Check DNS, Urls + Redirects, Certificates and Content of your Website

0 in Queue, 0 of max. 4 Checks (03:49:49)
Why should you only use Prefix - Cookies? |
Hall of Fame - A+ and A

 

Shortcuts: 1. IP-Addresses | 2. DNSSEC | 3. Name Servers | 4. SOA-Entries | 5. Screenshots | 6. Url-Checks | 7. Comments | 8. Connections | 9. Certificates | 10. CT-Logs | 11. Html-Content | 12. Html-Parsing | 13. NameServer-IPAddresses | 14. CAA | 15. TXT | 16. DomainServiceEntries | 17. Cipher Suites | 18. Portchecks |

 

L

 

Loop - it's impossible to use this site

 

Checked:
01.08.2026 06:19:23

 

Older results

No older results found

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
jeigh.com
A
216.240.36.10
Los Angeles/California/United States (US) - Bel Air Internet, LLC
Hostname: lounge.jeigh.com
yes
1
0

AAAA

yes


www.jeigh.com
A
104.21.22.212
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.
No Hostname found
yes
1
0

A
172.67.207.28
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.
No Hostname found
yes
1
0

AAAA
2606:4700:3031::ac43:cf1c
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.

yes



AAAA
2606:4700:3034::6815:16d4
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.

yes


*.jeigh.com
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






• Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 57780, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 21.08.2026, 00:00:00 +, Signature-Inception: 31.07.2026, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: com

com
1 DS RR in the parent zone found






DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=






1 RRSIG RR to validate DS RR found






RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 13.08.2026, 20:00:00 +, Signature-Inception: 31.07.2026, 19:00:00 +, KeyTag 57780, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 57780 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 19718, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 13, KeyTag 41446, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner com., Algorithm: 13, 1 Labels, original TTL: 86400 sec, Signature-expiration: 10.08.2026, 14:02:35 +, Signature-Inception: 26.07.2026, 13:57:35 +, KeyTag 19718, Signer-Name: com






• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 19718 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest "isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: jeigh.com

jeigh.com
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "f87lppn7u8cmhgf47mu2rriuclda3cpv" between the hashed NSEC3-owner "f87lmcghknl8jmc5s8pt0jfbm7dbdke5" and the hashed NextOwner "f87lqb5t6bcd084lsq4dvvrhej9blio8". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner f87lmcghknl8jmc5s8pt0jfbm7dbdke5.com., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 05.08.2026, 00:29:46 +, Signature-Inception: 28.07.2026, 23:19:46 +, KeyTag 41446, Signer-Name: com






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "ck0pojmg874ljref7efn8430qvit8bsm" as Owner. That's the Hash of "com" with the NextHashedOwnerName "ck0q3udg8cekkae7rukpgct1dvssh8ll". So that domain name is the Closest Encloser of "jeigh.com". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner ck0pojmg874ljref7efn8430qvit8bsm.com., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 06.08.2026, 00:26:26 +, Signature-Inception: 29.07.2026, 23:16:26 +, KeyTag 41446, Signer-Name: com






2 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 2371, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 13, KeyTag 34505, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner jeigh.com., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 17.09.2026, 06:39:18 +, Signature-Inception: 18.07.2026, 06:39:18 +, KeyTag 2371, Signer-Name: jeigh.com






• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 2371 used to validate the DNSKEY RRSet






Error: DNSKEY 2371 signs DNSKEY RRset, but no confirming DS RR in the parent zone found. No chain of trust created.






RRSIG Type 1 validates the A - Result: 216.240.36.10
Validated: RRSIG-Owner jeigh.com., Algorithm: 13, 2 Labels, original TTL: 300 sec, Signature-expiration: 02.08.2026, 05:19:43 +, Signature-Inception: 31.07.2026, 03:19:43 +, KeyTag 34505, Signer-Name: jeigh.com






RRSIG Type 16 validates the TXT - Result: @ v=spf1 include:_spf.google.com ~all MS=10382B6CE8757A1D3652085E59F42616A2400559
Validated: RRSIG-Owner jeigh.com., Algorithm: 13, 2 Labels, original TTL: 300 sec, Signature-expiration: 02.08.2026, 05:19:43 +, Signature-Inception: 31.07.2026, 03:19:43 +, KeyTag 34505, Signer-Name: jeigh.com






CNAME-Query sends a valid NSEC RR as result with the query name "jeigh.com" equal the NSEC-owner "jeigh.com" and the NextOwner "\000.jeigh.com". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, NS, SOA, PTR, 13, MX, TXT, AAAA, LOC, SRV, NAPTR, CERT, SSHFP, RRSIG, NSEC, DNSKEY, TLSA, 53, HIP, CDS, CDNSKEY, 61, 64, 65, URI, CAA Validated: RRSIG-Owner jeigh.com., Algorithm: 13, 2 Labels, original TTL: 1800 sec, Signature-expiration: 02.08.2026, 05:19:43 +, Signature-Inception: 31.07.2026, 03:19:43 +, KeyTag 34505, Signer-Name: jeigh.com






Status: Good. NoData-Proof required and found.






AAAA-Query sends a valid NSEC RR as result with the query name "jeigh.com" equal the NSEC-owner "jeigh.com" and the NextOwner "\000.jeigh.com". So the zone confirmes the not-existence of that AAAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, NS, SOA, PTR, 13, MX, TXT, LOC, SRV, NAPTR, CERT, SSHFP, RRSIG, NSEC, DNSKEY, TLSA, 53, HIP, CDS, CDNSKEY, 61, 64, 65, URI, CAA Validated: RRSIG-Owner jeigh.com., Algorithm: 13, 2 Labels, original TTL: 1800 sec, Signature-expiration: 02.08.2026, 05:19:43 +, Signature-Inception: 31.07.2026, 03:19:43 +, KeyTag 34505, Signer-Name: jeigh.com






Status: Good. NoData-Proof required and found.






TLSA-Query (_443._tcp.jeigh.com) sends a valid NSEC RR as result with the query name "_443._tcp.jeigh.com" equal the NSEC-owner "_443._tcp.jeigh.com" and the NextOwner "\000._443._tcp.jeigh.com". So the zone confirmes the not-existence of that TLSA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: RRSIG, NSEC, 128 Validated: RRSIG-Owner _443._tcp.jeigh.com., Algorithm: 13, 4 Labels, original TTL: 1800 sec, Signature-expiration: 02.08.2026, 05:19:43 +, Signature-Inception: 31.07.2026, 03:19:43 +, KeyTag 34505, Signer-Name: jeigh.com






Status: Good. NoData-Proof required and found.






CAA-Query sends a valid NSEC RR as result with the query name "jeigh.com" equal the NSEC-owner "jeigh.com" and the NextOwner "\000.jeigh.com". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, NS, SOA, PTR, 13, MX, TXT, AAAA, LOC, SRV, NAPTR, CERT, SSHFP, RRSIG, NSEC, DNSKEY, TLSA, 53, HIP, CDS, CDNSKEY, 61, 64, 65, URI Validated: RRSIG-Owner jeigh.com., Algorithm: 13, 2 Labels, original TTL: 1800 sec, Signature-expiration: 02.08.2026, 05:19:43 +, Signature-Inception: 31.07.2026, 03:19:43 +, KeyTag 34505, Signer-Name: jeigh.com






Status: Good. NoData-Proof required and found.



Zone: www.jeigh.com

www.jeigh.com
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC RR as result with the domain name between the NSEC-Owner "www.jeigh.com" and the NextOwner "\000.www.jeigh.com". So the parent zone confirmes the non-existence of a DS RR.
Bitmap: A, PTR, 13, MX, TXT, AAAA, LOC, SRV, NAPTR, CERT, SSHFP, RRSIG, NSEC, TLSA, 53, HIP, 61, 64, 65, URI, CAA






RRSIG Type 1 validates the A - Result: 104.21.22.212 172.67.207.28
Validated: RRSIG-Owner www.jeigh.com., Algorithm: 13, 3 Labels, original TTL: 300 sec, Signature-expiration: 02.08.2026, 05:19:44 +, Signature-Inception: 31.07.2026, 03:19:44 +, KeyTag 34505, Signer-Name: jeigh.com






RRSIG Type 28 validates the AAAA - Result: 2606:4700:3031:0000:0000:0000:AC43:CF1C 2606:4700:3034:0000:0000:0000:6815:16D4
Validated: RRSIG-Owner www.jeigh.com., Algorithm: 13, 3 Labels, original TTL: 300 sec, Signature-expiration: 02.08.2026, 05:19:44 +, Signature-Inception: 31.07.2026, 03:19:44 +, KeyTag 34505, Signer-Name: jeigh.com






CNAME-Query sends a valid NSEC RR as result with the query name "www.jeigh.com" equal the NSEC-owner "www.jeigh.com" and the NextOwner "\000.www.jeigh.com". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, PTR, 13, MX, TXT, AAAA, LOC, SRV, NAPTR, CERT, SSHFP, RRSIG, NSEC, TLSA, 53, HIP, 61, 64, 65, URI, CAA Validated: RRSIG-Owner www.jeigh.com., Algorithm: 13, 3 Labels, original TTL: 1800 sec, Signature-expiration: 02.08.2026, 05:19:44 +, Signature-Inception: 31.07.2026, 03:19:44 +, KeyTag 34505, Signer-Name: jeigh.com






Status: Good. NoData-Proof required and found.






TXT-Query sends a valid NSEC RR as result with the query name "www.jeigh.com" equal the NSEC-owner "www.jeigh.com" and the NextOwner "\000.www.jeigh.com". So the zone confirmes the not-existence of that TXT RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, PTR, 13, MX, AAAA, LOC, SRV, NAPTR, CERT, SSHFP, RRSIG, NSEC, TLSA, 53, HIP, 61, 64, 65, URI, CAA Validated: RRSIG-Owner www.jeigh.com., Algorithm: 13, 3 Labels, original TTL: 1800 sec, Signature-expiration: 02.08.2026, 05:19:44 +, Signature-Inception: 31.07.2026, 03:19:44 +, KeyTag 34505, Signer-Name: jeigh.com






Status: Good. NoData-Proof required and found.






TLSA-Query (_443._tcp.www.jeigh.com) sends a valid NSEC RR as result with the query name "_443._tcp.www.jeigh.com" equal the NSEC-owner "_443._tcp.www.jeigh.com" and the NextOwner "\000._443._tcp.www.jeigh.com". So the zone confirmes the not-existence of that TLSA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: RRSIG, NSEC, 128 Validated: RRSIG-Owner _443._tcp.www.jeigh.com., Algorithm: 13, 5 Labels, original TTL: 1800 sec, Signature-expiration: 02.08.2026, 05:19:44 +, Signature-Inception: 31.07.2026, 03:19:44 +, KeyTag 34505, Signer-Name: jeigh.com






Status: Good. NoData-Proof required and found.






CAA-Query sends a valid NSEC RR as result with the query name "www.jeigh.com" equal the NSEC-owner "www.jeigh.com" and the NextOwner "\000.www.jeigh.com". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, PTR, 13, MX, TXT, AAAA, LOC, SRV, NAPTR, CERT, SSHFP, RRSIG, NSEC, TLSA, 53, HIP, 61, 64, 65, URI Validated: RRSIG-Owner www.jeigh.com., Algorithm: 13, 3 Labels, original TTL: 1800 sec, Signature-expiration: 02.08.2026, 05:19:44 +, Signature-Inception: 31.07.2026, 03:19:44 +, KeyTag 34505, Signer-Name: jeigh.com






Status: Good. NoData-Proof required and found.

 

3. Name Servers

DomainNameserverNS-IP
www.jeigh.com
•  alex.ns.cloudflare.com / 67m97
•
jeigh.com
•  alex.ns.cloudflare.com / 67m133
108.162.193.100
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.		•

• 
172.64.33.100
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.		•

• 
173.245.59.100
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.		•

• 
2606:4700:58::adf5:3b64
Montreal/Quebec/Canada (CA) - Cloudflare, Inc.		•

• 
2803:f800:50::6ca2:c164
San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.		•

• 
2a06:98c1:50::ac40:2164
City of London/England/United Kingdom (GB) - CloudFLARENET-EU		•

•  elisabeth.ns.cloudflare.com / 67m91
108.162.194.224
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.		•

• 
162.159.38.224
Ashburn/Virginia/United States (US) - Cloudflare, Inc.		•

• 
172.64.34.224
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.		•

• 
2606:4700:50::a29f:26e0
Montreal/Quebec/Canada (CA) - Cloudflare, Inc.		•

• 
2803:f800:50::6ca2:c2e0
San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.		•

• 
2a06:98c1:50::ac40:22e0
City of London/England/United Kingdom (GB) - CloudFLARENET-EU		•
com
•  a.gtld-servers.net / nnn1-par6
•

•  b.gtld-servers.net / nnn1-elwaw4
•

•  c.gtld-servers.net / nnn1-par6
•

•  d.gtld-servers.net / nnn1-defra-5
•

•  e.gtld-servers.net / nnn1-par6
•

•  f.gtld-servers.net / nnn1-gblon-4
•

•  g.gtld-servers.net / nnn1-ham3
•

•  h.gtld-servers.net / nnn1-wie2
•

•  i.gtld-servers.net / nnn1-ham5
•

•  j.gtld-servers.net / nnn1-ein4
•

•  k.gtld-servers.net / nnn1-frmrs-2
•

•  l.gtld-servers.net / nnn1-frmrs-2
•

•  m.gtld-servers.net / nnn1-nlams-2e
•

 

4. SOA-Entries


Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1785557932
Refresh:1800
Retry:900
Expire:604800
TTL:900
num Entries:2


Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1785557947
Refresh:1800
Retry:900
Expire:604800
TTL:900
num Entries:11


Domain:jeigh.com
Zone-Name:jeigh.com
Primary:alex.ns.cloudflare.com
Mail:dns.cloudflare.com
Serial:2411029903
Refresh:10000
Retry:2400
Expire:604800
TTL:1800
num Entries:12


Domain:www.jeigh.com
Zone-Name:jeigh.com
Primary:alex.ns.cloudflare.com
Mail:dns.cloudflare.com
Serial:2411029903
Refresh:10000
Retry:2400
Expire:604800
TTL:1800
num Entries:1


5. Screenshots

Startaddress: https://jeigh.com/, address used: https://jeigh.com/, Screenshot created 2026-08-01 06:21:19 +00:0 url is insecure, certificate invalid

 

Mobil (412px x 732px)

 

701 milliseconds

 

Screenshot mobile - https://jeigh.com/
Mobil + Landscape (732px x 412px)

 

703 milliseconds

 

Screenshot mobile landscape - https://jeigh.com/
Screen (1280px x 1680px)

 

1242 milliseconds

 

Screenshot Desktop - https://jeigh.com/

 

Mobile- and other Chrome-Checks


widthheight
visual Viewport412732
content Size412732

 

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://jeigh.com/
216.240.36.10
301
https://www.jeigh.com/
Html is minified: 108.19 %
0.400
E
Server: nginx/1.10.3
Date: Sat, 01 Aug 2026 04:20:22 GMT
Connection: keep-alive
Location: https://www.jeigh.com/
Content-Type: text/html
Content-Length: 185

• http://www.jeigh.com/
104.21.22.212
301
https://www.jeigh.com/
Html is minified: 108.19 %
0.393
A
Date: Sat, 01 Aug 2026 04:20:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://www.jeigh.com/
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=iD7%2BMxX1bIQ18XRhS8d4UuK5CDVCvn7QYQSLSQgpHBN3YXsEsZRhmqnNZipB1KeD0XWT13ba6drYdJeDHuUf%2BfEE5T0dpUPiVggLyN4TvP%2FHkjq8rmIk1MrcV0LfkYV1"}]}
CF-RAY: a2420cc99bc01931-TXL
Alt-Svc: h2=":443"; ma=60
Content-Type: text/html
Content-Length: 185

• http://www.jeigh.com/
172.67.207.28
301
https://www.jeigh.com/
Html is minified: 108.19 %
0.197
A
Date: Sat, 01 Aug 2026 04:20:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://www.jeigh.com/
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=IGc4%2BDC7JJs4X68QuUwUNx4trdGW%2BLGGZo2VXlbMLIMVFSwLD12DPj4hmg4N0sBJk%2BSUAE5AxdPdD9Og%2F7cYXgY9YaqgJYX1ZnHFqdydHbDgkHRxLKWzVw2D74XhYcZe"}]}
CF-RAY: a2420ccc3c509e00-TXL
Alt-Svc: h2=":443"; ma=60
Content-Type: text/html
Content-Length: 185

• http://www.jeigh.com/
2606:4700:3031::ac43:cf1c
301
https://www.jeigh.com/
Html is minified: 108.19 %
0.197
A
Date: Sat, 01 Aug 2026 04:20:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://www.jeigh.com/
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=JhZVe8YHsLODc3iLzJvToLHCEymBWBVWfmjso4UTirnzggYKOl7sEHgONRwat%2FFbGLEIdG5O8DVHhQUORq7TMPjsoGS8vXp0QRunV%2BerrddvE%2BtJALNgxR1Yj01KPCoz9iu9iEz7AJ71Hlhj"}]}
CF-RAY: a2420ccd9a14e533-TXL
Alt-Svc: h2=":443"; ma=60
Content-Type: text/html
Content-Length: 185

• http://www.jeigh.com/
2606:4700:3034::6815:16d4
301
https://www.jeigh.com/
Html is minified: 108.19 %
0.197
A
Date: Sat, 01 Aug 2026 04:20:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://www.jeigh.com/
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=qX114gF03gbBKJUGhy5DrfgjxYwdiLFzupCavJ2b6sAmMfLdWFH%2BtYuPsJ4XEgP8x1mjECwG%2FG5nGi28zsfeV2TunBtR05iZ9brbvOEUyTN34S9JPU3j9KDVuXJhEnv%2B839LRYXN73GiGw5d"}]}
CF-RAY: a2420ccefe64452e-TXL
Alt-Svc: h2=":443"; ma=60
Content-Type: text/html
Content-Length: 185

• https://www.jeigh.com/
104.21.22.212
301
https://www.jeigh.com/
Html is minified: 108.19 %
2.207
L
Date: Sat, 01 Aug 2026 04:20:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://www.jeigh.com/
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=JIDDHM4LtYxV1um80qi4EKQgOO%2BLOlpTsKOuGGOSRU4VjquI40Lp4YeiGE6awKBY8TW9uDe%2BfcLUDU%2BzPtnPEUg10Aq7jdjyV3yRida7AX1Sl9okBG1cQh4S8E0UKmOk"}]}
CF-RAY: a2420d0c8bfce511-TXL
Alt-Svc: h3=":443"
Content-Type: text/html
Content-Length: 185

• https://www.jeigh.com/
172.67.207.28
301
https://www.jeigh.com/
Html is minified: 108.19 %
2.196
L
Date: Sat, 01 Aug 2026 04:20:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://www.jeigh.com/
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=zi3%2F0d9Agbbt29vGtq6aKBWnKikAEkqfHAdecf6XEVxlHYmRZNyUGVMFXUW9xJn%2Bzr7nMadQGXRjwPim4%2BRGLhTIbH2tEvR5eyk0%2F5CTha2AR8PKN27jk2uMuoi17vXT"}]}
CF-RAY: a2420d2269cd518e-TXL
Alt-Svc: h3=":443"
Content-Type: text/html
Content-Length: 185

• https://www.jeigh.com/
2606:4700:3031::ac43:cf1c
301
https://www.jeigh.com/
Html is minified: 108.19 %
2.176
L
Date: Sat, 01 Aug 2026 04:20:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://www.jeigh.com/
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=3r9rGxroigmRvTNo0MeGc%2FVWJpsBg8xvpOFDy0ljTV%2BL8ZE4XAxp5Hbw3JNZZ6757Yz0nUw5l2ZPT3D8eV%2FAZqjGZRFQJxCMnu4HzGppZpTi6ETjL%2BbXJVJcUW9OUSgXWxrwFlu4BkqYUFiz"}]}
CF-RAY: a2420d363a3ae508-TXL
Alt-Svc: h3=":443"
Content-Type: text/html
Content-Length: 185

• https://www.jeigh.com/
2606:4700:3034::6815:16d4
301
https://www.jeigh.com/
Html is minified: 108.19 %
2.197
L
Date: Sat, 01 Aug 2026 04:20:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://www.jeigh.com/
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=wId2XMyLuw40oFDRx73hmQJQ2M8zsqjMAsVuFGdcMMfR%2FaK0pPiSzgQj0UwMlqk7QGkQYYKFkWj06OIxSN9q0YNEKv7YNscMZTOVOD9vIMjuItsLtZ5o6Uq2CycTycQAzO91FVq8mTuak0uy"}]}
CF-RAY: a2420d497949d963-TXL
Alt-Svc: h3=":443"
Content-Type: text/html
Content-Length: 185

• https://jeigh.com/
216.240.36.10 No Compression used - 895 / 2182 - 41.02 % possible
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		200

Html is minified: 141.23 %
Other inline scripts (∑/total): 0/0		7.230
N
Certificate error: RemoteCertificateChainErrors
Server: nginx/1.10.3
Date: Sat, 01 Aug 2026 04:20:24 GMT
Connection: keep-alive
ETag: "622ac381-886"
Accept-Ranges: bytes
Content-Type: text/html
Content-Length: 2182
Last-Modified: Fri, 11 Mar 2022 03:35:29 GMT

• http://jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
216.240.36.10
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		301
https://www.jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 108.19 %
Other inline scripts (∑/total): 0/0		0.204
E
Visible Content:
Server: nginx/1.10.3
Date: Sat, 01 Aug 2026 04:20:46 GMT
Connection: keep-alive
Location: https://www.jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Content-Type: text/html
Content-Length: 185

• http://www.jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
104.21.22.212
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		301
https://www.jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 108.19 %
Other inline scripts (∑/total): 0/0		0.187
A
Visible Content:
Date: Sat, 01 Aug 2026 04:20:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://www.jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=o9QOlhB5u7euj4H%2B5UiaT0cqfVMhnEwzR3a1dF5BFI7bF9BTeSZGE3Vc4TRugnzhCmJoBFpakWhtbsY%2FGRMsHFb4Wsxr3LTSFSE7ZjTIwBebfk%2BH9jDJYAEajM2TLWIV"}]}
CF-RAY: a2420d650c8a1931-TXL
Alt-Svc: h2=":443"; ma=60
Content-Type: text/html
Content-Length: 185

• http://www.jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
172.67.207.28
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		301
https://www.jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 108.19 %
Other inline scripts (∑/total): 0/0		0.186
A
Visible Content:
Date: Sat, 01 Aug 2026 04:20:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://www.jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=4OSycwfhATT133bL0ztAHvPa6sldgj8jWag4Jl3zD6HLOiSmXN8eSryvqst%2Bx3IC84zo%2BDNamF7PAT%2Fx4xe9%2BC7ySZirJ6pOwjJczNQPQer0M1cAR1zo5iU4mkCf6%2F1H"}]}
CF-RAY: a2420d6c49439e00-TXL
Alt-Svc: h2=":443"; ma=60
Content-Type: text/html
Content-Length: 185

• http://www.jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2606:4700:3031::ac43:cf1c
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		301
https://www.jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 108.19 %
Other inline scripts (∑/total): 0/0		0.183
A
Visible Content:
Date: Sat, 01 Aug 2026 04:20:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://www.jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=HrdFsPS0Rjt4Up0wnLRBuAWJJUuMHbPORcRuVwVPtwQTHEW7PQoV8PH3RMi%2FtCq4GOqd31PiDlGTyR6A9jYkKiaWA6%2B78jPzN8pldnqVKMbmwoiq%2FtZoAzrI3y%2Bdgn1pBWLP9FSudLg8sOYg"}]}
CF-RAY: a2420d739cede533-TXL
Alt-Svc: h2=":443"; ma=60
Content-Type: text/html
Content-Length: 185

• http://www.jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2606:4700:3034::6815:16d4
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		301
https://www.jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 108.19 %
Other inline scripts (∑/total): 0/0		0.186
A
Visible Content:
Date: Sat, 01 Aug 2026 04:20:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://www.jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=183HHPOuo4F%2BQQR5feFY%2BekH%2F0GsbymILLZoo3AKi1j6EIisgwnQOHNqJHu4Mz4cqlGoZ546XA8Wimq2vulHIiW36Ecya2BjvEdJZCDTakI6UFvUN90LXTkbOf%2BidJrxiCOMl3NEWUCJxGiI"}]}
CF-RAY: a2420d7adb3b452e-TXL
Alt-Svc: h2=":443"; ma=60
Content-Type: text/html
Content-Length: 185

• https://www.jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		301
https://www.jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 108.19 %
Other inline scripts (∑/total): 0/0		2.223
L
Visible Content:
Date: Sat, 01 Aug 2026 04:21:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://www.jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=tfoL2qZLPfJpgc4zNuLL78K1ObFev5PS2vcDROceATIRKLR34nkKBPBZMYffjz7Hw%2B59rUS9EmE9eXXCu29wo1YanQV%2Fmeq%2B7q%2BM49sK3jus8sOs%2FLglKBlZIC1mdLonJnFwOCVTiQltOiKQ"}]}
CF-RAY: a2420dbd2ecdc4d0-TXL
Alt-Svc: h3=":443"
Content-Type: text/html
Content-Length: 185

• https://104.21.22.212/
104.21.22.212
-103


0.034
P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Authentication failed because the remote party sent a TLS alert: 'HandshakeFailure'. (FF: SSL_ERROR_NO_CYPHER_OVERLAP)

• https://172.67.207.28/
172.67.207.28
-103


0.026
P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Authentication failed because the remote party sent a TLS alert: 'HandshakeFailure'. (FF: SSL_ERROR_NO_CYPHER_OVERLAP)

• https://216.240.36.10/
216.240.36.10 No Compression used - 895 / 2182 - 41.02 % possible
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		200

Html is minified: 141.23 %
Other inline scripts (∑/total): 0/0		7.264
N
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Server: nginx/1.10.3
Date: Sat, 01 Aug 2026 04:20:52 GMT
Connection: keep-alive
ETag: "622ac381-886"
Accept-Ranges: bytes
Content-Type: text/html
Content-Length: 2182
Last-Modified: Fri, 11 Mar 2022 03:35:29 GMT

• https://[2606:4700:3031:0000:0000:0000:ac43:cf1c]/
2606:4700:3031::ac43:cf1c
-103


0.024
P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Authentication failed because the remote party sent a TLS alert: 'HandshakeFailure'. (FF: SSL_ERROR_NO_CYPHER_OVERLAP)

• https://[2606:4700:3034:0000:0000:0000:6815:16d4]/
2606:4700:3034::6815:16d4
-103


0.024
P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Authentication failed because the remote party sent a TLS alert: 'HandshakeFailure'. (FF: SSL_ERROR_NO_CYPHER_OVERLAP)

 

7. Comments


1. General Results, most used to calculate the result

Aname "jeigh.com" is domain, public suffix is ".com", top-level-domain is ".com", top-level-domain-type is "generic", tld-manager is "VeriSign Global Registry Services", num .com-domains preloaded: 108094 (complete: 276475)
AGood: All ip addresses are public addresses
AGood: Minimal 2 ip addresses per domain name found: www.jeigh.com has 4 different ip addresses (authoritative).
AGood: Ipv4 and Ipv6 addresses per domain name found: www.jeigh.com has 2 ipv4, 2 ipv6 addresses
Warning: Only one ip address found: jeigh.com has only one ip address.
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: jeigh.com has no ipv6 address.
AGood: No asked Authoritative Name Server had a timeout
AGood: destination is https
AGood - only one version with Http-Status 200
AGood: one preferred version: non-www is preferred
AGood: No cookie sent via http.
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):0 complete Content-Type - header (2 urls)
https://jeigh.com/ 216.240.36.10


Url with incomplete Content-Type - header - missing charset
https://216.240.36.10/ 216.240.36.10


Url with incomplete Content-Type - header - missing charset
Ahttp://www.jeigh.com/ 104.21.22.212
301
https://www.jeigh.com/
Correct redirect http - https with the same domain name
Ahttp://www.jeigh.com/ 172.67.207.28
301
https://www.jeigh.com/
Correct redirect http - https with the same domain name
Ahttp://www.jeigh.com/ 2606:4700:3031::ac43:cf1c
301
https://www.jeigh.com/
Correct redirect http - https with the same domain name
Ahttp://www.jeigh.com/ 2606:4700:3034::6815:16d4
301
https://www.jeigh.com/
Correct redirect http - https with the same domain name
Bhttps://jeigh.com/ 216.240.36.10
200

Missing HSTS-Header
Bhttps://www.jeigh.com/ 104.21.22.212
301

Missing HSTS-Header
Bhttps://www.jeigh.com/ 172.67.207.28
301

Missing HSTS-Header
Bhttps://www.jeigh.com/ 2606:4700:3031::ac43:cf1c
301

Missing HSTS-Header
Bhttps://www.jeigh.com/ 2606:4700:3034::6815:16d4
301

Missing HSTS-Header
Bhttps://www.jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
301

Missing HSTS-Header
Ehttp://jeigh.com/ 216.240.36.10
301
https://www.jeigh.com/
Wrong redirect one domain http to other domain https. First redirect to https without new dns query, so the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
Lhttps://www.jeigh.com/ 104.21.22.212
301
https://www.jeigh.com/
Error direct loop
Lhttps://www.jeigh.com/ 172.67.207.28
301
https://www.jeigh.com/
Error direct loop
Lhttps://www.jeigh.com/ 2606:4700:3031::ac43:cf1c
301
https://www.jeigh.com/
Error direct loop
Lhttps://www.jeigh.com/ 2606:4700:3034::6815:16d4
301
https://www.jeigh.com/
Error direct loop
Lhttps://www.jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
301
https://www.jeigh.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Error direct loop
Lhttps://www.jeigh.com/ 104.21.22.212
301
https://www.jeigh.com/
Error three - step - loop
Lhttps://www.jeigh.com/ 172.67.207.28
301
https://www.jeigh.com/
Error three - step - loop
Lhttps://www.jeigh.com/ 2606:4700:3031::ac43:cf1c
301
https://www.jeigh.com/
Error three - step - loop
Lhttps://www.jeigh.com/ 2606:4700:3034::6815:16d4
301
https://www.jeigh.com/
Error three - step - loop
Nhttps://jeigh.com/ 216.240.36.10
200

Error - Certificate isn't trusted, RemoteCertificateChainErrors
Nhttps://216.240.36.10/ 216.240.36.10
200

Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
AGood: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain www.jeigh.com, 4 ip addresses.
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are the same. So that domain doesn't require Server Name Indication (SNI), it's the primary certificate of that set of ip addresses.: Domain jeigh.com, 1 ip addresses, 1 different http results.
Info: Checking the ip addresses of that domain name not exact one certificate found. So it's impossible to check if that domain requires Server Name Indication (SNI).: Domain www.jeigh.com, 4 ip addresses.
BNo _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.jeigh.com

2. Header-Checks

Fjeigh.com 216.240.36.10
Content-Security-Policy
Critical: Missing Header:
Fjeigh.com 216.240.36.10
X-Content-Type-Options
Critical: Missing Header:
Fjeigh.com 216.240.36.10
Referrer-Policy
Critical: Missing Header:
Fjeigh.com 216.240.36.10
Permissions-Policy
Critical: Missing Header:
Bjeigh.com 216.240.36.10
Cross-Origin-Embedder-Policy
Info: Missing Header
Bjeigh.com 216.240.36.10
Cross-Origin-Opener-Policy
Info: Missing Header
Bjeigh.com 216.240.36.10
Cross-Origin-Resource-Policy
Info: Missing Header

3. DNS- and NameServer - Checks

AInfo:: 7 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
AInfo:: 7 Queries complete, 7 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
Ok (4 - 8):: An average of 3.5 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 2 different Name Servers found: alex.ns.cloudflare.com, elisabeth.ns.cloudflare.com, 2 Name Servers included in Delegation: alex.ns.cloudflare.com, elisabeth.ns.cloudflare.com, 2 Name Servers included in 1 Zone definitions: alex.ns.cloudflare.com, elisabeth.ns.cloudflare.com, 1 Name Servers listed in SOA.Primary: alex.ns.cloudflare.com.
AGood: Only one SOA.Primary Name Server found.: alex.ns.cloudflare.com.
AGood: SOA.Primary Name Server included in the delegation set.: alex.ns.cloudflare.com.
AGood: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: alex.ns.cloudflare.com, elisabeth.ns.cloudflare.com
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AGood: Minimal 2 different name servers (public suffix and public ip address) found: 2 different Name Servers found
Warning: All Name Servers have the same Top Level Domain / Public Suffix. If there is a problem with that Top Level Domain, your domain may be affected. Better: Use Name Servers with different top level domains.: 2 Name Servers, 1 Top Level Domain: com
Warning: All Name Servers have the same domain name. If there is a problem with that domain name (or with the name servers of that domain name), your domain may be affected. Better: Use Name Servers with different domain names / different top level domains.: Only one domain name used: cloudflare.com
AGood: Name servers with different Country locations found: 2 Name Servers, 4 Countries: CA, CR, GB, US
AInfo: Ipv4-Subnet-list: 6 Name Servers, 4 different subnets (first Byte): 108., 162., 172., 173., 4 different subnets (first two Bytes): 108.162., 162.159., 172.64., 173.245., 6 different subnets (first three Bytes): 108.162.193., 108.162.194., 162.159.38., 172.64.33., 172.64.34., 173.245.59.
AGood: Name Server IPv4-addresses from different subnet found:
AInfo: IPv6-Subnet-list: 6 Name Servers with IPv6, 3 different subnets (first block): 2606:, 2803:, 2a06:, 3 different subnets (first two blocks): 2606:4700:, 2803:f800:, 2a06:98c1:, 4 different subnets (first three blocks): 2606:4700:0050:, 2606:4700:0058:, 2803:f800:0050:, 2a06:98c1:0050:, 4 different subnets (first four blocks): 2606:4700:0050:0000:, 2606:4700:0058:0000:, 2803:f800:0050:0000:, 2a06:98c1:0050:0000:
AGood: Name Server IPv6 addresses from different subnets found.
AGood: Nameserver supports TCP connections: 12 good Nameserver
AGood: Nameserver supports Echo Capitalization: 12 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 12 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 12 good Nameserver
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

4. Content- and Performance-critical Checks

https://jeigh.com/ 216.240.36.10
200

Warning: https result with status 200 and size greater then 1024 Bytes without Compression found. Add Compression support (gzip, deflate, br - these are checked) so the html content is compressed.
AGood: No https + http status 200 with inline CSS / JavaScript found
https://jeigh.com/ 216.240.36.10
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://216.240.36.10/ 216.240.36.10
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://jeigh.com/ 216.240.36.10
200

Warning: Https connections (Standard Port 443) found without support of the http/2 protocol via ALPN. Http/2 is the new Http-Version (old: http 1.1) with some important new features. Update your server software so http/2 is available. Only one TCP-connection per Server (that's a performance boost), Header-Compression and Server Pushs are available. Domain Sharding and Inline-CSS/Javascript shouldn't used with http/2.
https://216.240.36.10/ 216.240.36.10
200

Warning: Https connections (Standard Port 443) found without support of the http/2 protocol via ALPN. Http/2 is the new Http-Version (old: http 1.1) with some important new features. Update your server software so http/2 is available. Only one TCP-connection per Server (that's a performance boost), Header-Compression and Server Pushs are available. Domain Sharding and Inline-CSS/Javascript shouldn't used with http/2.
Warning: Images with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 0 image files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 1 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 1 complete.
AGood: All checked attribute values are enclosed in quotation marks (" or ').
Wrong: img-elements without alt-attribute or empty alt-attribute found. The alt-attribute ("alternative") is required and should describe the img. So Screenreader and search engines are able to use these informations.: 2 img-elements without alt-attribute, 0 img-elements with empty alt-attribute found.
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
AInfo: Different Server-Headers found
ADuration: 120483 milliseconds, 120.483 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
jeigh.com
216.240.36.10
443
Certificate/chain invalid
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
not supported
ok
jeigh.com
216.240.36.10
443
Certificate/chain invalid
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
not supported
ok
no http/2 via ALPN 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
 Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - incomplete

1CN=jeigh.com


www.jeigh.com
104.21.22.212
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.jeigh.com
104.21.22.212
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
 Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=jeigh.com


2CN=WE1, O=Google Trust Services, C=US


3CN=GTS Root R4, O=Google Trust Services LLC, C=US


www.jeigh.com
172.67.207.28
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.jeigh.com
172.67.207.28
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
 Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=jeigh.com


2CN=WE1, O=Google Trust Services, C=US


3CN=GTS Root R4, O=Google Trust Services LLC, C=US


www.jeigh.com
2606:4700:3031::ac43:cf1c
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.jeigh.com
2606:4700:3031::ac43:cf1c
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
 Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=jeigh.com


2CN=WE1, O=Google Trust Services, C=US


3CN=GTS Root R4, O=Google Trust Services LLC, C=US


www.jeigh.com
2606:4700:3034::6815:16d4
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.jeigh.com
2606:4700:3034::6815:16d4
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
 Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=jeigh.com


2CN=WE1, O=Google Trust Services, C=US


3CN=GTS Root R4, O=Google Trust Services LLC, C=US


www.jeigh.com
www.jeigh.com
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.jeigh.com
www.jeigh.com
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
 Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=jeigh.com


2CN=WE1, O=Google Trust Services, C=US


3CN=GTS Root R4, O=Google Trust Services LLC, C=US


216.240.36.10
216.240.36.10
443
Certificate/chain invalid and wrong name
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
not supported
ok

216.240.36.10
216.240.36.10
443
Certificate/chain invalid and wrong name
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
not supported
ok
no http/2 via ALPN 
Cert sent without SNI 		Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI 		Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - incomplete

1CN=jeigh.com

 

9. Certificates

1.
1.
CN=jeigh.com
07.03.2025
14.03.2026
156 days expired		jeigh.com, www.jeigh.com - 2 entries
1.
1.
CN=jeigh.com
07.03.2025

14.03.2026
156 days expired


jeigh.com, www.jeigh.com - 2 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:009CFB23CBA8090C72B17B2176D72B0090
Thumbprint:C86CB84D89F82DD4EB7CFBDCA75E7C2096EF9D9C
SHA256 / Certificate:6lGEv8cNeM4kIaLnrv+RCqu2JJp31KmO7l0nuiHckTI=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):1de17967980683d93657cce03bfbeb97c2eb6f1abe4afb1ce05e1c539197901d
SHA256 hex / Subject Public Key Information (SPKI):1de17967980683d93657cce03bfbeb97c2eb6f1abe4afb1ce05e1c539197901d (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.sectigo.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)


NotTimeValid: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.


2.
CN=jeigh.com
07.03.2025
14.03.2026
156 days expired		jeigh.com, www.jeigh.com - 2 entries

2.
CN=jeigh.com
07.03.2025

14.03.2026
156 days expired


jeigh.com, www.jeigh.com - 2 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:009CFB23CBA8090C72B17B2176D72B0090
Thumbprint:C86CB84D89F82DD4EB7CFBDCA75E7C2096EF9D9C
SHA256 / Certificate:6lGEv8cNeM4kIaLnrv+RCqu2JJp31KmO7l0nuiHckTI=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):1de17967980683d93657cce03bfbeb97c2eb6f1abe4afb1ce05e1c539197901d
SHA256 hex / Subject Public Key Information (SPKI):1de17967980683d93657cce03bfbeb97c2eb6f1abe4afb1ce05e1c539197901d (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.sectigo.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)


NotTimeValid: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.


3.
CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB
02.11.2018
01.01.2031
expires in 1598 days

3.
CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB
02.11.2018

01.01.2031
expires in 1598 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA384 With RSA Encryption
Serial Number:7D5B5126B476BA11DB74160BBC530DA7
Thumbprint:33E4E80807204C2B6182A3A14B591ACD25B5F0DB
SHA256 / Certificate:f6T/aOwEqZ11KNUIX5SQf00d0cU4G6zcgy7VyWAhRnY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
SHA256 hex / Subject Public Key Information (SPKI):e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.usertrust.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




4.
CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB
02.11.2018
01.01.2031
expires in 1598 days

4.
CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB
02.11.2018

01.01.2031
expires in 1598 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA384 With RSA Encryption
Serial Number:7D5B5126B476BA11DB74160BBC530DA7
Thumbprint:33E4E80807204C2B6182A3A14B591ACD25B5F0DB
SHA256 / Certificate:f6T/aOwEqZ11KNUIX5SQf00d0cU4G6zcgy7VyWAhRnY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
SHA256 hex / Subject Public Key Information (SPKI):e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.usertrust.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




5.
CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US
01.02.2010
19.01.2038
expires in 4173 days

5.
CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US
01.02.2010

19.01.2038
expires in 4173 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA384 With RSA Encryption
Serial Number:01FD6D30FCA3CA51A81BBC640E35032D
Thumbprint:2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E
SHA256 / Certificate:55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I=
SHA256 hex / Cert (DANE * 0 1):e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd2
SHA256 hex / PublicKey (DANE * 1 1):c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SHA256 hex / Subject Public Key Information (SPKI):c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:





6.
CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US
12.03.2019
01.01.2029
expires in 868 days

6.
CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US
12.03.2019

01.01.2029
expires in 868 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA384 With RSA Encryption
Serial Number:3972443AF922B751D7D36C10DD313595
Thumbprint:D89E3BD43D5D909B47A18977AA9D5CE36CEE184C
SHA256 / Certificate:aLnHYSGaWx8BMXhEdGZdthu9sQngDwXKn3QkTuX19Ss=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SHA256 hex / Subject Public Key Information (SPKI):c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.comodoca.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




7.
CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, S=Greater Manchester, C=GB
01.01.2004
01.01.2029
expires in 868 days

7.
CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, S=Greater Manchester, C=GB
01.01.2004

01.01.2029
expires in 868 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:01
Thumbprint:D1EB23A46D17D68FD92564C2F1F1601764D8E349
SHA256 / Certificate:16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):bd153ed7b0434f6886b17bce8bbe84ed340c7132d702a8f4fa318f756ecbd6f3
SHA256 hex / Subject Public Key Information (SPKI):bd153ed7b0434f6886b17bce8bbe84ed340c7132d702a8f4fa318f756ecbd6f3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




2.
1.
CN=jeigh.com
12.07.2026
10.10.2026
expires in 54 days		jeigh.com, *.jeigh.com - 2 entries
2.
1.
CN=jeigh.com
12.07.2026

10.10.2026
expires in 54 days


jeigh.com, *.jeigh.com - 2 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA256
Serial Number:4BDD83ADFCE2E2860E43B9FCC992EB2E
Thumbprint:41CD8CDC6ADDCD139A414AB270A734025EA0509F
SHA256 / Certificate:Qle9ZBHu40d/v7JjywBWjnx2sDg3EqHsEZIvu2rDyvc=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):0e9ea2fb7835cbf942ffbd659eb33f4ac5cb01676a5d0d70e011f5762e3c9eaf
SHA256 hex / Subject Public Key Information (SPKI):0e9ea2fb7835cbf942ffbd659eb33f4ac5cb01676a5d0d70e011f5762e3c9eaf (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




2.
CN=WE1, O=Google Trust Services, C=US
13.12.2023
20.02.2029
expires in 918 days

2.
CN=WE1, O=Google Trust Services, C=US
13.12.2023

20.02.2029
expires in 918 days




KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:7FF31977972C224A76155D13B6D685E3
Thumbprint:108FBF794E18EC5347A414E4370CC4506C297AB2
SHA256 / Certificate:HfwWBfutNY2LyET3bRUgP6ycpcGnn9SFf/ryhk++v5Y=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):908769e8d34477cc2cba0632c88605b22d7294c0840f78596d247c645b1afc0e
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




3.
CN=GTS Root R4, O=Google Trust Services LLC, C=US
15.11.2023
28.01.2028
expires in 529 days

3.
CN=GTS Root R4, O=Google Trust Services LLC, C=US
15.11.2023

28.01.2028
expires in 529 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:SHA256 With RSA-Encryption
Serial Number:7FE530BF331343BEDD821610493D8A1B
Thumbprint:932BED339AA69212C89375B79304B475490B89A0
SHA256 / Certificate:drJ7gKWAJ9w88dpo2sFwEO2TmX0LYD4vrb6FASSTtac=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):9847e5653e5e9e847516e5cb818606aa7544a19be67fd7366d506988e8d84347
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




4.
CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE
01.09.1998
28.01.2028
expires in 529 days

4.
CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE
01.09.1998

28.01.2028
expires in 529 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:040000000001154B5AC394
Thumbprint:B1BC968BD4F49D622AA89A81F2150152A41D829C
SHA256 / Certificate:69QQQOS7PsdCyeOB0x7ypBpItmhclufO88HfbNQzHJk=
SHA256 hex / Cert (DANE * 0 1):ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99
SHA256 hex / PublicKey (DANE * 1 1):2bcee858158cf5465fc9d76f0dfa312fef25a4dca8501da9b46b67d1fbfa1b64
SHA256 hex / Subject Public Key Information (SPKI):2bcee858158cf5465fc9d76f0dfa312fef25a4dca8501da9b46b67d1fbfa1b64
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuerlast 7 daysactivenum Certs
CN=WE1, O=Google Trust Services, C=US
0
2
4
CN=Cloudflare TLS Issuing ECC CA 4, O=SSL Corporation, C=US
0
1
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
15810320909
precert		CN=WE1, O=Google Trust Services, C=US
2026-07-12 12:42:00
2026-10-10 13:41:56
*.jeigh.com, jeigh.com - 2 entries


15810195170
precert		CN=WE1, O=Google Trust Services, C=US
2026-07-12 12:29:48
2026-10-10 13:27:18
*.jeigh.com, jeigh.com - 2 entries


15332266593
precert		CN=Cloudflare TLS Issuing ECC CA 4, O=SSL Corporation, C=US
2026-06-11 08:16:14
2026-09-07 13:50:47
*.jeigh.com, jeigh.com - 2 entries


14905219119
precert		CN=WE1, O=Google Trust Services, C=US
2026-05-14 12:01:42
2026-08-12 13:01:40
*.jeigh.com, jeigh.com - 2 entries


14903812821
precert		CN=WE1, O=Google Trust Services, C=US
2026-05-14 09:39:55
2026-08-12 10:37:51
*.jeigh.com, jeigh.com - 2 entries


 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

No CRT - CT-Log entries found

 

11. Html-Content - Entries

Summary


Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://jeigh.com/
216.240.36.10		img

1

0
0
1
0
0
0


link
other
14
33,722 Bytes
0
13
0
0
0
0


meta
other
3
3,531 Bytes
0
1
0
0
0
0

https://216.240.36.10/
216.240.36.10		img

1

0


0
0
0


link
other
14

0


0
0
0


meta
other
3

0


0
0
0

 

Details (currently limited to 500 rows - some problems with spam users)

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsg∑Status
https://jeigh.com/
216.240.36.10
img
src
https://www.jeigh.com/jeigh.png
301
https://www.jeigh.com/jeigh.png
1
ok
no alt-Attributetext/html
missing X-Content-Type-Options nosniff




0 Bytes






Server-Header Access-Control-Allow-Origin: not found
Cross-Origin Resource Sharing (CORS) not supported



link
apple-touch-icon
/icon/apple-icon-114x114.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff




No Cache-Control header
No Compression - 2696 Bytes






ETag: "622ac2b1-a88"



link
apple-touch-icon
/icon/apple-icon-120x120.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff




No Cache-Control header
No Compression - 2842 Bytes






ETag: "622ac2b2-b1a"



link
apple-touch-icon
/icon/apple-icon-144x144.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff




No Cache-Control header
No Compression - 3531 Bytes






ETag: "622ac2b2-dcb"



link
apple-touch-icon
/icon/apple-icon-152x152.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff




No Cache-Control header
No Compression - 3809 Bytes






ETag: "622ac2b2-ee1"



link
apple-touch-icon
/icon/apple-icon-180x180.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff




No Cache-Control header
No Compression - 4918 Bytes






ETag: "622ac2b2-1336"



link
apple-touch-icon
/icon/apple-icon-57x57.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff




No Cache-Control header
No Compression - 1560 Bytes






ETag: "622ac2b2-618"



link
apple-touch-icon
/icon/apple-icon-60x60.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff




No Cache-Control header
No Compression - 1592 Bytes






ETag: "622ac2b2-638"



link
apple-touch-icon
/icon/apple-icon-72x72.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff




No Cache-Control header
No Compression - 1809 Bytes






ETag: "622ac2b2-711"



link
apple-touch-icon
/icon/apple-icon-76x76.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff




No Cache-Control header
No Compression - 1921 Bytes






ETag: "622ac2b3-781"



link
icon
/icon/android-icon-192x192.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff




No Cache-Control header
No Compression - 4713 Bytes






ETag: "622ac2b1-1269"



link
icon
/icon/favicon-16x16.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff




No Cache-Control header
No Compression - 866 Bytes






ETag: "622ac2b3-362"



link
icon
/icon/favicon-32x32.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff




No Cache-Control header
No Compression - 1192 Bytes






ETag: "622ac2b4-4a8"



link
icon
/icon/favicon-96x96.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff




No Cache-Control header
No Compression - 2273 Bytes






ETag: "622ac2b4-8e1"



link
manifest
/icon/manifest.json


1
ok















meta
msapplication-TileColor
#ffffff


1
ok















meta
msapplication-TileImage
/icon/ms-icon-144x144.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff




No Cache-Control header
No Compression - 3531 Bytes






ETag: "622ac2b4-dcb"



meta
theme-color
#ffffff


1
ok














https://216.240.36.10/
216.240.36.10
img
src
https://www.jeigh.com/jeigh.png


1
ok
no alt-Attribute














link
apple-touch-icon
/icon/apple-icon-114x114.png


1
ok















link
apple-touch-icon
/icon/apple-icon-120x120.png


1
ok















link
apple-touch-icon
/icon/apple-icon-144x144.png


1
ok















link
apple-touch-icon
/icon/apple-icon-152x152.png


1
ok















link
apple-touch-icon
/icon/apple-icon-180x180.png


1
ok















link
apple-touch-icon
/icon/apple-icon-57x57.png


1
ok















link
apple-touch-icon
/icon/apple-icon-60x60.png


1
ok















link
apple-touch-icon
/icon/apple-icon-72x72.png


1
ok















link
apple-touch-icon
/icon/apple-icon-76x76.png


1
ok















link
icon
/icon/android-icon-192x192.png


1
ok















link
icon
/icon/favicon-16x16.png


1
ok















link
icon
/icon/favicon-32x32.png


1
ok















link
icon
/icon/favicon-96x96.png


1
ok















link
manifest
/icon/manifest.json


1
ok















meta
msapplication-TileColor
#ffffff


1
ok















meta
msapplication-TileImage
/icon/ms-icon-144x144.png


1
ok















meta
theme-color
#ffffff


1
ok














 

12. Html-Parsing via https://validator.w3.org/nu/

Url used (first standard-https-result with http status 200): https://jeigh.com/

Summary

Good: No non-document-errors
3 errors
2 warnings

TypeMessagenum found
1.errorThe character encoding was not declared. Proceeding using windows-1252.1
2.errorObsolete doctype. Expected <!DOCTYPE html>.1
3.errorAn img element must have an alt attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.1
4.warningConsider adding a lang attribute to the html start tag to declare the language of this document.1
5.warningThe type attribute for the style element is not needed and should be omitted.1

Details


TypeMessage + Sample
1errorThe character encoding was not declared. Proceeding using windows-1252.


2errorObsolete doctype. Expected <!DOCTYPE html>.

From line 1, column 1 to line 2, column 55

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <htm
3errorAn img element must have an alt attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.

From line 52, column 1 to line 52, column 45

m-right"> <img src="https://www.jeigh.com/jeigh.png" /> </div
4warningConsider adding a lang attribute to the html start tag to declare the language of this document.

From line 2, column 56 to line 4, column 43

rict.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <hea
5warningThe type attribute for the style element is not needed and should be omitted.

From line 12, column 1 to line 12, column 23

</title> <style type="text/css"> .bott

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: alex.ns.cloudflare.com, elisabeth.ns.cloudflare.com

 

QNr.DomainTypeNS used
1
com
NS
k.root-servers.net (2001:7fd::1)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2
alex.ns.cloudflare.com
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: ns3.cloudflare.com, ns4.cloudflare.com, ns5.cloudflare.com, ns6.cloudflare.com, ns7.cloudflare.com

Answer: ns3.cloudflare.com
162.159.0.33, 162.159.7.226, 2400:cb00:2049:1::a29f:21, 2400:cb00:2049:1::a29f:7e2

Answer: ns4.cloudflare.com
162.159.1.33, 162.159.8.55, 2400:cb00:2049:1::a29f:121, 2400:cb00:2049:1::a29f:837

Answer: ns5.cloudflare.com
162.159.2.9, 162.159.9.55, 2400:cb00:2049:1::a29f:209, 2400:cb00:2049:1::a29f:937

Answer: ns6.cloudflare.com
162.159.3.11, 162.159.5.6, 2400:cb00:2049:1::a29f:30b, 2400:cb00:2049:1::a29f:506

Answer: ns7.cloudflare.com
162.159.4.8, 162.159.6.6, 2400:cb00:2049:1::a29f:408, 2400:cb00:2049:1::a29f:606
3
elisabeth.ns.cloudflare.com
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: ns3.cloudflare.com, ns4.cloudflare.com, ns5.cloudflare.com, ns6.cloudflare.com, ns7.cloudflare.com

Answer: ns3.cloudflare.com
162.159.0.33, 162.159.7.226, 2400:cb00:2049:1::a29f:21, 2400:cb00:2049:1::a29f:7e2

Answer: ns4.cloudflare.com
162.159.1.33, 162.159.8.55, 2400:cb00:2049:1::a29f:121, 2400:cb00:2049:1::a29f:837

Answer: ns5.cloudflare.com
162.159.2.9, 162.159.9.55, 2400:cb00:2049:1::a29f:209, 2400:cb00:2049:1::a29f:937

Answer: ns6.cloudflare.com
162.159.3.11, 162.159.5.6, 2400:cb00:2049:1::a29f:30b, 2400:cb00:2049:1::a29f:506

Answer: ns7.cloudflare.com
162.159.4.8, 162.159.6.6, 2400:cb00:2049:1::a29f:408, 2400:cb00:2049:1::a29f:606
4
alex.ns.cloudflare.com: 108.162.193.100, 172.64.33.100, 173.245.59.100
A
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
5
alex.ns.cloudflare.com: 2606:4700:58::adf5:3b64, 2803:f800:50::6ca2:c164, 2a06:98c1:50::ac40:2164
AAAA
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
6
elisabeth.ns.cloudflare.com: 108.162.194.224, 162.159.38.224, 172.64.34.224
A
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
7
elisabeth.ns.cloudflare.com: 2606:4700:50::a29f:26e0, 2803:f800:50::6ca2:c2e0, 2a06:98c1:50::ac40:22e0
AAAA
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)

 

14. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.jeigh.com
0

no CAA entry found
1
0
jeigh.com
0

no CAA entry found
1
0
com
0

no CAA entry found
1
0

 

15. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
jeigh.com
@
ok
1
0
jeigh.com
MS=10382B6CE8757A1D3652085E59F42616A2400559
ok
1
0
jeigh.com
v=spf1 include:_spf.google.com ~all
ok
1
0
www.jeigh.com

ok
1
0
_acme-challenge.jeigh.com

Name Error - The domain name does not exist
1
0
_acme-challenge.www.jeigh.com

Name Error - The domain name does not exist
1
0
_acme-challenge.jeigh.com.jeigh.com

Name Error - The domain name does not exist
1
0
_acme-challenge.www.jeigh.com.jeigh.com

Name Error - The domain name does not exist
1
0
_acme-challenge.www.jeigh.com.www.jeigh.com

Name Error - The domain name does not exist
1
0

 

16. DomainService - Entries

TypeDomainPrefValueDNS-errornum AnswersStatusDescription
MX

jeigh.com
10
aspmx.l.google.com
05ok

A


142.251.127.26
01ok

AAAA


2a00:1450:4001:c21::1b
01ok

CNAME


00ok
MX

jeigh.com
20
alt1.aspmx.l.google.com
05ok

A


142.250.147.27
01ok

AAAA


2a00:1450:4025:c01::1b
01ok

CNAME


00ok
MX

jeigh.com
20
alt2.aspmx.l.google.com
05ok

A


172.253.152.27
01ok

AAAA


2a00:1450:4010:c22::1a
01ok

CNAME


00ok
MX

jeigh.com
30
aspmx2.googlemail.com
05ok

A


142.250.147.27
01ok

AAAA


2a00:1450:4025:c01::1b
01ok

CNAME


00ok
MX

jeigh.com
30
aspmx3.googlemail.com
05ok

A


172.253.152.27
01ok

AAAA


2a00:1450:4010:c22::1b
01ok

CNAME


00ok
SPF
TXT
jeigh.com

v=spf1 include:_spf.google.com ~all
ok

TXT
_spf.google.com

v=spf1 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ~all
ok
_dmarc
TXT
_dmarc.jeigh.com

v=DMARC1; p=none; rua=mailto:postmaster@jeigh.com;
ok

				 
			

				 
			
17. Cipher Suites



Skipped, CDN used or too many ip addresses

				 
			
18. Portchecks



No open Ports <> 80 / 443 found, so no additional Ports checked.



				 
			

				 
			

Permalink: https://check-your-website.server-daten.de/?i=7cc7b95b-91cf-48dc-b86f-69e78a5749c6

				 
			


Last Result: https://check-your-website.server-daten.de/?q=jeigh.com - 2026-08-01 06:19:23

				 
			
Do you like this page? Support this tool, add a link on your page:

				 
			
<a href="https://check-your-website.server-daten.de/?q=jeigh.com" target="_blank">Check this Site: jeigh.com</a>

				 
			

				 
			


Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

				 
			
QR-Code of this page - https://check-your-website.server-daten.de/?d=jeigh.com

				 
			

				 
			



Jürgen Auer • Friedenstr. 37 • 10249 Berlin • +49(0)30 420 200 60 • info@sql-und-xml.de • 
USt-IdNr.: DE221734518

				 
			


Errors, ideas, questions? Use the 
Contact form • A project using

Server-Daten - Web Database solutions