Check DNS, Urls + Redirects, Certificates and Content of your Website

...

skip EDNS-Check

skip Content-Check

check links

A+

Top configuration, no warnings +Preload

Checked:
25.06.2025 00:16:25

Older results

No older results found

1. IP-Addresses

Host	Type	IP-Address	is auth.	∑ Queries	∑ Timeout
grapheneos.social	A	51.222.159.14 Beauharnois/Quebec/Canada (CA) - OVH SAS Hostname: grapheneos.social	yes	1	0
	AAAA	2607:5300:205:200::5e3f Beauharnois/Quebec/Canada (CA) - OVH SAS	yes
www.grapheneos.social	A	51.222.159.14 Beauharnois/Quebec/Canada (CA) - OVH SAS Hostname: grapheneos.social	yes	1	0
	AAAA	2607:5300:205:200::5e3f Beauharnois/Quebec/Canada (CA) - OVH SAS	yes
*.grapheneos.social	A	Name Error	yes
	AAAA	Name Error	yes
	CNAME	Name Error	yes
mta-sts.grapheneos.social	A	192.99.98.22 No Hostname found	yes
	AAAA	2607:5300:205:200::472f	yes

2. DNSSEC

Zone (*)	DNSSEC - Informations

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	4 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 46441, Flags 256


	Public Key with Algorithm 8, KeyTag 53148, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 11.07.2025, 00:00:00 +, Signature-Inception: 20.06.2025, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: social
social	1 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 40816, DigestType 2 and Digest aDiV7fCGNgtryPLmZ0v+lHNd9viKbv7/hQuQVZU4Ovg=


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner social., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 07.07.2025, 21:00:00 +, Signature-Inception: 24.06.2025, 20:00:00 +, KeyTag 53148, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 53148 used to validate the DS RRSet in the parent zone


	3 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 6723, Flags 256


	Public Key with Algorithm 8, KeyTag 16833, Flags 256


	Public Key with Algorithm 8, KeyTag 40816, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner social., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 08.07.2025, 15:34:38 +, Signature-Inception: 17.06.2025, 14:34:38 +, KeyTag 40816, Signer-Name: social


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 40816 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 40816, DigestType 2 and Digest "aDiV7fCGNgtryPLmZ0v+lHNd9viKbv7/hQuQVZU4Ovg=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: grapheneos.social
grapheneos.social	1 DS RR in the parent zone found


	DS with Algorithm 13, KeyTag 23861, DigestType 2 and Digest OJBuqIne7sx55eENaATpLPnMJG7Eb1F0xsd4x3jYOcU=


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner grapheneos.social., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 08.07.2025, 15:34:38 +, Signature-Inception: 17.06.2025, 14:34:38 +, KeyTag 6723, Signer-Name: social


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 6723 used to validate the DS RRSet in the parent zone


	1 DNSKEY RR found


	Public Key with Algorithm 13, KeyTag 23861, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner grapheneos.social., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 03.07.2025, 00:00:00 +, Signature-Inception: 12.06.2025, 00:00:00 +, KeyTag 23861, Signer-Name: grapheneos.social


	• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 23861 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 23861, DigestType 2 and Digest "OJBuqIne7sx55eENaATpLPnMJG7Eb1F0xsd4x3jYOcU=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone


	RRSIG Type 1 validates the A - Result: 51.222.159.14 Validated: RRSIG-Owner grapheneos.social., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 03.07.2025, 00:00:00 +, Signature-Inception: 12.06.2025, 00:00:00 +, KeyTag 23861, Signer-Name: grapheneos.social


	RRSIG Type 16 validates the TXT - Result: v=spf1 a:mail.grapheneos.org -all yandex-verification: ec33ee307706436f facebook-domain-verification=nn8qfg6l9xhnqkkizdgn97taizy6hj google-site-verification=1udi6RI56KjPtFGO38lCQImhEmY6XFxX1hVsdEK4_gw Validated: RRSIG-Owner grapheneos.social., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 03.07.2025, 00:00:00 +, Signature-Inception: 12.06.2025, 00:00:00 +, KeyTag 23861, Signer-Name: grapheneos.social


	RRSIG Type 28 validates the AAAA - Result: 2607:5300:0205:0200:0000:0000:0000:5E3F Validated: RRSIG-Owner grapheneos.social., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 03.07.2025, 00:00:00 +, Signature-Inception: 12.06.2025, 00:00:00 +, KeyTag 23861, Signer-Name: grapheneos.social


	RRSIG Type 52 validates the TLSA - Result (_443._tcp.grapheneos.social): _443._tcp.grapheneos.social: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 5e41e70cf0af6198da8129d34a83696cd1edbbd36886cec5a4f04546c81c87c8 Validated: RRSIG-Owner _443._tcp.grapheneos.social., Algorithm: 13, 4 Labels, original TTL: 3600 sec, Signature-expiration: 03.07.2025, 00:00:00 +, Signature-Inception: 12.06.2025, 00:00:00 +, KeyTag 23861, Signer-Name: grapheneos.social


	RRSIG Type 257 validates the CAA - Result: 5\|iodefmailto:caa@grapheneos.org 5\|issueletsencrypt.org; validationmethods=http-01; accounturi=https://acme-staging-v02.api.letsencrypt.org/acme/acct/77600664 5\|issueletsencrypt.org; validationmethods=http-01; accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/843621317 8\|issuevmc; 9\|issuemail; Validated: RRSIG-Owner grapheneos.social., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 03.07.2025, 00:00:00 +, Signature-Inception: 12.06.2025, 00:00:00 +, KeyTag 23861, Signer-Name: grapheneos.social


	CNAME-Query sends a valid NSEC RR as result with the query name "grapheneos.social" equal the NSEC-owner "grapheneos.social" and the NextOwner "default._bimi.grapheneos.social". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, NS, SOA, MX, TXT, AAAA, SSHFP, RRSIG, NSEC, DNSKEY, 65, CAA Validated: RRSIG-Owner grapheneos.social., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 03.07.2025, 00:00:00 +, Signature-Inception: 12.06.2025, 00:00:00 +, KeyTag 23861, Signer-Name: grapheneos.social


	Status: Good. NoData-Proof required and found.

Zone: www.grapheneos.social
www.grapheneos.social	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC RR as result with the domain name between the NSEC-Owner "www.grapheneos.social" and the NextOwner "_443._tcp.www.grapheneos.social". So the parent zone confirmes the non-existence of a DS RR. Bitmap: A, MX, TXT, AAAA, SSHFP, RRSIG, NSEC, 65


	RRSIG Type 1 validates the A - Result: 51.222.159.14 Validated: RRSIG-Owner www.grapheneos.social., Algorithm: 13, 3 Labels, original TTL: 3600 sec, Signature-expiration: 03.07.2025, 00:00:00 +, Signature-Inception: 12.06.2025, 00:00:00 +, KeyTag 23861, Signer-Name: grapheneos.social


	RRSIG Type 16 validates the TXT - Result: v=spf1 -all Validated: RRSIG-Owner www.grapheneos.social., Algorithm: 13, 3 Labels, original TTL: 3600 sec, Signature-expiration: 03.07.2025, 00:00:00 +, Signature-Inception: 12.06.2025, 00:00:00 +, KeyTag 23861, Signer-Name: grapheneos.social


	RRSIG Type 28 validates the AAAA - Result: 2607:5300:0205:0200:0000:0000:0000:5E3F Validated: RRSIG-Owner www.grapheneos.social., Algorithm: 13, 3 Labels, original TTL: 3600 sec, Signature-expiration: 03.07.2025, 00:00:00 +, Signature-Inception: 12.06.2025, 00:00:00 +, KeyTag 23861, Signer-Name: grapheneos.social


	RRSIG Type 52 validates the TLSA - Result (_443._tcp.www.grapheneos.social): _443._tcp.www.grapheneos.social: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 5e41e70cf0af6198da8129d34a83696cd1edbbd36886cec5a4f04546c81c87c8 Validated: RRSIG-Owner _443._tcp.www.grapheneos.social., Algorithm: 13, 5 Labels, original TTL: 3600 sec, Signature-expiration: 03.07.2025, 00:00:00 +, Signature-Inception: 12.06.2025, 00:00:00 +, KeyTag 23861, Signer-Name: grapheneos.social


	CNAME-Query sends a valid NSEC RR as result with the query name "www.grapheneos.social" equal the NSEC-owner "www.grapheneos.social" and the NextOwner "_443._tcp.www.grapheneos.social". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, MX, TXT, AAAA, SSHFP, RRSIG, NSEC, 65 Validated: RRSIG-Owner www.grapheneos.social., Algorithm: 13, 3 Labels, original TTL: 3600 sec, Signature-expiration: 03.07.2025, 00:00:00 +, Signature-Inception: 12.06.2025, 00:00:00 +, KeyTag 23861, Signer-Name: grapheneos.social


	Status: Good. NoData-Proof required and found.


	CAA-Query sends a valid NSEC RR as result with the query name "www.grapheneos.social" equal the NSEC-owner "www.grapheneos.social" and the NextOwner "_443._tcp.www.grapheneos.social". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, MX, TXT, AAAA, SSHFP, RRSIG, NSEC, 65 Validated: RRSIG-Owner www.grapheneos.social., Algorithm: 13, 3 Labels, original TTL: 3600 sec, Signature-expiration: 03.07.2025, 00:00:00 +, Signature-Inception: 12.06.2025, 00:00:00 +, KeyTag 23861, Signer-Name: grapheneos.social


	Status: Good. NoData-Proof required and found.

