/core/actions/template-add?color=000&v=1

/svg/core/actions/template-add?color=fff&v=1

/svg/core/actions/timezone?color=000&v=1

/svg/core/actions/timezone?color=fff&v=1

/svg/core/actions/toggle?color=000&v=1

/svg/core/actions/toggle?color=fff&v=1

/svg/core/actions/toggle-background?color=000&v=1

/svg/core/actions/toggle-background?color=fff&v=1

/svg/core/actions/toggle-filelist?color=000&v=1

/svg/core/actions/toggle-filelist?color=fff&v=1

/svg/core/actions/toggle-pictures?color=000&v=1

/svg/core/actions/toggle-pictures?color=fff&v=1

/svg/core/actions/triangle-e?color=000&v=1

/svg/core/actions/triangle-e?color=fff&v=1

/svg/core/actions/triangle-n?color=000&v=1

/svg/core/actions/triangle-n?color=fff&v=1

/svg/core/actions/triangle-s?color=000&v=1

/svg/core/actions/triangle-s?color=fff&v=1

/svg/core/actions/upload?color=000&v=1

/svg/core/actions/upload?color=fff&v=1

/svg/core/actions/user?color=000&v=1

/svg/core/actions/user?color=fff&v=1

/svg/core/actions/user-admin?color=000&v=1

/svg/core/actions/user-admin?color=fff&v=1

/svg/core/actions/video?color=000&v=2

/svg/core/actions/video?color=fff&v=2

/svg/core/actions/video-off?color=000&v=1

/svg/core/actions/video-off?color=fff&v=1

/svg/core/actions/video-switch?color=000&v=1

/svg/core/actions/video-switch?color=fff&v=1

/svg/core/actions/view-close?color=000&v=1

/svg/core/actions/view-download?color=000&v=1

/svg/core/actions/view-pause?color=000&v=1

/svg/core/actions/view-play?color=000&v=1

/svg/core/categories/auth?color=fff&v=1

/svg/core/categories/bundles?color=fff&v=1

/svg/core/categories/customization?color=fff&v=1

/svg/core/categories/dashboard?color=fff&v=1

/svg/core/categories/files?color=fff&v=1

/svg/core/categories/games?color=fff&v=1

/svg/core/categories/integration?color=fff&v=1

/svg/core/categories/monitoring?color=fff&v=1

/svg/core/categories/multimedia?color=fff&v=1

/svg/core/categories/office?color=fff&v=1

/svg/core/categories/organization?color=fff&v=1

/svg/core/categories/social?color=fff&v=1

/svg/core/categories/workflow?color=fff&v=1

/svg/core/clients/desktop?color=000&v=1

/svg/core/clients/desktop?color=fff&v=1

/svg/core/clients/phone?color=000&v=1

/svg/core/clients/phone?color=fff&v=1

/svg/core/clients/tablet?color=000&v=1

/svg/core/clients/tablet?color=fff&v=1

/svg/core/filetypes/file?color=969696&v=1

/svg/core/filetypes/folder?color=000&v=1

/svg/core/filetypes/folder?color=0082c9&v=1

/svg/core/filetypes/folder?color=fff&v=1

/svg/core/filetypes/folder-drag-accept?color=0082c9&v=1

/svg/core/filetypes/text?color=969696&v=1

/svg/core/places/calendar?color=000&v=1

/svg/core/places/calendar?color=fff&v=1

/svg/core/places/contacts?color=000&v=1

/svg/core/places/contacts?color=fff&v=1

/svg/core/places/files?color=000&v=1

/svg/core/places/home?color=000&v=1

/svg/core/places/home?color=fff&v=1

/svg/core/places/link?color=000&v=1

/svg/core/places/link?color=fff&v=1

/svg/core/places/music?color=000&v=1

/svg/core/places/music?color=fff&v=1

/svg/core/places/picture?color=000&v=1

/svg/core/places/picture?color=fff&v=1

/svg/spreed/app-dark?color=fff&v=1

link

stylesheet

/apps/files_rightclick/css/app.css?v=62abc69f-6

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

199 Bytes

local SRI possible, possible hash-values:

sha256-LR87ktdZG2mgbLi9bNqOTS+k7Z67RwSImQeAokI9C7c=
sha384-06AxmrXqmpxvhFBgMJ0ozHn5lNMH8Vx2HfmVpdmpSh7OvLyMN2QA8jBF+D6nwMd/
sha512-mWSSuV5a/ybLeQ8EsD6md/1A6jLfJcmZWaVOrrFgTqYpZMPo94IIpJ2qw686eAWz9VT975u+ylOgmOcVikcmsw==

link

stylesheet

/apps/theming/styles?v=6

200

text/css;charset=UTF-8
X-Content-Type-Options nosniff found

Compression required: 541 Bytes

local SRI possible, possible hash-values:

sha256-IeSqbPmXy1usbmaYgJ03w8nptHfPSA22Dfp1e42ZKhg=
sha384-+TZeSB4GawkoZzBes+qSoYwITqIQwpU1RocO0txvaxmuaHVgtetr1fDFTmCbr4V5
sha512-/s7FCRY2ery8iF3et6FEUlvHhMhIZDKHVaMolFtbVcNLHwR+CRbRnIQPXwza3+OleC/NseG2PWPaPycJPqTm+w==

Content loaded via url("...")

./img/core/filetypes/folder.svg?v=6

./img/core/filetypes/folder-drag-accept.svg?v=6

./img/core/filetypes/text.svg?v=6

/core/img/background.png?v=6

/svg/core/logo/logo?color=ffffff&v=1

link

stylesheet

/core/css/guest.css?v=e7f22de1-6

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 5581 Bytes

local SRI possible, possible hash-values:

sha256-1TCtDUU3R11mB7jr6lNgfHkvI3Ma31+P1TSLflCMSz4=
sha384-0+LtjqwqdvVXHTmA6PLjuWpyuF0jzKp/E+aIBrbdYL1bLe7IdwCT3W1fPcYBi1dB
sha512-vvGfRarsTGM/up0KkyU69JTweXC4oxcOX5tSIadCKMuaGWIQnd577siZ1rxKY2stz9ty9HhVppVYL9At8CCrzg==

Content loaded via url("...")

../img/actions/caret-white.svg?v=1

../img/actions/checkbox-mark-white.svg

../img/actions/checkmark-white.svg?v=1

../img/actions/confirm.svg?v=2

../img/actions/confirm-white.svg?v=2

../img/actions/error-white.svg?v=1

../img/actions/info-white.svg?v=2

../img/actions/toggle.svg?v=1

../img/background.png?v=2

../img/loading.gif

../img/loading-dark.gif

../img/loading-small.gif

../img/loading-small-dark.gif

../img/logo/logo.svg?v=1

link

stylesheet

/custom_apps/breezedark/css/guest.css?v=e1912139-6

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 1529 Bytes

local SRI possible, possible hash-values:

sha256-ViUHSlqmRF346K1tLrTTMGJVb+meh1EHf2baQkhhJrg=
sha384-5pQhKRtYSgaQtDyXUA9l+rh8st90IEo6qXfdj7mEooVtXqTgbwgkELPuC5XtG/Ru
sha512-K87BIZ6s56XnNPYhuKOtqT242F1a90RTSzURycSiaU4+7noLFoYCkgzged1ouBr8osJrQyBQiXbs38vle3IrkQ==

Content loaded via url("...")

../../../core/img/background.png

../../../index.php/apps/theming/image/background

link

stylesheet

/custom_apps/unsplash/css/login.css?v=08b3d4e3-6

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

260 Bytes

local SRI possible, possible hash-values:

sha256-LXAb34MZnCCiaqT4Q2nBpEjsV1jAA6n8iu9LSmZ7XO4=
sha384-2lgb8ewtC5n3bCl2HcNsJSId6HOtBTUlPr2OFQ8dtqz5bawjH+9n4YFYAHns0mvn
sha512-3Ea6YrmVDahA4I7983C+tqttAPx//oIqhI4udDNGkXoEyuWS3hcUEv7nR0iPoNLSQ2v1imnlTNdBlnnI7oCgjw==

Content loaded via url("...")

