Check DNS, Urls + Redirects, Certificates and Content of your Website




H

Http as Destination - no encryption

Checked:
25.05.2023 22:07:04


Older results

No older results found


1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
coachchamp.de
A

yes
1
0

AAAA

yes


www.coachchamp.de
A
104.21.38.145
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.
No Hostname found
yes
1
0

A
172.67.223.166
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.
No Hostname found
yes
1
0

AAAA
2606:4700:3033::6815:2691
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.

yes



AAAA
2606:4700:3034::ac43:dfa6
San Francisco/California/United States (US) - Cloudflare, Inc.

yes


*.coachchamp.de
A
104.21.38.145
yes



A
172.67.223.166
yes



AAAA
2606:4700:3033::6815:2691
yes



AAAA
2606:4700:3034::ac43:dfa6
yes



CNAME

yes



2. DNSSEC

Zone (*)DNSSEC - Informations

Zone: (root)
(root)
1 DS RR published



DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=



Status: Valid because published



2 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 8, KeyTag 60955, Flags 256



1 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 11.06.2023, 00:00:00 +, Signature-Inception: 21.05.2023, 00:00:00 +, KeyTag 20326, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: de
de
1 DS RR in the parent zone found



DS with Algorithm 8, KeyTag 26755, DigestType 2 and Digest 80E1eAmllUMRzLgq3hFMbB1ySnXAOVE3qjl4A1Ql540=



1 RRSIG RR to validate DS RR found



RRSIG-Owner de., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 07.06.2023, 17:00:00 +, Signature-Inception: 25.05.2023, 16:00:00 +, KeyTag 60955, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 60955 used to validate the DS RRSet in the parent zone



2 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 26755, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 8, KeyTag 64125, Flags 256



1 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner de., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 04.06.2023, 22:39:48 +, Signature-Inception: 21.05.2023, 21:09:48 +, KeyTag 26755, Signer-Name: de



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26755 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 26755, DigestType 2 and Digest "80E1eAmllUMRzLgq3hFMbB1ySnXAOVE3qjl4A1Ql540=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: coachchamp.de
coachchamp.de
0 DS RR in the parent zone found



DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "qt8dojn2g1oh8tvhcmd1hul8ljgflc0t" between the hashed NSEC3-owner "qt8ce7dqoeh1lqctnfdtipj0tbhalah9" and the hashed NextOwner "qt8gvm3d9mel8qs9dvp980c0860sjlho". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: No Bitmap? Validated: RRSIG-Owner qt8ce7dqoeh1lqctnfdtipj0tbhalah9.de., Algorithm: 8, 2 Labels, original TTL: 7200 sec, Signature-expiration: 06.06.2023, 06:03:50 +, Signature-Inception: 23.05.2023, 04:33:50 +, KeyTag 64125, Signer-Name: de



DS-Query in the parent zone sends valid NSEC3 RR with the Hash "tjlb7qbojvmlf1s6gdriru7vsms1lg16" as Owner. That's the Hash of "de" with the NextHashedOwnerName "tjlbltegn5dud2nvegqfvtvr1it3qlql". So that domain name is the Closest Encloser of "coachchamp.de". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner tjlb7qbojvmlf1s6gdriru7vsms1lg16.de., Algorithm: 8, 2 Labels, original TTL: 7200 sec, Signature-expiration: 06.06.2023, 04:53:31 +, Signature-Inception: 23.05.2023, 03:23:31 +, KeyTag 64125, Signer-Name: de



0 DNSKEY RR found




Zone: www.coachchamp.de
www.coachchamp.de
0 DS RR in the parent zone found


3. Name Servers

DomainNameserverNS-IP
www.coachchamp.de
  anderson.ns.cloudflare.com / 67m58

coachchamp.de
  anderson.ns.cloudflare.com / 67m58
108.162.195.177
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
162.159.44.177
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
172.64.35.177
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
2606:4700:58::a29f:2cb1
Montreal/Quebec/Canada (CA) - Cloudflare, Inc.


