Check DNS, Urls + Redirects, Certificates and Content of your Website

...

skip EDNS-Check

skip Content-Check

check links

Wrong redirect http ⇒ https with new domain name

Checked:
30.08.2026 11:08:22

Older results

E - 24.01.2026 05:23:50

E - 20.10.2024 07:12:56

E - 30.12.2023 02:42:12

O - 20.02.2023 00:41:56

1. IP-Addresses

Host	Type	IP-Address	is auth.	∑ Queries	∑ Timeout
f-droid.org	A	37.218.243.72 Amsterdam/North Holland/The Netherlands (NL) - Greenhost BV Hostname: 37-218-243-72.cdn10.net	yes	1	0
	A	37.218.247.73 Amsterdam/North Holland/The Netherlands (NL) - Greenhost BV No Hostname found	yes	1	0
	A	65.21.79.229 Helsinki/Uusimaa/Finland (FI) - Hetzner Online GmbH Hostname: 65-21-79-229.cdn10.net	yes	1	0
	AAAA	2a00:c6c0:0:153:3::1 Amsterdam/North Holland/The Netherlands (NL) - Greenhost BV	yes
	AAAA	2a00:c6c0:0:155:1::1 Amsterdam/North Holland/The Netherlands (NL) - Greenhost BV	yes
	AAAA	2a01:4f9:3b:546d::2 Helsinki/Uusimaa/Finland (FI) - Hetzner Online GmbH	yes
www.f-droid.org	A	37.218.243.72 Amsterdam/North Holland/The Netherlands (NL) - Greenhost BV Hostname: 37-218-243-72.cdn10.net	yes	1	0
	A	37.218.247.73 Amsterdam/North Holland/The Netherlands (NL) - Greenhost BV No Hostname found	yes	1	0
	A	65.21.79.229 Helsinki/Uusimaa/Finland (FI) - Hetzner Online GmbH Hostname: 65-21-79-229.cdn10.net	yes	1	0
	AAAA	2a00:c6c0:0:153:3::1 Amsterdam/North Holland/The Netherlands (NL) - Greenhost BV	yes
	AAAA	2a00:c6c0:0:155:1::1 Amsterdam/North Holland/The Netherlands (NL) - Greenhost BV	yes
	AAAA	2a01:4f9:3b:546d::2 Helsinki/Uusimaa/Finland (FI) - Hetzner Online GmbH	yes
*.f-droid.org	A	Name Error	yes
	AAAA	Name Error	yes
	CNAME	Name Error	yes

2. DNSSEC

Zone (*)	DNSSEC - Informations

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	3 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 57780, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 20.09.2026, 00:00:00 +, Signature-Inception: 30.08.2026, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: org
org	1 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 26974, DigestType 2 and Digest T+3ilMU/Q4oVjEHTlInNeKhr6w2KCur/FHRcDRbh3jI=


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner org., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 12.09.2026, 05:00:00 +, Signature-Inception: 30.08.2026, 04:00:00 +, KeyTag 57780, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 57780 used to validate the DS RRSet in the parent zone


	3 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 25488, Flags 256


	Public Key with Algorithm 8, KeyTag 26974, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 44925, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner org., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 15.09.2026, 15:35:41 +, Signature-Inception: 25.08.2026, 14:35:41 +, KeyTag 26974, Signer-Name: org


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26974 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 26974, DigestType 2 and Digest "T+3ilMU/Q4oVjEHTlInNeKhr6w2KCur/FHRcDRbh3jI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: f-droid.org
f-droid.org	1 DS RR in the parent zone found


	DS with Algorithm 13, KeyTag 48724, DigestType 1 and Digest 2jr8Dy7xQn46cr2J2YZuevU78LU=


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner f-droid.org., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 15.09.2026, 15:35:41 +, Signature-Inception: 25.08.2026, 14:35:41 +, KeyTag 44925, Signer-Name: org


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 44925 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 13, KeyTag 14773, Flags 256


	Public Key with Algorithm 13, KeyTag 48724, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner f-droid.org., Algorithm: 13, 2 Labels, original TTL: 3601 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 48724, Signer-Name: f-droid.org


	• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 48724 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 48724, DigestType 1 and Digest "2jr8Dy7xQn46cr2J2YZuevU78LU=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone


	RRSIG Type 1 validates the A - Result: 37.218.243.72 37.218.247.73 65.21.79.229 Validated: RRSIG-Owner f-droid.org., Algorithm: 13, 2 Labels, original TTL: 1799 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 14773, Signer-Name: f-droid.org


	RRSIG Type 16 validates the TXT - Result: v=spf1 include:spf.mailcow.de ~all Validated: RRSIG-Owner f-droid.org., Algorithm: 13, 2 Labels, original TTL: 1799 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 14773, Signer-Name: f-droid.org


	RRSIG Type 28 validates the AAAA - Result: 2A00:C6C0:0000:0153:0003:0000:0000:0001 2A00:C6C0:0000:0155:0001:0000:0000:0001 2A01:04F9:003B:546D:0000:0000:0000:0002 Validated: RRSIG-Owner f-droid.org., Algorithm: 13, 2 Labels, original TTL: 1799 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 14773, Signer-Name: f-droid.org


	RRSIG Type 257 validates the CAA - Result: 5\|iodefhttps://gitlab.com/fdroid/admin/-/issues/ 5\|iodefmailto:letsencrypt-monitoring@f-droid.org 5\|issueletsencrypt.org; validationmethods=http-01 5\|issuepki.goog Validated: RRSIG-Owner f-droid.org., Algorithm: 13, 2 Labels, original TTL: 1799 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 14773, Signer-Name: f-droid.org


	CNAME-Query sends a valid NSEC RR as result with the query name "f-droid.org" equal the NSEC-owner "f-droid.org" and the NextOwner "_dmarc.f-droid.org". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, NS, SOA, MX, TXT, AAAA, RRSIG, NSEC, DNSKEY, CAA Validated: RRSIG-Owner f-droid.org., Algorithm: 13, 2 Labels, original TTL: 3601 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 14773, Signer-Name: f-droid.org


	Status: Good. NoData-Proof required and found.


	TLSA-Query (_443._tcp.f-droid.org) sends a valid NSEC RR as result with the query name "_443._tcp.f-droid.org" between the NSEC-owner "default._domainkey.f-droid.org" and the NextOwner "_autoconfig._tcp.f-droid.org". So the zone confirmes the not-existence of that TLSA RR.TLSA-Query (_443._tcp.f-droid.org) sends a valid NSEC RR as result with the parent Wildcard "*._tcp.f-droid.org" between the NSEC-owner "default._domainkey.f-droid.org" and the NextOwner "_autoconfig._tcp.f-droid.org". So the zone confirmes the not-existence of that Wildcard-expansion. Bitmap: TXT, RRSIG, NSEC Validated: RRSIG-Owner default._domainkey.f-droid.org., Algorithm: 13, 4 Labels, original TTL: 3601 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 14773, Signer-Name: f-droid.org


	Status: Good. NXDomain-Proof required and found.

Zone: www.f-droid.org
www.f-droid.org	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC RR as result with the domain name between the NSEC-Owner "www.f-droid.org" and the NextOwner "f-droid.org". So the parent zone confirmes the non-existence of a DS RR. Bitmap: A, AAAA, RRSIG, NSEC


	RRSIG Type 1 validates the A - Result: 37.218.243.72 37.218.247.73 65.21.79.229 Validated: RRSIG-Owner www.f-droid.org., Algorithm: 13, 3 Labels, original TTL: 1799 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 14773, Signer-Name: f-droid.org


	RRSIG Type 28 validates the AAAA - Result: 2A00:C6C0:0000:0153:0003:0000:0000:0001 2A00:C6C0:0000:0155:0001:0000:0000:0001 2A01:04F9:003B:546D:0000:0000:0000:0002 Validated: RRSIG-Owner www.f-droid.org., Algorithm: 13, 3 Labels, original TTL: 1799 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 14773, Signer-Name: f-droid.org


	CNAME-Query sends a valid NSEC RR as result with the query name "www.f-droid.org" equal the NSEC-owner "www.f-droid.org" and the NextOwner "f-droid.org". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, AAAA, RRSIG, NSEC Validated: RRSIG-Owner www.f-droid.org., Algorithm: 13, 3 Labels, original TTL: 3601 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 14773, Signer-Name: f-droid.org


	Status: Good. NoData-Proof required and found.


	TXT-Query sends a valid NSEC RR as result with the query name "www.f-droid.org" equal the NSEC-owner "www.f-droid.org" and the NextOwner "f-droid.org". So the zone confirmes the not-existence of that TXT RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, AAAA, RRSIG, NSEC Validated: RRSIG-Owner www.f-droid.org., Algorithm: 13, 3 Labels, original TTL: 3601 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 14773, Signer-Name: f-droid.org


	Status: Good. NoData-Proof required and found.


	TLSA-Query (_443._tcp.www.f-droid.org) sends a valid NSEC RR as result with the owner name www.f-droid.org. So that's the Closest Encloser of the query name. TLSA-Query sends a valid NSEC RR as result and covers the Wildcard expansion of the ClosestEncloser with the owner "www.f-droid.org" and the NextOwner "f-droid.org". So that NSEC confirms the not-existence of the Wildcard expansion. TLSA-Query (_443._tcp.www.f-droid.org) sends a valid NSEC RR as result with the query name "_443._tcp.www.f-droid.org" between the NSEC-owner "www.f-droid.org" and the NextOwner "f-droid.org". So the zone confirmes the not-existence of that TLSA RR.TLSA-Query (_443._tcp.www.f-droid.org) sends a valid NSEC RR as result with the parent Wildcard "*._tcp.www.f-droid.org" between the NSEC-owner "www.f-droid.org" and the NextOwner "f-droid.org". So the zone confirmes the not-existence of that Wildcard-expansion. Bitmap: A, AAAA, RRSIG, NSEC Validated: RRSIG-Owner www.f-droid.org., Algorithm: 13, 3 Labels, original TTL: 3601 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 14773, Signer-Name: f-droid.org


	Status: Good. NXDomain-Proof required and found.


	CAA-Query sends a valid NSEC RR as result with the query name "www.f-droid.org" equal the NSEC-owner "www.f-droid.org" and the NextOwner "f-droid.org". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, AAAA, RRSIG, NSEC Validated: RRSIG-Owner www.f-droid.org., Algorithm: 13, 3 Labels, original TTL: 3601 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 14773, Signer-Name: f-droid.org


	Status: Good. NoData-Proof required and found.

3. Name Servers

Domain	Nameserver	NS-IP
www.f-droid.org	• dns1.registrar-servers.com / Auth_NC_Host2.Frankfurt_Node1		•
f-droid.org	• dns1.registrar-servers.com / Auth_NC_Host1.Frankfurt_Node1	156.154.132.200 Lehi/Utah/United States (US) - Vercara, LLC	•
	•	2610:a1:1024::200 New York/United States (US) - Vercara, LLC	•
	• dns2.registrar-servers.com / Auth_NC_Host1.Frankfurt_Node1	156.154.133.200 Lehi/Utah/United States (US) - Vercara, LLC	•
	•	2610:a1:1025::200 Lehi/Utah/United States (US) - Vercara, LLC	•
org	• a0.org.afilias-nst.info / app12.lax1.hosts.meta.redstone.afilias-nst.info-1633102198		•
	• a2.org.afilias-nst.info / FRA3		•
	• b0.org.afilias-nst.org / app13.lax1.hosts.meta.redstone.afilias-nst.info-1633102198		•
	• b2.org.afilias-nst.org / FRA4		•
	• c0.org.afilias-nst.info / app4.nrt1.hosts.meta.redstone.afilias-nst.info-1615580861		•
	• d0.org.afilias-nst.org / app10.lax1.hosts.meta.redstone.afilias-nst.info-1633102198		•

4. SOA-Entries

Domain:	org
Zone-Name:	org
Primary:	a0.org.afilias-nst.info
Mail:	hostmaster.donuts.email
Serial:	1788080302
Refresh:	7200
Retry:	900
Expire:	1209600
TTL:	3600
num Entries:	6

Domain:	f-droid.org
Zone-Name:	f-droid.org
Primary:	dns1.registrar-servers.com
Mail:	hostmaster.registrar-servers.com
Serial:	1787963837
Refresh:	43200
Retry:	3600
Expire:	604800
TTL:	3601
num Entries:	4

Domain:	www.f-droid.org
Zone-Name:	f-droid.org
Primary:	dns1.registrar-servers.com
Mail:	hostmaster.registrar-servers.com
Serial:	1787963837
Refresh:	43200
Retry:	3600
Expire:	604800
TTL:	3601
num Entries:	1

5. Screenshots

Startaddress: https://f-droid.org/, address used: https://f-droid.org/, Screenshot created 2026-08-30 11:11:12 +00:0

Mobil (412px x 732px)

791 milliseconds

Screenshot mobile - https://f-droid.org/

Mobil + Landscape (732px x 412px)

795 milliseconds

Screenshot mobile landscape - https://f-droid.org/

Screen (1280px x 1680px)

798 milliseconds

Screenshot Desktop - https://f-droid.org/

Mobile- and other Chrome-Checks

	width	height
visual Viewport	397	732
content Size	397	2231

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

6. Url-Checks

show header:

Domainname	Http-Status	redirect	Sec.	G
• http://f-droid.org/ 37.218.243.72	301	https://f-droid.org/ Html is minified: 109.03 %	0.030	A
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:09:22 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• http://f-droid.org/ 37.218.247.73	301	https://f-droid.org/ Html is minified: 109.03 %	0.030	A
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:09:22 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• http://f-droid.org/ 65.21.79.229	301	https://f-droid.org/ Html is minified: 109.03 %	0.077	A
Server: nginx/1.18.0
Date: Sun, 30 Aug 2026 09:09:22 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• http://f-droid.org/ 2a00:c6c0:0:153:3::1	301	https://f-droid.org/ Html is minified: 109.03 %	0.030	A
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:09:22 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• http://f-droid.org/ 2a00:c6c0:0:155:1::1	301	https://f-droid.org/ Html is minified: 109.03 %	0.030	A
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:09:22 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• http://f-droid.org/ 2a01:4f9:3b:546d::2	301	https://f-droid.org/ Html is minified: 109.03 %	0.187	A
Server: nginx/1.18.0
Date: Sun, 30 Aug 2026 09:09:22 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• http://www.f-droid.org/ 37.218.243.72	301	https://f-droid.org/ Html is minified: 109.03 %	0.124	E
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:09:22 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• http://www.f-droid.org/ 37.218.247.73	301	https://f-droid.org/ Html is minified: 109.03 %	0.030	E
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:09:23 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• http://www.f-droid.org/ 65.21.79.229	301	https://f-droid.org/ Html is minified: 109.03 %	0.047	E
Server: nginx/1.18.0
Date: Sun, 30 Aug 2026 09:09:23 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• http://www.f-droid.org/ 2a00:c6c0:0:153:3::1	301	https://f-droid.org/ Html is minified: 109.03 %	0.047	E
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:09:23 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• http://www.f-droid.org/ 2a00:c6c0:0:155:1::1	301	https://f-droid.org/ Html is minified: 109.03 %	0.060	E
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:09:23 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• http://www.f-droid.org/ 2a01:4f9:3b:546d::2	301	https://f-droid.org/ Html is minified: 109.03 %	0.174	E
Server: nginx/1.18.0
Date: Sun, 30 Aug 2026 09:09:23 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• https://www.f-droid.org/ 37.218.243.72	301	https://f-droid.org/ Html is minified: 109.03 %	2.233	B
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:09:53 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• https://www.f-droid.org/ 37.218.247.73	301	https://f-droid.org/ Html is minified: 109.03 %	2.110	B
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:09:56 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• https://www.f-droid.org/ 65.21.79.229	301	https://f-droid.org/ Html is minified: 109.03 %	2.780	B
Server: nginx/1.18.0
Date: Sun, 30 Aug 2026 09:09:59 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• https://www.f-droid.org/ 2a00:c6c0:0:153:3::1	301	https://f-droid.org/ Html is minified: 109.03 %	1.856	B
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:10:03 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• https://www.f-droid.org/ 2a00:c6c0:0:155:1::1	301	https://f-droid.org/ Html is minified: 109.03 %	1.830	B
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:10:06 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• https://www.f-droid.org/ 2a01:4f9:3b:546d::2	301	https://f-droid.org/ Html is minified: 109.03 %	2.687	B
Server: nginx/1.18.0
Date: Sun, 30 Aug 2026 09:10:09 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• https://f-droid.org/ 37.218.243.72 gzip used - 4207 / 13137 - 67.98 % Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 117.95 % Other inline scripts (∑/total): 0/0	2.470	A
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:09:23 GMT
Connection: keep-alive
Vary: negotiate,accept-language,Accept-Encoding
TCN: choice
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), ch-ua=(), clipboard-read=(), clipboard-write=(), conversion-measurement=(), display-capture=(), document-domain=(), document-write=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), focus-without-user-activation=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker=(), speaker-selection=(), sync-xhr=(), trust-token-redemption=(), usb=(), wake-lock=(), webauthn=(), web-share=(), window-placement=(), vr=(), xr=(), xr-spatial-tracking=(),
Content-Security-Policy: default-src 'none';base-uri 'self';block-all-mixed-content;connect-src 'self';font-src 'self';form-action 'self' https://search.f-droid.org;frame-ancestors 'self';img-src 'self' https://f-droid.org;manifest-src 'self';media-src 'self';script-src 'self';style-src 'self' 'unsafe-inline';
Referrer-Policy: strict-origin
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
X-XSS-Protection: 1; mode=block
Onion-Location: http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/index.html.en
ETag: "3351-65a35624749ed;812-65a357d117fee
Cache-Control: public, max-age=600, immutable, stale-while-revalidate=300
Accept-Ranges: bytes
Content-Type: text/html
Content-Length: 4207
Content-Location: index.html.en
Last-Modified: Sat, 29 Aug 2026 20:26:28 GMT
Content-Encoding: gzip
Expires: Sun, 30 Aug 2026 05:25:02 GMT
Content-Language: en

• https://f-droid.org/ 37.218.247.73 gzip used - 4207 / 13137 - 67.98 % Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 117.95 % Other inline scripts (∑/total): 0/0	2.530	A
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:09:29 GMT
Connection: keep-alive
Vary: negotiate,accept-language,Accept-Encoding
TCN: choice
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), ch-ua=(), clipboard-read=(), clipboard-write=(), conversion-measurement=(), display-capture=(), document-domain=(), document-write=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), focus-without-user-activation=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker=(), speaker-selection=(), sync-xhr=(), trust-token-redemption=(), usb=(), wake-lock=(), webauthn=(), web-share=(), window-placement=(), vr=(), xr=(), xr-spatial-tracking=(),
Content-Security-Policy: default-src 'none';base-uri 'self';block-all-mixed-content;connect-src 'self';font-src 'self';form-action 'self' https://search.f-droid.org;frame-ancestors 'self';img-src 'self' https://f-droid.org;manifest-src 'self';media-src 'self';script-src 'self';style-src 'self' 'unsafe-inline';
Referrer-Policy: strict-origin
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
X-XSS-Protection: 1; mode=block
Onion-Location: http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/index.html.en
ETag: "3351-65a35624749ed;812-65a357d117fee
Cache-Control: public, max-age=600, immutable, stale-while-revalidate=300
Accept-Ranges: bytes
Content-Type: text/html
Content-Length: 4207
Content-Location: index.html.en
Last-Modified: Sat, 29 Aug 2026 20:26:28 GMT
Content-Encoding: gzip
Expires: Sun, 30 Aug 2026 01:59:38 GMT
Content-Language: en

• https://f-droid.org/ 65.21.79.229 gzip used - 4207 / 13137 - 67.98 % Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 117.95 % Other inline scripts (∑/total): 0/0	3.014	A
Server: nginx/1.18.0
Date: Sun, 30 Aug 2026 09:09:35 GMT
Connection: keep-alive
Vary: negotiate,accept-language,Accept-Encoding
TCN: choice
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), ch-ua=(), clipboard-read=(), clipboard-write=(), conversion-measurement=(), display-capture=(), document-domain=(), document-write=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), focus-without-user-activation=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker=(), speaker-selection=(), sync-xhr=(), trust-token-redemption=(), usb=(), wake-lock=(), webauthn=(), web-share=(), window-placement=(), vr=(), xr=(), xr-spatial-tracking=(),
Content-Security-Policy: default-src 'none';base-uri 'self';block-all-mixed-content;connect-src 'self';font-src 'self';form-action 'self' https://search.f-droid.org;frame-ancestors 'self';img-src 'self' https://f-droid.org;manifest-src 'self';media-src 'self';script-src 'self';style-src 'self' 'unsafe-inline';
Referrer-Policy: strict-origin
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
X-XSS-Protection: 1; mode=block
Onion-Location: http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/index.html.en
ETag: "3351-65a35624749ed;812-65a357d117fee
Cache-Control: public, max-age=600, immutable, stale-while-revalidate=300
Accept-Ranges: bytes
Content-Type: text/html
Content-Length: 4207
Content-Location: index.html.en
Last-Modified: Sat, 29 Aug 2026 20:26:28 GMT
Content-Encoding: gzip
Expires: Sun, 30 Aug 2026 09:09:35 GMT
Content-Language: en