https://source.unsplash.com/featured/?nature,nature

meta

charset

utf-8

meta

og:description

meta

og:image

https://cloud.obelix05.duckdns.org/apps/theming/icon?v=6

200

image/png
X-Content-Type-Options nosniff found

No Compression - 27505 Bytes

meta

og:site_name

LiHannes Nextcloud

meta

og:title

LiHannes Nextcloud

meta

og:type

website

meta

og:url

https://cloud.obelix05.duckdns.org/

302

https://cloud.obelix05.duckdns.org/login

text/html; charset=UTF-8
X-Content-Type-Options nosniff found

0 Bytes

meta

X-UA-Compatible

IE=edge

meta

apple-itunes-app

app-id=1125420102

meta

robots

noindex, nofollow

meta

theme-color

#0082c9

meta

viewport

width=device-width, initial-scale=1.0, minimum-scale=1.0

script

src

/apps/accessibility/js/accessibilityoca.js?v=e7f22de1-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 5585 Bytes

local SRI possible, possible hash-values:

sha256-p3xKaN3cPizMHjpbQglXz7bWcYpkq6kSEG3y80B/TlY=
sha384-P3vGANt4aWtmf4aYg1LaxH3HQGWo0hPOF6e2sKTOAI3wVCihREGBfOs8L9NhWHYb
sha512-y70HacxxViX7dwGOMGYhS89K+JN5lNri4SpSwJVfLx1C8iDgEWbkyMmpLIdQRRRjvCgwF076ejx5jxdHjTEBPg==

script

src

/apps/files_rightclick/js/files.js?v=e7f22de1-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 1270 Bytes

local SRI possible, possible hash-values:

sha256-qnirmBk4ysLEwH46JHxsJE5R9oIKL/43G4wi6ikFydY=
sha384-GAymCn+Om0nrry/bsjMH4vxA+W2InrWeY8oeTSxXr1XvxWFXqtI8ULbKeHPMLgYb
sha512-KUT+mHlZm57rrbOsWWKry/P+8OMJ/buEPTdPbJR94s8Pvkzu0BRRVQx26ERiCVwvWFk23nboCpLDRKg617DlJw==

script

src

/apps/files_rightclick/js/script.js?v=e7f22de1-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 3219 Bytes

local SRI possible, possible hash-values:

sha256-ImP9ubQwKSVs8h7hpXfj1MyRrhUJSSAMBXM7GeHhWRI=
sha384-oz3FeiEkCWUpvcGxFe0lc0vHRHpvgaga6ts9uF5lMHUf/kO+DunGPsgCGKfnUn33
sha512-jDxJYxtP1u8YlX9IvYzR0g/AQrnwi2YYJjZQ108k5kdO47wTn6iccP1QMoXQSvQR1wvMt+PbsFyZIQxfyDVulQ==

script

src

/apps/files_sharing/js/dist/main.js?v=e7f22de1-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 1073 Bytes

local SRI possible, possible hash-values:

sha256-OyHa3mPD/yJwjtKPlIy5fKAanrtYuf0OftlkF6SEBQ0=
sha384-P3r+720Apf5FVk9N5je1uPuYtTFLd30wecVwTJ+gTfQdaK+tlZFPitiwij6w1ZaE
sha512-ZXMAfPi48vvHwaJKpG+VbxrDyXQuytLxDPQsLifhb76wUw/iwCzUayb6o69D11AS9IYC2y8wHtPM4rgMlcNc9Q==

script

src

/apps/files_videoplayer/js/files_videoplayer-main.js?v=e7f22de1-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 19471 Bytes

local SRI possible, possible hash-values:

sha256-PaNY1tNpWz8d9mKQDoDcPOEw1l9Gs7qjdDcPhdJXTWg=
sha384-3keELUqnaW5c2A/X1hwLHqCvYfJhIw4LI1G4M1TsWSEjGaNx32RCfwE5yDjNeMRE
sha512-UIcTCalsBqjiFf2bffxD9JwnTFYxk5q715yB1JyTGvlULxAu+kKxC/2OBYAqQTnX/N3YN/+vqfcn5vGzSBebMQ==

script

src

/apps/theming/js/theming.js?v=e7f22de1-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