3. Name Servers

Domain	Nameserver	NS-IP
www.grapheneos.social	• ns1.grapheneos.social		•
grapheneos.social	• ns1.grapheneos.social	185.187.152.9 London/England/United Kingdom (GB) - Rage4 Networks Limited	•
	•	2a05:b0c4:1::8 London/England/United Kingdom (GB) - Rage4-AnycastIP	•
	• ns2.grapheneos.social	198.251.90.93 Chicago/Illinois/United States (US) - FranTech Solutions	•
	•	2605:6400:10:102e:95bc:89ef:2e7f:49bb Staten Island/New York/United States (US) - FranTech Solutions	•
	•	2605:6400:20:1c8f:a0c9:372d:482e:945b Las Vegas/Nevada/United States (US) - FranTech Solutions	•
	•	2605:6400:30:ec25:102c:af6d:5be:1eb8 Luxembourg/Luxembourg (LU) - FranTech Solutions	•
social	• v0n0.nic.social / app10.nrt1.hosts.meta.redstone.afilias-nst.info-1615580861		•
	• v0n1.nic.social / app22.lax1.hosts.meta.redstone.afilias-nst.info-1633102198		•
	• v0n2.nic.social / app7.nrt1.hosts.meta.redstone.afilias-nst.info-1615580861		•
	• v0n3.nic.social / app13.lax1.hosts.meta.redstone.afilias-nst.info-1633102198		•
	• v2n0.nic.social / FRA4		•
	• v2n1.nic.social / FRA3		•

4. SOA-Entries

Domain:	social
Zone-Name:	social
Primary:	v0n0.nic.social
Mail:	hostmaster.donuts.email
Serial:	1750802796
Refresh:	7200
Retry:	900
Expire:	1209600
TTL:	3600
num Entries:	6

Domain:	grapheneos.social
Zone-Name:	grapheneos.social
Primary:	ns1.grapheneos.social
Mail:	hostmaster.grapheneos.social
Serial:	2025062112
Refresh:	3600
Retry:	1800
Expire:	1209600
TTL:	3600
num Entries:	6

Domain:	www.grapheneos.social
Zone-Name:	grapheneos.social
Primary:	ns1.grapheneos.social
Mail:	hostmaster.grapheneos.social
Serial:	2025062112
Refresh:	3600
Retry:	1800
Expire:	1209600
TTL:	3600
num Entries:	1

5. Screenshots

Startaddress: https://grapheneos.social/, address used: https://grapheneos.social/about, Screenshot created 2025-06-25 00:23:41 +00:0

Mobil (412px x 732px)

1094 milliseconds

Screenshot mobile - https://grapheneos.social/about

Mobil + Landscape (732px x 412px)

1095 milliseconds

Screenshot mobile landscape - https://grapheneos.social/about

Screen (1280px x 1680px)

1481 milliseconds

Screenshot Desktop - https://grapheneos.social/about

Mobile- and other Chrome-Checks

	width	height
visual Viewport	404	732
content Size	404	1205

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

6. Url-Checks

show header:

Domainname	Http-Status	redirect	Sec.	G
• http://grapheneos.social/ 51.222.159.14	301	https://grapheneos.social/ Html is minified: 109.46 %	0.200	A
Server: nginx
Date: Tue, 24 Jun 2025 22:17:29 GMT
Connection: close
Location: https://grapheneos.social/
Content-Type: text/html
Content-Length: 162

• http://grapheneos.social/ 2607:5300:205:200::5e3f	301	https://grapheneos.social/ Html is minified: 109.46 %	0.203	A
Server: nginx
Date: Tue, 24 Jun 2025 22:17:29 GMT
Connection: close
Location: https://grapheneos.social/
Content-Type: text/html
Content-Length: 162

• http://www.grapheneos.social/ 51.222.159.14	301	https://www.grapheneos.social/ Html is minified: 109.46 %	0.217	A
Server: nginx
Date: Tue, 24 Jun 2025 22:17:30 GMT
Connection: close
Location: https://www.grapheneos.social/
Content-Type: text/html
Content-Length: 162

• http://www.grapheneos.social/ 2607:5300:205:200::5e3f	301	https://www.grapheneos.social/ Html is minified: 109.46 %	0.230	A
Server: nginx
Date: Tue, 24 Jun 2025 22:17:30 GMT
Connection: close
Location: https://www.grapheneos.social/
Content-Type: text/html
Content-Length: 162

• https://www.grapheneos.social/ 51.222.159.14	301	https://grapheneos.social/ Html is minified: 109.46 %	4.500	A
Server: nginx
Date: Tue, 24 Jun 2025 22:17:44 GMT
Connection: keep-alive
Location: https://grapheneos.social/
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Content-Type: text/html
Content-Length: 162

• https://www.grapheneos.social/ 2607:5300:205:200::5e3f	301	https://grapheneos.social/ Html is minified: 109.46 %	3.913	A
Server: nginx
Date: Tue, 24 Jun 2025 22:17:50 GMT
Connection: keep-alive
Location: https://grapheneos.social/
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Content-Type: text/html
Content-Length: 162

• https://grapheneos.social/ 51.222.159.14 br used - 10175 / 23298 - 56.33 % Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 104.02 % Other inline scripts (∑/total): 1/7485	4.683	A
Date: Tue, 24 Jun 2025 22:17:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding,Accept,Accept-Language,Cookie
Server: Mastodon
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Referrer-Policy: same-origin
Link: </packs/js/locale/en-json-8e2bb01c3724d13b0392.chunk.js>; rel=preload; as=script; type=text/javascript; integrity=sha256-YzCkH5d6OACQybOPiw7cp4Gp/dcK1Q1ogGq2eKP0K0o=
Cache-Control: public, max-age=15, stale-while-revalidate=30, stale-if-error=86400
ETag: W/"f4322d8828ec742f171f6aff4208d1c5"
Content-Security-Policy: base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://grapheneos.social; img-src 'self' data: blob: https://grapheneos.social; style-src 'self' https://grapheneos.social 'nonce-yNcKWgX+mDBg30damJSKXQ=='; media-src 'self' data: https://grapheneos.social; manifest-src 'self' https://grapheneos.social; form-action 'none'; child-src 'self' blob: https://grapheneos.social; worker-src 'self' blob: https://grapheneos.social; connect-src 'self' data: blob: https://grapheneos.social wss://grapheneos.social; script-src 'self' https://grapheneos.social 'wasm-unsafe-eval'; frame-src 'self' https:
X-Request-ID: 5579be19-ae5d-460c-900a-a0a4b2af6a0e
X-Runtime: 0.006670
X-Cached: EXPIRED
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Content-Type: text/html; charset=utf-8
Content-Encoding: br
Content-Length: 10175

• https://grapheneos.social/ 2607:5300:205:200::5e3f br used - 10175 / 23298 - 56.33 % Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 104.02 % Other inline scripts (∑/total): 1/7485	4.047	A
Date: Tue, 24 Jun 2025 22:17:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding,Accept,Accept-Language,Cookie
Server: Mastodon
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Referrer-Policy: same-origin
Link: </packs/js/locale/en-json-8e2bb01c3724d13b0392.chunk.js>; rel=preload; as=script; type=text/javascript; integrity=sha256-YzCkH5d6OACQybOPiw7cp4Gp/dcK1Q1ogGq2eKP0K0o=
Cache-Control: public, max-age=15, stale-while-revalidate=30, stale-if-error=86400
ETag: W/"f4322d8828ec742f171f6aff4208d1c5"
Content-Security-Policy: base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://grapheneos.social; img-src 'self' data: blob: https://grapheneos.social; style-src 'self' https://grapheneos.social 'nonce-yNcKWgX+mDBg30damJSKXQ=='; media-src 'self' data: https://grapheneos.social; manifest-src 'self' https://grapheneos.social; form-action 'none'; child-src 'self' blob: https://grapheneos.social; worker-src 'self' blob: https://grapheneos.social; connect-src 'self' data: blob: https://grapheneos.social wss://grapheneos.social; script-src 'self' https://grapheneos.social 'wasm-unsafe-eval'; frame-src 'self' https:
X-Request-ID: 5579be19-ae5d-460c-900a-a0a4b2af6a0e
X-Runtime: 0.006670
X-Cached: HIT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Content-Type: text/html; charset=utf-8
Content-Encoding: br
Content-Length: 10175

• https://mta-sts.grapheneos.social/.well-known/mta-sts.txt 192.99.98.22	200			A
0 None
Server: nginx
Date: Tue, 24 Jun 2025 22:18:19 GMT
Connection: close
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Content-Type: text/plain; charset=utf-8
Content-Length: 95

• https://mta-sts.grapheneos.social/.well-known/mta-sts.txt 2607:5300:205:200::472f	200			A
0 None
Server: nginx
Date: Tue, 24 Jun 2025 22:18:25 GMT
Connection: close
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Content-Type: text/plain; charset=utf-8
Content-Length: 95

• http://grapheneos.social/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 51.222.159.14 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	404	Html is minified: 110.61 % Other inline scripts (∑/total): 0/0	0.197	A
Not Found
Visible Content:
Server: nginx
Date: Tue, 24 Jun 2025 22:17:55 GMT
Connection: close
Content-Type: text/html; charset=utf-8
Content-Length: 146

• http://grapheneos.social/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2607:5300:205:200::5e3f Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	404	Html is minified: 110.61 % Other inline scripts (∑/total): 0/0	0.217	A
Not Found
Visible Content:
Server: nginx
Date: Tue, 24 Jun 2025 22:17:56 GMT
Connection: close
Content-Type: text/html; charset=utf-8
Content-Length: 146

• http://www.grapheneos.social/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 51.222.159.14 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	404	Html is minified: 110.61 % Other inline scripts (∑/total): 0/0	0.224	A
Not Found
Visible Content:
Server: nginx
Date: Tue, 24 Jun 2025 22:17:57 GMT
Connection: close
Content-Type: text/html; charset=utf-8
Content-Length: 146

• http://www.grapheneos.social/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2607:5300:205:200::5e3f Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	404	Html is minified: 110.61 % Other inline scripts (∑/total): 0/0	0.203	A
Not Found
Visible Content:
Server: nginx
Date: Tue, 24 Jun 2025 22:17:58 GMT
Connection: close
Content-Type: text/html; charset=utf-8
Content-Length: 146

• https://51.222.159.14/ 51.222.159.14	-103		0.216	P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Authentication failed because the remote party sent a TLS alert: '112' (FF: SSL_ERROR_UNRECOGNIZED_NAME_ALERT)

• https://[2607:5300:0205:0200:0000:0000:0000:5e3f]/ 2607:5300:205:200::5e3f	-103		0.257	P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Authentication failed because the remote party sent a TLS alert: '112' (FF: SSL_ERROR_UNRECOGNIZED_NAME_ALERT)

