Check DNS, Urls + Redirects, Certificates and Content of your Website




N

No trusted Certificate

Checked:
09.07.2024 17:26:12


Older results


1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
git.lalala.ing
A
37.232.19.227
Tbilisi/Georgia (GE) - JSC "Silknet"
No Hostname found
yes
1
0

AAAA

yes


www.git.lalala.ing

Name Error
yes
1
0
*.lalala.ing
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


*.git.lalala.ing
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes



2. DNSSEC

Zone (*)DNSSEC - Informations

Zone: (root)
(root)
1 DS RR published



DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=



Status: Valid because published



3 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 5613, Flags 256



Public Key with Algorithm 8, KeyTag 20038, Flags 256



Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)



1 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 22.07.2024, 00:00:00 +, Signature-Inception: 01.07.2024, 00:00:00 +, KeyTag 20326, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: ing
ing
1 DS RR in the parent zone found



DS with Algorithm 8, KeyTag 27256, DigestType 2 and Digest 97SKEVMFZerTzGzNzOmEG2plpwfqjMIKTYH5rrdlapE=



1 RRSIG RR to validate DS RR found



RRSIG-Owner ing., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 22.07.2024, 05:00:00 +, Signature-Inception: 09.07.2024, 04:00:00 +, KeyTag 20038, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20038 used to validate the DS RRSet in the parent zone



2 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 27256, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 8, KeyTag 62349, Flags 256



1 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner ing., Algorithm: 8, 1 Labels, original TTL: 300 sec, Signature-expiration: 28.07.2024, 15:08:30 +, Signature-Inception: 06.07.2024, 15:08:30 +, KeyTag 27256, Signer-Name: ing



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 27256 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 27256, DigestType 2 and Digest "97SKEVMFZerTzGzNzOmEG2plpwfqjMIKTYH5rrdlapE=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: lalala.ing
lalala.ing
0 DS RR in the parent zone found



DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "cl0qie9ao4shuos4r4ej0ujjnrqdujl5" between the hashed NSEC3-owner "cl0qie9ao4shuos4r4ej0ujjnrqdujl5" and the hashed NextOwner "cl1dgstuuuqokmqhfvo78seeo2meqgn9". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: No Bitmap? Validated: RRSIG-Owner cl0qie9ao4shuos4r4ej0ujjnrqdujl5.ing., Algorithm: 8, 2 Labels, original TTL: 900 sec, Signature-expiration: 28.07.2024, 15:08:30 +, Signature-Inception: 06.07.2024, 15:08:30 +, KeyTag 62349, Signer-Name: ing



0 DNSKEY RR found




Zone: git.lalala.ing
git.lalala.ing
0 DS RR in the parent zone found



0 DNSKEY RR found




Zone: www.git.lalala.ing
www.git.lalala.ing
0 DS RR in the parent zone found


3. Name Servers

DomainNameserverNS-IP
www.git.lalala.ing
  dns1.registrar-servers.com

git.lalala.ing
  dns1.registrar-servers.com
156.154.132.200
New York/United States (US) - NeuStar, Inc.


 
2610:a1:1024::200
Herndon/Virginia/United States (US) - NeuStar, Inc.

lalala.ing
  dns1.registrar-servers.com
156.154.132.200
New York/United States (US) - NeuStar, Inc.


 
2610:a1:1024::200
Herndon/Virginia/United States (US) - NeuStar, Inc.


  dns2.registrar-servers.com
156.154.133.200
New York/United States (US) - NeuStar, Inc.


 
2610:a1:1025::200
Ashburn/Virginia/United States (US) - NeuStar, Inc.

ing
  ns-tld1.charlestonroadregistry.com


  ns-tld2.charlestonroadregistry.com


  ns-tld3.charlestonroadregistry.com


  ns-tld4.charlestonroadregistry.com


  ns-tld5.charlestonroadregistry.com


4. SOA-Entries


Domain:ing
Zone-Name:ing
Primary:ns-tld1.charlestonroadregistry.com
Mail:cloud-dns-hostmaster.google.com
Serial:1
Refresh:21600
Retry:3600
Expire:259200
TTL:900
num Entries:5