 
2803:f800:50::6ca2:c3b1
San José/Provincia de San Jose/Costa Rica (CR) - Cloudflare, Inc.


 
2a06:98c1:50::ac40:23b1
London/England/United Kingdom (GB) - Cloudflare, Inc.


  zainab.ns.cloudflare.com / 67m73
108.162.194.149
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
162.159.38.149
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
172.64.34.149
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
2606:4700:50::a29f:2695
Montreal/Quebec/Canada (CA) - Cloudflare, Inc.


 
2803:f800:50::6ca2:c295
San José/Provincia de San Jose/Costa Rica (CR) - Cloudflare, Inc.


 
2a06:98c1:50::ac40:2295
London/England/United Kingdom (GB) - Cloudflare, Inc.

de
  a.nic.de / ns-2.de.de8.bind


  f.nic.de / ns-1.de.de1


  l.de.net / ns-2.de.fr1


  n.de.net / s3.wie


  s.de.net / ns-3.de.de9


  z.nic.de / ns-1.de.de2.bind


4. SOA-Entries


Domain:de
Zone-Name:de
Primary:f.nic.de
Mail:dns-operations.denic.de
Serial:1685045134
Refresh:7200
Retry:7200
Expire:3600000
TTL:7200
num Entries:6


Domain:coachchamp.de
Zone-Name:coachchamp.de
Primary:anderson.ns.cloudflare.com
Mail:dns.cloudflare.com
Serial:2310530779
Refresh:10000
Retry:2400
Expire:604800
TTL:1800
num Entries:12


Domain:www.coachchamp.de
Zone-Name:coachchamp.de
Primary:anderson.ns.cloudflare.com
Mail:dns.cloudflare.com
Serial:2310530779
Refresh:10000
Retry:2400
Expire:604800
TTL:1800
num Entries:1


5. Screenshots

No Screenshot listed, because no url-check with https + http status 200-299, 400-599 + not-ACME-check found.

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://www.coachchamp.de/
104.21.38.145
200

0.097
H
small visible content (num chars: 0)
Date: Thu, 25 May 2023 20:07:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Last-Modified: Thu, 25 May 2023 17:00:02 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sboImLXyC%2F1sCjg%2Bm9nN9Yl2fXxkXKhjrvOt6k2J6hWOa%2FTBrRVB4k5IakFKuGPeBcIwDSs2yrY9h%2FKOzu%2B7RobJPSucmKur0LO6kkqdg0gVH4UGv3jS1K9zs%2BCYIVmX0riLvA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7cd067f3f9cbbf8a-WAW
Content-Encoding: gzip

• http://www.coachchamp.de/
172.67.223.166
200

0.097
H
small visible content (num chars: 0)
Date: Thu, 25 May 2023 20:07:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Last-Modified: Thu, 25 May 2023 17:00:02 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Od3q4peptj0keINV14QyNkAlWYB9pqOoupuAPILrMyanvD9Zi5XiSG3xwVS4zQIAKJkkv3I1GyD8AmBmbF%2F%2BAj2VHOQ3hkE55wr6V92FideV8dwNgLbZhuDlCjH37ortr2f4OQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7cd067f4a8153504-WAW
Content-Encoding: gzip

• http://www.coachchamp.de/
2606:4700:3033::6815:2691
200

0.100
H
small visible content (num chars: 0)
Date: Thu, 25 May 2023 20:07:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Last-Modified: Thu, 25 May 2023 17:00:02 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=85T6vZNYOxKH7cd7ZvkEnjAj%2FqztoFBdgkouE2BPqwP2gUWAvt%2F5sEjlJdKiJrfrB%2Bj19HlGjGM2GOBaHKblI5pIbeuZlAysMVS45rY%2BLwO7ZKVfPyFhQ%2BEN3gk1El3WUjeQdeD0oXQrXlWGkbg3mg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7cd067f57ba6b784-AMS
Content-Encoding: gzip