• https://f-droid.org/ 2a00:c6c0:0:153:3::1 gzip used - 4207 / 13137 - 67.98 % Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 117.95 % Other inline scripts (∑/total): 0/0	2.030	A
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:09:40 GMT
Connection: keep-alive
Vary: negotiate,accept-language,Accept-Encoding
TCN: choice
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), ch-ua=(), clipboard-read=(), clipboard-write=(), conversion-measurement=(), display-capture=(), document-domain=(), document-write=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), focus-without-user-activation=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker=(), speaker-selection=(), sync-xhr=(), trust-token-redemption=(), usb=(), wake-lock=(), webauthn=(), web-share=(), window-placement=(), vr=(), xr=(), xr-spatial-tracking=(),
Content-Security-Policy: default-src 'none';base-uri 'self';block-all-mixed-content;connect-src 'self';font-src 'self';form-action 'self' https://search.f-droid.org;frame-ancestors 'self';img-src 'self' https://f-droid.org;manifest-src 'self';media-src 'self';script-src 'self';style-src 'self' 'unsafe-inline';
Referrer-Policy: strict-origin
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
X-XSS-Protection: 1; mode=block
Onion-Location: http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/index.html.en
ETag: "3351-65a35624749ed;812-65a357d117fee
Cache-Control: public, max-age=600, immutable, stale-while-revalidate=300
Accept-Ranges: bytes
Content-Type: text/html
Content-Length: 4207
Content-Location: index.html.en
Last-Modified: Sat, 29 Aug 2026 20:26:28 GMT
Content-Encoding: gzip
Expires: Sun, 30 Aug 2026 01:59:38 GMT
Content-Language: en

• https://f-droid.org/ 2a00:c6c0:0:155:1::1 gzip used - 4207 / 13137 - 67.98 % Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 117.95 % Other inline scripts (∑/total): 0/0	2.093	A
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:09:44 GMT
Connection: keep-alive
Vary: negotiate,accept-language,Accept-Encoding
TCN: choice
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), ch-ua=(), clipboard-read=(), clipboard-write=(), conversion-measurement=(), display-capture=(), document-domain=(), document-write=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), focus-without-user-activation=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker=(), speaker-selection=(), sync-xhr=(), trust-token-redemption=(), usb=(), wake-lock=(), webauthn=(), web-share=(), window-placement=(), vr=(), xr=(), xr-spatial-tracking=(),
Content-Security-Policy: default-src 'none';base-uri 'self';block-all-mixed-content;connect-src 'self';font-src 'self';form-action 'self' https://search.f-droid.org;frame-ancestors 'self';img-src 'self' https://f-droid.org;manifest-src 'self';media-src 'self';script-src 'self';style-src 'self' 'unsafe-inline';
Referrer-Policy: strict-origin
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
X-XSS-Protection: 1; mode=block
Onion-Location: http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/index.html.en
ETag: "3351-65a35624749ed;812-65a357d117fee
Cache-Control: public, max-age=600, immutable, stale-while-revalidate=300
Accept-Ranges: bytes
Content-Type: text/html
Content-Length: 4207
Content-Location: index.html.en
Last-Modified: Sat, 29 Aug 2026 20:26:28 GMT
Content-Encoding: gzip
Expires: Sun, 30 Aug 2026 05:25:02 GMT
Content-Language: en

• https://f-droid.org/ 2a01:4f9:3b:546d::2 gzip used - 4207 / 13137 - 67.98 % Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 117.95 % Other inline scripts (∑/total): 0/0	2.857	A
Server: nginx/1.18.0
Date: Sun, 30 Aug 2026 09:09:48 GMT
Connection: keep-alive
Vary: negotiate,accept-language,Accept-Encoding
TCN: choice
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), ch-ua=(), clipboard-read=(), clipboard-write=(), conversion-measurement=(), display-capture=(), document-domain=(), document-write=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), focus-without-user-activation=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker=(), speaker-selection=(), sync-xhr=(), trust-token-redemption=(), usb=(), wake-lock=(), webauthn=(), web-share=(), window-placement=(), vr=(), xr=(), xr-spatial-tracking=(),
Content-Security-Policy: default-src 'none';base-uri 'self';block-all-mixed-content;connect-src 'self';font-src 'self';form-action 'self' https://search.f-droid.org;frame-ancestors 'self';img-src 'self' https://f-droid.org;manifest-src 'self';media-src 'self';script-src 'self';style-src 'self' 'unsafe-inline';
Referrer-Policy: strict-origin
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
X-XSS-Protection: 1; mode=block
Onion-Location: http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/index.html.en
ETag: "3351-65a35624749ed;812-65a357d117fee
Cache-Control: public, max-age=600, immutable, stale-while-revalidate=300
Accept-Ranges: bytes
Content-Type: text/html
Content-Length: 4207
Content-Location: index.html.en
Last-Modified: Sat, 29 Aug 2026 20:26:28 GMT
Content-Encoding: gzip
Expires: Sun, 30 Aug 2026 09:09:35 GMT
Content-Language: en

• http://f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 37.218.243.72 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	502	Html is minified: 109.79 % Other inline scripts (∑/total): 0/0	0.050	S
Bad Gateway
Visible Content:
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:10:13 GMT
Connection: keep-alive
Content-Type: text/html
Content-Length: 157

• http://f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 37.218.247.73 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	502	Html is minified: 109.79 % Other inline scripts (∑/total): 0/0	0.063	S
Bad Gateway
Visible Content:
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:10:15 GMT
Connection: keep-alive
Content-Type: text/html
Content-Length: 157

• http://f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 65.21.79.229 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	502	Html is minified: 109.79 % Other inline scripts (∑/total): 0/0	0.233	S
Bad Gateway
Visible Content:
Server: nginx/1.18.0
Date: Sun, 30 Aug 2026 09:10:17 GMT
Connection: keep-alive
Content-Type: text/html
Content-Length: 157

• http://f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a00:c6c0:0:153:3::1 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	502	Html is minified: 109.79 % Other inline scripts (∑/total): 0/0	0.014	S
Bad Gateway
Visible Content:
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:10:19 GMT
Connection: keep-alive
Content-Type: text/html
Content-Length: 157

• http://f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a00:c6c0:0:155:1::1 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	502	Html is minified: 109.79 % Other inline scripts (∑/total): 0/0	0.033	S
Bad Gateway
Visible Content:
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:10:20 GMT
Connection: keep-alive
Content-Type: text/html
Content-Length: 157

• http://f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a01:4f9:3b:546d::2 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	502	Html is minified: 109.79 % Other inline scripts (∑/total): 0/0	0.094	S
Bad Gateway
Visible Content:
Server: nginx/1.18.0
Date: Sun, 30 Aug 2026 09:10:21 GMT
Connection: keep-alive
Content-Type: text/html
Content-Length: 157

• http://www.f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 37.218.243.72 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	502	Html is minified: 109.79 % Other inline scripts (∑/total): 0/0	0.063	S
Bad Gateway
Visible Content:
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:10:23 GMT
Connection: keep-alive
Content-Type: text/html
Content-Length: 157

• http://www.f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 37.218.247.73 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	502	Html is minified: 109.79 % Other inline scripts (∑/total): 0/0	0.013	S
Bad Gateway
Visible Content:
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:10:25 GMT
Connection: keep-alive
Content-Type: text/html
Content-Length: 157

• http://www.f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 65.21.79.229 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	502	Html is minified: 109.79 % Other inline scripts (∑/total): 0/0	0.080	S
Bad Gateway
Visible Content:
Server: nginx/1.18.0
Date: Sun, 30 Aug 2026 09:10:26 GMT
Connection: keep-alive
Content-Type: text/html
Content-Length: 157

• http://www.f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a00:c6c0:0:153:3::1 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	502	Html is minified: 109.79 % Other inline scripts (∑/total): 0/0	0.017	S
Bad Gateway
Visible Content:
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:10:28 GMT
Connection: keep-alive
Content-Type: text/html
Content-Length: 157

• http://www.f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a00:c6c0:0:155:1::1 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	502	Html is minified: 109.79 % Other inline scripts (∑/total): 0/0	0.033	S
Bad Gateway
Visible Content:
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:10:29 GMT
Connection: keep-alive
Content-Type: text/html
Content-Length: 157

• http://www.f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a01:4f9:3b:546d::2 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	502	Html is minified: 109.79 % Other inline scripts (∑/total): 0/0	0.627	S
Bad Gateway
Visible Content:
Server: nginx/1.18.0
Date: Sun, 30 Aug 2026 09:10:31 GMT
Connection: keep-alive
Content-Type: text/html
Content-Length: 157

• https://65.21.79.229/ 65.21.79.229	301	https://f-droid.org/ Html is minified: 109.03 %	2.796	N
Certificate error: RemoteCertificateNameMismatch
Server: nginx/1.18.0
Date: Sun, 30 Aug 2026 09:10:39 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• https://37.218.243.72/ 37.218.243.72	301	https://f-droid.org/ Html is minified: 109.03 %	2.173	N
Certificate error: RemoteCertificateNameMismatch
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:10:33 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• https://37.218.247.73/ 37.218.247.73	301	https://f-droid.org/ Html is minified: 109.03 %	2.093	N
Certificate error: RemoteCertificateNameMismatch
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:10:36 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• https://[2a00:c6c0:0000:0153:0003:0000:0000:0001]/ 2a00:c6c0:0:153:3::1	301	https://f-droid.org/ Html is minified: 109.03 %	1.843	N
Certificate error: RemoteCertificateNameMismatch
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:10:43 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• https://[2a00:c6c0:0000:0155:0001:0000:0000:0001]/ 2a00:c6c0:0:155:1::1	301	https://f-droid.org/ Html is minified: 109.03 %	1.797	N
Certificate error: RemoteCertificateNameMismatch
Server: nginx/1.22.1
Date: Sun, 30 Aug 2026 09:10:46 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

• https://[2a01:04f9:003b:546d:0000:0000:0000:0002]/ 2a01:4f9:3b:546d::2	301	https://f-droid.org/ Html is minified: 109.03 %	2.656	N
Certificate error: RemoteCertificateNameMismatch
Server: nginx/1.18.0
Date: Sun, 30 Aug 2026 09:10:49 GMT
Connection: keep-alive
Location: https://f-droid.org/
Content-Type: text/html
Content-Length: 169