7. Comments

	1. General Results, most used to calculate the result
A	name "grapheneos.social" is domain, public suffix is ".social", top-level-domain is ".social", top-level-domain-type is "generic", tld-manager is "United TLD Holdco Ltd.", num .social-domains preloaded: 136 (complete: 271405)
A	Good: All ip addresses are public addresses
A	Good: Minimal 2 ip addresses per domain name found: grapheneos.social has 2 different ip addresses (authoritative).
A	Good: Minimal 2 ip addresses per domain name found: www.grapheneos.social has 2 different ip addresses (authoritative).
A	Good: Ipv4 and Ipv6 addresses per domain name found: grapheneos.social has 1 ipv4, 1 ipv6 addresses
A	Good: Ipv4 and Ipv6 addresses per domain name found: www.grapheneos.social has 1 ipv4, 1 ipv6 addresses
A	Good: No asked Authoritative Name Server had a timeout
A	https://grapheneos.social/ 51.222.159.14			Good: Valid DANE - entry found: signed Data _443._tcp.grapheneos.social: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 5e41e70cf0af6198da8129d34a83696cd1edbbd36886cec5a4f04546c81c87c8 confirms the Certificate with the same value
A	https://grapheneos.social/ 2607:5300:205:200::5e3f			Good: Valid DANE - entry found: signed Data _443._tcp.grapheneos.social: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 5e41e70cf0af6198da8129d34a83696cd1edbbd36886cec5a4f04546c81c87c8 confirms the Certificate with the same value
A	https://51.222.159.14/ 51.222.159.14			Good: Valid DANE - entry found: signed Data _443._tcp.grapheneos.social: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 5e41e70cf0af6198da8129d34a83696cd1edbbd36886cec5a4f04546c81c87c8 confirms the Certificate with the same value
A	https://[2607:5300:0205:0200:0000:0000:0000:5e3f]/ 2607:5300:205:200::5e3f			Good: Valid DANE - entry found: signed Data _443._tcp.grapheneos.social: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 5e41e70cf0af6198da8129d34a83696cd1edbbd36886cec5a4f04546c81c87c8 confirms the Certificate with the same value
A	https://mta-sts.grapheneos.social/.well-known/mta-sts.txt 192.99.98.22			Good: Valid DANE - entry found: signed Data _443._tcp.grapheneos.social: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 5e41e70cf0af6198da8129d34a83696cd1edbbd36886cec5a4f04546c81c87c8 confirms the Certificate with the same value
A	https://mta-sts.grapheneos.social/.well-known/mta-sts.txt 2607:5300:205:200::472f			Good: Valid DANE - entry found: signed Data _443._tcp.grapheneos.social: CertUsage 3 (DANE-EE, Domain-issued certificate), Selector 1 (SPKI, SubjectPublicKeyInfo), Matching 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 5e41e70cf0af6198da8129d34a83696cd1edbbd36886cec5a4f04546c81c87c8 confirms the Certificate with the same value
A	Good: destination is https
A	Good - only one version with Http-Status 200
A	Good: one preferred version: non-www is preferred
A	Good: No cookie sent via http.
A	Good: HSTS has preload directive
A	Excellent: Domain is in the Google-Preload-List
A	Excellent: Domain is in the Mozilla/Firefox-Preload-List
A	HSTS-Preload-Status: Preloaded. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
A	Good: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
A	http://grapheneos.social/ 51.222.159.14	301	https://grapheneos.social/	Correct redirect http - https with the same domain name
A	http://grapheneos.social/ 2607:5300:205:200::5e3f	301	https://grapheneos.social/	Correct redirect http - https with the same domain name
A	http://www.grapheneos.social/ 51.222.159.14	301	https://www.grapheneos.social/	Correct redirect http - https with the same domain name
A	http://www.grapheneos.social/ 2607:5300:205:200::5e3f	301	https://www.grapheneos.social/	Correct redirect http - https with the same domain name
A	Good: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain grapheneos.social, 2 ip addresses.
A	Good: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain www.grapheneos.social, 2 ip addresses.
	Info: Checking the ip addresses of that domain name not exact one certificate found. So it's impossible to check if that domain requires Server Name Indication (SNI).: Domain grapheneos.social, 2 ip addresses.
	Info: Checking the ip addresses of that domain name not exact one certificate found. So it's impossible to check if that domain requires Server Name Indication (SNI).: Domain www.grapheneos.social, 2 ip addresses.
A	Good: _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Domainname: _mta-sts.grapheneos.social
A	Good: _mta-sts TXT record is valid.
A	Good: Subdomain mta-sts found: Subdomain-name: mta-sts.grapheneos.social, ip : 192.99.98.22
A	Good: Subdomain mta-sts found: Subdomain-name: mta-sts.grapheneos.social, ip : 2607:5300:205:200::472f
A	Good: Certificate of subdomain is valid. mta-sts.grapheneos.social, ip : 192.99.98.22
A	Good: Certificate of subdomain is valid. mta-sts.grapheneos.social, ip : 2607:5300:205:200::472f
A	Good: /.well-known/mta-sts.txt with http status 200 found. Complete path: https://mta-sts.grapheneos.social/.well-known/mta-sts.txt - ip : 192.99.98.22
A	Good: /.well-known/mta-sts.txt with http status 200 found. Complete path: https://mta-sts.grapheneos.social/.well-known/mta-sts.txt - ip : 2607:5300:205:200::472f
A	Good: mta-sts.txt has the required names "version", "mode", "max_age". mta-sts.grapheneos.social, ip : 192.99.98.22
A	Good: mta-sts.txt has the required names "version", "mode", "max_age". mta-sts.grapheneos.social, ip : 2607:5300:205:200::472f
A	Good: Minimal one mx definition found. mta-sts.grapheneos.social, ip : 192.99.98.22
A	Good: Minimal one mx definition found. mta-sts.grapheneos.social, ip : 2607:5300:205:200::472f
A	Excellent: Complete and valid MTA-STS found!
	2. Header-Checks
A	grapheneos.social 51.222.159.14	Content-Security-Policy		Ok: Header without syntax errors found: base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://grapheneos.social; img-src 'self' data: blob: https://grapheneos.social; style-src 'self' https://grapheneos.social 'nonce-yNcKWgX+mDBg30damJSKXQ=='; media-src 'self' data: https://grapheneos.social; manifest-src 'self' https://grapheneos.social; form-action 'none'; child-src 'self' blob: https://grapheneos.social; worker-src 'self' blob: https://grapheneos.social; connect-src 'self' data: blob: https://grapheneos.social wss://grapheneos.social; script-src 'self' https://grapheneos.social 'wasm-unsafe-eval'; frame-src 'self' https:
A				Good: default-src directive only with 'none' or 'self', additional sources are blocked.
A				Good: default-src without 'unsafe-inline' or 'unsave-eval'.
A				Good: form-action directive found. That reduces the risk sending data to unwanted domains. form-action is a navigation-directive, so default-src isn't used.
A				Good: frame-ancestors directive found. That limits pages who are allowed to use this page in a frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
A				Good: base-uri directive found. That limits the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A				Good: No object-src found, but the default-src used as fallback is defined and restricted.
A				Good: script-src without 'unsafe-inline' and 'unsafe-eval' found. That's the recommended configuration.
A				Good: script-src without * and a scheme found.
A				Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A				Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A				Ok: Nonce found.
A		X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
A		Referrer-Policy		Ok: Header without syntax errors found: same-origin
A		X-Frame-Options		Ok: Header without syntax errors found: DENY
B				Info: Header is deprecated. May not longer work in modern browsers. DENY. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A		X-Xss-Protection		Ok: Header without syntax errors found: 0
B				Info: Header is deprecated. May not longer work in modern browsers. 0
A	grapheneos.social 2607:5300:205:200::5e3f	Content-Security-Policy		Ok: Header without syntax errors found: base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://grapheneos.social; img-src 'self' data: blob: https://grapheneos.social; style-src 'self' https://grapheneos.social 'nonce-yNcKWgX+mDBg30damJSKXQ=='; media-src 'self' data: https://grapheneos.social; manifest-src 'self' https://grapheneos.social; form-action 'none'; child-src 'self' blob: https://grapheneos.social; worker-src 'self' blob: https://grapheneos.social; connect-src 'self' data: blob: https://grapheneos.social wss://grapheneos.social; script-src 'self' https://grapheneos.social 'wasm-unsafe-eval'; frame-src 'self' https:
A				Good: default-src directive only with 'none' or 'self', additional sources are blocked.
A				Good: default-src without 'unsafe-inline' or 'unsave-eval'.
A				Good: form-action directive found. That reduces the risk sending data to unwanted domains. form-action is a navigation-directive, so default-src isn't used.
A				Good: frame-ancestors directive found. That limits pages who are allowed to use this page in a frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
A				Good: base-uri directive found. That limits the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A				Good: No object-src found, but the default-src used as fallback is defined and restricted.
A				Good: script-src without 'unsafe-inline' and 'unsafe-eval' found. That's the recommended configuration.
A				Good: script-src without * and a scheme found.
A				Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A				Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A				Ok: Nonce found.
A		X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
A		Referrer-Policy		Ok: Header without syntax errors found: same-origin
A		X-Frame-Options		Ok: Header without syntax errors found: DENY
B				Info: Header is deprecated. May not longer work in modern browsers. DENY. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A		X-Xss-Protection		Ok: Header without syntax errors found: 0
B				Info: Header is deprecated. May not longer work in modern browsers. 0
F	grapheneos.social 51.222.159.14	Permissions-Policy		Critical: Missing Header:
B	grapheneos.social 51.222.159.14	Cross-Origin-Embedder-Policy		Info: Missing Header
B	grapheneos.social 51.222.159.14	Cross-Origin-Opener-Policy		Info: Missing Header
B	grapheneos.social 51.222.159.14	Cross-Origin-Resource-Policy		Info: Missing Header
F	grapheneos.social 2607:5300:205:200::5e3f	Permissions-Policy		Critical: Missing Header:
B	grapheneos.social 2607:5300:205:200::5e3f	Cross-Origin-Embedder-Policy		Info: Missing Header
B	grapheneos.social 2607:5300:205:200::5e3f	Cross-Origin-Opener-Policy		Info: Missing Header
B	grapheneos.social 2607:5300:205:200::5e3f	Cross-Origin-Resource-Policy		Info: Missing Header
F				Critical: Different combinations of domain names and ip addresses checked, Content-Security-Policy - Header with a nonce declaration sent: Different combinations domain + ip with the same nonce. Nonces must be unique!
	3. DNS- and NameServer - Checks
A	Info:: 2 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
A	Info:: 2 Queries complete, 2 with IPv6, 0 with IPv4.
A	Good: All DNS Queries done via IPv6.
A	Good: Some ip addresses of name servers found with the minimum of two DNS Queries. One to find the TLD-Zone, one to ask the TLD-Zone.ns1.grapheneos.social (185.187.152.9, 2a05:b0c4:1::8), ns2.grapheneos.social (198.251.90.93)
A	Good (1 - 3.0):: An average of 1.0 queries per domain name server required to find all ip addresses of all name servers.
A	Info:: 2 different Name Servers found: ns1.grapheneos.social, ns2.grapheneos.social, 2 Name Servers included in Delegation: ns1.grapheneos.social, ns2.grapheneos.social, 2 Name Servers included in 1 Zone definitions: ns1.grapheneos.social, ns2.grapheneos.social, 1 Name Servers listed in SOA.Primary: ns1.grapheneos.social.
A	Good: Only one SOA.Primary Name Server found.: ns1.grapheneos.social.
A	Good: SOA.Primary Name Server included in the delegation set.: ns1.grapheneos.social.
A	Good: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: ns1.grapheneos.social, ns2.grapheneos.social
A	Good: All Name Server Domain Names have a Public Suffix.
A	Good: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
A	Good: All Name Server ip addresses are public.
A	Good: Minimal 2 different name servers (public suffix and public ip address) found: 2 different Name Servers found
	Warning: All Name Servers have the same Top Level Domain / Public Suffix. If there is a problem with that Top Level Domain, your domain may be affected. Better: Use Name Servers with different top level domains.: 2 Name Servers, 1 Top Level Domain: social
	Warning: All Name Servers have the same domain name. If there is a problem with that domain name (or with the name servers of that domain name), your domain may be affected. Better: Use Name Servers with different domain names / different top level domains.: Only one domain name used: grapheneos.social
A	Good: Name servers with different Country locations found: 2 Name Servers, 3 Countries: GB, LU, US
A	Info: Ipv4-Subnet-list: 2 Name Servers, 2 different subnets (first Byte): 185., 198., 2 different subnets (first two Bytes): 185.187., 198.251., 2 different subnets (first three Bytes): 185.187.152., 198.251.90.
A	Excellent: Every Name Server IPv4-address starts with an unique Byte.
A	Info: IPv6-Subnet-list: 4 Name Servers with IPv6, 2 different subnets (first block): 2605:, 2a05:, 2 different subnets (first two blocks): 2605:6400:, 2a05:b0c4:, 4 different subnets (first three blocks): 2605:6400:0010:, 2605:6400:0020:, 2605:6400:0030:, 2a05:b0c4:0001:, 4 different subnets (first four blocks): 2605:6400:0010:102e:, 2605:6400:0020:1c8f:, 2605:6400:0030:ec25:, 2a05:b0c4:0001:0000:
A	Good: Name Server IPv6 addresses from different subnets found.
A	Good: Nameserver supports TCP connections: 6 good Nameserver
A	Good: Nameserver supports Echo Capitalization: 6 good Nameserver
A	Good: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 6 good Nameserver
A	Good: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 6 good Nameserver
A	Good: All SOA have the same Serial Number
A	Good: CAA entries found, creating certificate is limited: letsencrypt.org is allowed to create certificates
A	Good: CAA entries found, creating certificate is limited: mail is allowed to create certificates
A	Good: CAA entries found, creating certificate is limited: vmc is allowed to create certificates
	Warning: Unknown CAA found: mail isn't defined. Unknown entry. May be wrong written, may be not longer valid. May be a missing entry in this tool.
	Warning: Unknown CAA found: vmc isn't defined. Unknown entry. May be wrong written, may be not longer valid. May be a missing entry in this tool.
	4. Content- and Performance-critical Checks
A	Good: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
A	Good: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
A	Good: Every https result with status 200 has a minified Html-Content with a quota lower then 110 %.
A	Good: Every https connection via port 443 supports the http/2 protocol via ALPN.
	https://grapheneos.social/ 51.222.159.14	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 2 script elements without defer/async.
	https://grapheneos.social/ 2607:5300:205:200::5e3f	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 2 script elements without defer/async.
A	Good: All CSS / JavaScript files are sent compressed (gzip, deflate, br checked). That reduces the content of the files. 10 external CSS / JavaScript files found
A	Good: All svg-Images greater 1024 Bytes without internal compression are compressed. Svg is an Xml-Application, so Compression reduces the size of the file. 2 images (type image/svg+xml, image/x-icon, image/vnd.microsoft.icon) found with compression.
	Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 0 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 2 with Cache-Control max-age too short (minimum 7 days), 10 with Cache-Control long enough, 12 complete.
A	Good: All images are sent with a long Cache-Control header (minimum 7 days). So the browser can reuse these files, no download is required. 2 image files with long Cache-Control max-age found
A	Good: All checked attribute values are enclosed in quotation marks (" or ').
A	Good: All img-elements have a valid alt-attribute.: 2 img-elements found.
A	Good: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
A	Info: Different Server-Headers found
A	Duration: 443317 milliseconds, 443.317 seconds