• http://www.coachchamp.de/
2606:4700:3034::ac43:dfa6
200

0.073
H
small visible content (num chars: 0)
Date: Thu, 25 May 2023 20:07:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Last-Modified: Thu, 25 May 2023 17:00:02 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8qZUTrM6xu9As5%2B2vMcNKprqcAKd8Q1%2FkDChsTI3JlhbfB0nPiAp3VAdu%2BnCVk1wUahFsYHutyCG%2BqT6ri%2FuIkIX8kMfwAKIXORMX9FITkqwJ8CeF6hpQXz6YGGRvF5kVc9B7XyGFx%2F75m2MG4gdmA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7cd067f61c0a0e14-AMS
Content-Encoding: gzip

• https://www.coachchamp.de/
104.21.38.145
301
http://www.coachchamp.de/
2.954
F
Date: Thu, 25 May 2023 20:07:42 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=3600
Expires: Thu, 25 May 2023 21:07:42 GMT
Location: http://www.coachchamp.de/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2RHdXpkeK7nxpy4vxOw59UKnjWB9Ss0bqTkXEIIZKl9j5wCHJtZwzrT0ukWU0hleSjaHLcEIh7BjnUtYU0y%2BlFj5XoZQ%2FeA5WEwe2F87qc725mJ9wp6FDBIDAzOpJ3PW7h3Vqg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cd067f8fbd935c9-WAW

• https://www.coachchamp.de/
172.67.223.166
301
http://www.coachchamp.de/
2.563
F
Date: Thu, 25 May 2023 20:07:46 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=3600
Expires: Thu, 25 May 2023 21:07:46 GMT
Location: http://www.coachchamp.de/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b%2FYlJ9fvCtD9zj2KYKg6gyOfPA1GMJUMGzGMVPJ00i1B6BJMlsPAIsRGw3gc1Ycr5raLUYTcPQ3wxFFvgBL%2BkLls%2BLvSh3bNO46FZwTvDHogOf1J5QmBEYCMQDIUvgrJehumHw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cd068129a4b3497-WAW

• https://www.coachchamp.de/
2606:4700:3033::6815:2691
301
http://www.coachchamp.de/
2.634
F
Date: Thu, 25 May 2023 20:07:49 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=3600
Expires: Thu, 25 May 2023 21:07:49 GMT
Location: http://www.coachchamp.de/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OWW13EUfcZiVhwzAa4XwxGTx7TkCNM0k90uq8UOjZlf8eTZeHzRAkk4GVm%2FIzQZMQQOpCGedVXDRNlceMBprbC0V6NkjARoZoZi1%2FYgrBtTdfKrDbjAA1pJBJ777%2BEdMJpTE2OMGWZIoDRH2UnSMdA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cd06828dd8e0bb9-AMS

• https://www.coachchamp.de/
2606:4700:3034::ac43:dfa6
301
http://www.coachchamp.de/
2.623
F
Date: Thu, 25 May 2023 20:07:53 GMT
Transfer-Encoding: chunked
Connection: close
Cache-Control: max-age=3600
Expires: Thu, 25 May 2023 21:07:53 GMT
Location: http://www.coachchamp.de/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yKaLR8RoW1ymI6Q0fr2sK7DJ8prN7XHFaDt7KG%2B0dyGu7655fK4vssoQPTw96XQOacJuozqNIp7Fgx1rOHf3b8suH6Xmgb4iCZgPgiiVy9OAzZiR0YuiMUNcE1pSahWFAPDY7MwunKY9YpnXHh2agA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cd0683e08cd0b48-AMS

• http://www.coachchamp.de/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
104.21.38.145 GZip used - 239 / 279 - 14.34 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 100.00 %
0.093
A
Not Found
Visible Content: Not Found The requested URL was not found on this server. Apache/2.4.38 (Debian) Server at www.coachchamp.de Port 80
Date: Thu, 25 May 2023 20:07:56 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: close
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QxY%2BUee2EoWevb4ZYntQ75%2FFN9gXNUi6p2q9zSkHf6cFRfzAQwGQK5kiy1rX0xei8SCPqfw4TSRJ%2F0jAqBAft%2FmbNu7K1Bx44Z1F4kLPy%2BQvHWe0PBQfI7h1LGs7yjkTwnfrKg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7cd0685338d934e6-WAW
Content-Encoding: gzip