7. Comments

	1. General Results, most used to calculate the result
A	name "f-droid.org" is domain, public suffix is ".org", top-level-domain is ".org", top-level-domain-type is "generic", tld-manager is "Public Interest Registry (PIR)", num .org-domains preloaded: 10357 (complete: 276475)
A	Good: All ip addresses are public addresses
A	Good: Minimal 2 ip addresses per domain name found: f-droid.org has 6 different ip addresses (authoritative).
A	Good: Minimal 2 ip addresses per domain name found: www.f-droid.org has 6 different ip addresses (authoritative).
A	Good: Ipv4 and Ipv6 addresses per domain name found: f-droid.org has 3 ipv4, 3 ipv6 addresses
A	Good: Ipv4 and Ipv6 addresses per domain name found: www.f-droid.org has 3 ipv4, 3 ipv6 addresses
A	Good: No asked Authoritative Name Server had a timeout
A	https://37.218.243.72/ 37.218.243.72	301	https://f-droid.org/	Correct redirect https to https
A	https://37.218.243.72/ 37.218.243.72	301	https://f-droid.org/	Correct redirect https to https
A	https://37.218.243.72/ 37.218.243.72	301	https://f-droid.org/	Correct redirect https to https
A	https://37.218.243.72/ 37.218.243.72	301	https://f-droid.org/	Correct redirect https to https
A	https://37.218.243.72/ 37.218.243.72	301	https://f-droid.org/	Correct redirect https to https
A	https://37.218.243.72/ 37.218.243.72	301	https://f-droid.org/	Correct redirect https to https
A	https://37.218.247.73/ 37.218.247.73	301	https://f-droid.org/	Correct redirect https to https
A	https://37.218.247.73/ 37.218.247.73	301	https://f-droid.org/	Correct redirect https to https
A	https://37.218.247.73/ 37.218.247.73	301	https://f-droid.org/	Correct redirect https to https
A	https://37.218.247.73/ 37.218.247.73	301	https://f-droid.org/	Correct redirect https to https
A	https://37.218.247.73/ 37.218.247.73	301	https://f-droid.org/	Correct redirect https to https
A	https://37.218.247.73/ 37.218.247.73	301	https://f-droid.org/	Correct redirect https to https
A	https://65.21.79.229/ 65.21.79.229	301	https://f-droid.org/	Correct redirect https to https
A	https://65.21.79.229/ 65.21.79.229	301	https://f-droid.org/	Correct redirect https to https
A	https://65.21.79.229/ 65.21.79.229	301	https://f-droid.org/	Correct redirect https to https
A	https://65.21.79.229/ 65.21.79.229	301	https://f-droid.org/	Correct redirect https to https
A	https://65.21.79.229/ 65.21.79.229	301	https://f-droid.org/	Correct redirect https to https
A	https://65.21.79.229/ 65.21.79.229	301	https://f-droid.org/	Correct redirect https to https
A	https://[2a00:c6c0:0000:0153:0003:0000:0000:0001]/ 2a00:c6c0:0:153:3::1	301	https://f-droid.org/	Correct redirect https to https
A	https://[2a00:c6c0:0000:0153:0003:0000:0000:0001]/ 2a00:c6c0:0:153:3::1	301	https://f-droid.org/	Correct redirect https to https
A	https://[2a00:c6c0:0000:0153:0003:0000:0000:0001]/ 2a00:c6c0:0:153:3::1	301	https://f-droid.org/	Correct redirect https to https
A	https://[2a00:c6c0:0000:0153:0003:0000:0000:0001]/ 2a00:c6c0:0:153:3::1	301	https://f-droid.org/	Correct redirect https to https
A	https://[2a00:c6c0:0000:0153:0003:0000:0000:0001]/ 2a00:c6c0:0:153:3::1	301	https://f-droid.org/	Correct redirect https to https
A	https://[2a00:c6c0:0000:0153:0003:0000:0000:0001]/ 2a00:c6c0:0:153:3::1	301	https://f-droid.org/	Correct redirect https to https
A	https://[2a00:c6c0:0000:0155:0001:0000:0000:0001]/ 2a00:c6c0:0:155:1::1	301	https://f-droid.org/	Correct redirect https to https
A	https://[2a00:c6c0:0000:0155:0001:0000:0000:0001]/ 2a00:c6c0:0:155:1::1	301	https://f-droid.org/	Correct redirect https to https
A	https://[2a00:c6c0:0000:0155:0001:0000:0000:0001]/ 2a00:c6c0:0:155:1::1	301	https://f-droid.org/	Correct redirect https to https
A	https://[2a00:c6c0:0000:0155:0001:0000:0000:0001]/ 2a00:c6c0:0:155:1::1	301	https://f-droid.org/	Correct redirect https to https
A	https://[2a00:c6c0:0000:0155:0001:0000:0000:0001]/ 2a00:c6c0:0:155:1::1	301	https://f-droid.org/	Correct redirect https to https
A	https://[2a00:c6c0:0000:0155:0001:0000:0000:0001]/ 2a00:c6c0:0:155:1::1	301	https://f-droid.org/	Correct redirect https to https
A	https://[2a01:04f9:003b:546d:0000:0000:0000:0002]/ 2a01:4f9:3b:546d::2	301	https://f-droid.org/	Correct redirect https to https
A	https://[2a01:04f9:003b:546d:0000:0000:0000:0002]/ 2a01:4f9:3b:546d::2	301	https://f-droid.org/	Correct redirect https to https
A	https://[2a01:04f9:003b:546d:0000:0000:0000:0002]/ 2a01:4f9:3b:546d::2	301	https://f-droid.org/	Correct redirect https to https
A	https://[2a01:04f9:003b:546d:0000:0000:0000:0002]/ 2a01:4f9:3b:546d::2	301	https://f-droid.org/	Correct redirect https to https
A	https://[2a01:04f9:003b:546d:0000:0000:0000:0002]/ 2a01:4f9:3b:546d::2	301	https://f-droid.org/	Correct redirect https to https
A	https://[2a01:04f9:003b:546d:0000:0000:0000:0002]/ 2a01:4f9:3b:546d::2	301	https://f-droid.org/	Correct redirect https to https
A	Good: destination is https
A	Good - only one version with Http-Status 200
A	Good: one preferred version: non-www is preferred
A	Good: No cookie sent via http.
A	Excellent: Domain is in the Google-Preload-List
A	Excellent: Domain is in the Mozilla/Firefox-Preload-List
A	HSTS-Preload-Status: Preloaded. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
A	Good: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):0 complete Content-Type - header (6 urls)
	https://f-droid.org/ 37.218.243.72			Url with incomplete Content-Type - header - missing charset
	https://f-droid.org/ 37.218.247.73			Url with incomplete Content-Type - header - missing charset
	https://f-droid.org/ 65.21.79.229			Url with incomplete Content-Type - header - missing charset
	https://f-droid.org/ 2a00:c6c0:0:153:3::1			Url with incomplete Content-Type - header - missing charset
	https://f-droid.org/ 2a00:c6c0:0:155:1::1			Url with incomplete Content-Type - header - missing charset
	https://f-droid.org/ 2a01:4f9:3b:546d::2			Url with incomplete Content-Type - header - missing charset
A	http://f-droid.org/ 37.218.243.72	301	https://f-droid.org/	Correct redirect http - https with the same domain name
A	http://f-droid.org/ 37.218.247.73	301	https://f-droid.org/	Correct redirect http - https with the same domain name
A	http://f-droid.org/ 65.21.79.229	301	https://f-droid.org/	Correct redirect http - https with the same domain name
A	http://f-droid.org/ 2a00:c6c0:0:153:3::1	301	https://f-droid.org/	Correct redirect http - https with the same domain name
A	http://f-droid.org/ 2a00:c6c0:0:155:1::1	301	https://f-droid.org/	Correct redirect http - https with the same domain name
A	http://f-droid.org/ 2a01:4f9:3b:546d::2	301	https://f-droid.org/	Correct redirect http - https with the same domain name
B	https://www.f-droid.org/ 37.218.243.72	301		Missing HSTS-Header
B	https://www.f-droid.org/ 37.218.247.73	301		Missing HSTS-Header
B	https://www.f-droid.org/ 65.21.79.229	301		Missing HSTS-Header
B	https://www.f-droid.org/ 2a00:c6c0:0:153:3::1	301		Missing HSTS-Header
B	https://www.f-droid.org/ 2a00:c6c0:0:155:1::1	301		Missing HSTS-Header
B	https://www.f-droid.org/ 2a01:4f9:3b:546d::2	301		Missing HSTS-Header
E	http://www.f-droid.org/ 37.218.243.72	301	https://f-droid.org/	Wrong redirect one domain http to other domain https. First redirect to https without new dns query, so the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
E	http://www.f-droid.org/ 37.218.247.73	301	https://f-droid.org/	Wrong redirect one domain http to other domain https. First redirect to https without new dns query, so the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
E	http://www.f-droid.org/ 65.21.79.229	301	https://f-droid.org/	Wrong redirect one domain http to other domain https. First redirect to https without new dns query, so the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
E	http://www.f-droid.org/ 2a00:c6c0:0:153:3::1	301	https://f-droid.org/	Wrong redirect one domain http to other domain https. First redirect to https without new dns query, so the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
E	http://www.f-droid.org/ 2a00:c6c0:0:155:1::1	301	https://f-droid.org/	Wrong redirect one domain http to other domain https. First redirect to https without new dns query, so the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
E	http://www.f-droid.org/ 2a01:4f9:3b:546d::2	301	https://f-droid.org/	Wrong redirect one domain http to other domain https. First redirect to https without new dns query, so the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
N	https://37.218.243.72/ 37.218.243.72	301	https://f-droid.org/	Error - Certificate isn't trusted, RemoteCertificateNameMismatch
N	https://37.218.247.73/ 37.218.247.73	301	https://f-droid.org/	Error - Certificate isn't trusted, RemoteCertificateNameMismatch
N	https://65.21.79.229/ 65.21.79.229	301	https://f-droid.org/	Error - Certificate isn't trusted, RemoteCertificateNameMismatch
N	https://[2a00:c6c0:0000:0153:0003:0000:0000:0001]/ 2a00:c6c0:0:153:3::1	301	https://f-droid.org/	Error - Certificate isn't trusted, RemoteCertificateNameMismatch
N	https://[2a00:c6c0:0000:0155:0001:0000:0000:0001]/ 2a00:c6c0:0:155:1::1	301	https://f-droid.org/	Error - Certificate isn't trusted, RemoteCertificateNameMismatch
N	https://[2a01:04f9:003b:546d:0000:0000:0000:0002]/ 2a01:4f9:3b:546d::2	301	https://f-droid.org/	Error - Certificate isn't trusted, RemoteCertificateNameMismatch
A	Good: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain f-droid.org, 6 ip addresses.
A	Good: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain www.f-droid.org, 6 ip addresses.
	Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are the same. So that domain doesn't require Server Name Indication (SNI), it's the primary certificate of that set of ip addresses.: Domain f-droid.org, 6 ip addresses, 1 different http results.
	Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are the same. So that domain doesn't require Server Name Indication (SNI), it's the primary certificate of that set of ip addresses.: Domain www.f-droid.org, 6 ip addresses, 1 different http results.
B	No _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.f-droid.org
	2. Header-Checks
A	f-droid.org 37.218.243.72	Content-Security-Policy		Ok: Header without syntax errors found: default-src 'none';base-uri 'self';block-all-mixed-content;connect-src 'self';font-src 'self';form-action 'self' https://search.f-droid.org;frame-ancestors 'self';img-src 'self' https://f-droid.org;manifest-src 'self';media-src 'self';script-src 'self';style-src 'self' 'unsafe-inline';
B				Info: Header-Element is deprecated. block-all-mixed-content
A				Good: default-src directive only with 'none' or 'self', additional sources are blocked.
A				Good: default-src without 'unsafe-inline' or 'unsave-eval'.
A				Good: form-action directive found. That reduces the risk sending data to unwanted domains. form-action is a navigation-directive, so default-src isn't used.
A				Good: frame-ancestors directive found. That limits pages who are allowed to use this page in a frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
A				Good: base-uri directive found. That limits the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A				Good: No object-src found, but the default-src used as fallback is defined and restricted.
A				Good: script-src without 'unsafe-inline' and 'unsafe-eval' found. That's the recommended configuration.
A				Good: script-src without * and a scheme found.
A				Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A				Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A		X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
A		Referrer-Policy		Ok: Header without syntax errors found: strict-origin
F		Permissions-Policy		Critical: Header with syntax errors found: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), ch-ua=(), clipboard-read=(), clipboard-write=(), conversion-measurement=(), display-capture=(), document-domain=(), document-write=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), focus-without-user-activation=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker=(), speaker-selection=(), sync-xhr=(), trust-token-redemption=(), usb=(), wake-lock=(), webauthn=(), web-share=(), window-placement=(), vr=(), xr=(), xr-spatial-tracking=(),
B				Info: Header-Element is deprecated. wake-lock=()
E				Critical: Unknown Header-Element found document-write=()
E				Critical: Unknown Header-Element found xr=()
E				Critical: Unknown Header-Element found document-write=()
E				Critical: Unknown Header-Element found xr=()
A		X-Frame-Options		Ok: Header without syntax errors found: sameorigin
B				Info: Header is deprecated. May not longer work in modern browsers. sameorigin. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A		X-Xss-Protection		Ok: Header without syntax errors found: 1; mode=block
B				Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
A	f-droid.org 37.218.247.73	Content-Security-Policy		Ok: Header without syntax errors found: default-src 'none';base-uri 'self';block-all-mixed-content;connect-src 'self';font-src 'self';form-action 'self' https://search.f-droid.org;frame-ancestors 'self';img-src 'self' https://f-droid.org;manifest-src 'self';media-src 'self';script-src 'self';style-src 'self' 'unsafe-inline';
B				Info: Header-Element is deprecated. block-all-mixed-content
A				Good: default-src directive only with 'none' or 'self', additional sources are blocked.
A				Good: default-src without 'unsafe-inline' or 'unsave-eval'.
A				Good: form-action directive found. That reduces the risk sending data to unwanted domains. form-action is a navigation-directive, so default-src isn't used.
A				Good: frame-ancestors directive found. That limits pages who are allowed to use this page in a frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
A				Good: base-uri directive found. That limits the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A				Good: No object-src found, but the default-src used as fallback is defined and restricted.
A				Good: script-src without 'unsafe-inline' and 'unsafe-eval' found. That's the recommended configuration.
A				Good: script-src without * and a scheme found.
A				Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A				Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A		X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
A		Referrer-Policy		Ok: Header without syntax errors found: strict-origin
F		Permissions-Policy		Critical: Header with syntax errors found: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), ch-ua=(), clipboard-read=(), clipboard-write=(), conversion-measurement=(), display-capture=(), document-domain=(), document-write=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), focus-without-user-activation=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker=(), speaker-selection=(), sync-xhr=(), trust-token-redemption=(), usb=(), wake-lock=(), webauthn=(), web-share=(), window-placement=(), vr=(), xr=(), xr-spatial-tracking=(),
B				Info: Header-Element is deprecated. wake-lock=()
E				Critical: Unknown Header-Element found document-write=()
E				Critical: Unknown Header-Element found xr=()
E				Critical: Unknown Header-Element found document-write=()
E				Critical: Unknown Header-Element found xr=()
A		X-Frame-Options		Ok: Header without syntax errors found: sameorigin
B				Info: Header is deprecated. May not longer work in modern browsers. sameorigin. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A		X-Xss-Protection		Ok: Header without syntax errors found: 1; mode=block
B				Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
A	f-droid.org 65.21.79.229	Content-Security-Policy		Ok: Header without syntax errors found: default-src 'none';base-uri 'self';block-all-mixed-content;connect-src 'self';font-src 'self';form-action 'self' https://search.f-droid.org;frame-ancestors 'self';img-src 'self' https://f-droid.org;manifest-src 'self';media-src 'self';script-src 'self';style-src 'self' 'unsafe-inline';
B				Info: Header-Element is deprecated. block-all-mixed-content
A				Good: default-src directive only with 'none' or 'self', additional sources are blocked.
A				Good: default-src without 'unsafe-inline' or 'unsave-eval'.
A				Good: form-action directive found. That reduces the risk sending data to unwanted domains. form-action is a navigation-directive, so default-src isn't used.
A				Good: frame-ancestors directive found. That limits pages who are allowed to use this page in a frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
A				Good: base-uri directive found. That limits the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A				Good: No object-src found, but the default-src used as fallback is defined and restricted.
A				Good: script-src without 'unsafe-inline' and 'unsafe-eval' found. That's the recommended configuration.
A				Good: script-src without * and a scheme found.
A				Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A				Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A		X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
A		Referrer-Policy		Ok: Header without syntax errors found: strict-origin
F		Permissions-Policy		Critical: Header with syntax errors found: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), ch-ua=(), clipboard-read=(), clipboard-write=(), conversion-measurement=(), display-capture=(), document-domain=(), document-write=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), focus-without-user-activation=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker=(), speaker-selection=(), sync-xhr=(), trust-token-redemption=(), usb=(), wake-lock=(), webauthn=(), web-share=(), window-placement=(), vr=(), xr=(), xr-spatial-tracking=(),
B				Info: Header-Element is deprecated. wake-lock=()
E				Critical: Unknown Header-Element found document-write=()
E				Critical: Unknown Header-Element found xr=()
E				Critical: Unknown Header-Element found document-write=()
E				Critical: Unknown Header-Element found xr=()
A		X-Frame-Options		Ok: Header without syntax errors found: sameorigin
B				Info: Header is deprecated. May not longer work in modern browsers. sameorigin. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A		X-Xss-Protection		Ok: Header without syntax errors found: 1; mode=block
B				Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
A	f-droid.org 2a00:c6c0:0:153:3::1	Content-Security-Policy		Ok: Header without syntax errors found: default-src 'none';base-uri 'self';block-all-mixed-content;connect-src 'self';font-src 'self';form-action 'self' https://search.f-droid.org;frame-ancestors 'self';img-src 'self' https://f-droid.org;manifest-src 'self';media-src 'self';script-src 'self';style-src 'self' 'unsafe-inline';
B				Info: Header-Element is deprecated. block-all-mixed-content
A				Good: default-src directive only with 'none' or 'self', additional sources are blocked.
A				Good: default-src without 'unsafe-inline' or 'unsave-eval'.
A				Good: form-action directive found. That reduces the risk sending data to unwanted domains. form-action is a navigation-directive, so default-src isn't used.
A				Good: frame-ancestors directive found. That limits pages who are allowed to use this page in a frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
A				Good: base-uri directive found. That limits the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A				Good: No object-src found, but the default-src used as fallback is defined and restricted.
A				Good: script-src without 'unsafe-inline' and 'unsafe-eval' found. That's the recommended configuration.
A				Good: script-src without * and a scheme found.
A				Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A				Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A		X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
A		Referrer-Policy		Ok: Header without syntax errors found: strict-origin
F		Permissions-Policy		Critical: Header with syntax errors found: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), ch-ua=(), clipboard-read=(), clipboard-write=(), conversion-measurement=(), display-capture=(), document-domain=(), document-write=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), focus-without-user-activation=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker=(), speaker-selection=(), sync-xhr=(), trust-token-redemption=(), usb=(), wake-lock=(), webauthn=(), web-share=(), window-placement=(), vr=(), xr=(), xr-spatial-tracking=(),
B				Info: Header-Element is deprecated. wake-lock=()
E				Critical: Unknown Header-Element found document-write=()
E				Critical: Unknown Header-Element found xr=()
E				Critical: Unknown Header-Element found document-write=()
E				Critical: Unknown Header-Element found xr=()
A		X-Frame-Options		Ok: Header without syntax errors found: sameorigin
B				Info: Header is deprecated. May not longer work in modern browsers. sameorigin. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A		X-Xss-Protection		Ok: Header without syntax errors found: 1; mode=block
B				Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
A	f-droid.org 2a00:c6c0:0:155:1::1	Content-Security-Policy		Ok: Header without syntax errors found: default-src 'none';base-uri 'self';block-all-mixed-content;connect-src 'self';font-src 'self';form-action 'self' https://search.f-droid.org;frame-ancestors 'self';img-src 'self' https://f-droid.org;manifest-src 'self';media-src 'self';script-src 'self';style-src 'self' 'unsafe-inline';
B				Info: Header-Element is deprecated. block-all-mixed-content
A				Good: default-src directive only with 'none' or 'self', additional sources are blocked.
A				Good: default-src without 'unsafe-inline' or 'unsave-eval'.
A				Good: form-action directive found. That reduces the risk sending data to unwanted domains. form-action is a navigation-directive, so default-src isn't used.
A				Good: frame-ancestors directive found. That limits pages who are allowed to use this page in a frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
A				Good: base-uri directive found. That limits the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A				Good: No object-src found, but the default-src used as fallback is defined and restricted.
A				Good: script-src without 'unsafe-inline' and 'unsafe-eval' found. That's the recommended configuration.
A				Good: script-src without * and a scheme found.
A				Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A				Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A		X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
A		Referrer-Policy		Ok: Header without syntax errors found: strict-origin
F		Permissions-Policy		Critical: Header with syntax errors found: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), ch-ua=(), clipboard-read=(), clipboard-write=(), conversion-measurement=(), display-capture=(), document-domain=(), document-write=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), focus-without-user-activation=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker=(), speaker-selection=(), sync-xhr=(), trust-token-redemption=(), usb=(), wake-lock=(), webauthn=(), web-share=(), window-placement=(), vr=(), xr=(), xr-spatial-tracking=(),
B				Info: Header-Element is deprecated. wake-lock=()
E				Critical: Unknown Header-Element found document-write=()
E				Critical: Unknown Header-Element found xr=()
E				Critical: Unknown Header-Element found document-write=()
E				Critical: Unknown Header-Element found xr=()
A		X-Frame-Options		Ok: Header without syntax errors found: sameorigin
B				Info: Header is deprecated. May not longer work in modern browsers. sameorigin. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A		X-Xss-Protection		Ok: Header without syntax errors found: 1; mode=block
B				Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
A	f-droid.org 2a01:4f9:3b:546d::2	Content-Security-Policy		Ok: Header without syntax errors found: default-src 'none';base-uri 'self';block-all-mixed-content;connect-src 'self';font-src 'self';form-action 'self' https://search.f-droid.org;frame-ancestors 'self';img-src 'self' https://f-droid.org;manifest-src 'self';media-src 'self';script-src 'self';style-src 'self' 'unsafe-inline';
B				Info: Header-Element is deprecated. block-all-mixed-content
A				Good: default-src directive only with 'none' or 'self', additional sources are blocked.
A				Good: default-src without 'unsafe-inline' or 'unsave-eval'.
A				Good: form-action directive found. That reduces the risk sending data to unwanted domains. form-action is a navigation-directive, so default-src isn't used.
A				Good: frame-ancestors directive found. That limits pages who are allowed to use this page in a frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
A				Good: base-uri directive found. That limits the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A				Good: No object-src found, but the default-src used as fallback is defined and restricted.
A				Good: script-src without 'unsafe-inline' and 'unsafe-eval' found. That's the recommended configuration.
A				Good: script-src without * and a scheme found.
A				Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A				Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A		X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
A		Referrer-Policy		Ok: Header without syntax errors found: strict-origin
F		Permissions-Policy		Critical: Header with syntax errors found: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), ch-ua=(), clipboard-read=(), clipboard-write=(), conversion-measurement=(), display-capture=(), document-domain=(), document-write=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), focus-without-user-activation=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker=(), speaker-selection=(), sync-xhr=(), trust-token-redemption=(), usb=(), wake-lock=(), webauthn=(), web-share=(), window-placement=(), vr=(), xr=(), xr-spatial-tracking=(),
B				Info: Header-Element is deprecated. wake-lock=()
E				Critical: Unknown Header-Element found document-write=()
E				Critical: Unknown Header-Element found xr=()
E				Critical: Unknown Header-Element found document-write=()
E				Critical: Unknown Header-Element found xr=()
A		X-Frame-Options		Ok: Header without syntax errors found: sameorigin
B				Info: Header is deprecated. May not longer work in modern browsers. sameorigin. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A		X-Xss-Protection		Ok: Header without syntax errors found: 1; mode=block
B				Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
B	f-droid.org 37.218.243.72	Cross-Origin-Embedder-Policy		Info: Missing Header
B	f-droid.org 37.218.243.72	Cross-Origin-Opener-Policy		Info: Missing Header
B	f-droid.org 37.218.243.72	Cross-Origin-Resource-Policy		Info: Missing Header
B	f-droid.org 37.218.247.73	Cross-Origin-Embedder-Policy		Info: Missing Header
B	f-droid.org 37.218.247.73	Cross-Origin-Opener-Policy		Info: Missing Header
B	f-droid.org 37.218.247.73	Cross-Origin-Resource-Policy		Info: Missing Header
B	f-droid.org 65.21.79.229	Cross-Origin-Embedder-Policy		Info: Missing Header
B	f-droid.org 65.21.79.229	Cross-Origin-Opener-Policy		Info: Missing Header
B	f-droid.org 65.21.79.229	Cross-Origin-Resource-Policy		Info: Missing Header
B	f-droid.org 2a00:c6c0:0:153:3::1	Cross-Origin-Embedder-Policy		Info: Missing Header
B	f-droid.org 2a00:c6c0:0:153:3::1	Cross-Origin-Opener-Policy		Info: Missing Header
B	f-droid.org 2a00:c6c0:0:153:3::1	Cross-Origin-Resource-Policy		Info: Missing Header
B	f-droid.org 2a00:c6c0:0:155:1::1	Cross-Origin-Embedder-Policy		Info: Missing Header
B	f-droid.org 2a00:c6c0:0:155:1::1	Cross-Origin-Opener-Policy		Info: Missing Header
B	f-droid.org 2a00:c6c0:0:155:1::1	Cross-Origin-Resource-Policy		Info: Missing Header
B	f-droid.org 2a01:4f9:3b:546d::2	Cross-Origin-Embedder-Policy		Info: Missing Header
B	f-droid.org 2a01:4f9:3b:546d::2	Cross-Origin-Opener-Policy		Info: Missing Header
B	f-droid.org 2a01:4f9:3b:546d::2	Cross-Origin-Resource-Policy		Info: Missing Header
	3. DNS- and NameServer - Checks
A	Info:: 24 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
A	Info:: 24 Queries complete, 24 with IPv6, 0 with IPv4.
A	Good: All DNS Queries done via IPv6.
	Bad (greater 8):: An average of 12.0 queries per domain name server required to find all ip addresses of all name servers.
A	Info:: 2 different Name Servers found: dns1.registrar-servers.com, dns2.registrar-servers.com, 2 Name Servers included in Delegation: dns1.registrar-servers.com, dns2.registrar-servers.com, 2 Name Servers included in 1 Zone definitions: dns1.registrar-servers.com, dns2.registrar-servers.com, 1 Name Servers listed in SOA.Primary: dns1.registrar-servers.com.
A	Good: Only one SOA.Primary Name Server found.: dns1.registrar-servers.com.
A	Good: SOA.Primary Name Server included in the delegation set.: dns1.registrar-servers.com.
A	Good: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: dns1.registrar-servers.com, dns2.registrar-servers.com
A	Good: All Name Server Domain Names have a Public Suffix.
A	Good: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
A	Good: All Name Server ip addresses are public.
A	Good: Minimal 2 different name servers (public suffix and public ip address) found: 2 different Name Servers found
A	Good: All name servers have ipv4- and ipv6-addresses.: 2 different Name Servers found
	Warning: All Name Servers have the same Top Level Domain / Public Suffix. If there is a problem with that Top Level Domain, your domain may be affected. Better: Use Name Servers with different top level domains.: 2 Name Servers, 1 Top Level Domain: com
	Warning: All Name Servers have the same domain name. If there is a problem with that domain name (or with the name servers of that domain name), your domain may be affected. Better: Use Name Servers with different domain names / different top level domains.: Only one domain name used: registrar-servers.com
	Warning: All Name Servers from the same Country / IP location.: 2 Name Servers, 1 Countries: US
A	Info: Ipv4-Subnet-list: 2 Name Servers, 1 different subnets (first Byte): 156., 1 different subnets (first two Bytes): 156.154., 2 different subnets (first three Bytes): 156.154.132., 156.154.133.
A	Good: Name Server IPv4-addresses from different subnet found:
A	Info: IPv6-Subnet-list: 2 Name Servers with IPv6, 1 different subnets (first block): 2610:, 1 different subnets (first two blocks): 2610:00a1:, 2 different subnets (first three blocks): 2610:00a1:1024:, 2610:00a1:1025:, 2 different subnets (first four blocks): 2610:00a1:1024:0000:, 2610:00a1:1025:0000:
A	Good: Name Server IPv6 addresses from different subnets found.
A	Good: Nameserver supports TCP connections: 4 good Nameserver
A	Good: Nameserver supports Echo Capitalization: 4 good Nameserver
A	Good: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 4 good Nameserver
A	Good: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 4 good Nameserver
A	Good: All SOA have the same Serial Number
A	Good: CAA entries found, creating certificate is limited: letsencrypt.org is allowed to create certificates
A	Good: CAA entries found, creating certificate is limited: pki.goog is allowed to create certificates
	4. Content- and Performance-critical Checks
	http://f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 37.218.243.72	502		Fatal: Check of /.well-known/acme-challenge/random-filename has a http status 500 - 599, Server Error. Creating a Letsencrypt certificate via http-01 challenge can't work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
	http://f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 37.218.247.73	502		Fatal: Check of /.well-known/acme-challenge/random-filename has a http status 500 - 599, Server Error. Creating a Letsencrypt certificate via http-01 challenge can't work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
	http://f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 65.21.79.229	502		Fatal: Check of /.well-known/acme-challenge/random-filename has a http status 500 - 599, Server Error. Creating a Letsencrypt certificate via http-01 challenge can't work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
	http://f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a00:c6c0:0:153:3::1	502		Fatal: Check of /.well-known/acme-challenge/random-filename has a http status 500 - 599, Server Error. Creating a Letsencrypt certificate via http-01 challenge can't work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
	http://f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a00:c6c0:0:155:1::1	502		Fatal: Check of /.well-known/acme-challenge/random-filename has a http status 500 - 599, Server Error. Creating a Letsencrypt certificate via http-01 challenge can't work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
	http://f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a01:4f9:3b:546d::2	502		Fatal: Check of /.well-known/acme-challenge/random-filename has a http status 500 - 599, Server Error. Creating a Letsencrypt certificate via http-01 challenge can't work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
	http://www.f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 37.218.243.72	502		Fatal: Check of /.well-known/acme-challenge/random-filename has a http status 500 - 599, Server Error. Creating a Letsencrypt certificate via http-01 challenge can't work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
	http://www.f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 37.218.247.73	502		Fatal: Check of /.well-known/acme-challenge/random-filename has a http status 500 - 599, Server Error. Creating a Letsencrypt certificate via http-01 challenge can't work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
	http://www.f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 65.21.79.229	502		Fatal: Check of /.well-known/acme-challenge/random-filename has a http status 500 - 599, Server Error. Creating a Letsencrypt certificate via http-01 challenge can't work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
	http://www.f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a00:c6c0:0:153:3::1	502		Fatal: Check of /.well-known/acme-challenge/random-filename has a http status 500 - 599, Server Error. Creating a Letsencrypt certificate via http-01 challenge can't work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
	http://www.f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a00:c6c0:0:155:1::1	502		Fatal: Check of /.well-known/acme-challenge/random-filename has a http status 500 - 599, Server Error. Creating a Letsencrypt certificate via http-01 challenge can't work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
	http://www.f-droid.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a01:4f9:3b:546d::2	502		Fatal: Check of /.well-known/acme-challenge/random-filename has a http status 500 - 599, Server Error. Creating a Letsencrypt certificate via http-01 challenge can't work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
A	Good: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
A	Good: No https + http status 200 with inline CSS / JavaScript found
	https://f-droid.org/ 37.218.243.72	200		Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
	https://f-droid.org/ 37.218.247.73	200		Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
	https://f-droid.org/ 65.21.79.229	200		Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
	https://f-droid.org/ 2a00:c6c0:0:153:3::1	200		Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
	https://f-droid.org/ 2a00:c6c0:0:155:1::1	200		Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
	https://f-droid.org/ 2a01:4f9:3b:546d::2	200		Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
A	Good: Every https connection via port 443 supports the http/2 protocol via ALPN.
A	Good: Some script Elements (type text/javascript) with a src-Attribute have a defer / async - Attribute. So loading and executing these JavaScripts doesn't block parsing and rendering the Html-Output.
	https://f-droid.org/ 37.218.243.72	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 2 script elements without defer/async.
	https://f-droid.org/ 37.218.247.73	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 2 script elements without defer/async.
	https://f-droid.org/ 65.21.79.229	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 2 script elements without defer/async.
	https://f-droid.org/ 2a00:c6c0:0:153:3::1	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 2 script elements without defer/async.
	https://f-droid.org/ 2a00:c6c0:0:155:1::1	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 2 script elements without defer/async.
	https://f-droid.org/ 2a01:4f9:3b:546d::2	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 2 script elements without defer/async.
A	Good: All svg-Images greater 1024 Bytes without internal compression are compressed. Svg is an Xml-Application, so Compression reduces the size of the file. 18 images (type image/svg+xml, image/x-icon, image/vnd.microsoft.icon) found with compression.
	Warning: CSS / JavaScript found without Compression. Compress these ressources, gzip, deflate, br are checked. 12 external CSS / JavaScript files without Compression found - 12 with Compression, 24 complete
A	Good: All images with internal compression not compressed. Some Images (.png, .jpg, .jpeg, .webp, .gif) are already compressed, so an additional compression isn't helpful. 18 images (type image/png, image/jpg, image/jpeg, image/webp, image/gif) found without additional Compression. Not required because these images are already compressed
	Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 0 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 6 with Cache-Control max-age too short (minimum 7 days), 18 with Cache-Control long enough, 24 complete.
	Warning: Images with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 0 image files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 12 with Cache-Control max-age too short (minimum 7 days), 24 with Cache-Control long enough, 36 complete.
A	Good: All checked attribute values are enclosed in quotation marks (" or ').
A	Good: Some img-elements have a valid alt-attribute.: 36 img-elements found, 30 img-elements with correct alt-attributes (defined, not an empty value).
	Wrong: img-elements without alt-attribute or empty alt-attribute found. The alt-attribute ("alternative") is required and should describe the img. So Screenreader and search engines are able to use these informations.: 6 img-elements without alt-attribute, 0 img-elements with empty alt-attribute found.
A	Good: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
A	Info: Different Server-Headers found
A	Duration: 174433 milliseconds, 174.433 seconds

8. Connections

Domain

Port

Cert.