60 Bytes

local SRI possible, possible hash-values:

sha256-7E5z5JvKP25SPD39ZuWPoVfIHE2l6z+gzqpYm6jcB4U=
sha384-RgfcEmN83rAzQ22NMxXMt+aycjGGuR1FOu0Lwguj2MOFZ1WIIYPjRA0M3KPXYkv3
sha512-R1ZIFQ46FERE2rH4436ql+eKqBCuI4MIpeSahNGHoovE6BzeJPCFjtzRwr5x+SkADJ+ve9v82W+uKszcTMMpIg==

script

src

/core/js/dist/files_client.js?v=e7f22de1-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 42890 Bytes

local SRI possible, possible hash-values:

sha256-68LwjFWv3GRy8JQxaS7/VLnHgvwqerrOPVZykwzVtxM=
sha384-hWT6vL9EvKfQ1bCjafUSN/7LyGX6taShqoUNIeZYyAqAWWweCWxndTyjBGjboR0E
sha512-o3nyloGnVfLsiNOTVDxubGVrurHjEc0rJ08RuMd4Px9LBn4us7VYaA0PXekAA1zSgH8+CQIszp6McJ95mPqJSw==

script

src

/core/js/dist/files_fileinfo.js?v=e7f22de1-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 9459 Bytes

local SRI possible, possible hash-values:

sha256-jV96H6LiZxV2aYhJVNTrPcWjdF7oBRSb9T8MgQuisM8=
sha384-XnR+2s5Pd/U1sCME28GLouT5xIWIXj7V5lTifDhfEOePL869FzNRo8kZVV1yGu7f
sha512-UeGfyox8UB7JbvfHZLS3N4k0nKW6tTse5qTY1E/JUbqNBXGHGh2Dbs6D8SL7aBQSBLgs5XvH8GIF3oZOUcPMDw==

script

src

/core/js/dist/login.js?v=e7f22de1-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 270843 Bytes

local SRI possible, possible hash-values:

sha256-wib5xEhIiVTvm70Csq67dVT6uBay1PsMrVkR90+CkDk=
sha384-8Y0YO+UZseOjPzZ/UfL804FZrlcExv+rBTZSvUviQxIOAZnTMlhnsiehv6ndPiYa
sha512-8sLefd+TKNXTEmslbJGG9eGH3dfnPQEc50ecLFxXkE3EndzABxApVbSF/iJZjONsA5802bW1WRqieLPj1/H0ww==

script

src

/core/js/dist/main.js?v=e7f22de1-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 487184 Bytes

local SRI possible, possible hash-values:

sha256-FzJrUX+kBeobYfn14EoRFUbKMlAjbsJPk0Wu3cZDNbA=
sha384-cjj+uwTOmXdTlGkTDhZObZ4Vlh9Vvr0TUeHB+LUDTNSPV5B7mKWGenoXLXmUtISN
sha512-w6F91POTi7rPb/cBibbrpAdurGkbRuVORYml9RBi+uV9paG+7VC9xgaKKXxE6SIZ7DpsfVlhKZ38sgJkkz+b9Q==

script

src

/core/js/oc.js?v=e7f22de1

200

defer attribute found

text/javascript;charset=UTF-8
X-Content-Type-Options nosniff found

Cache-Control: no-cache, no-store, must-revalidate - max-age missing.

Compression required: 1558 Bytes

local SRI possible, possible hash-values:

sha256-XXsBOggq/KRYiD7xo//yU0ICQXKaMVpqtyJHbt7pZao=
sha384-RU0sBJ2/tc3s/nehlWrHzVZ0NxiIdP0feUF15IGf185PSGscYWgTnjafk8cb3XI/
sha512-MzCo4UXufqxOQz3IAXCX0HGWbEufTJU3u939HY8WU/vDByZuf+lExRw9QCoi2NFrH+FiTquF6AL54dMtIQB+SQ==

script

src

/custom_apps/breezedark/js/breezedark.js?v=e7f22de1-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 763 Bytes

local SRI possible, possible hash-values:

sha256-uk796nFT50NwoLocdspTJkAf93galt+yPIpbO5P17lA=
sha384-gLHLlwWuzGmpyKTZpha1xHKhExoKMl3otVhbjsQDmHTzjgbAHq+OLF7mFsc9VvIl
sha512-zftJFuCTjDqAzfQvoRchcf7G3phaJVqJuPlKKuMMNyX1U6qIoINUxWBhYVQceArf5+dOXwHkvOe2Ov6kKrZnfw==

script

src

/js/core/merged-template-prepend.js?v=e7f22de1-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=31536000, immutable - with long duration found.