• http://www.coachchamp.de/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
172.67.223.166 GZip used - 239 / 279 - 14.34 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 100.00 %
0.107
A
Not Found
Visible Content: Not Found The requested URL was not found on this server. Apache/2.4.38 (Debian) Server at www.coachchamp.de Port 80
Date: Thu, 25 May 2023 20:07:56 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: close
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3wFFPf5uRaa2sesjRirz%2BQHdPbDK1isCkiPPAGO6WevhZ%2BMRAHsZMMB2hOaFSTPnKiIxzVwb%2Bv1UggS00LD3rM6XiHx447VFxKN1ag5Q5m2WUI477VH2ajUNddmrPIQzZEfZuA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7cd068541e543534-WAW
Content-Encoding: gzip

• http://www.coachchamp.de/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2606:4700:3033::6815:2691 GZip used - 239 / 279 - 14.34 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 100.00 %
0.063
A
Not Found
Visible Content: Not Found The requested URL was not found on this server. Apache/2.4.38 (Debian) Server at www.coachchamp.de Port 80
Date: Thu, 25 May 2023 20:07:56 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: close
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FfeAC40yQdt7eQiHc5BF4Y%2F9xlMo0Ix9jJ9Mc0sqWTvVBYkom%2BlauDj2d76uTra7gn1rymeYCh2LvaaniWuvqVPJt130BmL2%2FgCEchM8zl%2FFrShoEGJyMO0X7QutUOxyBgN8p1AoN4CvE%2B%2BbAXwzzg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7cd06854ee625c8c-FRA
Content-Encoding: gzip

• http://www.coachchamp.de/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2606:4700:3034::ac43:dfa6 GZip used - 239 / 279 - 14.34 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 100.00 %
0.070
A
Not Found
Visible Content: Not Found The requested URL was not found on this server. Apache/2.4.38 (Debian) Server at www.coachchamp.de Port 80
Date: Thu, 25 May 2023 20:07:57 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: close
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m6nLXDYIaALpoEx2igSlu7mYtEnjkYZsUBI4uLcbgt73s8Mnl6e%2FxKefWq%2BUi%2F1iOaKhVK2kvwB3s2%2BuE9nMTNsbBCD3P9axacbFBB8QoqYwyJWQEOF1z5QrFLSCKG0r%2BxNXeXzDKPjXuSNHMRipZw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7cd068558aeb3734-FRA
Content-Encoding: gzip

• https://104.21.38.145/
104.21.38.145
-10

0.034
P
SecureChannelFailure - The request was aborted: Could not create SSL/TLS secure channel.

• https://172.67.223.166/
172.67.223.166
-10

0.036
P
SecureChannelFailure - The request was aborted: Could not create SSL/TLS secure channel.

• https://[2606:4700:3033:0000:0000:0000:6815:2691]/
2606:4700:3033::6815:2691
-10

0.040
P
SecureChannelFailure - The request was aborted: Could not create SSL/TLS secure channel.

• https://[2606:4700:3034:0000:0000:0000:ac43:dfa6]/
2606:4700:3034::ac43:dfa6
-10

0.043
P
SecureChannelFailure - The request was aborted: Could not create SSL/TLS secure channel.

7. Comments


1. General Results, most used to calculate the result

Aname "coachchamp.de" is domain, public suffix is ".de", top-level-domain is ".de", top-level-domain-type is "country-code", Country is Germany, tld-manager is "DENIC eG", num .de-domains preloaded: 8855 (complete: 221801)
AGood: All ip addresses are public addresses
AGood: Minimal 2 ip addresses per domain name found: www.coachchamp.de has 4 different ip addresses (authoritative).
AGood: Ipv4 and Ipv6 addresses per domain name found: www.coachchamp.de has 2 ipv4, 2 ipv6 addresses
AGood: No asked Authoritative Name Server had a timeout
AGood - only one version with Http-Status 200
AGood: No cookie sent via http.
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):4 complete Content-Type - header (8 urls)
http://www.coachchamp.de/ 104.21.38.145