Protocol

KeyExchange

Strength

Cipher

Strength

HashAlgorithm

OCSP stapling

Domain/KeyExchange

IP/Strength

Port/Cipher

Cert./Strength

Protocol/HashAlgorithm

OCSP stapling

f-droid.org

37.218.243.72

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

f-droid.org

37.218.243.72

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=f-droid.org
	2	CN=YR1, O=Let's Encrypt, C=US
	3	CN=Root YR, O=ISRG, C=US

f-droid.org

37.218.247.73

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

f-droid.org

37.218.247.73

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=f-droid.org
	2	CN=YR1, O=Let's Encrypt, C=US
	3	CN=Root YR, O=ISRG, C=US

f-droid.org

65.21.79.229

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

f-droid.org

65.21.79.229

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=f-droid.org
	2	CN=YR1, O=Let's Encrypt, C=US
	3	CN=Root YR, O=ISRG, C=US

f-droid.org

2a00:c6c0:0:153:3::1

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

f-droid.org

2a00:c6c0:0:153:3::1

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=f-droid.org
	2	CN=YR1, O=Let's Encrypt, C=US
	3	CN=Root YR, O=ISRG, C=US

f-droid.org

2a00:c6c0:0:155:1::1

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

f-droid.org

2a00:c6c0:0:155:1::1

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=f-droid.org
	2	CN=YR1, O=Let's Encrypt, C=US
	3	CN=Root YR, O=ISRG, C=US

f-droid.org

2a01:4f9:3b:546d::2

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

f-droid.org

2a01:4f9:3b:546d::2

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=f-droid.org
	2	CN=YR1, O=Let's Encrypt, C=US
	3	CN=Root YR, O=ISRG, C=US

www.f-droid.org

37.218.243.72

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

www.f-droid.org

37.218.243.72

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=f-droid.org
	2	CN=YR1, O=Let's Encrypt, C=US
	3	CN=Root YR, O=ISRG, C=US

www.f-droid.org

37.218.247.73

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

www.f-droid.org

37.218.247.73

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=f-droid.org
	2	CN=YR1, O=Let's Encrypt, C=US
	3	CN=Root YR, O=ISRG, C=US

www.f-droid.org

65.21.79.229

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

www.f-droid.org

65.21.79.229

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=f-droid.org
	2	CN=YR1, O=Let's Encrypt, C=US
	3	CN=Root YR, O=ISRG, C=US

www.f-droid.org

2a00:c6c0:0:153:3::1

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

www.f-droid.org

2a00:c6c0:0:153:3::1

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=f-droid.org
	2	CN=YR1, O=Let's Encrypt, C=US
	3	CN=Root YR, O=ISRG, C=US

www.f-droid.org

2a00:c6c0:0:155:1::1

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

www.f-droid.org

2a00:c6c0:0:155:1::1

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=f-droid.org
	2	CN=YR1, O=Let's Encrypt, C=US
	3	CN=Root YR, O=ISRG, C=US

www.f-droid.org

2a01:4f9:3b:546d::2

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

www.f-droid.org

2a01:4f9:3b:546d::2

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
No SNI required - domain included in main certificate

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=f-droid.org
	2	CN=YR1, O=Let's Encrypt, C=US
	3	CN=Root YR, O=ISRG, C=US

65.21.79.229

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

65.21.79.229

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=f-droid.org
	2	CN=YR1, O=Let's Encrypt, C=US
	3	CN=Root YR, O=ISRG, C=US

37.218.243.72

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

37.218.243.72

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=f-droid.org
	2	CN=YR1, O=Let's Encrypt, C=US
	3	CN=Root YR, O=ISRG, C=US

37.218.247.73

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

37.218.247.73

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=f-droid.org
	2	CN=YR1, O=Let's Encrypt, C=US
	3	CN=Root YR, O=ISRG, C=US

[2a00:c6c0:0000:0153:0003:0000:0000:0001]

2a00:c6c0:0:153:3::1

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

[2a00:c6c0:0000:0153:0003:0000:0000:0001]

2a00:c6c0:0:153:3::1

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=f-droid.org
	2	CN=YR1, O=Let's Encrypt, C=US
	3	CN=Root YR, O=ISRG, C=US

[2a00:c6c0:0000:0155:0001:0000:0000:0001]

2a00:c6c0:0:155:1::1

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

[2a00:c6c0:0000:0155:0001:0000:0000:0001]

2a00:c6c0:0:155:1::1

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=f-droid.org
	2	CN=YR1, O=Let's Encrypt, C=US
	3	CN=Root YR, O=ISRG, C=US

[2a01:04f9:003b:546d:0000:0000:0000:0002]

2a01:4f9:3b:546d::2

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

[2a01:04f9:003b:546d:0000:0000:0000:0002]

2a01:4f9:3b:546d::2

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=f-droid.org
	2	CN=YR1, O=Let's Encrypt, C=US
	3	CN=Root YR, O=ISRG, C=US

9. Certificates

CN=f-droid.org

29.07.2026

27.10.2026
expires in 52 days

f-droid.com, f-droid.org, fdroid.com, fdroid.org, www.f-droid.com, www.f-droid.org, www.fdroid.com, www.fdroid.org - 8 entries

CN=f-droid.org

29.07.2026

27.10.2026
expires in 52 days

f-droid.com, f-droid.org, fdroid.com, fdroid.org, www.f-droid.com, www.f-droid.org, www.fdroid.com, www.fdroid.org - 8 entries

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	05B7461EDD8EF5FD84095D3B883083613944
Thumbprint:	CC3306E06620CB227F19FF2E16A411901B45BBD0
SHA256 / Certificate:	l7LiABySzXdpYZmezFRnczbZBtOUdg9EwNPahTGZ238=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	daa73bc44bc2fae1c0a69853c52f77130670541ea6a1922221db182047745b2b
SHA256 hex / Subject Public Key Information (SPKI):	daa73bc44bc2fae1c0a69853c52f77130670541ea6a1922221db182047745b2b (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=f-droid.org

29.07.2026

27.10.2026
expires in 52 days

f-droid.com, f-droid.org, fdroid.com, fdroid.org, www.f-droid.com, www.f-droid.org, www.fdroid.com, www.fdroid.org - 8 entries

CN=f-droid.org

29.07.2026

27.10.2026
expires in 52 days

f-droid.com, f-droid.org, fdroid.com, fdroid.org, www.f-droid.com, www.f-droid.org, www.fdroid.com, www.fdroid.org - 8 entries

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	05B7461EDD8EF5FD84095D3B883083613944
Thumbprint:	CC3306E06620CB227F19FF2E16A411901B45BBD0
SHA256 / Certificate:	l7LiABySzXdpYZmezFRnczbZBtOUdg9EwNPahTGZ238=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	daa73bc44bc2fae1c0a69853c52f77130670541ea6a1922221db182047745b2b
SHA256 hex / Subject Public Key Information (SPKI):	daa73bc44bc2fae1c0a69853c52f77130670541ea6a1922221db182047745b2b (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=YR1, O=Let's Encrypt, C=US

03.09.2025

03.09.2028
expires in 729 days

CN=YR1, O=Let's Encrypt, C=US

03.09.2025

03.09.2028
expires in 729 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00A20253F15F2691C05DC1CE13B9BCCA4E
Thumbprint:	CBCFD09CE3CD22D99D94E58F92E9898FBEE51A5E
SHA256 / Certificate:	E5SWNNmc1v1qqAvANP76zOsZaf7vmGWGcT7NuwV1jT8=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	2e8307068b6db620e4a39d068b5dee5d6ef5788cbb2c0b6d23ead84fcc17178c
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=YR1, O=Let's Encrypt, C=US

03.09.2025

03.09.2028
expires in 729 days

CN=YR1, O=Let's Encrypt, C=US

03.09.2025

03.09.2028
expires in 729 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00A20253F15F2691C05DC1CE13B9BCCA4E
Thumbprint:	CBCFD09CE3CD22D99D94E58F92E9898FBEE51A5E
SHA256 / Certificate:	E5SWNNmc1v1qqAvANP76zOsZaf7vmGWGcT7NuwV1jT8=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	2e8307068b6db620e4a39d068b5dee5d6ef5788cbb2c0b6d23ead84fcc17178c
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=Root YR, O=ISRG, C=US

03.09.2025

03.09.2032
expires in 2190 days

CN=Root YR, O=ISRG, C=US

03.09.2025

03.09.2032
expires in 2190 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00FAA6275DC258431D9766EC3045EF24AC
Thumbprint:	18F47BAE342367CBBF120681E6721D6AADC386C7
SHA256 / Certificate:	JwxktroarpSwdW6D2NsHMvW1NLzcVF1E4zTV3U0Q/sA=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	7e4e8838a8add6295de7ae3b047d3aba3488ab95db0a0aa56d897a00d8618bcf
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=Root YR, O=ISRG, C=US

13.05.2026

03.09.2032
expires in 2190 days

CN=Root YR, O=ISRG, C=US

13.05.2026

03.09.2032
expires in 2190 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00F24B6D17F9D9AD7CB1C9FEA78782699F
Thumbprint:	AB9D0263244DD0326EB67015705A667E79CFE998
SHA256 / Certificate:	ByY50LFA1b/64WrZw/bMYIYEBiH1HuYabUaokVwHz3Y=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	7e4e8838a8add6295de7ae3b047d3aba3488ab95db0a0aa56d897a00d8618bcf
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3194 days

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3194 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	008210CFB0D240E3594463E0BB63828B00
Thumbprint:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:	lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):	96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3194 days

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3194 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	008210CFB0D240E3594463E0BB63828B00
Thumbprint:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:	lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):	96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuer				last 7 days	active	num Certs
CN=R3, O=Let's Encrypt, C=US				0	0	6
CN=R10, O=Let's Encrypt, C=US				0	0	2
CN=YR1, O=Let's Encrypt, C=US				0	1	1
CN=R12, O=Let's Encrypt, C=US				0	0	1

CertSpotter-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
16154117142 leaf cert	CN=YR1, O=Let's Encrypt, C=US	2026-07-29 09:41:38	2026-10-27 09:41:37	fdroid.com, f-droid.com, fdroid.org, f-droid.org, www.fdroid.com, www.f-droid.com, www.fdroid.org, www.f-droid.org - 8 entries
12921959398 leaf cert	CN=R12, O=Let's Encrypt, C=US	2025-11-30 14:21:20	2026-02-28 14:21:19	fdroid.com, f-droid.com, fdroid.org, f-droid.org, www.fdroid.com, www.f-droid.com, www.fdroid.org, www.f-droid.org - 8 entries
8322365091 leaf cert	CN=R10, O=Let's Encrypt, C=US	2024-10-03 23:50:17	2025-01-01 23:50:16	fdroid.com, f-droid.com, fdroid.org, f-droid.org, www.fdroid.com, www.f-droid.com, www.fdroid.org, www.f-droid.org - 8 entries
7992903440 leaf cert	CN=R10, O=Let's Encrypt, C=US	2024-08-21 10:54:13	2024-11-19 10:54:12	fdroid.org, f-droid.org, www.fdroid.org, www.f-droid.org - 4 entries
6365792178 leaf cert	CN=R3, O=Let's Encrypt, C=US	2023-12-14 09:02:51	2024-03-13 09:02:50	fdroid.org, f-droid.org, www.fdroid.org, www.f-droid.org - 4 entries
6009414709 leaf cert	CN=R3, O=Let's Encrypt, C=US	2023-10-14 19:45:37	2024-01-12 19:45:36	fdroid.org, f-droid.org, www.fdroid.org, www.f-droid.org - 4 entries
5953267840 leaf cert	CN=R3, O=Let's Encrypt, C=US	2023-10-04 06:33:25	2024-01-02 06:33:24	f-droid.org - 1 entries
4826653243 leaf cert	CN=R3, O=Let's Encrypt, C=US	2023-02-15 13:17:49	2023-05-16 13:17:48	fdroid.org, f-droid.org, www.fdroid.org, www.f-droid.org - 4 entries
4819590724 leaf cert	CN=R3, O=Let's Encrypt, C=US	2023-02-13 22:43:32	2023-05-14 22:43:31	f-droid.org - 1 entries
4561462342 leaf cert	CN=R3, O=Let's Encrypt, C=US	2022-12-17 12:15:00	2023-03-17 12:14:59	fdroid.org, f-droid.org, www.fdroid.org, www.f-droid.org - 4 entries

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Issuer				last 7 days	active	num Certs
CN=R3, O=Let's Encrypt, C=US				0 /0 new	0	4

CRT-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
10784980357 precert	CN=R3, O=Let's Encrypt, C=US	2023-10-14 17:45:37	2024-01-12 18:45:36	fdroid.org, f-droid.org, www.fdroid.org, www.f-droid.org 4 entries
10598262659 precert	CN=R3, O=Let's Encrypt, C=US	2023-10-04 04:33:25	2024-01-02 05:33:24	f-droid.org 1 entries
10301789206 leaf cert	CN=R3, O=Let's Encrypt, C=US	2023-08-15 11:49:53	2023-11-13 12:49:52	fdroid.org, f-droid.org, www.fdroid.org, www.f-droid.org 4 entries
9982158463 leaf cert	CN=R3, O=Let's Encrypt, C=US	2023-07-17 03:08:16	2023-10-15 03:08:15	f-droid.org 1 entries

11. Html-Content - Entries

Summary

							Subresource Integrity (SRI)
Domainname	HtmlElement	rel/property	∑	∑ size	∑ problems	∑ int.	∑ ext.	∑ Origin poss.	∑ SRI ParseErrors	∑ SRI valid	∑ SRI missing
https://f-droid.org/ 37.218.243.72	a		21		0			0	0	0
	form		2	4,836 Bytes	0	1	1	0	0	0
	img		6	43,432 Bytes	0	6	0	0	0	0
	link	alternate	30		0			0	0	0
	link	dns-prefetch	1		0			0	0	0
	link	stylesheet	1	6,262 Bytes	0	1	0	0	0	0
	link	other	11	58,616 Bytes	0	8	0	0	0	0
	meta	og	4	54,010 Bytes	0	2	0	0	0	0
	meta	other	8	184 Bytes	0	1	0	0	0	0
	script		3	2,883 Bytes	0	3	0	0	0	0
https://f-droid.org/ 37.218.247.73	a		21		0			0	0	0
	form		2	4,836 Bytes	0	1	1	0	0	0
	img		6	43,432 Bytes	0	6	0	0	0	0
	link	alternate	30		0			0	0	0
	link	dns-prefetch	1		0			0	0	0
	link	stylesheet	1	6,262 Bytes	0	1	0	0	0	0
	link	other	11	58,616 Bytes	0	8	0	0	0	0
	meta	og	4	54,010 Bytes	0	2	0	0	0	0
	meta	other	8	184 Bytes	0	1	0	0	0	0
	script		3	2,883 Bytes	0	3	0	0	0	0
https://f-droid.org/ 65.21.79.229	a		21		0			0	0	0
	form		2	4,836 Bytes	0	1	1	0	0	0
	img		6	43,432 Bytes	0	6	0	0	0	0
	link	alternate	30		0			0	0	0
	link	dns-prefetch	1		0			0	0	0
	link	stylesheet	1	6,262 Bytes	0	1	0	0	0	0
	link	other	11	58,616 Bytes	0	8	0	0	0	0
	meta	og	4	54,010 Bytes	0	2	0	0	0	0
	meta	other	8	184 Bytes	0	1	0	0	0	0
	script		3	2,883 Bytes	0	3	0	0	0	0
https://f-droid.org/ 2a00:c6c0:0:153:3::1	a		21		0			0	0	0
	form		2	4,836 Bytes	0	1	1	0	0	0
	img		6	43,432 Bytes	0	6	0	0	0	0
	link	alternate	30		0			0	0	0
	link	dns-prefetch	1		0			0	0	0
	link	stylesheet	1	6,262 Bytes	0	1	0	0	0	0
	link	other	11	58,616 Bytes	0	8	0	0	0	0
	meta	og	4	54,010 Bytes	0	2	0	0	0	0
	meta	other	8	184 Bytes	0	1	0	0	0	0
	script		3	2,883 Bytes	0	3	0	0	0	0
https://f-droid.org/ 2a00:c6c0:0:155:1::1	a		21		0			0	0	0
	form		2	4,836 Bytes	0	1	1	0	0	0
	img		6	43,432 Bytes	0	6	0	0	0	0
	link	alternate	30		0			0	0	0
	link	dns-prefetch	1		0			0	0	0
	link	stylesheet	1	6,262 Bytes	0	1	0	0	0	0
	link	other	11	58,616 Bytes	0	8	0	0	0	0
	meta	og	4	54,010 Bytes	0	2	0	0	0	0
	meta	other	8	184 Bytes	0	1	0	0	0	0
	script		3	2,883 Bytes	0	3	0	0	0	0
https://f-droid.org/ 2a01:4f9:3b:546d::2	a		21		0			0	0	0
	form		2	4,836 Bytes	0	1	1	0	0	0
	img		6	43,432 Bytes	0	6	0	0	0	0
	link	alternate	30		0			0	0	0
	link	dns-prefetch	1		0			0	0	0
	link	stylesheet	1	6,262 Bytes	0	1	0	0	0	0
	link	other	11	58,616 Bytes	0	8	0	0	0	0
	meta	og	4	54,010 Bytes	0	2	0	0	0	0
	meta	other	8	184 Bytes	0	1	0	0	0	0
	script		3	2,883 Bytes	0	3	0	0	0	0

Details (currently limited to 500 rows - some problems with spam users)

Domainname	Html-Element	name/equiv/ property/rel	href/src/content	HttpStatus	∑
https://f-droid.org/ 37.218.243.72	a		/en/			1	ok
							ok


	a		/en/2026/07/16/twif.html			1	ok
							ok


	a		/en/2026/07/24/twif.html			1	ok
							ok


	a		/en/2026/07/31/twif.html			1	ok
							ok


	a		/en/2026/08/07/twif.html			1	ok
							ok


	a		/en/2026/08/14/twif.html			1	ok
							ok


	a		/en/about/			1	ok
							ok


	a		/en/contribute/			1	ok
							ok


	a		/en/docs/			1	ok
							ok


	a		/en/donate			1	ok
							ok


	a		/en/issues/			1	ok
							ok


	a		/en/news/			1	ok
							ok


	a		/en/packages/			1	ok
							ok


	a		docs/Verifying_Downloaded_APK			1	ok
							ok


	a		https://f-droid.org/en/about/			1	ok
							ok


	a		https://f-droid.org/F-Droid.apk			1	ok
							ok


	a		https://floss.social/@fdroidorg			1	ok
							ok


	a		https://gitlab.com/fdroid/fdroid-website/edit/master/			1	ok
							ok


	a		https://keepandroidopen.org/			1	ok
							ok


	a		https://liberapay.com/F-Droid-Data/donate			1	ok
							ok


	a		https://opencollective.com/f-droid/donate			1	ok
							ok


	form	get	/		200	1	ok
				text/html X-Content-Type-Options nosniff found			ok
				4207 Bytes
	ETag: "3351-65a35624749ed;812-65a357d117fee

	form	get	https://search.f-droid.org/		200	1	ok
				text/html; charset=utf-8 missing X-Content-Type-Options nosniff			ok
				629 Bytes
	Server-Header Access-Control-Allow-Origin: not found			Cross-Origin Resource Sharing (CORS) not supported

	img	src	/assets/download-fdroid-qr_rt62kUMmGMIMhgDgUUWjYefCQjazGqLRlAZ7WOgSSlg=.png		200	1	ok
	no alt-Attribute			image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 437 Bytes
	ETag: "1b5-6487ca0d93d00"

	img	src	/assets/fdroid-logo-text_S0MUfk_FsnAYL7n2MQye-34IoSNm6QM6xYjDnMqkufo=.svg		200	1	ok
	alt: F-Droid			image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Compression (gzip): 14744/174227 Bytes
	ETag: "2a893-6487ca0d93d00-gzip"

	img	src	/assets/liberapay_donate_button_GHdOOfmFJNeSXjfjnA-98XtIuEfvE6cNJjHgHOhjdv0=.svg		200	1	ok
	alt: Donate via Liberapay			image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			Compression (gzip): 842/1457 Bytes
	ETag: "5b1-6487ca0d93d00-gzip"

	img	src	/assets/mastodon_-c62Zo613I00cO-RavNTybrSJhBC3vZToN5u4zSoMdM=.svg		200	1	ok
	alt: mastodon			image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Compression (gzip): 889/2011 Bytes
	ETag: "7db-6487ca0d93d00-gzip"

	img	src	/assets/opencollective_button_iIGF0Hixdj0EaYR3Sd7FRigTVcl7QPGu6kaoBmXHjZI=.png		200	1	ok
	alt: Donate to our Collective			image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			No Compression - 11943 Bytes
	ETag: "2ea7-6487ca0d93d00"