8. Connections

Domain

Port

Cert.

Protocol

KeyExchange

Strength

Cipher

Strength

HashAlgorithm

OCSP stapling

Domain/KeyExchange

IP/Strength

Port/Cipher

Cert./Strength

Protocol/HashAlgorithm

OCSP stapling

grapheneos.social

51.222.159.14

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

grapheneos.social

51.222.159.14

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1
	2	CN=E5, O=Let's Encrypt, C=US

grapheneos.social

2607:5300:205:200::5e3f

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

grapheneos.social

2607:5300:205:200::5e3f

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1
	2	CN=E5, O=Let's Encrypt, C=US

www.grapheneos.social

51.222.159.14

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

www.grapheneos.social

51.222.159.14

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1
	2	CN=E5, O=Let's Encrypt, C=US

www.grapheneos.social

2607:5300:205:200::5e3f

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

www.grapheneos.social

2607:5300:205:200::5e3f

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1
	2	CN=E5, O=Let's Encrypt, C=US

mta-sts.grapheneos.social

192.99.98.22

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

mta-sts.grapheneos.social

192.99.98.22

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1
	2	CN=E5, O=Let's Encrypt, C=US

mta-sts.grapheneos.social

2607:5300:205:200::472f

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

mta-sts.grapheneos.social

2607:5300:205:200::472f

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1
	2	CN=E5, O=Let's Encrypt, C=US

9. Certificates

05.05.2025

03.08.2025
344 days expired

grapheneos.social, www.grapheneos.social - 2 entries

05.05.2025

03.08.2025
344 days expired

grapheneos.social, www.grapheneos.social - 2 entries

Keyalgorithm	EC Public Key (256 bit, prime256v1)
Signatur:	ECDSA SHA384
Serial Number:	060E7249FE03A8E813AD51E5845FFCD5E00A
Thumbprint:	AAC80429AA19E0F6173BC10F32D20346081A4C89
SHA256 / Certificate:	t/Ph7lXbl+MjzEyuvSZexgsA2weylBRiYTFt9oWZrHY=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	5e41e70cf0af6198da8129d34a83696cd1edbbd36886cec5a4f04546c81c87c8
SHA256 hex / Subject Public Key Information (SPKI):	5e41e70cf0af6198da8129d34a83696cd1edbbd36886cec5a4f04546c81c87c8 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=E5, O=Let's Encrypt, C=US

13.03.2024

13.03.2027
expires in 243 days

CN=E5, O=Let's Encrypt, C=US

13.03.2024

13.03.2027
expires in 243 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00838F6C63CEB1398C6206628315C9FDDE
Thumbprint:	5F28D9C589EE4BF31A11B78C72B8D13F079DDC45
SHA256 / Certificate:	Xf2zzzGybyPYfAnzoM72QvZAaan7fP4pJwu13A8eFrs=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	3586d4ecf070578cbd27aedce20b964e48bc149faeb9dad72f46b857869172b8
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3248 days

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3248 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	008210CFB0D240E3594463E0BB63828B00
Thumbprint:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:	lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):	96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

11.05.2025

09.08.2025
338 days expired

mail.grapheneos.net, mail.grapheneos.org, mta-sts.attestation.app, mta-sts.discuss.grapheneos.org, mta-sts.grapheneos.app, mta-sts.grapheneos.ca, mta-sts.grapheneos.com, mta-sts.grapheneos.dev, mta-sts.grapheneos.foundation, mta-sts.grapheneos.info, mta-sts.grapheneos.net, mta-sts.grapheneos.network, mta-sts.grapheneos.online, mta-sts.grapheneos.org, mta-sts.grapheneos.ovh, mta-sts.grapheneos.page, mta-sts.grapheneos.social, mta-sts.mail.grapheneos.org, mta-sts.matrix.grapheneos.org, mta-sts.seamlessupdate.app, mta-sts.vanadium.app - 21 entries

11.05.2025

09.08.2025
338 days expired

Keyalgorithm	EC Public Key (256 bit, prime256v1)
Signatur:	ECDSA SHA384
Serial Number:	050F0CF6089F1501682BFE1EE0D6C437FFCA
Thumbprint:	177EE5F362E75A45B1B477319DF3F062701F1826
SHA256 / Certificate:	cAxe7tH9Z706bM0JUta9H4kckGhZhNSH73SJXSC3w2o=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	b8c9e403ed081e57cd43c8a924b8ce6311431640f4daff1e510cbe3b0c20f4cf
SHA256 hex / Subject Public Key Information (SPKI):	b8c9e403ed081e57cd43c8a924b8ce6311431640f4daff1e510cbe3b0c20f4cf (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=E5, O=Let's Encrypt, C=US

13.03.2024

13.03.2027
expires in 243 days

CN=E5, O=Let's Encrypt, C=US

13.03.2024

13.03.2027
expires in 243 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00838F6C63CEB1398C6206628315C9FDDE
Thumbprint:	5F28D9C589EE4BF31A11B78C72B8D13F079DDC45
SHA256 / Certificate:	Xf2zzzGybyPYfAnzoM72QvZAaan7fP4pJwu13A8eFrs=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	3586d4ecf070578cbd27aedce20b964e48bc149faeb9dad72f46b857869172b8
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3248 days

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3248 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	008210CFB0D240E3594463E0BB63828B00
Thumbprint:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:	lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):	96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

No CertSpotter - CT-Log entries found

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

No CRT - CT-Log entries found

11. Html-Content - Entries

Summary

							Subresource Integrity (SRI)
Domainname	HtmlElement	rel/property	∑	∑ size	∑ problems	∑ int.	∑ ext.	∑ Origin poss.	∑ SRI ParseErrors	∑ SRI valid	∑ SRI missing
https://grapheneos.social/ 51.222.159.14	a		1		0			0	0	0
	img		1	1,117 Bytes	0	1	0	0	0	0
	link	stylesheet	4	74,405 Bytes	0	4	0	0	0	3
	link	other	17	138,815 Bytes	0	16	0	0	0	1
	meta	og	8	24,311 Bytes	0	2	0	0	0	0
	meta	other	9		0			0	0	0
	script		2	398,327 Bytes	0	2	0	0	0	2
https://grapheneos.social/ 2607:5300:205:200::5e3f	a		1		0			0	0	0
	img		1	1,117 Bytes	0	1	0	0	0	0
	link	stylesheet	4	74,405 Bytes	0	4	0	0	0	3
	link	other	17	138,815 Bytes	0	16	0	0	0	1
	meta	og	8	24,311 Bytes	0	2	0	0	0	0
	meta	other	9		0			0	0	0
	script		2	398,327 Bytes	0	2	0	0	0	2

Details (currently limited to 500 rows - some problems with spam users)

Domainname	Html-Element	name/equiv/ property/rel	href/src/content	HttpStatus	∑
https://grapheneos.social/ 51.222.159.14	a		https://joinmastodon.org/apps			1	ok
							ok


	img	src	/packs/media/images/logo-d4b5dc90fd3e117d141ae7053b157f58.svg		200	1	ok
	alt: Mastodon			image/svg+xml missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			Compression (br): 1117/2483 Bytes
	ETag: "681a1bc5-45d"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-1024x1024-db6849588b44f525363c37b65ef0ac66.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 77950 Bytes
	ETag: "681a1bc4-1307e"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-114x114-211e68807b8d15707666a8d326d338b1.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 4123 Bytes
	ETag: "681a1bc4-101b"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-120x120-4c4e647d758bf1b2f47a53e2165a01d2.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 4366 Bytes
	ETag: "681a1bc4-110e"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-144x144-ff3110f7772743bdd0c1c47fb7b2d4e0.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 5810 Bytes
	ETag: "681a1bc4-16b2"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-152x152-b12cbb1baaf4a6111d0efd391fd829c9.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 6177 Bytes
	ETag: "681a1bc4-1821"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-167x167-6f21a68f6a05a8b5cf25b1729e553728.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 7041 Bytes
	ETag: "681a1bc4-1b81"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-180x180-a75559a0af48064c1b7c71b81f3bf7c6.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 7709 Bytes
	ETag: "681a1bc4-1e1d"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-57x57-c9dca808280860c51d0357f6a3350f4d.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 1673 Bytes
	ETag: "681a1bc4-689"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-60x60-bb247db195d9ee9d8c687b2b048508d9.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 1761 Bytes
	ETag: "681a1bc4-6e1"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-72x72-799d90b81f5b28cea7355a0c0b356381.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 2262 Bytes
	ETag: "681a1bc4-8d6"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-76x76-015d73d770413d121873193153ae4ab5.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 2360 Bytes
	ETag: "681a1bc4-938"