Url with incomplete Content-Type - header - missing charset
http://www.coachchamp.de/ 172.67.223.166


Url with incomplete Content-Type - header - missing charset
http://www.coachchamp.de/ 2606:4700:3033::6815:2691


Url with incomplete Content-Type - header - missing charset
http://www.coachchamp.de/ 2606:4700:3034::ac43:dfa6


Url with incomplete Content-Type - header - missing charset
Bhttps://www.coachchamp.de/ 104.21.38.145
301

Missing HSTS-Header
Bhttps://www.coachchamp.de/ 172.67.223.166
301

Missing HSTS-Header
Bhttps://www.coachchamp.de/ 2606:4700:3033::6815:2691
301

Missing HSTS-Header
Bhttps://www.coachchamp.de/ 2606:4700:3034::ac43:dfa6
301

Missing HSTS-Header
Fhttps://www.coachchamp.de/ 104.21.38.145
301
http://www.coachchamp.de/
Wrong redirect https - http - never redirect https to http
Fhttps://www.coachchamp.de/ 172.67.223.166
301
http://www.coachchamp.de/
Wrong redirect https - http - never redirect https to http
Fhttps://www.coachchamp.de/ 2606:4700:3033::6815:2691
301
http://www.coachchamp.de/
Wrong redirect https - http - never redirect https to http
Fhttps://www.coachchamp.de/ 2606:4700:3034::ac43:dfa6
301
http://www.coachchamp.de/
Wrong redirect https - http - never redirect https to http
HFatal error: No https - result with http-status 200, no encryption
HFatal error: http result with http-status 200, no encryption. Add a redirect http ⇒ https, so every connection is secure. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop.
Phttps://104.21.38.145/ 104.21.38.145
-10

Error creating a TLS-Connection: No more details available.
Phttps://172.67.223.166/ 172.67.223.166
-10

Error creating a TLS-Connection: No more details available.
Phttps://[2606:4700:3033:0000:0000:0000:6815:2691]/ 2606:4700:3033::6815:2691
-10

Error creating a TLS-Connection: No more details available.
Phttps://[2606:4700:3034:0000:0000:0000:ac43:dfa6]/ 2606:4700:3034::ac43:dfa6
-10

Error creating a TLS-Connection: No more details available.
AGood: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain www.coachchamp.de, 4 ip addresses.
Info: Checking the ip addresses of that domain name not exact one certificate found. So it's impossible to check if that domain requires Server Name Indication (SNI).: Domain www.coachchamp.de, 4 ip addresses.
BNo _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.coachchamp.de

2. Header-Checks (alpha, started 2022-10-23, may be buggy / incomplete)

U

No https result with http status 2** or 4** (standard-check) found, no header checked.