	img	src	/assets/phone-frame_kEDoOnDDPLnsqH4lVaEun9wfQgM9ivrhk5OiUWWdKHc=.png		200	1	ok
	alt: F-Droid Android app screenshot			image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 14577 Bytes
	ETag: "38f1-6487ca0d93d00"

	link	alternate	/feed.xml			1	ok
							ok


	link	alternate	https://f-droid.org/			1	ok
							ok


	link	alternate	https://f-droid.org/ar/			1	ok
							ok


	link	alternate	https://f-droid.org/bo/			1	ok
							ok


	link	alternate	https://f-droid.org/ca/			1	ok
							ok


	link	alternate	https://f-droid.org/cs/			1	ok
							ok


	link	alternate	https://f-droid.org/de/			1	ok
							ok


	link	alternate	https://f-droid.org/en/			1	ok
							ok


	link	alternate	https://f-droid.org/es/			1	ok
							ok


	link	alternate	https://f-droid.org/eu/			1	ok
							ok


	link	alternate	https://f-droid.org/fa/			1	ok
							ok


	link	alternate	https://f-droid.org/fr/			1	ok
							ok


	link	alternate	https://f-droid.org/he/			1	ok
							ok


	link	alternate	https://f-droid.org/hr/			1	ok
							ok


	link	alternate	https://f-droid.org/hu/			1	ok
							ok


	link	alternate	https://f-droid.org/id/			1	ok
							ok


	link	alternate	https://f-droid.org/is/			1	ok
							ok


	link	alternate	https://f-droid.org/it/			1	ok
							ok


	link	alternate	https://f-droid.org/ja/			1	ok
							ok


	link	alternate	https://f-droid.org/ko/			1	ok
							ok


	link	alternate	https://f-droid.org/pl/			1	ok
							ok


	link	alternate	https://f-droid.org/pt/			1	ok
							ok


	link	alternate	https://f-droid.org/pt_BR/			1	ok
							ok


	link	alternate	https://f-droid.org/ro/			1	ok
							ok


	link	alternate	https://f-droid.org/ru/			1	ok
							ok


	link	alternate	https://f-droid.org/sq/			1	ok
							ok


	link	alternate	https://f-droid.org/tr/			1	ok
							ok


	link	alternate	https://f-droid.org/uk/			1	ok
							ok


	link	alternate	https://f-droid.org/zh_Hans/			1	ok
							ok


	link	alternate	https://f-droid.org/zh_Hant/			1	ok
							ok


	link	apple-touch-icon	/assets/apple-touch-icon_ypJwtCrcixeH_qV6LdcMYk1anFIR9o-_ufR__1wNdJY=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 9788 Bytes
	ETag: "263c-6487ca0d93d00"

	link	canonical	https://f-droid.org/			1	ok
							ok


	link	dns-prefetch	https://search.f-droid.org			1	ok
							ok


	link	icon	/assets/favicon_AfYQ36xPEzFjJiCTyBFVmfWkajkehilUd2geASywhxM=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 2134 Bytes
	ETag: "856-6487ca0d93d00"

	link	icon	/assets/favicon-16x16_7yyppfDSTAVyGb3ycHY84PYjHUwP96NKICAibLRpnXw=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			No Compression - 874 Bytes
	ETag: "36a-6487ca0d93d00"

	link	icon	/assets/favicon-32x32_Dk3aeG3k_A20gYe5zAlPSBx_CEcpJaCI89K2X2z6CFY=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			No Compression - 1594 Bytes
	ETag: "63a-6487ca0d93d00"

	link	manifest	/assets/site_J9OLInBmO2hLlutzRFC4mdstNJjL44B6NzBbT0ecmA0=.webmanifest			1	ok
							ok


	link	mask-icon	/assets/safari-pinned-tab_jVj0QIYK2TEAcXlrhjrienjgRnccBVzvX22tYumPb9Q=.svg		200	1	ok
				image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Compression (gzip): 1036/1911 Bytes
	ETag: "777-6487ca0d93d00-gzip"

	link	preload	/assets/roboto_ln5c7Pv79kCZw8EjInNILddDbwVxQmaVPE0sjunCivU=.ttf		200	1	ok
				font/ttf missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Missing Compression: 32652/32652 Bytes, font not compressed
	ETag: "7f8c-6487ca0d93d00"

	link	preload	/css/main.css		200	1	ok
				text/css X-Content-Type-Options nosniff found			ok
				Compression (gzip): 6262/27150 Bytes
	ETag: "6a0e-65a3561a48214-gzip"

	link	search	/en/osd.xml			1	ok
							ok


	link	shortcut icon	/assets/favicon_yJPr4UNteJc-cseeq16P0Hvl1kDbJjTVYcj-KA6-_Fs=.ico		200	1	ok
				image/vnd.microsoft.icon missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			Compression (gzip): 4276/15086 Bytes
	ETag: "3aee-6487ca0d93d00-gzip"

	link	stylesheet	/css/main.css		200	1	ok
				text/css X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			Compression (gzip): 6262/27150 Bytes
	ETag: "6a0e-65a3561a48214-gzip"
	local SRI possible, possible hash-values: sha256-4Dj9kZCItqHBfx3qQZEf5gIxxvptHDc1grd86bN1UTo= sha384-KhGgOE0O2PjEme6pg2TVHHSG5byM3rmIednA086RDUf/qsOqs/3eud79lUwN8DJP sha512-qQwYEXWLIwoyyT5/ArlZ8IbW9wlljZO70yqXhdVdhRU2RiphPVo8p5IT8BxTd8VQk2zrL05gHvg9lod+di6vTA== <link rel="stylesheet" href="/css/main.css" crossorigin="anonymous" integrity="sha256-4Dj9kZCItqHBfx3qQZEf5gIxxvptHDc1grd86bN1UTo=" />

	meta	charset	utf-8			1	ok
							ok


	meta	og:description	F-Droid is the app distribution ecosystem for Android where your user freedom comes first. Discover our app store, explore the world of free and open source (FOSS) apps and [learn](https://f-droid.org/about/) about our app distribution tools.			1	ok
							ok


	meta	og:image	https://f-droid.org/assets/fdroid-logo_bfHl7nsLHOUQxzdU8-rGIhn4bAgl6z7k2mA3fWoCyT4=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 49803 Bytes
	ETag: "c28b-6487ca0d93d00"

	meta	og:title	F-Droid - Free and Open Source Android App Repository			1	ok
							ok


	meta	og:url	https://f-droid.org/		200	1	ok
				text/html X-Content-Type-Options nosniff found			ok
				4207 Bytes
	ETag: "3351-65a35624749ed;812-65a357d117fee

	meta	X-UA-Compatible	IE=edge			1	ok
							ok


	meta	description	F-Droid is the app distribution ecosystem for Android where your user freedom comes first. Discover our app store, explore the world of free and open source (FOSS) apps and [learn](https://f-droid.org/about/) about our app distribution tools.			1	ok
							ok


	meta	msapplication-config	/assets/browserconfig_sI0d7L-NQ2rondQpLn2DRSqXxvj7iPI0-WPzXn-uLZA=.xml		200	1	ok
				application/xml missing X-Content-Type-Options nosniff			ok
				184 Bytes
	ETag: "10a-6487ca0d93d00-gzip"

	meta	msapplication-TileColor	#ffffff			1	ok
							ok


	meta	robots	DisallowAITraining			1	ok
							ok


	meta	theme-color	#ffffff			1	ok
							ok


	meta	viewport	width=device-width, initial-scale=1			1	ok
							ok


	script	src	/assets/banner_YoMGgpdLnM6lO1-eNiEaJsDGclXrmjSlTM-8RGlLcho=.js		200	1	ok
	Missing defer / async attribute.			text/javascript X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 - with long duration found.			Compression required: 1267 Bytes
	ETag: "4f3-64b069205bb00"
	local SRI possible, possible hash-values: sha256-YoMGgpdLnM6lO1+eNiEaJsDGclXrmjSlTM+8RGlLcho= sha384-0k5EG6VxoafoXBAjE0GhCy5dlxnL5MFQHUA7FD9cJ4ynz/2eADT8O2sPiCEwVvX5 sha512-gIExbjD8fxqWeMJkL0ePsfUg9NNj1H8t2Ymq2VY8Fret2AJOk/fMGycT+HQxKnLuhj7h4TONltDcWgbqiqtOww== <script src="/assets/banner_YoMGgpdLnM6lO1-eNiEaJsDGclXrmjSlTM-8RGlLcho=.js" crossorigin="anonymous" integrity="sha256-YoMGgpdLnM6lO1+eNiEaJsDGclXrmjSlTM+8RGlLcho=" />

	script	src	/assets/donate_JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH-Gw=.js		200	1	ok
	defer attribute found			text/javascript X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 - with long duration found.			357 Bytes
	ETag: "165-6487ca0d93d00"
	local SRI possible, possible hash-values: sha256-JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH+Gw= sha384-PAl307b7gOoVlctfisIwJbMLTbrw6lis1TswLjjgO6JxStjVK42OFpvsp5m3BYDq sha512-FH+UESTqbVldCYoisWwq7z5MPwSwYFzj/s465acDSatJ/cGRm+nS+SE+em5llwaO+bKZYTyrQtpferrEuB9w5g== <script src="/assets/donate_JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH-Gw=.js" crossorigin="anonymous" integrity="sha256-JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH+Gw=" />

	script	src	/assets/sidebar-lang_j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ_lRfuoUmiaqc=.js		200	1	ok
	Missing defer / async attribute.			text/javascript X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 - with long duration found.			Compression required: 1259 Bytes
	ETag: "4eb-6487ca0d93d00"
	local SRI possible, possible hash-values: sha256-j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ/lRfuoUmiaqc= sha384-UcIkUDNwx94N8ZhYlsbeJH70WQJyutowYWrrYJWWxZSvfhpkItLWbXt1ejIrCqbn sha512-oIysJYxLL/x9oSUhpMvVw9xh/d7WkdVGUhiich24sM9/pgkAJw3dO6r7L004c83o2w4ZcJSRUvCYpmN34zq24w== <script src="/assets/sidebar-lang_j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ_lRfuoUmiaqc=.js" crossorigin="anonymous" integrity="sha256-j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ/lRfuoUmiaqc=" />

37.218.247.73	a		/en/			1	ok
							ok


	a		/en/2026/07/16/twif.html			1	ok
							ok


	a		/en/2026/07/24/twif.html			1	ok
							ok


	a		/en/2026/07/31/twif.html			1	ok
							ok


	a		/en/2026/08/07/twif.html			1	ok
							ok


	a		/en/2026/08/14/twif.html			1	ok
							ok


	a		/en/about/			1	ok
							ok


	a		/en/contribute/			1	ok
							ok


	a		/en/docs/			1	ok
							ok


	a		/en/donate			1	ok
							ok


	a		/en/issues/			1	ok
							ok


	a		/en/news/			1	ok
							ok


	a		/en/packages/			1	ok
							ok


	a		docs/Verifying_Downloaded_APK			1	ok
							ok


	a		https://f-droid.org/en/about/			1	ok
							ok


	a		https://f-droid.org/F-Droid.apk			1	ok
							ok


	a		https://floss.social/@fdroidorg			1	ok
							ok


	a		https://gitlab.com/fdroid/fdroid-website/edit/master/			1	ok
							ok


	a		https://keepandroidopen.org/			1	ok
							ok


	a		https://liberapay.com/F-Droid-Data/donate			1	ok
							ok


	a		https://opencollective.com/f-droid/donate			1	ok
							ok


	form	get	/		200	1	ok
				text/html X-Content-Type-Options nosniff found			ok
				4207 Bytes
	ETag: "3351-65a35624749ed;812-65a357d117fee

	form	get	https://search.f-droid.org/		200	1	ok
				text/html; charset=utf-8 missing X-Content-Type-Options nosniff			ok
				629 Bytes
	Server-Header Access-Control-Allow-Origin: not found			Cross-Origin Resource Sharing (CORS) not supported

	img	src	/assets/download-fdroid-qr_rt62kUMmGMIMhgDgUUWjYefCQjazGqLRlAZ7WOgSSlg=.png		200	1	ok
	no alt-Attribute			image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 437 Bytes
	ETag: "1b5-6487ca0d93d00"

	img	src	/assets/fdroid-logo-text_S0MUfk_FsnAYL7n2MQye-34IoSNm6QM6xYjDnMqkufo=.svg		200	1	ok
	alt: F-Droid			image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Compression (gzip): 14744/174227 Bytes
	ETag: "2a893-6487ca0d93d00-gzip"

	img	src	/assets/liberapay_donate_button_GHdOOfmFJNeSXjfjnA-98XtIuEfvE6cNJjHgHOhjdv0=.svg		200	1	ok
	alt: Donate via Liberapay			image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			Compression (gzip): 842/1457 Bytes
	ETag: "5b1-6487ca0d93d00-gzip"

	img	src	/assets/mastodon_-c62Zo613I00cO-RavNTybrSJhBC3vZToN5u4zSoMdM=.svg		200	1	ok
	alt: mastodon			image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Compression (gzip): 889/2011 Bytes
	ETag: "7db-6487ca0d93d00-gzip"

	img	src	/assets/opencollective_button_iIGF0Hixdj0EaYR3Sd7FRigTVcl7QPGu6kaoBmXHjZI=.png		200	1	ok
	alt: Donate to our Collective			image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			No Compression - 11943 Bytes
	ETag: "2ea7-6487ca0d93d00"

	img	src	/assets/phone-frame_kEDoOnDDPLnsqH4lVaEun9wfQgM9ivrhk5OiUWWdKHc=.png		200	1	ok
	alt: F-Droid Android app screenshot			image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 14577 Bytes
	ETag: "38f1-6487ca0d93d00"

	link	alternate	/feed.xml			1	ok
							ok


	link	alternate	https://f-droid.org/			1	ok
							ok


	link	alternate	https://f-droid.org/ar/			1	ok
							ok


	link	alternate	https://f-droid.org/bo/			1	ok
							ok


	link	alternate	https://f-droid.org/ca/			1	ok
							ok


	link	alternate	https://f-droid.org/cs/			1	ok
							ok


	link	alternate	https://f-droid.org/de/			1	ok
							ok


	link	alternate	https://f-droid.org/en/			1	ok
							ok


	link	alternate	https://f-droid.org/es/			1	ok
							ok


	link	alternate	https://f-droid.org/eu/			1	ok
							ok


	link	alternate	https://f-droid.org/fa/			1	ok
							ok


	link	alternate	https://f-droid.org/fr/			1	ok
							ok


	link	alternate	https://f-droid.org/he/			1	ok
							ok


	link	alternate	https://f-droid.org/hr/			1	ok
							ok


	link	alternate	https://f-droid.org/hu/			1	ok
							ok


	link	alternate	https://f-droid.org/id/			1	ok
							ok


	link	alternate	https://f-droid.org/is/			1	ok
							ok


	link	alternate	https://f-droid.org/it/			1	ok
							ok


	link	alternate	https://f-droid.org/ja/			1	ok
							ok


	link	alternate	https://f-droid.org/ko/			1	ok
							ok


	link	alternate	https://f-droid.org/pl/			1	ok
							ok


	link	alternate	https://f-droid.org/pt/			1	ok
							ok


	link	alternate	https://f-droid.org/pt_BR/			1	ok
							ok


	link	alternate	https://f-droid.org/ro/			1	ok
							ok


	link	alternate	https://f-droid.org/ru/			1	ok
							ok


	link	alternate	https://f-droid.org/sq/			1	ok
							ok


	link	alternate	https://f-droid.org/tr/			1	ok
							ok


	link	alternate	https://f-droid.org/uk/			1	ok
							ok


	link	alternate	https://f-droid.org/zh_Hans/			1	ok
							ok


	link	alternate	https://f-droid.org/zh_Hant/			1	ok
							ok


	link	apple-touch-icon	/assets/apple-touch-icon_ypJwtCrcixeH_qV6LdcMYk1anFIR9o-_ufR__1wNdJY=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 9788 Bytes
	ETag: "263c-6487ca0d93d00"

	link	canonical	https://f-droid.org/			1	ok
							ok


	link	dns-prefetch	https://search.f-droid.org			1	ok
							ok


	link	icon	/assets/favicon_AfYQ36xPEzFjJiCTyBFVmfWkajkehilUd2geASywhxM=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 2134 Bytes
	ETag: "856-6487ca0d93d00"

	link	icon	/assets/favicon-16x16_7yyppfDSTAVyGb3ycHY84PYjHUwP96NKICAibLRpnXw=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			No Compression - 874 Bytes
	ETag: "36a-6487ca0d93d00"

	link	icon	/assets/favicon-32x32_Dk3aeG3k_A20gYe5zAlPSBx_CEcpJaCI89K2X2z6CFY=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			No Compression - 1594 Bytes
	ETag: "63a-6487ca0d93d00"

	link	manifest	/assets/site_J9OLInBmO2hLlutzRFC4mdstNJjL44B6NzBbT0ecmA0=.webmanifest			1	ok
							ok


	link	mask-icon	/assets/safari-pinned-tab_jVj0QIYK2TEAcXlrhjrienjgRnccBVzvX22tYumPb9Q=.svg		200	1	ok
				image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Compression (gzip): 1036/1911 Bytes
	ETag: "777-6487ca0d93d00-gzip"

	link	preload	/assets/roboto_ln5c7Pv79kCZw8EjInNILddDbwVxQmaVPE0sjunCivU=.ttf		200	1	ok
				font/ttf missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Missing Compression: 32652/32652 Bytes, font not compressed
	ETag: "7f8c-6487ca0d93d00"

	link	preload	/css/main.css		200	1	ok
				text/css X-Content-Type-Options nosniff found			ok
				Compression (gzip): 6262/27150 Bytes
	ETag: "6a0e-65a3561a48214-gzip"

	link	search	/en/osd.xml			1	ok
							ok


	link	shortcut icon	/assets/favicon_yJPr4UNteJc-cseeq16P0Hvl1kDbJjTVYcj-KA6-_Fs=.ico		200	1	ok
				image/vnd.microsoft.icon missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			Compression (gzip): 4276/15086 Bytes
	ETag: "3aee-6487ca0d93d00-gzip"

	link	stylesheet	/css/main.css		200	1	ok
				text/css X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			Compression (gzip): 6262/27150 Bytes
	ETag: "6a0e-65a3561a48214-gzip"
	local SRI possible, possible hash-values: sha256-4Dj9kZCItqHBfx3qQZEf5gIxxvptHDc1grd86bN1UTo= sha384-KhGgOE0O2PjEme6pg2TVHHSG5byM3rmIednA086RDUf/qsOqs/3eud79lUwN8DJP sha512-qQwYEXWLIwoyyT5/ArlZ8IbW9wlljZO70yqXhdVdhRU2RiphPVo8p5IT8BxTd8VQk2zrL05gHvg9lod+di6vTA== <link rel="stylesheet" href="/css/main.css" crossorigin="anonymous" integrity="sha256-4Dj9kZCItqHBfx3qQZEf5gIxxvptHDc1grd86bN1UTo=" />

	meta	charset	utf-8			1	ok
							ok


	meta	og:description	F-Droid is the app distribution ecosystem for Android where your user freedom comes first. Discover our app store, explore the world of free and open source (FOSS) apps and [learn](https://f-droid.org/about/) about our app distribution tools.			1	ok
							ok


	meta	og:image	https://f-droid.org/assets/fdroid-logo_bfHl7nsLHOUQxzdU8-rGIhn4bAgl6z7k2mA3fWoCyT4=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 49803 Bytes
	ETag: "c28b-6487ca0d93d00"

	meta	og:title	F-Droid - Free and Open Source Android App Repository			1	ok
							ok


	meta	og:url	https://f-droid.org/		200	1	ok
				text/html X-Content-Type-Options nosniff found			ok
				4207 Bytes
	ETag: "3351-65a35624749ed;812-65a357d117fee

	meta	X-UA-Compatible	IE=edge			1	ok
							ok


	meta	description	F-Droid is the app distribution ecosystem for Android where your user freedom comes first. Discover our app store, explore the world of free and open source (FOSS) apps and [learn](https://f-droid.org/about/) about our app distribution tools.			1	ok
							ok


	meta	msapplication-config	/assets/browserconfig_sI0d7L-NQ2rondQpLn2DRSqXxvj7iPI0-WPzXn-uLZA=.xml		200	1	ok
				application/xml missing X-Content-Type-Options nosniff			ok
				184 Bytes
	ETag: "10a-6487ca0d93d00-gzip"

	meta	msapplication-TileColor	#ffffff			1	ok
							ok


	meta	robots	DisallowAITraining			1	ok
							ok


	meta	theme-color	#ffffff			1	ok
							ok


	meta	viewport	width=device-width, initial-scale=1			1	ok
							ok


	script	src	/assets/banner_YoMGgpdLnM6lO1-eNiEaJsDGclXrmjSlTM-8RGlLcho=.js		200	1	ok
	Missing defer / async attribute.			text/javascript X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 - with long duration found.			Compression required: 1267 Bytes
	ETag: "4f3-64b069205bb00"
	local SRI possible, possible hash-values: sha256-YoMGgpdLnM6lO1+eNiEaJsDGclXrmjSlTM+8RGlLcho= sha384-0k5EG6VxoafoXBAjE0GhCy5dlxnL5MFQHUA7FD9cJ4ynz/2eADT8O2sPiCEwVvX5 sha512-gIExbjD8fxqWeMJkL0ePsfUg9NNj1H8t2Ymq2VY8Fret2AJOk/fMGycT+HQxKnLuhj7h4TONltDcWgbqiqtOww== <script src="/assets/banner_YoMGgpdLnM6lO1-eNiEaJsDGclXrmjSlTM-8RGlLcho=.js" crossorigin="anonymous" integrity="sha256-YoMGgpdLnM6lO1+eNiEaJsDGclXrmjSlTM+8RGlLcho=" />

	script	src	/assets/donate_JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH-Gw=.js		200	1	ok
	defer attribute found			text/javascript X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 - with long duration found.			357 Bytes
	ETag: "165-6487ca0d93d00"
	local SRI possible, possible hash-values: sha256-JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH+Gw= sha384-PAl307b7gOoVlctfisIwJbMLTbrw6lis1TswLjjgO6JxStjVK42OFpvsp5m3BYDq sha512-FH+UESTqbVldCYoisWwq7z5MPwSwYFzj/s465acDSatJ/cGRm+nS+SE+em5llwaO+bKZYTyrQtpferrEuB9w5g== <script src="/assets/donate_JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH-Gw=.js" crossorigin="anonymous" integrity="sha256-JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH+Gw=" />

	script	src	/assets/sidebar-lang_j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ_lRfuoUmiaqc=.js		200	1	ok
	Missing defer / async attribute.			text/javascript X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 - with long duration found.			Compression required: 1259 Bytes
	ETag: "4eb-6487ca0d93d00"
	local SRI possible, possible hash-values: sha256-j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ/lRfuoUmiaqc= sha384-UcIkUDNwx94N8ZhYlsbeJH70WQJyutowYWrrYJWWxZSvfhpkItLWbXt1ejIrCqbn sha512-oIysJYxLL/x9oSUhpMvVw9xh/d7WkdVGUhiich24sM9/pgkAJw3dO6r7L004c83o2w4ZcJSRUvCYpmN34zq24w== <script src="/assets/sidebar-lang_j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ_lRfuoUmiaqc=.js" crossorigin="anonymous" integrity="sha256-j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ/lRfuoUmiaqc=" />