	link	icon	/packs/media/icons/favicon-16x16-c58fdef40ced38d582d5b8eed9d15c5a.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 588 Bytes
	ETag: "681a1bc4-24c"

	link	icon	/packs/media/icons/favicon-32x32-249409a6d9f300112c51af514d863112.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 1114 Bytes
	ETag: "681a1bc4-45a"

	link	icon	/packs/media/icons/favicon-48x48-c1197e9664ee6476d2715a1c4293bf61.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 1680 Bytes
	ETag: "681a1bc4-690"

	link	manifest	/manifest			1	ok
							ok


	link	mask-icon	/packs/media/images/logo-symbol-icon-de9e68dc49b19eb5cd142d3316f9e95e.svg		200	1	ok
				image/svg+xml missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			Compression (br): 1005/2328 Bytes
	ETag: "681a1bc5-3ed"

	link	preload	/packs/js/locale/en-json-8e2bb01c3724d13b0392.chunk.js		200	1	ok
				text/javascript; charset=utf-8 missing X-Content-Type-Options nosniff			ok
				Compression (br): 13196/58378 Bytes
	ETag: "681a1bc5-338c"

	link	stylesheet	/packs/css/default-26e42884.chunk.css		200	1	ok
				text/css; charset=utf-8 missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 - with long duration found.			Compression (br): 36731/278777 Bytes
	ETag: "681a1bc5-8f7b"
	SRI found. Integrity: sha256-lTwlzlllM1NS52nZrbsuzeeRqSe98Lm5GBx2gvdp2J4= crossorigin: anonymous				No SRI Parse error		valid

	link	stylesheet	/packs/css/inert-15d4bcde.chunk.css		200	1	ok
				text/css; charset=utf-8 missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 - with long duration found.			122 Bytes
	ETag: "681a1bc5-7a"
	SRI found. Integrity: sha256-zxIuHQ6BvmdNRoKcG10VBurdlSBQjQe3G7O7ViYyo1E= crossorigin: anonymous				No SRI Parse error		valid

	link	stylesheet	/packs/css/mastodon-light-e75bc137.chunk.css		200	1	ok
				text/css; charset=utf-8 missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 - with long duration found.			Compression (br): 37552/289627 Bytes
	ETag: "681a1bc5-92b0"
	SRI found. Integrity: sha256-RsWBUSPyIj5u5hVXGNK6bALEEEE50KNDnwSJyxXSRDY= crossorigin: anonymous				No SRI Parse error		valid

	link	stylesheet	https://grapheneos.social/custom.css		200	1	ok
				text/css; charset=utf-8 X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=180 - max-age too short.			0 Bytes
	local SRI possible, possible hash-values: sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU= sha384-OLBgp1GsljhM2TJ+sbHjaiH9txEUvgdDTAzHv2P24donTt6/529l+9Ua0vFImLlb sha512-z4PhNX7vuL3xVChQ1m2AB9Yg5AULVxXcg/SpIdNs6c5H0NE8XYXysP+DGNKHfuwvY7kxvUdBeoGlODJ6+SfaPg== <link rel="stylesheet" href="https://grapheneos.social/custom.css" crossorigin="anonymous" integrity="sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=" />

	meta	charset	utf-8			1	ok
							ok


	meta	og:description	GrapheneOS server for official project accounts and project members.			1	ok
							ok


	meta	og:image	https://grapheneos.social/system/site_uploads/files/000/000/002/@1x/42ead1439dbbdc50.png		200	1	ok
				image/png X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=2419200, immutable with long duration found.			No Compression - 14136 Bytes
	ETag: "638815ef-3738"

	meta	og:image:height	2304			1	ok
							ok


	meta	og:image:width	4096			1	ok
							ok


	meta	og:site_name	Mastodon hosted on grapheneos.social			1	ok
							ok


	meta	og:title	GrapheneOS Mastodon			1	ok
							ok


	meta	og:type	website			1	ok
							ok


	meta	og:url	https://grapheneos.social/		200	1	ok
				text/html; charset=utf-8 X-Content-Type-Options nosniff found			ok
				10175 Bytes
	ETag: W/"c43dd182c4b8d33eab45a576555ce310"

	meta	twitter:card	summary_large_image			1	ok
							ok


	meta	applicationServerKey	BKZBJOkLUWf1igCpSPmFkIsG4Ab0pfhIs_md40W04x6KWGzcrL-GFE_Wp9XsBhWCUDobOcK2bF35SkIu_4i66D0=			1	ok
							ok


	meta	description	GrapheneOS server for official project accounts and project members.			1	ok
							ok


	meta	mobile-web-app-capable	yes			1	ok
							ok


	meta	style-nonce	yNcKWgX+mDBg30damJSKXQ==			1	ok
							ok


	meta	theme-color	#181820			1	ok
							ok


	meta	theme-color	#ffffff			1	ok
							ok


	meta	viewport	width=device-width, initial-scale=1			1	ok
							ok


	script	src	/packs/js/application-6f544f27a1d5db5c17e8.chunk.js		200	1	ok
	Missing defer / async attribute.			text/javascript; charset=utf-8 missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 - with long duration found.			Compression (br): 22332/89914 Bytes
	ETag: "681a1bc5-573c"
	SRI found. Integrity: sha256-yPptA9gcrGH4T6bzhPLnhJYH8PVsS14qclXbFpr7UAE= crossorigin: anonymous				No SRI Parse error		valid

	script	src	/packs/js/common-e12dbd548c5066c79814.js		200	1	ok
	Missing defer / async attribute.			text/javascript; charset=utf-8 missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 - with long duration found.			Compression (br): 375995/1792160 Bytes
	ETag: "681a1bc5-5bcbb"
	SRI found. Integrity: sha256-XQh+29PcTKvh1J7TAwCUPTeiPVDRXDwumu1llqvXEqk= crossorigin: anonymous				No SRI Parse error		valid

2607:5300:205:200::5e3f	a		https://joinmastodon.org/apps			1	ok
							ok


	img	src	/packs/media/images/logo-d4b5dc90fd3e117d141ae7053b157f58.svg		200	1	ok
	alt: Mastodon			image/svg+xml missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			Compression (br): 1117/2483 Bytes
	ETag: "681a1bc5-45d"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-1024x1024-db6849588b44f525363c37b65ef0ac66.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 77950 Bytes
	ETag: "681a1bc4-1307e"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-114x114-211e68807b8d15707666a8d326d338b1.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 4123 Bytes
	ETag: "681a1bc4-101b"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-120x120-4c4e647d758bf1b2f47a53e2165a01d2.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 4366 Bytes
	ETag: "681a1bc4-110e"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-144x144-ff3110f7772743bdd0c1c47fb7b2d4e0.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 5810 Bytes
	ETag: "681a1bc4-16b2"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-152x152-b12cbb1baaf4a6111d0efd391fd829c9.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 6177 Bytes
	ETag: "681a1bc4-1821"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-167x167-6f21a68f6a05a8b5cf25b1729e553728.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 7041 Bytes
	ETag: "681a1bc4-1b81"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-180x180-a75559a0af48064c1b7c71b81f3bf7c6.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 7709 Bytes
	ETag: "681a1bc4-1e1d"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-57x57-c9dca808280860c51d0357f6a3350f4d.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 1673 Bytes
	ETag: "681a1bc4-689"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-60x60-bb247db195d9ee9d8c687b2b048508d9.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 1761 Bytes
	ETag: "681a1bc4-6e1"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-72x72-799d90b81f5b28cea7355a0c0b356381.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 2262 Bytes
	ETag: "681a1bc4-8d6"

	link	apple-touch-icon	/packs/media/icons/apple-touch-icon-76x76-015d73d770413d121873193153ae4ab5.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 2360 Bytes
	ETag: "681a1bc4-938"

	link	icon	/packs/media/icons/favicon-16x16-c58fdef40ced38d582d5b8eed9d15c5a.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 588 Bytes
	ETag: "681a1bc4-24c"

	link	icon	/packs/media/icons/favicon-32x32-249409a6d9f300112c51af514d863112.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 1114 Bytes
	ETag: "681a1bc4-45a"

	link	icon	/packs/media/icons/favicon-48x48-c1197e9664ee6476d2715a1c4293bf61.png		200	1	ok
				image/png missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			No Compression - 1680 Bytes
	ETag: "681a1bc4-690"

	link	manifest	/manifest			1	ok
							ok


	link	mask-icon	/packs/media/images/logo-symbol-icon-de9e68dc49b19eb5cd142d3316f9e95e.svg		200	1	ok
				image/svg+xml missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 with long duration found.			Compression (br): 1005/2328 Bytes
	ETag: "681a1bc5-3ed"

	link	preload	/packs/js/locale/en-json-8e2bb01c3724d13b0392.chunk.js		200	1	ok
				text/javascript; charset=utf-8 missing X-Content-Type-Options nosniff			ok
				Compression (br): 13196/58378 Bytes
	ETag: "681a1bc5-338c"

	link	stylesheet	/packs/css/default-26e42884.chunk.css		200	1	ok
				text/css; charset=utf-8 missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 - with long duration found.			Compression (br): 36731/278777 Bytes
	ETag: "681a1bc5-8f7b"
	SRI found. Integrity: sha256-lTwlzlllM1NS52nZrbsuzeeRqSe98Lm5GBx2gvdp2J4= crossorigin: anonymous				No SRI Parse error		valid

	link	stylesheet	/packs/css/inert-15d4bcde.chunk.css		200	1	ok
				text/css; charset=utf-8 missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 - with long duration found.			122 Bytes
	ETag: "681a1bc5-7a"
	SRI found. Integrity: sha256-zxIuHQ6BvmdNRoKcG10VBurdlSBQjQe3G7O7ViYyo1E= crossorigin: anonymous				No SRI Parse error		valid

	link	stylesheet	/packs/css/mastodon-light-e75bc137.chunk.css		200	1	ok
				text/css; charset=utf-8 missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 - with long duration found.			Compression (br): 37552/289627 Bytes
	ETag: "681a1bc5-92b0"
	SRI found. Integrity: sha256-RsWBUSPyIj5u5hVXGNK6bALEEEE50KNDnwSJyxXSRDY= crossorigin: anonymous				No SRI Parse error		valid

	link	stylesheet	https://grapheneos.social/custom.css		200	1	ok
				text/css; charset=utf-8 X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=180 - max-age too short.			0 Bytes
	local SRI possible, possible hash-values: sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU= sha384-OLBgp1GsljhM2TJ+sbHjaiH9txEUvgdDTAzHv2P24donTt6/529l+9Ua0vFImLlb sha512-z4PhNX7vuL3xVChQ1m2AB9Yg5AULVxXcg/SpIdNs6c5H0NE8XYXysP+DGNKHfuwvY7kxvUdBeoGlODJ6+SfaPg== <link rel="stylesheet" href="https://grapheneos.social/custom.css" crossorigin="anonymous" integrity="sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=" />

	meta	charset	utf-8			1	ok
							ok


	meta	og:description	GrapheneOS server for official project accounts and project members.			1	ok
							ok