Domain:lalala.ing
Zone-Name:lalala.ing
Primary:dns1.registrar-servers.com
Mail:hostmaster.registrar-servers.com
Serial:1720219951
Refresh:43200
Retry:3600
Expire:604800
TTL:3601
num Entries:4


Domain:git.lalala.ing
Zone-Name:lalala.ing
Primary:dns1.registrar-servers.com
Mail:hostmaster.registrar-servers.com
Serial:1720219951
Refresh:43200
Retry:3600
Expire:604800
TTL:3601
num Entries:2


Domain:www.git.lalala.ing
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


5. Screenshots

Startaddress: https://git.lalala.ing/, address used: https://git.lalala.ing/, Screenshot created 2024-07-09 17:30:10 +00:0 url is insecure, certificate invalid

Mobil (412px x 732px)

1088 milliseconds

Screenshot mobile - https://git.lalala.ing/
Mobil + Landscape (732px x 412px)

1092 milliseconds

Screenshot mobile landscape - https://git.lalala.ing/
Screen (1280px x 1680px)

1205 milliseconds

Screenshot Desktop - https://git.lalala.ing/

Mobile- and other Chrome-Checks

widthheight
visual Viewport396732
content Size3961426

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://git.lalala.ing/
37.232.19.227
401

Html is minified: 100.00 %
0.170

Unauthorized
Date: Tue, 09 Jul 2024 19:26:45 GMT
Server: Boa/0.94.13
Connection: close
WWW-Authenticate: Basic realm="xPON ONU"
Set-Cookie: SESSIONID=27cd52e2;
Content-Type: text/html; charset=ISO-8859-1

• https://git.lalala.ing/
37.232.19.227 No GZip used - 6064 / 13453 - 45.08 % possible
200

Html is minified: 120.13 %
3.266
N
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Cache-Control: no-transform, must-revalidate, max-age=0, private
Date: Tue, 09 Jul 2024 15:26:37 GMT
Set-Cookie: i_like_gitea=ead8bc72e74ac508; Path=/; HttpOnly; Secure; SameSite=Lax, _csrf=SIQ7-PMwNPfypU8A_Uh8k8xfEpQ6MTcyMDUzODc5NzQ4NzQwMzcwOA; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=Lax
X-Frame-Options: SAMEORIGIN
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

• http://git.lalala.ing/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
37.232.19.227
401

Html is minified: 100.00 %
0.176

Unauthorized
Visible Content:
Date: Tue, 09 Jul 2024 19:26:50 GMT
Server: Boa/0.94.13
Connection: close
WWW-Authenticate: Basic realm="xPON ONU"
Set-Cookie: SESSIONID=0cfa388b;
Content-Type: text/html; charset=ISO-8859-1

• https://37.232.19.227/
37.232.19.227
404

Html is minified: 100.00 %
3.183
N
Not Found
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
X-Content-Type-Options: nosniff
Date: Tue, 09 Jul 2024 15:26:42 GMT
Connection: close
Content-Type: text/plain; charset=utf-8
Content-Length: 19

7. Comments


1. General Results, most used to calculate the result

Aname "git.lalala.ing" is subdomain, public suffix is ".ing", top-level-domain is ".ing", top-level-domain-type is "generic", tld-manager is "Charleston Road Registry Inc.", num .ing-domains preloaded: 3 (complete: 245733)
AGood: All ip addresses are public addresses
Warning: Only one ip address found: git.lalala.ing has only one ip address.
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: git.lalala.ing has no ipv6 address.
AGood: No asked Authoritative Name Server had a timeout
ADNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
AGood: destination is https
AGood - only one version with Http-Status 200
AGood: one preferred version: non-www is preferred
AGood: every cookie sent via https is marked as secure
AGood: Every cookie has a SameSite Attribute with a correct value Strict/Lax/None
AExcellent: Main Domain is in the Google-Preload-List
AExcellent: Main Domain is in the Mozilla/Firefox-Preload-List
AHSTS-Preload-Status: Preloaded. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
Bhttps://git.lalala.ing/ 37.232.19.227
200