3. DNS- and NameServer - Checks

AInfo:: 7 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
AInfo:: 7 Queries complete, 7 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
Ok (4 - 8):: An average of 3.5 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 2 different Name Servers found: anderson.ns.cloudflare.com, zainab.ns.cloudflare.com, 2 Name Servers included in Delegation: anderson.ns.cloudflare.com, zainab.ns.cloudflare.com, 2 Name Servers included in 1 Zone definitions: anderson.ns.cloudflare.com, zainab.ns.cloudflare.com, 1 Name Servers listed in SOA.Primary: anderson.ns.cloudflare.com.
AGood: Only one SOA.Primary Name Server found.: anderson.ns.cloudflare.com.
AGood: SOA.Primary Name Server included in the delegation set.: anderson.ns.cloudflare.com.
AGood: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: anderson.ns.cloudflare.com, zainab.ns.cloudflare.com
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AGood: Minimal 2 different name servers (public suffix and public ip address) found: 2 different Name Servers found
Warning: All Name Servers have the same Top Level Domain / Public Suffix. If there is a problem with that Top Level Domain, your domain may be affected. Better: Use Name Servers with different top level domains.: 2 Name Servers, 1 Top Level Domain: com
Warning: All Name Servers have the same domain name. If there is a problem with that domain name (or with the name servers of that domain name), your domain may be affected. Better: Use Name Servers with different domain names / different top level domains.: Only one domain name used: cloudflare.com
AGood: Name servers with different Country locations found: 2 Name Servers, 3 Countries: CA, CR, GB
AInfo: Ipv4-Subnet-list: 6 Name Servers, 3 different subnets (first Byte): 108., 162., 172., 3 different subnets (first two Bytes): 108.162., 162.159., 172.64., 6 different subnets (first three Bytes): 108.162.194., 108.162.195., 162.159.38., 162.159.44., 172.64.34., 172.64.35.
AGood: Name Server IPv4-addresses from different subnet found:
AInfo: IPv6-Subnet-list: 6 Name Servers with IPv6, 3 different subnets (first block): 2606:, 2803:, 2a06:, 3 different subnets (first two blocks): 2606:4700:, 2803:f800:, 2a06:98c1:, 4 different subnets (first three blocks): 2606:4700:0050:, 2606:4700:0058:, 2803:f800:0050:, 2a06:98c1:0050:, 4 different subnets (first four blocks): 2606:4700:0050:0000:, 2606:4700:0058:0000:, 2803:f800:0050:0000:, 2a06:98c1:0050:0000:
AGood: Name Server IPv6 addresses from different subnets found.
AGood: Nameserver supports TCP connections: 12 good Nameserver
AGood: Nameserver supports Echo Capitalization: 12 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 12 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 12 good Nameserver
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

4. Content- and Performance-critical Checks

AGood: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AInfo: No img element found, no alt attribute checked
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
ADuration: 77590 milliseconds, 77.590 seconds


8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
www.coachchamp.de
104.21.38.145
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
supported
ok
www.coachchamp.de
104.21.38.145
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
supported
ok
http/2 via ALPN supported 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)
1CN=coachchamp.de

2CN=GTS CA 1P5, O=Google Trust Services LLC, C=US

3CN=GTS Root R1, O=Google Trust Services LLC, C=US


www.coachchamp.de
172.67.223.166
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
supported
ok

www.coachchamp.de
172.67.223.166
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
supported
ok
http/2 via ALPN supported 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)
1CN=coachchamp.de

2CN=GTS CA 1P5, O=Google Trust Services LLC, C=US

3CN=GTS Root R1, O=Google Trust Services LLC, C=US


www.coachchamp.de
2606:4700:3033::6815:2691
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
supported
ok

www.coachchamp.de
2606:4700:3033::6815:2691
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
supported
ok
http/2 via ALPN supported 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)
1CN=coachchamp.de

2CN=GTS CA 1P5, O=Google Trust Services LLC, C=US

3CN=GTS Root R1, O=Google Trust Services LLC, C=US


www.coachchamp.de
2606:4700:3034::ac43:dfa6
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
supported
ok

www.coachchamp.de
2606:4700:3034::ac43:dfa6
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
supported
ok
http/2 via ALPN supported 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)
1CN=coachchamp.de

2CN=GTS CA 1P5, O=Google Trust Services LLC, C=US

3CN=GTS Root R1, O=Google Trust Services LLC, C=US


9. Certificates

1.
1.
CN=coachchamp.de
25.05.2023
23.08.2023
expires in 80 days
coachchamp.de, *.coachchamp.de - 2 entries
1.
1.
CN=coachchamp.de
25.05.2023

23.08.2023
expires in 80 days
coachchamp.de, *.coachchamp.de - 2 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:008D4C3DA4CD0A45300E76041CC971EDD4
Thumbprint:B1AD33C0F677D2C41F351A92A70F3FED2E62BED8
SHA256 / Certificate:mGttzPFsy7+uOB1AUBo6v/esnFUW0K4JCIFASvJPyKc=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):138da3e7bead69b5a2fe50590eed14b9b2d136ecf4d2a44620dcb2da009ce0fe
SHA256 hex / Subject Public Key Information (SPKI):138da3e7bead69b5a2fe50590eed14b9b2d136ecf4d2a44620dcb2da009ce0fe (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.pki.goog/s/gts1p5/RAQszjE6DjQ
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)


