Check DNS, Urls + Redirects, Certificates and Content of your Website

...

skip EDNS-Check

skip Content-Check

check links

A+

Top configuration, no warnings +Preload

Checked:
05.09.2024 01:26:52

Older results

A+ - 13.05.2024 19:27:57

1. IP-Addresses

Host	Type	IP-Address	is auth.	∑ Queries	∑ Timeout
inv.antopie.org	CNAME	yuno.antopie.org	yes	1	0
	A	78.194.59.118 Paris/Île-de-France/France (FR) - Proxad / Free SAS Hostname: cou75-3-78-194-59-118.fbxo.proxad.net	yes
	AAAA	2a01:e34:ec23:b760:acab:3:3:3 Paris/Île-de-France/France (FR) - ProXad network / Free	yes
www.inv.antopie.org		Name Error	yes	1	0
*.antopie.org	A	Name Error	yes
	AAAA	Name Error	yes
	CNAME	Name Error	yes
*.inv.antopie.org	A	Name Error	yes
	AAAA	Name Error	yes
	CNAME	Name Error	yes

2. DNSSEC

Zone (*)	DNSSEC - Informations

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 20038, Flags 256


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 20.09.2024, 00:00:00 +, Signature-Inception: 30.08.2024, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: org
org	1 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 26974, DigestType 2 and Digest T+3ilMU/Q4oVjEHTlInNeKhr6w2KCur/FHRcDRbh3jI=


	2 RRSIG RR to validate DS RR found


	RRSIG-Owner org., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 17.09.2024, 17:00:00 +, Signature-Inception: 04.09.2024, 16:00:00 +, KeyTag 20038, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20038 used to validate the DS RRSet in the parent zone


	3 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 23064, Flags 256


	Public Key with Algorithm 8, KeyTag 26974, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 54228, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner org., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 22.09.2024, 15:21:48 +, Signature-Inception: 01.09.2024, 14:21:48 +, KeyTag 26974, Signer-Name: org


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26974 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 26974, DigestType 2 and Digest "T+3ilMU/Q4oVjEHTlInNeKhr6w2KCur/FHRcDRbh3jI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: antopie.org
antopie.org	1 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 56854, DigestType 2 and Digest 4S1fX2ohHJeVAKuVioMYTTfI+ogMdjJi2z7go3kHd3k=


	2 RRSIG RR to validate DS RR found


	RRSIG-Owner antopie.org., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 22.09.2024, 15:21:48 +, Signature-Inception: 01.09.2024, 14:21:48 +, KeyTag 23064, Signer-Name: org


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 23064 used to validate the DS RRSet in the parent zone


	3 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 3916, Flags 256


	Public Key with Algorithm 8, KeyTag 56854, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 58330, Flags 256


	3 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner antopie.org., Algorithm: 8, 2 Labels, original TTL: 10800 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 3916, Signer-Name: antopie.org


	RRSIG-Owner antopie.org., Algorithm: 8, 2 Labels, original TTL: 10800 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 56854, Signer-Name: antopie.org


	RRSIG-Owner antopie.org., Algorithm: 8, 2 Labels, original TTL: 10800 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 3916 used to validate the DNSKEY RRSet


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 56854 used to validate the DNSKEY RRSet


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 58330 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 56854, DigestType 2 and Digest "4S1fX2ohHJeVAKuVioMYTTfI+ogMdjJi2z7go3kHd3k=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: inv.antopie.org
inv.antopie.org	0 DS RR in the parent zone found


	RRSIG Type 5 validates the CNAME - Result: yuno.antopie.org Validated: RRSIG-Owner inv.antopie.org., Algorithm: 8, 3 Labels, original TTL: 86400 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 3916, Signer-Name: antopie.org


	RRSIG Type 5 validates the CNAME - Result: yuno.antopie.org Validated: RRSIG-Owner inv.antopie.org., Algorithm: 8, 3 Labels, original TTL: 86400 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 3916, Signer-Name: antopie.org


	RRSIG Type 5 validates the CNAME - Result: yuno.antopie.org Validated: RRSIG-Owner inv.antopie.org., Algorithm: 8, 3 Labels, original TTL: 86400 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org


	RRSIG Type 5 validates the CNAME - Result: yuno.antopie.org Validated: RRSIG-Owner inv.antopie.org., Algorithm: 8, 3 Labels, original TTL: 86400 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org

Zone: www.inv.antopie.org
www.inv.antopie.org	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "u2ggm2r44f9sd50v4vn1dj4la4rhj03g" between the hashed NSEC3-owner "u1o8kbl9olkfvaprknqrma6gluq8rbh8" and the hashed NextOwner "u87h9ojff1p1d1506tcs8j0j73pje2pu". So the parent zone confirmes the not-existence of a DS RR. Bitmap: CNAME, RRSIG Validated: RRSIG-Owner u1o8kbl9olkfvaprknqrma6gluq8rbh8.antopie.org., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 3916, Signer-Name: antopie.org


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "u2ggm2r44f9sd50v4vn1dj4la4rhj03g" between the hashed NSEC3-owner "u1o8kbl9olkfvaprknqrma6gluq8rbh8" and the hashed NextOwner "u87h9ojff1p1d1506tcs8j0j73pje2pu". So the parent zone confirmes the not-existence of a DS RR. Bitmap: CNAME, RRSIG Validated: RRSIG-Owner u1o8kbl9olkfvaprknqrma6gluq8rbh8.antopie.org., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "imdnou1rlq2ql65c6krh6mhhun82rp2i" as Owner. That's the Hash of "inv.antopie.org" with the NextHashedOwnerName "jf7tlfh28ehoeeu4raat559e3smsnoq7". So that domain name is the Closest Encloser of "www.inv.antopie.org". Opt-Out: False. Bitmap: CNAME, RRSIG Validated: RRSIG-Owner imdnou1rlq2ql65c6krh6mhhun82rp2i.antopie.org., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 3916, Signer-Name: antopie.org


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "imdnou1rlq2ql65c6krh6mhhun82rp2i" as Owner. That's the Hash of "inv.antopie.org" with the NextHashedOwnerName "jf7tlfh28ehoeeu4raat559e3smsnoq7". So that domain name is the Closest Encloser of "www.inv.antopie.org". Opt-Out: False. Bitmap: CNAME, RRSIG Validated: RRSIG-Owner imdnou1rlq2ql65c6krh6mhhun82rp2i.antopie.org., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org


	The ClosestEncloser says, that "*.inv.antopie.org" with the Hash "0qpedagjfri2huiqm0aqu12lch6eqqvd" is a possible Wildcard of the DS Query Name. But the DS-Query in the parent zone sends a valid NSEC3 RR With the owner "0k0j5qc5ccdcmqtpu49osragib8m3nt6" and the Next Owner "15i338le0os3hr559itqlqfajbf9fa5q", so the Hash of the wildcard is between these hashes. So that NSEC3 proves the Not-existence of that wildcard expansion. Opt-Out: False. Bitmap: TXT, RRSIG Validated: RRSIG-Owner 0k0j5qc5ccdcmqtpu49osragib8m3nt6.antopie.org., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 3916, Signer-Name: antopie.org


	The ClosestEncloser says, that "*.inv.antopie.org" with the Hash "0qpedagjfri2huiqm0aqu12lch6eqqvd" is a possible Wildcard of the DS Query Name. But the DS-Query in the parent zone sends a valid NSEC3 RR With the owner "0k0j5qc5ccdcmqtpu49osragib8m3nt6" and the Next Owner "15i338le0os3hr559itqlqfajbf9fa5q", so the Hash of the wildcard is between these hashes. So that NSEC3 proves the Not-existence of that wildcard expansion. Opt-Out: False. Bitmap: TXT, RRSIG Validated: RRSIG-Owner 0k0j5qc5ccdcmqtpu49osragib8m3nt6.antopie.org., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 20038, Flags 256


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 20.09.2024, 00:00:00 +, Signature-Inception: 30.08.2024, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: org
org	1 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 26974, DigestType 2 and Digest T+3ilMU/Q4oVjEHTlInNeKhr6w2KCur/FHRcDRbh3jI=


	2 RRSIG RR to validate DS RR found


	RRSIG-Owner org., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 17.09.2024, 17:00:00 +, Signature-Inception: 04.09.2024, 16:00:00 +, KeyTag 20038, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20038 used to validate the DS RRSet in the parent zone


	3 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 23064, Flags 256


	Public Key with Algorithm 8, KeyTag 26974, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 54228, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner org., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 22.09.2024, 15:21:48 +, Signature-Inception: 01.09.2024, 14:21:48 +, KeyTag 26974, Signer-Name: org


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26974 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 26974, DigestType 2 and Digest "T+3ilMU/Q4oVjEHTlInNeKhr6w2KCur/FHRcDRbh3jI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: antopie.org
antopie.org	1 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 56854, DigestType 2 and Digest 4S1fX2ohHJeVAKuVioMYTTfI+ogMdjJi2z7go3kHd3k=


	2 RRSIG RR to validate DS RR found


	RRSIG-Owner antopie.org., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 22.09.2024, 15:21:48 +, Signature-Inception: 01.09.2024, 14:21:48 +, KeyTag 23064, Signer-Name: org


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 23064 used to validate the DS RRSet in the parent zone


	3 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 3916, Flags 256


	Public Key with Algorithm 8, KeyTag 56854, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 58330, Flags 256


	3 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner antopie.org., Algorithm: 8, 2 Labels, original TTL: 10800 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 3916, Signer-Name: antopie.org


	RRSIG-Owner antopie.org., Algorithm: 8, 2 Labels, original TTL: 10800 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 56854, Signer-Name: antopie.org


	RRSIG-Owner antopie.org., Algorithm: 8, 2 Labels, original TTL: 10800 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 3916 used to validate the DNSKEY RRSet


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 56854 used to validate the DNSKEY RRSet


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 58330 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 56854, DigestType 2 and Digest "4S1fX2ohHJeVAKuVioMYTTfI+ogMdjJi2z7go3kHd3k=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: yuno.antopie.org
yuno.antopie.org	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "b150fhjvd7h96cmijj5a94op1lu4v2cq" between the hashed NSEC3-owner "b150fhjvd7h96cmijj5a94op1lu4v2cq" and the hashed NextOwner "b2v0kqjqkasm29hol8akf84b5frm0gcb". So the parent zone confirmes the not-existence of a DS RR. Bitmap: A, TXT, AAAA, RRSIG Validated: RRSIG-Owner b150fhjvd7h96cmijj5a94op1lu4v2cq.antopie.org., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 3916, Signer-Name: antopie.org


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "b150fhjvd7h96cmijj5a94op1lu4v2cq" between the hashed NSEC3-owner "b150fhjvd7h96cmijj5a94op1lu4v2cq" and the hashed NextOwner "b2v0kqjqkasm29hol8akf84b5frm0gcb". So the parent zone confirmes the not-existence of a DS RR. Bitmap: A, TXT, AAAA, RRSIG Validated: RRSIG-Owner b150fhjvd7h96cmijj5a94op1lu4v2cq.antopie.org., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org


	0 DNSKEY RR found





	RRSIG Type 1 validates the A - Result: 78.194.59.118 Validated: RRSIG-Owner yuno.antopie.org., Algorithm: 8, 3 Labels, original TTL: 10800 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 3916, Signer-Name: antopie.org


	RRSIG Type 1 validates the A - Result: 78.194.59.118 Validated: RRSIG-Owner yuno.antopie.org., Algorithm: 8, 3 Labels, original TTL: 10800 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 3916, Signer-Name: antopie.org


	RRSIG Type 16 validates the TXT - Result: v=spf1 a mx -all Validated: RRSIG-Owner yuno.antopie.org., Algorithm: 8, 3 Labels, original TTL: 86400 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 3916, Signer-Name: antopie.org


	RRSIG Type 16 validates the TXT - Result: v=spf1 a mx -all Validated: RRSIG-Owner yuno.antopie.org., Algorithm: 8, 3 Labels, original TTL: 86400 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 3916, Signer-Name: antopie.org


	RRSIG Type 28 validates the AAAA - Result: 2A01:0E34:EC23:B760:ACAB:0003:0003:0003 Validated: RRSIG-Owner yuno.antopie.org., Algorithm: 8, 3 Labels, original TTL: 10800 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 3916, Signer-Name: antopie.org


	RRSIG Type 28 validates the AAAA - Result: 2A01:0E34:EC23:B760:ACAB:0003:0003:0003 Validated: RRSIG-Owner yuno.antopie.org., Algorithm: 8, 3 Labels, original TTL: 10800 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 3916, Signer-Name: antopie.org


	RRSIG Type 5 validates the TLSA - Result (_443._tcp.yuno.antopie.org): _letsencrypt._dane.antopie.org. That's a CNAME answer Validated: RRSIG-Owner _443._tcp.yuno.antopie.org., Algorithm: 8, 5 Labels, original TTL: 86400 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 3916, Signer-Name: antopie.org


	RRSIG Type 5 validates the TLSA - Result (_443._tcp.yuno.antopie.org): _letsencrypt._dane.antopie.org. That's a CNAME answer Validated: RRSIG-Owner _443._tcp.yuno.antopie.org., Algorithm: 8, 5 Labels, original TTL: 86400 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 3916, Signer-Name: antopie.org


	RRSIG Type 52 validates the TLSA - Result (_443._tcp.yuno.antopie.org): _443._tcp.yuno.antopie.org: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 025490860b498ab73c6a12f27a49ad5fe230fafe3ac8f6112c9b7d0aad46941d _443._tcp.yuno.antopie.org: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 2bbad93ab5c79279ec121507f272cbe0c6647a3aae52e22f388afab426b4adba _443._tcp.yuno.antopie.org: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 _443._tcp.yuno.antopie.org: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 919c0df7a787b597ed056ace654b1de9c0387acf349f73734a4fd7b58cf612a4 _443._tcp.yuno.antopie.org: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: f1647a5ee3efac54c892e930584fe47979b7acd1c76c1271bca1c5076d869888 Validated: RRSIG-Owner _letsencrypt._dane.antopie.org., Algorithm: 8, 4 Labels, original TTL: 86400 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 3916, Signer-Name: antopie.org


	RRSIG Type 52 validates the TLSA - Result (_443._tcp.yuno.antopie.org): _443._tcp.yuno.antopie.org: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 025490860b498ab73c6a12f27a49ad5fe230fafe3ac8f6112c9b7d0aad46941d _443._tcp.yuno.antopie.org: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 2bbad93ab5c79279ec121507f272cbe0c6647a3aae52e22f388afab426b4adba _443._tcp.yuno.antopie.org: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 _443._tcp.yuno.antopie.org: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 919c0df7a787b597ed056ace654b1de9c0387acf349f73734a4fd7b58cf612a4 _443._tcp.yuno.antopie.org: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: f1647a5ee3efac54c892e930584fe47979b7acd1c76c1271bca1c5076d869888 Validated: RRSIG-Owner _letsencrypt._dane.antopie.org., Algorithm: 8, 4 Labels, original TTL: 86400 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 3916, Signer-Name: antopie.org


	RRSIG Type 1 validates the A - Result: 78.194.59.118 Validated: RRSIG-Owner yuno.antopie.org., Algorithm: 8, 3 Labels, original TTL: 10800 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org


	RRSIG Type 1 validates the A - Result: 78.194.59.118 Validated: RRSIG-Owner yuno.antopie.org., Algorithm: 8, 3 Labels, original TTL: 10800 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org


	RRSIG Type 16 validates the TXT - Result: v=spf1 a mx -all Validated: RRSIG-Owner yuno.antopie.org., Algorithm: 8, 3 Labels, original TTL: 86400 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org


	RRSIG Type 16 validates the TXT - Result: v=spf1 a mx -all Validated: RRSIG-Owner yuno.antopie.org., Algorithm: 8, 3 Labels, original TTL: 86400 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org


	RRSIG Type 28 validates the AAAA - Result: 2A01:0E34:EC23:B760:ACAB:0003:0003:0003 Validated: RRSIG-Owner yuno.antopie.org., Algorithm: 8, 3 Labels, original TTL: 10800 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org


	RRSIG Type 28 validates the AAAA - Result: 2A01:0E34:EC23:B760:ACAB:0003:0003:0003 Validated: RRSIG-Owner yuno.antopie.org., Algorithm: 8, 3 Labels, original TTL: 10800 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org


	RRSIG Type 5 validates the TLSA - Result (_443._tcp.yuno.antopie.org): _letsencrypt._dane.antopie.org. That's a CNAME answer Validated: RRSIG-Owner _443._tcp.yuno.antopie.org., Algorithm: 8, 5 Labels, original TTL: 86400 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org


	RRSIG Type 5 validates the TLSA - Result (_443._tcp.yuno.antopie.org): _letsencrypt._dane.antopie.org. That's a CNAME answer Validated: RRSIG-Owner _443._tcp.yuno.antopie.org., Algorithm: 8, 5 Labels, original TTL: 86400 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org


	RRSIG Type 52 validates the TLSA - Result (_443._tcp.yuno.antopie.org): _443._tcp.yuno.antopie.org: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 025490860b498ab73c6a12f27a49ad5fe230fafe3ac8f6112c9b7d0aad46941d _443._tcp.yuno.antopie.org: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 2bbad93ab5c79279ec121507f272cbe0c6647a3aae52e22f388afab426b4adba _443._tcp.yuno.antopie.org: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 _443._tcp.yuno.antopie.org: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 919c0df7a787b597ed056ace654b1de9c0387acf349f73734a4fd7b58cf612a4 _443._tcp.yuno.antopie.org: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: f1647a5ee3efac54c892e930584fe47979b7acd1c76c1271bca1c5076d869888 Validated: RRSIG-Owner _letsencrypt._dane.antopie.org., Algorithm: 8, 4 Labels, original TTL: 86400 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org


	RRSIG Type 52 validates the TLSA - Result (_443._tcp.yuno.antopie.org): _443._tcp.yuno.antopie.org: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 025490860b498ab73c6a12f27a49ad5fe230fafe3ac8f6112c9b7d0aad46941d _443._tcp.yuno.antopie.org: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 2bbad93ab5c79279ec121507f272cbe0c6647a3aae52e22f388afab426b4adba _443._tcp.yuno.antopie.org: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 6ddac18698f7f1f7e1c69b9bce420d974ac6f94ca8b2c761701623f99c767dc7 _443._tcp.yuno.antopie.org: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: 919c0df7a787b597ed056ace654b1de9c0387acf349f73734a4fd7b58cf612a4 _443._tcp.yuno.antopie.org: CertUsage 2 (DANE-TA, Trust anchor assertion), Selector: 1 (SPKI, SubjectPublicKeyInfo), Matching: 1 (SHA2-256, 256 bit hash by SHA2), CertificateAssociationData: f1647a5ee3efac54c892e930584fe47979b7acd1c76c1271bca1c5076d869888 Validated: RRSIG-Owner _letsencrypt._dane.antopie.org., Algorithm: 8, 4 Labels, original TTL: 86400 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org


	CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "b150fhjvd7h96cmijj5a94op1lu4v2cq" equal the hashed NSEC3-owner "b150fhjvd7h96cmijj5a94op1lu4v2cq" and the hashed NextOwner "b2v0kqjqkasm29hol8akf84b5frm0gcb". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, TXT, AAAA, RRSIG Validated: RRSIG-Owner b150fhjvd7h96cmijj5a94op1lu4v2cq.antopie.org., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org


	CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "b150fhjvd7h96cmijj5a94op1lu4v2cq" equal the hashed NSEC3-owner "b150fhjvd7h96cmijj5a94op1lu4v2cq" and the hashed NextOwner "b2v0kqjqkasm29hol8akf84b5frm0gcb". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, TXT, AAAA, RRSIG Validated: RRSIG-Owner b150fhjvd7h96cmijj5a94op1lu4v2cq.antopie.org., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org


	Status: Good. NoData-Proof required and found.


	Status: Good. NoData-Proof required and found.


	CAA-Query sends a valid NSEC3 RR as result with the hashed query name "b150fhjvd7h96cmijj5a94op1lu4v2cq" equal the hashed NSEC3-owner "b150fhjvd7h96cmijj5a94op1lu4v2cq" and the hashed NextOwner "b2v0kqjqkasm29hol8akf84b5frm0gcb". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, TXT, AAAA, RRSIG Validated: RRSIG-Owner b150fhjvd7h96cmijj5a94op1lu4v2cq.antopie.org., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 03.10.2024, 09:23:21 +, Signature-Inception: 03.09.2024, 09:23:21 +, KeyTag 58330, Signer-Name: antopie.org


	Status: Good. NoData-Proof required and found.

3. Name Servers

Domain	Nameserver	NS-IP
www.inv.antopie.org	• 1-you.njalla.no
antopie.org	• 1-you.njalla.no	185.193.124.2 Oslo/Oslo County/Norway (NO) - NJALLA	•
	•	2001:67c:235c::2 Stockholm/Stockholm County/Sweden (SE) - 1337 Services LLC	•
	• 2-can.njalla.in	185.193.124.34 Oslo/Oslo County/Norway (NO) - NJALLA	•
	•	2001:67c:235c::34 Stockholm/Stockholm County/Sweden (SE) - 1337 Services LLC	•
	• 3-get.njalla.fo	95.215.19.5 Stockholm/Stockholm County/Sweden (SE) - ab stract	•
	•	2001:67c:2354:2::5 Stockholm/Stockholm County/Sweden (SE) - ab stract	•
org	• a0.org.afilias-nst.info / app26.ams2.hosts.meta.redstone.afilias-nst.info-1615580861		•
	• a2.org.afilias-nst.info / FRA3		•
	• b0.org.afilias-nst.org / app27.ams2.hosts.meta.redstone.afilias-nst.info-1615580861		•
	• b2.org.afilias-nst.org / FRA5		•
	• c0.org.afilias-nst.info / app20.nrt1.hosts.meta.redstone.afilias-nst.info-1615580861		•
	• d0.org.afilias-nst.org / app11.ams2.hosts.meta.redstone.afilias-nst.info-1615580861		•

yuno.antopie.org	• 1-you.njalla.no	185.193.124.2 Oslo/Oslo County/Norway (NO) - NJALLA	•
	•	2001:67c:235c::2 Stockholm/Stockholm County/Sweden (SE) - 1337 Services LLC	•
antopie.org	• 1-you.njalla.no	185.193.124.2 Oslo/Oslo County/Norway (NO) - NJALLA	•
	•	2001:67c:235c::2 Stockholm/Stockholm County/Sweden (SE) - 1337 Services LLC	•
	• 2-can.njalla.in	185.193.124.34 Oslo/Oslo County/Norway (NO) - NJALLA	•
	•	2001:67c:235c::34 Stockholm/Stockholm County/Sweden (SE) - 1337 Services LLC	•
	• 3-get.njalla.fo	95.215.19.5 Stockholm/Stockholm County/Sweden (SE) - ab stract	•
	•	2001:67c:2354:2::5 Stockholm/Stockholm County/Sweden (SE) - ab stract	•
org	• a0.org.afilias-nst.info / app9.ams2.hosts.meta.redstone.afilias-nst.info-1615580861		•
	• a2.org.afilias-nst.info / FRA6		•
	• b0.org.afilias-nst.org / app17.ams2.hosts.meta.redstone.afilias-nst.info-1615580861		•
	• b2.org.afilias-nst.org / FRA4		•
	• c0.org.afilias-nst.info / app23.nrt1.hosts.meta.redstone.afilias-nst.info-1615580861		•
	• d0.org.afilias-nst.org / app25.ams2.hosts.meta.redstone.afilias-nst.info-1615580861		•

4. SOA-Entries

Domain:	org
Zone-Name:	org
Primary:	a0.org.afilias-nst.info
Mail:	hostmaster.donuts.email
Serial:	1725491990
Refresh:	7200
Retry:	900
Expire:	1209600
TTL:	3600
num Entries:	6

Domain:	antopie.org
Zone-Name:	antopie.org
Primary:	1-you.njalla.no
Mail:	you.can-get-no.info
Serial:	2024090310
Refresh:	21600
Retry:	7200
Expire:	1814400
TTL:	3600
num Entries:	6

Domain:	www.inv.antopie.org
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:	1


Domain:	org
Zone-Name:	org
Primary:	a0.org.afilias-nst.info
Mail:	hostmaster.donuts.email
Serial:	1725491990
Refresh:	7200
Retry:	900
Expire:	1209600
TTL:	3600
num Entries:	6

Domain:	antopie.org
Zone-Name:	antopie.org
Primary:	1-you.njalla.no
Mail:	you.can-get-no.info
Serial:	2024090310
Refresh:	21600
Retry:	7200
Expire:	1814400
TTL:	3600
num Entries:	6

Domain:	yuno.antopie.org
Zone-Name:	antopie.org
Primary:	1-you.njalla.no
Mail:	you.can-get-no.info
Serial:	2024090310
Refresh:	21600
Retry:	7200
Expire:	1814400
TTL:	3600
num Entries:	2

5. Screenshots

Startaddress: https://inv.antopie.org/, address used: https://inv.antopie.org/, Screenshot created 2024-09-05 01:35:16 +00:0

Mobil (412px x 732px)

1059 milliseconds

Screenshot mobile - https://inv.antopie.org/

Mobil + Landscape (732px x 412px)

1060 milliseconds

Screenshot mobile landscape - https://inv.antopie.org/

Screen (1280px x 1680px)

1244 milliseconds

Screenshot Desktop - https://inv.antopie.org/

Mobile- and other Chrome-Checks

	width	height
visual Viewport	412	732
content Size	412	732

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

6. Url-Checks

show header:

Domainname	Http-Status	redirect	Sec.	G
• http://inv.antopie.org/ 78.194.59.118	301	https://inv.antopie.org/ Html is minified: 109.46 %	0.060	A
Server: nginx
Date: Wed, 04 Sep 2024 23:28:25 GMT
Connection: keep-alive
Location: https://inv.antopie.org/
Content-Type: text/html
Content-Length: 162

• http://inv.antopie.org/ 2a01:e34:ec23:b760:acab:3:3:3	301	https://inv.antopie.org/ Html is minified: 109.46 %	0.057	A
Server: nginx
Date: Wed, 04 Sep 2024 23:28:25 GMT
Connection: keep-alive
Location: https://inv.antopie.org/
Content-Type: text/html
Content-Length: 162

• https://inv.antopie.org/ 78.194.59.118 gzip used - 1422 / 5276 - 73.05 % Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 148.79 %	3.496	A
Server: nginx
Date: Wed, 04 Sep 2024 23:28:25 GMT
Connection: keep-alive
X-SSO-WAT: You've just been SSOed
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: upgrade-insecure-requests; default-src https: data: blob: ; object-src https: data: 'unsafe-inline'; style-src https: data: 'unsafe-inline' ; script-src https: data: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:;
Referrer-Policy: same-origin
Permissions-Policy: interest-cohort=()
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Onion-Location: http://inv.sou4vla4k5peskbl3dlzhh3e6ve5eu3m3hhsmiidqevlsd6lqo3qq2ad.onion/
Content-Type: text/html
Content-Length: 1422
Content-Encoding: gzip

• https://inv.antopie.org/ 2a01:e34:ec23:b760:acab:3:3:3 gzip used - 1422 / 5276 - 73.05 % Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 148.79 %	3.040	A
Server: nginx
Date: Wed, 04 Sep 2024 23:28:31 GMT
Connection: keep-alive
X-SSO-WAT: You've just been SSOed
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: upgrade-insecure-requests; default-src https: data: blob: ; object-src https: data: 'unsafe-inline'; style-src https: data: 'unsafe-inline' ; script-src https: data: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:;
Referrer-Policy: same-origin
Permissions-Policy: interest-cohort=()
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Onion-Location: http://inv.sou4vla4k5peskbl3dlzhh3e6ve5eu3m3hhsmiidqevlsd6lqo3qq2ad.onion/
Content-Type: text/html
Content-Length: 1422
Content-Encoding: gzip

• http://inv.antopie.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 78.194.59.118 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	404	Html is minified: 110.61 %	0.040	A
Not Found
Visible Content:
Server: nginx
Date: Wed, 04 Sep 2024 23:28:35 GMT
Connection: keep-alive
X-SSO-WAT: You've just been SSOed
Content-Type: text/html
Content-Length: 146

• http://inv.antopie.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a01:e34:ec23:b760:acab:3:3:3 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	404	Html is minified: 110.61 %	0.033	A
Not Found
Visible Content:
Server: nginx
Date: Wed, 04 Sep 2024 23:28:36 GMT
Connection: keep-alive
X-SSO-WAT: You've just been SSOed
Content-Type: text/html
Content-Length: 146

• https://78.194.59.118/ 78.194.59.118	302	https://78.194.59.118/yunohost/admin Html is minified: 111.29 %	2.333	N
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Server: nginx
Date: Wed, 04 Sep 2024 23:28:37 GMT
Connection: keep-alive
Location: https://78.194.59.118/yunohost/admin
Content-Security-Policy: upgrade-insecure-requests; default-src https: data: blob: ; object-src https: data: 'unsafe-inline'; style-src https: data: 'unsafe-inline' ; script-src https: data: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
X-Frame-Options: SAMEORIGIN
Referrer-Policy: 'same-origin'
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Content-Type: text/html
Content-Length: 138

• https://[2a01:0e34:ec23:b760:acab:0003:0003:0003]/ 2a01:e34:ec23:b760:acab:3:3:3	302	https://[2a01:e34:ec23:b760:acab:3:3:3]/yunohost/admin Html is minified: 111.29 %	1.966	N
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Server: nginx
Date: Wed, 04 Sep 2024 23:28:40 GMT
Connection: keep-alive
Location: https://[2a01:e34:ec23:b760:acab:3:3:3]/yunohost/admin
Content-Security-Policy: upgrade-insecure-requests; default-src https: data: blob: ; object-src https: data: 'unsafe-inline'; style-src https: data: 'unsafe-inline' ; script-src https: data: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
X-Frame-Options: SAMEORIGIN
Referrer-Policy: 'same-origin'
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Content-Type: text/html
Content-Length: 138

• https://78.194.59.118/yunohost/admin	301	https://78.194.59.118/yunohost/admin/ Html is minified: 109.46 %	2.226	A
Server: nginx
Date: Wed, 04 Sep 2024 23:28:43 GMT
Location: https://78.194.59.118/yunohost/admin/
Connection: keep-alive
Content-Security-Policy: upgrade-insecure-requests; default-src https: data: blob: ; object-src https: data: 'unsafe-inline'; style-src https: data: 'unsafe-inline' ; script-src https: data: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
X-Frame-Options: SAMEORIGIN
Referrer-Policy: 'same-origin'
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Content-Type: text/html
Content-Length: 162

• https://[2a01:e34:ec23:b760:acab:3:3:3]/yunohost/admin	301	https://[2a01:e34:ec23:b760:acab:3:3:3]/yunohost/admin/ Html is minified: 109.46 %	1.900	A
Server: nginx
Date: Wed, 04 Sep 2024 23:28:45 GMT
Location: https://[2a01:e34:ec23:b760:acab:3:3:3]/yunohost/admin/
Connection: keep-alive
Content-Security-Policy: upgrade-insecure-requests; default-src https: data: blob: ; object-src https: data: 'unsafe-inline'; style-src https: data: 'unsafe-inline' ; script-src https: data: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
X-Frame-Options: SAMEORIGIN
Referrer-Policy: 'same-origin'
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Content-Type: text/html
Content-Length: 162

• https://78.194.59.118/yunohost/admin/ No Compression used - 694 / 1112 - 62.41 % possible Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 114.17 %	2.243	A
Server: nginx
Date: Wed, 04 Sep 2024 23:28:47 GMT
Connection: keep-alive
Content-Security-Policy: upgrade-insecure-requests; default-src 'self'; connect-src 'self' https://paste.yunohost.org wss://78.194.59.118; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval'; object-src 'none'; img-src 'self' data:;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
X-Frame-Options: SAMEORIGIN
Referrer-Policy: 'same-origin'
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Cache-Control: no-store, must-revalidate, no-cache
Accept-Ranges: bytes
Content-Type: text/html
Content-Length: 1112
Last-Modified: Sun, 25 Aug 2024 11:25:17 GMT

• https://[2a01:e34:ec23:b760:acab:3:3:3]/yunohost/admin/ No Compression used - 694 / 1112 - 62.41 % possible Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 114.17 %	1.917	A
Server: nginx
Date: Wed, 04 Sep 2024 23:28:50 GMT
Connection: keep-alive
Content-Security-Policy: upgrade-insecure-requests; default-src 'self'; connect-src 'self' https://paste.yunohost.org wss://[2a01:e34:ec23:b760:acab:3:3:3]; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval'; object-src 'none'; img-src 'self' data:;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
X-Frame-Options: SAMEORIGIN
Referrer-Policy: 'same-origin'
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Cache-Control: no-store, must-revalidate, no-cache
Accept-Ranges: bytes
Content-Type: text/html
Content-Length: 1112
Last-Modified: Sun, 25 Aug 2024 11:25:17 GMT

7. Comments

	1. General Results, most used to calculate the result
A	name "inv.antopie.org" is subdomain, public suffix is ".org", top-level-domain is ".org", top-level-domain-type is "generic", tld-manager is "Public Interest Registry (PIR)", num .org-domains preloaded: 8524 (complete: 245733)
A	Good: All ip addresses are public addresses
A	Good: Minimal 2 ip addresses per domain name found: inv.antopie.org has 2 different ip addresses (authoritative).
A	Good: Ipv4 and Ipv6 addresses per domain name found: inv.antopie.org has 1 ipv4, 1 ipv6 addresses
A	Good: No asked Authoritative Name Server had a timeout
A	DNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
A	https://[2a01:e34:ec23:b760:acab:3:3:3]/yunohost/admin	301	https://[2a01:e34:ec23:b760:acab:3:3:3]/yunohost/admin/	Correct redirect https to https
A	https://78.194.59.118/yunohost/admin	301	https://78.194.59.118/yunohost/admin/	Correct redirect https to https
A	https://78.194.59.118/ 78.194.59.118	302	https://78.194.59.118/yunohost/admin	Correct redirect https to https
A	https://[2a01:0e34:ec23:b760:acab:0003:0003:0003]/ 2a01:e34:ec23:b760:acab:3:3:3	302	https://[2a01:e34:ec23:b760:acab:3:3:3]/yunohost/admin	Correct redirect https to https
A	Good: destination is https
A	Good - only one version with Http-Status 200
A	Good: one preferred version: non-www is preferred
A	Good: No cookie sent via http.
A	Good: every https has a Strict Transport Security Header
A	Good: HSTS max-age is long enough, 63072000 seconds = 730 days
A	Good: HSTS has includeSubdomains - directive
A	Good: HSTS has preload directive
A	Excellent: Main Domain is in the Google-Preload-List
A	Excellent: Main Domain is in the Mozilla/Firefox-Preload-List
A	HSTS-Preload-Status: Preloaded. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
A	Good: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):0 complete Content-Type - header (6 urls)
	https://inv.antopie.org/ 78.194.59.118			Url with incomplete Content-Type - header - missing charset
	https://inv.antopie.org/ 2a01:e34:ec23:b760:acab:3:3:3			Url with incomplete Content-Type - header - missing charset
	http://inv.antopie.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 78.194.59.118			Url with incomplete Content-Type - header - missing charset
	http://inv.antopie.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a01:e34:ec23:b760:acab:3:3:3			Url with incomplete Content-Type - header - missing charset
	https://78.194.59.118/yunohost/admin/			Url with incomplete Content-Type - header - missing charset
	https://[2a01:e34:ec23:b760:acab:3:3:3]/yunohost/admin/			Url with incomplete Content-Type - header - missing charset
A	http://inv.antopie.org/ 78.194.59.118	301	https://inv.antopie.org/	Correct redirect http - https with the same domain name
A	http://inv.antopie.org/ 2a01:e34:ec23:b760:acab:3:3:3	301	https://inv.antopie.org/	Correct redirect http - https with the same domain name
N	https://78.194.59.118/ 78.194.59.118	302	https://78.194.59.118/yunohost/admin	Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
N	https://[2a01:0e34:ec23:b760:acab:0003:0003:0003]/ 2a01:e34:ec23:b760:acab:3:3:3	302	https://[2a01:e34:ec23:b760:acab:3:3:3]/yunohost/admin	Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
	Fatal: More then one ip address per domain name found, but checking all ip addresses different http status found.: Domain inv.antopie.org, 2 ip addresses, 3 different http results.
	Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain inv.antopie.org, 2 ip addresses.
B	No _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.inv.antopie.org
	2. Header-Checks (Cross-Origin-* headers are alpha - started 2024-06-05)
A	inv.antopie.org 78.194.59.118	Content-Security-Policy		Ok: Header without syntax errors found: upgrade-insecure-requests; default-src https: data: blob: ; object-src https: data: 'unsafe-inline'; style-src https: data: 'unsafe-inline' ; script-src https: data: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:;
F				Bad: default-src with "*" or a scheme found. That allows too much, don't use such a definition.
A				Good: default-src without 'unsafe-inline' or 'unsave-eval'.
E				Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E				Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E				Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
F				Critical: object-src with a scheme definition found. That's too global, don't use such a definition. Use a list of urls instead if you really want to use object / embed / applet.
F				Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
F				Critical: script-src with * or a scheme found. Never allow wildcard - sources.
F				Dangerous: script-src with data: schema found. The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
F				Dangerous: No frame-src defined, but the default-src used as fallback allows the data: schema. That allows hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A		X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
A		Referrer-Policy		Ok: Header without syntax errors found: same-origin
A		Permissions-Policy		Ok: Header without syntax errors found: interest-cohort=()
A		X-Frame-Options		Ok: Header without syntax errors found: SAMEORIGIN
B				Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A		X-Xss-Protection		Ok: Header without syntax errors found: 1; mode=block
B				Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
A	inv.antopie.org 2a01:e34:ec23:b760:acab:3:3:3	Content-Security-Policy		Ok: Header without syntax errors found: upgrade-insecure-requests; default-src https: data: blob: ; object-src https: data: 'unsafe-inline'; style-src https: data: 'unsafe-inline' ; script-src https: data: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:;
F				Bad: default-src with "*" or a scheme found. That allows too much, don't use such a definition.
A				Good: default-src without 'unsafe-inline' or 'unsave-eval'.
E				Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E				Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E				Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
F				Critical: object-src with a scheme definition found. That's too global, don't use such a definition. Use a list of urls instead if you really want to use object / embed / applet.
F				Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
F				Critical: script-src with * or a scheme found. Never allow wildcard - sources.
F				Dangerous: script-src with data: schema found. The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
F				Dangerous: No frame-src defined, but the default-src used as fallback allows the data: schema. That allows hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A		X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
A		Referrer-Policy		Ok: Header without syntax errors found: same-origin
A		Permissions-Policy		Ok: Header without syntax errors found: interest-cohort=()
A		X-Frame-Options		Ok: Header without syntax errors found: SAMEORIGIN
B				Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A		X-Xss-Protection		Ok: Header without syntax errors found: 1; mode=block
B				Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
B	inv.antopie.org 78.194.59.118	Cross-Origin-Embedder-Policy		Info: Missing Header
B	inv.antopie.org 78.194.59.118	Cross-Origin-Opener-Policy		Info: Missing Header
B	inv.antopie.org 78.194.59.118	Cross-Origin-Resource-Policy		Info: Missing Header
B	inv.antopie.org 2a01:e34:ec23:b760:acab:3:3:3	Cross-Origin-Embedder-Policy		Info: Missing Header
B	inv.antopie.org 2a01:e34:ec23:b760:acab:3:3:3	Cross-Origin-Opener-Policy		Info: Missing Header
B	inv.antopie.org 2a01:e34:ec23:b760:acab:3:3:3	Cross-Origin-Resource-Policy		Info: Missing Header
	3. DNS- and NameServer - Checks
A	Info:: 10 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 3 Name Servers.
A	Info:: 10 Queries complete, 10 with IPv6, 0 with IPv4.
A	Good: All DNS Queries done via IPv6.
A	Good: Some ip addresses of name servers found with the minimum of two DNS Queries. One to find the TLD-Zone, one to ask the TLD-Zone.1-you.njalla.no (185.193.124.2, 2001:67c:235c::2), 3-get.njalla.fo (2001:67c:2354:2::5, 95.215.19.5)
	Ok (4 - 8):: An average of 3.3 queries per domain name server required to find all ip addresses of all name servers.
A	Info:: 3 different Name Servers found: 1-you.njalla.no, 2-can.njalla.in, 3-get.njalla.fo, 3 Name Servers included in Delegation: 1-you.njalla.no, 2-can.njalla.in, 3-get.njalla.fo, 3 Name Servers included in 1 Zone definitions: 1-you.njalla.no, 2-can.njalla.in, 3-get.njalla.fo, 1 Name Servers listed in SOA.Primary: 1-you.njalla.no.
A	Good: Only one SOA.Primary Name Server found.: 1-you.njalla.no.
A	Good: SOA.Primary Name Server included in the delegation set.: 1-you.njalla.no.
A	Good: All Name Server Domain Names have a Public Suffix.
A	Good: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
A	Good: All Name Server ip addresses are public.
A	Info: Ipv4-Subnet-list: 3 Name Servers, 2 different subnets (first Byte): 185., 95., 2 different subnets (first two Bytes): 185.193., 95.215., 2 different subnets (first three Bytes): 185.193.124., 95.215.19.
A	Good: Name Server IPv4-addresses from different subnet found:
A	Info: IPv6-Subnet-list: 3 Name Servers with IPv6, 1 different subnets (first block): 2001:, 1 different subnets (first two blocks): 2001:067c:, 2 different subnets (first three blocks): 2001:067c:2354:, 2001:067c:235c:, 2 different subnets (first four blocks): 2001:067c:2354:0002:, 2001:067c:235c:0000:
A	Good: Name Server IPv6 addresses from different subnets found.
A	Good: Nameserver supports TCP connections: 12 good Nameserver
A	Good: Nameserver supports Echo Capitalization: 12 good Nameserver
A	Good: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 12 good Nameserver
A	Good: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 12 good Nameserver
	Nameserver doesn't pass all EDNS-Checks: 1-you.njalla.no: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
A	Good: All SOA have the same Serial Number
A	Good: CAA entries found, creating certificate is limited: letsencrypt.org is allowed to create certificates
	4. Content- and Performance-critical Checks
A	Good: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
A	Good: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
A	Good: No https + http status 200 with inline CSS / JavaScript found
	https://inv.antopie.org/ 78.194.59.118	200		Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
	https://inv.antopie.org/ 2a01:e34:ec23:b760:acab:3:3:3	200		Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
	https://78.194.59.118/yunohost/admin/	200		Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
	https://[2a01:e34:ec23:b760:acab:3:3:3]/yunohost/admin/	200		Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
A	Good: Every https connection via port 443 supports the http/2 protocol via ALPN.
	https://inv.antopie.org/ 78.194.59.118	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 3 script elements without defer/async.
	https://inv.antopie.org/ 2a01:e34:ec23:b760:acab:3:3:3	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 3 script elements without defer/async.
	https://78.194.59.118/yunohost/admin/	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 1 script elements without defer/async.
	https://[2a01:e34:ec23:b760:acab:3:3:3]/yunohost/admin/	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 1 script elements without defer/async.
A	Good: All CSS / JavaScript files are sent compressed (gzip, deflate, br checked). That reduces the content of the files. 16 external CSS / JavaScript files found
A	Good: All CSS / JavaScript files are sent with a long Cache-Control header (minimum 7 days). So the browser can re-use these files, no download is required. 18 external CSS / JavaScript files with long Cache-Control max-age found
A	Good: All checked attribute values are enclosed in quotation marks (" or ').
A	Info: No img element found, no alt attribute checked
A	Good: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
A	Duration: 511040 milliseconds, 511.040 seconds

8. Connections

Domain

Port

Cert.

Protocol

KeyExchange

Strength

Cipher

Strength

HashAlgorithm

OCSP stapling

Domain/KeyExchange

IP/Strength

Port/Cipher

Cert./Strength

Protocol/HashAlgorithm

OCSP stapling

inv.antopie.org

78.194.59.118

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

inv.antopie.org

78.194.59.118

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=inv.antopie.org
	2	CN=R10, O=Let's Encrypt, C=US

inv.antopie.org

2a01:e34:ec23:b760:acab:3:3:3

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

inv.antopie.org

2a01:e34:ec23:b760:acab:3:3:3

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=inv.antopie.org
	2	CN=R10, O=Let's Encrypt, C=US

78.194.59.118

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

78.194.59.118

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain - incomplete		1	CN=yunohost.org

78.194.59.118

443

Certificate/chain invalid and wrong name

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

78.194.59.118

443

Certificate/chain invalid and wrong name

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Self signed certificate		1	CN=yunohost.org

[2a01:e34:ec23:b760:acab:3:3:3]

2a01:e34:ec23:b760:acab:3:3:3

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

[2a01:e34:ec23:b760:acab:3:3:3]

2a01:e34:ec23:b760:acab:3:3:3

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain - incomplete		1	CN=yunohost.org

[2a01:0e34:ec23:b760:acab:0003:0003:0003]

2a01:e34:ec23:b760:acab:3:3:3

443

Certificate/chain invalid and wrong name

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

[2a01:0e34:ec23:b760:acab:0003:0003:0003]

2a01:e34:ec23:b760:acab:3:3:3

443

Certificate/chain invalid and wrong name

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Self signed certificate		1	CN=yunohost.org

inv.antopie.org

78.194.59.118

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

inv.antopie.org

78.194.59.118

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=inv.antopie.org
	2	CN=R10, O=Let's Encrypt, C=US

inv.antopie.org

78.194.59.118

587

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

inv.antopie.org

78.194.59.118

587

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=inv.antopie.org
	2	CN=R10, O=Let's Encrypt, C=US

inv.antopie.org

78.194.59.118

993

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

inv.antopie.org

78.194.59.118

993

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=inv.antopie.org
	2	CN=R10, O=Let's Encrypt, C=US

inv.antopie.org

2a01:e34:ec23:b760:acab:3:3:3

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

inv.antopie.org

2a01:e34:ec23:b760:acab:3:3:3

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=inv.antopie.org
	2	CN=R10, O=Let's Encrypt, C=US

inv.antopie.org

2a01:e34:ec23:b760:acab:3:3:3

587

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

inv.antopie.org

2a01:e34:ec23:b760:acab:3:3:3

587

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=inv.antopie.org
	2	CN=R10, O=Let's Encrypt, C=US

inv.antopie.org

2a01:e34:ec23:b760:acab:3:3:3

993

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

inv.antopie.org

2a01:e34:ec23:b760:acab:3:3:3

993

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=inv.antopie.org
	2	CN=R10, O=Let's Encrypt, C=US

9. Certificates

CN=inv.antopie.org

14.08.2024

12.11.2024
expires in 63 days

inv.antopie.org - 1 entry

CN=inv.antopie.org

14.08.2024

12.11.2024
expires in 63 days

inv.antopie.org - 1 entry

Keyalgorithm	RSA encryption ( bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	03A0C49BD95B5D25705DF60F72AE8ECE2794
Thumbprint:	56B116017C6F48CE9D3542AC735472DA6A9381C2
SHA256 / Certificate:	OIYUhc58IsBJDZRJQtcIVpDU4p2ZxTVoBsxAROi8AzI=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	0ee4aa592cb80bb97d207101e86b53faa5228eeac514fdfeaa75ea6c043b9bde
SHA256 hex / Subject Public Key Information (SPKI):	0ee4aa592cb80bb97d207101e86b53faa5228eeac514fdfeaa75ea6c043b9bde (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://r10.o.lencr.org
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=R10, O=Let's Encrypt, C=US

13.03.2024

13.03.2027
expires in 914 days

CN=R10, O=Let's Encrypt, C=US

13.03.2024

13.03.2027
expires in 914 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	4BA85293F79A2FA273064BA8048D75D0
Thumbprint:	00ABEFD055F9A9C784FFDEABD1DCDD8FED741436
SHA256 / Certificate:	nXw/GqatKy7A1c8eJG+NmubLyf0HVa03u5dLHy+2A/M=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	Error find_SubjectPublicKeyInfo_in_Certificate - no result found
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3919 days

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3919 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	008210CFB0D240E3594463E0BB63828B00
Thumbprint:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:	lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):	96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=yunohost.org

05.02.2022

05.02.2024
218 days expired

yunohost.org, www.yunohost.org, ns.yunohost.org, xmpp-upload.yunohost.org - 4 entries

CN=yunohost.org

05.02.2022

05.02.2024
218 days expired

yunohost.org, www.yunohost.org, ns.yunohost.org, xmpp-upload.yunohost.org - 4 entries

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00C1212C2D4D9EEF3E4D93A03A53CAC630E085A8
Thumbprint:	161F016CC99647BF8F85CB1ED6D45CBFF0A9525F
SHA256 / Certificate:	KGjuXZiog3TfhUdAQrriNF47hxIBX7S1ZMzIl55JMeQ=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	64458082fc0ba2fd33f33a52c9c835258c7c0553a2e1bf3703362fe61e632572
SHA256 hex / Subject Public Key Information (SPKI):	64458082fc0ba2fd33f33a52c9c835258c7c0553a2e1bf3703362fe61e632572 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate.
OfflineRevocation: The revocation function was unable to check revocation because the revocation server was offline.
NotTimeValid: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuer				last 7 days	active	num Certs
CN=R3, O=Let's Encrypt, C=US				0	0	3
CN=R10, O=Let's Encrypt, C=US				0	1	1

CertSpotter-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
7938027029 leaf cert	CN=R10, O=Let's Encrypt, C=US	2024-08-14 03:27:56	2024-11-12 03:27:55	inv.antopie.org - 1 entries
6955337028 leaf cert	CN=R3, O=Let's Encrypt, C=US	2024-03-18 04:25:32	2024-06-16 04:25:31	inv.antopie.org - 1 entries
6495594447 leaf cert	CN=R3, O=Let's Encrypt, C=US	2024-01-04 04:25:44	2024-04-03 04:25:43	inv.antopie.org - 1 entries
6050490794 leaf cert	CN=R3, O=Let's Encrypt, C=US	2023-10-22 03:26:09	2024-01-20 03:26:08	inv.antopie.org - 1 entries

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Issuer				last 7 days	active	num Certs
CN=R3, O=Let's Encrypt, C=US				0 /0 new	0	6
CN=R10, O=Let's Encrypt, C=US				0	1	1

CRT-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
14172503371 leaf cert	CN=R10, O=Let's Encrypt, C=US	2024-08-14 01:27:56	2024-11-12 02:27:55	inv.antopie.org 1 entries
13249832163 leaf cert	CN=R3, O=Let's Encrypt, C=US	2024-06-01 01:42:15	2024-08-30 01:42:14	inv.antopie.org 1 entries
12421715944 leaf cert	CN=R3, O=Let's Encrypt, C=US	2024-03-18 03:25:32	2024-06-16 02:25:31	inv.antopie.org 1 entries
11635504662 leaf cert	CN=R3, O=Let's Encrypt, C=US	2024-01-04 03:25:44	2024-04-03 02:25:43	inv.antopie.org 1 entries
10858383480 leaf cert	CN=R3, O=Let's Encrypt, C=US	2023-10-22 01:26:09	2024-01-20 02:26:08	inv.antopie.org 1 entries
10124507454 precert	CN=R3, O=Let's Encrypt, C=US	2023-08-08 12:20:47	2023-11-06 13:20:46	inv.antopie.org 1 entries
9913211440 leaf cert	CN=R3, O=Let's Encrypt, C=US	2023-07-11 01:26:48	2023-10-09 01:26:47	inv.antopie.org 1 entries

11. Html-Content - Entries

Summary

							Subresource Integrity (SRI)
Domainname	HtmlElement	rel/property	∑	∑ size	∑ problems	∑ int.	∑ ext.	∑ Origin poss.	∑ SRI ParseErrors	∑ SRI valid	∑ SRI missing
https://inv.antopie.org/ 78.194.59.118	a		10		0			0	0	0
	form		1	1,423 Bytes	0	1	0	0	0	0
	link	stylesheet	6	18,807 Bytes	0	6	0	0	0	0
	link	other	6	6,101 Bytes	0	4	0	0	0	0
	meta	other	5		0			0	0	0
	script		3	4,833 Bytes	0	3	0	0	0	0
https://inv.antopie.org/ 2a01:e34:ec23:b760:acab:3:3:3	a		10		0			0	0	0
	form		1	1,423 Bytes	0	1	0	0	0	0
	link	stylesheet	6	18,807 Bytes	0	6	0	0	0	0
	link	other	6	6,101 Bytes	0	4	0	0	0	0
	meta	other	5		0			0	0	0
	script		3	4,833 Bytes	0	3	0	0	0	0
https://[2a01:e34:ec23:b760:acab:3:3:3]/yunohost/admin/	link	stylesheet	2		0			0	0	0
	link	other	2		0			0	0	0
	meta	other	6		0			0	0	0
	script		1		0			0	0	0
https://78.194.59.118/yunohost/admin/	link	stylesheet	2		0			0	0	0
	link	other	2		0			0	0	0
	meta	other	6		0			0	0	0
	script		1		0			0	0	0

Details

Domainname

Html-Element

name/equiv/ property/rel

href/src/content

HttpStatus

msg

∑

Status

https://inv.antopie.org/
78.194.59.118

/feed/popular

/feed/trending

/licenses

/preferences?referer=%2F

/privacy

/toggle_theme?referer=%2F

https://github.com/iv-org/documentation

https://github.com/iv-org/invidious

https://github.com/iv-org/invidious/blob/master/LICENSE

https://invidious.io/donate/

form

get

/search

200

text/html
X-Content-Type-Options nosniff found

1423 Bytes

link

apple-touch-icon

/apple-touch-icon.png?v=e82c965e

200

image/png
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 with long duration found.

No Compression - 3096 Bytes

ETag: W/"1724551762"

link

icon

/favicon-16x16.png?v=e82c965e

200

image/png
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 with long duration found.

No Compression - 589 Bytes

ETag: W/"1724551762"

link

icon

/favicon-32x32.png?v=e82c965e

200

image/png
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 with long duration found.

No Compression - 1316 Bytes

ETag: W/"1724551762"

link

manifest

/site.webmanifest?v=e82c965e

link

mask-icon

/safari-pinned-tab.svg?v=e82c965e

200

image/svg+xml
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 with long duration found.

Compression (gzip): 1100/2067 Bytes

ETag: W/"1724551762"

link

/opensearch.xml

link

stylesheet

/css/carousel.css?v=e82c965e

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 - with long duration found.

Compression (gzip): 1244/2785 Bytes

ETag: W/"1724551762"

local SRI possible, possible hash-values:

sha256-9HYTO2kmMDsPPThi8WYU5KQdzz+nd8KFfCFq+rRwBFc=
sha384-Qap+YGbvggpgG5muEuud96T1H5SKjOkMJswTJPdC10t+DU6XRmZOWlytRW6TIe3b
sha512-uXrWA0pnDYDZAzdWEN8o8qUD2wIAiX8AaAdBH9A39/5aFegzEYs/BenYoQLkoefhYynvMTRpzup91ZdUf5YEuw==

link

stylesheet

/css/default.css?v=e82c965e

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 - with long duration found.

Compression (gzip): 4045/13904 Bytes

ETag: W/"1724551762"

local SRI possible, possible hash-values:

sha256-BJDXv/9x/gh296pAM/4ILjQHdWiYnVnuFJ1+0zYdPMs=
sha384-ZBnWxGO6w5TecrgKILzSABHghBUlQdDEAl/ogDZ+s1nR15r+J72w9lzDl8UJSBOQ
sha512-c/8pW+9MU74J1z+vpldajepB0JLG9gKkG/MU3/ytwIJ6GHi3hX2/wT29/fHNntXnkQGkjiKXdZy8TFaHOkMQkQ==

Content loaded via url("...")

data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB4AAAAeCAYAAAA7MK6iAAAAn0lEQVR42u3UMQrDMBBEUZ9WfQqDmm22EaTyjRMHAlM5K+Y7lb0wnUZPIKHlnutOa+25Z4D++MRBX98MD1V/trSppLKHqj9TTBWKcoUqffbUcbBBEhTjBOV4ja4l4OIAZThEOV6jHO8ARXD+gPPvKMABinGOrnu6gTNUawrcQKNCAQ7QeTxORzle3+sDfjJpPCqhJh7GixZq4rHcc9l5A9qZ+WeBhgEuAAAAAElFTkSuQmCC	1

link

stylesheet

/css/empty.css?v=e82c965e

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 - with long duration found.

255 Bytes

ETag: W/"1724551762"

local SRI possible, possible hash-values:

sha256-F9uQxlqzGEEIDd/rYt/2Hr3mCRku1ISAeGRXPSNT50g=
sha384-XZ3rAADu+Ak8KWBKfT7vMXt4UFJrbo3qvAuCQJi0uYRosvD7ZnqqTsD4G6bUtJAZ
sha512-oOjTi2C6nnh5qHZzecQntua7z/ksGpZteKMfxAb516d2GWLWVmKrMD3xyRvpfBie0sLcDuFqsC1ko6lARHoLkw==

link

stylesheet

/css/grids-responsive-min.css?v=e82c965e

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 - with long duration found.

Compression (gzip): 1297/8035 Bytes

ETag: W/"1724551762"

local SRI possible, possible hash-values:

sha256-4v5Mb8doqtYXS4O6WjkWeCXyi/6fezMMAINzFpEM5gU=
sha384-e+NM0rMilIXo+lz6+dXhoHMjd2iTSxNsCHpqkvuSBsAhwMDRF/Wn2QRRNaLxTcN/
sha512-AoG7Yh0jgzQEh23hDWXGcslKxYiVhlcHMjJsK+GCoDwMXhsqaath8w/3R3LmoDkMbL7cnhn0p5Uzu5NJwQ656Q==

link

stylesheet

/css/ionicons.min.css?v=e82c965e

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 - with long duration found.

Compression (gzip): 8024/45198 Bytes

ETag: W/"1724551762"

local SRI possible, possible hash-values:

sha256-UUDuVsOnvDZHzqNIznkKeDGtWZ/Bw9ZlW+26xqKLV7c=
sha384-9zjn+3tCttp6R6V06B/qkdsE7oUAJ+lysjcDP/g2dLsdr1lob+bXGwjVTg1RL2+W
sha512-mGvZ6LaIZkUhHXDv0H3bqK1Y5bgTIqHP7jr+9HBNAPE8cGUMX0biP122ZfSQryAOUZXeFNg9Xcckz/xi59up7g==

Content loaded via url("...")

../fonts/ionicons.eot?v=4.6.3

../fonts/ionicons.eot?v=4.6.3#iefix

../fonts/ionicons.svg?v=4.6.3#Ionicons

../fonts/ionicons.ttf?v=4.6.3

../fonts/ionicons.woff?v=4.6.3

../fonts/ionicons.woff2?v=4.6.3

link

stylesheet

/css/pure-min.css?v=e82c965e

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 - with long duration found.

Compression (gzip): 3942/17215 Bytes

ETag: W/"1724551762"

local SRI possible, possible hash-values:

sha256-fPXvMqJjeydW056U7AUM/dp5L+sRz0xPK0Mx3p20nkI=
sha384-oAOxQR6DkCoMliIh8yFnu25d7Eq/PHS21PClpwjOTeU2jRSq11vu66rf90/cZr47
sha512-gyV2cd6an9xciCzq6epbcBRu1mEb8VpoYEyGonFVfjqlLtyueiAveRItTjKGZwV1LyP+Md1JsuWBHo1Vo8zOdQ==

meta

utf-8

meta

#575757

meta

Un front-end alternatif à YouTube

meta

width=device-width, initial-scale=1

script

src

/js/_helpers.js?v=e82c965e

200

Missing defer / async attribute.

application/javascript
X-Content-Type-Options nosniff found

This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.

Cache-Control: max-age=2629800 - with long duration found.

Compression (gzip): 2741/9282 Bytes

ETag: W/"1724551762"

local SRI possible, possible hash-values:

sha256-YVfL4rZu3JNyWk7PFf4VJNg5/DLSYfoPt7gQ1CtPINQ=
sha384-aWUIdzdnqhue+JuIAKwsAeHpesG2xsYg4XSyWfCS2jg3jkGpl/SdlG8QNvRweilU
sha512-nIA3tJln/C4sS+x1sDXLxPbEL6tRwceTdIYVP6CKhcrM1cYOZCer+fgWqRwhpc4x0xidE9LxreXdR57nBXyapg==

script

src

/js/handlers.js?v=e82c965e

200

Missing defer / async attribute.

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 - with long duration found.

Compression (gzip): 1424/6012 Bytes

ETag: W/"1724551762"

local SRI possible, possible hash-values:

sha256-bxCjnOaqiXdbnVeFMIxFIlHwgd4qSwZvvbgaoAbqFG0=
sha384-ZZDbiD3OnprcI07JibgUreoTjxXswwQwrHIuYC3/ypLGSoBbJbqQOoiP6UFhftjM
sha512-/KwS3s4iqnGOlBXhDUYXoLpEzpBY+y5AmFhsOTxinHXOKYj1OW1T3ojdSsWbbH3oXpBgtuRoKNnSqIRFjFvtkQ==

script

src

/js/themes.js?v=e82c965e

200

Missing defer / async attribute.

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 - with long duration found.

Compression (gzip): 668/1657 Bytes

ETag: W/"1724551762"

local SRI possible, possible hash-values:

sha256-UUL8pNNlIKSezGTl3TM4ViYvBUL2fKRwYBa78JP6nBU=
sha384-pbb9it1VX/UvZtSqR8Rt6XF5oz/5ZHX4yMhP/0Aa1GMOcjcCKqYktCGCdtuagc0Q
sha512-LpRKcWoOUDY1eGc6Py6OJuByQFj044OlLwGQOKB3KAcpZ6cVSF8nuLk/tEScVEsHknssvpsYu1I8FQW01e9r5w==

2a01:e34:ec23:b760:acab:3:3:3

/feed/popular

/feed/trending

/licenses

/preferences?referer=%2F

/privacy

/toggle_theme?referer=%2F

https://github.com/iv-org/documentation

https://github.com/iv-org/invidious

https://github.com/iv-org/invidious/blob/master/LICENSE

https://invidious.io/donate/

form

get

/search

200

text/html
X-Content-Type-Options nosniff found

1423 Bytes

link

apple-touch-icon

/apple-touch-icon.png?v=e82c965e

200

image/png
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 with long duration found.

No Compression - 3096 Bytes

ETag: W/"1724551762"

link

icon

/favicon-16x16.png?v=e82c965e

200

image/png
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 with long duration found.

No Compression - 589 Bytes

ETag: W/"1724551762"

link

icon

/favicon-32x32.png?v=e82c965e

200

image/png
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 with long duration found.

No Compression - 1316 Bytes

ETag: W/"1724551762"

link

manifest

/site.webmanifest?v=e82c965e

link

mask-icon

/safari-pinned-tab.svg?v=e82c965e

200

image/svg+xml
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 with long duration found.

Compression (gzip): 1100/2067 Bytes

ETag: W/"1724551762"

link

/opensearch.xml

link

stylesheet

/css/carousel.css?v=e82c965e

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 - with long duration found.

Compression (gzip): 1244/2785 Bytes

ETag: W/"1724551762"

local SRI possible, possible hash-values:

link

stylesheet

/css/default.css?v=e82c965e

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 - with long duration found.

Compression (gzip): 4045/13904 Bytes

ETag: W/"1724551762"

local SRI possible, possible hash-values:

Content loaded via url("...")

data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB4AAAAeCAYAAAA7MK6iAAAAn0lEQVR42u3UMQrDMBBEUZ9WfQqDmm22EaTyjRMHAlM5K+Y7lb0wnUZPIKHlnutOa+25Z4D++MRBX98MD1V/trSppLKHqj9TTBWKcoUqffbUcbBBEhTjBOV4ja4l4OIAZThEOV6jHO8ARXD+gPPvKMABinGOrnu6gTNUawrcQKNCAQ7QeTxORzle3+sDfjJpPCqhJh7GixZq4rHcc9l5A9qZ+WeBhgEuAAAAAElFTkSuQmCC	1

link

stylesheet

/css/empty.css?v=e82c965e

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 - with long duration found.

255 Bytes

ETag: W/"1724551762"

local SRI possible, possible hash-values:

link

stylesheet

/css/grids-responsive-min.css?v=e82c965e

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 - with long duration found.

Compression (gzip): 1297/8035 Bytes

ETag: W/"1724551762"

local SRI possible, possible hash-values:

link

stylesheet

/css/ionicons.min.css?v=e82c965e

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 - with long duration found.

Compression (gzip): 8024/45198 Bytes

ETag: W/"1724551762"

local SRI possible, possible hash-values:

Content loaded via url("...")

../fonts/ionicons.eot?v=4.6.3

../fonts/ionicons.eot?v=4.6.3#iefix

../fonts/ionicons.svg?v=4.6.3#Ionicons

../fonts/ionicons.ttf?v=4.6.3

../fonts/ionicons.woff?v=4.6.3

../fonts/ionicons.woff2?v=4.6.3

link

stylesheet

/css/pure-min.css?v=e82c965e

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 - with long duration found.

Compression (gzip): 3942/17215 Bytes

ETag: W/"1724551762"

local SRI possible, possible hash-values:

meta

utf-8

meta

#575757

meta

Un front-end alternatif à YouTube

meta

width=device-width, initial-scale=1

script

src

/js/_helpers.js?v=e82c965e

200

Missing defer / async attribute.

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 - with long duration found.

Compression (gzip): 2741/9282 Bytes

ETag: W/"1724551762"

local SRI possible, possible hash-values:

script

src

/js/handlers.js?v=e82c965e

200

Missing defer / async attribute.

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 - with long duration found.

Compression (gzip): 1424/6012 Bytes

ETag: W/"1724551762"

local SRI possible, possible hash-values:

script

src

/js/themes.js?v=e82c965e

200

Missing defer / async attribute.

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=2629800 - with long duration found.

Compression (gzip): 668/1657 Bytes

ETag: W/"1724551762"

local SRI possible, possible hash-values:

https://[2a01:e34:ec23:b760:acab:3:3:3]/yunohost/admin/

link

icon

/yunohost/admin/favicon.png

link

modulepreload

/yunohost/admin/assets/core-c48c7c53.js

link

stylesheet

/yunohost/admin/assets/core-313d1d05.css

link

stylesheet

/yunohost/admin/assets/index-c4708e0a.css

meta

utf-8

meta

IE=edge

meta

noindex, nofollow

meta

no-referrer

meta

telephone=no

meta

width=device-width, initial-scale=1, maximum-scale=1, user-scalable=yes

script

src

/yunohost/admin/assets/index-fe127280.js

Missing defer / async attribute.

https://78.194.59.118/yunohost/admin/

link

icon

/yunohost/admin/favicon.png

link

modulepreload

/yunohost/admin/assets/core-c48c7c53.js

link

stylesheet

/yunohost/admin/assets/core-313d1d05.css

link

stylesheet

/yunohost/admin/assets/index-c4708e0a.css

meta

utf-8

meta

IE=edge

meta

noindex, nofollow

meta

no-referrer

meta

telephone=no

meta

width=device-width, initial-scale=1, maximum-scale=1, user-scalable=yes

script

src

/yunohost/admin/assets/index-fe127280.js

Missing defer / async attribute.

12. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: 1-you.njalla.no, 2-can.njalla.in, 3-get.njalla.fo

QNr.	Domain	Type	NS used
1	no	NS	b.root-servers.net (2001:500:200::b)
	Answer: i.nic.no, njet.norid.no, not.norid.no, x.nic.no, y.nic.no, z.nic.no
2	1-you.njalla.no: 185.193.124.2, 2001:67c:235c::2	NS	i.nic.no (2001:67c:1010:1::53)
3	in	NS	e.root-servers.net (2001:500:a8::e)
	Answer: ns1.registry.in, ns2.registry.in, ns3.registry.in, ns4.registry.in, ns5.registry.in, ns6.registry.in
4	2-can.njalla.in	NS	ns1.registry.in (2001:dcd:1::12)
	Answer: ns1.njal.la, ns2.njal.la, ns3.njal.la
5	fo	NS	g.root-servers.net (2001:500:12::d0d)
	Answer: a.nic.fo, b.nic.fo, c.nic.fo, d.nic.fo
6	3-get.njalla.fo: 2001:67c:2354:2::5, 95.215.19.5	NS	a.nic.fo (2001:67c:13cc::1:27)
7	la	NS	g.root-servers.net (2001:500:12::d0d)
	Answer: ns1.nic.la, ns2.nic.la, ns3.nic.la, ns4.nic.la
8	ns1.njal.la: 2001:67c:2354:2::5, 95.215.19.5	NS	ns1.nic.la (2a04:2b00:13cc::1:15)
	Answer: ns2.njal.la 185.193.124.34, 2001:67c:235c::34
	Answer: ns3.njal.la 185.193.124.2, 2001:67c:235c::2
9	2-can.njalla.in: 185.193.124.34	A	ns1.njal.la (2001:67c:2354:2::5)
10	2-can.njalla.in: 2001:67c:235c::34	AAAA	ns1.njal.la (2001:67c:2354:2::5)

13. CAA - Entries

Domainname	flag	Name	Value	∑ Queries
yuno.antopie.org	0		no CAA entry found	1
inv.antopie.org				1
antopie.org	5	issue	letsencrypt.org	1
	5	issue	letsencrypt.org	1
org	0		no CAA entry found	1
	0		no CAA entry found	1

14. TXT - Entries

Domainname	TXT Entry	Status	∑ Queries
antopie.org	v=spf1 a mx -all	ok	1
inv.antopie.org	v=spf1 a mx -all	ok	1
_acme-challenge.inv.antopie.org		Name Error - The domain name does not exist	1
_acme-challenge.yuno.antopie.org		Name Error - The domain name does not exist	1
_acme-challenge.inv.antopie.org.antopie.org		Name Error - The domain name does not exist	1
_acme-challenge.inv.antopie.org.inv.antopie.org		Name Error - The domain name does not exist	1
_acme-challenge.yuno.antopie.org.yuno.antopie.org		Name Error - The domain name does not exist	1

15. DomainService - Entries (SPF-Check is alpha - 2024-06-22, DMARC-Detailcheck is alpha - 2024-07-06, SMTP-TLS-Reporting is alpa - 2024-07-13)

Type		Domain	Pref	Value	DNS-error	num Answers	Status	Description
SPF	TXT	inv.antopie.org					32768	TXT expected, but CNAME found. CNAME not allowed, only TXT queries are allowed. See RFC 7208, 4.4.

16. Cipher Suites

Summary
Domain	IP	Port	num Ciphers	time	Std.Protocol	Forward Secrecy
inv.antopie.org	78.194.59.118	25	3 Ciphers	46.72 sec	SMTP	0 without, 3 FS	100.00 %
inv.antopie.org	78.194.59.118	443	3 Ciphers	30.55 sec		0 without, 3 FS	100.00 %
inv.antopie.org	78.194.59.118	587	3 Ciphers	44.96 sec	SMTP (encrypted, submission)	0 without, 3 FS	100.00 %
inv.antopie.org	78.194.59.118	993	3 Ciphers	33.52 sec	IMAP (encrypted)	0 without, 3 FS	100.00 %
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	25	3 Ciphers	40.94 sec	SMTP	0 without, 3 FS	100.00 %
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	443	3 Ciphers	27.27 sec		0 without, 3 FS	100.00 %
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	587	3 Ciphers	40.36 sec	SMTP (encrypted, submission)	0 without, 3 FS	100.00 %
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	993	3 Ciphers	29.57 sec	IMAP (encrypted)	0 without, 3 FS	100.00 %
Complete		8	24 Ciphers 3.00 Ciphers/Check	293.90 sec	36.74 sec/Check	0 without, 24 FS	100.00 %

Details
Domain	IP	Port	Cipher (OpenSsl / IANA)
inv.antopie.org	78.194.59.118	25	ECDHE-RSA-CHACHA20-POLY1305		(Secure)	TLSv1.2	0xCC,0xA8	FS
3 Ciphers, 46.72 sec			TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
			ECDH		RSA	CHACHA20/POLY1305(256)	AEAD
			ECDHE-RSA-AES256-GCM-SHA384		(Secure)	TLSv1.2	0xC0,0x30	FS
			TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
			ECDH		RSA	AESGCM(256)	AEAD
			ECDHE-RSA-AES128-GCM-SHA256		(Secure)	TLSv1.2	0xC0,0x2F	FS
			TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
			ECDH		RSA	AESGCM(128)	AEAD
		443	ECDHE-RSA-CHACHA20-POLY1305		(Secure)	TLSv1.2	0xCC,0xA8	FS
3 Ciphers, 30.55 sec			TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
			ECDH		RSA	CHACHA20/POLY1305(256)	AEAD
			ECDHE-RSA-AES256-GCM-SHA384		(Secure)	TLSv1.2	0xC0,0x30	FS
			TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
			ECDH		RSA	AESGCM(256)	AEAD
			ECDHE-RSA-AES128-GCM-SHA256		(Secure)	TLSv1.2	0xC0,0x2F	FS
			TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
			ECDH		RSA	AESGCM(128)	AEAD
		587	ECDHE-RSA-CHACHA20-POLY1305		(Secure)	TLSv1.2	0xCC,0xA8	FS
3 Ciphers, 44.96 sec			TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
			ECDH		RSA	CHACHA20/POLY1305(256)	AEAD
			ECDHE-RSA-AES256-GCM-SHA384		(Secure)	TLSv1.2	0xC0,0x30	FS
			TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
			ECDH		RSA	AESGCM(256)	AEAD
			ECDHE-RSA-AES128-GCM-SHA256		(Secure)	TLSv1.2	0xC0,0x2F	FS
			TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
			ECDH		RSA	AESGCM(128)	AEAD
		993	ECDHE-RSA-CHACHA20-POLY1305		(Secure)	TLSv1.2	0xCC,0xA8	FS
3 Ciphers, 33.52 sec			TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
			ECDH		RSA	CHACHA20/POLY1305(256)	AEAD
			ECDHE-RSA-AES256-GCM-SHA384		(Secure)	TLSv1.2	0xC0,0x30	FS
			TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
			ECDH		RSA	AESGCM(256)	AEAD
			ECDHE-RSA-AES128-GCM-SHA256		(Secure)	TLSv1.2	0xC0,0x2F	FS
			TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
			ECDH		RSA	AESGCM(128)	AEAD
	2a01:e34:ec23:b760:acab:3:3:3	25	ECDHE-RSA-CHACHA20-POLY1305		(Secure)	TLSv1.2	0xCC,0xA8	FS
3 Ciphers, 40.94 sec			TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
			ECDH		RSA	CHACHA20/POLY1305(256)	AEAD
			ECDHE-RSA-AES256-GCM-SHA384		(Secure)	TLSv1.2	0xC0,0x30	FS
			TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
			ECDH		RSA	AESGCM(256)	AEAD
			ECDHE-RSA-AES128-GCM-SHA256		(Secure)	TLSv1.2	0xC0,0x2F	FS
			TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
			ECDH		RSA	AESGCM(128)	AEAD
		443	ECDHE-RSA-CHACHA20-POLY1305		(Secure)	TLSv1.2	0xCC,0xA8	FS
3 Ciphers, 27.27 sec			TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
			ECDH		RSA	CHACHA20/POLY1305(256)	AEAD
			ECDHE-RSA-AES256-GCM-SHA384		(Secure)	TLSv1.2	0xC0,0x30	FS
			TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
			ECDH		RSA	AESGCM(256)	AEAD
			ECDHE-RSA-AES128-GCM-SHA256		(Secure)	TLSv1.2	0xC0,0x2F	FS
			TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
			ECDH		RSA	AESGCM(128)	AEAD
		587	ECDHE-RSA-CHACHA20-POLY1305		(Secure)	TLSv1.2	0xCC,0xA8	FS
3 Ciphers, 40.36 sec			TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
			ECDH		RSA	CHACHA20/POLY1305(256)	AEAD
			ECDHE-RSA-AES256-GCM-SHA384		(Secure)	TLSv1.2	0xC0,0x30	FS
			TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
			ECDH		RSA	AESGCM(256)	AEAD
			ECDHE-RSA-AES128-GCM-SHA256		(Secure)	TLSv1.2	0xC0,0x2F	FS
			TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
			ECDH		RSA	AESGCM(128)	AEAD
		993	ECDHE-RSA-CHACHA20-POLY1305		(Secure)	TLSv1.2	0xCC,0xA8	FS
3 Ciphers, 29.57 sec			TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
			ECDH		RSA	CHACHA20/POLY1305(256)	AEAD
			ECDHE-RSA-AES256-GCM-SHA384		(Secure)	TLSv1.2	0xC0,0x30	FS
			TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
			ECDH		RSA	AESGCM(256)	AEAD
			ECDHE-RSA-AES128-GCM-SHA256		(Secure)	TLSv1.2	0xC0,0x2F	FS
			TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
			ECDH		RSA	AESGCM(128)	AEAD

17. Portchecks

Domain	IP	Port	Description	Result	Answer
inv.antopie.org	78.194.59.118	21	FTP	open

inv.antopie.org	78.194.59.118	21	FTP	open
inv.antopie.org	78.194.59.118	22	SSH	open
SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u3
inv.antopie.org	78.194.59.118	22	SSH	open	SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u3	Bad: SSH without DNS SSHFP Record found
					Possible DNS SSHFP Entries: inv.antopie.org IN SSHFP 4 2 580e02ebedf540ffb20f001da66b4d6fbd9a80aaffab16250b383b036d879629
inv.antopie.org	78.194.59.118	25	SMTP	open
220 yuno.antopie.org Service ready Answer EHLO: 250-yuno.antopie.org 250-PIPELINING 250-SIZE 35914708 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING Answer AUTH LOGIN: (no AUTH option found)		Mail certificate is valid
inv.antopie.org	78.194.59.118	25	SMTP	open	220 yuno.antopie.org Service ready	Mail certificate is valid
					Answer EHLO: 250-yuno.antopie.org 250-PIPELINING 250-SIZE 35914708 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING	Good: STARTTLS found
						Excellent: No unencrypted login possible
					Mail From: openrelay-test@check-your-website.server-daten.de RCPT TO: openrelay-result@check-your-website.server-daten.de 5804:error:1420410A:SSL routines:SSL_renegotiate:wrong ssl version:ssl/ssl_lib.c:2143:	Excellent: No open relay after STARTTLS
inv.antopie.org	78.194.59.118	53	DNS	open

inv.antopie.org	78.194.59.118	53	DNS	open
inv.antopie.org	78.194.59.118	110	POP3

inv.antopie.org	78.194.59.118	110	POP3
inv.antopie.org	78.194.59.118	143	IMAP

inv.antopie.org	78.194.59.118	143	IMAP
inv.antopie.org	78.194.59.118	465	SMTP (encrypted)

inv.antopie.org	78.194.59.118	465	SMTP (encrypted)
inv.antopie.org	78.194.59.118	587	SMTP (encrypted, submission)	open
220 yuno.antopie.org Service ready Answer EHLO: 250-yuno.antopie.org 250-PIPELINING 250-SIZE 35914708 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING Answer AUTH LOGIN: (no AUTH option found)		Mail certificate is valid
inv.antopie.org	78.194.59.118	587	SMTP (encrypted, submission)	open	220 yuno.antopie.org Service ready	Mail certificate is valid
					Answer EHLO: 250-yuno.antopie.org 250-PIPELINING 250-SIZE 35914708 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING	Good: STARTTLS found
						Excellent: No unencrypted login possible
					Mail From: openrelay-test@check-your-website.server-daten.de RCPT TO: openrelay-result@check-your-website.server-daten.de	Excellent: Server want's Renegotiating after sending the RCPT TO - Command, no open relay after STARTTLS
inv.antopie.org	78.194.59.118	993	IMAP (encrypted)	open
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot (Debian) ready.		Mail certificate is valid
inv.antopie.org	78.194.59.118	993	IMAP (encrypted)	open	* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot (Debian) ready.	Mail certificate is valid
inv.antopie.org	78.194.59.118	995	POP3 (encrypted)

inv.antopie.org	78.194.59.118	995	POP3 (encrypted)
inv.antopie.org	78.194.59.118	1433	MS SQL

inv.antopie.org	78.194.59.118	1433	MS SQL
inv.antopie.org	78.194.59.118	2082	cPanel (http)

inv.antopie.org	78.194.59.118	2082	cPanel (http)
inv.antopie.org	78.194.59.118	2083	cPanel (https)

inv.antopie.org	78.194.59.118	2083	cPanel (https)
inv.antopie.org	78.194.59.118	2086	WHM (http)

inv.antopie.org	78.194.59.118	2086	WHM (http)
inv.antopie.org	78.194.59.118	2087	WHM (https)

inv.antopie.org	78.194.59.118	2087	WHM (https)
inv.antopie.org	78.194.59.118	2089	cPanel Licensing

inv.antopie.org	78.194.59.118	2089	cPanel Licensing
inv.antopie.org	78.194.59.118	2095	cPanel Webmail (http)

inv.antopie.org	78.194.59.118	2095	cPanel Webmail (http)
inv.antopie.org	78.194.59.118	2096	cPanel Webmail (https)

inv.antopie.org	78.194.59.118	2096	cPanel Webmail (https)
inv.antopie.org	78.194.59.118	2222	DirectAdmin (http)

inv.antopie.org	78.194.59.118	2222	DirectAdmin (http)
inv.antopie.org	78.194.59.118	2222	DirectAdmin (https)

inv.antopie.org	78.194.59.118	2222	DirectAdmin (https)
inv.antopie.org	78.194.59.118	3306	mySql

inv.antopie.org	78.194.59.118	3306	mySql
inv.antopie.org	78.194.59.118	5224	Plesk Licensing

inv.antopie.org	78.194.59.118	5224	Plesk Licensing
inv.antopie.org	78.194.59.118	5432	PostgreSQL

inv.antopie.org	78.194.59.118	5432	PostgreSQL
inv.antopie.org	78.194.59.118	8080	Ookla Speedtest (http)

inv.antopie.org	78.194.59.118	8080	Ookla Speedtest (http)
inv.antopie.org	78.194.59.118	8080	Ookla Speedtest (https)

inv.antopie.org	78.194.59.118	8080	Ookla Speedtest (https)
inv.antopie.org	78.194.59.118	8083	VestaCP http

inv.antopie.org	78.194.59.118	8083	VestaCP http
inv.antopie.org	78.194.59.118	8083	VestaCP https

inv.antopie.org	78.194.59.118	8083	VestaCP https
inv.antopie.org	78.194.59.118	8443	Plesk Administration (https)

inv.antopie.org	78.194.59.118	8443	Plesk Administration (https)
inv.antopie.org	78.194.59.118	8447	Plesk Installer + Updates

inv.antopie.org	78.194.59.118	8447	Plesk Installer + Updates
inv.antopie.org	78.194.59.118	8880	Plesk Administration (http)

inv.antopie.org	78.194.59.118	8880	Plesk Administration (http)
inv.antopie.org	78.194.59.118	10000	Webmin (http)

inv.antopie.org	78.194.59.118	10000	Webmin (http)
inv.antopie.org	78.194.59.118	10000	Webmin (https)

inv.antopie.org	78.194.59.118	10000	Webmin (https)
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	21	FTP

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	21	FTP
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	22	SSH	open
SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u3
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	22	SSH	open	SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u3	Bad: SSH without DNS SSHFP Record found
					Possible DNS SSHFP Entries: inv.antopie.org IN SSHFP 4 2 580e02ebedf540ffb20f001da66b4d6fbd9a80aaffab16250b383b036d879629
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	25	SMTP	open
220 yuno.antopie.org Service ready Answer EHLO: 250-yuno.antopie.org 250-PIPELINING 250-SIZE 35914708 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING Answer AUTH LOGIN: (no AUTH option found)		Mail certificate is valid
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	25	SMTP	open	220 yuno.antopie.org Service ready	Mail certificate is valid
					Answer EHLO: 250-yuno.antopie.org 250-PIPELINING 250-SIZE 35914708 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING	Good: STARTTLS found
						Excellent: No unencrypted login possible
					Mail From: openrelay-test@check-your-website.server-daten.de RCPT TO: openrelay-result@check-your-website.server-daten.de	Excellent: Server want's Renegotiating after sending the RCPT TO - Command, no open relay after STARTTLS
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	53	DNS	open

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	53	DNS	open
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	110	POP3

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	110	POP3
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	143	IMAP

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	143	IMAP
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	465	SMTP (encrypted)

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	465	SMTP (encrypted)
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	587	SMTP (encrypted, submission)	open
220 yuno.antopie.org Service ready Answer EHLO: 250-yuno.antopie.org 250-PIPELINING 250-SIZE 35914708 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING Answer AUTH LOGIN: (no AUTH option found)		Mail certificate is valid
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	587	SMTP (encrypted, submission)	open	220 yuno.antopie.org Service ready	Mail certificate is valid
					Answer EHLO: 250-yuno.antopie.org 250-PIPELINING 250-SIZE 35914708 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING	Good: STARTTLS found
						Excellent: No unencrypted login possible
					Mail From: openrelay-test@check-your-website.server-daten.de RCPT TO: openrelay-result@check-your-website.server-daten.de	Excellent: Server want's Renegotiating after sending the RCPT TO - Command, no open relay after STARTTLS
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	993	IMAP (encrypted)	open
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot (Debian) ready.		Mail certificate is valid
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	993	IMAP (encrypted)	open	* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot (Debian) ready.	Mail certificate is valid
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	995	POP3 (encrypted)

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	995	POP3 (encrypted)
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	1433	MS SQL

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	1433	MS SQL
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	2082	cPanel (http)

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	2082	cPanel (http)
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	2083	cPanel (https)

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	2083	cPanel (https)
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	2086	WHM (http)

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	2086	WHM (http)
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	2087	WHM (https)

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	2087	WHM (https)
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	2089	cPanel Licensing

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	2089	cPanel Licensing
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	2095	cPanel Webmail (http)

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	2095	cPanel Webmail (http)
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	2096	cPanel Webmail (https)

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	2096	cPanel Webmail (https)
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	2222	DirectAdmin (http)

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	2222	DirectAdmin (http)
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	2222	DirectAdmin (https)

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	2222	DirectAdmin (https)
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	3306	mySql

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	3306	mySql
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	5224	Plesk Licensing

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	5224	Plesk Licensing
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	5432	PostgreSQL

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	5432	PostgreSQL
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	8080	Ookla Speedtest (http)

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	8080	Ookla Speedtest (http)
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	8080	Ookla Speedtest (https)

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	8080	Ookla Speedtest (https)
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	8083	VestaCP http

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	8083	VestaCP http
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	8083	VestaCP https

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	8083	VestaCP https
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	8443	Plesk Administration (https)

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	8443	Plesk Administration (https)
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	8447	Plesk Installer + Updates

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	8447	Plesk Installer + Updates
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	8880	Plesk Administration (http)

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	8880	Plesk Administration (http)
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	10000	Webmin (http)

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	10000	Webmin (http)
inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	10000	Webmin (https)

inv.antopie.org	2a01:e34:ec23:b760:acab:3:3:3	10000	Webmin (https)

Permalink: https://check-your-website.server-daten.de/?i=2bef3d46-2154-48f0-85ca-d77905c5ffa6

Last Result: https://check-your-website.server-daten.de/?q=inv.antopie.org - 2024-09-05 01:26:52

Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=inv.antopie.org" target="_blank">Check this Site: inv.antopie.org</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

QR-Code of this page - https://check-your-website.server-daten.de/?d=inv.antopie.org

Check DNS, Urls + Redirects, Certificates and Content of your Website

Older results

1. IP-Addresses

2. DNSSEC

3. Name Servers

4. SOA-Entries

5. Screenshots

Mobile- and other Chrome-Checks

6. Url-Checks

7. Comments

1. General Results, most used to calculate the result

2. Header-Checks (Cross-Origin-* headers are alpha - started 2024-06-05)

3. DNS- and NameServer - Checks

4. Content- and Performance-critical Checks

8. Connections

9. Certificates

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

11. Html-Content - Entries

Summary

Details

12. Nameserver - IP-Adresses

13. CAA - Entries

14. TXT - Entries

15. DomainService - Entries (SPF-Check is alpha - 2024-06-22, DMARC-Detailcheck is alpha - 2024-07-06, SMTP-TLS-Reporting is alpa - 2024-07-13)

16. Cipher Suites

17. Portchecks