65.21.79.229	a		/en/			1	ok
							ok


	a		/en/2026/07/16/twif.html			1	ok
							ok


	a		/en/2026/07/24/twif.html			1	ok
							ok


	a		/en/2026/07/31/twif.html			1	ok
							ok


	a		/en/2026/08/07/twif.html			1	ok
							ok


	a		/en/2026/08/14/twif.html			1	ok
							ok


	a		/en/about/			1	ok
							ok


	a		/en/contribute/			1	ok
							ok


	a		/en/docs/			1	ok
							ok


	a		/en/donate			1	ok
							ok


	a		/en/issues/			1	ok
							ok


	a		/en/news/			1	ok
							ok


	a		/en/packages/			1	ok
							ok


	a		docs/Verifying_Downloaded_APK			1	ok
							ok


	a		https://f-droid.org/en/about/			1	ok
							ok


	a		https://f-droid.org/F-Droid.apk			1	ok
							ok


	a		https://floss.social/@fdroidorg			1	ok
							ok


	a		https://gitlab.com/fdroid/fdroid-website/edit/master/			1	ok
							ok


	a		https://keepandroidopen.org/			1	ok
							ok


	a		https://liberapay.com/F-Droid-Data/donate			1	ok
							ok


	a		https://opencollective.com/f-droid/donate			1	ok
							ok


	form	get	/		200	1	ok
				text/html X-Content-Type-Options nosniff found			ok
				4207 Bytes
	ETag: "3351-65a35624749ed;812-65a357d117fee

	form	get	https://search.f-droid.org/		200	1	ok
				text/html; charset=utf-8 missing X-Content-Type-Options nosniff			ok
				629 Bytes
	Server-Header Access-Control-Allow-Origin: not found			Cross-Origin Resource Sharing (CORS) not supported

	img	src	/assets/download-fdroid-qr_rt62kUMmGMIMhgDgUUWjYefCQjazGqLRlAZ7WOgSSlg=.png		200	1	ok
	no alt-Attribute			image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 437 Bytes
	ETag: "1b5-6487ca0d93d00"

	img	src	/assets/fdroid-logo-text_S0MUfk_FsnAYL7n2MQye-34IoSNm6QM6xYjDnMqkufo=.svg		200	1	ok
	alt: F-Droid			image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Compression (gzip): 14744/174227 Bytes
	ETag: "2a893-6487ca0d93d00-gzip"

	img	src	/assets/liberapay_donate_button_GHdOOfmFJNeSXjfjnA-98XtIuEfvE6cNJjHgHOhjdv0=.svg		200	1	ok
	alt: Donate via Liberapay			image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			Compression (gzip): 842/1457 Bytes
	ETag: "5b1-6487ca0d93d00-gzip"

	img	src	/assets/mastodon_-c62Zo613I00cO-RavNTybrSJhBC3vZToN5u4zSoMdM=.svg		200	1	ok
	alt: mastodon			image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Compression (gzip): 889/2011 Bytes
	ETag: "7db-6487ca0d93d00-gzip"

	img	src	/assets/opencollective_button_iIGF0Hixdj0EaYR3Sd7FRigTVcl7QPGu6kaoBmXHjZI=.png		200	1	ok
	alt: Donate to our Collective			image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			No Compression - 11943 Bytes
	ETag: "2ea7-6487ca0d93d00"

	img	src	/assets/phone-frame_kEDoOnDDPLnsqH4lVaEun9wfQgM9ivrhk5OiUWWdKHc=.png		200	1	ok
	alt: F-Droid Android app screenshot			image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 14577 Bytes
	ETag: "38f1-6487ca0d93d00"

	link	alternate	/feed.xml			1	ok
							ok


	link	alternate	https://f-droid.org/			1	ok
							ok


	link	alternate	https://f-droid.org/ar/			1	ok
							ok


	link	alternate	https://f-droid.org/bo/			1	ok
							ok


	link	alternate	https://f-droid.org/ca/			1	ok
							ok


	link	alternate	https://f-droid.org/cs/			1	ok
							ok


	link	alternate	https://f-droid.org/de/			1	ok
							ok


	link	alternate	https://f-droid.org/en/			1	ok
							ok


	link	alternate	https://f-droid.org/es/			1	ok
							ok


	link	alternate	https://f-droid.org/eu/			1	ok
							ok


	link	alternate	https://f-droid.org/fa/			1	ok
							ok


	link	alternate	https://f-droid.org/fr/			1	ok
							ok


	link	alternate	https://f-droid.org/he/			1	ok
							ok


	link	alternate	https://f-droid.org/hr/			1	ok
							ok


	link	alternate	https://f-droid.org/hu/			1	ok
							ok


	link	alternate	https://f-droid.org/id/			1	ok
							ok


	link	alternate	https://f-droid.org/is/			1	ok
							ok


	link	alternate	https://f-droid.org/it/			1	ok
							ok


	link	alternate	https://f-droid.org/ja/			1	ok
							ok


	link	alternate	https://f-droid.org/ko/			1	ok
							ok


	link	alternate	https://f-droid.org/pl/			1	ok
							ok


	link	alternate	https://f-droid.org/pt/			1	ok
							ok


	link	alternate	https://f-droid.org/pt_BR/			1	ok
							ok


	link	alternate	https://f-droid.org/ro/			1	ok
							ok


	link	alternate	https://f-droid.org/ru/			1	ok
							ok


	link	alternate	https://f-droid.org/sq/			1	ok
							ok


	link	alternate	https://f-droid.org/tr/			1	ok
							ok


	link	alternate	https://f-droid.org/uk/			1	ok
							ok


	link	alternate	https://f-droid.org/zh_Hans/			1	ok
							ok


	link	alternate	https://f-droid.org/zh_Hant/			1	ok
							ok


	link	apple-touch-icon	/assets/apple-touch-icon_ypJwtCrcixeH_qV6LdcMYk1anFIR9o-_ufR__1wNdJY=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 9788 Bytes
	ETag: "263c-6487ca0d93d00"

	link	canonical	https://f-droid.org/			1	ok
							ok


	link	dns-prefetch	https://search.f-droid.org			1	ok
							ok


	link	icon	/assets/favicon_AfYQ36xPEzFjJiCTyBFVmfWkajkehilUd2geASywhxM=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 2134 Bytes
	ETag: "856-6487ca0d93d00"

	link	icon	/assets/favicon-16x16_7yyppfDSTAVyGb3ycHY84PYjHUwP96NKICAibLRpnXw=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			No Compression - 874 Bytes
	ETag: "36a-6487ca0d93d00"

	link	icon	/assets/favicon-32x32_Dk3aeG3k_A20gYe5zAlPSBx_CEcpJaCI89K2X2z6CFY=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			No Compression - 1594 Bytes
	ETag: "63a-6487ca0d93d00"

	link	manifest	/assets/site_J9OLInBmO2hLlutzRFC4mdstNJjL44B6NzBbT0ecmA0=.webmanifest			1	ok
							ok


	link	mask-icon	/assets/safari-pinned-tab_jVj0QIYK2TEAcXlrhjrienjgRnccBVzvX22tYumPb9Q=.svg		200	1	ok
				image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Compression (gzip): 1036/1911 Bytes
	ETag: "777-6487ca0d93d00-gzip"

	link	preload	/assets/roboto_ln5c7Pv79kCZw8EjInNILddDbwVxQmaVPE0sjunCivU=.ttf		200	1	ok
				font/ttf missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Missing Compression: 32652/32652 Bytes, font not compressed
	ETag: "7f8c-6487ca0d93d00"

	link	preload	/css/main.css		200	1	ok
				text/css X-Content-Type-Options nosniff found			ok
				Compression (gzip): 6262/27150 Bytes
	ETag: "6a0e-65a3561a48214-gzip"

	link	search	/en/osd.xml			1	ok
							ok


	link	shortcut icon	/assets/favicon_yJPr4UNteJc-cseeq16P0Hvl1kDbJjTVYcj-KA6-_Fs=.ico		200	1	ok
				image/vnd.microsoft.icon missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			Compression (gzip): 4276/15086 Bytes
	ETag: "3aee-6487ca0d93d00-gzip"

	link	stylesheet	/css/main.css		200	1	ok
				text/css X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			Compression (gzip): 6262/27150 Bytes
	ETag: "6a0e-65a3561a48214-gzip"
	local SRI possible, possible hash-values: sha256-4Dj9kZCItqHBfx3qQZEf5gIxxvptHDc1grd86bN1UTo= sha384-KhGgOE0O2PjEme6pg2TVHHSG5byM3rmIednA086RDUf/qsOqs/3eud79lUwN8DJP sha512-qQwYEXWLIwoyyT5/ArlZ8IbW9wlljZO70yqXhdVdhRU2RiphPVo8p5IT8BxTd8VQk2zrL05gHvg9lod+di6vTA== <link rel="stylesheet" href="/css/main.css" crossorigin="anonymous" integrity="sha256-4Dj9kZCItqHBfx3qQZEf5gIxxvptHDc1grd86bN1UTo=" />

	meta	charset	utf-8			1	ok
							ok


	meta	og:description	F-Droid is the app distribution ecosystem for Android where your user freedom comes first. Discover our app store, explore the world of free and open source (FOSS) apps and [learn](https://f-droid.org/about/) about our app distribution tools.			1	ok
							ok


	meta	og:image	https://f-droid.org/assets/fdroid-logo_bfHl7nsLHOUQxzdU8-rGIhn4bAgl6z7k2mA3fWoCyT4=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 49803 Bytes
	ETag: "c28b-6487ca0d93d00"

	meta	og:title	F-Droid - Free and Open Source Android App Repository			1	ok
							ok


	meta	og:url	https://f-droid.org/		200	1	ok
				text/html X-Content-Type-Options nosniff found			ok
				4207 Bytes
	ETag: "3351-65a35624749ed;812-65a357d117fee

	meta	X-UA-Compatible	IE=edge			1	ok
							ok


	meta	description	F-Droid is the app distribution ecosystem for Android where your user freedom comes first. Discover our app store, explore the world of free and open source (FOSS) apps and [learn](https://f-droid.org/about/) about our app distribution tools.			1	ok
							ok


	meta	msapplication-config	/assets/browserconfig_sI0d7L-NQ2rondQpLn2DRSqXxvj7iPI0-WPzXn-uLZA=.xml		200	1	ok
				application/xml missing X-Content-Type-Options nosniff			ok
				184 Bytes
	ETag: "10a-6487ca0d93d00-gzip"

	meta	msapplication-TileColor	#ffffff			1	ok
							ok


	meta	robots	DisallowAITraining			1	ok
							ok


	meta	theme-color	#ffffff			1	ok
							ok


	meta	viewport	width=device-width, initial-scale=1			1	ok
							ok


	script	src	/assets/banner_YoMGgpdLnM6lO1-eNiEaJsDGclXrmjSlTM-8RGlLcho=.js		200	1	ok
	Missing defer / async attribute.			text/javascript X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 - with long duration found.			Compression required: 1267 Bytes
	ETag: "4f3-64b069205bb00"
	local SRI possible, possible hash-values: sha256-YoMGgpdLnM6lO1+eNiEaJsDGclXrmjSlTM+8RGlLcho= sha384-0k5EG6VxoafoXBAjE0GhCy5dlxnL5MFQHUA7FD9cJ4ynz/2eADT8O2sPiCEwVvX5 sha512-gIExbjD8fxqWeMJkL0ePsfUg9NNj1H8t2Ymq2VY8Fret2AJOk/fMGycT+HQxKnLuhj7h4TONltDcWgbqiqtOww== <script src="/assets/banner_YoMGgpdLnM6lO1-eNiEaJsDGclXrmjSlTM-8RGlLcho=.js" crossorigin="anonymous" integrity="sha256-YoMGgpdLnM6lO1+eNiEaJsDGclXrmjSlTM+8RGlLcho=" />

	script	src	/assets/donate_JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH-Gw=.js		200	1	ok
	defer attribute found			text/javascript X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 - with long duration found.			357 Bytes
	ETag: "165-6487ca0d93d00"
	local SRI possible, possible hash-values: sha256-JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH+Gw= sha384-PAl307b7gOoVlctfisIwJbMLTbrw6lis1TswLjjgO6JxStjVK42OFpvsp5m3BYDq sha512-FH+UESTqbVldCYoisWwq7z5MPwSwYFzj/s465acDSatJ/cGRm+nS+SE+em5llwaO+bKZYTyrQtpferrEuB9w5g== <script src="/assets/donate_JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH-Gw=.js" crossorigin="anonymous" integrity="sha256-JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH+Gw=" />

	script	src	/assets/sidebar-lang_j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ_lRfuoUmiaqc=.js		200	1	ok
	Missing defer / async attribute.			text/javascript X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 - with long duration found.			Compression required: 1259 Bytes
	ETag: "4eb-6487ca0d93d00"
	local SRI possible, possible hash-values: sha256-j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ/lRfuoUmiaqc= sha384-UcIkUDNwx94N8ZhYlsbeJH70WQJyutowYWrrYJWWxZSvfhpkItLWbXt1ejIrCqbn sha512-oIysJYxLL/x9oSUhpMvVw9xh/d7WkdVGUhiich24sM9/pgkAJw3dO6r7L004c83o2w4ZcJSRUvCYpmN34zq24w== <script src="/assets/sidebar-lang_j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ_lRfuoUmiaqc=.js" crossorigin="anonymous" integrity="sha256-j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ/lRfuoUmiaqc=" />

2a00:c6c0:0:153:3::1	a		/en/			1	ok
							ok


	a		/en/2026/07/16/twif.html			1	ok
							ok


	a		/en/2026/07/24/twif.html			1	ok
							ok


	a		/en/2026/07/31/twif.html			1	ok
							ok


	a		/en/2026/08/07/twif.html			1	ok
							ok


	a		/en/2026/08/14/twif.html			1	ok
							ok


	a		/en/about/			1	ok
							ok


	a		/en/contribute/			1	ok
							ok


	a		/en/docs/			1	ok
							ok


	a		/en/donate			1	ok
							ok


	a		/en/issues/			1	ok
							ok


	a		/en/news/			1	ok
							ok


	a		/en/packages/			1	ok
							ok


	a		docs/Verifying_Downloaded_APK			1	ok
							ok


	a		https://f-droid.org/en/about/			1	ok
							ok


	a		https://f-droid.org/F-Droid.apk			1	ok
							ok


	a		https://floss.social/@fdroidorg			1	ok
							ok


	a		https://gitlab.com/fdroid/fdroid-website/edit/master/			1	ok
							ok


	a		https://keepandroidopen.org/			1	ok
							ok


	a		https://liberapay.com/F-Droid-Data/donate			1	ok
							ok


	a		https://opencollective.com/f-droid/donate			1	ok
							ok


	form	get	/		200	1	ok
				text/html X-Content-Type-Options nosniff found			ok
				4207 Bytes
	ETag: "3351-65a35624749ed;812-65a357d117fee

	form	get	https://search.f-droid.org/		200	1	ok
				text/html; charset=utf-8 missing X-Content-Type-Options nosniff			ok
				629 Bytes
	Server-Header Access-Control-Allow-Origin: not found			Cross-Origin Resource Sharing (CORS) not supported

	img	src	/assets/download-fdroid-qr_rt62kUMmGMIMhgDgUUWjYefCQjazGqLRlAZ7WOgSSlg=.png		200	1	ok
	no alt-Attribute			image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 437 Bytes
	ETag: "1b5-6487ca0d93d00"

	img	src	/assets/fdroid-logo-text_S0MUfk_FsnAYL7n2MQye-34IoSNm6QM6xYjDnMqkufo=.svg		200	1	ok
	alt: F-Droid			image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Compression (gzip): 14744/174227 Bytes
	ETag: "2a893-6487ca0d93d00-gzip"

	img	src	/assets/liberapay_donate_button_GHdOOfmFJNeSXjfjnA-98XtIuEfvE6cNJjHgHOhjdv0=.svg		200	1	ok
	alt: Donate via Liberapay			image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			Compression (gzip): 842/1457 Bytes
	ETag: "5b1-6487ca0d93d00-gzip"

	img	src	/assets/mastodon_-c62Zo613I00cO-RavNTybrSJhBC3vZToN5u4zSoMdM=.svg		200	1	ok
	alt: mastodon			image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Compression (gzip): 889/2011 Bytes
	ETag: "7db-6487ca0d93d00-gzip"

	img	src	/assets/opencollective_button_iIGF0Hixdj0EaYR3Sd7FRigTVcl7QPGu6kaoBmXHjZI=.png		200	1	ok
	alt: Donate to our Collective			image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			No Compression - 11943 Bytes
	ETag: "2ea7-6487ca0d93d00"

	img	src	/assets/phone-frame_kEDoOnDDPLnsqH4lVaEun9wfQgM9ivrhk5OiUWWdKHc=.png		200	1	ok
	alt: F-Droid Android app screenshot			image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 14577 Bytes
	ETag: "38f1-6487ca0d93d00"

	link	alternate	/feed.xml			1	ok
							ok


	link	alternate	https://f-droid.org/			1	ok
							ok


	link	alternate	https://f-droid.org/ar/			1	ok
							ok


	link	alternate	https://f-droid.org/bo/			1	ok
							ok


	link	alternate	https://f-droid.org/ca/			1	ok
							ok


	link	alternate	https://f-droid.org/cs/			1	ok
							ok


	link	alternate	https://f-droid.org/de/			1	ok
							ok


	link	alternate	https://f-droid.org/en/			1	ok
							ok


	link	alternate	https://f-droid.org/es/			1	ok
							ok


	link	alternate	https://f-droid.org/eu/			1	ok
							ok


	link	alternate	https://f-droid.org/fa/			1	ok
							ok


	link	alternate	https://f-droid.org/fr/			1	ok
							ok


	link	alternate	https://f-droid.org/he/			1	ok
							ok


	link	alternate	https://f-droid.org/hr/			1	ok
							ok


	link	alternate	https://f-droid.org/hu/			1	ok
							ok


	link	alternate	https://f-droid.org/id/			1	ok
							ok


	link	alternate	https://f-droid.org/is/			1	ok
							ok


	link	alternate	https://f-droid.org/it/			1	ok
							ok


	link	alternate	https://f-droid.org/ja/			1	ok
							ok


	link	alternate	https://f-droid.org/ko/			1	ok
							ok


	link	alternate	https://f-droid.org/pl/			1	ok
							ok


	link	alternate	https://f-droid.org/pt/			1	ok
							ok


	link	alternate	https://f-droid.org/pt_BR/			1	ok
							ok


	link	alternate	https://f-droid.org/ro/			1	ok
							ok


	link	alternate	https://f-droid.org/ru/			1	ok
							ok


	link	alternate	https://f-droid.org/sq/			1	ok
							ok


	link	alternate	https://f-droid.org/tr/			1	ok
							ok


	link	alternate	https://f-droid.org/uk/			1	ok
							ok


	link	alternate	https://f-droid.org/zh_Hans/			1	ok
							ok


	link	alternate	https://f-droid.org/zh_Hant/			1	ok
							ok


	link	apple-touch-icon	/assets/apple-touch-icon_ypJwtCrcixeH_qV6LdcMYk1anFIR9o-_ufR__1wNdJY=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 9788 Bytes
	ETag: "263c-6487ca0d93d00"

	link	canonical	https://f-droid.org/			1	ok
							ok


	link	dns-prefetch	https://search.f-droid.org			1	ok
							ok


	link	icon	/assets/favicon_AfYQ36xPEzFjJiCTyBFVmfWkajkehilUd2geASywhxM=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 2134 Bytes
	ETag: "856-6487ca0d93d00"

	link	icon	/assets/favicon-16x16_7yyppfDSTAVyGb3ycHY84PYjHUwP96NKICAibLRpnXw=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			No Compression - 874 Bytes
	ETag: "36a-6487ca0d93d00"

	link	icon	/assets/favicon-32x32_Dk3aeG3k_A20gYe5zAlPSBx_CEcpJaCI89K2X2z6CFY=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			No Compression - 1594 Bytes
	ETag: "63a-6487ca0d93d00"

	link	manifest	/assets/site_J9OLInBmO2hLlutzRFC4mdstNJjL44B6NzBbT0ecmA0=.webmanifest			1	ok
							ok