Compression required: 3054 Bytes

local SRI possible, possible hash-values:

sha256-faIS4Auc9UJxp3SbwO01St0sAMp1aRWAEZFeFU+5ag8=
sha384-s91i6VKuYxfCIxryoSXuXDvZHluC4iMXjoWeqTK3QDp+PBCg6lakl9kQblT/GAg1
sha512-GmlOV26yP8X0croQfV/moTjFYY/m550HXQ2bxtViSkbrkA7eCCh5IvNK/QGRD7GgECAPFQy0/4EOfs0TpjErcQ==

12. Html-Parsing via https://validator.w3.org/nu/

Small Code update, wait one minute

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: ns1.duckdns.org, ns2.duckdns.org, ns3.duckdns.org, ns4.duckdns.org, ns5.duckdns.org, ns6.duckdns.org

QNr.	Domain	Type	NS used
1	org	NS	e.root-servers.net (2001:500:a8::e)
	Answer: a0.org.afilias-nst.info, a2.org.afilias-nst.info, b0.org.afilias-nst.org, b2.org.afilias-nst.org, c0.org.afilias-nst.info, d0.org.afilias-nst.org
2	ns1.duckdns.org: 99.79.143.35	NS	a0.org.afilias-nst.info (2001:500:e::1)
	Answer: ns2.duckdns.org 35.182.183.211
	Answer: ns3.duckdns.org 35.183.157.249
	Answer: ns4.duckdns.org 3.97.51.116
	Answer: ns5.duckdns.org 99.79.16.64
	Answer: ns6.duckdns.org 3.97.58.28

14. CAA - Entries

Domainname	flag	Value	∑ Queries
www.cloud.obelix05.duckdns.org			1
cloud.obelix05.duckdns.org			1
obelix05.duckdns.org			1
duckdns.org	0	no CAA entry found	1
org	0	no CAA entry found	1

15. TXT - Entries

Domainname	Status	∑ Queries
obelix05.duckdns.org	ok	1
cloud.obelix05.duckdns.org	ok	1
www.cloud.obelix05.duckdns.org	ok	1
_acme-challenge.cloud.obelix05.duckdns.org	missing entry or wrong length	1
_acme-challenge.www.cloud.obelix05.duckdns.org	missing entry or wrong length	1
_acme-challenge.cloud.obelix05.duckdns.org.obelix05.duckdns.org	perhaps wrong	1
_acme-challenge.cloud.obelix05.duckdns.org.cloud.obelix05.duckdns.org	perhaps wrong	1
_acme-challenge.www.cloud.obelix05.duckdns.org.cloud.obelix05.duckdns.org	perhaps wrong	1
_acme-challenge.www.cloud.obelix05.duckdns.org.www.cloud.obelix05.duckdns.org	perhaps wrong	1

16. DomainService - Entries

No DomainServiceEntries entries found

17. Cipher Suites

No Ciphers found

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

Permalink: https://check-your-website.server-daten.de/?i=415322fa-efcc-4ceb-81d7-a4e3188f8b96

Last Result: https://check-your-website.server-daten.de/?q=cloud.obelix05.duckdns.org - 2022-04-06 08:33:38

Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=cloud.obelix05.duckdns.org" target="_blank">Check this Site: cloud.obelix05.duckdns.org</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

QR-Code of this page - https://check-your-website.server-daten.de/?d=cloud.obelix05.duckdns.org

Check DNS, Urls + Redirects, Certificates and Content of your Website

Older results

1. IP-Addresses

2. DNSSEC

3. Name Servers

4. SOA-Entries

5. Screenshots

Mobile- and other Chrome-Checks

6. Url-Checks

7. Comments

1. General Results, most used to calculate the result

2. Header-Checks

3. DNS- and NameServer - Checks

4. Content- and Performance-critical Checks

8. Connections

9. Certificates

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

11. Html-Content - Entries

Summary

Details (currently limited to 500 rows - some problems with spam users)

12. Html-Parsing via https://validator.w3.org/nu/

13. Nameserver - IP-Adresses

14. CAA - Entries

15. TXT - Entries

16. DomainService - Entries

17. Cipher Suites

18. Portchecks