Missing HSTS-Header
http://git.lalala.ing/ 37.232.19.227
401
SESSIONID=27cd52e2;
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
http://git.lalala.ing/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 37.232.19.227
401
SESSIONID=0cfa388b;
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
Bhttp://git.lalala.ing/ 37.232.19.227
401
SESSIONID=27cd52e2;
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttp://git.lalala.ing/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 37.232.19.227
401
SESSIONID=0cfa388b;
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Mhttp://git.lalala.ing/ 37.232.19.227
401

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://37.232.19.227/ 37.232.19.227
404

Misconfiguration - main pages should never send http status 400 - 499
Nhttps://git.lalala.ing/ 37.232.19.227
200

Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Nhttps://37.232.19.227/ 37.232.19.227
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are the same. So that domain doesn't require Server Name Indication (SNI), it's the primary certificate of that set of ip addresses.: Domain git.lalala.ing, 1 ip addresses, 1 different http results.
BNo _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.git.lalala.ing

2. Header-Checks (Cross-Origin-* headers are alpha - started 2024-06-05)

Agit.lalala.ing 37.232.19.227
X-Frame-Options
Ok: Header without syntax errors found: SAMEORIGIN
B

Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
Fgit.lalala.ing 37.232.19.227
Content-Security-Policy
Critical: Missing Header:
Fgit.lalala.ing 37.232.19.227
X-Content-Type-Options
Critical: Missing Header:
Fgit.lalala.ing 37.232.19.227
Referrer-Policy
Critical: Missing Header:
Fgit.lalala.ing 37.232.19.227
Permissions-Policy
Critical: Missing Header:
Bgit.lalala.ing 37.232.19.227
Cross-Origin-Embedder-Policy
Info: Missing Header
Bgit.lalala.ing 37.232.19.227
Cross-Origin-Opener-Policy
Info: Missing Header
Bgit.lalala.ing 37.232.19.227
Cross-Origin-Resource-Policy
Info: Missing Header

3. DNS- and NameServer - Checks

AInfo:: 24 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
AInfo:: 24 Queries complete, 24 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
Bad (greater 8):: An average of 12.0 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 2 different Name Servers found: dns1.registrar-servers.com, dns2.registrar-servers.com, 2 Name Servers included in Delegation: dns1.registrar-servers.com, dns2.registrar-servers.com, 2 Name Servers included in 1 Zone definitions: dns1.registrar-servers.com, dns2.registrar-servers.com, 1 Name Servers listed in SOA.Primary: dns1.registrar-servers.com.
AGood: Only one SOA.Primary Name Server found.: dns1.registrar-servers.com.
AGood: SOA.Primary Name Server included in the delegation set.: dns1.registrar-servers.com.
AGood: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: dns1.registrar-servers.com, dns2.registrar-servers.com
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AGood: Minimal 2 different name servers (public suffix and public ip address) found: 2 different Name Servers found
AGood: All name servers have ipv4- and ipv6-addresses.: 2 different Name Servers found
Warning: All Name Servers have the same Top Level Domain / Public Suffix. If there is a problem with that Top Level Domain, your domain may be affected. Better: Use Name Servers with different top level domains.: 2 Name Servers, 1 Top Level Domain: com
Warning: All Name Servers have the same domain name. If there is a problem with that domain name (or with the name servers of that domain name), your domain may be affected. Better: Use Name Servers with different domain names / different top level domains.: Only one domain name used: registrar-servers.com
Warning: All Name Servers from the same Country / IP location.: 2 Name Servers, 1 Countries: US
AInfo: Ipv4-Subnet-list: 2 Name Servers, 1 different subnets (first Byte): 156., 1 different subnets (first two Bytes): 156.154., 2 different subnets (first three Bytes): 156.154.132., 156.154.133.
AGood: Name Server IPv4-addresses from different subnet found:
AInfo: IPv6-Subnet-list: 2 Name Servers with IPv6, 1 different subnets (first block): 2610:, 1 different subnets (first two blocks): 2610:00a1:, 2 different subnets (first three blocks): 2610:00a1:1024:, 2610:00a1:1025:, 2 different subnets (first four blocks): 2610:00a1:1024:0000:, 2610:00a1:1025:0000:
AGood: Name Server IPv6 addresses from different subnets found.
AGood: Nameserver supports TCP connections: 2 good Nameserver
AGood: Nameserver supports Echo Capitalization: 2 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 2 good Nameserver
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

4. Content- and Performance-critical Checks

http://git.lalala.ing/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 37.232.19.227
401

Fatal: Check of /.well-known/acme-challenge/random-filename has a http status 401 / 403 Not Allowed / Forbidden. A http status 404 - Not Found - is expected. Creating a Letsencrypt certificate via http-01 challenge may not work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
https://git.lalala.ing/ 37.232.19.227
200

Warning: https result with status 200 and size greater then 1024 Bytes without GZip found. Add GZip support so the html content is compressed.
https://git.lalala.ing/ 37.232.19.227
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
AGood: Every https connection via port 443 supports the http/2 protocol via ALPN.
AInfo: No img element found, no alt attribute checked
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
https://37.232.19.227/ 37.232.19.227
404
3.183 seconds
Warning: 404 needs more then one second
ADuration: 254093 milliseconds, 254.093 seconds


8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
git.lalala.ing
37.232.19.227
443
Certificate/chain invalid and wrong name
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
git.lalala.ing
37.232.19.227
443
Certificate/chain invalid and wrong name
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Self signed certificate
1CN=TRAEFIK DEFAULT CERT


37.232.19.227
37.232.19.227
443
Certificate/chain invalid and wrong name
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

37.232.19.227
37.232.19.227
443
Certificate/chain invalid and wrong name
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Self signed certificate
1CN=TRAEFIK DEFAULT CERT


9. Certificates

1.
1.
CN=TRAEFIK DEFAULT CERT
08.07.2024
08.07.2025
expires in 360 days
8d9dfa0e1abec269fbde7295da1a0257.dcddd3a00e59a1a6f93625976df47f7f.traefik.default - 1 entry
1.
1.
CN=TRAEFIK DEFAULT CERT
08.07.2024

08.07.2025
expires in 360 days
8d9dfa0e1abec269fbde7295da1a0257.dcddd3a00e59a1a6f93625976df47f7f.traefik.default - 1 entry

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:00A13B7E716F8FF1ED148C3075454392B5
Thumbprint:A078EC27F952AD02E65AC87D47AA94E2669D1ECF
SHA256 / Certificate:J1HuTdo02Hk5hJ9Rj/HwDPEYg2TMPmGUzUPYrRk6eQU=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):e46dd989d94c53fd30ee5629d6240be8fae91c4bba7e3ba32dd72c25f6c98834
SHA256 hex / Subject Public Key Information (SPKI):e46dd989d94c53fd30ee5629d6240be8fae91c4bba7e3ba32dd72c25f6c98834 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

UntrustedRoot: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.


10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

No CertSpotter - CT-Log entries found


2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

No CRT - CT-Log entries found


11. Html-Content - Entries

No Html-Content entries found. Only checked if https + status 200/401/403/404


12. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: dns1.registrar-servers.com, dns2.registrar-servers.com

QNr.DomainTypeNS used
1
com
NS
b.root-servers.net (2001:500:200::b)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2
dns1.registrar-servers.com
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: edns1.registrar-servers.com, edns2.registrar-servers.com, edns3.registrar-servers.com, edns4.registrar-servers.com, edns4.ultradns.biz, edns4.ultradns.com, edns4.ultradns.net, edns4.ultradns.org

Answer: edns1.registrar-servers.com
2001:41d0:800:2d2c::2, 51.89.217.44

Answer: edns2.registrar-servers.com
2607:5300:203:7f53::2, 51.222.46.83

Answer: edns3.registrar-servers.com
193.108.91.149, 2.16.130.65, 2600:1401:2::95, 2600:1480:9800::41, 2a02:26f0:67::43, 95.100.175.67

Answer: edns4.registrar-servers.com
2.22.230.67, 23.211.132.64, 2600:1406:1b::40, 2600:1408:1c::40, 2600:1480:800::43, 96.7.49.64

Answer: edns4.ultradns.com
2001:502:f3ff::204, 204.74.66.4
3
dns2.registrar-servers.com
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: edns1.registrar-servers.com, edns2.registrar-servers.com, edns3.registrar-servers.com, edns4.registrar-servers.com, edns4.ultradns.biz, edns4.ultradns.com, edns4.ultradns.net, edns4.ultradns.org

Answer: edns1.registrar-servers.com
2001:41d0:800:2d2c::2, 51.89.217.44

Answer: edns2.registrar-servers.com
2607:5300:203:7f53::2, 51.222.46.83

Answer: edns3.registrar-servers.com
193.108.91.149, 2.16.130.65, 2600:1401:2::95, 2600:1480:9800::41, 2a02:26f0:67::43, 95.100.175.67

Answer: edns4.registrar-servers.com
2.22.230.67, 23.211.132.64, 2600:1406:1b::40, 2600:1408:1c::40, 2600:1480:800::43, 96.7.49.64

Answer: edns4.ultradns.com
2001:502:f3ff::204, 204.74.66.4
4
biz
NS
d.root-servers.net (2001:500:2d::d)

Answer: a.gtld.biz, b.gtld.biz, c.gtld.biz, m.gtld.biz, n.gtld.biz, w.gtld.biz, x.gtld.biz, y.gtld.biz
5
edns4.ultradns.biz
NS
a.gtld.biz (2001:502:ad09::30)

Answer: pdns196.ultradns.biz, pdns196.ultradns.co.uk, pdns196.ultradns.com, pdns196.ultradns.info, pdns196.ultradns.net, pdns196.ultradns.org

Answer: pdns196.ultradns.biz
156.154.66.196, 2610:a1:1015::e8
6
net
NS
h.root-servers.net (2001:500:1::53)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
7
edns4.ultradns.net
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: ns61.ultradns2.com, ns61.ultradns2.org, pdns196.ultradns.biz, pdns196.ultradns.co.uk, pdns196.ultradns.com, pdns196.ultradns.info, pdns196.ultradns.net, pdns196.ultradns.org

Answer: pdns196.ultradns.net
156.154.65.196, 2610:a1:1014::e8
8
org
NS
j.root-servers.net (2001:503:c27::2:30)

Answer: a0.org.afilias-nst.info, a2.org.afilias-nst.info, b0.org.afilias-nst.org, b2.org.afilias-nst.org, c0.org.afilias-nst.info, d0.org.afilias-nst.org
9
edns4.ultradns.org
NS
a0.org.afilias-nst.info (2001:500:e::1)

Answer: ns61.ultradns2.com, ns61.ultradns2.org, pdns196.ultradns.biz, pdns196.ultradns.co.uk, pdns196.ultradns.com, pdns196.ultradns.info, pdns196.ultradns.net, pdns196.ultradns.org

Answer: ns61.ultradns2.org
204.74.106.61, 2610:a1:323d::53

Answer: pdns196.ultradns.org
156.154.67.196, 2001:502:4612::e8
10
uk
NS
l.root-servers.net (2001:500:9f::42)

Answer: dns1.nic.uk, dns2.nic.uk, dns3.nic.uk, dns4.nic.uk, nsa.nic.uk, nsb.nic.uk, nsc.nic.uk, nsd.nic.uk
11
pdns196.ultradns.co.uk: 156.154.69.196, 2610:a1:1017::e8
NS
dns1.nic.uk (2a01:618:400::1)
12
pdns196.ultradns.com: 156.154.64.196, 2001:502:f3ff::e8
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: ns61.ultradns2.com
204.74.104.61, 2610:a1:313d::53
13
info
NS
a.root-servers.net (2001:503:ba3e::2:30)