	meta	og:image	https://grapheneos.social/system/site_uploads/files/000/000/002/@1x/42ead1439dbbdc50.png		200	1	ok
				image/png X-Content-Type-Options nosniff found			ok
	Cache-Control: public, max-age=2419200, immutable with long duration found.			No Compression - 14136 Bytes
	ETag: "638815ef-3738"

	meta	og:image:height	2304			1	ok
							ok


	meta	og:image:width	4096			1	ok
							ok


	meta	og:site_name	Mastodon hosted on grapheneos.social			1	ok
							ok


	meta	og:title	GrapheneOS Mastodon			1	ok
							ok


	meta	og:type	website			1	ok
							ok


	meta	og:url	https://grapheneos.social/		200	1	ok
				text/html; charset=utf-8 X-Content-Type-Options nosniff found			ok
				10175 Bytes
	ETag: W/"c43dd182c4b8d33eab45a576555ce310"

	meta	twitter:card	summary_large_image			1	ok
							ok


	meta	applicationServerKey	BKZBJOkLUWf1igCpSPmFkIsG4Ab0pfhIs_md40W04x6KWGzcrL-GFE_Wp9XsBhWCUDobOcK2bF35SkIu_4i66D0=			1	ok
							ok


	meta	description	GrapheneOS server for official project accounts and project members.			1	ok
							ok


	meta	mobile-web-app-capable	yes			1	ok
							ok


	meta	style-nonce	yNcKWgX+mDBg30damJSKXQ==			1	ok
							ok


	meta	theme-color	#181820			1	ok
							ok


	meta	theme-color	#ffffff			1	ok
							ok


	meta	viewport	width=device-width, initial-scale=1			1	ok
							ok


	script	src	/packs/js/application-6f544f27a1d5db5c17e8.chunk.js		200	1	ok
	Missing defer / async attribute.			text/javascript; charset=utf-8 missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 - with long duration found.			Compression (br): 22332/89914 Bytes
	ETag: "681a1bc5-573c"
	SRI found. Integrity: sha256-yPptA9gcrGH4T6bzhPLnhJYH8PVsS14qclXbFpr7UAE= crossorigin: anonymous				No SRI Parse error		valid

	script	src	/packs/js/common-e12dbd548c5066c79814.js		200	1	ok
	Missing defer / async attribute.			text/javascript; charset=utf-8 missing X-Content-Type-Options nosniff			ok
	Cache-Control: public, must-revalidate, max-age=2419200 - with long duration found.			Compression (br): 375995/1792160 Bytes
	ETag: "681a1bc5-5bcbb"
	SRI found. Integrity: sha256-XQh+29PcTKvh1J7TAwCUPTeiPVDRXDwumu1llqvXEqk= crossorigin: anonymous				No SRI Parse error		valid

12. Html-Parsing via https://validator.w3.org/nu/

	Type	Message	num found
Url used (first standard-https-result with http status 200): https://grapheneos.social/

Summary
	Good: No non-document-errors
	1 errors
	0 warnings
1.	error	Element `stop` is missing required attribute `offset`.	1
Details
	Type	Message + Sample
1	error	Element `stop` is missing required attribute `offset`.
		From line 67, column 1 to line 67, column 27
		ceOnUse"> <stop stop-color="#6364FF"></stop

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: ns1.grapheneos.social, ns2.grapheneos.social

QNr.	Domain	Type	NS used
1	social	NS	c.root-servers.net (2001:500:2::c)
	Answer: v0n0.nic.social, v0n1.nic.social, v0n2.nic.social, v0n3.nic.social, v2n0.nic.social, v2n1.nic.social
2	ns1.grapheneos.social: 185.187.152.9, 2a05:b0c4:1::8	NS	v0n0.nic.social (2a01:8840:16::41)
	Answer: ns2.grapheneos.social 198.251.90.93

14. CAA - Entries

Domainname	flag	Name	Value	∑ Queries
www.grapheneos.social	0		no CAA entry found	1
grapheneos.social	5	issue	letsencrypt.org; validationmethods=http-01; accounturi=https://acme-staging-v02.api.letsencrypt.org/acme/acct/77600664	1
	5	issue	letsencrypt.org; validationmethods=http-01; accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/843621317	1
	9	issue	mail;	1
	5	iodef	mailto:caa@grapheneos.org	1
	8	issue	vmc;	1
social	0		no CAA entry found	1

15. TXT - Entries

Domainname	TXT Entry	Status	∑ Queries
grapheneos.social	facebook-domain-verification=nn8qfg6l9xhnqkkizdgn97taizy6hj	ok	1
grapheneos.social	google-site-verification=1udi6RI56KjPtFGO38lCQImhEmY6XFxX1hVsdEK4_gw	ok	1
grapheneos.social	v=spf1 a:mail.grapheneos.org -all	ok	1
grapheneos.social	yandex-verification: ec33ee307706436f	ok	1
www.grapheneos.social	v=spf1 -all	ok	1
_acme-challenge.grapheneos.social		Name Error - The domain name does not exist	1
_acme-challenge.www.grapheneos.social		Name Error - The domain name does not exist	1
_acme-challenge.grapheneos.social.grapheneos.social		Name Error - The domain name does not exist	1
_acme-challenge.www.grapheneos.social.grapheneos.social		Name Error - The domain name does not exist	1
_acme-challenge.www.grapheneos.social.www.grapheneos.social		Name Error - The domain name does not exist	1

16. DomainService - Entries

Type		Domain	Pref	Value	DNS-error	num Answers	Status
MX		grapheneos.social	0	mail.grapheneos.org	0	2	ok
	A			192.99.98.22	0	1	ok
	AAAA			2607:5300:205:200::472f	0	1	ok
	CNAME				0	0	ok
MX		grapheneos.social	10	mail.grapheneos.net	0	2	ok
	A			192.99.98.22	0	1	ok
	AAAA			2607:5300:205:200::472f	0	1	ok
	CNAME				0	0	ok
MX		www.grapheneos.social	0		0	1	ok
_mta-sts	TXT	_mta-sts.grapheneos.social		v=STSv1; id=2023062500			ok
	A	mta-sts.grapheneos.social		192.99.98.22			ok
	mta-sts.txt file	Content of https://mta-sts.grapheneos.social/.well-known/mta-sts.txt - see RFC 8461			text/plain; charset=utf-8		ok
				version: STSv1			ok
				mode: enforce			ok
				mx: mail.grapheneos.org			ok
				mx: mail.grapheneos.net			ok
				max_age: 31557600			ok
	AAAA	mta-sts.grapheneos.social		2607:5300:205:200::472f			ok
	mta-sts.txt file	Content of https://mta-sts.grapheneos.social/.well-known/mta-sts.txt - see RFC 8461			text/plain; charset=utf-8		ok
				version: STSv1			ok
				mode: enforce			ok
				mx: mail.grapheneos.org			ok
				mx: mail.grapheneos.net			ok
				max_age: 31557600			ok
SMTP-TLS Reporting	TXT	_smtp._tls.grapheneos.social		v=TLSRPTv1; rua=mailto:tls-rpt@grapheneos.social			ok
SPF	TXT	grapheneos.social		v=spf1 a:mail.grapheneos.org -all			ok
	A	mail.grapheneos.org		192.99.98.22			ok
	AAAA	mail.grapheneos.org		2607:5300:205:200::472f			ok
_dmarc	TXT	_dmarc.grapheneos.social		v=DMARC1; p=reject; adkim=s; aspf=s; fo=1; rua=mailto:dmarc@grapheneos.social; ruf=mailto:dmarc@grapheneos.social			ok
SSHFP		grapheneos.social		079A217E085877EA780D77A0BF0CD4EF226B4B27B8F8B954EE7821F2A1CBAF8C Algorithmus Ed25519 (4), FP-Type SHA-256 (2)	0	1	ok
SSHFP		www.grapheneos.social		0000000000000000000000000000000000000000000000000000000000000000 Algorithmus Ed25519 (4), FP-Type SHA-256 (2)	0	1	ok

17. Cipher Suites

Summary
Domain	IP	Port	num Ciphers	time	Std.Protocol	Forward Secrecy
grapheneos.social	51.222.159.14	443	3 Ciphers	62.82 sec		0 without, 3 FS	100.00 %
grapheneos.social	2607:5300:205:200::5e3f	443	3 Ciphers	55.55 sec		0 without, 3 FS	100.00 %
www.grapheneos.social	51.222.159.14	443	3 Ciphers	62.93 sec		0 without, 3 FS	100.00 %
www.grapheneos.social	2607:5300:205:200::5e3f	443	3 Ciphers	55.30 sec		0 without, 3 FS	100.00 %
Complete		4	12 Ciphers 3.00 Ciphers/Check	236.61 sec	59.15 sec/Check	0 without, 12 FS	100.00 %

Details
Domain	IP	Port	Cipher (OpenSsl / IANA)
grapheneos.social	51.222.159.14	443	ECDHE-ECDSA-CHACHA20-POLY1305		(Recommended)	TLSv1.2	0xCC,0xA9	FS
3 Ciphers, 62.82 sec			TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
			ECDH		ECDSA	CHACHA20/POLY1305(256)	AEAD
			ECDHE-ECDSA-AES256-GCM-SHA384		(Recommended)	TLSv1.2	0xC0,0x2C	FS
			TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
			ECDH		ECDSA	AESGCM(256)	AEAD
			ECDHE-ECDSA-AES128-GCM-SHA256		(Recommended)	TLSv1.2	0xC0,0x2B	FS
			TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
			ECDH		ECDSA	AESGCM(128)	AEAD
	2607:5300:205:200::5e3f	443	ECDHE-ECDSA-CHACHA20-POLY1305		(Recommended)	TLSv1.2	0xCC,0xA9	FS
3 Ciphers, 55.55 sec			TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
			ECDH		ECDSA	CHACHA20/POLY1305(256)	AEAD
			ECDHE-ECDSA-AES256-GCM-SHA384		(Recommended)	TLSv1.2	0xC0,0x2C	FS
			TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
			ECDH		ECDSA	AESGCM(256)	AEAD
			ECDHE-ECDSA-AES128-GCM-SHA256		(Recommended)	TLSv1.2	0xC0,0x2B	FS
			TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
			ECDH		ECDSA	AESGCM(128)	AEAD
www.grapheneos.social	51.222.159.14	443	ECDHE-ECDSA-CHACHA20-POLY1305		(Recommended)	TLSv1.2	0xCC,0xA9	FS
3 Ciphers, 62.93 sec			TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
			ECDH		ECDSA	CHACHA20/POLY1305(256)	AEAD
			ECDHE-ECDSA-AES256-GCM-SHA384		(Recommended)	TLSv1.2	0xC0,0x2C	FS
			TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
			ECDH		ECDSA	AESGCM(256)	AEAD
			ECDHE-ECDSA-AES128-GCM-SHA256		(Recommended)	TLSv1.2	0xC0,0x2B	FS
			TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
			ECDH		ECDSA	AESGCM(128)	AEAD
	2607:5300:205:200::5e3f	443	ECDHE-ECDSA-CHACHA20-POLY1305		(Recommended)	TLSv1.2	0xCC,0xA9	FS
3 Ciphers, 55.30 sec			TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
			ECDH		ECDSA	CHACHA20/POLY1305(256)	AEAD
			ECDHE-ECDSA-AES256-GCM-SHA384		(Recommended)	TLSv1.2	0xC0,0x2C	FS
			TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
			ECDH		ECDSA	AESGCM(256)	AEAD
			ECDHE-ECDSA-AES128-GCM-SHA256		(Recommended)	TLSv1.2	0xC0,0x2B	FS
			TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
			ECDH		ECDSA	AESGCM(128)	AEAD

18. Portchecks

Domain	IP	Port	Description	Result	Answer
grapheneos.social	51.222.159.14	21	FTP

grapheneos.social	51.222.159.14	21	FTP
grapheneos.social	51.222.159.14	22	SSH	open
SSH-2.0-OpenSSH_10.0
grapheneos.social	51.222.159.14	22	SSH	open	SSH-2.0-OpenSSH_10.0	Good: SSH with DNS SSHFP Record found
grapheneos.social	51.222.159.14	25	SMTP

grapheneos.social	51.222.159.14	25	SMTP
grapheneos.social	51.222.159.14	53	DNS

grapheneos.social	51.222.159.14	53	DNS
grapheneos.social	51.222.159.14	110	POP3

grapheneos.social	51.222.159.14	110	POP3
grapheneos.social	51.222.159.14	143	IMAP

grapheneos.social	51.222.159.14	143	IMAP
grapheneos.social	51.222.159.14	465	SMTP (encrypted)

grapheneos.social	51.222.159.14	465	SMTP (encrypted)
grapheneos.social	51.222.159.14	587	SMTP (encrypted, submission)

grapheneos.social	51.222.159.14	587	SMTP (encrypted, submission)
grapheneos.social	51.222.159.14	993	IMAP (encrypted)

grapheneos.social	51.222.159.14	993	IMAP (encrypted)
grapheneos.social	51.222.159.14	995	POP3 (encrypted)

grapheneos.social	51.222.159.14	995	POP3 (encrypted)
grapheneos.social	51.222.159.14	1433	MS SQL

grapheneos.social	51.222.159.14	1433	MS SQL
grapheneos.social	51.222.159.14	2082	cPanel (http)

grapheneos.social	51.222.159.14	2082	cPanel (http)
grapheneos.social	51.222.159.14	2083	cPanel (https)

grapheneos.social	51.222.159.14	2083	cPanel (https)
grapheneos.social	51.222.159.14	2086	WHM (http)

grapheneos.social	51.222.159.14	2086	WHM (http)
grapheneos.social	51.222.159.14	2087	WHM (https)

grapheneos.social	51.222.159.14	2087	WHM (https)
grapheneos.social	51.222.159.14	2089	cPanel Licensing

grapheneos.social	51.222.159.14	2089	cPanel Licensing
grapheneos.social	51.222.159.14	2095	cPanel Webmail (http)

grapheneos.social	51.222.159.14	2095	cPanel Webmail (http)
grapheneos.social	51.222.159.14	2096	cPanel Webmail (https)

grapheneos.social	51.222.159.14	2096	cPanel Webmail (https)
grapheneos.social	51.222.159.14	2222	DirectAdmin (http)

grapheneos.social	51.222.159.14	2222	DirectAdmin (http)
grapheneos.social	51.222.159.14	2222	DirectAdmin (https)

grapheneos.social	51.222.159.14	2222	DirectAdmin (https)
grapheneos.social	51.222.159.14	3306	mySql

grapheneos.social	51.222.159.14	3306	mySql
grapheneos.social	51.222.159.14	5224	Plesk Licensing

grapheneos.social	51.222.159.14	5224	Plesk Licensing
grapheneos.social	51.222.159.14	5432	PostgreSQL

grapheneos.social	51.222.159.14	5432	PostgreSQL
grapheneos.social	51.222.159.14	8080	Ookla Speedtest (http)

grapheneos.social	51.222.159.14	8080	Ookla Speedtest (http)
grapheneos.social	51.222.159.14	8080	Ookla Speedtest (https)

grapheneos.social	51.222.159.14	8080	Ookla Speedtest (https)
grapheneos.social	51.222.159.14	8083	VestaCP http

grapheneos.social	51.222.159.14	8083	VestaCP http
grapheneos.social	51.222.159.14	8083	VestaCP https

grapheneos.social	51.222.159.14	8083	VestaCP https
grapheneos.social	51.222.159.14	8443	Plesk Administration (https)

grapheneos.social	51.222.159.14	8443	Plesk Administration (https)
grapheneos.social	51.222.159.14	8447	Plesk Installer + Updates

grapheneos.social	51.222.159.14	8447	Plesk Installer + Updates
grapheneos.social	51.222.159.14	8880	Plesk Administration (http)

grapheneos.social	51.222.159.14	8880	Plesk Administration (http)
grapheneos.social	51.222.159.14	10000	Webmin (http)

grapheneos.social	51.222.159.14	10000	Webmin (http)
grapheneos.social	51.222.159.14	10000	Webmin (https)

grapheneos.social	51.222.159.14	10000	Webmin (https)
grapheneos.social	2607:5300:205:200::5e3f	21	FTP

grapheneos.social	2607:5300:205:200::5e3f	21	FTP
grapheneos.social	2607:5300:205:200::5e3f	22	SSH	open
SSH-2.0-OpenSSH_10.0
grapheneos.social	2607:5300:205:200::5e3f	22	SSH	open	SSH-2.0-OpenSSH_10.0	Good: SSH with DNS SSHFP Record found
grapheneos.social	2607:5300:205:200::5e3f	25	SMTP

grapheneos.social	2607:5300:205:200::5e3f	25	SMTP
grapheneos.social	2607:5300:205:200::5e3f	53	DNS

grapheneos.social	2607:5300:205:200::5e3f	53	DNS
grapheneos.social	2607:5300:205:200::5e3f	110	POP3

grapheneos.social	2607:5300:205:200::5e3f	110	POP3
grapheneos.social	2607:5300:205:200::5e3f	143	IMAP

grapheneos.social	2607:5300:205:200::5e3f	143	IMAP
grapheneos.social	2607:5300:205:200::5e3f	465	SMTP (encrypted)

grapheneos.social	2607:5300:205:200::5e3f	465	SMTP (encrypted)
grapheneos.social	2607:5300:205:200::5e3f	587	SMTP (encrypted, submission)

grapheneos.social	2607:5300:205:200::5e3f	587	SMTP (encrypted, submission)
grapheneos.social	2607:5300:205:200::5e3f	993	IMAP (encrypted)

grapheneos.social	2607:5300:205:200::5e3f	993	IMAP (encrypted)
grapheneos.social	2607:5300:205:200::5e3f	995	POP3 (encrypted)

grapheneos.social	2607:5300:205:200::5e3f	995	POP3 (encrypted)
grapheneos.social	2607:5300:205:200::5e3f	1433	MS SQL

grapheneos.social	2607:5300:205:200::5e3f	1433	MS SQL
grapheneos.social	2607:5300:205:200::5e3f	2082	cPanel (http)

grapheneos.social	2607:5300:205:200::5e3f	2082	cPanel (http)
grapheneos.social	2607:5300:205:200::5e3f	2083	cPanel (https)

grapheneos.social	2607:5300:205:200::5e3f	2083	cPanel (https)
grapheneos.social	2607:5300:205:200::5e3f	2086	WHM (http)

grapheneos.social	2607:5300:205:200::5e3f	2086	WHM (http)
grapheneos.social	2607:5300:205:200::5e3f	2087	WHM (https)

grapheneos.social	2607:5300:205:200::5e3f	2087	WHM (https)
grapheneos.social	2607:5300:205:200::5e3f	2089	cPanel Licensing

grapheneos.social	2607:5300:205:200::5e3f	2089	cPanel Licensing
grapheneos.social	2607:5300:205:200::5e3f	2095	cPanel Webmail (http)

grapheneos.social	2607:5300:205:200::5e3f	2095	cPanel Webmail (http)
grapheneos.social	2607:5300:205:200::5e3f	2096	cPanel Webmail (https)

grapheneos.social	2607:5300:205:200::5e3f	2096	cPanel Webmail (https)
grapheneos.social	2607:5300:205:200::5e3f	2222	DirectAdmin (http)

grapheneos.social	2607:5300:205:200::5e3f	2222	DirectAdmin (http)
grapheneos.social	2607:5300:205:200::5e3f	2222	DirectAdmin (https)

grapheneos.social	2607:5300:205:200::5e3f	2222	DirectAdmin (https)
grapheneos.social	2607:5300:205:200::5e3f	3306	mySql

grapheneos.social	2607:5300:205:200::5e3f	3306	mySql
grapheneos.social	2607:5300:205:200::5e3f	5224	Plesk Licensing

grapheneos.social	2607:5300:205:200::5e3f	5224	Plesk Licensing
grapheneos.social	2607:5300:205:200::5e3f	5432	PostgreSQL

grapheneos.social	2607:5300:205:200::5e3f	5432	PostgreSQL
grapheneos.social	2607:5300:205:200::5e3f	8080	Ookla Speedtest (http)

grapheneos.social	2607:5300:205:200::5e3f	8080	Ookla Speedtest (http)
grapheneos.social	2607:5300:205:200::5e3f	8080	Ookla Speedtest (https)

grapheneos.social	2607:5300:205:200::5e3f	8080	Ookla Speedtest (https)
grapheneos.social	2607:5300:205:200::5e3f	8083	VestaCP http

grapheneos.social	2607:5300:205:200::5e3f	8083	VestaCP http
grapheneos.social	2607:5300:205:200::5e3f	8083	VestaCP https

grapheneos.social	2607:5300:205:200::5e3f	8083	VestaCP https
grapheneos.social	2607:5300:205:200::5e3f	8443	Plesk Administration (https)

grapheneos.social	2607:5300:205:200::5e3f	8443	Plesk Administration (https)
grapheneos.social	2607:5300:205:200::5e3f	8447	Plesk Installer + Updates

grapheneos.social	2607:5300:205:200::5e3f	8447	Plesk Installer + Updates
grapheneos.social	2607:5300:205:200::5e3f	8880	Plesk Administration (http)

grapheneos.social	2607:5300:205:200::5e3f	8880	Plesk Administration (http)
grapheneos.social	2607:5300:205:200::5e3f	10000	Webmin (http)

grapheneos.social	2607:5300:205:200::5e3f	10000	Webmin (http)
grapheneos.social	2607:5300:205:200::5e3f	10000	Webmin (https)

grapheneos.social	2607:5300:205:200::5e3f	10000	Webmin (https)
www.grapheneos.social	51.222.159.14	21	FTP

www.grapheneos.social	51.222.159.14	21	FTP
www.grapheneos.social	51.222.159.14	22	SSH	open
SSH-2.0-OpenSSH_10.0
www.grapheneos.social	51.222.159.14	22	SSH	open	SSH-2.0-OpenSSH_10.0	Good: SSH with DNS SSHFP Record found
www.grapheneos.social	51.222.159.14	25	SMTP

www.grapheneos.social	51.222.159.14	25	SMTP
www.grapheneos.social	51.222.159.14	53	DNS

www.grapheneos.social	51.222.159.14	53	DNS
www.grapheneos.social	51.222.159.14	110	POP3

www.grapheneos.social	51.222.159.14	110	POP3
www.grapheneos.social	51.222.159.14	143	IMAP

www.grapheneos.social	51.222.159.14	143	IMAP
www.grapheneos.social	51.222.159.14	465	SMTP (encrypted)

www.grapheneos.social	51.222.159.14	465	SMTP (encrypted)
www.grapheneos.social	51.222.159.14	587	SMTP (encrypted, submission)

www.grapheneos.social	51.222.159.14	587	SMTP (encrypted, submission)
www.grapheneos.social	51.222.159.14	993	IMAP (encrypted)

www.grapheneos.social	51.222.159.14	993	IMAP (encrypted)
www.grapheneos.social	51.222.159.14	995	POP3 (encrypted)

www.grapheneos.social	51.222.159.14	995	POP3 (encrypted)
www.grapheneos.social	51.222.159.14	1433	MS SQL

www.grapheneos.social	51.222.159.14	1433	MS SQL
www.grapheneos.social	51.222.159.14	2082	cPanel (http)

www.grapheneos.social	51.222.159.14	2082	cPanel (http)
www.grapheneos.social	51.222.159.14	2083	cPanel (https)

www.grapheneos.social	51.222.159.14	2083	cPanel (https)
www.grapheneos.social	51.222.159.14	2086	WHM (http)

www.grapheneos.social	51.222.159.14	2086	WHM (http)
www.grapheneos.social	51.222.159.14	2087	WHM (https)

www.grapheneos.social	51.222.159.14	2087	WHM (https)
www.grapheneos.social	51.222.159.14	2089	cPanel Licensing

www.grapheneos.social	51.222.159.14	2089	cPanel Licensing
www.grapheneos.social	51.222.159.14	2095	cPanel Webmail (http)

www.grapheneos.social	51.222.159.14	2095	cPanel Webmail (http)
www.grapheneos.social	51.222.159.14	2096	cPanel Webmail (https)

www.grapheneos.social	51.222.159.14	2096	cPanel Webmail (https)
www.grapheneos.social	51.222.159.14	2222	DirectAdmin (http)

www.grapheneos.social	51.222.159.14	2222	DirectAdmin (http)
www.grapheneos.social	51.222.159.14	2222	DirectAdmin (https)

www.grapheneos.social	51.222.159.14	2222	DirectAdmin (https)
www.grapheneos.social	51.222.159.14	3306	mySql

www.grapheneos.social	51.222.159.14	3306	mySql
www.grapheneos.social	51.222.159.14	5224	Plesk Licensing

www.grapheneos.social	51.222.159.14	5224	Plesk Licensing
www.grapheneos.social	51.222.159.14	5432	PostgreSQL

www.grapheneos.social	51.222.159.14	5432	PostgreSQL
www.grapheneos.social	51.222.159.14	8080	Ookla Speedtest (http)

www.grapheneos.social	51.222.159.14	8080	Ookla Speedtest (http)
www.grapheneos.social	51.222.159.14	8080	Ookla Speedtest (https)

www.grapheneos.social	51.222.159.14	8080	Ookla Speedtest (https)
www.grapheneos.social	51.222.159.14	8083	VestaCP http

www.grapheneos.social	51.222.159.14	8083	VestaCP http
www.grapheneos.social	51.222.159.14	8083	VestaCP https

www.grapheneos.social	51.222.159.14	8083	VestaCP https
www.grapheneos.social	51.222.159.14	8443	Plesk Administration (https)

www.grapheneos.social	51.222.159.14	8443	Plesk Administration (https)
www.grapheneos.social	51.222.159.14	8447	Plesk Installer + Updates

www.grapheneos.social	51.222.159.14	8447	Plesk Installer + Updates
www.grapheneos.social	51.222.159.14	8880	Plesk Administration (http)

www.grapheneos.social	51.222.159.14	8880	Plesk Administration (http)
www.grapheneos.social	51.222.159.14	10000	Webmin (http)

www.grapheneos.social	51.222.159.14	10000	Webmin (http)
www.grapheneos.social	51.222.159.14	10000	Webmin (https)

www.grapheneos.social	51.222.159.14	10000	Webmin (https)
www.grapheneos.social	2607:5300:205:200::5e3f	21	FTP

www.grapheneos.social	2607:5300:205:200::5e3f	21	FTP
www.grapheneos.social	2607:5300:205:200::5e3f	22	SSH	open
SSH-2.0-OpenSSH_10.0
www.grapheneos.social	2607:5300:205:200::5e3f	22	SSH	open	SSH-2.0-OpenSSH_10.0	Good: SSH with DNS SSHFP Record found
www.grapheneos.social	2607:5300:205:200::5e3f	25	SMTP

www.grapheneos.social	2607:5300:205:200::5e3f	25	SMTP
www.grapheneos.social	2607:5300:205:200::5e3f	53	DNS

www.grapheneos.social	2607:5300:205:200::5e3f	53	DNS
www.grapheneos.social	2607:5300:205:200::5e3f	110	POP3

www.grapheneos.social	2607:5300:205:200::5e3f	110	POP3
www.grapheneos.social	2607:5300:205:200::5e3f	143	IMAP

www.grapheneos.social	2607:5300:205:200::5e3f	143	IMAP
www.grapheneos.social	2607:5300:205:200::5e3f	465	SMTP (encrypted)

www.grapheneos.social	2607:5300:205:200::5e3f	465	SMTP (encrypted)
www.grapheneos.social	2607:5300:205:200::5e3f	587	SMTP (encrypted, submission)

www.grapheneos.social	2607:5300:205:200::5e3f	587	SMTP (encrypted, submission)
www.grapheneos.social	2607:5300:205:200::5e3f	993	IMAP (encrypted)

www.grapheneos.social	2607:5300:205:200::5e3f	993	IMAP (encrypted)
www.grapheneos.social	2607:5300:205:200::5e3f	995	POP3 (encrypted)

www.grapheneos.social	2607:5300:205:200::5e3f	995	POP3 (encrypted)
www.grapheneos.social	2607:5300:205:200::5e3f	1433	MS SQL

www.grapheneos.social	2607:5300:205:200::5e3f	1433	MS SQL
www.grapheneos.social	2607:5300:205:200::5e3f	2082	cPanel (http)

www.grapheneos.social	2607:5300:205:200::5e3f	2082	cPanel (http)
www.grapheneos.social	2607:5300:205:200::5e3f	2083	cPanel (https)

www.grapheneos.social	2607:5300:205:200::5e3f	2083	cPanel (https)
www.grapheneos.social	2607:5300:205:200::5e3f	2086	WHM (http)

www.grapheneos.social	2607:5300:205:200::5e3f	2086	WHM (http)
www.grapheneos.social	2607:5300:205:200::5e3f	2087	WHM (https)

www.grapheneos.social	2607:5300:205:200::5e3f	2087	WHM (https)
www.grapheneos.social	2607:5300:205:200::5e3f	2089	cPanel Licensing

www.grapheneos.social	2607:5300:205:200::5e3f	2089	cPanel Licensing
www.grapheneos.social	2607:5300:205:200::5e3f	2095	cPanel Webmail (http)

www.grapheneos.social	2607:5300:205:200::5e3f	2095	cPanel Webmail (http)
www.grapheneos.social	2607:5300:205:200::5e3f	2096	cPanel Webmail (https)

www.grapheneos.social	2607:5300:205:200::5e3f	2096	cPanel Webmail (https)
www.grapheneos.social	2607:5300:205:200::5e3f	2222	DirectAdmin (http)

www.grapheneos.social	2607:5300:205:200::5e3f	2222	DirectAdmin (http)
www.grapheneos.social	2607:5300:205:200::5e3f	2222	DirectAdmin (https)

www.grapheneos.social	2607:5300:205:200::5e3f	2222	DirectAdmin (https)
www.grapheneos.social	2607:5300:205:200::5e3f	3306	mySql

www.grapheneos.social	2607:5300:205:200::5e3f	3306	mySql
www.grapheneos.social	2607:5300:205:200::5e3f	5224	Plesk Licensing

www.grapheneos.social	2607:5300:205:200::5e3f	5224	Plesk Licensing
www.grapheneos.social	2607:5300:205:200::5e3f	5432	PostgreSQL

www.grapheneos.social	2607:5300:205:200::5e3f	5432	PostgreSQL
www.grapheneos.social	2607:5300:205:200::5e3f	8080	Ookla Speedtest (http)

www.grapheneos.social	2607:5300:205:200::5e3f	8080	Ookla Speedtest (http)
www.grapheneos.social	2607:5300:205:200::5e3f	8080	Ookla Speedtest (https)

www.grapheneos.social	2607:5300:205:200::5e3f	8080	Ookla Speedtest (https)
www.grapheneos.social	2607:5300:205:200::5e3f	8083	VestaCP http

www.grapheneos.social	2607:5300:205:200::5e3f	8083	VestaCP http
www.grapheneos.social	2607:5300:205:200::5e3f	8083	VestaCP https

www.grapheneos.social	2607:5300:205:200::5e3f	8083	VestaCP https
www.grapheneos.social	2607:5300:205:200::5e3f	8443	Plesk Administration (https)

www.grapheneos.social	2607:5300:205:200::5e3f	8443	Plesk Administration (https)
www.grapheneos.social	2607:5300:205:200::5e3f	8447	Plesk Installer + Updates

www.grapheneos.social	2607:5300:205:200::5e3f	8447	Plesk Installer + Updates
www.grapheneos.social	2607:5300:205:200::5e3f	8880	Plesk Administration (http)

www.grapheneos.social	2607:5300:205:200::5e3f	8880	Plesk Administration (http)
www.grapheneos.social	2607:5300:205:200::5e3f	10000	Webmin (http)

www.grapheneos.social	2607:5300:205:200::5e3f	10000	Webmin (http)
www.grapheneos.social	2607:5300:205:200::5e3f	10000	Webmin (https)

www.grapheneos.social	2607:5300:205:200::5e3f	10000	Webmin (https)

Permalink: https://check-your-website.server-daten.de/?i=84e94eab-113d-4f67-8d59-dbe5f88e1585

Last Result: https://check-your-website.server-daten.de/?q=grapheneos.social - 2025-06-25 00:16:25

Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=grapheneos.social" target="_blank">Check this Site: grapheneos.social</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

Check DNS, Urls + Redirects, Certificates and Content of your Website

Older results

1. IP-Addresses

2. DNSSEC

3. Name Servers

4. SOA-Entries

5. Screenshots

Mobile- and other Chrome-Checks

6. Url-Checks

7. Comments

1. General Results, most used to calculate the result

2. Header-Checks

3. DNS- and NameServer - Checks

4. Content- and Performance-critical Checks

8. Connections

9. Certificates

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

11. Html-Content - Entries

Summary

Details (currently limited to 500 rows - some problems with spam users)

12. Html-Parsing via https://validator.w3.org/nu/

Summary

Details

13. Nameserver - IP-Adresses

14. CAA - Entries

15. TXT - Entries

16. DomainService - Entries

17. Cipher Suites

18. Portchecks