2.
CN=GTS CA 1P5, O=Google Trust Services LLC, C=US
13.08.2020
30.09.2027
expires in 1579 days


2.
CN=GTS CA 1P5, O=Google Trust Services LLC, C=US
13.08.2020

30.09.2027
expires in 1579 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0203BC50A32753F0918022EDF1
Thumbprint:9C0B252A678A087FBEE496A44377F7556AC605E7
SHA256 / Certificate:l9QgA+EyVSlGCX8g75VfWxzVcKpDcteAAzpl775pdY0=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):f3559fd766dc2e51474007c996ec67cd9e85ae0fa827d3d663f5abc2eafcbe24
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.pki.goog/gtsr1
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)


3.
CN=GTS Root R1, O=Google Trust Services LLC, C=US
19.06.2020
28.01.2028
expires in 1699 days


3.
CN=GTS Root R1, O=Google Trust Services LLC, C=US
19.06.2020

28.01.2028
expires in 1699 days


KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:77BD0D6CDB36F91AEA210FC4F058D30D
Thumbprint:08745487E891C19E3078C1F2A07E452950EF36F6
SHA256 / Certificate:PuAnjfcfo8ElxM1IfwHXdGlOb8V+DNlMJO/XaRM5GOU=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):871a9194f4eed5b312ff40c84c1d524aed2f778bbff25f138cf81f680a7adc67
SHA256 hex / Subject Public Key Information (SPKI):871a9194f4eed5b312ff40c84c1d524aed2f778bbff25f138cf81f680a7adc67
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.pki.goog/gsr1
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:


4.
CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE
01.09.1998
28.01.2028
expires in 1699 days


4.
CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE
01.09.1998

28.01.2028
expires in 1699 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:040000000001154B5AC394
Thumbprint:B1BC968BD4F49D622AA89A81F2150152A41D829C
SHA256 / Certificate:69QQQOS7PsdCyeOB0x7ypBpItmhclufO88HfbNQzHJk=
SHA256 hex / Cert (DANE * 0 1):ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99
SHA256 hex / PublicKey (DANE * 1 1):2bcee858158cf5465fc9d76f0dfa312fef25a4dca8501da9b46b67d1fbfa1b64
SHA256 hex / Subject Public Key Information (SPKI):2bcee858158cf5465fc9d76f0dfa312fef25a4dca8501da9b46b67d1fbfa1b64
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:



10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuerlast 7 daysactivenum Certs
CN=E1, O=Let's Encrypt, C=US
0
1
1
CN=GTS CA 1P5, O=Google Trust Services LLC, C=US
0
1
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
5286379714
precert
CN=GTS CA 1P5, O=Google Trust Services LLC, C=US
2023-05-25 18:43:51
2023-08-23 18:43:50
*.coachchamp.de, coachchamp.de - 2 entries


5286378227
leaf cert
CN=E1, O=Let's Encrypt, C=US
2023-05-25 18:42:59
2023-08-23 18:42:58
*.coachchamp.de, coachchamp.de - 2 entries



2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Issuerlast 7 daysactivenum Certs
CN=R3, O=Let's Encrypt, C=US
0 /0 new
0
1

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
8788387022
leaf cert
CN=R3, O=Let's Encrypt, C=US
2023-02-22 17:33:29
2023-05-23 16:33:28
*.coachchamp.de, coachchamp.de
2 entries



11. Html-Content - Entries

No Html-Content entries found. Only checked if https + status 200/401/403/404


12. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: anderson.ns.cloudflare.com, zainab.ns.cloudflare.com