Answer: a0.info.afilias-nst.info, a2.info.afilias-nst.info, b0.info.afilias-nst.org, b2.info.afilias-nst.org, c0.info.afilias-nst.info, d0.info.afilias-nst.org
14
pdns196.ultradns.info: 156.154.68.196, 2610:a1:1016::e8
NS
a0.info.afilias-nst.info (2001:500:19::1)
15
edns4.ultradns.biz: 204.74.67.4
A
pdns196.ultradns.biz (2610:a1:1015::e8)
16
edns4.ultradns.biz: 2610:a1:1015::204
AAAA
pdns196.ultradns.biz (2610:a1:1015::e8)
17
edns4.ultradns.net: 204.74.110.4
A
ns61.ultradns2.com (2610:a1:313d::53)
18
edns4.ultradns.net: 2610:a1:1014::204
AAAA
ns61.ultradns2.com (2610:a1:313d::53)
19
edns4.ultradns.org: 204.74.111.4
A
ns61.ultradns2.com (2610:a1:313d::53)
20
edns4.ultradns.org: 2001:502:4612::204
AAAA
ns61.ultradns2.com (2610:a1:313d::53)
21
dns1.registrar-servers.com: 156.154.132.200
A
edns1.registrar-servers.com (2001:41d0:800:2d2c::2)
22
dns1.registrar-servers.com: 2610:a1:1024::200
AAAA
edns1.registrar-servers.com (2001:41d0:800:2d2c::2)
23
dns2.registrar-servers.com: 156.154.133.200
A
edns1.registrar-servers.com (2001:41d0:800:2d2c::2)
24
dns2.registrar-servers.com: 2610:a1:1025::200
AAAA
edns1.registrar-servers.com (2001:41d0:800:2d2c::2)


13. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
git.lalala.ing
0

no CAA entry found
1
0
lalala.ing
0

no CAA entry found
1
0
ing
0

no CAA entry found
1
0


14. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
lalala.ing
v=spf1 include:spf.efwd.registrar-servers.com ~all
ok
1
0
git.lalala.ing

ok
1
0
_acme-challenge.git.lalala.ing

Name Error - The domain name does not exist
1
0
_acme-challenge.git.lalala.ing.lalala.ing

Name Error - The domain name does not exist
1
0
_acme-challenge.git.lalala.ing.git.lalala.ing

Name Error - The domain name does not exist
1
0


15. DomainService - Entries (SPF-Check is alpha - 2024-06-22, DMARC-Detailcheck is alpha - 2024-07-06)

No DomainServiceEntries entries found



16. Cipher Suites

Summary
DomainIPPortnum CipherstimeStd.ProtocolForward Secrecy
git.lalala.ing
37.232.19.227
443
5 Ciphers58.45 sec
0 without, 5 FS
100.00 %
Complete

1
5 Ciphers
5.00 Ciphers/Check
58.45 sec58.45 sec/Check
0 without, 5 FS
100.00 %

Details
DomainIPPortCipher (OpenSsl / IANA)
git.lalala.ing
37.232.19.227
443
ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS
5 Ciphers, 58.45 sec
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
ECDH
RSA
CHACHA20/POLY1305(256)
AEAD



ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
ECDH
RSA
AESGCM(256)
AEAD



ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
ECDH
RSA
AESGCM(128)
AEAD



ECDHE-RSA-AES256-SHA
(Weak)
TLSv1
0xC0,0x14
FS

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
ECDH
RSA
AES(256)
SHA1



ECDHE-RSA-AES128-SHA
(Weak)
TLSv1
0xC0,0x13
FS

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
ECDH
RSA
AES(128)
SHA1


17. Portchecks

DomainIPPortDescriptionResultAnswer
git.lalala.ing
37.232.19.227
21
FTP



git.lalala.ing
37.232.19.227
21
FTP



git.lalala.ing
37.232.19.227
22
SSH
open
SSH-2.0-OpenSSH_9.7

git.lalala.ing
37.232.19.227
22
SSH
open
SSH-2.0-OpenSSH_9.7
Bad: SSH without DNS SSHFP Record found
Possible DNS SSHFP Entries:
git.lalala.ing IN SSHFP 4 2 7e8aefb475e577491f635b7791d28b1f100b764362032bab981ed6a614bb3788
git.lalala.ing
37.232.19.227
25
SMTP



git.lalala.ing
37.232.19.227
25
SMTP



git.lalala.ing
37.232.19.227
53
DNS



git.lalala.ing
37.232.19.227
53
DNS



git.lalala.ing
37.232.19.227
110
POP3



git.lalala.ing
37.232.19.227
110
POP3



git.lalala.ing
37.232.19.227
143
IMAP



git.lalala.ing
37.232.19.227
143
IMAP



git.lalala.ing
37.232.19.227
465
SMTP (encrypted)



git.lalala.ing
37.232.19.227
465
SMTP (encrypted)



git.lalala.ing
37.232.19.227
587
SMTP (encrypted, submission)



git.lalala.ing
37.232.19.227
587
SMTP (encrypted, submission)



git.lalala.ing
37.232.19.227
993
IMAP (encrypted)



git.lalala.ing
37.232.19.227
993
IMAP (encrypted)



git.lalala.ing
37.232.19.227
995
POP3 (encrypted)



git.lalala.ing
37.232.19.227
995
POP3 (encrypted)



git.lalala.ing
37.232.19.227
1433
MS SQL



git.lalala.ing
37.232.19.227
1433
MS SQL



git.lalala.ing
37.232.19.227
2082
cPanel (http)



git.lalala.ing
37.232.19.227
2082
cPanel (http)



git.lalala.ing
37.232.19.227
2083
cPanel (https)



git.lalala.ing
37.232.19.227
2083
cPanel (https)



git.lalala.ing
37.232.19.227
2086
WHM (http)



git.lalala.ing
37.232.19.227
2086
WHM (http)



git.lalala.ing
37.232.19.227
2087
WHM (https)



git.lalala.ing
37.232.19.227
2087
WHM (https)



git.lalala.ing
37.232.19.227
2089
cPanel Licensing



git.lalala.ing
37.232.19.227
2089
cPanel Licensing



git.lalala.ing
37.232.19.227
2095
cPanel Webmail (http)



git.lalala.ing
37.232.19.227
2095
cPanel Webmail (http)



git.lalala.ing
37.232.19.227
2096
cPanel Webmail (https)



git.lalala.ing
37.232.19.227
2096
cPanel Webmail (https)



git.lalala.ing
37.232.19.227
2222
DirectAdmin (http)



git.lalala.ing
37.232.19.227
2222
DirectAdmin (http)



git.lalala.ing
37.232.19.227
2222
DirectAdmin (https)



git.lalala.ing
37.232.19.227
2222
DirectAdmin (https)



git.lalala.ing
37.232.19.227
3306
mySql



git.lalala.ing
37.232.19.227
3306
mySql



git.lalala.ing
37.232.19.227
5224
Plesk Licensing



git.lalala.ing
37.232.19.227
5224
Plesk Licensing



git.lalala.ing
37.232.19.227
5432
PostgreSQL



git.lalala.ing
37.232.19.227
5432
PostgreSQL



git.lalala.ing
37.232.19.227
8080
Ookla Speedtest (http)



git.lalala.ing
37.232.19.227
8080
Ookla Speedtest (http)



git.lalala.ing
37.232.19.227
8080
Ookla Speedtest (https)



git.lalala.ing
37.232.19.227
8080
Ookla Speedtest (https)



git.lalala.ing
37.232.19.227
8083
VestaCP http



git.lalala.ing
37.232.19.227
8083
VestaCP http



git.lalala.ing
37.232.19.227
8083
VestaCP https



git.lalala.ing
37.232.19.227
8083
VestaCP https



git.lalala.ing
37.232.19.227
8443
Plesk Administration (https)



git.lalala.ing
37.232.19.227
8443
Plesk Administration (https)



git.lalala.ing
37.232.19.227
8447
Plesk Installer + Updates



git.lalala.ing
37.232.19.227
8447
Plesk Installer + Updates



git.lalala.ing
37.232.19.227
8880
Plesk Administration (http)



git.lalala.ing
37.232.19.227
8880
Plesk Administration (http)



git.lalala.ing
37.232.19.227
10000
Webmin (http)



git.lalala.ing
37.232.19.227
10000
Webmin (http)



git.lalala.ing
37.232.19.227
10000
Webmin (https)



git.lalala.ing
37.232.19.227
10000
Webmin (https)





Permalink: https://check-your-website.server-daten.de/?i=2f357b44-7324-444f-b584-8a925fc4c0a6


Last Result: https://check-your-website.server-daten.de/?q=git.lalala.ing - 2024-07-09 17:26:12


Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=git.lalala.ing" target="_blank">Check this Site: git.lalala.ing</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

QR-Code of this page