	link	mask-icon	/assets/safari-pinned-tab_jVj0QIYK2TEAcXlrhjrienjgRnccBVzvX22tYumPb9Q=.svg		200	1	ok
				image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Compression (gzip): 1036/1911 Bytes
	ETag: "777-6487ca0d93d00-gzip"

	link	preload	/assets/roboto_ln5c7Pv79kCZw8EjInNILddDbwVxQmaVPE0sjunCivU=.ttf		200	1	ok
				font/ttf missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Missing Compression: 32652/32652 Bytes, font not compressed
	ETag: "7f8c-6487ca0d93d00"

	link	preload	/css/main.css		200	1	ok
				text/css X-Content-Type-Options nosniff found			ok
				Compression (gzip): 6262/27150 Bytes
	ETag: "6a0e-65a3561a48214-gzip"

	link	search	/en/osd.xml			1	ok
							ok


	link	shortcut icon	/assets/favicon_yJPr4UNteJc-cseeq16P0Hvl1kDbJjTVYcj-KA6-_Fs=.ico		200	1	ok
				image/vnd.microsoft.icon missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			Compression (gzip): 4276/15086 Bytes
	ETag: "3aee-6487ca0d93d00-gzip"

	link	stylesheet	/css/main.css		200	1	ok
				text/css X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			Compression (gzip): 6262/27150 Bytes
	ETag: "6a0e-65a3561a48214-gzip"
	local SRI possible, possible hash-values: sha256-4Dj9kZCItqHBfx3qQZEf5gIxxvptHDc1grd86bN1UTo= sha384-KhGgOE0O2PjEme6pg2TVHHSG5byM3rmIednA086RDUf/qsOqs/3eud79lUwN8DJP sha512-qQwYEXWLIwoyyT5/ArlZ8IbW9wlljZO70yqXhdVdhRU2RiphPVo8p5IT8BxTd8VQk2zrL05gHvg9lod+di6vTA== <link rel="stylesheet" href="/css/main.css" crossorigin="anonymous" integrity="sha256-4Dj9kZCItqHBfx3qQZEf5gIxxvptHDc1grd86bN1UTo=" />

	meta	charset	utf-8			1	ok
							ok


	meta	og:description	F-Droid is the app distribution ecosystem for Android where your user freedom comes first. Discover our app store, explore the world of free and open source (FOSS) apps and [learn](https://f-droid.org/about/) about our app distribution tools.			1	ok
							ok


	meta	og:image	https://f-droid.org/assets/fdroid-logo_bfHl7nsLHOUQxzdU8-rGIhn4bAgl6z7k2mA3fWoCyT4=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 49803 Bytes
	ETag: "c28b-6487ca0d93d00"

	meta	og:title	F-Droid - Free and Open Source Android App Repository			1	ok
							ok


	meta	og:url	https://f-droid.org/		200	1	ok
				text/html X-Content-Type-Options nosniff found			ok
				4207 Bytes
	ETag: "3351-65a35624749ed;812-65a357d117fee

	meta	X-UA-Compatible	IE=edge			1	ok
							ok


	meta	description	F-Droid is the app distribution ecosystem for Android where your user freedom comes first. Discover our app store, explore the world of free and open source (FOSS) apps and [learn](https://f-droid.org/about/) about our app distribution tools.			1	ok
							ok


	meta	msapplication-config	/assets/browserconfig_sI0d7L-NQ2rondQpLn2DRSqXxvj7iPI0-WPzXn-uLZA=.xml		200	1	ok
				application/xml missing X-Content-Type-Options nosniff			ok
				184 Bytes
	ETag: "10a-6487ca0d93d00-gzip"

	meta	msapplication-TileColor	#ffffff			1	ok
							ok


	meta	robots	DisallowAITraining			1	ok
							ok


	meta	theme-color	#ffffff			1	ok
							ok


	meta	viewport	width=device-width, initial-scale=1			1	ok
							ok


	script	src	/assets/banner_YoMGgpdLnM6lO1-eNiEaJsDGclXrmjSlTM-8RGlLcho=.js		200	1	ok
	Missing defer / async attribute.			text/javascript X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 - with long duration found.			Compression required: 1267 Bytes
	ETag: "4f3-64b069205bb00"
	local SRI possible, possible hash-values: sha256-YoMGgpdLnM6lO1+eNiEaJsDGclXrmjSlTM+8RGlLcho= sha384-0k5EG6VxoafoXBAjE0GhCy5dlxnL5MFQHUA7FD9cJ4ynz/2eADT8O2sPiCEwVvX5 sha512-gIExbjD8fxqWeMJkL0ePsfUg9NNj1H8t2Ymq2VY8Fret2AJOk/fMGycT+HQxKnLuhj7h4TONltDcWgbqiqtOww== <script src="/assets/banner_YoMGgpdLnM6lO1-eNiEaJsDGclXrmjSlTM-8RGlLcho=.js" crossorigin="anonymous" integrity="sha256-YoMGgpdLnM6lO1+eNiEaJsDGclXrmjSlTM+8RGlLcho=" />

	script	src	/assets/donate_JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH-Gw=.js		200	1	ok
	defer attribute found			text/javascript X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 - with long duration found.			357 Bytes
	ETag: "165-6487ca0d93d00"
	local SRI possible, possible hash-values: sha256-JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH+Gw= sha384-PAl307b7gOoVlctfisIwJbMLTbrw6lis1TswLjjgO6JxStjVK42OFpvsp5m3BYDq sha512-FH+UESTqbVldCYoisWwq7z5MPwSwYFzj/s465acDSatJ/cGRm+nS+SE+em5llwaO+bKZYTyrQtpferrEuB9w5g== <script src="/assets/donate_JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH-Gw=.js" crossorigin="anonymous" integrity="sha256-JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH+Gw=" />

	script	src	/assets/sidebar-lang_j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ_lRfuoUmiaqc=.js		200	1	ok
	Missing defer / async attribute.			text/javascript X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 - with long duration found.			Compression required: 1259 Bytes
	ETag: "4eb-6487ca0d93d00"
	local SRI possible, possible hash-values: sha256-j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ/lRfuoUmiaqc= sha384-UcIkUDNwx94N8ZhYlsbeJH70WQJyutowYWrrYJWWxZSvfhpkItLWbXt1ejIrCqbn sha512-oIysJYxLL/x9oSUhpMvVw9xh/d7WkdVGUhiich24sM9/pgkAJw3dO6r7L004c83o2w4ZcJSRUvCYpmN34zq24w== <script src="/assets/sidebar-lang_j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ_lRfuoUmiaqc=.js" crossorigin="anonymous" integrity="sha256-j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ/lRfuoUmiaqc=" />

2a00:c6c0:0:155:1::1	a		/en/			1	ok
							ok


	a		/en/2026/07/16/twif.html			1	ok
							ok


	a		/en/2026/07/24/twif.html			1	ok
							ok


	a		/en/2026/07/31/twif.html			1	ok
							ok


	a		/en/2026/08/07/twif.html			1	ok
							ok


	a		/en/2026/08/14/twif.html			1	ok
							ok


	a		/en/about/			1	ok
							ok


	a		/en/contribute/			1	ok
							ok


	a		/en/docs/			1	ok
							ok


	a		/en/donate			1	ok
							ok


	a		/en/issues/			1	ok
							ok


	a		/en/news/			1	ok
							ok


	a		/en/packages/			1	ok
							ok


	a		docs/Verifying_Downloaded_APK			1	ok
							ok


	a		https://f-droid.org/en/about/			1	ok
							ok


	a		https://f-droid.org/F-Droid.apk			1	ok
							ok


	a		https://floss.social/@fdroidorg			1	ok
							ok


	a		https://gitlab.com/fdroid/fdroid-website/edit/master/			1	ok
							ok


	a		https://keepandroidopen.org/			1	ok
							ok


	a		https://liberapay.com/F-Droid-Data/donate			1	ok
							ok


	a		https://opencollective.com/f-droid/donate			1	ok
							ok


	form	get	/		200	1	ok
				text/html X-Content-Type-Options nosniff found			ok
				4207 Bytes
	ETag: "3351-65a35624749ed;812-65a357d117fee

	form	get	https://search.f-droid.org/		200	1	ok
				text/html; charset=utf-8 missing X-Content-Type-Options nosniff			ok
				629 Bytes
	Server-Header Access-Control-Allow-Origin: not found			Cross-Origin Resource Sharing (CORS) not supported

	img	src	/assets/download-fdroid-qr_rt62kUMmGMIMhgDgUUWjYefCQjazGqLRlAZ7WOgSSlg=.png		200	1	ok
	no alt-Attribute			image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 437 Bytes
	ETag: "1b5-6487ca0d93d00"

	img	src	/assets/fdroid-logo-text_S0MUfk_FsnAYL7n2MQye-34IoSNm6QM6xYjDnMqkufo=.svg		200	1	ok
	alt: F-Droid			image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Compression (gzip): 14744/174227 Bytes
	ETag: "2a893-6487ca0d93d00-gzip"

	img	src	/assets/liberapay_donate_button_GHdOOfmFJNeSXjfjnA-98XtIuEfvE6cNJjHgHOhjdv0=.svg		200	1	ok
	alt: Donate via Liberapay			image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			Compression (gzip): 842/1457 Bytes
	ETag: "5b1-6487ca0d93d00-gzip"

	img	src	/assets/mastodon_-c62Zo613I00cO-RavNTybrSJhBC3vZToN5u4zSoMdM=.svg		200	1	ok
	alt: mastodon			image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Compression (gzip): 889/2011 Bytes
	ETag: "7db-6487ca0d93d00-gzip"

	img	src	/assets/opencollective_button_iIGF0Hixdj0EaYR3Sd7FRigTVcl7QPGu6kaoBmXHjZI=.png		200	1	ok
	alt: Donate to our Collective			image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			No Compression - 11943 Bytes
	ETag: "2ea7-6487ca0d93d00"

	img	src	/assets/phone-frame_kEDoOnDDPLnsqH4lVaEun9wfQgM9ivrhk5OiUWWdKHc=.png		200	1	ok
	alt: F-Droid Android app screenshot			image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 14577 Bytes
	ETag: "38f1-6487ca0d93d00"

	link	alternate	/feed.xml			1	ok
							ok


	link	alternate	https://f-droid.org/			1	ok
							ok


	link	alternate	https://f-droid.org/ar/			1	ok
							ok


	link	alternate	https://f-droid.org/bo/			1	ok
							ok


	link	alternate	https://f-droid.org/ca/			1	ok
							ok


	link	alternate	https://f-droid.org/cs/			1	ok
							ok


	link	alternate	https://f-droid.org/de/			1	ok
							ok


	link	alternate	https://f-droid.org/en/			1	ok
							ok


	link	alternate	https://f-droid.org/es/			1	ok
							ok


	link	alternate	https://f-droid.org/eu/			1	ok
							ok


	link	alternate	https://f-droid.org/fa/			1	ok
							ok


	link	alternate	https://f-droid.org/fr/			1	ok
							ok


	link	alternate	https://f-droid.org/he/			1	ok
							ok


	link	alternate	https://f-droid.org/hr/			1	ok
							ok


	link	alternate	https://f-droid.org/hu/			1	ok
							ok


	link	alternate	https://f-droid.org/id/			1	ok
							ok


	link	alternate	https://f-droid.org/is/			1	ok
							ok


	link	alternate	https://f-droid.org/it/			1	ok
							ok


	link	alternate	https://f-droid.org/ja/			1	ok
							ok


	link	alternate	https://f-droid.org/ko/			1	ok
							ok


	link	alternate	https://f-droid.org/pl/			1	ok
							ok


	link	alternate	https://f-droid.org/pt/			1	ok
							ok


	link	alternate	https://f-droid.org/pt_BR/			1	ok
							ok


	link	alternate	https://f-droid.org/ro/			1	ok
							ok


	link	alternate	https://f-droid.org/ru/			1	ok
							ok


	link	alternate	https://f-droid.org/sq/			1	ok
							ok


	link	alternate	https://f-droid.org/tr/			1	ok
							ok


	link	alternate	https://f-droid.org/uk/			1	ok
							ok


	link	alternate	https://f-droid.org/zh_Hans/			1	ok
							ok


	link	alternate	https://f-droid.org/zh_Hant/			1	ok
							ok


	link	apple-touch-icon	/assets/apple-touch-icon_ypJwtCrcixeH_qV6LdcMYk1anFIR9o-_ufR__1wNdJY=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 9788 Bytes
	ETag: "263c-6487ca0d93d00"

	link	canonical	https://f-droid.org/			1	ok
							ok


	link	dns-prefetch	https://search.f-droid.org			1	ok
							ok


	link	icon	/assets/favicon_AfYQ36xPEzFjJiCTyBFVmfWkajkehilUd2geASywhxM=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 2134 Bytes
	ETag: "856-6487ca0d93d00"

	link	icon	/assets/favicon-16x16_7yyppfDSTAVyGb3ycHY84PYjHUwP96NKICAibLRpnXw=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			No Compression - 874 Bytes
	ETag: "36a-6487ca0d93d00"

	link	icon	/assets/favicon-32x32_Dk3aeG3k_A20gYe5zAlPSBx_CEcpJaCI89K2X2z6CFY=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			No Compression - 1594 Bytes
	ETag: "63a-6487ca0d93d00"

	link	manifest	/assets/site_J9OLInBmO2hLlutzRFC4mdstNJjL44B6NzBbT0ecmA0=.webmanifest			1	ok
							ok


	link	mask-icon	/assets/safari-pinned-tab_jVj0QIYK2TEAcXlrhjrienjgRnccBVzvX22tYumPb9Q=.svg		200	1	ok
				image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Compression (gzip): 1036/1911 Bytes
	ETag: "777-6487ca0d93d00-gzip"

	link	preload	/assets/roboto_ln5c7Pv79kCZw8EjInNILddDbwVxQmaVPE0sjunCivU=.ttf		200	1	ok
				font/ttf missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Missing Compression: 32652/32652 Bytes, font not compressed
	ETag: "7f8c-6487ca0d93d00"

	link	preload	/css/main.css		200	1	ok
				text/css X-Content-Type-Options nosniff found			ok
				Compression (gzip): 6262/27150 Bytes
	ETag: "6a0e-65a3561a48214-gzip"

	link	search	/en/osd.xml			1	ok
							ok


	link	shortcut icon	/assets/favicon_yJPr4UNteJc-cseeq16P0Hvl1kDbJjTVYcj-KA6-_Fs=.ico		200	1	ok
				image/vnd.microsoft.icon missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			Compression (gzip): 4276/15086 Bytes
	ETag: "3aee-6487ca0d93d00-gzip"

	link	stylesheet	/css/main.css		200	1	ok
				text/css X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			Compression (gzip): 6262/27150 Bytes
	ETag: "6a0e-65a3561a48214-gzip"
	local SRI possible, possible hash-values: sha256-4Dj9kZCItqHBfx3qQZEf5gIxxvptHDc1grd86bN1UTo= sha384-KhGgOE0O2PjEme6pg2TVHHSG5byM3rmIednA086RDUf/qsOqs/3eud79lUwN8DJP sha512-qQwYEXWLIwoyyT5/ArlZ8IbW9wlljZO70yqXhdVdhRU2RiphPVo8p5IT8BxTd8VQk2zrL05gHvg9lod+di6vTA== <link rel="stylesheet" href="/css/main.css" crossorigin="anonymous" integrity="sha256-4Dj9kZCItqHBfx3qQZEf5gIxxvptHDc1grd86bN1UTo=" />

	meta	charset	utf-8			1	ok
							ok


	meta	og:description	F-Droid is the app distribution ecosystem for Android where your user freedom comes first. Discover our app store, explore the world of free and open source (FOSS) apps and [learn](https://f-droid.org/about/) about our app distribution tools.			1	ok
							ok


	meta	og:image	https://f-droid.org/assets/fdroid-logo_bfHl7nsLHOUQxzdU8-rGIhn4bAgl6z7k2mA3fWoCyT4=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 49803 Bytes
	ETag: "c28b-6487ca0d93d00"

	meta	og:title	F-Droid - Free and Open Source Android App Repository			1	ok
							ok


	meta	og:url	https://f-droid.org/		200	1	ok
				text/html X-Content-Type-Options nosniff found			ok
				4207 Bytes
	ETag: "3351-65a35624749ed;812-65a357d117fee

	meta	X-UA-Compatible	IE=edge			1	ok
							ok


	meta	description	F-Droid is the app distribution ecosystem for Android where your user freedom comes first. Discover our app store, explore the world of free and open source (FOSS) apps and [learn](https://f-droid.org/about/) about our app distribution tools.			1	ok
							ok


	meta	msapplication-config	/assets/browserconfig_sI0d7L-NQ2rondQpLn2DRSqXxvj7iPI0-WPzXn-uLZA=.xml		200	1	ok
				application/xml missing X-Content-Type-Options nosniff			ok
				184 Bytes
	ETag: "10a-6487ca0d93d00-gzip"

	meta	msapplication-TileColor	#ffffff			1	ok
							ok


	meta	robots	DisallowAITraining			1	ok
							ok


	meta	theme-color	#ffffff			1	ok
							ok


	meta	viewport	width=device-width, initial-scale=1			1	ok
							ok


	script	src	/assets/banner_YoMGgpdLnM6lO1-eNiEaJsDGclXrmjSlTM-8RGlLcho=.js		200	1	ok
	Missing defer / async attribute.			text/javascript X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 - with long duration found.			Compression required: 1267 Bytes
	ETag: "4f3-64b069205bb00"
	local SRI possible, possible hash-values: sha256-YoMGgpdLnM6lO1+eNiEaJsDGclXrmjSlTM+8RGlLcho= sha384-0k5EG6VxoafoXBAjE0GhCy5dlxnL5MFQHUA7FD9cJ4ynz/2eADT8O2sPiCEwVvX5 sha512-gIExbjD8fxqWeMJkL0ePsfUg9NNj1H8t2Ymq2VY8Fret2AJOk/fMGycT+HQxKnLuhj7h4TONltDcWgbqiqtOww== <script src="/assets/banner_YoMGgpdLnM6lO1-eNiEaJsDGclXrmjSlTM-8RGlLcho=.js" crossorigin="anonymous" integrity="sha256-YoMGgpdLnM6lO1+eNiEaJsDGclXrmjSlTM+8RGlLcho=" />

	script	src	/assets/donate_JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH-Gw=.js		200	1	ok
	defer attribute found			text/javascript X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 - with long duration found.			357 Bytes
	ETag: "165-6487ca0d93d00"
	local SRI possible, possible hash-values: sha256-JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH+Gw= sha384-PAl307b7gOoVlctfisIwJbMLTbrw6lis1TswLjjgO6JxStjVK42OFpvsp5m3BYDq sha512-FH+UESTqbVldCYoisWwq7z5MPwSwYFzj/s465acDSatJ/cGRm+nS+SE+em5llwaO+bKZYTyrQtpferrEuB9w5g== <script src="/assets/donate_JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH-Gw=.js" crossorigin="anonymous" integrity="sha256-JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH+Gw=" />

	script	src	/assets/sidebar-lang_j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ_lRfuoUmiaqc=.js		200	1	ok
	Missing defer / async attribute.			text/javascript X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 - with long duration found.			Compression required: 1259 Bytes
	ETag: "4eb-6487ca0d93d00"
	local SRI possible, possible hash-values: sha256-j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ/lRfuoUmiaqc= sha384-UcIkUDNwx94N8ZhYlsbeJH70WQJyutowYWrrYJWWxZSvfhpkItLWbXt1ejIrCqbn sha512-oIysJYxLL/x9oSUhpMvVw9xh/d7WkdVGUhiich24sM9/pgkAJw3dO6r7L004c83o2w4ZcJSRUvCYpmN34zq24w== <script src="/assets/sidebar-lang_j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ_lRfuoUmiaqc=.js" crossorigin="anonymous" integrity="sha256-j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ/lRfuoUmiaqc=" />

2a01:4f9:3b:546d::2	a		/en/			1	ok
							ok


	a		/en/2026/07/16/twif.html			1	ok
							ok


	a		/en/2026/07/24/twif.html			1	ok
							ok


	a		/en/2026/07/31/twif.html			1	ok
							ok


	a		/en/2026/08/07/twif.html			1	ok
							ok


	a		/en/2026/08/14/twif.html			1	ok
							ok


	a		/en/about/			1	ok
							ok


	a		/en/contribute/			1	ok
							ok


	a		/en/docs/			1	ok
							ok


	a		/en/donate			1	ok
							ok


	a		/en/issues/			1	ok
							ok


	a		/en/news/			1	ok
							ok


	a		/en/packages/			1	ok
							ok


	a		docs/Verifying_Downloaded_APK			1	ok
							ok


	a		https://f-droid.org/en/about/			1	ok
							ok


	a		https://f-droid.org/F-Droid.apk			1	ok
							ok


	a		https://floss.social/@fdroidorg			1	ok
							ok


	a		https://gitlab.com/fdroid/fdroid-website/edit/master/			1	ok
							ok


	a		https://keepandroidopen.org/			1	ok
							ok


	a		https://liberapay.com/F-Droid-Data/donate			1	ok
							ok


	a		https://opencollective.com/f-droid/donate			1	ok
							ok


	form	get	/		200	1	ok
				text/html X-Content-Type-Options nosniff found			ok
				4207 Bytes
	ETag: "3351-65a35624749ed;812-65a357d117fee

	form	get	https://search.f-droid.org/		200	1	ok
				text/html; charset=utf-8 missing X-Content-Type-Options nosniff			ok
				629 Bytes
	Server-Header Access-Control-Allow-Origin: not found			Cross-Origin Resource Sharing (CORS) not supported

	img	src	/assets/download-fdroid-qr_rt62kUMmGMIMhgDgUUWjYefCQjazGqLRlAZ7WOgSSlg=.png		200	1	ok
	no alt-Attribute			image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 437 Bytes
	ETag: "1b5-6487ca0d93d00"

	img	src	/assets/fdroid-logo-text_S0MUfk_FsnAYL7n2MQye-34IoSNm6QM6xYjDnMqkufo=.svg		200	1	ok
	alt: F-Droid			image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Compression (gzip): 14744/174227 Bytes
	ETag: "2a893-6487ca0d93d00-gzip"

	img	src	/assets/liberapay_donate_button_GHdOOfmFJNeSXjfjnA-98XtIuEfvE6cNJjHgHOhjdv0=.svg		200	1	ok
	alt: Donate via Liberapay			image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			Compression (gzip): 842/1457 Bytes
	ETag: "5b1-6487ca0d93d00-gzip"

	img	src	/assets/mastodon_-c62Zo613I00cO-RavNTybrSJhBC3vZToN5u4zSoMdM=.svg		200	1	ok
	alt: mastodon			image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Compression (gzip): 889/2011 Bytes
	ETag: "7db-6487ca0d93d00-gzip"

	img	src	/assets/opencollective_button_iIGF0Hixdj0EaYR3Sd7FRigTVcl7QPGu6kaoBmXHjZI=.png		200	1	ok
	alt: Donate to our Collective			image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			No Compression - 11943 Bytes
	ETag: "2ea7-6487ca0d93d00"

	img	src	/assets/phone-frame_kEDoOnDDPLnsqH4lVaEun9wfQgM9ivrhk5OiUWWdKHc=.png		200	1	ok
	alt: F-Droid Android app screenshot			image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 14577 Bytes
	ETag: "38f1-6487ca0d93d00"

	link	alternate	/feed.xml			1	ok
							ok


	link	alternate	https://f-droid.org/			1	ok
							ok


	link	alternate	https://f-droid.org/ar/			1	ok
							ok


	link	alternate	https://f-droid.org/bo/			1	ok
							ok


	link	alternate	https://f-droid.org/ca/			1	ok
							ok


	link	alternate	https://f-droid.org/cs/			1	ok
							ok


	link	alternate	https://f-droid.org/de/			1	ok
							ok


	link	alternate	https://f-droid.org/en/			1	ok
							ok


	link	alternate	https://f-droid.org/es/			1	ok
							ok


	link	alternate	https://f-droid.org/eu/			1	ok
							ok


	link	alternate	https://f-droid.org/fa/			1	ok
							ok


	link	alternate	https://f-droid.org/fr/			1	ok
							ok


	link	alternate	https://f-droid.org/he/			1	ok
							ok


	link	alternate	https://f-droid.org/hr/			1	ok
							ok


	link	alternate	https://f-droid.org/hu/			1	ok
							ok


	link	alternate	https://f-droid.org/id/			1	ok
							ok


	link	alternate	https://f-droid.org/is/			1	ok
							ok


	link	alternate	https://f-droid.org/it/			1	ok
							ok


	link	alternate	https://f-droid.org/ja/			1	ok
							ok


	link	alternate	https://f-droid.org/ko/			1	ok
							ok


	link	alternate	https://f-droid.org/pl/			1	ok
							ok


	link	alternate	https://f-droid.org/pt/			1	ok
							ok


	link	alternate	https://f-droid.org/pt_BR/			1	ok
							ok


	link	alternate	https://f-droid.org/ro/			1	ok
							ok


	link	alternate	https://f-droid.org/ru/			1	ok
							ok


	link	alternate	https://f-droid.org/sq/			1	ok
							ok


	link	alternate	https://f-droid.org/tr/			1	ok
							ok


	link	alternate	https://f-droid.org/uk/			1	ok
							ok


	link	alternate	https://f-droid.org/zh_Hans/			1	ok
							ok


	link	alternate	https://f-droid.org/zh_Hant/			1	ok
							ok


	link	apple-touch-icon	/assets/apple-touch-icon_ypJwtCrcixeH_qV6LdcMYk1anFIR9o-_ufR__1wNdJY=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 9788 Bytes
	ETag: "263c-6487ca0d93d00"

	link	canonical	https://f-droid.org/			1	ok
							ok


	link	dns-prefetch	https://search.f-droid.org			1	ok
							ok


	link	icon	/assets/favicon_AfYQ36xPEzFjJiCTyBFVmfWkajkehilUd2geASywhxM=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 2134 Bytes
	ETag: "856-6487ca0d93d00"

	link	icon	/assets/favicon-16x16_7yyppfDSTAVyGb3ycHY84PYjHUwP96NKICAibLRpnXw=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			No Compression - 874 Bytes
	ETag: "36a-6487ca0d93d00"

	link	icon	/assets/favicon-32x32_Dk3aeG3k_A20gYe5zAlPSBx_CEcpJaCI89K2X2z6CFY=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			No Compression - 1594 Bytes
	ETag: "63a-6487ca0d93d00"

	link	manifest	/assets/site_J9OLInBmO2hLlutzRFC4mdstNJjL44B6NzBbT0ecmA0=.webmanifest			1	ok
							ok


	link	mask-icon	/assets/safari-pinned-tab_jVj0QIYK2TEAcXlrhjrienjgRnccBVzvX22tYumPb9Q=.svg		200	1	ok
				image/svg+xml X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Compression (gzip): 1036/1911 Bytes
	ETag: "777-6487ca0d93d00-gzip"

	link	preload	/assets/roboto_ln5c7Pv79kCZw8EjInNILddDbwVxQmaVPE0sjunCivU=.ttf		200	1	ok
				font/ttf missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			Missing Compression: 32652/32652 Bytes, font not compressed
	ETag: "7f8c-6487ca0d93d00"

	link	preload	/css/main.css		200	1	ok
				text/css X-Content-Type-Options nosniff found			ok
				Compression (gzip): 6262/27150 Bytes
	ETag: "6a0e-65a3561a48214-gzip"

	link	search	/en/osd.xml			1	ok
							ok


	link	shortcut icon	/assets/favicon_yJPr4UNteJc-cseeq16P0Hvl1kDbJjTVYcj-KA6-_Fs=.ico		200	1	ok
				image/vnd.microsoft.icon missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			Compression (gzip): 4276/15086 Bytes
	ETag: "3aee-6487ca0d93d00-gzip"

	link	stylesheet	/css/main.css		200	1	ok
				text/css X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=43200, immutable, stale-while-revalidate=300 - max-age too short.			Compression (gzip): 6262/27150 Bytes
	ETag: "6a0e-65a3561a48214-gzip"
	local SRI possible, possible hash-values: sha256-4Dj9kZCItqHBfx3qQZEf5gIxxvptHDc1grd86bN1UTo= sha384-KhGgOE0O2PjEme6pg2TVHHSG5byM3rmIednA086RDUf/qsOqs/3eud79lUwN8DJP sha512-qQwYEXWLIwoyyT5/ArlZ8IbW9wlljZO70yqXhdVdhRU2RiphPVo8p5IT8BxTd8VQk2zrL05gHvg9lod+di6vTA== <link rel="stylesheet" href="/css/main.css" crossorigin="anonymous" integrity="sha256-4Dj9kZCItqHBfx3qQZEf5gIxxvptHDc1grd86bN1UTo=" />

	meta	charset	utf-8			1	ok
							ok


	meta	og:description	F-Droid is the app distribution ecosystem for Android where your user freedom comes first. Discover our app store, explore the world of free and open source (FOSS) apps and [learn](https://f-droid.org/about/) about our app distribution tools.			1	ok
							ok


	meta	og:image	https://f-droid.org/assets/fdroid-logo_bfHl7nsLHOUQxzdU8-rGIhn4bAgl6z7k2mA3fWoCyT4=.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 with long duration found.			No Compression - 49803 Bytes
	ETag: "c28b-6487ca0d93d00"

	meta	og:title	F-Droid - Free and Open Source Android App Repository			1	ok
							ok


	meta	og:url	https://f-droid.org/		200	1	ok
				text/html X-Content-Type-Options nosniff found			ok
				4207 Bytes
	ETag: "3351-65a35624749ed;812-65a357d117fee

	meta	X-UA-Compatible	IE=edge			1	ok
							ok


	meta	description	F-Droid is the app distribution ecosystem for Android where your user freedom comes first. Discover our app store, explore the world of free and open source (FOSS) apps and [learn](https://f-droid.org/about/) about our app distribution tools.			1	ok
							ok


	meta	msapplication-config	/assets/browserconfig_sI0d7L-NQ2rondQpLn2DRSqXxvj7iPI0-WPzXn-uLZA=.xml		200	1	ok
				application/xml missing X-Content-Type-Options nosniff			ok
				184 Bytes
	ETag: "10a-6487ca0d93d00-gzip"

	meta	msapplication-TileColor	#ffffff			1	ok
							ok


	meta	robots	DisallowAITraining			1	ok
							ok


	meta	theme-color	#ffffff			1	ok
							ok


	meta	viewport	width=device-width, initial-scale=1			1	ok
							ok


	script	src	/assets/banner_YoMGgpdLnM6lO1-eNiEaJsDGclXrmjSlTM-8RGlLcho=.js		200	1	ok
	Missing defer / async attribute.			text/javascript X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 - with long duration found.			Compression required: 1267 Bytes
	ETag: "4f3-64b069205bb00"
	local SRI possible, possible hash-values: sha256-YoMGgpdLnM6lO1+eNiEaJsDGclXrmjSlTM+8RGlLcho= sha384-0k5EG6VxoafoXBAjE0GhCy5dlxnL5MFQHUA7FD9cJ4ynz/2eADT8O2sPiCEwVvX5 sha512-gIExbjD8fxqWeMJkL0ePsfUg9NNj1H8t2Ymq2VY8Fret2AJOk/fMGycT+HQxKnLuhj7h4TONltDcWgbqiqtOww== <script src="/assets/banner_YoMGgpdLnM6lO1-eNiEaJsDGclXrmjSlTM-8RGlLcho=.js" crossorigin="anonymous" integrity="sha256-YoMGgpdLnM6lO1+eNiEaJsDGclXrmjSlTM+8RGlLcho=" />

	script	src	/assets/donate_JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH-Gw=.js		200	1	ok
	defer attribute found			text/javascript X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 - with long duration found.			357 Bytes
	ETag: "165-6487ca0d93d00"
	local SRI possible, possible hash-values: sha256-JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH+Gw= sha384-PAl307b7gOoVlctfisIwJbMLTbrw6lis1TswLjjgO6JxStjVK42OFpvsp5m3BYDq sha512-FH+UESTqbVldCYoisWwq7z5MPwSwYFzj/s465acDSatJ/cGRm+nS+SE+em5llwaO+bKZYTyrQtpferrEuB9w5g== <script src="/assets/donate_JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH-Gw=.js" crossorigin="anonymous" integrity="sha256-JH0mCNwawhPK42f7esD5bhYNybwPzSBMKoUvyTlH+Gw=" />

	script	src	/assets/sidebar-lang_j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ_lRfuoUmiaqc=.js		200	1	ok
	Missing defer / async attribute.			text/javascript X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=31536000, immutable, stale-while-revalidate=300 - with long duration found.			Compression required: 1259 Bytes
	ETag: "4eb-6487ca0d93d00"
	local SRI possible, possible hash-values: sha256-j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ/lRfuoUmiaqc= sha384-UcIkUDNwx94N8ZhYlsbeJH70WQJyutowYWrrYJWWxZSvfhpkItLWbXt1ejIrCqbn sha512-oIysJYxLL/x9oSUhpMvVw9xh/d7WkdVGUhiich24sM9/pgkAJw3dO6r7L004c83o2w4ZcJSRUvCYpmN34zq24w== <script src="/assets/sidebar-lang_j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ_lRfuoUmiaqc=.js" crossorigin="anonymous" integrity="sha256-j4kvB8VghKUiWGs4HpqMvN0Ucx0tTmJ/lRfuoUmiaqc=" />

12. Html-Parsing via https://validator.w3.org/nu/

	Type	Message	num found
Url used (first standard-https-result with http status 200): https://f-droid.org/

Summary
	Good: No non-document-errors
	1 errors
	1 warnings
1.	error	An `img` element must have an `alt` attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.	1
2.	warning	This document has heading elements but none of them has a computed heading level of 1.	1
Details
	Type	Message + Sample
1	error	An `img` element must have an `alt` attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.
		From line 129, column 13 to line 129, column 101
		<img src="/assets/download-fdroid-qr_rt62kUMmGMIMhgDgUUWjYefCQjazGqLRlAZ7WOgSSlg=.png" />
2	warning	This document has heading elements but none of them has a computed heading level of 1.
		From line 119, column 1 to line 119, column 4
		<h3>Your t

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: dns1.registrar-servers.com, dns2.registrar-servers.com

QNr.	Domain	Type	NS used
1	com	NS	b.root-servers.net (2001:500:200::b)
	Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2	dns1.registrar-servers.com	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: edns3.registrar-servers.com, edns4.registrar-servers.com, edns4.ultradns.biz, edns4.ultradns.com, edns4.ultradns.net, edns4.ultradns.org
	Answer: edns3.registrar-servers.com 193.108.91.149, 2.16.130.65, 2600:1401:2::95, 2600:1480:9800::41, 2a02:26f0:67::43, 95.100.175.67
	Answer: edns4.registrar-servers.com 2.22.230.67, 23.211.132.64, 2600:1406:1b::40, 2600:1408:1c::40, 2600:1480:800::43, 96.7.49.64
	Answer: edns4.ultradns.com 2001:502:f3ff::204, 204.74.66.4
3	dns2.registrar-servers.com	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: edns3.registrar-servers.com, edns4.registrar-servers.com, edns4.ultradns.biz, edns4.ultradns.com, edns4.ultradns.net, edns4.ultradns.org
	Answer: edns3.registrar-servers.com 193.108.91.149, 2.16.130.65, 2600:1401:2::95, 2600:1480:9800::41, 2a02:26f0:67::43, 95.100.175.67
	Answer: edns4.registrar-servers.com 2.22.230.67, 23.211.132.64, 2600:1406:1b::40, 2600:1408:1c::40, 2600:1480:800::43, 96.7.49.64
	Answer: edns4.ultradns.com 2001:502:f3ff::204, 204.74.66.4
4	biz	NS	a.root-servers.net (2001:503:ba3e::2:30)
	Answer: a.gtld.biz, b.gtld.biz, c.gtld.biz, m.gtld.biz, n.gtld.biz, w.gtld.biz, x.gtld.biz, y.gtld.biz
5	edns4.ultradns.biz	NS	a.gtld.biz (2001:502:ad09::30)
	Answer: pdns196.ultradns.biz, pdns196.ultradns.co.uk, pdns196.ultradns.com, pdns196.ultradns.info, pdns196.ultradns.net, pdns196.ultradns.org
	Answer: pdns196.ultradns.biz 156.154.66.196, 2610:a1:1015::e8
6	net	NS	k.root-servers.net (2001:7fd::1)
	Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
7	edns4.ultradns.net	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: ns61.ultradns2.com, ns61.ultradns2.org, pdns196.ultradns.biz, pdns196.ultradns.co.uk, pdns196.ultradns.com, pdns196.ultradns.info, pdns196.ultradns.net, pdns196.ultradns.org
	Answer: pdns196.ultradns.net 156.154.65.196, 2610:a1:1014::e8
8	org	NS	e.root-servers.net (2001:500:a8::e)
	Answer: a0.org.afilias-nst.info, a2.org.afilias-nst.info, b0.org.afilias-nst.org, b2.org.afilias-nst.org, c0.org.afilias-nst.info, d0.org.afilias-nst.org
9	edns4.ultradns.org	NS	a0.org.afilias-nst.info (2001:500:e::1)
	Answer: ns61.ultradns2.com, ns61.ultradns2.org, pdns196.ultradns.biz, pdns196.ultradns.co.uk, pdns196.ultradns.com, pdns196.ultradns.info, pdns196.ultradns.net, pdns196.ultradns.org
	Answer: ns61.ultradns2.org 204.74.106.61, 2610:a1:323d::53
	Answer: pdns196.ultradns.org 156.154.67.196, 2001:502:4612::e8
10	uk	NS	k.root-servers.net (2001:7fd::1)
	Answer: dns1.nic.uk, dns2.nic.uk, dns3.nic.uk, dns4.nic.uk, nsa.nic.uk, nsb.nic.uk, nsc.nic.uk, nsd.nic.uk
11	pdns196.ultradns.co.uk: 156.154.69.196, 2610:a1:1017::e8	NS	dns1.nic.uk (2a01:618:400::1)
12	pdns196.ultradns.com: 156.154.64.196, 2001:502:f3ff::e8	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: ns61.ultradns2.com 204.74.104.61, 2610:a1:313d::53
13	info	NS	d.root-servers.net (2001:500:2d::d)
	Answer: a0.info.afilias-nst.info, a2.info.afilias-nst.info, b0.info.afilias-nst.org, b2.info.afilias-nst.org, c0.info.afilias-nst.info, d0.info.afilias-nst.org
14	pdns196.ultradns.info: 156.154.68.196, 2610:a1:1016::e8	NS	a0.info.afilias-nst.info (2001:500:19::1)
15	edns4.ultradns.biz: 204.74.67.4	A	pdns196.ultradns.biz (2610:a1:1015::e8)
16	edns4.ultradns.biz: 2610:a1:1015::204	AAAA	pdns196.ultradns.biz (2610:a1:1015::e8)
17	edns4.ultradns.net: 204.74.110.4	A	ns61.ultradns2.com (2610:a1:313d::53)
18	edns4.ultradns.net: 2610:a1:1014::204	AAAA	ns61.ultradns2.com (2610:a1:313d::53)
19	edns4.ultradns.org: 204.74.111.4	A	ns61.ultradns2.com (2610:a1:313d::53)
20	edns4.ultradns.org: 2001:502:4612::204	AAAA	ns61.ultradns2.com (2610:a1:313d::53)
21	dns1.registrar-servers.com: 156.154.132.200	A	edns3.registrar-servers.com (2600:1401:2::95)
22	dns1.registrar-servers.com: 2610:a1:1024::200	AAAA	edns3.registrar-servers.com (2600:1401:2::95)
23	dns2.registrar-servers.com: 156.154.133.200	A	edns3.registrar-servers.com (2600:1401:2::95)
24	dns2.registrar-servers.com: 2610:a1:1025::200	AAAA	edns3.registrar-servers.com (2600:1401:2::95)

14. CAA - Entries

Domainname	flag	Name	Value	∑ Queries
www.f-droid.org	0		no CAA entry found	1
f-droid.org	5	iodef	https://gitlab.com/fdroid/admin/-/issues/	1
	5	issue	letsencrypt.org; validationmethods=http-01	1
	5	iodef	mailto:letsencrypt-monitoring@f-droid.org	1
	5	issue	pki.goog	1
org	0		no CAA entry found	1

15. TXT - Entries

Domainname	TXT Entry	Status	∑ Queries
f-droid.org	v=spf1 include:spf.mailcow.de ~all	ok	1
www.f-droid.org		ok	1
_acme-challenge.f-droid.org		Name Error - The domain name does not exist	1
_acme-challenge.www.f-droid.org		Name Error - The domain name does not exist	1
_acme-challenge.f-droid.org.f-droid.org		Name Error - The domain name does not exist	1
_acme-challenge.www.f-droid.org.f-droid.org		Name Error - The domain name does not exist	1
_acme-challenge.www.f-droid.org.www.f-droid.org		Name Error - The domain name does not exist	1

16. DomainService - Entries

Type		Domain	Pref	Value	DNS-error	num Answers	Status
MX		f-droid.org	10	hosted.mailcow.de	0	1	ok
	A			5.1.76.202	0	1	ok
	AAAA			2a00:f820:417::202	0	1	ok
	CNAME				0	0	ok
SPF	TXT	f-droid.org		v=spf1 include:spf.mailcow.de ~all			ok
	TXT	spf.mailcow.de		v=spf1 include:tinc.gmbh +ip4:5.1.76.202 +ip4:185.90.161.14 +ip6:2a00:f820:417::202 include:spf.junkemailfilter.com -all			ok
	TXT	tinc.gmbh		v=spf1 ip6:2001:920:19a0::/48 ip4:62.96.146.128/26 ip4:213.61.153.56/29 ip4:92.50.109.184/29 ip4:45.85.48.0/22 ip4:45.92.112.0/22 ip6:2a0e:b680::/29 ip6:2a0e:20c0::/29 -all			ok
	TXT	spf.junkemailfilter.com		v=spf1 ip4:184.105.182.0/24 ip4:198.100.189.64/26 ip4:108.38.233.28 ~all			ok
_dmarc	TXT	_dmarc.f-droid.org		v=DMARC1; p=reject; rua=mailto:mailauth-reports@f-droid.org			ok

17. Cipher Suites

Skipped, CDN used or too many ip addresses

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

Permalink: https://check-your-website.server-daten.de/?i=f927955d-5aa6-4d3f-bbba-8fc2e666c491

Last Result: https://check-your-website.server-daten.de/?q=f-droid.org - 2026-08-30 11:08:22

Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=f-droid.org" target="_blank">Check this Site: f-droid.org</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

QR-Code of this page - https://check-your-website.server-daten.de/?d=f-droid.org

Check DNS, Urls + Redirects, Certificates and Content of your Website

Older results

1. IP-Addresses

2. DNSSEC

3. Name Servers

4. SOA-Entries

5. Screenshots

Mobile- and other Chrome-Checks

6. Url-Checks

7. Comments

1. General Results, most used to calculate the result

2. Header-Checks

3. DNS- and NameServer - Checks

4. Content- and Performance-critical Checks

8. Connections

9. Certificates

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

11. Html-Content - Entries

Summary

Details (currently limited to 500 rows - some problems with spam users)

12. Html-Parsing via https://validator.w3.org/nu/

Summary

Details

13. Nameserver - IP-Adresses

14. CAA - Entries

15. TXT - Entries

16. DomainService - Entries

17. Cipher Suites

18. Portchecks