QNr.DomainTypeNS used
1
com
NS
k.root-servers.net (2001:7fd::1)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2
anderson.ns.cloudflare.com
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: ns3.cloudflare.com, ns4.cloudflare.com, ns5.cloudflare.com, ns6.cloudflare.com, ns7.cloudflare.com

Answer: ns3.cloudflare.com
162.159.0.33, 162.159.7.226, 2400:cb00:2049:1::a29f:21, 2400:cb00:2049:1::a29f:7e2

Answer: ns4.cloudflare.com
162.159.1.33, 162.159.8.55, 2400:cb00:2049:1::a29f:121, 2400:cb00:2049:1::a29f:837

Answer: ns5.cloudflare.com
162.159.2.9, 162.159.9.55, 2400:cb00:2049:1::a29f:209, 2400:cb00:2049:1::a29f:937

Answer: ns6.cloudflare.com
162.159.3.11, 162.159.5.6, 2400:cb00:2049:1::a29f:30b, 2400:cb00:2049:1::a29f:506

Answer: ns7.cloudflare.com
162.159.4.8
3
zainab.ns.cloudflare.com
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: ns3.cloudflare.com, ns4.cloudflare.com, ns5.cloudflare.com, ns6.cloudflare.com, ns7.cloudflare.com

Answer: ns3.cloudflare.com
162.159.0.33, 162.159.7.226, 2400:cb00:2049:1::a29f:21, 2400:cb00:2049:1::a29f:7e2

Answer: ns4.cloudflare.com
162.159.1.33, 162.159.8.55, 2400:cb00:2049:1::a29f:121, 2400:cb00:2049:1::a29f:837

Answer: ns5.cloudflare.com
162.159.2.9, 162.159.9.55, 2400:cb00:2049:1::a29f:209, 2400:cb00:2049:1::a29f:937

Answer: ns6.cloudflare.com
162.159.3.11, 162.159.5.6, 2400:cb00:2049:1::a29f:30b, 2400:cb00:2049:1::a29f:506

Answer: ns7.cloudflare.com
162.159.4.8
4
anderson.ns.cloudflare.com: 108.162.195.177, 162.159.44.177, 172.64.35.177
A
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
5
anderson.ns.cloudflare.com: 2606:4700:58::a29f:2cb1, 2803:f800:50::6ca2:c3b1, 2a06:98c1:50::ac40:23b1
AAAA
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
6
zainab.ns.cloudflare.com: 108.162.194.149, 162.159.38.149, 172.64.34.149
A
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
7
zainab.ns.cloudflare.com: 2606:4700:50::a29f:2695, 2803:f800:50::6ca2:c295, 2a06:98c1:50::ac40:2295
AAAA
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)


13. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.coachchamp.de
0

no CAA entry found
1
0
coachchamp.de
0

no CAA entry found
1
0
de
0

no CAA entry found
1
0


14. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
coachchamp.de

ok
1
0
www.coachchamp.de

ok
1
0
_acme-challenge.coachchamp.de

missing entry or wrong length
1
0
_acme-challenge.www.coachchamp.de

Name Error - The domain name does not exist
1
0
_acme-challenge.coachchamp.de.coachchamp.de

perhaps wrong
1
0
_acme-challenge.www.coachchamp.de.coachchamp.de

perhaps wrong
1
0
_acme-challenge.www.coachchamp.de.www.coachchamp.de

Name Error - The domain name does not exist
1
0


15. DomainService - Entries (SSHFP Check is new - 2022-09-24, may be incomplete, alpha, some results are required)

TypeDomainPrefValueDNS-errornum AnswersStatusDescription
_dmarc
TXT
_dmarc.coachchamp.de


0
0
ok



16. Cipher Suites

DomainIPPortCipher (OpenSsl / IANA)



Skipped, CDN used or too many ip addresses






17. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.



Permalink: https://check-your-website.server-daten.de/?i=cebcf85d-57f6-42a6-a5e2-fa3db86c33fb


Last Result: https://check-your-website.server-daten.de/?q=coachchamp.de - 2023-05-25 22:07:04


Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=coachchamp.de" target="_blank">Check this Site: coachchamp.de</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro